OTP-8568 RFC -5746

New ssl now supports secure renegotiation as described by RFC 5746.

1 files changed, 28 insertions, 32 deletions

diff --git a/lib/ssl/src/ssl_alert.erl b/lib/ssl/src/ssl_alert.erl
index d3f9c833f1..db9a883654 100644
--- a/lib/ssl/src/ssl_alert.erl
+++ b/lib/ssl/src/ssl_alert.erl
@@ -1,19 +1,19 @@
 %%
 %% %CopyrightBegin%
-%% 
-%% Copyright Ericsson AB 2007-2009. All Rights Reserved.
-%% 
+%%
+%% Copyright Ericsson AB 2007-2010. All Rights Reserved.
+%%
 %% The contents of this file are subject to the Erlang Public License,
 %% Version 1.1, (the "License"); you may not use this file except in
 %% compliance with the License. You should have received a copy of the
 %% Erlang Public License along with this software. If not, it can be
 %% retrieved online at http://www.erlang.org/.
-%% 
+%%
 %% Software distributed under the License is distributed on an "AS IS"
 %% basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See
 %% the License for the specific language governing rights and limitations
 %% under the License.
-%% 
+%%
 %% %CopyrightEnd%
 %%
 
@@ -38,10 +38,6 @@ reason_code(#alert{description = ?HANDSHAKE_FAILURE}, client) ->
     esslconnect;
 reason_code(#alert{description = ?HANDSHAKE_FAILURE}, server) ->
     esslaccept;
-reason_code(#alert{description = ?CERTIFICATE_EXPIRED}, _) ->
-    epeercertexpired;
-reason_code(#alert{level = ?FATAL}, _) ->
-    esslerrssl;
 reason_code(#alert{description = Description}, _) ->
     description_txt(Description).
 
@@ -55,51 +51,51 @@ level_txt(?FATAL) ->
     "Fatal error:".
 
 description_txt(?CLOSE_NOTIFY) ->
-    "close_notify";
+    "close notify";
 description_txt(?UNEXPECTED_MESSAGE) ->
-    "unexpected_message";
+    "unexpected message";
 description_txt(?BAD_RECORD_MAC) ->
-    "bad_record_mac";
+    "bad record mac";
 description_txt(?DECRYPTION_FAILED) ->
-    "decryption_failed";
+    "decryption failed";
 description_txt(?RECORD_OVERFLOW) ->
-    "record_overflow";
+    "record overflow";
 description_txt(?DECOMPRESSION_FAILURE) ->
-    "decompression_failure";
+    "decompression failure";
 description_txt(?HANDSHAKE_FAILURE) ->
-    "handshake_failure";
+    "handshake failure";
 description_txt(?BAD_CERTIFICATE) ->
-    "bad_certificate";
+    "bad certificate";
 description_txt(?UNSUPPORTED_CERTIFICATE) ->
-    "unsupported_certificate";
+    "unsupported certificate";
 description_txt(?CERTIFICATE_REVOKED) ->
-    "certificate_revoked";
+    "certificate revoked";
 description_txt(?CERTIFICATE_EXPIRED) ->
-    "certificate_expired";
+    "certificate expired";
 description_txt(?CERTIFICATE_UNKNOWN) ->
-    "certificate_unknown";
+    "certificate unknown";
 description_txt(?ILLEGAL_PARAMETER) ->
-    "illegal_parameter";
+    "illegal parameter";
 description_txt(?UNKNOWN_CA) ->
-    "unknown_ca";
+    "unknown ca";
 description_txt(?ACCESS_DENIED) ->
-    "access_denied";
+    "access denied";
 description_txt(?DECODE_ERROR) ->
-    "decode_error";
+    "decode error";
 description_txt(?DECRYPT_ERROR) ->
-    "decrypt_error";
+    "decrypt error";
 description_txt(?EXPORT_RESTRICTION) ->
-    "export_restriction";
+    "export restriction";
 description_txt(?PROTOCOL_VERSION) ->
-    "protocol_version";
+    "protocol version";
 description_txt(?INSUFFICIENT_SECURITY) ->
-    "insufficient_security";
+    "insufficient security";
 description_txt(?INTERNAL_ERROR) ->
-    "internal_error";
+    "internal error";
 description_txt(?USER_CANCELED) ->
-    "user_canceled";
+    "user canceled";
 description_txt(?NO_RENEGOTIATION) ->
-    "no_renegotiation".
+    "no renegotiation".