git » chasquid » smarthost » tree

[smarthost] / internal / tlsconst / generate-ciphers.py 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
#!/usr/bin/env python3
#
# This hacky script generates a go file with a map of version -> name for the
# entries in the TLS Cipher Suite Registry.

import csv
import urllib.request
import sys

# Where to get the TLS parameters from.
# See http://www.iana.org/assignments/tls-parameters/tls-parameters.xml.
URL = "https://www.iana.org/assignments/tls-parameters/tls-parameters-4.csv"


def getCiphers():
	req = urllib.request.urlopen(URL)
	data = req.read().decode('utf-8')

	ciphers = []
	reader = csv.DictReader(data.splitlines())
	for row in reader:
		desc = row["Description"]
		rawval = row["Value"]

		# Just plain TLS values for now, to keep it simple.
		if "-" in rawval or not desc.startswith("TLS"):
			continue

		rv1, rv2 = rawval.split(",")
		rv1, rv2 = int(rv1, 16), int(rv2, 16)

		val = "0x%02x%02x" % (rv1, rv2)
		ciphers.append((val, desc))

	return ciphers


ciphers = getCiphers()

out = open(sys.argv[1], 'w')
out.write("""\
package tlsconst

// AUTOGENERATED - DO NOT EDIT
//
// This file was autogenerated by generate-ciphers.py.

var cipherSuiteName = map[uint16]string{
""")

for ver, desc in ciphers:
	out.write('\t%s: "%s",\n' % (ver, desc))

out.write('}\n')