Saving the serialized context to a file
Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
diff --git a/programs/ssl/ssl_server2.c b/programs/ssl/ssl_server2.c
index 1cee32e..1d03fe2 100644
--- a/programs/ssl/ssl_server2.c
+++ b/programs/ssl/ssl_server2.c
@@ -63,6 +63,7 @@
#include "mbedtls/error.h"
#include "mbedtls/debug.h"
#include "mbedtls/timing.h"
+#include "mbedtls/base64.h"
#if defined(MBEDTLS_USE_PSA_CRYPTO)
#include "psa/crypto.h"
@@ -172,6 +173,7 @@
#define DFL_EXTENDED_MS -1
#define DFL_ETM -1
#define DFL_SERIALIZE 0
+#define DFL_CONTEXT_FILE ""
#define DFL_EXTENDED_MS_ENFORCE -1
#define DFL_CA_CALLBACK 0
#define DFL_EAP_TLS 0
@@ -449,9 +451,14 @@
#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
#define USAGE_SERIALIZATION \
- " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
- " options: 1 (serialize)\n" \
- " 2 (serialize with re-initialization)\n"
+ " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
+ " options: 1 (serialize)\n" \
+ " 2 (serialize with re-initialization)\n" \
+ " context_file=%%s The file path to write a serialized connection\n"\
+ " in the form of base64 code (serialize option\n" \
+ " must be set)\n" \
+ " default: \"\" (do nothing)\n" \
+ " option: a file path\n"
#else
#define USAGE_SERIALIZATION ""
#endif
@@ -617,6 +624,9 @@
* during renegotiation */
const char *cid_val; /* the CID to use for incoming messages */
int serialize; /* serialize/deserialize connection */
+ const char *context_file; /* the file to write a serialized connection
+ * in the form of base64 code (serialize
+ * option must be set) */
const char *cid_val_renego; /* the CID to use for incoming messages
* after renegotiation */
int reproducible; /* make communication reproducible */
@@ -1984,6 +1994,7 @@
opt.extended_ms = DFL_EXTENDED_MS;
opt.etm = DFL_ETM;
opt.serialize = DFL_SERIALIZE;
+ opt.context_file = DFL_CONTEXT_FILE;
opt.eap_tls = DFL_EAP_TLS;
opt.reproducible = DFL_REPRODUCIBLE;
opt.nss_keylog = DFL_NSS_KEYLOG;
@@ -2406,6 +2417,10 @@
if( opt.serialize < 0 || opt.serialize > 2)
goto usage;
}
+ else if( strcmp( p, "context_file") == 0 )
+ {
+ opt.context_file = q;
+ }
else if( strcmp( p, "eap_tls" ) == 0 )
{
opt.eap_tls = atoi( q );
@@ -4102,6 +4117,56 @@
mbedtls_printf( " ok\n" );
+ /* Save serialized context to the 'opt.context_file' as a base64 code */
+ if( 0 < strlen( opt.context_file ) )
+ {
+ FILE *b64_file;
+ uint8_t *b64_buf;
+ size_t b64_len;
+
+ mbedtls_printf( " . Save serialized context to a file... " );
+
+ mbedtls_base64_encode( NULL, 0, &b64_len, context_buf, buf_len );
+
+ if( ( b64_buf = mbedtls_calloc( 1, b64_len ) ) == NULL )
+ {
+ mbedtls_printf( "failed\n ! Couldn't allocate buffer for "
+ "the base64 code\n" );
+ goto exit;
+ }
+
+ if( ( ret = mbedtls_base64_encode( b64_buf, b64_len, &b64_len,
+ context_buf, buf_len ) ) != 0 )
+ {
+ mbedtls_printf( "failed\n ! mbedtls_base64_encode returned "
+ "-0x%x\n", -ret );
+ mbedtls_free( b64_buf );
+ goto exit;
+ }
+
+ if( ( b64_file = fopen( opt.context_file, "w" ) ) == NULL )
+ {
+ mbedtls_printf( "failed\n ! Cannot open '%s' for writing.\n",
+ opt.context_file );
+ mbedtls_free( b64_buf );
+ goto exit;
+ }
+
+ if( b64_len != fwrite( b64_buf, 1, b64_len, b64_file ) )
+ {
+ mbedtls_printf( "failed\n ! fwrite(%ld bytes) failed\n",
+ (long) b64_len );
+ mbedtls_free( b64_buf );
+ fclose( b64_file );
+ goto exit;
+ }
+
+ mbedtls_free( b64_buf );
+ fclose( b64_file );
+
+ mbedtls_printf( "ok\n" );
+ }
+
/*
* This simulates a workflow where you have a long-lived server
* instance, potentially with a pool of ssl_context objects, and you