blob: 4a1c0474f13423e25c56da40b3701742ea148d40 [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb60b95f2012-09-25 09:05:17 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakkerb60b95f2012-09-25 09:05:17 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Manuel Pégourié-Gonnard8a4d5712014-06-24 14:19:59 +020031#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010032#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020033#define mbedtls_free free
Simon Butcherd3138c32016-04-27 01:26:50 +010034#define mbedtls_time time
35#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +020036#define mbedtls_calloc calloc
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037#define mbedtls_fprintf fprintf
38#define mbedtls_printf printf
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010039#define mbedtls_exit exit
40#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
41#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Rich Evans18b78c72015-02-11 14:06:19 +000042#endif
Manuel Pégourié-Gonnard8a4d5712014-06-24 14:19:59 +020043
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020044#if !defined(MBEDTLS_ENTROPY_C) || \
45 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_SRV_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020046 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020047int main( void )
48{
49 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
50 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_SRV_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020051 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020052 return( 0 );
53}
54#else
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +010055
Andres AG788aa4a2016-09-14 14:32:09 +010056#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000057#include "mbedtls/ssl.h"
58#include "mbedtls/entropy.h"
59#include "mbedtls/ctr_drbg.h"
60#include "mbedtls/certs.h"
61#include "mbedtls/x509.h"
62#include "mbedtls/error.h"
63#include "mbedtls/debug.h"
Manuel Pégourié-Gonnard56273da2015-05-26 12:19:45 +020064#include "mbedtls/timing.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000065
Rich Evans18b78c72015-02-11 14:06:19 +000066#include <stdio.h>
67#include <stdlib.h>
68#include <string.h>
Andres AG692ad842017-01-19 16:30:57 +000069#include <stdint.h>
Andres AG0b736db2017-02-08 14:05:57 +000070
71#if !defined(_MSC_VER)
Andres AG692ad842017-01-19 16:30:57 +000072#include <inttypes.h>
Andres AG0b736db2017-02-08 14:05:57 +000073#endif
Rich Evans18b78c72015-02-11 14:06:19 +000074
75#if !defined(_WIN32)
76#include <signal.h>
77#endif
78
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020079#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000080#include "mbedtls/ssl_cache.h"
Paul Bakker0a597072012-09-25 21:55:46 +000081#endif
82
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +020083#if defined(MBEDTLS_SSL_TICKET_C)
84#include "mbedtls/ssl_ticket.h"
85#endif
86
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020087#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000088#include "mbedtls/ssl_cookie.h"
Manuel Pégourié-Gonnard232edd42014-07-23 16:56:27 +020089#endif
90
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020091#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000092#include "mbedtls/memory_buffer_alloc.h"
Paul Bakker82024bf2013-07-04 11:52:32 +020093#endif
94
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020095#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && defined(MBEDTLS_FS_IO)
96#define SNI_OPTION
97#endif
98
99#if defined(_WIN32)
100#include <windows.h>
101#endif
102
Simon Butchercce68be2018-07-23 14:26:09 +0100103/* Size of memory to be allocated for the heap, when using the library's memory
104 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
105#define MEMORY_HEAP_SIZE 120000
106
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +0100107#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200108#define DFL_SERVER_PORT "4433"
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200109#define DFL_RESPONSE_SIZE -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000110#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100111#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +0100112#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200113#define DFL_READ_TIMEOUT 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000114#define DFL_CA_FILE ""
115#define DFL_CA_PATH ""
116#define DFL_CRT_FILE ""
117#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200118#define DFL_CRT_FILE2 ""
119#define DFL_KEY_FILE2 ""
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100120#define DFL_ASYNC_OPERATIONS "-"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100121#define DFL_ASYNC_PRIVATE_DELAY1 ( -1 )
122#define DFL_ASYNC_PRIVATE_DELAY2 ( -1 )
Gilles Peskine3665f1d2018-01-05 21:22:12 +0100123#define DFL_ASYNC_PRIVATE_ERROR ( 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +0200124#define DFL_PSK ""
125#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200126#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200127#define DFL_PSK_LIST NULL
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000128#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200129#define DFL_VERSION_SUITES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200130#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100131#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100132#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +0200133#define DFL_RENEGO_DELAY -2
Andres AG692ad842017-01-19 16:30:57 +0000134#define DFL_RENEGO_PERIOD ( (uint64_t)-1 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200135#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200136#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +0200137#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000138#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200139#define DFL_SHA1 -1
Hanno Becker1029ace2019-04-09 17:28:10 +0100140#define DFL_CID_ENABLED 0
141#define DFL_CID_VALUE ""
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100142#define DFL_AUTH_MODE -1
Janos Follath4817e272017-04-10 13:44:33 +0100143#define DFL_CERT_REQ_CA_LIST MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100145#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200146#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200147#define DFL_TICKET_TIMEOUT 86400
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100148#define DFL_CACHE_MAX -1
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100149#define DFL_CACHE_TIMEOUT -1
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100150#define DFL_SNI NULL
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200151#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100152#define DFL_CURVES NULL
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200153#define DFL_DHM_FILE NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200155#define DFL_COOKIES 1
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200156#define DFL_ANTI_REPLAY -1
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200157#define DFL_HS_TO_MIN 0
158#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200159#define DFL_DTLS_MTU -1
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200160#define DFL_BADMAC_LIMIT -1
Hanno Beckere7675d02018-08-14 13:28:56 +0100161#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200162#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100163#define DFL_ETM -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000164
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200165#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
166 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
167 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
168 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
169 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
170 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
171 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200172
Paul Bakker8e714d72013-07-18 11:05:13 +0200173/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
174 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000175#define HTTP_RESPONSE \
176 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Manuel Pégourié-Gonnard91699212015-01-22 16:26:39 +0000177 "<h2>mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200178 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000179
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200180/*
181 * Size of the basic I/O buffer. Able to hold our default response.
182 *
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183 * You will need to adapt the mbedtls_ssl_get_bytes_avail() test in ssl-opt.sh
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200184 * if you change this value to something outside the range <= 100 or > 500
185 */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200186#define DFL_IO_BUF_LEN 200
Manuel Pégourié-Gonnarde7a3b102014-06-11 18:21:20 +0200187
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188#if defined(MBEDTLS_X509_CRT_PARSE_C)
189#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000190#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100191 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
192 " default: \"\" (pre-loaded)\n" \
193 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
194 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
195 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200196 " default: see note after key_file2\n" \
197 " key_file=%%s default: see note after key_file2\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200198 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200199 " default: see note after key_file2\n" \
200 " key_file2=%%s default: see note below\n" \
201 " note: if neither crt_file/key_file nor crt_file2/key_file2 are used,\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200202 " preloaded certificate(s) and key(s) are used if available\n" \
203 " dhm_file=%%s File containing Diffie-Hellman parameters\n" \
204 " default: preloaded parameters\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000205#else
206#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200207 "\n" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208 " No file operations available (MBEDTLS_FS_IO not defined)\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200209 "\n"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200210#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200211#else
212#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200213#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200214
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200215#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100216#define USAGE_SSL_ASYNC \
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100217 " async_operations=%%c... d=decrypt, s=sign (default: -=off)\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100218 " async_private_delay1=%%d Asynchronous delay for key_file or preloaded key\n" \
Gilles Peskine166ce742018-04-30 10:30:49 +0200219 " async_private_delay2=%%d Asynchronous delay for key_file2 and sni\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100220 " default: -1 (not asynchronous)\n" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +0100221 " async_private_error=%%d Async callback error injection (default=0=none,\n" \
Gilles Peskinec9125722018-04-26 07:15:40 +0200222 " 1=start, 2=cancel, 3=resume, negative=first time only)"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100223#else
224#define USAGE_SSL_ASYNC ""
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200225#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100226
Hanno Becker1029ace2019-04-09 17:28:10 +0100227#if defined(MBEDTLS_SSL_CID)
228#define USAGE_CID \
229 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
230 " default: 0 (disabled)\n" \
231 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
232 " default: \"\"\n"
233#else /* MBEDTLS_SSL_CID */
234#define USAGE_CID ""
235#endif /* MBEDTLS_SSL_CID */
236
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200237#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Hanno Beckerd0d01c52018-10-25 16:49:48 +0100238#define USAGE_PSK \
239 " psk=%%s default: \"\" (in hex, without 0x)\n" \
240 " psk_list=%%s default: \"\"\n" \
Hanno Becker5ddc0632018-10-26 10:04:13 +0100241 " A list of (PSK identity, PSK value) pairs.\n" \
242 " The PSK values are in hex, without 0x.\n" \
Hanno Beckerd0d01c52018-10-25 16:49:48 +0100243 " id1,psk1[,id2,psk2[,...]]\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200244 " psk_identity=%%s default: \"Client_identity\"\n"
245#else
246#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200247#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000248
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200250#define USAGE_TICKETS \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +0100251 " tickets=%%d default: 1 (enabled)\n" \
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200252 " ticket_timeout=%%d default: 86400 (one day)\n"
Paul Bakkera503a632013-08-14 13:48:06 +0200253#else
254#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200255#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200256
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200257#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100258#define USAGE_CACHE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100259 " cache_max=%%d default: cache default (50)\n" \
260 " cache_timeout=%%d default: cache default (1d)\n"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100261#else
262#define USAGE_CACHE ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200263#endif /* MBEDTLS_SSL_CACHE_C */
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100264
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200265#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100266#define USAGE_SNI \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200267 " sni=%%s name1,cert1,key1,ca1,crl1,auth1[,...]\n" \
268 " default: disabled\n"
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100269#else
270#define USAGE_SNI ""
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200271#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100272
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200273#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200274#define USAGE_MAX_FRAG_LEN \
275 " max_frag_len=%%d default: 16384 (tls default)\n" \
276 " options: 512, 1024, 2048, 4096\n"
277#else
278#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200279#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200280
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200281#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100282#define USAGE_TRUNC_HMAC \
283 " trunc_hmac=%%d default: library default\n"
284#else
285#define USAGE_TRUNC_HMAC ""
286#endif
287
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200288#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200289#define USAGE_ALPN \
290 " alpn=%%s default: \"\" (disabled)\n" \
291 " example: spdy/1,http/1.1\n"
292#else
293#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200294#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200295
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200296#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200297#define USAGE_COOKIES \
298 " cookies=0/1/-1 default: 1 (enabled)\n" \
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200299 " 0: disabled, -1: library default (broken)\n"
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200300#else
301#define USAGE_COOKIES ""
302#endif
303
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200304#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200305#define USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200306 " anti_replay=0/1 default: (library default: enabled)\n"
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200307#else
308#define USAGE_ANTI_REPLAY ""
309#endif
310
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200311#if defined(MBEDTLS_SSL_DTLS_BADMAC_LIMIT)
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200312#define USAGE_BADMAC_LIMIT \
313 " badmac_limit=%%d default: (library default: disabled)\n"
314#else
315#define USAGE_BADMAC_LIMIT ""
316#endif
317
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200318#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200319#define USAGE_DTLS \
320 " dtls=%%d default: 0 (TLS)\n" \
321 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200322 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Beckere7675d02018-08-14 13:28:56 +0100323 " mtu=%%d default: (library default: unlimited)\n" \
324 " dgram_packing=%%d default: 1 (allowed)\n" \
325 " allow or forbid packing of multiple\n" \
326 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200327#else
328#define USAGE_DTLS ""
329#endif
330
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200331#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200332#define USAGE_EMS \
333 " extended_ms=0/1 default: (library default: on)\n"
334#else
335#define USAGE_EMS ""
336#endif
337
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200338#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100339#define USAGE_ETM \
340 " etm=0/1 default: (library default: on)\n"
341#else
342#define USAGE_ETM ""
343#endif
344
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200345#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100346#define USAGE_RENEGO \
347 " renegotiation=%%d default: 0 (disabled)\n" \
348 " renegotiate=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +0100349 " renego_delay=%%d default: -2 (library default)\n" \
Andres AG692ad842017-01-19 16:30:57 +0000350 " renego_period=%%d default: (2^64 - 1 for TLS, 2^48 - 1 for DTLS)\n"
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100351#else
352#define USAGE_RENEGO ""
353#endif
354
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200355#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
356#define USAGE_ECJPAKE \
357 " ecjpake_pw=%%s default: none (disabled)\n"
358#else
359#define USAGE_ECJPAKE ""
360#endif
361
Hanno Beckere6706e62017-05-15 16:05:15 +0100362#if defined(MBEDTLS_ECP_C)
363#define USAGE_CURVES \
364 " curves=a,b,c,d default: \"default\" (library default)\n" \
365 " example: \"secp521r1,brainpoolP512r1\"\n" \
366 " - use \"none\" for empty list\n" \
367 " - see mbedtls_ecp_curve_list()\n" \
368 " for acceptable curve names\n"
369#else
370#define USAGE_CURVES ""
371#endif
372
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000373#define USAGE \
374 "\n usage: ssl_server2 param=<>...\n" \
375 "\n acceptable parameters:\n" \
Ron Eldor71f68c42017-09-26 11:29:11 +0300376 " server_addr=%%s default: (all interfaces)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000377 " server_port=%%d default: 4433\n" \
378 " debug_level=%%d default: 0 (disabled)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200379 " buffer_size=%%d default: 200 \n" \
380 " (minimum: 1, max: 16385)\n" \
381 " response_size=%%d default: about 152 (basic response)\n" \
382 " (minimum: 0, max: 16384)\n" \
383 " increases buffer_size if bigger\n"\
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100384 " nbio=%%d default: 0 (blocking I/O)\n" \
385 " options: 1 (non-blocking), 2 (added delays)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100386 " event=%%d default: 0 (loop)\n" \
387 " options: 1 (level-triggered, implies nbio=1),\n" \
Manuel Pégourié-Gonnard22311ae2015-09-09 11:22:58 +0200388 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100389 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200390 USAGE_DTLS \
391 USAGE_COOKIES \
392 USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200393 USAGE_BADMAC_LIMIT \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200394 "\n" \
Manuel Pégourié-Gonnardee6139c2015-05-07 10:18:26 +0100395 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100396 " options: none, optional, required\n" \
Janos Follath4817e272017-04-10 13:44:33 +0100397 " cert_req_ca_list=%%d default: 1 (send ca list)\n" \
398 " options: 1 (send ca list), 0 (don't send)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000399 USAGE_IO \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100400 USAGE_SSL_ASYNC \
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100401 USAGE_SNI \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100402 "\n" \
403 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200404 USAGE_ECJPAKE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100405 "\n" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100406 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100407 USAGE_RENEGO \
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200408 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200409 "\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100410 USAGE_TICKETS \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100411 USAGE_CACHE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100412 USAGE_MAX_FRAG_LEN \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100413 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200414 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200415 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100416 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100417 USAGE_CURVES \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100418 "\n" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100419 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200420 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200421 " min_version=%%s default: (library default: tls1)\n" \
422 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakkerc1516be2013-06-29 16:01:32 +0200423 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100424 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200425 "\n" \
426 " version_suites=a,b,c,d per-version ciphersuites\n" \
427 " in order from ssl3 to tls1_2\n" \
428 " default: all enabled\n" \
429 " force_ciphersuite=<name> default: all enabled\n" \
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100430 " query_config=<name> return 0 if the specified\n" \
431 " configuration macro is defined and 1\n" \
432 " otherwise. The expansion of the macro\n" \
433 " is printed if it is defined\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000434 " acceptable ciphersuite names:\n"
435
Andres AG692ad842017-01-19 16:30:57 +0000436
Hanno Becker8651a432017-06-09 16:13:22 +0100437#define ALPN_LIST_SIZE 10
438#define CURVE_LIST_SIZE 20
439
Andres AG692ad842017-01-19 16:30:57 +0000440#define PUT_UINT64_BE(out_be,in_le,i) \
441{ \
442 (out_be)[(i) + 0] = (unsigned char)( ( (in_le) >> 56 ) & 0xFF ); \
443 (out_be)[(i) + 1] = (unsigned char)( ( (in_le) >> 48 ) & 0xFF ); \
444 (out_be)[(i) + 2] = (unsigned char)( ( (in_le) >> 40 ) & 0xFF ); \
445 (out_be)[(i) + 3] = (unsigned char)( ( (in_le) >> 32 ) & 0xFF ); \
446 (out_be)[(i) + 4] = (unsigned char)( ( (in_le) >> 24 ) & 0xFF ); \
447 (out_be)[(i) + 5] = (unsigned char)( ( (in_le) >> 16 ) & 0xFF ); \
448 (out_be)[(i) + 6] = (unsigned char)( ( (in_le) >> 8 ) & 0xFF ); \
449 (out_be)[(i) + 7] = (unsigned char)( ( (in_le) >> 0 ) & 0xFF ); \
450}
451
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100452#if defined(MBEDTLS_CHECK_PARAMS)
453#include "mbedtls/platform_util.h"
454void mbedtls_param_failed( const char *failure_condition,
455 const char *file,
456 int line )
Simon Butcher63cb97e2018-12-06 17:43:31 +0000457{
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100458 mbedtls_printf( "%s:%i: Input param failed - %s\n",
459 file, line, failure_condition );
Simon Butcher63cb97e2018-12-06 17:43:31 +0000460 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
461}
462#endif
463
Rich Evans85b05ec2015-02-12 11:37:29 +0000464/*
465 * global options
466 */
467struct options
468{
469 const char *server_addr; /* address on which the ssl service runs */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200470 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000471 int debug_level; /* level of debugging */
472 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100473 int event; /* loop or event-driven IO? level or edge triggered? */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200474 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200475 int response_size; /* pad response with header to requested size */
476 uint16_t buffer_size; /* IO buffer size */
Rich Evans85b05ec2015-02-12 11:37:29 +0000477 const char *ca_file; /* the file with the CA certificate(s) */
478 const char *ca_path; /* the path with the CA certificate(s) reside */
479 const char *crt_file; /* the file with the server certificate */
480 const char *key_file; /* the file with the server key */
481 const char *crt_file2; /* the file with the 2nd server certificate */
482 const char *key_file2; /* the file with the 2nd server key */
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100483 const char *async_operations; /* supported SSL asynchronous operations */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100484 int async_private_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
485 int async_private_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
486 int async_private_error; /* inject error in async private callback */
Rich Evans85b05ec2015-02-12 11:37:29 +0000487 const char *psk; /* the pre-shared key */
488 const char *psk_identity; /* the pre-shared key identity */
489 char *psk_list; /* list of PSK id/key pairs for callback */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200490 const char *ecjpake_pw; /* the EC J-PAKE password */
Rich Evans85b05ec2015-02-12 11:37:29 +0000491 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
492 const char *version_suites; /* per-version ciphersuites */
493 int renegotiation; /* enable / disable renegotiation */
494 int allow_legacy; /* allow legacy renegotiation */
495 int renegotiate; /* attempt renegotiation? */
496 int renego_delay; /* delay before enforcing renegotiation */
Andres AG692ad842017-01-19 16:30:57 +0000497 uint64_t renego_period; /* period for automatic renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000498 int exchanges; /* number of data exchanges */
499 int min_version; /* minimum protocol version accepted */
500 int max_version; /* maximum protocol version accepted */
501 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200502 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000503 int auth_mode; /* verify mode for connection */
Janos Follath4817e272017-04-10 13:44:33 +0100504 int cert_req_ca_list; /* should we send the CA list? */
Rich Evans85b05ec2015-02-12 11:37:29 +0000505 unsigned char mfl_code; /* code for maximum fragment length */
506 int trunc_hmac; /* accept truncated hmac? */
507 int tickets; /* enable / disable session tickets */
508 int ticket_timeout; /* session ticket lifetime */
509 int cache_max; /* max number of session cache entries */
510 int cache_timeout; /* expiration delay of session cache entries */
511 char *sni; /* string describing sni information */
Hanno Beckere6706e62017-05-15 16:05:15 +0100512 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000513 const char *alpn_string; /* ALPN supported protocols */
514 const char *dhm_file; /* the file with the DH parameters */
515 int extended_ms; /* allow negotiation of extended MS? */
516 int etm; /* allow negotiation of encrypt-then-MAC? */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000517 int transport; /* TLS or DTLS? */
518 int cookies; /* Use cookies for DTLS? -1 to break them */
519 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
520 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
521 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200522 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Hanno Beckere7675d02018-08-14 13:28:56 +0100523 int dgram_packing; /* allow/forbid datagram packing */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000524 int badmac_limit; /* Limit of records with bad MAC */
Hanno Becker1029ace2019-04-09 17:28:10 +0100525 int cid_enabled; /* whether to use the CID extension or not */
526 const char *cid_val; /* the CID to use for incoming messages */
Rich Evans85b05ec2015-02-12 11:37:29 +0000527} opt;
528
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100529int query_config( const char *config );
530
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200531static void my_debug( void *ctx, int level,
532 const char *file, int line,
533 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000534{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200535 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000536
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200537 /* Extract basename from file */
538 for( p = basename = file; *p != '\0'; p++ )
539 if( *p == '/' || *p == '\\' )
540 basename = p + 1;
541
542 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s", basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000543 fflush( (FILE *) ctx );
544}
545
546/*
547 * Test recv/send functions that make sure each try returns
548 * WANT_READ/WANT_WRITE at least once before sucesseding
549 */
550static int my_recv( void *ctx, unsigned char *buf, size_t len )
551{
552 static int first_try = 1;
553 int ret;
554
555 if( first_try )
556 {
557 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100558 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000559 }
560
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200561 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100562 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000563 first_try = 1; /* Next call will be a new operation */
564 return( ret );
565}
566
567static int my_send( void *ctx, const unsigned char *buf, size_t len )
568{
569 static int first_try = 1;
570 int ret;
571
572 if( first_try )
573 {
574 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100575 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000576 }
577
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200578 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100579 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000580 first_try = 1; /* Next call will be a new operation */
581 return( ret );
582}
583
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200584/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200585 * Return authmode from string, or -1 on error
586 */
587static int get_auth_mode( const char *s )
588{
589 if( strcmp( s, "none" ) == 0 )
590 return( MBEDTLS_SSL_VERIFY_NONE );
591 if( strcmp( s, "optional" ) == 0 )
592 return( MBEDTLS_SSL_VERIFY_OPTIONAL );
593 if( strcmp( s, "required" ) == 0 )
594 return( MBEDTLS_SSL_VERIFY_REQUIRED );
595
596 return( -1 );
597}
598
599/*
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200600 * Used by sni_parse and psk_parse to handle coma-separated lists
601 */
602#define GET_ITEM( dst ) \
603 dst = p; \
604 while( *p != ',' ) \
605 if( ++p > end ) \
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000606 goto error; \
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200607 *p++ = '\0';
608
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200609#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100610typedef struct _sni_entry sni_entry;
611
612struct _sni_entry {
613 const char *name;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200614 mbedtls_x509_crt *cert;
615 mbedtls_pk_context *key;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200616 mbedtls_x509_crt* ca;
617 mbedtls_x509_crl* crl;
618 int authmode;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100619 sni_entry *next;
620};
621
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100622void sni_free( sni_entry *head )
623{
624 sni_entry *cur = head, *next;
625
626 while( cur != NULL )
627 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200628 mbedtls_x509_crt_free( cur->cert );
629 mbedtls_free( cur->cert );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100630
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200631 mbedtls_pk_free( cur->key );
632 mbedtls_free( cur->key );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100633
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200634 mbedtls_x509_crt_free( cur->ca );
635 mbedtls_free( cur->ca );
636
637 mbedtls_x509_crl_free( cur->crl );
638 mbedtls_free( cur->crl );
639
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100640 next = cur->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200641 mbedtls_free( cur );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100642 cur = next;
643 }
644}
645
646/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200647 * Parse a string of sextuples name1,crt1,key1,ca1,crl1,auth1[,...]
648 * into a usable sni_entry list. For ca1, crl1, auth1, the special value
649 * '-' means unset. If ca1 is unset, then crl1 is ignored too.
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000650 *
651 * Modifies the input string! This is not production quality!
652 */
653sni_entry *sni_parse( char *sni_string )
654{
655 sni_entry *cur = NULL, *new = NULL;
656 char *p = sni_string;
657 char *end = p;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200658 char *crt_file, *key_file, *ca_file, *crl_file, *auth_str;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000659
660 while( *end != '\0' )
661 ++end;
662 *end = ',';
663
664 while( p <= end )
665 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200666 if( ( new = mbedtls_calloc( 1, sizeof( sni_entry ) ) ) == NULL )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000667 {
668 sni_free( cur );
669 return( NULL );
670 }
671
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200672 GET_ITEM( new->name );
673 GET_ITEM( crt_file );
674 GET_ITEM( key_file );
675 GET_ITEM( ca_file );
676 GET_ITEM( crl_file );
677 GET_ITEM( auth_str );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000678
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200679 if( ( new->cert = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL ||
680 ( new->key = mbedtls_calloc( 1, sizeof( mbedtls_pk_context ) ) ) == NULL )
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200681 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000682
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200683 mbedtls_x509_crt_init( new->cert );
684 mbedtls_pk_init( new->key );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000685
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200686 if( mbedtls_x509_crt_parse_file( new->cert, crt_file ) != 0 ||
687 mbedtls_pk_parse_keyfile( new->key, key_file, "" ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000688 goto error;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200689
690 if( strcmp( ca_file, "-" ) != 0 )
691 {
692 if( ( new->ca = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL )
693 goto error;
694
695 mbedtls_x509_crt_init( new->ca );
696
697 if( mbedtls_x509_crt_parse_file( new->ca, ca_file ) != 0 )
698 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000699 }
700
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200701 if( strcmp( crl_file, "-" ) != 0 )
702 {
703 if( ( new->crl = mbedtls_calloc( 1, sizeof( mbedtls_x509_crl ) ) ) == NULL )
704 goto error;
705
706 mbedtls_x509_crl_init( new->crl );
707
708 if( mbedtls_x509_crl_parse_file( new->crl, crl_file ) != 0 )
709 goto error;
710 }
711
712 if( strcmp( auth_str, "-" ) != 0 )
713 {
714 if( ( new->authmode = get_auth_mode( auth_str ) ) < 0 )
715 goto error;
716 }
717 else
718 new->authmode = DFL_AUTH_MODE;
719
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000720 new->next = cur;
721 cur = new;
722 }
723
724 return( cur );
725
726error:
727 sni_free( new );
728 sni_free( cur );
729 return( NULL );
730}
731
732/*
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100733 * SNI callback.
734 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200735int sni_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100736 const unsigned char *name, size_t name_len )
737{
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200738 const sni_entry *cur = (const sni_entry *) p_info;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100739
740 while( cur != NULL )
741 {
742 if( name_len == strlen( cur->name ) &&
743 memcmp( name, cur->name, name_len ) == 0 )
744 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200745 if( cur->ca != NULL )
746 mbedtls_ssl_set_hs_ca_chain( ssl, cur->ca, cur->crl );
747
748 if( cur->authmode != DFL_AUTH_MODE )
749 mbedtls_ssl_set_hs_authmode( ssl, cur->authmode );
750
Manuel Pégourié-Gonnard1af6c852015-05-10 23:10:37 +0200751 return( mbedtls_ssl_set_hs_own_cert( ssl, cur->cert, cur->key ) );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100752 }
753
754 cur = cur->next;
755 }
756
757 return( -1 );
758}
759
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200760#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100761
Hanno Becker2e0bedc2019-04-30 14:18:06 +0100762#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) || \
763 defined(MBEDTLS_SSL_CID)
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200764
765#define HEX2NUM( c ) \
766 if( c >= '0' && c <= '9' ) \
767 c -= '0'; \
768 else if( c >= 'a' && c <= 'f' ) \
769 c -= 'a' - 10; \
770 else if( c >= 'A' && c <= 'F' ) \
771 c -= 'A' - 10; \
772 else \
773 return( -1 );
774
775/*
776 * Convert a hex string to bytes.
777 * Return 0 on success, -1 on error.
778 */
779int unhexify( unsigned char *output, const char *input, size_t *olen )
780{
781 unsigned char c;
782 size_t j;
783
784 *olen = strlen( input );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200785 if( *olen % 2 != 0 || *olen / 2 > MBEDTLS_PSK_MAX_LEN )
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200786 return( -1 );
787 *olen /= 2;
788
789 for( j = 0; j < *olen * 2; j += 2 )
790 {
791 c = input[j];
792 HEX2NUM( c );
793 output[ j / 2 ] = c << 4;
794
795 c = input[j + 1];
796 HEX2NUM( c );
797 output[ j / 2 ] |= c;
798 }
799
800 return( 0 );
801}
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200802
Hanno Becker2e0bedc2019-04-30 14:18:06 +0100803#endif
804
805#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
806
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200807typedef struct _psk_entry psk_entry;
808
809struct _psk_entry
810{
811 const char *name;
812 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200813 unsigned char key[MBEDTLS_PSK_MAX_LEN];
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200814 psk_entry *next;
815};
816
817/*
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000818 * Free a list of psk_entry's
819 */
820void psk_free( psk_entry *head )
821{
822 psk_entry *next;
823
824 while( head != NULL )
825 {
826 next = head->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200827 mbedtls_free( head );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000828 head = next;
829 }
830}
831
832/*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200833 * Parse a string of pairs name1,key1[,name2,key2[,...]]
834 * into a usable psk_entry list.
835 *
836 * Modifies the input string! This is not production quality!
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200837 */
838psk_entry *psk_parse( char *psk_string )
839{
840 psk_entry *cur = NULL, *new = NULL;
841 char *p = psk_string;
842 char *end = p;
843 char *key_hex;
844
845 while( *end != '\0' )
846 ++end;
847 *end = ',';
848
849 while( p <= end )
850 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200851 if( ( new = mbedtls_calloc( 1, sizeof( psk_entry ) ) ) == NULL )
Manuel Pégourié-Gonnardb1990952015-02-18 09:32:06 +0000852 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200853
854 memset( new, 0, sizeof( psk_entry ) );
855
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200856 GET_ITEM( new->name );
857 GET_ITEM( key_hex );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200858
859 if( unhexify( new->key, key_hex, &new->key_len ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000860 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200861
862 new->next = cur;
863 cur = new;
864 }
865
866 return( cur );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200867
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000868error:
869 psk_free( new );
870 psk_free( cur );
871 return( 0 );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200872}
873
874/*
875 * PSK callback
876 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200877int psk_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200878 const unsigned char *name, size_t name_len )
879{
880 psk_entry *cur = (psk_entry *) p_info;
881
882 while( cur != NULL )
883 {
884 if( name_len == strlen( cur->name ) &&
885 memcmp( name, cur->name, name_len ) == 0 )
886 {
Manuel Pégourié-Gonnard4b682962015-05-07 15:59:54 +0100887 return( mbedtls_ssl_set_hs_psk( ssl, cur->key, cur->key_len ) );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200888 }
889
890 cur = cur->next;
891 }
892
893 return( -1 );
894}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200895#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200896
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200897static mbedtls_net_context listen_fd, client_fd;
Paul Bakkerbc3e54c2014-08-18 14:36:17 +0200898
899/* Interruption handler to ensure clean exit (for valgrind testing) */
900#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200901static int received_sigterm = 0;
902void term_handler( int sig )
903{
904 ((void) sig);
905 received_sigterm = 1;
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200906 mbedtls_net_free( &listen_fd ); /* causes mbedtls_net_accept() to abort */
907 mbedtls_net_free( &client_fd ); /* causes net_read() to abort */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200908}
Paul Bakkerc1283d32014-08-18 11:05:51 +0200909#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200910
Gilles Peskine682df092017-05-11 19:01:11 +0200911#if defined(MBEDTLS_X509_CRT_PARSE_C)
912static int ssl_sig_hashes_for_test[] = {
913#if defined(MBEDTLS_SHA512_C)
914 MBEDTLS_MD_SHA512,
915 MBEDTLS_MD_SHA384,
916#endif
917#if defined(MBEDTLS_SHA256_C)
918 MBEDTLS_MD_SHA256,
919 MBEDTLS_MD_SHA224,
920#endif
921#if defined(MBEDTLS_SHA1_C)
922 /* Allow SHA-1 as we use it extensively in tests. */
923 MBEDTLS_MD_SHA1,
924#endif
925 MBEDTLS_MD_NONE
926};
927#endif /* MBEDTLS_X509_CRT_PARSE_C */
928
Gilles Peskinea36ac4f2018-04-26 08:05:02 +0200929/** Return true if \p ret is a status code indicating that there is an
930 * operation in progress on an SSL connection, and false if it indicates
931 * success or a fatal error.
932 *
933 * The possible operations in progress are:
934 *
935 * - A read, when the SSL input buffer does not contain a full message.
936 * - A write, when the SSL output buffer contains some data that has not
937 * been sent over the network yet.
938 * - An asynchronous callback that has not completed yet. */
939static int mbedtls_status_is_ssl_in_progress( int ret )
940{
941 return( ret == MBEDTLS_ERR_SSL_WANT_READ ||
942 ret == MBEDTLS_ERR_SSL_WANT_WRITE ||
943 ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
944}
945
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200946#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100947typedef struct
948{
Gilles Peskine44817442018-06-13 18:09:28 +0200949 mbedtls_x509_crt *cert; /*!< Certificate corresponding to the key */
950 mbedtls_pk_context *pk; /*!< Private key */
951 unsigned delay; /*!< Number of resume steps to go through */
952 unsigned pk_owned : 1; /*!< Whether to free the pk object on exit */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100953} ssl_async_key_slot_t;
954
955typedef enum {
Gilles Peskinead28bf02018-04-26 00:19:16 +0200956 SSL_ASYNC_INJECT_ERROR_NONE = 0, /*!< Let the callbacks succeed */
957 SSL_ASYNC_INJECT_ERROR_START, /*!< Inject error during start */
958 SSL_ASYNC_INJECT_ERROR_CANCEL, /*!< Close the connection after async start */
959 SSL_ASYNC_INJECT_ERROR_RESUME, /*!< Inject error during resume */
Gilles Peskinec9125722018-04-26 07:15:40 +0200960#define SSL_ASYNC_INJECT_ERROR_MAX SSL_ASYNC_INJECT_ERROR_RESUME
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100961} ssl_async_inject_error_t;
962
963typedef struct
964{
Gilles Peskinee2479892018-06-13 18:06:51 +0200965 ssl_async_key_slot_t slots[4]; /* key, key2, sni1, sni2 */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100966 size_t slots_used;
967 ssl_async_inject_error_t inject_error;
968 int (*f_rng)(void *, unsigned char *, size_t);
969 void *p_rng;
970} ssl_async_key_context_t;
971
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200972int ssl_async_set_key( ssl_async_key_context_t *ctx,
Gilles Peskine44817442018-06-13 18:09:28 +0200973 mbedtls_x509_crt *cert,
974 mbedtls_pk_context *pk,
975 int pk_take_ownership,
976 unsigned delay )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100977{
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200978 if( ctx->slots_used >= sizeof( ctx->slots ) / sizeof( *ctx->slots ) )
979 return( -1 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100980 ctx->slots[ctx->slots_used].cert = cert;
981 ctx->slots[ctx->slots_used].pk = pk;
982 ctx->slots[ctx->slots_used].delay = delay;
Gilles Peskine44817442018-06-13 18:09:28 +0200983 ctx->slots[ctx->slots_used].pk_owned = pk_take_ownership;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100984 ++ctx->slots_used;
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200985 return( 0 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100986}
987
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100988#define SSL_ASYNC_INPUT_MAX_SIZE 512
Gilles Peskined3268832018-04-26 06:23:59 +0200989
990typedef enum
991{
992 ASYNC_OP_SIGN,
993 ASYNC_OP_DECRYPT,
994} ssl_async_operation_type_t;
995/* Note that the enum above and the array below need to be kept in sync!
996 * `ssl_async_operation_names[op]` is the name of op for each value `op`
997 * of type `ssl_async_operation_type_t`. */
998static const char *const ssl_async_operation_names[] =
999{
1000 "sign",
1001 "decrypt",
1002};
1003
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001004typedef struct
1005{
Gilles Peskine6331d782018-04-26 13:27:43 +02001006 unsigned slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001007 ssl_async_operation_type_t operation_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001008 mbedtls_md_type_t md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001009 unsigned char input[SSL_ASYNC_INPUT_MAX_SIZE];
1010 size_t input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001011 unsigned remaining_delay;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001012} ssl_async_operation_context_t;
1013
Gilles Peskine8f97af72018-04-26 11:46:10 +02001014static int ssl_async_start( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001015 mbedtls_x509_crt *cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001016 ssl_async_operation_type_t op_type,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001017 mbedtls_md_type_t md_alg,
1018 const unsigned char *input,
1019 size_t input_len )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001020{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001021 ssl_async_key_context_t *config_data =
1022 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskine6331d782018-04-26 13:27:43 +02001023 unsigned slot;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001024 ssl_async_operation_context_t *ctx = NULL;
Gilles Peskined3268832018-04-26 06:23:59 +02001025 const char *op_name = ssl_async_operation_names[op_type];
Gilles Peskinef1127252018-04-24 13:05:39 +02001026
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001027 {
1028 char dn[100];
Gilles Peskined5d983e2018-06-15 14:05:10 +02001029 if( mbedtls_x509_dn_gets( dn, sizeof( dn ), &cert->subject ) > 0 )
1030 mbedtls_printf( "Async %s callback: looking for DN=%s\n",
1031 op_name, dn );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001032 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001033
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001034 /* Look for a private key that matches the public key in cert.
1035 * Since this test code has the private key inside Mbed TLS,
1036 * we call mbedtls_pk_check_pair to match a private key with the
1037 * public key. */
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001038 for( slot = 0; slot < config_data->slots_used; slot++ )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001039 {
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001040 if( mbedtls_pk_check_pair( &cert->pk,
1041 config_data->slots[slot].pk ) == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001042 break;
1043 }
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001044 if( slot == config_data->slots_used )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001045 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001046 mbedtls_printf( "Async %s callback: no key matches this certificate.\n",
1047 op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001048 return( MBEDTLS_ERR_SSL_HW_ACCEL_FALLTHROUGH );
1049 }
Gilles Peskine6331d782018-04-26 13:27:43 +02001050 mbedtls_printf( "Async %s callback: using key slot %u, delay=%u.\n",
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001051 op_name, slot, config_data->slots[slot].delay );
Gilles Peskinef1127252018-04-24 13:05:39 +02001052
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001053 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_START )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001054 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001055 mbedtls_printf( "Async %s callback: injected error\n", op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001056 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1057 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001058
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001059 if( input_len > SSL_ASYNC_INPUT_MAX_SIZE )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001060 return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
Gilles Peskinef1127252018-04-24 13:05:39 +02001061
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001062 ctx = mbedtls_calloc( 1, sizeof( *ctx ) );
1063 if( ctx == NULL )
1064 return( MBEDTLS_ERR_SSL_ALLOC_FAILED );
1065 ctx->slot = slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001066 ctx->operation_type = op_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001067 ctx->md_alg = md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001068 memcpy( ctx->input, input, input_len );
1069 ctx->input_len = input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001070 ctx->remaining_delay = config_data->slots[slot].delay;
Gilles Peskinea668c602018-04-30 11:54:39 +02001071 mbedtls_ssl_set_async_operation_data( ssl, ctx );
Gilles Peskinef1127252018-04-24 13:05:39 +02001072
Gilles Peskineceb541b2018-04-26 06:30:45 +02001073 if( ctx->remaining_delay == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001074 return( 0 );
1075 else
1076 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1077}
1078
Gilles Peskine8f97af72018-04-26 11:46:10 +02001079static int ssl_async_sign( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001080 mbedtls_x509_crt *cert,
1081 mbedtls_md_type_t md_alg,
1082 const unsigned char *hash,
1083 size_t hash_len )
1084{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001085 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001086 ASYNC_OP_SIGN, md_alg,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001087 hash, hash_len ) );
1088}
1089
Gilles Peskine8f97af72018-04-26 11:46:10 +02001090static int ssl_async_decrypt( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001091 mbedtls_x509_crt *cert,
1092 const unsigned char *input,
1093 size_t input_len )
1094{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001095 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001096 ASYNC_OP_DECRYPT, MBEDTLS_MD_NONE,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001097 input, input_len ) );
1098}
1099
Gilles Peskine8f97af72018-04-26 11:46:10 +02001100static int ssl_async_resume( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001101 unsigned char *output,
1102 size_t *output_len,
1103 size_t output_size )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001104{
Gilles Peskinea668c602018-04-30 11:54:39 +02001105 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine8f97af72018-04-26 11:46:10 +02001106 ssl_async_key_context_t *config_data =
1107 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001108 ssl_async_key_slot_t *key_slot = &config_data->slots[ctx->slot];
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001109 int ret;
Gilles Peskinef5a99962018-04-30 16:37:23 +02001110 const char *op_name;
Gilles Peskinef1127252018-04-24 13:05:39 +02001111
Gilles Peskineceb541b2018-04-26 06:30:45 +02001112 if( ctx->remaining_delay > 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001113 {
Gilles Peskineceb541b2018-04-26 06:30:45 +02001114 --ctx->remaining_delay;
Gilles Peskine6331d782018-04-26 13:27:43 +02001115 mbedtls_printf( "Async resume (slot %u): call %u more times.\n",
Gilles Peskineceb541b2018-04-26 06:30:45 +02001116 ctx->slot, ctx->remaining_delay );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001117 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1118 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001119
Gilles Peskined3268832018-04-26 06:23:59 +02001120 switch( ctx->operation_type )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001121 {
Gilles Peskined3268832018-04-26 06:23:59 +02001122 case ASYNC_OP_DECRYPT:
Gilles Peskined3268832018-04-26 06:23:59 +02001123 ret = mbedtls_pk_decrypt( key_slot->pk,
1124 ctx->input, ctx->input_len,
1125 output, output_len, output_size,
1126 config_data->f_rng, config_data->p_rng );
1127 break;
1128 case ASYNC_OP_SIGN:
Gilles Peskined3268832018-04-26 06:23:59 +02001129 ret = mbedtls_pk_sign( key_slot->pk,
1130 ctx->md_alg,
1131 ctx->input, ctx->input_len,
1132 output, output_len,
1133 config_data->f_rng, config_data->p_rng );
1134 break;
1135 default:
Gilles Peskine6331d782018-04-26 13:27:43 +02001136 mbedtls_printf( "Async resume (slot %u): unknown operation type %ld. This shouldn't happen.\n",
Gilles Peskined3268832018-04-26 06:23:59 +02001137 ctx->slot, (long) ctx->operation_type );
Gilles Peskine44817442018-06-13 18:09:28 +02001138 mbedtls_free( ctx );
Gilles Peskined3268832018-04-26 06:23:59 +02001139 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1140 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001141 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001142
Gilles Peskinef5a99962018-04-30 16:37:23 +02001143 op_name = ssl_async_operation_names[ctx->operation_type];
1144
Gilles Peskinec9125722018-04-26 07:15:40 +02001145 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_RESUME )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001146 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001147 mbedtls_printf( "Async resume callback: %s done but injected error\n",
1148 op_name );
Gilles Peskine2636fad2018-06-12 14:17:39 +02001149 mbedtls_free( ctx );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001150 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1151 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001152
Gilles Peskine6331d782018-04-26 13:27:43 +02001153 mbedtls_printf( "Async resume (slot %u): %s done, status=%d.\n",
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001154 ctx->slot, op_name, ret );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001155 mbedtls_free( ctx );
1156 return( ret );
1157}
1158
Gilles Peskine8f97af72018-04-26 11:46:10 +02001159static void ssl_async_cancel( mbedtls_ssl_context *ssl )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001160{
Gilles Peskinea668c602018-04-30 11:54:39 +02001161 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001162 mbedtls_printf( "Async cancel callback.\n" );
1163 mbedtls_free( ctx );
1164}
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001165#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001166
Hanno Becker16970d22017-10-10 15:56:37 +01001167/*
1168 * Wait for an event from the underlying transport or the timer
1169 * (Used in event-driven IO mode).
1170 */
1171#if !defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001172int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001173 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +01001174#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001175int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001176 mbedtls_timing_delay_context *timer,
1177 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +01001178#endif
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001179{
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001180 int ret;
Hanno Becker16970d22017-10-10 15:56:37 +01001181 int poll_type = 0;
1182
1183 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
1184 poll_type = MBEDTLS_NET_POLL_WRITE;
1185 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
1186 poll_type = MBEDTLS_NET_POLL_READ;
1187#if !defined(MBEDTLS_TIMING_C)
1188 else
Hanno Beckeref527962018-03-15 15:49:24 +00001189 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +01001190#endif
1191
1192 while( 1 )
1193 {
Hanno Becker197a91c2017-10-31 10:58:53 +00001194 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +01001195#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001196 if( timer != NULL &&
1197 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +01001198 {
Hanno Becker16970d22017-10-10 15:56:37 +01001199 break;
1200 }
Hanno Becker197a91c2017-10-31 10:58:53 +00001201#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +01001202
Hanno Becker197a91c2017-10-31 10:58:53 +00001203 /* Check if underlying transport became available */
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001204 if( poll_type != 0 )
Hanno Becker16970d22017-10-10 15:56:37 +01001205 {
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001206 ret = mbedtls_net_poll( fd, poll_type, 0 );
1207 if( ret < 0 )
1208 return( ret );
1209 if( ret == poll_type )
1210 break;
Hanno Becker16970d22017-10-10 15:56:37 +01001211 }
1212 }
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001213
1214 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +01001215}
1216
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001217int main( int argc, char *argv[] )
1218{
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00001219 int ret = 0, len, written, frags, exchanges_left;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001220 int version_suites[4][2];
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001221 unsigned char* buf = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001222#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
1223 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerfbb17802013-04-17 19:10:21 +02001224 size_t psk_len = 0;
Paul Bakker9b7fb6f2014-06-12 23:01:43 +02001225 psk_entry *psk_info = NULL;
Paul Bakkered27a042013-04-18 22:46:23 +02001226#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +02001227 const char *pers = "ssl_server2";
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02001228 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02001229 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001230#if defined(MBEDTLS_SSL_COOKIE_C)
1231 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001232#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001233
Gilles Peskineef86ab22017-05-05 18:59:02 +02001234#if defined(MBEDTLS_X509_CRT_PARSE_C)
1235 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
1236#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001237 mbedtls_entropy_context entropy;
1238 mbedtls_ctr_drbg_context ctr_drbg;
1239 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001240 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001241#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001242 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001243#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001244#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001245 unsigned char renego_period[8] = { 0 };
1246#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001247#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +02001248 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001249 mbedtls_x509_crt cacert;
1250 mbedtls_x509_crt srvcert;
1251 mbedtls_pk_context pkey;
1252 mbedtls_x509_crt srvcert2;
1253 mbedtls_pk_context pkey2;
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02001254 int key_cert_init = 0, key_cert_init2 = 0;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001255#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001256 ssl_async_key_context_t ssl_async_keys;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001257#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001258#endif /* MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001259#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1260 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001261#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001262#if defined(MBEDTLS_SSL_CACHE_C)
1263 mbedtls_ssl_cache_context cache;
Paul Bakker0a597072012-09-25 21:55:46 +00001264#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001265#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1266 mbedtls_ssl_ticket_context ticket_ctx;
1267#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02001268#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001269 sni_entry *sni_info = NULL;
1270#endif
Hanno Beckere6706e62017-05-15 16:05:15 +01001271#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +01001272 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +01001273 const mbedtls_ecp_curve_info * curve_cur;
1274#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001275#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +01001276 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001277#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001278#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Simon Butchercce68be2018-07-23 14:26:09 +01001279 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
Paul Bakker82024bf2013-07-04 11:52:32 +02001280#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001281
Hanno Becker1029ace2019-04-09 17:28:10 +01001282#if defined(MBEDTLS_SSL_CID)
1283 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
1284 size_t cid_len = 0;
1285#endif
1286
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001287 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001288 char *p, *q;
1289 const int *list;
1290
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001291#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1292 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
Paul Bakker82024bf2013-07-04 11:52:32 +02001293#endif
1294
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001295 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +02001296 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001297 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001298 mbedtls_net_init( &client_fd );
1299 mbedtls_net_init( &listen_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +02001300 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001301 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +02001302 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001303#if defined(MBEDTLS_X509_CRT_PARSE_C)
1304 mbedtls_x509_crt_init( &cacert );
1305 mbedtls_x509_crt_init( &srvcert );
1306 mbedtls_pk_init( &pkey );
1307 mbedtls_x509_crt_init( &srvcert2 );
1308 mbedtls_pk_init( &pkey2 );
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001309#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
1310 memset( &ssl_async_keys, 0, sizeof( ssl_async_keys ) );
1311#endif
Paul Bakkered27a042013-04-18 22:46:23 +02001312#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001313#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1314 mbedtls_dhm_init( &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001315#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001316#if defined(MBEDTLS_SSL_CACHE_C)
1317 mbedtls_ssl_cache_init( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00001318#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001319#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1320 mbedtls_ssl_ticket_init( &ticket_ctx );
1321#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001322#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +02001323 memset( (void *) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001324#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001325#if defined(MBEDTLS_SSL_COOKIE_C)
1326 mbedtls_ssl_cookie_init( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001327#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001328
Paul Bakkerc1283d32014-08-18 11:05:51 +02001329#if !defined(_WIN32)
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001330 /* Abort cleanly on SIGTERM and SIGINT */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001331 signal( SIGTERM, term_handler );
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001332 signal( SIGINT, term_handler );
Paul Bakkerc1283d32014-08-18 11:05:51 +02001333#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001334
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001335 if( argc == 0 )
1336 {
1337 usage:
1338 if( ret == 0 )
1339 ret = 1;
1340
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001341 mbedtls_printf( USAGE );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001342
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001343 list = mbedtls_ssl_list_ciphersuites();
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001344 while( *list )
1345 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001346 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +02001347 list++;
1348 if( !*list )
1349 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001350 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001351 list++;
1352 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001353 mbedtls_printf("\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001354 goto exit;
1355 }
1356
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001357 opt.buffer_size = DFL_IO_BUF_LEN;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001358 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001359 opt.server_port = DFL_SERVER_PORT;
1360 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker16970d22017-10-10 15:56:37 +01001361 opt.event = DFL_EVENT;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001362 opt.response_size = DFL_RESPONSE_SIZE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001363 opt.nbio = DFL_NBIO;
Hanno Becker1029ace2019-04-09 17:28:10 +01001364 opt.cid_enabled = DFL_CID_ENABLED;
1365 opt.cid_val = DFL_CID_VALUE;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001366 opt.read_timeout = DFL_READ_TIMEOUT;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001367 opt.ca_file = DFL_CA_FILE;
1368 opt.ca_path = DFL_CA_PATH;
1369 opt.crt_file = DFL_CRT_FILE;
1370 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001371 opt.crt_file2 = DFL_CRT_FILE2;
1372 opt.key_file2 = DFL_KEY_FILE2;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001373 opt.async_operations = DFL_ASYNC_OPERATIONS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001374 opt.async_private_delay1 = DFL_ASYNC_PRIVATE_DELAY1;
1375 opt.async_private_delay2 = DFL_ASYNC_PRIVATE_DELAY2;
1376 opt.async_private_error = DFL_ASYNC_PRIVATE_ERROR;
Paul Bakkerfbb17802013-04-17 19:10:21 +02001377 opt.psk = DFL_PSK;
1378 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001379 opt.psk_list = DFL_PSK_LIST;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001380 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001381 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001382 opt.version_suites = DFL_VERSION_SUITES;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001383 opt.renegotiation = DFL_RENEGOTIATION;
1384 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001385 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001386 opt.renego_delay = DFL_RENEGO_DELAY;
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001387 opt.renego_period = DFL_RENEGO_PERIOD;
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001388 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001389 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001390 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001391 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +02001392 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001393 opt.auth_mode = DFL_AUTH_MODE;
Janos Follath4817e272017-04-10 13:44:33 +01001394 opt.cert_req_ca_list = DFL_CERT_REQ_CA_LIST;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001395 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001396 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001397 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001398 opt.ticket_timeout = DFL_TICKET_TIMEOUT;
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001399 opt.cache_max = DFL_CACHE_MAX;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001400 opt.cache_timeout = DFL_CACHE_TIMEOUT;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001401 opt.sni = DFL_SNI;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001402 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +01001403 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001404 opt.dhm_file = DFL_DHM_FILE;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001405 opt.transport = DFL_TRANSPORT;
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001406 opt.cookies = DFL_COOKIES;
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001407 opt.anti_replay = DFL_ANTI_REPLAY;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001408 opt.hs_to_min = DFL_HS_TO_MIN;
1409 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001410 opt.dtls_mtu = DFL_DTLS_MTU;
Hanno Beckere7675d02018-08-14 13:28:56 +01001411 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001412 opt.badmac_limit = DFL_BADMAC_LIMIT;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001413 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001414 opt.etm = DFL_ETM;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001415
1416 for( i = 1; i < argc; i++ )
1417 {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001418 p = argv[i];
1419 if( ( q = strchr( p, '=' ) ) == NULL )
1420 goto usage;
1421 *q++ = '\0';
1422
1423 if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001424 opt.server_port = q;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001425 else if( strcmp( p, "server_addr" ) == 0 )
1426 opt.server_addr = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001427 else if( strcmp( p, "dtls" ) == 0 )
1428 {
1429 int t = atoi( q );
1430 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001431 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001432 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001433 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001434 else
1435 goto usage;
1436 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001437 else if( strcmp( p, "debug_level" ) == 0 )
1438 {
1439 opt.debug_level = atoi( q );
1440 if( opt.debug_level < 0 || opt.debug_level > 65535 )
1441 goto usage;
1442 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001443 else if( strcmp( p, "nbio" ) == 0 )
1444 {
1445 opt.nbio = atoi( q );
1446 if( opt.nbio < 0 || opt.nbio > 2 )
1447 goto usage;
1448 }
Hanno Becker16970d22017-10-10 15:56:37 +01001449 else if( strcmp( p, "event" ) == 0 )
1450 {
1451 opt.event = atoi( q );
1452 if( opt.event < 0 || opt.event > 2 )
1453 goto usage;
1454 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001455 else if( strcmp( p, "read_timeout" ) == 0 )
1456 opt.read_timeout = atoi( q );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001457 else if( strcmp( p, "buffer_size" ) == 0 )
1458 {
1459 opt.buffer_size = atoi( q );
1460 if( opt.buffer_size < 1 || opt.buffer_size > MBEDTLS_SSL_MAX_CONTENT_LEN + 1 )
1461 goto usage;
1462 }
1463 else if( strcmp( p, "response_size" ) == 0 )
1464 {
1465 opt.response_size = atoi( q );
1466 if( opt.response_size < 0 || opt.response_size > MBEDTLS_SSL_MAX_CONTENT_LEN )
1467 goto usage;
1468 if( opt.buffer_size < opt.response_size )
1469 opt.buffer_size = opt.response_size;
1470 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001471 else if( strcmp( p, "ca_file" ) == 0 )
1472 opt.ca_file = q;
1473 else if( strcmp( p, "ca_path" ) == 0 )
1474 opt.ca_path = q;
1475 else if( strcmp( p, "crt_file" ) == 0 )
1476 opt.crt_file = q;
1477 else if( strcmp( p, "key_file" ) == 0 )
1478 opt.key_file = q;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001479 else if( strcmp( p, "crt_file2" ) == 0 )
1480 opt.crt_file2 = q;
1481 else if( strcmp( p, "key_file2" ) == 0 )
1482 opt.key_file2 = q;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001483 else if( strcmp( p, "dhm_file" ) == 0 )
1484 opt.dhm_file = q;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001485#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001486 else if( strcmp( p, "async_operations" ) == 0 )
1487 opt.async_operations = q;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001488 else if( strcmp( p, "async_private_delay1" ) == 0 )
1489 opt.async_private_delay1 = atoi( q );
1490 else if( strcmp( p, "async_private_delay2" ) == 0 )
1491 opt.async_private_delay2 = atoi( q );
1492 else if( strcmp( p, "async_private_error" ) == 0 )
1493 {
1494 int n = atoi( q );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01001495 if( n < -SSL_ASYNC_INJECT_ERROR_MAX ||
1496 n > SSL_ASYNC_INJECT_ERROR_MAX )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001497 {
1498 ret = 2;
1499 goto usage;
1500 }
1501 opt.async_private_error = n;
1502 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001503#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Hanno Becker1029ace2019-04-09 17:28:10 +01001504#if defined(MBEDTLS_SSL_CID)
1505 else if( strcmp( p, "cid" ) == 0 )
1506 {
1507 opt.cid_enabled = atoi( q );
1508 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
1509 goto usage;
1510 }
1511 else if( strcmp( p, "cid_val" ) == 0 )
1512 {
1513 opt.cid_val = q;
1514 }
1515#endif /* MBEDTLS_SSL_CID */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001516 else if( strcmp( p, "psk" ) == 0 )
1517 opt.psk = q;
1518 else if( strcmp( p, "psk_identity" ) == 0 )
1519 opt.psk_identity = q;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001520 else if( strcmp( p, "psk_list" ) == 0 )
1521 opt.psk_list = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001522 else if( strcmp( p, "ecjpake_pw" ) == 0 )
1523 opt.ecjpake_pw = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001524 else if( strcmp( p, "force_ciphersuite" ) == 0 )
1525 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001526 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001527
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +02001528 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001529 {
1530 ret = 2;
1531 goto usage;
1532 }
1533 opt.force_ciphersuite[1] = 0;
1534 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001535 else if( strcmp( p, "curves" ) == 0 )
1536 opt.curves = q;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001537 else if( strcmp( p, "version_suites" ) == 0 )
1538 opt.version_suites = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001539 else if( strcmp( p, "renegotiation" ) == 0 )
1540 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001541 opt.renegotiation = (atoi( q )) ?
1542 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1543 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001544 }
1545 else if( strcmp( p, "allow_legacy" ) == 0 )
1546 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001547 switch( atoi( q ) )
1548 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001549 case -1:
1550 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1551 break;
1552 case 0:
1553 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1554 break;
1555 case 1:
1556 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1557 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001558 default: goto usage;
1559 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001560 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001561 else if( strcmp( p, "renegotiate" ) == 0 )
1562 {
1563 opt.renegotiate = atoi( q );
1564 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1565 goto usage;
1566 }
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001567 else if( strcmp( p, "renego_delay" ) == 0 )
1568 {
1569 opt.renego_delay = atoi( q );
1570 }
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001571 else if( strcmp( p, "renego_period" ) == 0 )
1572 {
Andres AG0b736db2017-02-08 14:05:57 +00001573#if defined(_MSC_VER)
1574 opt.renego_period = _strtoui64( q, NULL, 10 );
1575#else
1576 if( sscanf( q, "%" SCNu64, &opt.renego_period ) != 1 )
1577 goto usage;
1578#endif /* _MSC_VER */
1579 if( opt.renego_period < 2 )
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001580 goto usage;
1581 }
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001582 else if( strcmp( p, "exchanges" ) == 0 )
1583 {
1584 opt.exchanges = atoi( q );
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02001585 if( opt.exchanges < 0 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001586 goto usage;
1587 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001588 else if( strcmp( p, "min_version" ) == 0 )
1589 {
1590 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001591 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001592 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001593 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001594 else if( strcmp( q, "tls1_1" ) == 0 ||
1595 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001596 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001597 else if( strcmp( q, "tls1_2" ) == 0 ||
1598 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001599 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001600 else
1601 goto usage;
1602 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001603 else if( strcmp( p, "max_version" ) == 0 )
1604 {
1605 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001606 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001607 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001608 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001609 else if( strcmp( q, "tls1_1" ) == 0 ||
1610 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001611 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001612 else if( strcmp( q, "tls1_2" ) == 0 ||
1613 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001614 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001615 else
1616 goto usage;
1617 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001618 else if( strcmp( p, "arc4" ) == 0 )
1619 {
1620 switch( atoi( q ) )
1621 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001622 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
1623 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001624 default: goto usage;
1625 }
1626 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001627 else if( strcmp( p, "allow_sha1" ) == 0 )
1628 {
1629 switch( atoi( q ) )
1630 {
1631 case 0: opt.allow_sha1 = 0; break;
1632 case 1: opt.allow_sha1 = 1; break;
1633 default: goto usage;
1634 }
1635 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001636 else if( strcmp( p, "force_version" ) == 0 )
1637 {
1638 if( strcmp( q, "ssl3" ) == 0 )
1639 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001640 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
1641 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001642 }
1643 else if( strcmp( q, "tls1" ) == 0 )
1644 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001645 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
1646 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001647 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001648 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001649 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001650 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1651 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001652 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001653 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001654 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001655 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1656 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001657 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001658 else if( strcmp( q, "dtls1" ) == 0 )
1659 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001660 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1661 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
1662 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001663 }
1664 else if( strcmp( q, "dtls1_2" ) == 0 )
1665 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001666 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1667 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1668 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001669 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001670 else
1671 goto usage;
1672 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001673 else if( strcmp( p, "auth_mode" ) == 0 )
1674 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02001675 if( ( opt.auth_mode = get_auth_mode( q ) ) < 0 )
Paul Bakker91ebfb52012-11-23 14:04:08 +01001676 goto usage;
1677 }
Janos Follath4817e272017-04-10 13:44:33 +01001678 else if( strcmp( p, "cert_req_ca_list" ) == 0 )
1679 {
1680 opt.cert_req_ca_list = atoi( q );
1681 if( opt.cert_req_ca_list < 0 || opt.cert_req_ca_list > 1 )
1682 goto usage;
1683 }
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001684 else if( strcmp( p, "max_frag_len" ) == 0 )
1685 {
1686 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001687 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001688 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001689 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001690 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001691 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001692 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001693 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001694 else
1695 goto usage;
1696 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001697 else if( strcmp( p, "alpn" ) == 0 )
1698 {
1699 opt.alpn_string = q;
1700 }
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001701 else if( strcmp( p, "trunc_hmac" ) == 0 )
1702 {
1703 switch( atoi( q ) )
1704 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001705 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1706 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001707 default: goto usage;
1708 }
1709 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001710 else if( strcmp( p, "extended_ms" ) == 0 )
1711 {
1712 switch( atoi( q ) )
1713 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001714 case 0:
1715 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1716 break;
1717 case 1:
1718 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1719 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001720 default: goto usage;
1721 }
1722 }
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001723 else if( strcmp( p, "etm" ) == 0 )
1724 {
1725 switch( atoi( q ) )
1726 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001727 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1728 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001729 default: goto usage;
1730 }
1731 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001732 else if( strcmp( p, "tickets" ) == 0 )
1733 {
1734 opt.tickets = atoi( q );
1735 if( opt.tickets < 0 || opt.tickets > 1 )
1736 goto usage;
1737 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001738 else if( strcmp( p, "ticket_timeout" ) == 0 )
1739 {
1740 opt.ticket_timeout = atoi( q );
1741 if( opt.ticket_timeout < 0 )
1742 goto usage;
1743 }
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001744 else if( strcmp( p, "cache_max" ) == 0 )
1745 {
1746 opt.cache_max = atoi( q );
1747 if( opt.cache_max < 0 )
1748 goto usage;
1749 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001750 else if( strcmp( p, "cache_timeout" ) == 0 )
1751 {
1752 opt.cache_timeout = atoi( q );
1753 if( opt.cache_timeout < 0 )
1754 goto usage;
1755 }
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001756 else if( strcmp( p, "cookies" ) == 0 )
1757 {
1758 opt.cookies = atoi( q );
1759 if( opt.cookies < -1 || opt.cookies > 1)
1760 goto usage;
1761 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001762 else if( strcmp( p, "anti_replay" ) == 0 )
1763 {
1764 opt.anti_replay = atoi( q );
1765 if( opt.anti_replay < 0 || opt.anti_replay > 1)
1766 goto usage;
1767 }
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001768 else if( strcmp( p, "badmac_limit" ) == 0 )
1769 {
1770 opt.badmac_limit = atoi( q );
1771 if( opt.badmac_limit < 0 )
1772 goto usage;
1773 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001774 else if( strcmp( p, "hs_timeout" ) == 0 )
1775 {
1776 if( ( p = strchr( q, '-' ) ) == NULL )
1777 goto usage;
1778 *p++ = '\0';
1779 opt.hs_to_min = atoi( q );
1780 opt.hs_to_max = atoi( p );
1781 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1782 goto usage;
1783 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001784 else if( strcmp( p, "mtu" ) == 0 )
1785 {
1786 opt.dtls_mtu = atoi( q );
1787 if( opt.dtls_mtu < 0 )
1788 goto usage;
1789 }
Hanno Beckere7675d02018-08-14 13:28:56 +01001790 else if( strcmp( p, "dgram_packing" ) == 0 )
1791 {
1792 opt.dgram_packing = atoi( q );
1793 if( opt.dgram_packing != 0 &&
1794 opt.dgram_packing != 1 )
1795 {
1796 goto usage;
1797 }
1798 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001799 else if( strcmp( p, "sni" ) == 0 )
1800 {
1801 opt.sni = q;
1802 }
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +01001803 else if( strcmp( p, "query_config" ) == 0 )
1804 {
1805 return query_config( q );
1806 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001807 else
1808 goto usage;
1809 }
1810
Hanno Becker16970d22017-10-10 15:56:37 +01001811 /* Event-driven IO is incompatible with the above custom
1812 * receive and send functions, as the polling builds on
1813 * refers to the underlying net_context. */
1814 if( opt.event == 1 && opt.nbio != 1 )
1815 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001816 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001817 opt.nbio = 1;
1818 }
1819
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001820#if defined(MBEDTLS_DEBUG_C)
1821 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001822#endif
Andrzej Kurekda4029d2018-06-20 07:07:55 -04001823 buf = mbedtls_calloc( 1, opt.buffer_size + 1 );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001824 if( buf == NULL )
1825 {
Andrzej Kurek755890f2018-06-20 08:17:04 -04001826 mbedtls_printf( "Could not allocate %u bytes\n", opt.buffer_size );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001827 ret = 3;
1828 goto exit;
1829 }
Paul Bakkerc73079a2014-04-25 16:34:30 +02001830
Paul Bakkerc1516be2013-06-29 16:01:32 +02001831 if( opt.force_ciphersuite[0] > 0 )
1832 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001833 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001834 ciphersuite_info =
1835 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001836
Paul Bakker5b55b792013-07-19 13:43:43 +02001837 if( opt.max_version != -1 &&
1838 ciphersuite_info->min_minor_ver > opt.max_version )
1839 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001840 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker5b55b792013-07-19 13:43:43 +02001841 ret = 2;
1842 goto usage;
1843 }
1844 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02001845 ciphersuite_info->max_minor_ver < opt.min_version )
1846 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001847 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001848 ret = 2;
1849 goto usage;
1850 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001851
1852 /* If we select a version that's not supported by
1853 * this suite, then there will be no common ciphersuite... */
1854 if( opt.max_version == -1 ||
1855 opt.max_version > ciphersuite_info->max_minor_ver )
1856 {
Paul Bakker5b55b792013-07-19 13:43:43 +02001857 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001858 }
Paul Bakker5b55b792013-07-19 13:43:43 +02001859 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001860 {
Paul Bakker5b55b792013-07-19 13:43:43 +02001861 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001862 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001863 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1864 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1865 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001866 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001867
1868 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001869 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001870 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001871 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001872 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001873 mbedtls_printf("forced RC4 ciphersuite with RC4 disabled\n");
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001874 ret = 2;
1875 goto usage;
1876 }
1877
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001878 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001879 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001880 }
1881
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001882 if( opt.version_suites != NULL )
1883 {
1884 const char *name[4] = { 0 };
1885
1886 /* Parse 4-element coma-separated list */
1887 for( i = 0, p = (char *) opt.version_suites;
1888 i < 4 && *p != '\0';
1889 i++ )
1890 {
1891 name[i] = p;
1892
1893 /* Terminate the current string and move on to next one */
1894 while( *p != ',' && *p != '\0' )
1895 p++;
1896 if( *p == ',' )
1897 *p++ = '\0';
1898 }
1899
1900 if( i != 4 )
1901 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001902 mbedtls_printf( "too few values for version_suites\n" );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001903 ret = 1;
1904 goto exit;
1905 }
1906
1907 memset( version_suites, 0, sizeof( version_suites ) );
1908
1909 /* Get the suites identifiers from their name */
1910 for( i = 0; i < 4; i++ )
1911 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001912 version_suites[i][0] = mbedtls_ssl_get_ciphersuite_id( name[i] );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001913
1914 if( version_suites[i][0] == 0 )
1915 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001916 mbedtls_printf( "unknown ciphersuite: '%s'\n", name[i] );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001917 ret = 2;
1918 goto usage;
1919 }
1920 }
1921 }
1922
Hanno Becker1029ace2019-04-09 17:28:10 +01001923#if defined(MBEDTLS_SSL_CID)
1924 if( strlen( opt.cid_val ) )
1925 {
1926 cid_len = strlen( opt.cid_val ) / 2;
1927 if( cid_len > sizeof( cid ) )
1928 {
1929 mbedtls_printf( "CID too long\n" );
1930 goto exit;
1931 }
1932
1933 if( unhexify( cid, opt.cid_val, &cid_len ) != 0 )
1934 {
1935 mbedtls_printf( "CID not valid hex\n" );
1936 goto exit;
1937 }
1938 }
1939#endif /* MBEDTLS_SSL_CID */
1940
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001941#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001942 /*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001943 * Unhexify the pre-shared key and parse the list if any given
Paul Bakkerfbb17802013-04-17 19:10:21 +02001944 */
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001945 if( unhexify( psk, opt.psk, &psk_len ) != 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +02001946 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001947 mbedtls_printf( "pre-shared key not valid hex\n" );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001948 goto exit;
1949 }
1950
1951 if( opt.psk_list != NULL )
1952 {
1953 if( ( psk_info = psk_parse( opt.psk_list ) ) == NULL )
Paul Bakkerfbb17802013-04-17 19:10:21 +02001954 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001955 mbedtls_printf( "psk_list invalid" );
Paul Bakkerfbb17802013-04-17 19:10:21 +02001956 goto exit;
1957 }
Paul Bakkerfbb17802013-04-17 19:10:21 +02001958 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001959#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001960
Hanno Beckere6706e62017-05-15 16:05:15 +01001961#if defined(MBEDTLS_ECP_C)
1962 if( opt.curves != NULL )
1963 {
1964 p = (char *) opt.curves;
1965 i = 0;
1966
1967 if( strcmp( p, "none" ) == 0 )
1968 {
1969 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1970 }
1971 else if( strcmp( p, "default" ) != 0 )
1972 {
1973 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001974 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001975 {
1976 q = p;
1977
1978 /* Terminate the current string */
1979 while( *p != ',' && *p != '\0' )
1980 p++;
1981 if( *p == ',' )
1982 *p++ = '\0';
1983
1984 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1985 {
1986 curve_list[i++] = curve_cur->grp_id;
1987 }
1988 else
1989 {
1990 mbedtls_printf( "unknown curve %s\n", q );
1991 mbedtls_printf( "supported curves: " );
1992 for( curve_cur = mbedtls_ecp_curve_list();
1993 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1994 curve_cur++ )
1995 {
1996 mbedtls_printf( "%s ", curve_cur->name );
1997 }
1998 mbedtls_printf( "\n" );
1999 goto exit;
2000 }
2001 }
2002
2003 mbedtls_printf("Number of curves: %d\n", i );
2004
Hanno Becker8651a432017-06-09 16:13:22 +01002005 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01002006 {
Hanno Becker8651a432017-06-09 16:13:22 +01002007 mbedtls_printf( "curves list too long, maximum %d",
2008 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01002009 goto exit;
2010 }
2011
2012 curve_list[i] = MBEDTLS_ECP_DP_NONE;
2013 }
2014 }
2015#endif /* MBEDTLS_ECP_C */
2016
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002017#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002018 if( opt.alpn_string != NULL )
2019 {
2020 p = (char *) opt.alpn_string;
2021 i = 0;
2022
2023 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01002024 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002025 {
2026 alpn_list[i++] = p;
2027
2028 /* Terminate the current string and move on to next one */
2029 while( *p != ',' && *p != '\0' )
2030 p++;
2031 if( *p == ',' )
2032 *p++ = '\0';
2033 }
2034 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002035#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002036
Paul Bakkerfbb17802013-04-17 19:10:21 +02002037 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002038 * 0. Initialize the RNG and the session data
2039 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002040 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002041 fflush( stdout );
2042
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002043 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002044 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
2045 &entropy, (const unsigned char *) pers,
2046 strlen( pers ) ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002047 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002048 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
2049 -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002050 goto exit;
2051 }
2052
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002053 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002054
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002055#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002056 /*
2057 * 1.1. Load the trusted CA
2058 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002059 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002060 fflush( stdout );
2061
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002062#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002063 if( strlen( opt.ca_path ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002064 if( strcmp( opt.ca_path, "none" ) == 0 )
2065 ret = 0;
2066 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002067 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002068 else if( strlen( opt.ca_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002069 if( strcmp( opt.ca_file, "none" ) == 0 )
2070 ret = 0;
2071 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002072 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkerddf26b42013-09-18 13:46:23 +02002073 else
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002074#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002075#if defined(MBEDTLS_CERTS_C)
2076 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002077 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002078 ret = mbedtls_x509_crt_parse( &cacert,
2079 (const unsigned char *) mbedtls_test_cas[i],
2080 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002081 if( ret != 0 )
2082 break;
2083 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002084#else
2085 {
2086 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002087 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002088 }
2089#endif
2090 if( ret < 0 )
2091 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002092 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002093 goto exit;
2094 }
2095
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002096 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002097
2098 /*
2099 * 1.2. Load own certificate and private key
2100 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002101 mbedtls_printf( " . Loading the server cert. and key..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002102 fflush( stdout );
2103
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002104#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002105 if( strlen( opt.crt_file ) && strcmp( opt.crt_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002106 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002107 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002108 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert, opt.crt_file ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002109 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002110 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file returned -0x%x\n\n",
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002111 -ret );
2112 goto exit;
2113 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002114 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002115 if( strlen( opt.key_file ) && strcmp( opt.key_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002116 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002117 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002118 if( ( ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002119 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002120 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002121 goto exit;
2122 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002123 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002124 if( key_cert_init == 1 )
2125 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002126 mbedtls_printf( " failed\n ! crt_file without key_file or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002127 goto exit;
2128 }
2129
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002130 if( strlen( opt.crt_file2 ) && strcmp( opt.crt_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002131 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002132 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002133 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert2, opt.crt_file2 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002134 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002135 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file(2) returned -0x%x\n\n",
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002136 -ret );
2137 goto exit;
2138 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002139 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002140 if( strlen( opt.key_file2 ) && strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002141 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002142 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002143 if( ( ret = mbedtls_pk_parse_keyfile( &pkey2, opt.key_file2, "" ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002144 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002145 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile(2) returned -0x%x\n\n",
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002146 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002147 goto exit;
2148 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002149 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002150 if( key_cert_init2 == 1 )
2151 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002152 mbedtls_printf( " failed\n ! crt_file2 without key_file2 or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002153 goto exit;
2154 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002155#endif
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002156 if( key_cert_init == 0 &&
2157 strcmp( opt.crt_file, "none" ) != 0 &&
2158 strcmp( opt.key_file, "none" ) != 0 &&
2159 key_cert_init2 == 0 &&
2160 strcmp( opt.crt_file2, "none" ) != 0 &&
2161 strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002162 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002163#if !defined(MBEDTLS_CERTS_C)
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002164 mbedtls_printf( "Not certificated or key provided, and \nMBEDTLS_CERTS_C not defined!\n" );
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002165 goto exit;
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002166#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002167#if defined(MBEDTLS_RSA_C)
2168 if( ( ret = mbedtls_x509_crt_parse( &srvcert,
2169 (const unsigned char *) mbedtls_test_srv_crt_rsa,
2170 mbedtls_test_srv_crt_rsa_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002171 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002172 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2173 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002174 goto exit;
2175 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002176 if( ( ret = mbedtls_pk_parse_key( &pkey,
2177 (const unsigned char *) mbedtls_test_srv_key_rsa,
2178 mbedtls_test_srv_key_rsa_len, NULL, 0 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002179 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002180 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
2181 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002182 goto exit;
2183 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002184 key_cert_init = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002185#endif /* MBEDTLS_RSA_C */
2186#if defined(MBEDTLS_ECDSA_C)
2187 if( ( ret = mbedtls_x509_crt_parse( &srvcert2,
2188 (const unsigned char *) mbedtls_test_srv_crt_ec,
2189 mbedtls_test_srv_crt_ec_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002190 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002191 mbedtls_printf( " failed\n ! x509_crt_parse2 returned -0x%x\n\n",
2192 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002193 goto exit;
2194 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002195 if( ( ret = mbedtls_pk_parse_key( &pkey2,
2196 (const unsigned char *) mbedtls_test_srv_key_ec,
2197 mbedtls_test_srv_key_ec_len, NULL, 0 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002198 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002199 mbedtls_printf( " failed\n ! pk_parse_key2 returned -0x%x\n\n",
2200 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002201 goto exit;
2202 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002203 key_cert_init2 = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002204#endif /* MBEDTLS_ECDSA_C */
2205#endif /* MBEDTLS_CERTS_C */
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002206 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002207
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002208 mbedtls_printf( " ok\n" );
2209#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002210
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002211#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002212 if( opt.dhm_file != NULL )
2213 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002214 mbedtls_printf( " . Loading DHM parameters..." );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002215 fflush( stdout );
2216
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002217 if( ( ret = mbedtls_dhm_parse_dhmfile( &dhm, opt.dhm_file ) ) != 0 )
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002218 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002219 mbedtls_printf( " failed\n ! mbedtls_dhm_parse_dhmfile returned -0x%04X\n\n",
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002220 -ret );
2221 goto exit;
2222 }
2223
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002224 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002225 }
2226#endif
2227
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002228#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002229 if( opt.sni != NULL )
2230 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002231 mbedtls_printf( " . Setting up SNI information..." );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002232 fflush( stdout );
2233
2234 if( ( sni_info = sni_parse( opt.sni ) ) == NULL )
2235 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002236 mbedtls_printf( " failed\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002237 goto exit;
2238 }
2239
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002240 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002241 }
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002242#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002243
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002244 /*
2245 * 2. Setup the listening TCP socket
2246 */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02002247 mbedtls_printf( " . Bind on %s://%s:%s/ ...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002248 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002249 opt.server_addr ? opt.server_addr : "*",
2250 opt.server_port );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002251 fflush( stdout );
2252
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002253 if( ( ret = mbedtls_net_bind( &listen_fd, opt.server_addr, opt.server_port,
2254 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2255 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002256 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002257 mbedtls_printf( " failed\n ! mbedtls_net_bind returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002258 goto exit;
2259 }
2260
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002261 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002262
2263 /*
2264 * 3. Setup stuff
2265 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002266 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002267 fflush( stdout );
2268
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02002269 if( ( ret = mbedtls_ssl_config_defaults( &conf,
2270 MBEDTLS_SSL_IS_SERVER,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02002271 opt.transport,
2272 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002273 {
2274 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n", -ret );
2275 goto exit;
2276 }
2277
Gilles Peskineef86ab22017-05-05 18:59:02 +02002278#if defined(MBEDTLS_X509_CRT_PARSE_C)
2279 /* The default algorithms profile disables SHA-1, but our tests still
2280 rely on it heavily. Hence we allow it here. A real-world server
2281 should use the default profile unless there is a good reason not to. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02002282 if( opt.allow_sha1 > 0 )
2283 {
2284 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
2285 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
Gilles Peskine682df092017-05-11 19:01:11 +02002286 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
Gilles Peskinebc70a182017-05-09 15:59:24 +02002287 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02002288#endif /* MBEDTLS_X509_CRT_PARSE_C */
2289
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002290 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002291 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002292
Janos Follath4817e272017-04-10 13:44:33 +01002293 if( opt.cert_req_ca_list != DFL_CERT_REQ_CA_LIST )
2294 mbedtls_ssl_conf_cert_req_ca_list( &conf, opt.cert_req_ca_list );
2295
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002296#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002297 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002298 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min, opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02002299
Hanno Beckere7675d02018-08-14 13:28:56 +01002300 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01002301 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002302#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002303
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002304#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002305 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002306 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002307 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002308 goto exit;
2309 };
Paul Bakker05decb22013-08-15 13:33:48 +02002310#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002311
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002312#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002313 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002314 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002315#endif
2316
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002317#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002318 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002319 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002320#endif
2321
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002322#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002323 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002324 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002325#endif
2326
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002327#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002328 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002329 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002330 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002331 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002332 goto exit;
2333 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002334#endif
2335
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002336 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
2337 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002338
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002339#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002340 if( opt.cache_max != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002341 mbedtls_ssl_cache_set_max_entries( &cache, opt.cache_max );
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002342
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002343 if( opt.cache_timeout != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002344 mbedtls_ssl_cache_set_timeout( &cache, opt.cache_timeout );
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002345
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002346 mbedtls_ssl_conf_session_cache( &conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +01002347 mbedtls_ssl_cache_get,
2348 mbedtls_ssl_cache_set );
Paul Bakker0a597072012-09-25 21:55:46 +00002349#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002350
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002351#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002352 if( opt.tickets == MBEDTLS_SSL_SESSION_TICKETS_ENABLED )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002353 {
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002354 if( ( ret = mbedtls_ssl_ticket_setup( &ticket_ctx,
2355 mbedtls_ctr_drbg_random, &ctr_drbg,
Manuel Pégourié-Gonnarda0adc1b2015-05-25 10:35:16 +02002356 MBEDTLS_CIPHER_AES_256_GCM,
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002357 opt.ticket_timeout ) ) != 0 )
2358 {
2359 mbedtls_printf( " failed\n ! mbedtls_ssl_ticket_setup returned %d\n\n", ret );
2360 goto exit;
2361 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002362
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002363 mbedtls_ssl_conf_session_tickets_cb( &conf,
2364 mbedtls_ssl_ticket_write,
2365 mbedtls_ssl_ticket_parse,
2366 &ticket_ctx );
2367 }
Paul Bakkera503a632013-08-14 13:48:06 +02002368#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002369
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002370#if defined(MBEDTLS_SSL_PROTO_DTLS)
2371 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002372 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002373#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002374 if( opt.cookies > 0 )
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002375 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002376 if( ( ret = mbedtls_ssl_cookie_setup( &cookie_ctx,
2377 mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002378 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002379 mbedtls_printf( " failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002380 goto exit;
2381 }
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002382
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002383 mbedtls_ssl_conf_dtls_cookies( &conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002384 &cookie_ctx );
2385 }
2386 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002387#endif /* MBEDTLS_SSL_COOKIE_C */
2388#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002389 if( opt.cookies == 0 )
2390 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002391 mbedtls_ssl_conf_dtls_cookies( &conf, NULL, NULL, NULL );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002392 }
2393 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002394#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002395 {
2396 ; /* Nothing to do */
2397 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002398
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002399#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002400 if( opt.anti_replay != DFL_ANTI_REPLAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002401 mbedtls_ssl_conf_dtls_anti_replay( &conf, opt.anti_replay );
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002402#endif
2403
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002404#if defined(MBEDTLS_SSL_DTLS_BADMAC_LIMIT)
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002405 if( opt.badmac_limit != DFL_BADMAC_LIMIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002406 mbedtls_ssl_conf_dtls_badmac_limit( &conf, opt.badmac_limit );
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002407#endif
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002408 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002409#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002410
Paul Bakker41c83d32013-03-20 14:39:14 +01002411 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002412 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002413
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02002414#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002415 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002416 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02002417#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002418
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02002419 if( opt.version_suites != NULL )
2420 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002421 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[0],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002422 MBEDTLS_SSL_MAJOR_VERSION_3,
2423 MBEDTLS_SSL_MINOR_VERSION_0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002424 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[1],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002425 MBEDTLS_SSL_MAJOR_VERSION_3,
2426 MBEDTLS_SSL_MINOR_VERSION_1 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002427 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[2],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002428 MBEDTLS_SSL_MAJOR_VERSION_3,
2429 MBEDTLS_SSL_MINOR_VERSION_2 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002430 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[3],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002431 MBEDTLS_SSL_MAJOR_VERSION_3,
2432 MBEDTLS_SSL_MINOR_VERSION_3 );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02002433 }
2434
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002435 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002436 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002437#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002438 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002439
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002440 if( opt.renego_delay != DFL_RENEGO_DELAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002441 mbedtls_ssl_conf_renegotiation_enforced( &conf, opt.renego_delay );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002442
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002443 if( opt.renego_period != DFL_RENEGO_PERIOD )
2444 {
Andres AG692ad842017-01-19 16:30:57 +00002445 PUT_UINT64_BE( renego_period, opt.renego_period, 0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002446 mbedtls_ssl_conf_renegotiation_period( &conf, renego_period );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002447 }
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01002448#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002449
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002450#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002451 if( strcmp( opt.ca_path, "none" ) != 0 &&
2452 strcmp( opt.ca_file, "none" ) != 0 )
2453 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002454 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002455 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002456 if( key_cert_init )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002457 {
2458 mbedtls_pk_context *pk = &pkey;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002459#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002460 if( opt.async_private_delay1 >= 0 )
2461 {
Gilles Peskine44817442018-06-13 18:09:28 +02002462 ret = ssl_async_set_key( &ssl_async_keys, &srvcert, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002463 opt.async_private_delay1 );
2464 if( ret < 0 )
2465 {
2466 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2467 ret );
2468 goto exit;
2469 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002470 pk = NULL;
2471 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002472#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002473 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002474 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002475 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002476 goto exit;
2477 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002478 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002479 if( key_cert_init2 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002480 {
2481 mbedtls_pk_context *pk = &pkey2;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002482#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002483 if( opt.async_private_delay2 >= 0 )
2484 {
Gilles Peskine44817442018-06-13 18:09:28 +02002485 ret = ssl_async_set_key( &ssl_async_keys, &srvcert2, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002486 opt.async_private_delay2 );
2487 if( ret < 0 )
2488 {
2489 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2490 ret );
2491 goto exit;
2492 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002493 pk = NULL;
2494 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002495#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002496 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert2, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002497 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002498 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002499 goto exit;
2500 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002501 }
2502
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002503#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002504 if( opt.async_operations[0] != '-' )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002505 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002506 mbedtls_ssl_async_sign_t *sign = NULL;
2507 mbedtls_ssl_async_decrypt_t *decrypt = NULL;
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002508 const char *r;
2509 for( r = opt.async_operations; *r; r++ )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002510 {
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002511 switch( *r )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002512 {
2513 case 'd':
2514 decrypt = ssl_async_decrypt;
2515 break;
2516 case 's':
2517 sign = ssl_async_sign;
2518 break;
2519 }
2520 }
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002521 ssl_async_keys.inject_error = ( opt.async_private_error < 0 ?
2522 - opt.async_private_error :
2523 opt.async_private_error );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002524 ssl_async_keys.f_rng = mbedtls_ctr_drbg_random;
2525 ssl_async_keys.p_rng = &ctr_drbg;
2526 mbedtls_ssl_conf_async_private_cb( &conf,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002527 sign,
2528 decrypt,
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002529 ssl_async_resume,
2530 ssl_async_cancel,
2531 &ssl_async_keys );
2532 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002533#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002534#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +02002535
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002536#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002537 if( opt.sni != NULL )
Gilles Peskine166ce742018-04-30 10:30:49 +02002538 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002539 mbedtls_ssl_conf_sni( &conf, sni_callback, sni_info );
Gilles Peskine166ce742018-04-30 10:30:49 +02002540#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
2541 if( opt.async_private_delay2 >= 0 )
2542 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002543 sni_entry *cur;
2544 for( cur = sni_info; cur != NULL; cur = cur->next )
Gilles Peskine166ce742018-04-30 10:30:49 +02002545 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002546 ret = ssl_async_set_key( &ssl_async_keys,
Gilles Peskine44817442018-06-13 18:09:28 +02002547 cur->cert, cur->key, 1,
Gilles Peskinee2479892018-06-13 18:06:51 +02002548 opt.async_private_delay2 );
2549 if( ret < 0 )
2550 {
2551 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2552 ret );
2553 goto exit;
2554 }
2555 cur->key = NULL;
Gilles Peskine166ce742018-04-30 10:30:49 +02002556 }
Gilles Peskine166ce742018-04-30 10:30:49 +02002557 }
2558#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
2559 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002560#endif
2561
Hanno Beckere6706e62017-05-15 16:05:15 +01002562#if defined(MBEDTLS_ECP_C)
2563 if( opt.curves != NULL &&
2564 strcmp( opt.curves, "default" ) != 0 )
2565 {
2566 mbedtls_ssl_conf_curves( &conf, curve_list );
2567 }
2568#endif
2569
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002570#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002571 if( strlen( opt.psk ) != 0 && strlen( opt.psk_identity ) != 0 )
2572 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002573 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002574 (const unsigned char *) opt.psk_identity,
2575 strlen( opt.psk_identity ) );
2576 if( ret != 0 )
2577 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002578 mbedtls_printf( " failed\n mbedtls_ssl_conf_psk returned -0x%04X\n\n", - ret );
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002579 goto exit;
2580 }
2581 }
2582
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002583 if( opt.psk_list != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002584 mbedtls_ssl_conf_psk_cb( &conf, psk_callback, psk_info );
Paul Bakkered27a042013-04-18 22:46:23 +02002585#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002586
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002587#if defined(MBEDTLS_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +00002588 /*
2589 * Use different group than default DHM group
2590 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002591#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002592 if( opt.dhm_file != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002593 ret = mbedtls_ssl_conf_dh_param_ctx( &conf, &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002594#endif
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002595 if( ret != 0 )
2596 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002597 mbedtls_printf( " failed\n mbedtls_ssl_conf_dh_param returned -0x%04X\n\n", - ret );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002598 goto exit;
2599 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002600#endif
2601
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002602 if( opt.min_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002603 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.min_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00002604
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002605 if( opt.max_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002606 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.max_version );
Paul Bakkerc1516be2013-06-29 16:01:32 +02002607
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002608 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2609 {
2610 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", -ret );
2611 goto exit;
2612 }
2613
2614 if( opt.nbio == 2 )
2615 mbedtls_ssl_set_bio( &ssl, &client_fd, my_send, my_recv, NULL );
2616 else
2617 mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02002618 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002619
Hanno Becker1029ace2019-04-09 17:28:10 +01002620#if defined(MBEDTLS_SSL_CID)
2621 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2622 {
2623 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
2624 cid, cid_len ) ) != 0 )
2625 {
2626 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2627 ret );
2628 goto exit;
2629 }
2630 }
2631#endif /* MBEDTLS_SSL_CID */
2632
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02002633#if defined(MBEDTLS_SSL_PROTO_DTLS)
2634 if( opt.dtls_mtu != DFL_DTLS_MTU )
2635 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
2636#endif
2637
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002638#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002639 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2640 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002641#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002642
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002643 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002644
2645reset:
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002646#if !defined(_WIN32)
2647 if( received_sigterm )
2648 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002649 mbedtls_printf( " interrupted by SIGTERM (not in net_accept())\n" );
2650 if( ret == MBEDTLS_ERR_NET_INVALID_CONTEXT )
2651 ret = 0;
2652
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002653 goto exit;
2654 }
2655#endif
2656
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002657 if( ret == MBEDTLS_ERR_SSL_CLIENT_RECONNECT )
2658 {
2659 mbedtls_printf( " ! Client initiated reconnection from same port\n" );
2660 goto handshake;
2661 }
2662
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002663#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002664 if( ret != 0 )
2665 {
2666 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002667 mbedtls_strerror( ret, error_buf, 100 );
2668 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002669 }
2670#endif
2671
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002672 mbedtls_net_free( &client_fd );
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002673
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002674 mbedtls_ssl_session_reset( &ssl );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002675
2676 /*
2677 * 3. Wait until a client connects
2678 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002679 mbedtls_printf( " . Waiting for a remote connection ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002680 fflush( stdout );
2681
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002682 if( ( ret = mbedtls_net_accept( &listen_fd, &client_fd,
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002683 client_ip, sizeof( client_ip ), &cliip_len ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002684 {
Paul Bakkerc1283d32014-08-18 11:05:51 +02002685#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002686 if( received_sigterm )
2687 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002688 mbedtls_printf( " interrupted by SIGTERM (in net_accept())\n" );
2689 if( ret == MBEDTLS_ERR_NET_ACCEPT_FAILED )
2690 ret = 0;
2691
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002692 goto exit;
2693 }
Paul Bakkerc1283d32014-08-18 11:05:51 +02002694#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002695
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002696 mbedtls_printf( " failed\n ! mbedtls_net_accept returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002697 goto exit;
2698 }
2699
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002700 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002701 ret = mbedtls_net_set_nonblock( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002702 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002703 ret = mbedtls_net_set_block( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002704 if( ret != 0 )
2705 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002706 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002707 goto exit;
2708 }
2709
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002710 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002711
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002712#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
2713 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002714 {
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002715 if( ( ret = mbedtls_ssl_set_client_transport_id( &ssl,
2716 client_ip, cliip_len ) ) != 0 )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002717 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002718 mbedtls_printf( " failed\n ! mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n",
2719 -ret );
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002720 goto exit;
2721 }
2722 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002723#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002724
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002725#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
2726 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
2727 {
2728 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
2729 (const unsigned char *) opt.ecjpake_pw,
2730 strlen( opt.ecjpake_pw ) ) ) != 0 )
2731 {
2732 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n", ret );
2733 goto exit;
2734 }
2735 }
2736#endif
2737
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002738 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002739
2740 /*
2741 * 4. Handshake
2742 */
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002743handshake:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002744 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002745 fflush( stdout );
2746
Hanno Becker16970d22017-10-10 15:56:37 +01002747 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002748 {
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002749#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002750 if( ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS &&
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002751 ssl_async_keys.inject_error == SSL_ASYNC_INJECT_ERROR_CANCEL )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002752 {
2753 mbedtls_printf( " cancelling on injected error\n" );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002754 break;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002755 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002756#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskineb44692f2018-04-24 12:18:19 +02002757
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002758 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01002759 break;
2760
2761 /* For event-driven IO, wait for socket to become available */
2762 if( opt.event == 1 /* level triggered IO */ )
2763 {
2764#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002765 ret = idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002766#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002767 ret = idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002768#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002769 if( ret != 0 )
2770 goto reset;
Hanno Becker16970d22017-10-10 15:56:37 +01002771 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002772 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002773
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002774 if( ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED )
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002775 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002776 mbedtls_printf( " hello verification requested\n" );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002777 ret = 0;
2778 goto reset;
2779 }
2780 else if( ret != 0 )
2781 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002782 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02002783
2784#if defined(MBEDTLS_X509_CRT_PARSE_C)
2785 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
2786 {
2787 char vrfy_buf[512];
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +02002788 flags = mbedtls_ssl_get_verify_result( &ssl );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02002789
2790 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
2791
2792 mbedtls_printf( "%s\n", vrfy_buf );
2793 }
2794#endif
2795
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002796#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002797 if( opt.async_private_error < 0 )
2798 /* Injected error only the first time round, to test reset */
2799 ssl_async_keys.inject_error = SSL_ASYNC_INJECT_ERROR_NONE;
2800#endif
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002801 goto reset;
2802 }
2803 else /* ret == 0 */
2804 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002805 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
2806 mbedtls_ssl_get_version( &ssl ), mbedtls_ssl_get_ciphersuite( &ssl ) );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002807 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002808
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002809 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
2810 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002811 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002812 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002813
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002814#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
2815 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
2816 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
2817#endif
2818
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002819#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002820 if( opt.alpn_string != NULL )
2821 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002822 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
2823 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002824 alp ? alp : "(none)" );
2825 }
2826#endif
2827
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002828#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002829 /*
Ron Eldor2a47be52017-06-20 15:23:23 +03002830 * 5. Verify the client certificate
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002831 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002832 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002833
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002834 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002835 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002836 char vrfy_buf[512];
2837
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002838 mbedtls_printf( " failed\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002839
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002840 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002841
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002842 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002843 }
2844 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002845 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002846
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002847 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002848 {
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002849 char crt_buf[512];
2850
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002851 mbedtls_printf( " . Peer certificate information ...\n" );
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002852 mbedtls_x509_crt_info( crt_buf, sizeof( crt_buf ), " ",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002853 mbedtls_ssl_get_peer_cert( &ssl ) );
Manuel Pégourié-Gonnard67557172015-07-02 11:15:48 +02002854 mbedtls_printf( "%s\n", crt_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002855 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002856#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002857
Hanno Becker1029ace2019-04-09 17:28:10 +01002858#if defined(MBEDTLS_SSL_CID)
2859 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2860 {
2861 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
2862 size_t peer_cid_len;
2863 int cid_negotiated;
2864
2865 /* Check if the use of a CID has been negotiated */
2866 ret = mbedtls_ssl_get_peer_cid( &ssl, &cid_negotiated,
2867 peer_cid, &peer_cid_len );
2868 if( ret != 0 )
2869 {
2870 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
2871 -ret );
2872 goto exit;
2873 }
2874
2875 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
2876 {
2877 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
2878 {
Hanno Becker14751aa2019-04-23 11:39:53 +01002879 mbedtls_printf( "Use of Connection ID was not offered by the client.\n" );
Hanno Becker1029ace2019-04-09 17:28:10 +01002880 }
2881 }
2882 else
2883 {
Hanno Becker8be8a952019-04-23 11:50:28 +01002884 size_t idx=0;
Hanno Becker1029ace2019-04-09 17:28:10 +01002885 mbedtls_printf( "Use of Connection ID has been negotiated.\n" );
Hanno Becker8be8a952019-04-23 11:50:28 +01002886 mbedtls_printf( "Peer CID (length %u Bytes): ",
2887 (unsigned) peer_cid_len );
2888 while( idx < peer_cid_len )
2889 {
Hanno Becker0c8281a2019-04-26 17:19:15 +01002890 mbedtls_printf( "%02x ", peer_cid[ idx ] );
Hanno Becker8be8a952019-04-23 11:50:28 +01002891 idx++;
2892 }
2893 mbedtls_printf( "\n" );
Hanno Becker1029ace2019-04-09 17:28:10 +01002894 }
2895 }
2896#endif /* MBEDTLS_SSL_CID */
2897
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02002898 if( opt.exchanges == 0 )
2899 goto close_notify;
2900
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00002901 exchanges_left = opt.exchanges;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002902data_exchange:
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002903 /*
2904 * 6. Read the HTTP Request
2905 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002906 mbedtls_printf( " < Read from client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002907 fflush( stdout );
2908
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002909 /*
2910 * TLS and DTLS need different reading styles (stream vs datagram)
2911 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002912 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002913 {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002914 do
2915 {
2916 int terminated = 0;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002917 len = opt.buffer_size - 1;
2918 memset( buf, 0, opt.buffer_size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002919 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002920
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002921 if( mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01002922 {
2923 if( opt.event == 1 /* level triggered IO */ )
2924 {
2925#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002926 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002927#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002928 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002929#endif
2930 }
2931
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002932 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002933 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002934
2935 if( ret <= 0 )
2936 {
2937 switch( ret )
2938 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002939 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2940 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002941 goto close_notify;
2942
2943 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002944 case MBEDTLS_ERR_NET_CONN_RESET:
2945 mbedtls_printf( " connection was reset by peer\n" );
2946 ret = MBEDTLS_ERR_NET_CONN_RESET;
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002947 goto reset;
2948
2949 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002950 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002951 goto reset;
2952 }
2953 }
2954
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002955 if( mbedtls_ssl_get_bytes_avail( &ssl ) == 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002956 {
2957 len = ret;
2958 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002959 mbedtls_printf( " %d bytes read\n\n%s\n", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002960
2961 /* End of message should be detected according to the syntax of the
2962 * application protocol (eg HTTP), just use a dummy test here. */
2963 if( buf[len - 1] == '\n' )
2964 terminated = 1;
2965 }
2966 else
2967 {
2968 int extra_len, ori_len;
2969 unsigned char *larger_buf;
2970
2971 ori_len = ret;
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002972 extra_len = (int) mbedtls_ssl_get_bytes_avail( &ssl );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002973
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +02002974 larger_buf = mbedtls_calloc( 1, ori_len + extra_len + 1 );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002975 if( larger_buf == NULL )
2976 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002977 mbedtls_printf( " ! memory allocation failed\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002978 ret = 1;
2979 goto reset;
2980 }
2981
2982 memset( larger_buf, 0, ori_len + extra_len );
2983 memcpy( larger_buf, buf, ori_len );
2984
2985 /* This read should never fail and get the whole cached data */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002986 ret = mbedtls_ssl_read( &ssl, larger_buf + ori_len, extra_len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002987 if( ret != extra_len ||
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002988 mbedtls_ssl_get_bytes_avail( &ssl ) != 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002989 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002990 mbedtls_printf( " ! mbedtls_ssl_read failed on cached data\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002991 ret = 1;
2992 goto reset;
2993 }
2994
2995 larger_buf[ori_len + extra_len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002996 mbedtls_printf( " %u bytes read (%u + %u)\n\n%s\n",
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002997 ori_len + extra_len, ori_len, extra_len,
2998 (char *) larger_buf );
2999
3000 /* End of message should be detected according to the syntax of the
3001 * application protocol (eg HTTP), just use a dummy test here. */
3002 if( larger_buf[ori_len + extra_len - 1] == '\n' )
3003 terminated = 1;
3004
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003005 mbedtls_free( larger_buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003006 }
3007
3008 if( terminated )
3009 {
3010 ret = 0;
3011 break;
3012 }
3013 }
3014 while( 1 );
3015 }
3016 else /* Not stream, so datagram */
3017 {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003018 len = opt.buffer_size - 1;
3019 memset( buf, 0, opt.buffer_size );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003020
Gilles Peskineb44692f2018-04-24 12:18:19 +02003021 do
Hanno Becker16970d22017-10-10 15:56:37 +01003022 {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003023 /* Without the call to `mbedtls_ssl_check_pending`, it might
3024 * happen that the client sends application data in the same
3025 * datagram as the Finished message concluding the handshake.
3026 * In this case, the application data would be ready to be
3027 * processed while the underlying transport wouldn't signal
3028 * any further incoming data.
3029 *
3030 * See the test 'Event-driven I/O: session-id resume, UDP packing'
3031 * in tests/ssl-opt.sh.
3032 */
3033
3034 /* For event-driven IO, wait for socket to become available */
3035 if( mbedtls_ssl_check_pending( &ssl ) == 0 &&
3036 opt.event == 1 /* level triggered IO */ )
3037 {
3038#if defined(MBEDTLS_TIMING_C)
3039 idle( &client_fd, &timer, MBEDTLS_ERR_SSL_WANT_READ );
3040#else
3041 idle( &client_fd, MBEDTLS_ERR_SSL_WANT_READ );
3042#endif
3043 }
3044
Hanno Becker16970d22017-10-10 15:56:37 +01003045 ret = mbedtls_ssl_read( &ssl, buf, len );
3046
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003047 /* Note that even if `mbedtls_ssl_check_pending` returns true,
3048 * it can happen that the subsequent call to `mbedtls_ssl_read`
3049 * returns `MBEDTLS_ERR_SSL_WANT_READ`, because the pending messages
3050 * might be discarded (e.g. because they are retransmissions). */
Hanno Becker16970d22017-10-10 15:56:37 +01003051 }
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003052 while( mbedtls_status_is_ssl_in_progress( ret ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003053
3054 if( ret <= 0 )
3055 {
3056 switch( ret )
3057 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003058 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
3059 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003060 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003061 goto close_notify;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003062
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003063 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003064 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003065 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003066 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003067 }
3068
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003069 len = ret;
3070 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003071 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003072 ret = 0;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003073 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003074
3075 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003076 * 7a. Request renegotiation while client is waiting for input from us.
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02003077 * (only on the first exchange, to be able to test retransmission)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003078 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003079#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard3a173f42015-01-22 13:30:33 +00003080 if( opt.renegotiate && exchanges_left == opt.exchanges )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003081 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003082 mbedtls_printf( " . Requestion renegotiation..." );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003083 fflush( stdout );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003084
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003085 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003086 {
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003087 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003088 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003089 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003090 goto reset;
3091 }
Hanno Becker16970d22017-10-10 15:56:37 +01003092
3093 /* For event-driven IO, wait for socket to become available */
3094 if( opt.event == 1 /* level triggered IO */ )
3095 {
3096#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003097 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003098#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003099 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003100#endif
3101 }
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003102 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003103
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003104 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003105 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003106#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003107
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003108 /*
3109 * 7. Write the 200 Response
3110 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003111 mbedtls_printf( " > Write to client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003112 fflush( stdout );
3113
3114 len = sprintf( (char *) buf, HTTP_RESPONSE,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003115 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003116
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003117 /* Add padding to the response to reach opt.response_size in length */
3118 if( opt.response_size != DFL_RESPONSE_SIZE &&
3119 len < opt.response_size )
3120 {
3121 memset( buf + len, 'B', opt.response_size - len );
3122 len += opt.response_size - len;
3123 }
3124
3125 /* Truncate if response size is smaller than the "natural" size */
3126 if( opt.response_size != DFL_RESPONSE_SIZE &&
3127 len > opt.response_size )
3128 {
3129 len = opt.response_size;
3130
3131 /* Still end with \r\n unless that's really not possible */
3132 if( len >= 2 ) buf[len - 2] = '\r';
3133 if( len >= 1 ) buf[len - 1] = '\n';
3134 }
3135
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003136 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003137 {
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003138 for( written = 0, frags = 0; written < len; written += ret, frags++ )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003139 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003140 while( ( ret = mbedtls_ssl_write( &ssl, buf + written, len - written ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003141 <= 0 )
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003142 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003143 if( ret == MBEDTLS_ERR_NET_CONN_RESET )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003144 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003145 mbedtls_printf( " failed\n ! peer closed the connection\n\n" );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003146 goto reset;
3147 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003148
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003149 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003150 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003151 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003152 goto reset;
3153 }
Hanno Becker16970d22017-10-10 15:56:37 +01003154
3155 /* For event-driven IO, wait for socket to become available */
3156 if( opt.event == 1 /* level triggered IO */ )
3157 {
3158#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003159 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003160#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003161 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003162#endif
3163 }
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003164 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003165 }
3166 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003167 else /* Not stream, so datagram */
3168 {
Hanno Becker16970d22017-10-10 15:56:37 +01003169 while( 1 )
3170 {
3171 ret = mbedtls_ssl_write( &ssl, buf, len );
3172
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003173 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01003174 break;
3175
3176 /* For event-driven IO, wait for socket to become available */
3177 if( opt.event == 1 /* level triggered IO */ )
3178 {
3179#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003180 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003181#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003182 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003183#endif
3184 }
3185 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003186
3187 if( ret < 0 )
3188 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003189 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003190 goto reset;
3191 }
3192
3193 frags = 1;
3194 written = ret;
3195 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003196
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003197 buf[written] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003198 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf );
Manuel Pégourié-Gonnarda92ed482015-01-14 10:46:08 +01003199 ret = 0;
Manuel Pégourié-Gonnardf3dc2f62013-10-29 18:17:41 +01003200
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003201 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003202 * 7b. Continue doing data exchanges?
3203 */
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003204 if( --exchanges_left > 0 )
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003205 goto data_exchange;
3206
3207 /*
3208 * 8. Done, cleanly close the connection
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003209 */
3210close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003211 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01003212
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003213 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003214 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01003215 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003216 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003217
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003218 mbedtls_printf( " done\n" );
Rich Evansf90016a2015-01-19 14:26:37 +00003219
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003220 goto reset;
3221
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003222 /*
3223 * Cleanup and exit
3224 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003225exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003226#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003227 if( ret != 0 )
3228 {
3229 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003230 mbedtls_strerror( ret, error_buf, 100 );
3231 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003232 }
3233#endif
3234
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003235 mbedtls_printf( " . Cleaning up..." );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003236 fflush( stdout );
3237
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003238 mbedtls_net_free( &client_fd );
3239 mbedtls_net_free( &listen_fd );
Paul Bakker0c226102014-04-17 16:02:36 +02003240
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003241#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3242 mbedtls_dhm_free( &dhm );
Paul Bakkera317a982014-06-18 16:44:11 +02003243#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003244#if defined(MBEDTLS_X509_CRT_PARSE_C)
3245 mbedtls_x509_crt_free( &cacert );
3246 mbedtls_x509_crt_free( &srvcert );
3247 mbedtls_pk_free( &pkey );
3248 mbedtls_x509_crt_free( &srvcert2 );
3249 mbedtls_pk_free( &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +02003250#endif
Gilles Peskine44817442018-06-13 18:09:28 +02003251#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
3252 for( i = 0; (size_t) i < ssl_async_keys.slots_used; i++ )
3253 {
3254 if( ssl_async_keys.slots[i].pk_owned )
3255 {
3256 mbedtls_pk_free( ssl_async_keys.slots[i].pk );
3257 mbedtls_free( ssl_async_keys.slots[i].pk );
3258 ssl_async_keys.slots[i].pk = NULL;
3259 }
3260 }
3261#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02003262#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01003263 sni_free( sni_info );
3264#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003265#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003266 psk_free( psk_info );
3267#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003268#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3269 mbedtls_dhm_free( &dhm );
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003270#endif
Paul Bakkered27a042013-04-18 22:46:23 +02003271
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003272 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02003273 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003274 mbedtls_ctr_drbg_free( &ctr_drbg );
3275 mbedtls_entropy_free( &entropy );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003276
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003277#if defined(MBEDTLS_SSL_CACHE_C)
3278 mbedtls_ssl_cache_free( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00003279#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02003280#if defined(MBEDTLS_SSL_SESSION_TICKETS)
3281 mbedtls_ssl_ticket_free( &ticket_ctx );
3282#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003283#if defined(MBEDTLS_SSL_COOKIE_C)
3284 mbedtls_ssl_cookie_free( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02003285#endif
Paul Bakker0a597072012-09-25 21:55:46 +00003286
Hanno Becker095d9cf2018-10-09 12:39:13 +01003287 mbedtls_free( buf );
3288
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003289#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3290#if defined(MBEDTLS_MEMORY_DEBUG)
3291 mbedtls_memory_buffer_alloc_status();
Paul Bakker82024bf2013-07-04 11:52:32 +02003292#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003293 mbedtls_memory_buffer_alloc_free();
Paul Bakker1337aff2013-09-29 14:45:34 +02003294#endif
Paul Bakker82024bf2013-07-04 11:52:32 +02003295
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003296 mbedtls_printf( " done.\n" );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003297
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003298#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003299 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003300 fflush( stdout ); getchar();
3301#endif
3302
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003303 // Shell can not handle large exit numbers -> 1 for errors
3304 if( ret < 0 )
3305 ret = 1;
3306
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003307 return( ret );
3308}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003309#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
3310 MBEDTLS_SSL_SRV_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003311 MBEDTLS_CTR_DRBG_C */