blob: 38c94be60520f6dd0039e415d5fe77d74626ec39 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Rich Evans18b78c72015-02-11 14:06:19 +000031#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010032#include <stdlib.h>
33#define mbedtls_time time
34#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035#define mbedtls_printf printf
36#define mbedtls_fprintf fprintf
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037#define mbedtls_snprintf snprintf
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010038#define mbedtls_exit exit
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +020039#define mbedtls_calloc calloc
40#define mbedtls_free free
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010041#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
42#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Rich Evansf90016a2015-01-19 14:26:37 +000043#endif
44
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020045#if !defined(MBEDTLS_ENTROPY_C) || \
46 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_CLI_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020047 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020048int main( void )
49{
50 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
51 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_CLI_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020052 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020053 return( 0 );
54}
55#else
56
Andres AG788aa4a2016-09-14 14:32:09 +010057#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000058#include "mbedtls/ssl.h"
59#include "mbedtls/entropy.h"
60#include "mbedtls/ctr_drbg.h"
61#include "mbedtls/certs.h"
62#include "mbedtls/x509.h"
63#include "mbedtls/error.h"
64#include "mbedtls/debug.h"
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020065#include "mbedtls/timing.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000066
Rich Evans18b78c72015-02-11 14:06:19 +000067#include <stdio.h>
68#include <stdlib.h>
69#include <string.h>
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010070
Hanno Beckere4ad3e82017-09-18 15:05:46 +010071#define MAX_REQUEST_SIZE 20000
72#define MAX_REQUEST_SIZE_STR "20000"
73
Paul Bakker9caf2d22010-02-18 19:37:19 +000074#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010075#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020076#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +000077#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +020078#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +000079#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010080#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010081#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020082#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +020083#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +000084#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +000085#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +000086#define DFL_CRT_FILE ""
87#define DFL_KEY_FILE ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020088#define DFL_PSK ""
89#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020090#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +020091#define DFL_EC_MAX_OPS -1
Paul Bakker51936882011-02-20 16:05:58 +000092#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010094#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010095#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +020096#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +020097#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +000098#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +000099#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200100#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100101#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200102#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100103#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100104#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200105#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200106#define DFL_RECONNECT 0
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100107#define DFL_RECO_DELAY 0
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +0200108#define DFL_RECO_MODE 1
Hanno Becker7a7aa192019-04-09 17:24:19 +0100109#define DFL_CID_ENABLED 0
110#define DFL_CID_VALUE ""
Hanno Becker96870292019-05-03 17:30:59 +0100111#define DFL_CID_ENABLED_RENEGO -1
112#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200113#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200115#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100116#define DFL_CURVES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200117#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200118#define DFL_HS_TO_MIN 0
119#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200120#define DFL_DTLS_MTU -1
Hanno Becker4d615912018-08-14 13:33:30 +0100121#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200122#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200123#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100124#define DFL_ETM -1
Paul Bakker0e6975b2009-02-10 22:19:10 +0000125
Paul Bakker93c32b22014-04-25 13:40:05 +0200126#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
127#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000128
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200129#if defined(MBEDTLS_X509_CRT_PARSE_C)
130#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000131#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100132 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
133 " default: \"\" (pre-loaded)\n" \
134 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
135 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
136 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
137 " default: \"\" (pre-loaded)\n" \
Paul Bakker5690efc2011-05-26 13:16:06 +0000138 " key_file=%%s default: \"\" (pre-loaded)\n"
139#else
140#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200141 " No file operations available (MBEDTLS_FS_IO not defined)\n"
142#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200143#else
144#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200146
Hanno Beckera5a2b082019-05-15 14:03:01 +0100147#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker7a7aa192019-04-09 17:24:19 +0100148#define USAGE_CID \
149 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
150 " default: 0 (disabled)\n" \
Hanno Becker96870292019-05-03 17:30:59 +0100151 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Beckerc8f43d82019-05-23 17:01:06 +0100152 " default: same as 'cid' parameter\n" \
Hanno Becker7a7aa192019-04-09 17:24:19 +0100153 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Becker96870292019-05-03 17:30:59 +0100154 " default: \"\"\n" \
155 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Beckerc8f43d82019-05-23 17:01:06 +0100156 " default: same as 'cid_val' parameter\n"
Hanno Beckera5a2b082019-05-15 14:03:01 +0100157#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100158#define USAGE_CID ""
Hanno Beckera5a2b082019-05-15 14:03:01 +0100159#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100160
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200161#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkered27a042013-04-18 22:46:23 +0200162#define USAGE_PSK \
163 " psk=%%s default: \"\" (in hex, without 0x)\n" \
164 " psk_identity=%%s default: \"Client_identity\"\n"
165#else
166#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200167#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakker5690efc2011-05-26 13:16:06 +0000168
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200170#define USAGE_TICKETS \
171 " tickets=%%d default: 1 (enabled)\n"
172#else
173#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200175
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200176#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Paul Bakker1f2bc622013-08-15 13:45:55 +0200177#define USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100178 " trunc_hmac=%%d default: library default\n"
Paul Bakker1f2bc622013-08-15 13:45:55 +0200179#else
180#define USAGE_TRUNC_HMAC ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181#endif /* MBEDTLS_SSL_TRUNCATED_HMAC */
Paul Bakker1f2bc622013-08-15 13:45:55 +0200182
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200184#define USAGE_MAX_FRAG_LEN \
185 " max_frag_len=%%d default: 16384 (tls default)\n" \
186 " options: 512, 1024, 2048, 4096\n"
187#else
188#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200189#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200190
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200191#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100192#define USAGE_RECSPLIT \
Manuel Pégourié-Gonnardbf27eaa2015-06-11 17:02:10 +0200193 " recsplit=0/1 default: (library default: on)\n"
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100194#else
195#define USAGE_RECSPLIT
196#endif
197
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200198#if defined(MBEDTLS_DHM_C)
199#define USAGE_DHMLEN \
200 " dhmlen=%%d default: (library default: 1024 bits)\n"
201#else
202#define USAGE_DHMLEN
203#endif
204
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200205#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200206#define USAGE_ALPN \
207 " alpn=%%s default: \"\" (disabled)\n" \
208 " example: spdy/1,http/1.1\n"
209#else
210#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200211#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200212
Hanno Beckere6706e62017-05-15 16:05:15 +0100213#if defined(MBEDTLS_ECP_C)
214#define USAGE_CURVES \
215 " curves=a,b,c,d default: \"default\" (library default)\n" \
216 " example: \"secp521r1,brainpoolP512r1\"\n" \
217 " - use \"none\" for empty list\n" \
218 " - see mbedtls_ecp_curve_list()\n" \
219 " for acceptable curve names\n"
220#else
221#define USAGE_CURVES ""
222#endif
223
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200224#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200225#define USAGE_DTLS \
226 " dtls=%%d default: 0 (TLS)\n" \
227 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200228 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Becker4d615912018-08-14 13:33:30 +0100229 " mtu=%%d default: (library default: unlimited)\n" \
230 " dgram_packing=%%d default: 1 (allowed)\n" \
231 " allow or forbid packing of multiple\n" \
232 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200233#else
234#define USAGE_DTLS ""
235#endif
236
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200237#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200238#define USAGE_FALLBACK \
239 " fallback=0/1 default: (library default: off)\n"
240#else
241#define USAGE_FALLBACK ""
242#endif
243
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200244#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200245#define USAGE_EMS \
246 " extended_ms=0/1 default: (library default: on)\n"
247#else
248#define USAGE_EMS ""
249#endif
250
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100252#define USAGE_ETM \
253 " etm=0/1 default: (library default: on)\n"
254#else
255#define USAGE_ETM ""
256#endif
257
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200258#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100259#define USAGE_RENEGO \
260 " renegotiation=%%d default: 0 (disabled)\n" \
261 " renegotiate=%%d default: 0 (disabled)\n"
262#else
263#define USAGE_RENEGO ""
264#endif
265
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200266#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
267#define USAGE_ECJPAKE \
268 " ecjpake_pw=%%s default: none (disabled)\n"
269#else
270#define USAGE_ECJPAKE ""
271#endif
272
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200273#if defined(MBEDTLS_ECP_RESTARTABLE)
274#define USAGE_ECRESTART \
275 " ec_max_ops=%%s default: library default (restart disabled)\n"
276#else
277#define USAGE_ECRESTART ""
278#endif
279
Paul Bakker9caf2d22010-02-18 19:37:19 +0000280#define USAGE \
Paul Bakker67968392010-07-18 08:28:20 +0000281 "\n usage: ssl_client2 param=<>...\n" \
282 "\n acceptable parameters:\n" \
283 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100284 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000285 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000286 " request_page=%%s default: \".\"\n" \
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +0100287 " request_size=%%d default: about 34 (basic request)\n" \
288 " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \
289 " If 0, in the first exchange only an empty\n" \
290 " application data message is sent followed by\n" \
291 " a second non-empty message before attempting\n" \
292 " to read a response from the server\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100293 " debug_level=%%d default: 0 (disabled)\n" \
294 " nbio=%%d default: 0 (blocking I/O)\n" \
295 " options: 1 (non-blocking), 2 (added delays)\n" \
296 " event=%%d default: 0 (loop)\n" \
297 " options: 1 (level-triggered, implies nbio=1),\n" \
298 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200299 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100300 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200301 USAGE_DTLS \
Hanno Becker7a7aa192019-04-09 17:24:19 +0100302 USAGE_CID \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200303 "\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100304 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100305 " options: none, optional, required\n" \
306 USAGE_IO \
307 "\n" \
308 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200309 USAGE_ECJPAKE \
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200310 USAGE_ECRESTART \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100311 "\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100312 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100313 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200314 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +0200315 " reconnect=%%d number of reconnections using session resumption\n" \
316 " default: 0 (disabled)\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200317 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnard35ccdbb2019-06-03 09:55:16 +0200318 " reco_mode=%%d 0: copy session, 1: serialize session\n" \
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +0200319 " default: 1\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200320 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200321 USAGE_TICKETS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100322 USAGE_MAX_FRAG_LEN \
323 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200324 USAGE_ALPN \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200325 USAGE_FALLBACK \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200326 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100327 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100328 USAGE_CURVES \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100329 USAGE_RECSPLIT \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200330 USAGE_DHMLEN \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000331 "\n" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100332 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200333 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200334 " min_version=%%s default: (library default: tls1)\n" \
335 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000336 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100337 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000338 "\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000339 " force_ciphersuite=<name> default: all enabled\n"\
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100340 " query_config=<name> return 0 if the specified\n" \
341 " configuration macro is defined and 1\n" \
342 " otherwise. The expansion of the macro\n" \
343 " is printed if it is defined\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000344 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000345
Hanno Becker8651a432017-06-09 16:13:22 +0100346#define ALPN_LIST_SIZE 10
347#define CURVE_LIST_SIZE 20
348
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100349#if defined(MBEDTLS_CHECK_PARAMS)
350#include "mbedtls/platform_util.h"
351void mbedtls_param_failed( const char *failure_condition,
352 const char *file,
353 int line )
Simon Butcher63cb97e2018-12-06 17:43:31 +0000354{
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100355 mbedtls_printf( "%s:%i: Input param failed - %s\n",
356 file, line, failure_condition );
Simon Butcher63cb97e2018-12-06 17:43:31 +0000357 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
358}
359#endif
360
Rich Evans85b05ec2015-02-12 11:37:29 +0000361/*
362 * global options
363 */
364struct options
365{
366 const char *server_name; /* hostname of the server (client only) */
367 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200368 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000369 int debug_level; /* level of debugging */
370 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100371 int event; /* loop or event-driven IO? level or edge triggered? */
372 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000373 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000374 const char *request_page; /* page on server to request */
375 int request_size; /* pad request with header to requested size */
376 const char *ca_file; /* the file with the CA certificate(s) */
377 const char *ca_path; /* the path with the CA certificate(s) reside */
378 const char *crt_file; /* the file with the client certificate */
379 const char *key_file; /* the file with the client key */
380 const char *psk; /* the pre-shared key */
381 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200382 const char *ecjpake_pw; /* the EC J-PAKE password */
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200383 int ec_max_ops; /* EC consecutive operations limit */
Rich Evans85b05ec2015-02-12 11:37:29 +0000384 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
385 int renegotiation; /* enable / disable renegotiation */
386 int allow_legacy; /* allow legacy renegotiation */
387 int renegotiate; /* attempt renegotiation? */
388 int renego_delay; /* delay before enforcing renegotiation */
389 int exchanges; /* number of data exchanges */
390 int min_version; /* minimum protocol version accepted */
391 int max_version; /* maximum protocol version accepted */
392 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200393 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000394 int auth_mode; /* verify mode for connection */
395 unsigned char mfl_code; /* code for maximum fragment length */
396 int trunc_hmac; /* negotiate truncated hmac or not */
397 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200398 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000399 int reconnect; /* attempt to resume session */
400 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +0200401 int reco_mode; /* how to keep the session around */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200402 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000403 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100404 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000405 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000406 int transport; /* TLS or DTLS? */
407 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
408 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200409 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Rich Evans85b05ec2015-02-12 11:37:29 +0000410 int fallback; /* is this a fallback connection? */
Hanno Becker4d615912018-08-14 13:33:30 +0100411 int dgram_packing; /* allow/forbid datagram packing */
Rich Evans85b05ec2015-02-12 11:37:29 +0000412 int extended_ms; /* negotiate extended master secret? */
413 int etm; /* negotiate encrypt then mac? */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100414 int cid_enabled; /* whether to use the CID extension or not */
Hanno Becker96870292019-05-03 17:30:59 +0100415 int cid_enabled_renego; /* whether to use the CID extension or not
416 * during renegotiation */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100417 const char *cid_val; /* the CID to use for incoming messages */
Hanno Becker96870292019-05-03 17:30:59 +0100418 const char *cid_val_renego; /* the CID to use for incoming messages
419 * after renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000420} opt;
421
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100422int query_config( const char *config );
423
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200424static void my_debug( void *ctx, int level,
425 const char *file, int line,
426 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000427{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200428 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000429
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200430 /* Extract basename from file */
431 for( p = basename = file; *p != '\0'; p++ )
432 if( *p == '/' || *p == '\\' )
433 basename = p + 1;
434
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100435 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s",
436 basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000437 fflush( (FILE *) ctx );
438}
439
440/*
441 * Test recv/send functions that make sure each try returns
442 * WANT_READ/WANT_WRITE at least once before sucesseding
443 */
444static int my_recv( void *ctx, unsigned char *buf, size_t len )
445{
446 static int first_try = 1;
447 int ret;
448
449 if( first_try )
450 {
451 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100452 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000453 }
454
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200455 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100456 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000457 first_try = 1; /* Next call will be a new operation */
458 return( ret );
459}
460
461static int my_send( void *ctx, const unsigned char *buf, size_t len )
462{
463 static int first_try = 1;
464 int ret;
465
466 if( first_try )
467 {
468 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100469 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000470 }
471
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200472 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100473 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000474 first_try = 1; /* Next call will be a new operation */
475 return( ret );
476}
477
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200478#if defined(MBEDTLS_X509_CRT_PARSE_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000479/*
480 * Enabled if debug_level > 1 in code below
481 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100482static int my_verify( void *data, mbedtls_x509_crt *crt,
483 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000484{
485 char buf[1024];
486 ((void) data);
487
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200488 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
489 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
490 mbedtls_printf( "%s", buf );
Rich Evans85b05ec2015-02-12 11:37:29 +0000491
Rich Evans85b05ec2015-02-12 11:37:29 +0000492 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200493 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100494 else
495 {
496 mbedtls_x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
497 mbedtls_printf( "%s\n", buf );
498 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000499
500 return( 0 );
501}
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200502
503static int ssl_sig_hashes_for_test[] = {
504#if defined(MBEDTLS_SHA512_C)
505 MBEDTLS_MD_SHA512,
506 MBEDTLS_MD_SHA384,
507#endif
508#if defined(MBEDTLS_SHA256_C)
509 MBEDTLS_MD_SHA256,
510 MBEDTLS_MD_SHA224,
511#endif
512#if defined(MBEDTLS_SHA1_C)
513 /* Allow SHA-1 as we use it extensively in tests. */
514 MBEDTLS_MD_SHA1,
515#endif
516 MBEDTLS_MD_NONE
517};
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200518#endif /* MBEDTLS_X509_CRT_PARSE_C */
Rich Evans85b05ec2015-02-12 11:37:29 +0000519
Hanno Becker16970d22017-10-10 15:56:37 +0100520/*
521 * Wait for an event from the underlying transport or the timer
522 * (Used in event-driven IO mode).
523 */
524#if !defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000525int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000526 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +0100527#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000528int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000529 mbedtls_timing_delay_context *timer,
530 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +0100531#endif
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000532{
Hanno Becker16970d22017-10-10 15:56:37 +0100533
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000534 int ret;
Hanno Becker16970d22017-10-10 15:56:37 +0100535 int poll_type = 0;
536
537 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
538 poll_type = MBEDTLS_NET_POLL_WRITE;
539 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
540 poll_type = MBEDTLS_NET_POLL_READ;
541#if !defined(MBEDTLS_TIMING_C)
542 else
Hanno Beckeref527962018-03-15 15:49:24 +0000543 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +0100544#endif
545
546 while( 1 )
547 {
Hanno Becker197a91c2017-10-31 10:58:53 +0000548 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +0100549#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +0000550 if( timer != NULL &&
551 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +0100552 {
Hanno Becker16970d22017-10-10 15:56:37 +0100553 break;
554 }
Hanno Becker197a91c2017-10-31 10:58:53 +0000555#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +0100556
Hanno Becker197a91c2017-10-31 10:58:53 +0000557 /* Check if underlying transport became available */
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000558 if( poll_type != 0 )
Hanno Becker16970d22017-10-10 15:56:37 +0100559 {
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000560 ret = mbedtls_net_poll( fd, poll_type, 0 );
561 if( ret < 0 )
562 return( ret );
563 if( ret == poll_type )
564 break;
Hanno Becker16970d22017-10-10 15:56:37 +0100565 }
566 }
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000567
568 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +0100569}
570
Hanno Beckerec370302019-04-09 17:12:56 +0100571/* Unhexify `hex` into `dst`. `dst` must have
572 * size at least `strlen( hex ) / 2`. */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100573int unhexify( char const *hex, unsigned char *dst )
Hanno Beckerec370302019-04-09 17:12:56 +0100574{
575 unsigned char c;
576 size_t j;
577 size_t len = strlen( hex );
578
579 if( len % 2 != 0 )
580 return( -1 );
581
582 for( j = 0; j < len; j += 2 )
583 {
584 c = hex[j];
585 if( c >= '0' && c <= '9' )
586 c -= '0';
587 else if( c >= 'a' && c <= 'f' )
588 c -= 'a' - 10;
589 else if( c >= 'A' && c <= 'F' )
590 c -= 'A' - 10;
591 else
592 return( -1 );
593 dst[ j / 2 ] = c << 4;
594
595 c = hex[j + 1];
596 if( c >= '0' && c <= '9' )
597 c -= '0';
598 else if( c >= 'a' && c <= 'f' )
599 c -= 'a' - 10;
600 else if( c >= 'A' && c <= 'F' )
601 c -= 'A' - 10;
602 else
603 return( -1 );
604 dst[ j / 2 ] |= c;
605 }
606
607 return( 0 );
608}
609
Hanno Beckera5a2b082019-05-15 14:03:01 +0100610#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker96870292019-05-03 17:30:59 +0100611int report_cid_usage( mbedtls_ssl_context *ssl,
612 const char *additional_description )
613{
614 int ret;
615 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
616 size_t peer_cid_len;
617 int cid_negotiated;
618
619 if( opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM )
620 return( 0 );
621
Hanno Beckerac363882019-05-22 16:59:25 +0100622 /* Check if the use of a CID has been negotiated,
623 * but don't ask for the CID value and length.
624 *
625 * Note: Here and below, we're demonstrating the various ways
626 * in which mbedtls_ssl_get_peer_cid() can be called,
627 * depending on whether or not the length/value of the
628 * peer's CID is needed.
629 *
630 * An actual application, however, should use
631 * just one call to mbedtls_ssl_get_peer_cid(). */
Hanno Becker96870292019-05-03 17:30:59 +0100632 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
Hanno Beckerac363882019-05-22 16:59:25 +0100633 NULL, NULL );
Hanno Becker96870292019-05-03 17:30:59 +0100634 if( ret != 0 )
635 {
636 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
637 -ret );
638 return( ret );
639 }
640
641 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
642 {
643 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
644 {
645 mbedtls_printf( "(%s) Use of Connection ID was rejected by the server.\n",
646 additional_description );
647 }
648 }
649 else
650 {
651 size_t idx=0;
652 mbedtls_printf( "(%s) Use of Connection ID has been negotiated.\n",
653 additional_description );
Hanno Beckerac363882019-05-22 16:59:25 +0100654
655 /* Ask for just the length of the peer's CID. */
656 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
657 NULL, &peer_cid_len );
658 if( ret != 0 )
659 {
660 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
661 -ret );
662 return( ret );
663 }
664
665 /* Ask for just length + value of the peer's CID. */
666 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
667 peer_cid, &peer_cid_len );
668 if( ret != 0 )
669 {
670 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
671 -ret );
672 return( ret );
673 }
Hanno Becker96870292019-05-03 17:30:59 +0100674 mbedtls_printf( "(%s) Peer CID (length %u Bytes): ",
675 additional_description,
676 (unsigned) peer_cid_len );
677 while( idx < peer_cid_len )
678 {
679 mbedtls_printf( "%02x ", peer_cid[ idx ] );
680 idx++;
681 }
682 mbedtls_printf( "\n" );
683 }
684
685 return( 0 );
686}
Hanno Beckera5a2b082019-05-15 14:03:01 +0100687#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker96870292019-05-03 17:30:59 +0100688
Paul Bakker9caf2d22010-02-18 19:37:19 +0000689int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000690{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200691 int ret = 0, len, tail_len, i, written, frags, retry_left;
692 mbedtls_net_context server_fd;
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100693
694 unsigned char buf[MAX_REQUEST_SIZE + 1];
695
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200696#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
697 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200698 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200699#endif
Hanno Becker7a7aa192019-04-09 17:24:19 +0100700
Hanno Beckera5a2b082019-05-15 14:03:01 +0100701#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker7a7aa192019-04-09 17:24:19 +0100702 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Becker96870292019-05-03 17:30:59 +0100703 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Becker7a7aa192019-04-09 17:24:19 +0100704 size_t cid_len = 0;
Hanno Becker96870292019-05-03 17:30:59 +0100705 size_t cid_renego_len = 0;
Hanno Becker7a7aa192019-04-09 17:24:19 +0100706#endif
707
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200708#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100709 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200710#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100711#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +0100712 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100713 const mbedtls_ecp_curve_info *curve_cur;
714#endif
715
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200716 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000717
Gilles Peskineef86ab22017-05-05 18:59:02 +0200718#if defined(MBEDTLS_X509_CRT_PARSE_C)
719 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
720#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200721 mbedtls_entropy_context entropy;
722 mbedtls_ctr_drbg_context ctr_drbg;
723 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200724 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200725 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +0200726 unsigned char *session_data = NULL;
727 size_t session_data_len = 0;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200728#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200729 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200730#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200731#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200732 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200733 mbedtls_x509_crt cacert;
734 mbedtls_x509_crt clicert;
735 mbedtls_pk_context pkey;
Paul Bakkered27a042013-04-18 22:46:23 +0200736#endif
Paul Bakker9caf2d22010-02-18 19:37:19 +0000737 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000738 const int *list;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000739
Paul Bakker1a207ec2011-02-06 13:22:40 +0000740 /*
741 * Make sure memory references are valid.
742 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200743 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200744 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200745 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200746 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200747 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200748#if defined(MBEDTLS_X509_CRT_PARSE_C)
749 mbedtls_x509_crt_init( &cacert );
750 mbedtls_x509_crt_init( &clicert );
751 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200752#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200753#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200754 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200755#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000756
Paul Bakker9caf2d22010-02-18 19:37:19 +0000757 if( argc == 0 )
758 {
759 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000760 if( ret == 0 )
761 ret = 1;
762
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200763 mbedtls_printf( USAGE );
Paul Bakker51936882011-02-20 16:05:58 +0000764
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200765 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000766 while( *list )
767 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200768 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200769 list++;
770 if( !*list )
771 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200772 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000773 list++;
774 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200775 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000776 goto exit;
777 }
778
779 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100780 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000781 opt.server_port = DFL_SERVER_PORT;
782 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker7a7aa192019-04-09 17:24:19 +0100783 opt.cid_enabled = DFL_CID_ENABLED;
784 opt.cid_val = DFL_CID_VALUE;
Hanno Becker96870292019-05-03 17:30:59 +0100785 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
786 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100787 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100788 opt.event = DFL_EVENT;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200789 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200790 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000791 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200792 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000793 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000794 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000795 opt.crt_file = DFL_CRT_FILE;
796 opt.key_file = DFL_KEY_FILE;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200797 opt.psk = DFL_PSK;
798 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200799 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200800 opt.ec_max_ops = DFL_EC_MAX_OPS;
Paul Bakker51936882011-02-20 16:05:58 +0000801 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Paul Bakker48916f92012-09-16 19:57:18 +0000802 opt.renegotiation = DFL_RENEGOTIATION;
803 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100804 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200805 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000806 opt.min_version = DFL_MIN_VERSION;
807 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100808 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200809 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100810 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200811 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200812 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100813 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200814 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200815 opt.reconnect = DFL_RECONNECT;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100816 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +0200817 opt.reco_mode = DFL_RECO_MODE;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200818 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200819 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200820 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100821 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200822 opt.transport = DFL_TRANSPORT;
823 opt.hs_to_min = DFL_HS_TO_MIN;
824 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200825 opt.dtls_mtu = DFL_DTLS_MTU;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200826 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200827 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100828 opt.etm = DFL_ETM;
Hanno Becker4d615912018-08-14 13:33:30 +0100829 opt.dgram_packing = DFL_DGRAM_PACKING;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000830
831 for( i = 1; i < argc; i++ )
832 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000833 p = argv[i];
834 if( ( q = strchr( p, '=' ) ) == NULL )
835 goto usage;
836 *q++ = '\0';
837
838 if( strcmp( p, "server_name" ) == 0 )
839 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100840 else if( strcmp( p, "server_addr" ) == 0 )
841 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000842 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200843 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100844 else if( strcmp( p, "dtls" ) == 0 )
845 {
846 int t = atoi( q );
847 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200848 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100849 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200850 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100851 else
852 goto usage;
853 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000854 else if( strcmp( p, "debug_level" ) == 0 )
855 {
856 opt.debug_level = atoi( q );
857 if( opt.debug_level < 0 || opt.debug_level > 65535 )
858 goto usage;
859 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100860 else if( strcmp( p, "nbio" ) == 0 )
861 {
862 opt.nbio = atoi( q );
863 if( opt.nbio < 0 || opt.nbio > 2 )
864 goto usage;
865 }
Hanno Becker16970d22017-10-10 15:56:37 +0100866 else if( strcmp( p, "event" ) == 0 )
867 {
868 opt.event = atoi( q );
869 if( opt.event < 0 || opt.event > 2 )
870 goto usage;
871 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200872 else if( strcmp( p, "read_timeout" ) == 0 )
873 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200874 else if( strcmp( p, "max_resend" ) == 0 )
875 {
876 opt.max_resend = atoi( q );
877 if( opt.max_resend < 0 )
878 goto usage;
879 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000880 else if( strcmp( p, "request_page" ) == 0 )
881 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +0200882 else if( strcmp( p, "request_size" ) == 0 )
883 {
884 opt.request_size = atoi( q );
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100885 if( opt.request_size < 0 ||
886 opt.request_size > MAX_REQUEST_SIZE )
Paul Bakker93c32b22014-04-25 13:40:05 +0200887 goto usage;
888 }
Paul Bakker5690efc2011-05-26 13:16:06 +0000889 else if( strcmp( p, "ca_file" ) == 0 )
890 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +0000891 else if( strcmp( p, "ca_path" ) == 0 )
892 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +0000893 else if( strcmp( p, "crt_file" ) == 0 )
894 opt.crt_file = q;
895 else if( strcmp( p, "key_file" ) == 0 )
896 opt.key_file = q;
Hanno Beckera5a2b082019-05-15 14:03:01 +0100897#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker7a7aa192019-04-09 17:24:19 +0100898 else if( strcmp( p, "cid" ) == 0 )
899 {
900 opt.cid_enabled = atoi( q );
901 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
902 goto usage;
903 }
Hanno Becker96870292019-05-03 17:30:59 +0100904 else if( strcmp( p, "cid_renego" ) == 0 )
905 {
906 opt.cid_enabled_renego = atoi( q );
907 if( opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1 )
908 goto usage;
909 }
Hanno Becker7a7aa192019-04-09 17:24:19 +0100910 else if( strcmp( p, "cid_val" ) == 0 )
911 {
912 opt.cid_val = q;
913 }
Hanno Becker96870292019-05-03 17:30:59 +0100914 else if( strcmp( p, "cid_val_renego" ) == 0 )
915 {
916 opt.cid_val_renego = q;
917 }
Hanno Beckera5a2b082019-05-15 14:03:01 +0100918#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200919 else if( strcmp( p, "psk" ) == 0 )
920 opt.psk = q;
921 else if( strcmp( p, "psk_identity" ) == 0 )
922 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200923 else if( strcmp( p, "ecjpake_pw" ) == 0 )
924 opt.ecjpake_pw = q;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200925 else if( strcmp( p, "ec_max_ops" ) == 0 )
926 opt.ec_max_ops = atoi( q );
Paul Bakker51936882011-02-20 16:05:58 +0000927 else if( strcmp( p, "force_ciphersuite" ) == 0 )
928 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200929 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +0000930
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +0200931 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +0000932 {
933 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +0000934 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +0000935 }
Paul Bakker51936882011-02-20 16:05:58 +0000936 opt.force_ciphersuite[1] = 0;
937 }
Paul Bakker48916f92012-09-16 19:57:18 +0000938 else if( strcmp( p, "renegotiation" ) == 0 )
939 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100940 opt.renegotiation = (atoi( q )) ?
941 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
942 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +0000943 }
944 else if( strcmp( p, "allow_legacy" ) == 0 )
945 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100946 switch( atoi( q ) )
947 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100948 case -1:
949 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
950 break;
951 case 0:
952 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
953 break;
954 case 1:
955 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
956 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100957 default: goto usage;
958 }
Paul Bakker48916f92012-09-16 19:57:18 +0000959 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100960 else if( strcmp( p, "renegotiate" ) == 0 )
961 {
962 opt.renegotiate = atoi( q );
963 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
964 goto usage;
965 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200966 else if( strcmp( p, "exchanges" ) == 0 )
967 {
968 opt.exchanges = atoi( q );
969 if( opt.exchanges < 1 )
970 goto usage;
971 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200972 else if( strcmp( p, "reconnect" ) == 0 )
973 {
974 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +0200975 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200976 goto usage;
977 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100978 else if( strcmp( p, "reco_delay" ) == 0 )
979 {
980 opt.reco_delay = atoi( q );
981 if( opt.reco_delay < 0 )
982 goto usage;
983 }
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +0200984 else if( strcmp( p, "reco_mode" ) == 0 )
985 {
986 opt.reco_mode = atoi( q );
987 if( opt.reco_mode < 0 )
988 goto usage;
989 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200990 else if( strcmp( p, "reconnect_hard" ) == 0 )
991 {
992 opt.reconnect_hard = atoi( q );
993 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
994 goto usage;
995 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200996 else if( strcmp( p, "tickets" ) == 0 )
997 {
998 opt.tickets = atoi( q );
999 if( opt.tickets < 0 || opt.tickets > 2 )
1000 goto usage;
1001 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001002 else if( strcmp( p, "alpn" ) == 0 )
1003 {
1004 opt.alpn_string = q;
1005 }
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001006 else if( strcmp( p, "fallback" ) == 0 )
1007 {
1008 switch( atoi( q ) )
1009 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001010 case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break;
1011 case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001012 default: goto usage;
1013 }
1014 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001015 else if( strcmp( p, "extended_ms" ) == 0 )
1016 {
1017 switch( atoi( q ) )
1018 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001019 case 0:
1020 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1021 break;
1022 case 1:
1023 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1024 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001025 default: goto usage;
1026 }
1027 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001028 else if( strcmp( p, "curves" ) == 0 )
1029 opt.curves = q;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001030 else if( strcmp( p, "etm" ) == 0 )
1031 {
1032 switch( atoi( q ) )
1033 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001034 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1035 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001036 default: goto usage;
1037 }
1038 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001039 else if( strcmp( p, "min_version" ) == 0 )
1040 {
1041 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001042 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001043 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001044 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001045 else if( strcmp( q, "tls1_1" ) == 0 ||
1046 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001047 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001048 else if( strcmp( q, "tls1_2" ) == 0 ||
1049 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001050 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001051 else
1052 goto usage;
1053 }
1054 else if( strcmp( p, "max_version" ) == 0 )
1055 {
1056 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001057 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001058 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001059 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001060 else if( strcmp( q, "tls1_1" ) == 0 ||
1061 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001062 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001063 else if( strcmp( q, "tls1_2" ) == 0 ||
1064 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001065 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001066 else
1067 goto usage;
1068 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001069 else if( strcmp( p, "arc4" ) == 0 )
1070 {
1071 switch( atoi( q ) )
1072 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001073 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
1074 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001075 default: goto usage;
1076 }
1077 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001078 else if( strcmp( p, "allow_sha1" ) == 0 )
1079 {
1080 switch( atoi( q ) )
1081 {
1082 case 0: opt.allow_sha1 = 0; break;
1083 case 1: opt.allow_sha1 = 1; break;
1084 default: goto usage;
1085 }
1086 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001087 else if( strcmp( p, "force_version" ) == 0 )
1088 {
1089 if( strcmp( q, "ssl3" ) == 0 )
1090 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001091 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
1092 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001093 }
1094 else if( strcmp( q, "tls1" ) == 0 )
1095 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001096 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
1097 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001098 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001099 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001100 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001101 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1102 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001103 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001104 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001105 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001106 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1107 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001108 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001109 else if( strcmp( q, "dtls1" ) == 0 )
1110 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001111 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1112 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
1113 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001114 }
1115 else if( strcmp( q, "dtls1_2" ) == 0 )
1116 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001117 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1118 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1119 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001120 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001121 else
1122 goto usage;
1123 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001124 else if( strcmp( p, "auth_mode" ) == 0 )
1125 {
1126 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001127 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001128 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001129 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001130 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001131 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001132 else
1133 goto usage;
1134 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001135 else if( strcmp( p, "max_frag_len" ) == 0 )
1136 {
1137 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001138 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001139 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001140 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001141 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001142 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001143 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001144 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001145 else
1146 goto usage;
1147 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001148 else if( strcmp( p, "trunc_hmac" ) == 0 )
1149 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001150 switch( atoi( q ) )
1151 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001152 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1153 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001154 default: goto usage;
1155 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001156 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001157 else if( strcmp( p, "hs_timeout" ) == 0 )
1158 {
1159 if( ( p = strchr( q, '-' ) ) == NULL )
1160 goto usage;
1161 *p++ = '\0';
1162 opt.hs_to_min = atoi( q );
1163 opt.hs_to_max = atoi( p );
1164 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1165 goto usage;
1166 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001167 else if( strcmp( p, "mtu" ) == 0 )
1168 {
1169 opt.dtls_mtu = atoi( q );
1170 if( opt.dtls_mtu < 0 )
1171 goto usage;
1172 }
Hanno Becker4d615912018-08-14 13:33:30 +01001173 else if( strcmp( p, "dgram_packing" ) == 0 )
1174 {
1175 opt.dgram_packing = atoi( q );
1176 if( opt.dgram_packing != 0 &&
1177 opt.dgram_packing != 1 )
1178 {
1179 goto usage;
1180 }
1181 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001182 else if( strcmp( p, "recsplit" ) == 0 )
1183 {
1184 opt.recsplit = atoi( q );
1185 if( opt.recsplit < 0 || opt.recsplit > 1 )
1186 goto usage;
1187 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001188 else if( strcmp( p, "dhmlen" ) == 0 )
1189 {
1190 opt.dhmlen = atoi( q );
1191 if( opt.dhmlen < 0 )
1192 goto usage;
1193 }
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +01001194 else if( strcmp( p, "query_config" ) == 0 )
1195 {
1196 return query_config( q );
1197 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001198 else
1199 goto usage;
1200 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001201
Hanno Becker16970d22017-10-10 15:56:37 +01001202 /* Event-driven IO is incompatible with the above custom
1203 * receive and send functions, as the polling builds on
1204 * refers to the underlying net_context. */
1205 if( opt.event == 1 && opt.nbio != 1 )
1206 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001207 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001208 opt.nbio = 1;
1209 }
1210
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001211#if defined(MBEDTLS_DEBUG_C)
1212 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001213#endif
1214
Paul Bakkerc1516be2013-06-29 16:01:32 +02001215 if( opt.force_ciphersuite[0] > 0 )
1216 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001217 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001218 ciphersuite_info =
1219 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001220
Paul Bakker66c48102013-07-26 14:05:32 +02001221 if( opt.max_version != -1 &&
1222 ciphersuite_info->min_minor_ver > opt.max_version )
1223 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001224 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker66c48102013-07-26 14:05:32 +02001225 ret = 2;
1226 goto usage;
1227 }
1228 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02001229 ciphersuite_info->max_minor_ver < opt.min_version )
1230 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001231 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001232 ret = 2;
1233 goto usage;
1234 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001235
1236 /* If the server selects a version that's not supported by
1237 * this suite, then there will be no common ciphersuite... */
1238 if( opt.max_version == -1 ||
1239 opt.max_version > ciphersuite_info->max_minor_ver )
1240 {
Paul Bakker66c48102013-07-26 14:05:32 +02001241 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001242 }
Paul Bakker66c48102013-07-26 14:05:32 +02001243 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001244 {
Paul Bakker66c48102013-07-26 14:05:32 +02001245 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001246 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001247 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1248 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1249 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001250 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001251
1252 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001253 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001254 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001255 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001256 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001257 mbedtls_printf( "forced RC4 ciphersuite with RC4 disabled\n" );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001258 ret = 2;
1259 goto usage;
1260 }
1261
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001262 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001263 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001264 }
1265
Hanno Beckera5a2b082019-05-15 14:03:01 +01001266#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker96870292019-05-03 17:30:59 +01001267 cid_len = strlen( opt.cid_val ) / 2;
1268 if( cid_len > sizeof( cid ) )
1269 {
1270 mbedtls_printf( "CID too long\n" );
1271 goto exit;
1272 }
Hanno Becker7a7aa192019-04-09 17:24:19 +01001273
Hanno Becker96870292019-05-03 17:30:59 +01001274 if( unhexify( opt.cid_val, cid ) != 0 )
1275 {
1276 mbedtls_printf( "CID not valid hex\n" );
1277 goto exit;
1278 }
1279
1280 /* Keep CID settings for renegotiation unless
1281 * specified otherwise. */
1282 if( opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO )
1283 opt.cid_enabled_renego = opt.cid_enabled;
1284 if( opt.cid_val_renego == DFL_CID_VALUE_RENEGO )
1285 opt.cid_val_renego = opt.cid_val;
1286
1287 cid_renego_len = strlen( opt.cid_val_renego ) / 2;
1288 if( cid_renego_len > sizeof( cid_renego ) )
1289 {
1290 mbedtls_printf( "CID too long\n" );
1291 goto exit;
1292 }
1293
1294 if( unhexify( opt.cid_val_renego, cid_renego ) != 0 )
1295 {
1296 mbedtls_printf( "CID not valid hex\n" );
1297 goto exit;
1298 }
Hanno Beckera5a2b082019-05-15 14:03:01 +01001299#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker7a7aa192019-04-09 17:24:19 +01001300
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001301#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001302 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001303 * Unhexify the pre-shared key if any is given
1304 */
1305 if( strlen( opt.psk ) )
1306 {
Hanno Beckerec370302019-04-09 17:12:56 +01001307 psk_len = strlen( opt.psk ) / 2;
1308 if( psk_len > sizeof( psk ) )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001309 {
Hanno Beckerec370302019-04-09 17:12:56 +01001310 mbedtls_printf( "pre-shared key too long\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001311 goto exit;
1312 }
1313
Hanno Beckerec370302019-04-09 17:12:56 +01001314 if( unhexify( opt.psk, psk ) != 0 )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001315 {
Hanno Beckerec370302019-04-09 17:12:56 +01001316 mbedtls_printf( "pre-shared key not valid hex\n" );
1317 goto exit;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001318 }
1319 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001320#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001321
Hanno Beckere6706e62017-05-15 16:05:15 +01001322#if defined(MBEDTLS_ECP_C)
1323 if( opt.curves != NULL )
1324 {
1325 p = (char *) opt.curves;
1326 i = 0;
1327
1328 if( strcmp( p, "none" ) == 0 )
1329 {
1330 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1331 }
1332 else if( strcmp( p, "default" ) != 0 )
1333 {
1334 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001335 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001336 {
1337 q = p;
1338
1339 /* Terminate the current string */
1340 while( *p != ',' && *p != '\0' )
1341 p++;
1342 if( *p == ',' )
1343 *p++ = '\0';
1344
1345 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1346 {
1347 curve_list[i++] = curve_cur->grp_id;
1348 }
1349 else
1350 {
1351 mbedtls_printf( "unknown curve %s\n", q );
1352 mbedtls_printf( "supported curves: " );
1353 for( curve_cur = mbedtls_ecp_curve_list();
1354 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1355 curve_cur++ )
1356 {
1357 mbedtls_printf( "%s ", curve_cur->name );
1358 }
1359 mbedtls_printf( "\n" );
1360 goto exit;
1361 }
1362 }
1363
1364 mbedtls_printf("Number of curves: %d\n", i );
1365
Hanno Becker8651a432017-06-09 16:13:22 +01001366 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001367 {
Hanno Becker8651a432017-06-09 16:13:22 +01001368 mbedtls_printf( "curves list too long, maximum %d",
1369 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001370 goto exit;
1371 }
1372
1373 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1374 }
1375 }
1376#endif /* MBEDTLS_ECP_C */
1377
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001378#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001379 if( opt.alpn_string != NULL )
1380 {
1381 p = (char *) opt.alpn_string;
1382 i = 0;
1383
1384 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001385 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001386 {
1387 alpn_list[i++] = p;
1388
1389 /* Terminate the current string and move on to next one */
1390 while( *p != ',' && *p != '\0' )
1391 p++;
1392 if( *p == ',' )
1393 *p++ = '\0';
1394 }
1395 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001396#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001397
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001398 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001399 * 0. Initialize the RNG and the session data
1400 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001401 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001402 fflush( stdout );
1403
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001404 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001405 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
1406 &entropy, (const unsigned char *) pers,
1407 strlen( pers ) ) ) != 0 )
Paul Bakker508ad5a2011-12-04 17:09:26 +00001408 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001409 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
1410 -ret );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001411 goto exit;
1412 }
1413
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001414 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001415
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001416#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001417 /*
1418 * 1.1. Load the trusted CA
1419 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001420 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001421 fflush( stdout );
1422
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001423#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001424 if( strlen( opt.ca_path ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001425 if( strcmp( opt.ca_path, "none" ) == 0 )
1426 ret = 0;
1427 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001428 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001429 else if( strlen( opt.ca_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001430 if( strcmp( opt.ca_file, "none" ) == 0 )
1431 ret = 0;
1432 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001433 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001434 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001435#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001436#if defined(MBEDTLS_CERTS_C)
1437 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001438 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001439 ret = mbedtls_x509_crt_parse( &cacert,
1440 (const unsigned char *) mbedtls_test_cas[i],
1441 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001442 if( ret != 0 )
1443 break;
1444 }
Paul Bakker5690efc2011-05-26 13:16:06 +00001445#else
1446 {
1447 ret = 1;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001448 mbedtls_printf( "MBEDTLS_CERTS_C not defined." );
Paul Bakker5690efc2011-05-26 13:16:06 +00001449 }
1450#endif
Paul Bakker42488232012-05-16 08:21:05 +00001451 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001452 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001453 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1454 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001455 goto exit;
1456 }
1457
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001458 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001459
1460 /*
1461 * 1.2. Load own certificate and private key
1462 *
1463 * (can be skipped if client authentication is not required)
1464 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001465 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001466 fflush( stdout );
1467
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001468#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001469 if( strlen( opt.crt_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001470 if( strcmp( opt.crt_file, "none" ) == 0 )
1471 ret = 0;
1472 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001473 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001474 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001475#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001476#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001477 ret = mbedtls_x509_crt_parse( &clicert,
1478 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001479 mbedtls_test_cli_crt_len );
Paul Bakker5690efc2011-05-26 13:16:06 +00001480#else
1481 {
1482 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001483 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakker5690efc2011-05-26 13:16:06 +00001484 }
1485#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001486 if( ret != 0 )
1487 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001488 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1489 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001490 goto exit;
1491 }
1492
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001493#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001494 if( strlen( opt.key_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001495 if( strcmp( opt.key_file, "none" ) == 0 )
1496 ret = 0;
1497 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001498 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" );
Paul Bakker67968392010-07-18 08:28:20 +00001499 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001500#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001501#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001502 ret = mbedtls_pk_parse_key( &pkey,
1503 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001504 mbedtls_test_cli_key_len, NULL, 0 );
Paul Bakker5690efc2011-05-26 13:16:06 +00001505#else
1506 {
1507 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001508 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakker5690efc2011-05-26 13:16:06 +00001509 }
1510#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001511 if( ret != 0 )
1512 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001513 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
1514 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001515 goto exit;
1516 }
1517
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001518 mbedtls_printf( " ok\n" );
1519#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001520
1521 /*
1522 * 2. Start the connection
1523 */
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +01001524 if( opt.server_addr == NULL)
1525 opt.server_addr = opt.server_name;
1526
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001527 mbedtls_printf( " . Connecting to %s/%s/%s...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001528 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01001529 opt.server_addr, opt.server_port );
Paul Bakker5121ce52009-01-03 21:22:43 +00001530 fflush( stdout );
1531
Hanno Becker16970d22017-10-10 15:56:37 +01001532 if( ( ret = mbedtls_net_connect( &server_fd,
1533 opt.server_addr, opt.server_port,
1534 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
1535 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001536 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001537 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
1538 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001539 goto exit;
1540 }
1541
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001542 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001543 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001544 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001545 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001546 if( ret != 0 )
1547 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001548 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
1549 -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001550 goto exit;
1551 }
1552
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001553 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001554
1555 /*
1556 * 3. Setup stuff
1557 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001558 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001559 fflush( stdout );
1560
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001561 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1562 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001563 opt.transport,
1564 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001565 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001566 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
1567 -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001568 goto exit;
1569 }
1570
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001571#if defined(MBEDTLS_X509_CRT_PARSE_C)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001572 /* The default algorithms profile disables SHA-1, but our tests still
1573 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001574 if( opt.allow_sha1 > 0 )
1575 {
1576 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1577 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
1578 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
1579 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02001580
Paul Bakker915275b2012-09-28 07:10:55 +00001581 if( opt.debug_level > 0 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001582 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
Gilles Peskineef86ab22017-05-05 18:59:02 +02001583#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker915275b2012-09-28 07:10:55 +00001584
Hanno Beckera5a2b082019-05-15 14:03:01 +01001585#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker96870292019-05-03 17:30:59 +01001586 if( opt.cid_enabled == 1 || opt.cid_enabled_renego == 1 )
Hanno Beckereec2be92019-05-03 13:06:44 +01001587 {
Hanno Becker96870292019-05-03 17:30:59 +01001588 if( opt.cid_enabled == 1 &&
1589 opt.cid_enabled_renego == 1 &&
1590 cid_len != cid_renego_len )
1591 {
1592 mbedtls_printf( "CID length must not change during renegotiation\n" );
1593 goto usage;
1594 }
1595
Hanno Becker96870292019-05-03 17:30:59 +01001596 if( opt.cid_enabled == 1 )
Hanno Beckere8eff9a2019-05-14 11:30:10 +01001597 ret = mbedtls_ssl_conf_cid( &conf, cid_len,
1598 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Becker96870292019-05-03 17:30:59 +01001599 else
Hanno Beckere8eff9a2019-05-14 11:30:10 +01001600 ret = mbedtls_ssl_conf_cid( &conf, cid_renego_len,
1601 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Becker96870292019-05-03 17:30:59 +01001602
Hanno Beckereec2be92019-05-03 13:06:44 +01001603 if( ret != 0 )
1604 {
Hanno Becker76581052019-05-23 16:58:22 +01001605 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
1606 -ret );
Hanno Beckereec2be92019-05-03 13:06:44 +01001607 goto exit;
1608 }
1609 }
Hanno Beckera5a2b082019-05-15 14:03:01 +01001610#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckereec2be92019-05-03 13:06:44 +01001611
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001612 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001613 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001614
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001615#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001616 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001617 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1618 opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001619
Hanno Becker4d615912018-08-14 13:33:30 +01001620 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01001621 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001622#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001623
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001624#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001625 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001626 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001627 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1628 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001629 goto exit;
1630 }
Paul Bakker05decb22013-08-15 13:33:48 +02001631#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001632
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001633#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001634 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001635 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Paul Bakker1f2bc622013-08-15 13:45:55 +02001636#endif
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001637
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001638#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001639 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001640 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001641#endif
1642
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001643#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001644 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001645 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001646#endif
1647
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001648#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001649 if( opt.recsplit != DFL_RECSPLIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001650 mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit
Hanno Becker16970d22017-10-10 15:56:37 +01001651 ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED
1652 : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED );
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001653#endif
1654
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001655#if defined(MBEDTLS_DHM_C)
1656 if( opt.dhmlen != DFL_DHMLEN )
1657 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1658#endif
1659
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001660#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001661 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001662 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001663 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001664 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1665 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001666 goto exit;
1667 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001668#endif
1669
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001670 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
1671 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001672
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001673 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001674
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001675#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001676 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001677#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001678
Paul Bakker645ce3a2012-10-31 12:32:41 +00001679 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001680 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001681
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001682#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001683 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001684 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001685#endif
Paul Bakker51936882011-02-20 16:05:58 +00001686
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001687 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001688 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001689#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001690 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001691#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001692
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001693#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001694 if( strcmp( opt.ca_path, "none" ) != 0 &&
1695 strcmp( opt.ca_file, "none" ) != 0 )
1696 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001697 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001698 }
1699 if( strcmp( opt.crt_file, "none" ) != 0 &&
1700 strcmp( opt.key_file, "none" ) != 0 )
1701 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001702 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001703 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001704 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
1705 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001706 goto exit;
1707 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001708 }
Paul Bakkered27a042013-04-18 22:46:23 +02001709#endif
1710
Hanno Beckere6706e62017-05-15 16:05:15 +01001711#if defined(MBEDTLS_ECP_C)
1712 if( opt.curves != NULL &&
1713 strcmp( opt.curves, "default" ) != 0 )
1714 {
1715 mbedtls_ssl_conf_curves( &conf, curve_list );
1716 }
1717#endif
1718
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001719#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001720 if( ( ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001721 (const unsigned char *) opt.psk_identity,
1722 strlen( opt.psk_identity ) ) ) != 0 )
1723 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001724 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n",
1725 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001726 goto exit;
1727 }
Paul Bakkered27a042013-04-18 22:46:23 +02001728#endif
1729
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001730 if( opt.min_version != DFL_MIN_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001731 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1732 opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01001733
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001734 if( opt.max_version != DFL_MAX_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001735 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1736 opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00001737
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001738#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001739 if( opt.fallback != DFL_FALLBACK )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001740 mbedtls_ssl_conf_fallback( &conf, opt.fallback );
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001741#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001742
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001743 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
1744 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001745 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
1746 -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001747 goto exit;
1748 }
1749
1750#if defined(MBEDTLS_X509_CRT_PARSE_C)
1751 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
1752 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001753 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
1754 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001755 goto exit;
1756 }
1757#endif
1758
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001759#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
1760 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
1761 {
1762 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
1763 (const unsigned char *) opt.ecjpake_pw,
1764 strlen( opt.ecjpake_pw ) ) ) != 0 )
1765 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001766 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
1767 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001768 goto exit;
1769 }
1770 }
1771#endif
1772
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001773 if( opt.nbio == 2 )
1774 mbedtls_ssl_set_bio( &ssl, &server_fd, my_send, my_recv, NULL );
1775 else
Hanno Becker16970d22017-10-10 15:56:37 +01001776 mbedtls_ssl_set_bio( &ssl, &server_fd,
1777 mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02001778 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001779
Hanno Beckera5a2b082019-05-15 14:03:01 +01001780#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker7a7aa192019-04-09 17:24:19 +01001781 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
1782 {
1783 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
1784 cid, cid_len ) ) != 0 )
1785 {
1786 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
1787 ret );
1788 goto exit;
1789 }
1790 }
Hanno Beckera5a2b082019-05-15 14:03:01 +01001791#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker7a7aa192019-04-09 17:24:19 +01001792
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02001793#if defined(MBEDTLS_SSL_PROTO_DTLS)
1794 if( opt.dtls_mtu != DFL_DTLS_MTU )
1795 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
1796#endif
1797
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001798#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001799 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
1800 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001801#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001802
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001803#if defined(MBEDTLS_ECP_RESTARTABLE)
1804 if( opt.ec_max_ops != DFL_EC_MAX_OPS )
1805 mbedtls_ecp_set_max_ops( opt.ec_max_ops );
1806#endif
1807
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001808 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001809
Paul Bakker5121ce52009-01-03 21:22:43 +00001810 /*
1811 * 4. Handshake
1812 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001813 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001814 fflush( stdout );
1815
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001816 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001817 {
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001818 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1819 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001820 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Paul Bakker40e46942009-01-03 21:51:57 +00001821 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001822 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
1823 -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001824 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
1825 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01001826 " Unable to verify the server's certificate. "
1827 "Either it is invalid,\n"
1828 " or you didn't set ca_file or ca_path "
1829 "to an appropriate value.\n"
1830 " Alternatively, you may want to use "
1831 "auth_mode=optional for testing purposes.\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001832 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001833 goto exit;
Paul Bakker40e46942009-01-03 21:51:57 +00001834 }
Hanno Becker16970d22017-10-10 15:56:37 +01001835
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001836#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02001837 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
1838 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001839#endif
1840
Hanno Becker16970d22017-10-10 15:56:37 +01001841 /* For event-driven IO, wait for socket to become available */
1842 if( opt.event == 1 /* level triggered IO */ )
1843 {
1844#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001845 ret = idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001846#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001847 ret = idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001848#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001849 if( ret != 0 )
1850 goto exit;
Hanno Becker16970d22017-10-10 15:56:37 +01001851 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001852 }
1853
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001854 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
Hanno Becker16970d22017-10-10 15:56:37 +01001855 mbedtls_ssl_get_version( &ssl ),
1856 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00001857
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001858 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
1859 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001860 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001861 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001862
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02001863#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
1864 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
1865 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
1866#endif
1867
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001868#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001869 if( opt.alpn_string != NULL )
1870 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001871 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
1872 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001873 alp ? alp : "(none)" );
1874 }
1875#endif
1876
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001877 if( opt.reconnect != 0 )
1878 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001879 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001880 fflush( stdout );
1881
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +02001882 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnardfbb44a42019-05-16 11:39:42 +02001883 {
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +02001884 /* free any previously saved data */
Manuel Pégourié-Gonnard4bb1b992019-05-24 10:26:41 +02001885 if( session_data != NULL )
1886 {
1887 mbedtls_platform_zeroize( session_data, session_data_len );
1888 mbedtls_free( session_data );
1889 session_data = NULL;
1890 }
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +02001891
1892 /* get size of the buffer needed */
1893 mbedtls_ssl_session_save( mbedtls_ssl_get_session_pointer( &ssl ),
1894 NULL, 0, &session_data_len );
1895 session_data = mbedtls_calloc( 1, session_data_len );
1896 if( session_data == NULL )
1897 {
1898 mbedtls_printf( " failed\n ! alloc %u bytes for session data\n",
1899 (unsigned) session_data_len );
1900 ret = MBEDTLS_ERR_SSL_ALLOC_FAILED;
1901 goto exit;
1902 }
1903
1904 /* actually save session data */
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +02001905 if( ( ret = mbedtls_ssl_session_save( mbedtls_ssl_get_session_pointer( &ssl ),
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +02001906 session_data, session_data_len,
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +02001907 &session_data_len ) ) != 0 )
1908 {
1909 mbedtls_printf( " failed\n ! mbedtls_ssl_session_saved returned -0x%04x\n\n",
1910 -ret );
1911 goto exit;
1912 }
1913 }
1914 else
1915 {
1916 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
1917 {
1918 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
1919 -ret );
1920 goto exit;
1921 }
Manuel Pégourié-Gonnardfbb44a42019-05-16 11:39:42 +02001922 }
1923
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001924 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +02001925
1926 if( opt.reco_mode == 1 )
1927 {
1928 mbedtls_printf( " [ Saved %u bytes of session data]\n",
1929 (unsigned) session_data_len );
1930 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001931 }
1932
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001933#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001934 /*
1935 * 5. Verify the server certificate
1936 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001937 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001938
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02001939 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001940 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001941 char vrfy_buf[512];
1942
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001943 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001944
Hanno Becker16970d22017-10-10 15:56:37 +01001945 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
1946 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00001947
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001948 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001949 }
1950 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001951 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001952
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001953 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001954 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001955 mbedtls_printf( " . Peer certificate information ...\n" );
1956 mbedtls_x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ",
1957 mbedtls_ssl_get_peer_cert( &ssl ) );
1958 mbedtls_printf( "%s\n", buf );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001959 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001960#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001961
Hanno Beckera5a2b082019-05-15 14:03:01 +01001962#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker96870292019-05-03 17:30:59 +01001963 ret = report_cid_usage( &ssl, "initial handshake" );
1964 if( ret != 0 )
1965 goto exit;
1966
Hanno Becker7a7aa192019-04-09 17:24:19 +01001967 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
1968 {
Hanno Becker96870292019-05-03 17:30:59 +01001969 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled_renego,
1970 cid_renego,
1971 cid_renego_len ) ) != 0 )
Hanno Becker7a7aa192019-04-09 17:24:19 +01001972 {
Hanno Becker96870292019-05-03 17:30:59 +01001973 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
1974 ret );
1975 return( ret );
Hanno Becker7a7aa192019-04-09 17:24:19 +01001976 }
1977 }
Hanno Beckera5a2b082019-05-15 14:03:01 +01001978#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker7a7aa192019-04-09 17:24:19 +01001979
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001980#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001981 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001982 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001983 /*
1984 * Perform renegotiation (this must be done when the server is waiting
1985 * for input from our side).
1986 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001987 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001988 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001989 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001990 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001991 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001992 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001993 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001994 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001995 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
1996 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001997 goto exit;
1998 }
Hanno Becker16970d22017-10-10 15:56:37 +01001999
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002000#if defined(MBEDTLS_ECP_RESTARTABLE)
2001 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2002 continue;
2003#endif
2004
Hanno Becker16970d22017-10-10 15:56:37 +01002005 /* For event-driven IO, wait for socket to become available */
2006 if( opt.event == 1 /* level triggered IO */ )
2007 {
2008#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002009 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002010#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002011 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002012#endif
2013 }
2014
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002015 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002016 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002017 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002018#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002019
Hanno Beckera5a2b082019-05-15 14:03:01 +01002020#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker96870292019-05-03 17:30:59 +01002021 ret = report_cid_usage( &ssl, "after renegotiation" );
2022 if( ret != 0 )
2023 goto exit;
Hanno Beckera5a2b082019-05-15 14:03:01 +01002024#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker96870292019-05-03 17:30:59 +01002025
Paul Bakker5121ce52009-01-03 21:22:43 +00002026 /*
2027 * 6. Write the GET request
2028 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002029 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002030send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002031 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002032 fflush( stdout );
2033
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002034 len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST,
2035 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002036 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002037
2038 /* Add padding to GET request to reach opt.request_size in length */
2039 if( opt.request_size != DFL_REQUEST_SIZE &&
2040 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02002041 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002042 memset( buf + len, 'A', opt.request_size - len - tail_len );
2043 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02002044 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002045
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002046 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002047 len += tail_len;
2048
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02002049 /* Truncate if request size is smaller than the "natural" size */
2050 if( opt.request_size != DFL_REQUEST_SIZE &&
2051 len > opt.request_size )
2052 {
2053 len = opt.request_size;
2054
2055 /* Still end with \r\n unless that's really not possible */
2056 if( len >= 2 ) buf[len - 2] = '\r';
2057 if( len >= 1 ) buf[len - 1] = '\n';
2058 }
2059
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002060 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00002061 {
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002062 written = 0;
2063 frags = 0;
2064
2065 do
Paul Bakker5121ce52009-01-03 21:22:43 +00002066 {
Hanno Becker16970d22017-10-10 15:56:37 +01002067 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002068 len - written ) ) < 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002069 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002070 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002071 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002072 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002073 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002074 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
2075 -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002076 goto exit;
2077 }
Hanno Becker16970d22017-10-10 15:56:37 +01002078
2079 /* For event-driven IO, wait for socket to become available */
2080 if( opt.event == 1 /* level triggered IO */ )
2081 {
2082#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002083 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002084#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002085 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002086#endif
2087 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002088 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002089
2090 frags++;
2091 written += ret;
Paul Bakker5121ce52009-01-03 21:22:43 +00002092 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002093 while( written < len );
Paul Bakker5121ce52009-01-03 21:22:43 +00002094 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002095 else /* Not stream, so datagram */
2096 {
Hanno Becker16970d22017-10-10 15:56:37 +01002097 while( 1 )
2098 {
2099 ret = mbedtls_ssl_write( &ssl, buf, len );
2100
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002101#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002102 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002103 continue;
2104#endif
2105
Hanno Becker16970d22017-10-10 15:56:37 +01002106 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2107 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2108 break;
2109
2110 /* For event-driven IO, wait for socket to become available */
2111 if( opt.event == 1 /* level triggered IO */ )
2112 {
2113#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002114 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002115#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002116 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002117#endif
2118 }
2119 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002120
2121 if( ret < 0 )
2122 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002123 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
2124 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002125 goto exit;
2126 }
2127
2128 frags = 1;
2129 written = ret;
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002130
2131 if( written < len )
2132 {
2133 mbedtls_printf( " warning\n ! request didn't fit into single datagram and "
2134 "was truncated to size %u", (unsigned) written );
2135 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002136 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002137
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002138 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01002139 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
2140 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002141
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002142 /* Send a non-empty request if request_size == 0 */
2143 if ( len == 0 )
2144 {
2145 opt.request_size = DFL_REQUEST_SIZE;
2146 goto send_request;
2147 }
2148
Paul Bakker5121ce52009-01-03 21:22:43 +00002149 /*
2150 * 7. Read the HTTP response
2151 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002152 mbedtls_printf( " < Read from server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002153 fflush( stdout );
2154
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002155 /*
2156 * TLS and DTLS need different reading styles (stream vs datagram)
2157 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002158 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002159 {
2160 do
2161 {
2162 len = sizeof( buf ) - 1;
2163 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002164 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002165
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002166#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002167 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002168 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002169#endif
2170
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002171 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
2172 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01002173 {
2174 /* For event-driven IO, wait for socket to become available */
2175 if( opt.event == 1 /* level triggered IO */ )
2176 {
2177#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002178 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002179#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002180 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002181#endif
2182 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002183 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002184 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002185
2186 if( ret <= 0 )
2187 {
2188 switch( ret )
2189 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002190 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2191 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002192 ret = 0;
2193 goto close_notify;
2194
2195 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002196 case MBEDTLS_ERR_NET_CONN_RESET:
2197 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002198 ret = 0;
2199 goto reconnect;
2200
2201 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002202 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
2203 -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002204 goto exit;
2205 }
2206 }
2207
2208 len = ret;
2209 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002210 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002211
2212 /* End of message should be detected according to the syntax of the
2213 * application protocol (eg HTTP), just use a dummy test here. */
2214 if( ret > 0 && buf[len-1] == '\n' )
2215 {
2216 ret = 0;
2217 break;
2218 }
2219 }
2220 while( 1 );
2221 }
2222 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00002223 {
2224 len = sizeof( buf ) - 1;
2225 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00002226
Hanno Becker16970d22017-10-10 15:56:37 +01002227 while( 1 )
2228 {
2229 ret = mbedtls_ssl_read( &ssl, buf, len );
2230
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002231#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002232 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002233 continue;
2234#endif
2235
Hanno Becker16970d22017-10-10 15:56:37 +01002236 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2237 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2238 break;
2239
2240 /* For event-driven IO, wait for socket to become available */
2241 if( opt.event == 1 /* level triggered IO */ )
2242 {
2243#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002244 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002245#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002246 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002247#endif
2248 }
2249 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002250
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002251 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002252 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002253 switch( ret )
2254 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002255 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002256 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002257 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02002258 goto send_request;
2259 goto exit;
2260
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002261 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2262 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002263 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002264 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00002265
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002266 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002267 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002268 goto exit;
2269 }
Paul Bakker5690efc2011-05-26 13:16:06 +00002270 }
2271
Paul Bakker5121ce52009-01-03 21:22:43 +00002272 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02002273 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002274 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002275 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00002276 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002277
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002278 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002279 * 7b. Simulate hard reset and reconnect from same port?
2280 */
2281 if( opt.reconnect_hard != 0 )
2282 {
2283 opt.reconnect_hard = 0;
2284
2285 mbedtls_printf( " . Restarting connection from same port..." );
2286 fflush( stdout );
2287
2288 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
2289 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002290 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
2291 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002292 goto exit;
2293 }
2294
2295 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
2296 {
2297 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002298 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002299 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002300 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002301 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
2302 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002303 goto exit;
2304 }
Hanno Becker16970d22017-10-10 15:56:37 +01002305
2306 /* For event-driven IO, wait for socket to become available */
2307 if( opt.event == 1 /* level triggered IO */ )
2308 {
2309#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002310 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002311#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002312 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002313#endif
2314 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002315 }
2316
2317 mbedtls_printf( " ok\n" );
2318
2319 goto send_request;
2320 }
2321
2322 /*
2323 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002324 */
2325 if( --opt.exchanges > 0 )
2326 goto send_request;
2327
2328 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002329 * 8. Done, cleanly close the connection
2330 */
2331close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002332 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002333 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002334
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02002335 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002336 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002337 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02002338 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002339
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002340 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002341
2342 /*
2343 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002344 */
2345reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002346 if( opt.reconnect != 0 )
2347 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02002348 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002349
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002350 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01002351
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002352#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002353 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02002354 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002355#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02002356
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002357 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002358
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002359 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002360 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002361 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
2362 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002363 goto exit;
2364 }
2365
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +02002366 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnardfbb44a42019-05-16 11:39:42 +02002367 {
Manuel Pégourié-Gonnard57a348b2019-05-20 12:46:26 +02002368 if( ( ret = mbedtls_ssl_session_load( &saved_session,
2369 session_data,
2370 session_data_len ) ) != 0 )
2371 {
2372 mbedtls_printf( " failed\n ! mbedtls_ssl_session_load returned -0x%x\n\n",
2373 -ret );
2374 goto exit;
2375 }
Manuel Pégourié-Gonnardfbb44a42019-05-16 11:39:42 +02002376 }
2377
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002378 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002379 {
Manuel Pégourié-Gonnardfbb44a42019-05-16 11:39:42 +02002380 mbedtls_printf( " failed\n ! mbedtls_ssl_set_session returned -0x%x\n\n",
2381 -ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002382 goto exit;
2383 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002384
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002385 if( ( ret = mbedtls_net_connect( &server_fd,
2386 opt.server_addr, opt.server_port,
2387 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2388 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002389 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002390 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
2391 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002392 goto exit;
2393 }
2394
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002395 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002396 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002397 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002398 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002399 if( ret != 0 )
2400 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002401 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002402 -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002403 goto exit;
2404 }
2405
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002406 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002407 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002408 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002409 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002410 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002411 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002412 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
2413 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002414 goto exit;
2415 }
2416 }
2417
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002418 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002419
2420 goto send_request;
2421 }
2422
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002423 /*
2424 * Cleanup and exit
2425 */
Paul Bakker5121ce52009-01-03 21:22:43 +00002426exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002427#ifdef MBEDTLS_ERROR_C
Paul Bakkera3d195c2011-11-27 21:07:34 +00002428 if( ret != 0 )
2429 {
2430 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002431 mbedtls_strerror( ret, error_buf, 100 );
2432 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00002433 }
2434#endif
2435
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002436 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002437
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002438#if defined(MBEDTLS_X509_CRT_PARSE_C)
2439 mbedtls_x509_crt_free( &clicert );
2440 mbedtls_x509_crt_free( &cacert );
2441 mbedtls_pk_free( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +02002442#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002443 mbedtls_ssl_session_free( &saved_session );
2444 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002445 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002446 mbedtls_ctr_drbg_free( &ctr_drbg );
2447 mbedtls_entropy_free( &entropy );
Manuel Pégourié-Gonnard4bb1b992019-05-24 10:26:41 +02002448 if( session_data != NULL )
2449 mbedtls_platform_zeroize( session_data, session_data_len );
Manuel Pégourié-Gonnard32ce5962019-05-21 11:01:32 +02002450 mbedtls_free( session_data );
Paul Bakker5121ce52009-01-03 21:22:43 +00002451
Paul Bakkercce9d772011-11-18 14:26:47 +00002452#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002453 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002454 fflush( stdout ); getchar();
2455#endif
2456
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02002457 // Shell can not handle large exit numbers -> 1 for errors
2458 if( ret < 0 )
2459 ret = 1;
2460
Paul Bakker5121ce52009-01-03 21:22:43 +00002461 return( ret );
2462}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002463#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
2464 MBEDTLS_SSL_CLI_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002465 MBEDTLS_CTR_DRBG_C MBEDTLS_TIMING_C */