blob: fffd98c7d540855040bef0307285007366d572a1 [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb60b95f2012-09-25 09:05:17 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakkerb60b95f2012-09-25 09:05:17 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Manuel Pégourié-Gonnard8a4d5712014-06-24 14:19:59 +020031#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010032#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020033#define mbedtls_free free
Simon Butcherd3138c32016-04-27 01:26:50 +010034#define mbedtls_time time
35#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +020036#define mbedtls_calloc calloc
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037#define mbedtls_fprintf fprintf
38#define mbedtls_printf printf
Rich Evans18b78c72015-02-11 14:06:19 +000039#endif
Manuel Pégourié-Gonnard8a4d5712014-06-24 14:19:59 +020040
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020041#if !defined(MBEDTLS_ENTROPY_C) || \
42 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_SRV_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020043 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020044int main( void )
45{
46 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
47 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_SRV_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020048 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020049 return( 0 );
50}
51#else
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +010052
Andres AG788aa4a2016-09-14 14:32:09 +010053#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000054#include "mbedtls/ssl.h"
55#include "mbedtls/entropy.h"
56#include "mbedtls/ctr_drbg.h"
57#include "mbedtls/certs.h"
58#include "mbedtls/x509.h"
59#include "mbedtls/error.h"
60#include "mbedtls/debug.h"
Manuel Pégourié-Gonnard56273da2015-05-26 12:19:45 +020061#include "mbedtls/timing.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000062
Rich Evans18b78c72015-02-11 14:06:19 +000063#include <stdio.h>
64#include <stdlib.h>
65#include <string.h>
Andres AG692ad842017-01-19 16:30:57 +000066#include <stdint.h>
Andres AG0b736db2017-02-08 14:05:57 +000067
68#if !defined(_MSC_VER)
Andres AG692ad842017-01-19 16:30:57 +000069#include <inttypes.h>
Andres AG0b736db2017-02-08 14:05:57 +000070#endif
Rich Evans18b78c72015-02-11 14:06:19 +000071
72#if !defined(_WIN32)
73#include <signal.h>
74#endif
75
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020076#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000077#include "mbedtls/ssl_cache.h"
Paul Bakker0a597072012-09-25 21:55:46 +000078#endif
79
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +020080#if defined(MBEDTLS_SSL_TICKET_C)
81#include "mbedtls/ssl_ticket.h"
82#endif
83
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020084#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000085#include "mbedtls/ssl_cookie.h"
Manuel Pégourié-Gonnard232edd42014-07-23 16:56:27 +020086#endif
87
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020088#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000089#include "mbedtls/memory_buffer_alloc.h"
Paul Bakker82024bf2013-07-04 11:52:32 +020090#endif
91
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020092#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && defined(MBEDTLS_FS_IO)
93#define SNI_OPTION
94#endif
95
96#if defined(_WIN32)
97#include <windows.h>
98#endif
99
Simon Butchercce68be2018-07-23 14:26:09 +0100100/* Size of memory to be allocated for the heap, when using the library's memory
101 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
102#define MEMORY_HEAP_SIZE 120000
103
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +0100104#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200105#define DFL_SERVER_PORT "4433"
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200106#define DFL_RESPONSE_SIZE -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000107#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100108#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +0100109#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200110#define DFL_READ_TIMEOUT 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000111#define DFL_CA_FILE ""
112#define DFL_CA_PATH ""
113#define DFL_CRT_FILE ""
114#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200115#define DFL_CRT_FILE2 ""
116#define DFL_KEY_FILE2 ""
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100117#define DFL_ASYNC_OPERATIONS "-"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100118#define DFL_ASYNC_PRIVATE_DELAY1 ( -1 )
119#define DFL_ASYNC_PRIVATE_DELAY2 ( -1 )
Gilles Peskine3665f1d2018-01-05 21:22:12 +0100120#define DFL_ASYNC_PRIVATE_ERROR ( 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +0200121#define DFL_PSK ""
122#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200123#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200124#define DFL_PSK_LIST NULL
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000125#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200126#define DFL_VERSION_SUITES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200127#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100128#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100129#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +0200130#define DFL_RENEGO_DELAY -2
Andres AG692ad842017-01-19 16:30:57 +0000131#define DFL_RENEGO_PERIOD ( (uint64_t)-1 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200132#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200133#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +0200134#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000135#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200136#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100137#define DFL_AUTH_MODE -1
Janos Follath4817e272017-04-10 13:44:33 +0100138#define DFL_CERT_REQ_CA_LIST MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200139#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100140#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200141#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200142#define DFL_TICKET_TIMEOUT 86400
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100143#define DFL_CACHE_MAX -1
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100144#define DFL_CACHE_TIMEOUT -1
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100145#define DFL_SNI NULL
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200146#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100147#define DFL_CURVES NULL
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200148#define DFL_DHM_FILE NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200149#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200150#define DFL_COOKIES 1
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200151#define DFL_ANTI_REPLAY -1
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200152#define DFL_HS_TO_MIN 0
153#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200154#define DFL_DTLS_MTU -1
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200155#define DFL_BADMAC_LIMIT -1
Hanno Beckere7675d02018-08-14 13:28:56 +0100156#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200157#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100158#define DFL_ETM -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000159
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200160#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
161 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
162 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
163 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
164 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
165 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
166 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200167
Paul Bakker8e714d72013-07-18 11:05:13 +0200168/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
169 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000170#define HTTP_RESPONSE \
171 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Manuel Pégourié-Gonnard91699212015-01-22 16:26:39 +0000172 "<h2>mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200173 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000174
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200175/*
176 * Size of the basic I/O buffer. Able to hold our default response.
177 *
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200178 * You will need to adapt the mbedtls_ssl_get_bytes_avail() test in ssl-opt.sh
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200179 * if you change this value to something outside the range <= 100 or > 500
180 */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200181#define DFL_IO_BUF_LEN 200
Manuel Pégourié-Gonnarde7a3b102014-06-11 18:21:20 +0200182
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183#if defined(MBEDTLS_X509_CRT_PARSE_C)
184#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000185#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100186 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
187 " default: \"\" (pre-loaded)\n" \
188 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
189 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
190 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200191 " default: see note after key_file2\n" \
192 " key_file=%%s default: see note after key_file2\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200193 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200194 " default: see note after key_file2\n" \
195 " key_file2=%%s default: see note below\n" \
196 " note: if neither crt_file/key_file nor crt_file2/key_file2 are used,\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200197 " preloaded certificate(s) and key(s) are used if available\n" \
198 " dhm_file=%%s File containing Diffie-Hellman parameters\n" \
199 " default: preloaded parameters\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000200#else
201#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200202 "\n" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200203 " No file operations available (MBEDTLS_FS_IO not defined)\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200204 "\n"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200205#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200206#else
207#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200209
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200210#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100211#define USAGE_SSL_ASYNC \
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100212 " async_operations=%%c... d=decrypt, s=sign (default: -=off)\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100213 " async_private_delay1=%%d Asynchronous delay for key_file or preloaded key\n" \
Gilles Peskine166ce742018-04-30 10:30:49 +0200214 " async_private_delay2=%%d Asynchronous delay for key_file2 and sni\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100215 " default: -1 (not asynchronous)\n" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +0100216 " async_private_error=%%d Async callback error injection (default=0=none,\n" \
Gilles Peskinec9125722018-04-26 07:15:40 +0200217 " 1=start, 2=cancel, 3=resume, negative=first time only)"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100218#else
219#define USAGE_SSL_ASYNC ""
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200220#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100221
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200222#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkered27a042013-04-18 22:46:23 +0200223#define USAGE_PSK \
224 " psk=%%s default: \"\" (in hex, without 0x)\n" \
225 " psk_identity=%%s default: \"Client_identity\"\n"
226#else
227#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200228#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000229
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200230#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200231#define USAGE_TICKETS \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +0100232 " tickets=%%d default: 1 (enabled)\n" \
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200233 " ticket_timeout=%%d default: 86400 (one day)\n"
Paul Bakkera503a632013-08-14 13:48:06 +0200234#else
235#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200236#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200237
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200238#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100239#define USAGE_CACHE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100240 " cache_max=%%d default: cache default (50)\n" \
241 " cache_timeout=%%d default: cache default (1d)\n"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100242#else
243#define USAGE_CACHE ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200244#endif /* MBEDTLS_SSL_CACHE_C */
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100245
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200246#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100247#define USAGE_SNI \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200248 " sni=%%s name1,cert1,key1,ca1,crl1,auth1[,...]\n" \
249 " default: disabled\n"
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100250#else
251#define USAGE_SNI ""
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200252#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100253
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200254#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200255#define USAGE_MAX_FRAG_LEN \
256 " max_frag_len=%%d default: 16384 (tls default)\n" \
257 " options: 512, 1024, 2048, 4096\n"
258#else
259#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200260#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200261
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200262#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100263#define USAGE_TRUNC_HMAC \
264 " trunc_hmac=%%d default: library default\n"
265#else
266#define USAGE_TRUNC_HMAC ""
267#endif
268
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200269#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200270#define USAGE_ALPN \
271 " alpn=%%s default: \"\" (disabled)\n" \
272 " example: spdy/1,http/1.1\n"
273#else
274#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200275#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200276
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200277#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200278#define USAGE_COOKIES \
279 " cookies=0/1/-1 default: 1 (enabled)\n" \
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200280 " 0: disabled, -1: library default (broken)\n"
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200281#else
282#define USAGE_COOKIES ""
283#endif
284
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200285#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200286#define USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200287 " anti_replay=0/1 default: (library default: enabled)\n"
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200288#else
289#define USAGE_ANTI_REPLAY ""
290#endif
291
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200292#if defined(MBEDTLS_SSL_DTLS_BADMAC_LIMIT)
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200293#define USAGE_BADMAC_LIMIT \
294 " badmac_limit=%%d default: (library default: disabled)\n"
295#else
296#define USAGE_BADMAC_LIMIT ""
297#endif
298
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200299#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200300#define USAGE_DTLS \
301 " dtls=%%d default: 0 (TLS)\n" \
302 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200303 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Beckere7675d02018-08-14 13:28:56 +0100304 " mtu=%%d default: (library default: unlimited)\n" \
305 " dgram_packing=%%d default: 1 (allowed)\n" \
306 " allow or forbid packing of multiple\n" \
307 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200308#else
309#define USAGE_DTLS ""
310#endif
311
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200312#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200313#define USAGE_EMS \
314 " extended_ms=0/1 default: (library default: on)\n"
315#else
316#define USAGE_EMS ""
317#endif
318
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200319#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100320#define USAGE_ETM \
321 " etm=0/1 default: (library default: on)\n"
322#else
323#define USAGE_ETM ""
324#endif
325
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200326#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100327#define USAGE_RENEGO \
328 " renegotiation=%%d default: 0 (disabled)\n" \
329 " renegotiate=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +0100330 " renego_delay=%%d default: -2 (library default)\n" \
Andres AG692ad842017-01-19 16:30:57 +0000331 " renego_period=%%d default: (2^64 - 1 for TLS, 2^48 - 1 for DTLS)\n"
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100332#else
333#define USAGE_RENEGO ""
334#endif
335
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200336#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
337#define USAGE_ECJPAKE \
338 " ecjpake_pw=%%s default: none (disabled)\n"
339#else
340#define USAGE_ECJPAKE ""
341#endif
342
Hanno Beckere6706e62017-05-15 16:05:15 +0100343#if defined(MBEDTLS_ECP_C)
344#define USAGE_CURVES \
345 " curves=a,b,c,d default: \"default\" (library default)\n" \
346 " example: \"secp521r1,brainpoolP512r1\"\n" \
347 " - use \"none\" for empty list\n" \
348 " - see mbedtls_ecp_curve_list()\n" \
349 " for acceptable curve names\n"
350#else
351#define USAGE_CURVES ""
352#endif
353
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000354#define USAGE \
355 "\n usage: ssl_server2 param=<>...\n" \
356 "\n acceptable parameters:\n" \
Ron Eldor71f68c42017-09-26 11:29:11 +0300357 " server_addr=%%s default: (all interfaces)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000358 " server_port=%%d default: 4433\n" \
359 " debug_level=%%d default: 0 (disabled)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200360 " buffer_size=%%d default: 200 \n" \
361 " (minimum: 1, max: 16385)\n" \
362 " response_size=%%d default: about 152 (basic response)\n" \
363 " (minimum: 0, max: 16384)\n" \
364 " increases buffer_size if bigger\n"\
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100365 " nbio=%%d default: 0 (blocking I/O)\n" \
366 " options: 1 (non-blocking), 2 (added delays)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100367 " event=%%d default: 0 (loop)\n" \
368 " options: 1 (level-triggered, implies nbio=1),\n" \
Manuel Pégourié-Gonnard22311ae2015-09-09 11:22:58 +0200369 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100370 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200371 USAGE_DTLS \
372 USAGE_COOKIES \
373 USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200374 USAGE_BADMAC_LIMIT \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200375 "\n" \
Manuel Pégourié-Gonnardee6139c2015-05-07 10:18:26 +0100376 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100377 " options: none, optional, required\n" \
Janos Follath4817e272017-04-10 13:44:33 +0100378 " cert_req_ca_list=%%d default: 1 (send ca list)\n" \
379 " options: 1 (send ca list), 0 (don't send)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000380 USAGE_IO \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100381 USAGE_SSL_ASYNC \
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100382 USAGE_SNI \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100383 "\n" \
384 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200385 USAGE_ECJPAKE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100386 "\n" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100387 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100388 USAGE_RENEGO \
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200389 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200390 "\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100391 USAGE_TICKETS \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100392 USAGE_CACHE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100393 USAGE_MAX_FRAG_LEN \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100394 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200395 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200396 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100397 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100398 USAGE_CURVES \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100399 "\n" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100400 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200401 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200402 " min_version=%%s default: (library default: tls1)\n" \
403 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakkerc1516be2013-06-29 16:01:32 +0200404 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100405 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200406 "\n" \
407 " version_suites=a,b,c,d per-version ciphersuites\n" \
408 " in order from ssl3 to tls1_2\n" \
409 " default: all enabled\n" \
410 " force_ciphersuite=<name> default: all enabled\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000411 " acceptable ciphersuite names:\n"
412
Andres AG692ad842017-01-19 16:30:57 +0000413
Hanno Becker8651a432017-06-09 16:13:22 +0100414#define ALPN_LIST_SIZE 10
415#define CURVE_LIST_SIZE 20
416
Andres AG692ad842017-01-19 16:30:57 +0000417#define PUT_UINT64_BE(out_be,in_le,i) \
418{ \
419 (out_be)[(i) + 0] = (unsigned char)( ( (in_le) >> 56 ) & 0xFF ); \
420 (out_be)[(i) + 1] = (unsigned char)( ( (in_le) >> 48 ) & 0xFF ); \
421 (out_be)[(i) + 2] = (unsigned char)( ( (in_le) >> 40 ) & 0xFF ); \
422 (out_be)[(i) + 3] = (unsigned char)( ( (in_le) >> 32 ) & 0xFF ); \
423 (out_be)[(i) + 4] = (unsigned char)( ( (in_le) >> 24 ) & 0xFF ); \
424 (out_be)[(i) + 5] = (unsigned char)( ( (in_le) >> 16 ) & 0xFF ); \
425 (out_be)[(i) + 6] = (unsigned char)( ( (in_le) >> 8 ) & 0xFF ); \
426 (out_be)[(i) + 7] = (unsigned char)( ( (in_le) >> 0 ) & 0xFF ); \
427}
428
Simon Butcher63cb97e2018-12-06 17:43:31 +0000429#if defined( MBEDTLS_CHECK_PARAMS ) && defined(MBEDTLS_PLATFORM_C)
430void mbedtls_param_failed( char* failure_condition, char* file, int line )
431{
432 mbedtls_printf("%s:%i: Input param failed - %sn", file, line, failure_condition );
433 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
434}
435#endif
436
Rich Evans85b05ec2015-02-12 11:37:29 +0000437/*
438 * global options
439 */
440struct options
441{
442 const char *server_addr; /* address on which the ssl service runs */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200443 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000444 int debug_level; /* level of debugging */
445 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100446 int event; /* loop or event-driven IO? level or edge triggered? */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200447 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200448 int response_size; /* pad response with header to requested size */
449 uint16_t buffer_size; /* IO buffer size */
Rich Evans85b05ec2015-02-12 11:37:29 +0000450 const char *ca_file; /* the file with the CA certificate(s) */
451 const char *ca_path; /* the path with the CA certificate(s) reside */
452 const char *crt_file; /* the file with the server certificate */
453 const char *key_file; /* the file with the server key */
454 const char *crt_file2; /* the file with the 2nd server certificate */
455 const char *key_file2; /* the file with the 2nd server key */
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100456 const char *async_operations; /* supported SSL asynchronous operations */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100457 int async_private_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
458 int async_private_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
459 int async_private_error; /* inject error in async private callback */
Rich Evans85b05ec2015-02-12 11:37:29 +0000460 const char *psk; /* the pre-shared key */
461 const char *psk_identity; /* the pre-shared key identity */
462 char *psk_list; /* list of PSK id/key pairs for callback */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200463 const char *ecjpake_pw; /* the EC J-PAKE password */
Rich Evans85b05ec2015-02-12 11:37:29 +0000464 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
465 const char *version_suites; /* per-version ciphersuites */
466 int renegotiation; /* enable / disable renegotiation */
467 int allow_legacy; /* allow legacy renegotiation */
468 int renegotiate; /* attempt renegotiation? */
469 int renego_delay; /* delay before enforcing renegotiation */
Andres AG692ad842017-01-19 16:30:57 +0000470 uint64_t renego_period; /* period for automatic renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000471 int exchanges; /* number of data exchanges */
472 int min_version; /* minimum protocol version accepted */
473 int max_version; /* maximum protocol version accepted */
474 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200475 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000476 int auth_mode; /* verify mode for connection */
Janos Follath4817e272017-04-10 13:44:33 +0100477 int cert_req_ca_list; /* should we send the CA list? */
Rich Evans85b05ec2015-02-12 11:37:29 +0000478 unsigned char mfl_code; /* code for maximum fragment length */
479 int trunc_hmac; /* accept truncated hmac? */
480 int tickets; /* enable / disable session tickets */
481 int ticket_timeout; /* session ticket lifetime */
482 int cache_max; /* max number of session cache entries */
483 int cache_timeout; /* expiration delay of session cache entries */
484 char *sni; /* string describing sni information */
Hanno Beckere6706e62017-05-15 16:05:15 +0100485 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000486 const char *alpn_string; /* ALPN supported protocols */
487 const char *dhm_file; /* the file with the DH parameters */
488 int extended_ms; /* allow negotiation of extended MS? */
489 int etm; /* allow negotiation of encrypt-then-MAC? */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000490 int transport; /* TLS or DTLS? */
491 int cookies; /* Use cookies for DTLS? -1 to break them */
492 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
493 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
494 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200495 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Hanno Beckere7675d02018-08-14 13:28:56 +0100496 int dgram_packing; /* allow/forbid datagram packing */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000497 int badmac_limit; /* Limit of records with bad MAC */
Rich Evans85b05ec2015-02-12 11:37:29 +0000498} opt;
499
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200500static void my_debug( void *ctx, int level,
501 const char *file, int line,
502 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000503{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200504 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000505
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200506 /* Extract basename from file */
507 for( p = basename = file; *p != '\0'; p++ )
508 if( *p == '/' || *p == '\\' )
509 basename = p + 1;
510
511 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s", basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000512 fflush( (FILE *) ctx );
513}
514
515/*
516 * Test recv/send functions that make sure each try returns
517 * WANT_READ/WANT_WRITE at least once before sucesseding
518 */
519static int my_recv( void *ctx, unsigned char *buf, size_t len )
520{
521 static int first_try = 1;
522 int ret;
523
524 if( first_try )
525 {
526 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100527 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000528 }
529
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200530 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100531 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000532 first_try = 1; /* Next call will be a new operation */
533 return( ret );
534}
535
536static int my_send( void *ctx, const unsigned char *buf, size_t len )
537{
538 static int first_try = 1;
539 int ret;
540
541 if( first_try )
542 {
543 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100544 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000545 }
546
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200547 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100548 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000549 first_try = 1; /* Next call will be a new operation */
550 return( ret );
551}
552
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200553/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200554 * Return authmode from string, or -1 on error
555 */
556static int get_auth_mode( const char *s )
557{
558 if( strcmp( s, "none" ) == 0 )
559 return( MBEDTLS_SSL_VERIFY_NONE );
560 if( strcmp( s, "optional" ) == 0 )
561 return( MBEDTLS_SSL_VERIFY_OPTIONAL );
562 if( strcmp( s, "required" ) == 0 )
563 return( MBEDTLS_SSL_VERIFY_REQUIRED );
564
565 return( -1 );
566}
567
568/*
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200569 * Used by sni_parse and psk_parse to handle coma-separated lists
570 */
571#define GET_ITEM( dst ) \
572 dst = p; \
573 while( *p != ',' ) \
574 if( ++p > end ) \
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000575 goto error; \
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200576 *p++ = '\0';
577
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200578#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100579typedef struct _sni_entry sni_entry;
580
581struct _sni_entry {
582 const char *name;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200583 mbedtls_x509_crt *cert;
584 mbedtls_pk_context *key;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200585 mbedtls_x509_crt* ca;
586 mbedtls_x509_crl* crl;
587 int authmode;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100588 sni_entry *next;
589};
590
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100591void sni_free( sni_entry *head )
592{
593 sni_entry *cur = head, *next;
594
595 while( cur != NULL )
596 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200597 mbedtls_x509_crt_free( cur->cert );
598 mbedtls_free( cur->cert );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100599
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200600 mbedtls_pk_free( cur->key );
601 mbedtls_free( cur->key );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100602
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200603 mbedtls_x509_crt_free( cur->ca );
604 mbedtls_free( cur->ca );
605
606 mbedtls_x509_crl_free( cur->crl );
607 mbedtls_free( cur->crl );
608
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100609 next = cur->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200610 mbedtls_free( cur );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100611 cur = next;
612 }
613}
614
615/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200616 * Parse a string of sextuples name1,crt1,key1,ca1,crl1,auth1[,...]
617 * into a usable sni_entry list. For ca1, crl1, auth1, the special value
618 * '-' means unset. If ca1 is unset, then crl1 is ignored too.
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000619 *
620 * Modifies the input string! This is not production quality!
621 */
622sni_entry *sni_parse( char *sni_string )
623{
624 sni_entry *cur = NULL, *new = NULL;
625 char *p = sni_string;
626 char *end = p;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200627 char *crt_file, *key_file, *ca_file, *crl_file, *auth_str;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000628
629 while( *end != '\0' )
630 ++end;
631 *end = ',';
632
633 while( p <= end )
634 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200635 if( ( new = mbedtls_calloc( 1, sizeof( sni_entry ) ) ) == NULL )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000636 {
637 sni_free( cur );
638 return( NULL );
639 }
640
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200641 GET_ITEM( new->name );
642 GET_ITEM( crt_file );
643 GET_ITEM( key_file );
644 GET_ITEM( ca_file );
645 GET_ITEM( crl_file );
646 GET_ITEM( auth_str );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000647
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200648 if( ( new->cert = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL ||
649 ( new->key = mbedtls_calloc( 1, sizeof( mbedtls_pk_context ) ) ) == NULL )
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200650 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000651
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200652 mbedtls_x509_crt_init( new->cert );
653 mbedtls_pk_init( new->key );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000654
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200655 if( mbedtls_x509_crt_parse_file( new->cert, crt_file ) != 0 ||
656 mbedtls_pk_parse_keyfile( new->key, key_file, "" ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000657 goto error;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200658
659 if( strcmp( ca_file, "-" ) != 0 )
660 {
661 if( ( new->ca = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL )
662 goto error;
663
664 mbedtls_x509_crt_init( new->ca );
665
666 if( mbedtls_x509_crt_parse_file( new->ca, ca_file ) != 0 )
667 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000668 }
669
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200670 if( strcmp( crl_file, "-" ) != 0 )
671 {
672 if( ( new->crl = mbedtls_calloc( 1, sizeof( mbedtls_x509_crl ) ) ) == NULL )
673 goto error;
674
675 mbedtls_x509_crl_init( new->crl );
676
677 if( mbedtls_x509_crl_parse_file( new->crl, crl_file ) != 0 )
678 goto error;
679 }
680
681 if( strcmp( auth_str, "-" ) != 0 )
682 {
683 if( ( new->authmode = get_auth_mode( auth_str ) ) < 0 )
684 goto error;
685 }
686 else
687 new->authmode = DFL_AUTH_MODE;
688
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000689 new->next = cur;
690 cur = new;
691 }
692
693 return( cur );
694
695error:
696 sni_free( new );
697 sni_free( cur );
698 return( NULL );
699}
700
701/*
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100702 * SNI callback.
703 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200704int sni_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100705 const unsigned char *name, size_t name_len )
706{
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200707 const sni_entry *cur = (const sni_entry *) p_info;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100708
709 while( cur != NULL )
710 {
711 if( name_len == strlen( cur->name ) &&
712 memcmp( name, cur->name, name_len ) == 0 )
713 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200714 if( cur->ca != NULL )
715 mbedtls_ssl_set_hs_ca_chain( ssl, cur->ca, cur->crl );
716
717 if( cur->authmode != DFL_AUTH_MODE )
718 mbedtls_ssl_set_hs_authmode( ssl, cur->authmode );
719
Manuel Pégourié-Gonnard1af6c852015-05-10 23:10:37 +0200720 return( mbedtls_ssl_set_hs_own_cert( ssl, cur->cert, cur->key ) );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100721 }
722
723 cur = cur->next;
724 }
725
726 return( -1 );
727}
728
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200729#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100730
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200731#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200732
733#define HEX2NUM( c ) \
734 if( c >= '0' && c <= '9' ) \
735 c -= '0'; \
736 else if( c >= 'a' && c <= 'f' ) \
737 c -= 'a' - 10; \
738 else if( c >= 'A' && c <= 'F' ) \
739 c -= 'A' - 10; \
740 else \
741 return( -1 );
742
743/*
744 * Convert a hex string to bytes.
745 * Return 0 on success, -1 on error.
746 */
747int unhexify( unsigned char *output, const char *input, size_t *olen )
748{
749 unsigned char c;
750 size_t j;
751
752 *olen = strlen( input );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200753 if( *olen % 2 != 0 || *olen / 2 > MBEDTLS_PSK_MAX_LEN )
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200754 return( -1 );
755 *olen /= 2;
756
757 for( j = 0; j < *olen * 2; j += 2 )
758 {
759 c = input[j];
760 HEX2NUM( c );
761 output[ j / 2 ] = c << 4;
762
763 c = input[j + 1];
764 HEX2NUM( c );
765 output[ j / 2 ] |= c;
766 }
767
768 return( 0 );
769}
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200770
771typedef struct _psk_entry psk_entry;
772
773struct _psk_entry
774{
775 const char *name;
776 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200777 unsigned char key[MBEDTLS_PSK_MAX_LEN];
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200778 psk_entry *next;
779};
780
781/*
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000782 * Free a list of psk_entry's
783 */
784void psk_free( psk_entry *head )
785{
786 psk_entry *next;
787
788 while( head != NULL )
789 {
790 next = head->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200791 mbedtls_free( head );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000792 head = next;
793 }
794}
795
796/*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200797 * Parse a string of pairs name1,key1[,name2,key2[,...]]
798 * into a usable psk_entry list.
799 *
800 * Modifies the input string! This is not production quality!
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200801 */
802psk_entry *psk_parse( char *psk_string )
803{
804 psk_entry *cur = NULL, *new = NULL;
805 char *p = psk_string;
806 char *end = p;
807 char *key_hex;
808
809 while( *end != '\0' )
810 ++end;
811 *end = ',';
812
813 while( p <= end )
814 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200815 if( ( new = mbedtls_calloc( 1, sizeof( psk_entry ) ) ) == NULL )
Manuel Pégourié-Gonnardb1990952015-02-18 09:32:06 +0000816 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200817
818 memset( new, 0, sizeof( psk_entry ) );
819
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200820 GET_ITEM( new->name );
821 GET_ITEM( key_hex );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200822
823 if( unhexify( new->key, key_hex, &new->key_len ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000824 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200825
826 new->next = cur;
827 cur = new;
828 }
829
830 return( cur );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200831
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000832error:
833 psk_free( new );
834 psk_free( cur );
835 return( 0 );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200836}
837
838/*
839 * PSK callback
840 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200841int psk_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200842 const unsigned char *name, size_t name_len )
843{
844 psk_entry *cur = (psk_entry *) p_info;
845
846 while( cur != NULL )
847 {
848 if( name_len == strlen( cur->name ) &&
849 memcmp( name, cur->name, name_len ) == 0 )
850 {
Manuel Pégourié-Gonnard4b682962015-05-07 15:59:54 +0100851 return( mbedtls_ssl_set_hs_psk( ssl, cur->key, cur->key_len ) );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200852 }
853
854 cur = cur->next;
855 }
856
857 return( -1 );
858}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200859#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200860
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200861static mbedtls_net_context listen_fd, client_fd;
Paul Bakkerbc3e54c2014-08-18 14:36:17 +0200862
863/* Interruption handler to ensure clean exit (for valgrind testing) */
864#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200865static int received_sigterm = 0;
866void term_handler( int sig )
867{
868 ((void) sig);
869 received_sigterm = 1;
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200870 mbedtls_net_free( &listen_fd ); /* causes mbedtls_net_accept() to abort */
871 mbedtls_net_free( &client_fd ); /* causes net_read() to abort */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200872}
Paul Bakkerc1283d32014-08-18 11:05:51 +0200873#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200874
Gilles Peskine682df092017-05-11 19:01:11 +0200875#if defined(MBEDTLS_X509_CRT_PARSE_C)
876static int ssl_sig_hashes_for_test[] = {
877#if defined(MBEDTLS_SHA512_C)
878 MBEDTLS_MD_SHA512,
879 MBEDTLS_MD_SHA384,
880#endif
881#if defined(MBEDTLS_SHA256_C)
882 MBEDTLS_MD_SHA256,
883 MBEDTLS_MD_SHA224,
884#endif
885#if defined(MBEDTLS_SHA1_C)
886 /* Allow SHA-1 as we use it extensively in tests. */
887 MBEDTLS_MD_SHA1,
888#endif
889 MBEDTLS_MD_NONE
890};
891#endif /* MBEDTLS_X509_CRT_PARSE_C */
892
Gilles Peskinea36ac4f2018-04-26 08:05:02 +0200893/** Return true if \p ret is a status code indicating that there is an
894 * operation in progress on an SSL connection, and false if it indicates
895 * success or a fatal error.
896 *
897 * The possible operations in progress are:
898 *
899 * - A read, when the SSL input buffer does not contain a full message.
900 * - A write, when the SSL output buffer contains some data that has not
901 * been sent over the network yet.
902 * - An asynchronous callback that has not completed yet. */
903static int mbedtls_status_is_ssl_in_progress( int ret )
904{
905 return( ret == MBEDTLS_ERR_SSL_WANT_READ ||
906 ret == MBEDTLS_ERR_SSL_WANT_WRITE ||
907 ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
908}
909
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200910#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100911typedef struct
912{
Gilles Peskine44817442018-06-13 18:09:28 +0200913 mbedtls_x509_crt *cert; /*!< Certificate corresponding to the key */
914 mbedtls_pk_context *pk; /*!< Private key */
915 unsigned delay; /*!< Number of resume steps to go through */
916 unsigned pk_owned : 1; /*!< Whether to free the pk object on exit */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100917} ssl_async_key_slot_t;
918
919typedef enum {
Gilles Peskinead28bf02018-04-26 00:19:16 +0200920 SSL_ASYNC_INJECT_ERROR_NONE = 0, /*!< Let the callbacks succeed */
921 SSL_ASYNC_INJECT_ERROR_START, /*!< Inject error during start */
922 SSL_ASYNC_INJECT_ERROR_CANCEL, /*!< Close the connection after async start */
923 SSL_ASYNC_INJECT_ERROR_RESUME, /*!< Inject error during resume */
Gilles Peskinec9125722018-04-26 07:15:40 +0200924#define SSL_ASYNC_INJECT_ERROR_MAX SSL_ASYNC_INJECT_ERROR_RESUME
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100925} ssl_async_inject_error_t;
926
927typedef struct
928{
Gilles Peskinee2479892018-06-13 18:06:51 +0200929 ssl_async_key_slot_t slots[4]; /* key, key2, sni1, sni2 */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100930 size_t slots_used;
931 ssl_async_inject_error_t inject_error;
932 int (*f_rng)(void *, unsigned char *, size_t);
933 void *p_rng;
934} ssl_async_key_context_t;
935
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200936int ssl_async_set_key( ssl_async_key_context_t *ctx,
Gilles Peskine44817442018-06-13 18:09:28 +0200937 mbedtls_x509_crt *cert,
938 mbedtls_pk_context *pk,
939 int pk_take_ownership,
940 unsigned delay )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100941{
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200942 if( ctx->slots_used >= sizeof( ctx->slots ) / sizeof( *ctx->slots ) )
943 return( -1 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100944 ctx->slots[ctx->slots_used].cert = cert;
945 ctx->slots[ctx->slots_used].pk = pk;
946 ctx->slots[ctx->slots_used].delay = delay;
Gilles Peskine44817442018-06-13 18:09:28 +0200947 ctx->slots[ctx->slots_used].pk_owned = pk_take_ownership;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100948 ++ctx->slots_used;
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200949 return( 0 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100950}
951
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100952#define SSL_ASYNC_INPUT_MAX_SIZE 512
Gilles Peskined3268832018-04-26 06:23:59 +0200953
954typedef enum
955{
956 ASYNC_OP_SIGN,
957 ASYNC_OP_DECRYPT,
958} ssl_async_operation_type_t;
959/* Note that the enum above and the array below need to be kept in sync!
960 * `ssl_async_operation_names[op]` is the name of op for each value `op`
961 * of type `ssl_async_operation_type_t`. */
962static const char *const ssl_async_operation_names[] =
963{
964 "sign",
965 "decrypt",
966};
967
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100968typedef struct
969{
Gilles Peskine6331d782018-04-26 13:27:43 +0200970 unsigned slot;
Gilles Peskined3268832018-04-26 06:23:59 +0200971 ssl_async_operation_type_t operation_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100972 mbedtls_md_type_t md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100973 unsigned char input[SSL_ASYNC_INPUT_MAX_SIZE];
974 size_t input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +0200975 unsigned remaining_delay;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100976} ssl_async_operation_context_t;
977
Gilles Peskine8f97af72018-04-26 11:46:10 +0200978static int ssl_async_start( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100979 mbedtls_x509_crt *cert,
Gilles Peskined3268832018-04-26 06:23:59 +0200980 ssl_async_operation_type_t op_type,
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100981 mbedtls_md_type_t md_alg,
982 const unsigned char *input,
983 size_t input_len )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100984{
Gilles Peskine8f97af72018-04-26 11:46:10 +0200985 ssl_async_key_context_t *config_data =
986 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskine6331d782018-04-26 13:27:43 +0200987 unsigned slot;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100988 ssl_async_operation_context_t *ctx = NULL;
Gilles Peskined3268832018-04-26 06:23:59 +0200989 const char *op_name = ssl_async_operation_names[op_type];
Gilles Peskinef1127252018-04-24 13:05:39 +0200990
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100991 {
992 char dn[100];
Gilles Peskined5d983e2018-06-15 14:05:10 +0200993 if( mbedtls_x509_dn_gets( dn, sizeof( dn ), &cert->subject ) > 0 )
994 mbedtls_printf( "Async %s callback: looking for DN=%s\n",
995 op_name, dn );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100996 }
Gilles Peskinef1127252018-04-24 13:05:39 +0200997
Gilles Peskine3dae1cf2018-04-30 12:07:56 +0200998 /* Look for a private key that matches the public key in cert.
999 * Since this test code has the private key inside Mbed TLS,
1000 * we call mbedtls_pk_check_pair to match a private key with the
1001 * public key. */
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001002 for( slot = 0; slot < config_data->slots_used; slot++ )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001003 {
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001004 if( mbedtls_pk_check_pair( &cert->pk,
1005 config_data->slots[slot].pk ) == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001006 break;
1007 }
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001008 if( slot == config_data->slots_used )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001009 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001010 mbedtls_printf( "Async %s callback: no key matches this certificate.\n",
1011 op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001012 return( MBEDTLS_ERR_SSL_HW_ACCEL_FALLTHROUGH );
1013 }
Gilles Peskine6331d782018-04-26 13:27:43 +02001014 mbedtls_printf( "Async %s callback: using key slot %u, delay=%u.\n",
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001015 op_name, slot, config_data->slots[slot].delay );
Gilles Peskinef1127252018-04-24 13:05:39 +02001016
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001017 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_START )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001018 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001019 mbedtls_printf( "Async %s callback: injected error\n", op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001020 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1021 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001022
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001023 if( input_len > SSL_ASYNC_INPUT_MAX_SIZE )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001024 return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
Gilles Peskinef1127252018-04-24 13:05:39 +02001025
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001026 ctx = mbedtls_calloc( 1, sizeof( *ctx ) );
1027 if( ctx == NULL )
1028 return( MBEDTLS_ERR_SSL_ALLOC_FAILED );
1029 ctx->slot = slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001030 ctx->operation_type = op_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001031 ctx->md_alg = md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001032 memcpy( ctx->input, input, input_len );
1033 ctx->input_len = input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001034 ctx->remaining_delay = config_data->slots[slot].delay;
Gilles Peskinea668c602018-04-30 11:54:39 +02001035 mbedtls_ssl_set_async_operation_data( ssl, ctx );
Gilles Peskinef1127252018-04-24 13:05:39 +02001036
Gilles Peskineceb541b2018-04-26 06:30:45 +02001037 if( ctx->remaining_delay == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001038 return( 0 );
1039 else
1040 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1041}
1042
Gilles Peskine8f97af72018-04-26 11:46:10 +02001043static int ssl_async_sign( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001044 mbedtls_x509_crt *cert,
1045 mbedtls_md_type_t md_alg,
1046 const unsigned char *hash,
1047 size_t hash_len )
1048{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001049 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001050 ASYNC_OP_SIGN, md_alg,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001051 hash, hash_len ) );
1052}
1053
Gilles Peskine8f97af72018-04-26 11:46:10 +02001054static int ssl_async_decrypt( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001055 mbedtls_x509_crt *cert,
1056 const unsigned char *input,
1057 size_t input_len )
1058{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001059 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001060 ASYNC_OP_DECRYPT, MBEDTLS_MD_NONE,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001061 input, input_len ) );
1062}
1063
Gilles Peskine8f97af72018-04-26 11:46:10 +02001064static int ssl_async_resume( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001065 unsigned char *output,
1066 size_t *output_len,
1067 size_t output_size )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001068{
Gilles Peskinea668c602018-04-30 11:54:39 +02001069 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine8f97af72018-04-26 11:46:10 +02001070 ssl_async_key_context_t *config_data =
1071 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001072 ssl_async_key_slot_t *key_slot = &config_data->slots[ctx->slot];
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001073 int ret;
Gilles Peskinef5a99962018-04-30 16:37:23 +02001074 const char *op_name;
Gilles Peskinef1127252018-04-24 13:05:39 +02001075
Gilles Peskineceb541b2018-04-26 06:30:45 +02001076 if( ctx->remaining_delay > 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001077 {
Gilles Peskineceb541b2018-04-26 06:30:45 +02001078 --ctx->remaining_delay;
Gilles Peskine6331d782018-04-26 13:27:43 +02001079 mbedtls_printf( "Async resume (slot %u): call %u more times.\n",
Gilles Peskineceb541b2018-04-26 06:30:45 +02001080 ctx->slot, ctx->remaining_delay );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001081 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1082 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001083
Gilles Peskined3268832018-04-26 06:23:59 +02001084 switch( ctx->operation_type )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001085 {
Gilles Peskined3268832018-04-26 06:23:59 +02001086 case ASYNC_OP_DECRYPT:
Gilles Peskined3268832018-04-26 06:23:59 +02001087 ret = mbedtls_pk_decrypt( key_slot->pk,
1088 ctx->input, ctx->input_len,
1089 output, output_len, output_size,
1090 config_data->f_rng, config_data->p_rng );
1091 break;
1092 case ASYNC_OP_SIGN:
Gilles Peskined3268832018-04-26 06:23:59 +02001093 ret = mbedtls_pk_sign( key_slot->pk,
1094 ctx->md_alg,
1095 ctx->input, ctx->input_len,
1096 output, output_len,
1097 config_data->f_rng, config_data->p_rng );
1098 break;
1099 default:
Gilles Peskine6331d782018-04-26 13:27:43 +02001100 mbedtls_printf( "Async resume (slot %u): unknown operation type %ld. This shouldn't happen.\n",
Gilles Peskined3268832018-04-26 06:23:59 +02001101 ctx->slot, (long) ctx->operation_type );
Gilles Peskine44817442018-06-13 18:09:28 +02001102 mbedtls_free( ctx );
Gilles Peskined3268832018-04-26 06:23:59 +02001103 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1104 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001105 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001106
Gilles Peskinef5a99962018-04-30 16:37:23 +02001107 op_name = ssl_async_operation_names[ctx->operation_type];
1108
Gilles Peskinec9125722018-04-26 07:15:40 +02001109 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_RESUME )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001110 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001111 mbedtls_printf( "Async resume callback: %s done but injected error\n",
1112 op_name );
Gilles Peskine2636fad2018-06-12 14:17:39 +02001113 mbedtls_free( ctx );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001114 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1115 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001116
Gilles Peskine6331d782018-04-26 13:27:43 +02001117 mbedtls_printf( "Async resume (slot %u): %s done, status=%d.\n",
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001118 ctx->slot, op_name, ret );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001119 mbedtls_free( ctx );
1120 return( ret );
1121}
1122
Gilles Peskine8f97af72018-04-26 11:46:10 +02001123static void ssl_async_cancel( mbedtls_ssl_context *ssl )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001124{
Gilles Peskinea668c602018-04-30 11:54:39 +02001125 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001126 mbedtls_printf( "Async cancel callback.\n" );
1127 mbedtls_free( ctx );
1128}
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001129#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001130
Hanno Becker16970d22017-10-10 15:56:37 +01001131/*
1132 * Wait for an event from the underlying transport or the timer
1133 * (Used in event-driven IO mode).
1134 */
1135#if !defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001136int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001137 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +01001138#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001139int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001140 mbedtls_timing_delay_context *timer,
1141 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +01001142#endif
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001143{
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001144 int ret;
Hanno Becker16970d22017-10-10 15:56:37 +01001145 int poll_type = 0;
1146
1147 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
1148 poll_type = MBEDTLS_NET_POLL_WRITE;
1149 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
1150 poll_type = MBEDTLS_NET_POLL_READ;
1151#if !defined(MBEDTLS_TIMING_C)
1152 else
Hanno Beckeref527962018-03-15 15:49:24 +00001153 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +01001154#endif
1155
1156 while( 1 )
1157 {
Hanno Becker197a91c2017-10-31 10:58:53 +00001158 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +01001159#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001160 if( timer != NULL &&
1161 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +01001162 {
Hanno Becker16970d22017-10-10 15:56:37 +01001163 break;
1164 }
Hanno Becker197a91c2017-10-31 10:58:53 +00001165#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +01001166
Hanno Becker197a91c2017-10-31 10:58:53 +00001167 /* Check if underlying transport became available */
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001168 if( poll_type != 0 )
Hanno Becker16970d22017-10-10 15:56:37 +01001169 {
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001170 ret = mbedtls_net_poll( fd, poll_type, 0 );
1171 if( ret < 0 )
1172 return( ret );
1173 if( ret == poll_type )
1174 break;
Hanno Becker16970d22017-10-10 15:56:37 +01001175 }
1176 }
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001177
1178 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +01001179}
1180
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001181int main( int argc, char *argv[] )
1182{
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00001183 int ret = 0, len, written, frags, exchanges_left;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001184 int version_suites[4][2];
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001185 unsigned char* buf = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001186#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
1187 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerfbb17802013-04-17 19:10:21 +02001188 size_t psk_len = 0;
Paul Bakker9b7fb6f2014-06-12 23:01:43 +02001189 psk_entry *psk_info = NULL;
Paul Bakkered27a042013-04-18 22:46:23 +02001190#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +02001191 const char *pers = "ssl_server2";
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02001192 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02001193 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001194#if defined(MBEDTLS_SSL_COOKIE_C)
1195 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001196#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001197
Gilles Peskineef86ab22017-05-05 18:59:02 +02001198#if defined(MBEDTLS_X509_CRT_PARSE_C)
1199 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
1200#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001201 mbedtls_entropy_context entropy;
1202 mbedtls_ctr_drbg_context ctr_drbg;
1203 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001204 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001205#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001206 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001207#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001208#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001209 unsigned char renego_period[8] = { 0 };
1210#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001211#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +02001212 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001213 mbedtls_x509_crt cacert;
1214 mbedtls_x509_crt srvcert;
1215 mbedtls_pk_context pkey;
1216 mbedtls_x509_crt srvcert2;
1217 mbedtls_pk_context pkey2;
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02001218 int key_cert_init = 0, key_cert_init2 = 0;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001219#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001220 ssl_async_key_context_t ssl_async_keys;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001221#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001222#endif /* MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001223#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1224 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001225#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001226#if defined(MBEDTLS_SSL_CACHE_C)
1227 mbedtls_ssl_cache_context cache;
Paul Bakker0a597072012-09-25 21:55:46 +00001228#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001229#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1230 mbedtls_ssl_ticket_context ticket_ctx;
1231#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02001232#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001233 sni_entry *sni_info = NULL;
1234#endif
Hanno Beckere6706e62017-05-15 16:05:15 +01001235#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +01001236 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +01001237 const mbedtls_ecp_curve_info * curve_cur;
1238#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001239#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +01001240 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001241#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001242#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Simon Butchercce68be2018-07-23 14:26:09 +01001243 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
Paul Bakker82024bf2013-07-04 11:52:32 +02001244#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001245
1246 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001247 char *p, *q;
1248 const int *list;
1249
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001250#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1251 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
Paul Bakker82024bf2013-07-04 11:52:32 +02001252#endif
1253
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001254 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +02001255 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001256 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001257 mbedtls_net_init( &client_fd );
1258 mbedtls_net_init( &listen_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +02001259 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001260 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +02001261 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001262#if defined(MBEDTLS_X509_CRT_PARSE_C)
1263 mbedtls_x509_crt_init( &cacert );
1264 mbedtls_x509_crt_init( &srvcert );
1265 mbedtls_pk_init( &pkey );
1266 mbedtls_x509_crt_init( &srvcert2 );
1267 mbedtls_pk_init( &pkey2 );
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001268#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
1269 memset( &ssl_async_keys, 0, sizeof( ssl_async_keys ) );
1270#endif
Paul Bakkered27a042013-04-18 22:46:23 +02001271#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001272#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1273 mbedtls_dhm_init( &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001274#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001275#if defined(MBEDTLS_SSL_CACHE_C)
1276 mbedtls_ssl_cache_init( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00001277#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001278#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1279 mbedtls_ssl_ticket_init( &ticket_ctx );
1280#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001281#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +02001282 memset( (void *) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001283#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001284#if defined(MBEDTLS_SSL_COOKIE_C)
1285 mbedtls_ssl_cookie_init( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001286#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001287
Paul Bakkerc1283d32014-08-18 11:05:51 +02001288#if !defined(_WIN32)
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001289 /* Abort cleanly on SIGTERM and SIGINT */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001290 signal( SIGTERM, term_handler );
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001291 signal( SIGINT, term_handler );
Paul Bakkerc1283d32014-08-18 11:05:51 +02001292#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001293
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001294 if( argc == 0 )
1295 {
1296 usage:
1297 if( ret == 0 )
1298 ret = 1;
1299
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001300 mbedtls_printf( USAGE );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001301
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001302 list = mbedtls_ssl_list_ciphersuites();
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001303 while( *list )
1304 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001305 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +02001306 list++;
1307 if( !*list )
1308 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001309 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001310 list++;
1311 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001312 mbedtls_printf("\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001313 goto exit;
1314 }
1315
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001316 opt.buffer_size = DFL_IO_BUF_LEN;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001317 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001318 opt.server_port = DFL_SERVER_PORT;
1319 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker16970d22017-10-10 15:56:37 +01001320 opt.event = DFL_EVENT;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001321 opt.response_size = DFL_RESPONSE_SIZE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001322 opt.nbio = DFL_NBIO;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001323 opt.read_timeout = DFL_READ_TIMEOUT;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001324 opt.ca_file = DFL_CA_FILE;
1325 opt.ca_path = DFL_CA_PATH;
1326 opt.crt_file = DFL_CRT_FILE;
1327 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001328 opt.crt_file2 = DFL_CRT_FILE2;
1329 opt.key_file2 = DFL_KEY_FILE2;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001330 opt.async_operations = DFL_ASYNC_OPERATIONS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001331 opt.async_private_delay1 = DFL_ASYNC_PRIVATE_DELAY1;
1332 opt.async_private_delay2 = DFL_ASYNC_PRIVATE_DELAY2;
1333 opt.async_private_error = DFL_ASYNC_PRIVATE_ERROR;
Paul Bakkerfbb17802013-04-17 19:10:21 +02001334 opt.psk = DFL_PSK;
1335 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001336 opt.psk_list = DFL_PSK_LIST;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001337 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001338 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001339 opt.version_suites = DFL_VERSION_SUITES;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001340 opt.renegotiation = DFL_RENEGOTIATION;
1341 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001342 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001343 opt.renego_delay = DFL_RENEGO_DELAY;
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001344 opt.renego_period = DFL_RENEGO_PERIOD;
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001345 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001346 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001347 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001348 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +02001349 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001350 opt.auth_mode = DFL_AUTH_MODE;
Janos Follath4817e272017-04-10 13:44:33 +01001351 opt.cert_req_ca_list = DFL_CERT_REQ_CA_LIST;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001352 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001353 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001354 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001355 opt.ticket_timeout = DFL_TICKET_TIMEOUT;
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001356 opt.cache_max = DFL_CACHE_MAX;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001357 opt.cache_timeout = DFL_CACHE_TIMEOUT;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001358 opt.sni = DFL_SNI;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001359 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +01001360 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001361 opt.dhm_file = DFL_DHM_FILE;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001362 opt.transport = DFL_TRANSPORT;
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001363 opt.cookies = DFL_COOKIES;
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001364 opt.anti_replay = DFL_ANTI_REPLAY;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001365 opt.hs_to_min = DFL_HS_TO_MIN;
1366 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001367 opt.dtls_mtu = DFL_DTLS_MTU;
Hanno Beckere7675d02018-08-14 13:28:56 +01001368 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001369 opt.badmac_limit = DFL_BADMAC_LIMIT;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001370 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001371 opt.etm = DFL_ETM;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001372
1373 for( i = 1; i < argc; i++ )
1374 {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001375 p = argv[i];
1376 if( ( q = strchr( p, '=' ) ) == NULL )
1377 goto usage;
1378 *q++ = '\0';
1379
1380 if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001381 opt.server_port = q;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001382 else if( strcmp( p, "server_addr" ) == 0 )
1383 opt.server_addr = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001384 else if( strcmp( p, "dtls" ) == 0 )
1385 {
1386 int t = atoi( q );
1387 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001388 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001389 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001390 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001391 else
1392 goto usage;
1393 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001394 else if( strcmp( p, "debug_level" ) == 0 )
1395 {
1396 opt.debug_level = atoi( q );
1397 if( opt.debug_level < 0 || opt.debug_level > 65535 )
1398 goto usage;
1399 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001400 else if( strcmp( p, "nbio" ) == 0 )
1401 {
1402 opt.nbio = atoi( q );
1403 if( opt.nbio < 0 || opt.nbio > 2 )
1404 goto usage;
1405 }
Hanno Becker16970d22017-10-10 15:56:37 +01001406 else if( strcmp( p, "event" ) == 0 )
1407 {
1408 opt.event = atoi( q );
1409 if( opt.event < 0 || opt.event > 2 )
1410 goto usage;
1411 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001412 else if( strcmp( p, "read_timeout" ) == 0 )
1413 opt.read_timeout = atoi( q );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001414 else if( strcmp( p, "buffer_size" ) == 0 )
1415 {
1416 opt.buffer_size = atoi( q );
1417 if( opt.buffer_size < 1 || opt.buffer_size > MBEDTLS_SSL_MAX_CONTENT_LEN + 1 )
1418 goto usage;
1419 }
1420 else if( strcmp( p, "response_size" ) == 0 )
1421 {
1422 opt.response_size = atoi( q );
1423 if( opt.response_size < 0 || opt.response_size > MBEDTLS_SSL_MAX_CONTENT_LEN )
1424 goto usage;
1425 if( opt.buffer_size < opt.response_size )
1426 opt.buffer_size = opt.response_size;
1427 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001428 else if( strcmp( p, "ca_file" ) == 0 )
1429 opt.ca_file = q;
1430 else if( strcmp( p, "ca_path" ) == 0 )
1431 opt.ca_path = q;
1432 else if( strcmp( p, "crt_file" ) == 0 )
1433 opt.crt_file = q;
1434 else if( strcmp( p, "key_file" ) == 0 )
1435 opt.key_file = q;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001436 else if( strcmp( p, "crt_file2" ) == 0 )
1437 opt.crt_file2 = q;
1438 else if( strcmp( p, "key_file2" ) == 0 )
1439 opt.key_file2 = q;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001440 else if( strcmp( p, "dhm_file" ) == 0 )
1441 opt.dhm_file = q;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001442#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001443 else if( strcmp( p, "async_operations" ) == 0 )
1444 opt.async_operations = q;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001445 else if( strcmp( p, "async_private_delay1" ) == 0 )
1446 opt.async_private_delay1 = atoi( q );
1447 else if( strcmp( p, "async_private_delay2" ) == 0 )
1448 opt.async_private_delay2 = atoi( q );
1449 else if( strcmp( p, "async_private_error" ) == 0 )
1450 {
1451 int n = atoi( q );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01001452 if( n < -SSL_ASYNC_INJECT_ERROR_MAX ||
1453 n > SSL_ASYNC_INJECT_ERROR_MAX )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001454 {
1455 ret = 2;
1456 goto usage;
1457 }
1458 opt.async_private_error = n;
1459 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001460#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001461 else if( strcmp( p, "psk" ) == 0 )
1462 opt.psk = q;
1463 else if( strcmp( p, "psk_identity" ) == 0 )
1464 opt.psk_identity = q;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001465 else if( strcmp( p, "psk_list" ) == 0 )
1466 opt.psk_list = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001467 else if( strcmp( p, "ecjpake_pw" ) == 0 )
1468 opt.ecjpake_pw = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001469 else if( strcmp( p, "force_ciphersuite" ) == 0 )
1470 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001471 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001472
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +02001473 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001474 {
1475 ret = 2;
1476 goto usage;
1477 }
1478 opt.force_ciphersuite[1] = 0;
1479 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001480 else if( strcmp( p, "curves" ) == 0 )
1481 opt.curves = q;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001482 else if( strcmp( p, "version_suites" ) == 0 )
1483 opt.version_suites = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001484 else if( strcmp( p, "renegotiation" ) == 0 )
1485 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001486 opt.renegotiation = (atoi( q )) ?
1487 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1488 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001489 }
1490 else if( strcmp( p, "allow_legacy" ) == 0 )
1491 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001492 switch( atoi( q ) )
1493 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001494 case -1:
1495 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1496 break;
1497 case 0:
1498 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1499 break;
1500 case 1:
1501 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1502 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001503 default: goto usage;
1504 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001505 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001506 else if( strcmp( p, "renegotiate" ) == 0 )
1507 {
1508 opt.renegotiate = atoi( q );
1509 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1510 goto usage;
1511 }
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001512 else if( strcmp( p, "renego_delay" ) == 0 )
1513 {
1514 opt.renego_delay = atoi( q );
1515 }
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001516 else if( strcmp( p, "renego_period" ) == 0 )
1517 {
Andres AG0b736db2017-02-08 14:05:57 +00001518#if defined(_MSC_VER)
1519 opt.renego_period = _strtoui64( q, NULL, 10 );
1520#else
1521 if( sscanf( q, "%" SCNu64, &opt.renego_period ) != 1 )
1522 goto usage;
1523#endif /* _MSC_VER */
1524 if( opt.renego_period < 2 )
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001525 goto usage;
1526 }
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001527 else if( strcmp( p, "exchanges" ) == 0 )
1528 {
1529 opt.exchanges = atoi( q );
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02001530 if( opt.exchanges < 0 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001531 goto usage;
1532 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001533 else if( strcmp( p, "min_version" ) == 0 )
1534 {
1535 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001536 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001537 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001538 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001539 else if( strcmp( q, "tls1_1" ) == 0 ||
1540 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001541 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001542 else if( strcmp( q, "tls1_2" ) == 0 ||
1543 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001544 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001545 else
1546 goto usage;
1547 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001548 else if( strcmp( p, "max_version" ) == 0 )
1549 {
1550 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001551 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001552 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001553 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001554 else if( strcmp( q, "tls1_1" ) == 0 ||
1555 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001556 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001557 else if( strcmp( q, "tls1_2" ) == 0 ||
1558 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001559 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001560 else
1561 goto usage;
1562 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001563 else if( strcmp( p, "arc4" ) == 0 )
1564 {
1565 switch( atoi( q ) )
1566 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001567 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
1568 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001569 default: goto usage;
1570 }
1571 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001572 else if( strcmp( p, "allow_sha1" ) == 0 )
1573 {
1574 switch( atoi( q ) )
1575 {
1576 case 0: opt.allow_sha1 = 0; break;
1577 case 1: opt.allow_sha1 = 1; break;
1578 default: goto usage;
1579 }
1580 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001581 else if( strcmp( p, "force_version" ) == 0 )
1582 {
1583 if( strcmp( q, "ssl3" ) == 0 )
1584 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001585 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
1586 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001587 }
1588 else if( strcmp( q, "tls1" ) == 0 )
1589 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001590 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
1591 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001592 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001593 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001594 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001595 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1596 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001597 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001598 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001599 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001600 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1601 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001602 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001603 else if( strcmp( q, "dtls1" ) == 0 )
1604 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001605 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1606 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
1607 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001608 }
1609 else if( strcmp( q, "dtls1_2" ) == 0 )
1610 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001611 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1612 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1613 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001614 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001615 else
1616 goto usage;
1617 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001618 else if( strcmp( p, "auth_mode" ) == 0 )
1619 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02001620 if( ( opt.auth_mode = get_auth_mode( q ) ) < 0 )
Paul Bakker91ebfb52012-11-23 14:04:08 +01001621 goto usage;
1622 }
Janos Follath4817e272017-04-10 13:44:33 +01001623 else if( strcmp( p, "cert_req_ca_list" ) == 0 )
1624 {
1625 opt.cert_req_ca_list = atoi( q );
1626 if( opt.cert_req_ca_list < 0 || opt.cert_req_ca_list > 1 )
1627 goto usage;
1628 }
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001629 else if( strcmp( p, "max_frag_len" ) == 0 )
1630 {
1631 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001632 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001633 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001634 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001635 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001636 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001637 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001638 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001639 else
1640 goto usage;
1641 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001642 else if( strcmp( p, "alpn" ) == 0 )
1643 {
1644 opt.alpn_string = q;
1645 }
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001646 else if( strcmp( p, "trunc_hmac" ) == 0 )
1647 {
1648 switch( atoi( q ) )
1649 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001650 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1651 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001652 default: goto usage;
1653 }
1654 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001655 else if( strcmp( p, "extended_ms" ) == 0 )
1656 {
1657 switch( atoi( q ) )
1658 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001659 case 0:
1660 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1661 break;
1662 case 1:
1663 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1664 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001665 default: goto usage;
1666 }
1667 }
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001668 else if( strcmp( p, "etm" ) == 0 )
1669 {
1670 switch( atoi( q ) )
1671 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001672 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1673 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001674 default: goto usage;
1675 }
1676 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001677 else if( strcmp( p, "tickets" ) == 0 )
1678 {
1679 opt.tickets = atoi( q );
1680 if( opt.tickets < 0 || opt.tickets > 1 )
1681 goto usage;
1682 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001683 else if( strcmp( p, "ticket_timeout" ) == 0 )
1684 {
1685 opt.ticket_timeout = atoi( q );
1686 if( opt.ticket_timeout < 0 )
1687 goto usage;
1688 }
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001689 else if( strcmp( p, "cache_max" ) == 0 )
1690 {
1691 opt.cache_max = atoi( q );
1692 if( opt.cache_max < 0 )
1693 goto usage;
1694 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001695 else if( strcmp( p, "cache_timeout" ) == 0 )
1696 {
1697 opt.cache_timeout = atoi( q );
1698 if( opt.cache_timeout < 0 )
1699 goto usage;
1700 }
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001701 else if( strcmp( p, "cookies" ) == 0 )
1702 {
1703 opt.cookies = atoi( q );
1704 if( opt.cookies < -1 || opt.cookies > 1)
1705 goto usage;
1706 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001707 else if( strcmp( p, "anti_replay" ) == 0 )
1708 {
1709 opt.anti_replay = atoi( q );
1710 if( opt.anti_replay < 0 || opt.anti_replay > 1)
1711 goto usage;
1712 }
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001713 else if( strcmp( p, "badmac_limit" ) == 0 )
1714 {
1715 opt.badmac_limit = atoi( q );
1716 if( opt.badmac_limit < 0 )
1717 goto usage;
1718 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001719 else if( strcmp( p, "hs_timeout" ) == 0 )
1720 {
1721 if( ( p = strchr( q, '-' ) ) == NULL )
1722 goto usage;
1723 *p++ = '\0';
1724 opt.hs_to_min = atoi( q );
1725 opt.hs_to_max = atoi( p );
1726 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1727 goto usage;
1728 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001729 else if( strcmp( p, "mtu" ) == 0 )
1730 {
1731 opt.dtls_mtu = atoi( q );
1732 if( opt.dtls_mtu < 0 )
1733 goto usage;
1734 }
Hanno Beckere7675d02018-08-14 13:28:56 +01001735 else if( strcmp( p, "dgram_packing" ) == 0 )
1736 {
1737 opt.dgram_packing = atoi( q );
1738 if( opt.dgram_packing != 0 &&
1739 opt.dgram_packing != 1 )
1740 {
1741 goto usage;
1742 }
1743 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001744 else if( strcmp( p, "sni" ) == 0 )
1745 {
1746 opt.sni = q;
1747 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001748 else
1749 goto usage;
1750 }
1751
Hanno Becker16970d22017-10-10 15:56:37 +01001752 /* Event-driven IO is incompatible with the above custom
1753 * receive and send functions, as the polling builds on
1754 * refers to the underlying net_context. */
1755 if( opt.event == 1 && opt.nbio != 1 )
1756 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001757 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001758 opt.nbio = 1;
1759 }
1760
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001761#if defined(MBEDTLS_DEBUG_C)
1762 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001763#endif
Andrzej Kurekda4029d2018-06-20 07:07:55 -04001764 buf = mbedtls_calloc( 1, opt.buffer_size + 1 );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001765 if( buf == NULL )
1766 {
Andrzej Kurek755890f2018-06-20 08:17:04 -04001767 mbedtls_printf( "Could not allocate %u bytes\n", opt.buffer_size );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001768 ret = 3;
1769 goto exit;
1770 }
Paul Bakkerc73079a2014-04-25 16:34:30 +02001771
Paul Bakkerc1516be2013-06-29 16:01:32 +02001772 if( opt.force_ciphersuite[0] > 0 )
1773 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001774 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001775 ciphersuite_info =
1776 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001777
Paul Bakker5b55b792013-07-19 13:43:43 +02001778 if( opt.max_version != -1 &&
1779 ciphersuite_info->min_minor_ver > opt.max_version )
1780 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001781 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker5b55b792013-07-19 13:43:43 +02001782 ret = 2;
1783 goto usage;
1784 }
1785 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02001786 ciphersuite_info->max_minor_ver < opt.min_version )
1787 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001788 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001789 ret = 2;
1790 goto usage;
1791 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001792
1793 /* If we select a version that's not supported by
1794 * this suite, then there will be no common ciphersuite... */
1795 if( opt.max_version == -1 ||
1796 opt.max_version > ciphersuite_info->max_minor_ver )
1797 {
Paul Bakker5b55b792013-07-19 13:43:43 +02001798 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001799 }
Paul Bakker5b55b792013-07-19 13:43:43 +02001800 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001801 {
Paul Bakker5b55b792013-07-19 13:43:43 +02001802 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001803 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001804 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1805 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1806 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001807 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001808
1809 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001810 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001811 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001812 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001813 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001814 mbedtls_printf("forced RC4 ciphersuite with RC4 disabled\n");
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001815 ret = 2;
1816 goto usage;
1817 }
1818
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001819 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001820 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001821 }
1822
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001823 if( opt.version_suites != NULL )
1824 {
1825 const char *name[4] = { 0 };
1826
1827 /* Parse 4-element coma-separated list */
1828 for( i = 0, p = (char *) opt.version_suites;
1829 i < 4 && *p != '\0';
1830 i++ )
1831 {
1832 name[i] = p;
1833
1834 /* Terminate the current string and move on to next one */
1835 while( *p != ',' && *p != '\0' )
1836 p++;
1837 if( *p == ',' )
1838 *p++ = '\0';
1839 }
1840
1841 if( i != 4 )
1842 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001843 mbedtls_printf( "too few values for version_suites\n" );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001844 ret = 1;
1845 goto exit;
1846 }
1847
1848 memset( version_suites, 0, sizeof( version_suites ) );
1849
1850 /* Get the suites identifiers from their name */
1851 for( i = 0; i < 4; i++ )
1852 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001853 version_suites[i][0] = mbedtls_ssl_get_ciphersuite_id( name[i] );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001854
1855 if( version_suites[i][0] == 0 )
1856 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001857 mbedtls_printf( "unknown ciphersuite: '%s'\n", name[i] );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001858 ret = 2;
1859 goto usage;
1860 }
1861 }
1862 }
1863
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001864#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001865 /*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001866 * Unhexify the pre-shared key and parse the list if any given
Paul Bakkerfbb17802013-04-17 19:10:21 +02001867 */
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001868 if( unhexify( psk, opt.psk, &psk_len ) != 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +02001869 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001870 mbedtls_printf( "pre-shared key not valid hex\n" );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001871 goto exit;
1872 }
1873
1874 if( opt.psk_list != NULL )
1875 {
1876 if( ( psk_info = psk_parse( opt.psk_list ) ) == NULL )
Paul Bakkerfbb17802013-04-17 19:10:21 +02001877 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001878 mbedtls_printf( "psk_list invalid" );
Paul Bakkerfbb17802013-04-17 19:10:21 +02001879 goto exit;
1880 }
Paul Bakkerfbb17802013-04-17 19:10:21 +02001881 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001882#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001883
Hanno Beckere6706e62017-05-15 16:05:15 +01001884#if defined(MBEDTLS_ECP_C)
1885 if( opt.curves != NULL )
1886 {
1887 p = (char *) opt.curves;
1888 i = 0;
1889
1890 if( strcmp( p, "none" ) == 0 )
1891 {
1892 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1893 }
1894 else if( strcmp( p, "default" ) != 0 )
1895 {
1896 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001897 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001898 {
1899 q = p;
1900
1901 /* Terminate the current string */
1902 while( *p != ',' && *p != '\0' )
1903 p++;
1904 if( *p == ',' )
1905 *p++ = '\0';
1906
1907 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1908 {
1909 curve_list[i++] = curve_cur->grp_id;
1910 }
1911 else
1912 {
1913 mbedtls_printf( "unknown curve %s\n", q );
1914 mbedtls_printf( "supported curves: " );
1915 for( curve_cur = mbedtls_ecp_curve_list();
1916 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1917 curve_cur++ )
1918 {
1919 mbedtls_printf( "%s ", curve_cur->name );
1920 }
1921 mbedtls_printf( "\n" );
1922 goto exit;
1923 }
1924 }
1925
1926 mbedtls_printf("Number of curves: %d\n", i );
1927
Hanno Becker8651a432017-06-09 16:13:22 +01001928 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001929 {
Hanno Becker8651a432017-06-09 16:13:22 +01001930 mbedtls_printf( "curves list too long, maximum %d",
1931 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001932 goto exit;
1933 }
1934
1935 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1936 }
1937 }
1938#endif /* MBEDTLS_ECP_C */
1939
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001940#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001941 if( opt.alpn_string != NULL )
1942 {
1943 p = (char *) opt.alpn_string;
1944 i = 0;
1945
1946 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001947 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001948 {
1949 alpn_list[i++] = p;
1950
1951 /* Terminate the current string and move on to next one */
1952 while( *p != ',' && *p != '\0' )
1953 p++;
1954 if( *p == ',' )
1955 *p++ = '\0';
1956 }
1957 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001958#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001959
Paul Bakkerfbb17802013-04-17 19:10:21 +02001960 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001961 * 0. Initialize the RNG and the session data
1962 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001963 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001964 fflush( stdout );
1965
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001966 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001967 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
1968 &entropy, (const unsigned char *) pers,
1969 strlen( pers ) ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001970 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001971 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
1972 -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001973 goto exit;
1974 }
1975
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001976 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001977
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001978#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001979 /*
1980 * 1.1. Load the trusted CA
1981 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001982 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001983 fflush( stdout );
1984
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001985#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001986 if( strlen( opt.ca_path ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001987 if( strcmp( opt.ca_path, "none" ) == 0 )
1988 ret = 0;
1989 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001990 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001991 else if( strlen( opt.ca_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001992 if( strcmp( opt.ca_file, "none" ) == 0 )
1993 ret = 0;
1994 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001995 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkerddf26b42013-09-18 13:46:23 +02001996 else
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001997#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001998#if defined(MBEDTLS_CERTS_C)
1999 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002000 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002001 ret = mbedtls_x509_crt_parse( &cacert,
2002 (const unsigned char *) mbedtls_test_cas[i],
2003 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002004 if( ret != 0 )
2005 break;
2006 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002007#else
2008 {
2009 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002010 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002011 }
2012#endif
2013 if( ret < 0 )
2014 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002015 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002016 goto exit;
2017 }
2018
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002019 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002020
2021 /*
2022 * 1.2. Load own certificate and private key
2023 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002024 mbedtls_printf( " . Loading the server cert. and key..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002025 fflush( stdout );
2026
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002027#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002028 if( strlen( opt.crt_file ) && strcmp( opt.crt_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002029 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002030 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002031 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert, opt.crt_file ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002032 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002033 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file returned -0x%x\n\n",
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002034 -ret );
2035 goto exit;
2036 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002037 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002038 if( strlen( opt.key_file ) && strcmp( opt.key_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002039 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002040 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002041 if( ( ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002042 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002043 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002044 goto exit;
2045 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002046 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002047 if( key_cert_init == 1 )
2048 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002049 mbedtls_printf( " failed\n ! crt_file without key_file or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002050 goto exit;
2051 }
2052
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002053 if( strlen( opt.crt_file2 ) && strcmp( opt.crt_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002054 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002055 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002056 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert2, opt.crt_file2 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002057 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002058 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file(2) returned -0x%x\n\n",
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002059 -ret );
2060 goto exit;
2061 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002062 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002063 if( strlen( opt.key_file2 ) && strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002064 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002065 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002066 if( ( ret = mbedtls_pk_parse_keyfile( &pkey2, opt.key_file2, "" ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002067 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002068 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile(2) returned -0x%x\n\n",
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002069 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002070 goto exit;
2071 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002072 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002073 if( key_cert_init2 == 1 )
2074 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002075 mbedtls_printf( " failed\n ! crt_file2 without key_file2 or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002076 goto exit;
2077 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002078#endif
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002079 if( key_cert_init == 0 &&
2080 strcmp( opt.crt_file, "none" ) != 0 &&
2081 strcmp( opt.key_file, "none" ) != 0 &&
2082 key_cert_init2 == 0 &&
2083 strcmp( opt.crt_file2, "none" ) != 0 &&
2084 strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002085 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002086#if !defined(MBEDTLS_CERTS_C)
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002087 mbedtls_printf( "Not certificated or key provided, and \nMBEDTLS_CERTS_C not defined!\n" );
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002088 goto exit;
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002089#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002090#if defined(MBEDTLS_RSA_C)
2091 if( ( ret = mbedtls_x509_crt_parse( &srvcert,
2092 (const unsigned char *) mbedtls_test_srv_crt_rsa,
2093 mbedtls_test_srv_crt_rsa_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002094 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002095 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2096 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002097 goto exit;
2098 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002099 if( ( ret = mbedtls_pk_parse_key( &pkey,
2100 (const unsigned char *) mbedtls_test_srv_key_rsa,
2101 mbedtls_test_srv_key_rsa_len, NULL, 0 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002102 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002103 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
2104 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002105 goto exit;
2106 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002107 key_cert_init = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002108#endif /* MBEDTLS_RSA_C */
2109#if defined(MBEDTLS_ECDSA_C)
2110 if( ( ret = mbedtls_x509_crt_parse( &srvcert2,
2111 (const unsigned char *) mbedtls_test_srv_crt_ec,
2112 mbedtls_test_srv_crt_ec_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002113 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002114 mbedtls_printf( " failed\n ! x509_crt_parse2 returned -0x%x\n\n",
2115 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002116 goto exit;
2117 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002118 if( ( ret = mbedtls_pk_parse_key( &pkey2,
2119 (const unsigned char *) mbedtls_test_srv_key_ec,
2120 mbedtls_test_srv_key_ec_len, NULL, 0 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002121 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002122 mbedtls_printf( " failed\n ! pk_parse_key2 returned -0x%x\n\n",
2123 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002124 goto exit;
2125 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002126 key_cert_init2 = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002127#endif /* MBEDTLS_ECDSA_C */
2128#endif /* MBEDTLS_CERTS_C */
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002129 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002130
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002131 mbedtls_printf( " ok\n" );
2132#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002133
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002134#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002135 if( opt.dhm_file != NULL )
2136 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002137 mbedtls_printf( " . Loading DHM parameters..." );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002138 fflush( stdout );
2139
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002140 if( ( ret = mbedtls_dhm_parse_dhmfile( &dhm, opt.dhm_file ) ) != 0 )
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002141 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002142 mbedtls_printf( " failed\n ! mbedtls_dhm_parse_dhmfile returned -0x%04X\n\n",
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002143 -ret );
2144 goto exit;
2145 }
2146
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002147 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002148 }
2149#endif
2150
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002151#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002152 if( opt.sni != NULL )
2153 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002154 mbedtls_printf( " . Setting up SNI information..." );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002155 fflush( stdout );
2156
2157 if( ( sni_info = sni_parse( opt.sni ) ) == NULL )
2158 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002159 mbedtls_printf( " failed\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002160 goto exit;
2161 }
2162
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002163 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002164 }
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002165#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002166
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002167 /*
2168 * 2. Setup the listening TCP socket
2169 */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02002170 mbedtls_printf( " . Bind on %s://%s:%s/ ...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002171 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002172 opt.server_addr ? opt.server_addr : "*",
2173 opt.server_port );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002174 fflush( stdout );
2175
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002176 if( ( ret = mbedtls_net_bind( &listen_fd, opt.server_addr, opt.server_port,
2177 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2178 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002179 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002180 mbedtls_printf( " failed\n ! mbedtls_net_bind returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002181 goto exit;
2182 }
2183
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002184 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002185
2186 /*
2187 * 3. Setup stuff
2188 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002189 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002190 fflush( stdout );
2191
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02002192 if( ( ret = mbedtls_ssl_config_defaults( &conf,
2193 MBEDTLS_SSL_IS_SERVER,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02002194 opt.transport,
2195 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002196 {
2197 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n", -ret );
2198 goto exit;
2199 }
2200
Gilles Peskineef86ab22017-05-05 18:59:02 +02002201#if defined(MBEDTLS_X509_CRT_PARSE_C)
2202 /* The default algorithms profile disables SHA-1, but our tests still
2203 rely on it heavily. Hence we allow it here. A real-world server
2204 should use the default profile unless there is a good reason not to. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02002205 if( opt.allow_sha1 > 0 )
2206 {
2207 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
2208 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
Gilles Peskine682df092017-05-11 19:01:11 +02002209 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
Gilles Peskinebc70a182017-05-09 15:59:24 +02002210 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02002211#endif /* MBEDTLS_X509_CRT_PARSE_C */
2212
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002213 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002214 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002215
Janos Follath4817e272017-04-10 13:44:33 +01002216 if( opt.cert_req_ca_list != DFL_CERT_REQ_CA_LIST )
2217 mbedtls_ssl_conf_cert_req_ca_list( &conf, opt.cert_req_ca_list );
2218
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002219#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002220 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002221 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min, opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02002222
Hanno Beckere7675d02018-08-14 13:28:56 +01002223 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01002224 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002225#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002226
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002227#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002228 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002229 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002230 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002231 goto exit;
2232 };
Paul Bakker05decb22013-08-15 13:33:48 +02002233#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002234
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002235#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002236 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002237 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002238#endif
2239
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002240#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002241 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002242 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002243#endif
2244
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002245#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002246 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002247 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002248#endif
2249
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002250#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002251 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002252 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002253 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002254 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002255 goto exit;
2256 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002257#endif
2258
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002259 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
2260 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002261
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002262#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002263 if( opt.cache_max != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002264 mbedtls_ssl_cache_set_max_entries( &cache, opt.cache_max );
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002265
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002266 if( opt.cache_timeout != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002267 mbedtls_ssl_cache_set_timeout( &cache, opt.cache_timeout );
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002268
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002269 mbedtls_ssl_conf_session_cache( &conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +01002270 mbedtls_ssl_cache_get,
2271 mbedtls_ssl_cache_set );
Paul Bakker0a597072012-09-25 21:55:46 +00002272#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002273
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002274#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002275 if( opt.tickets == MBEDTLS_SSL_SESSION_TICKETS_ENABLED )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002276 {
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002277 if( ( ret = mbedtls_ssl_ticket_setup( &ticket_ctx,
2278 mbedtls_ctr_drbg_random, &ctr_drbg,
Manuel Pégourié-Gonnarda0adc1b2015-05-25 10:35:16 +02002279 MBEDTLS_CIPHER_AES_256_GCM,
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002280 opt.ticket_timeout ) ) != 0 )
2281 {
2282 mbedtls_printf( " failed\n ! mbedtls_ssl_ticket_setup returned %d\n\n", ret );
2283 goto exit;
2284 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002285
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002286 mbedtls_ssl_conf_session_tickets_cb( &conf,
2287 mbedtls_ssl_ticket_write,
2288 mbedtls_ssl_ticket_parse,
2289 &ticket_ctx );
2290 }
Paul Bakkera503a632013-08-14 13:48:06 +02002291#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002292
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002293#if defined(MBEDTLS_SSL_PROTO_DTLS)
2294 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002295 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002296#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002297 if( opt.cookies > 0 )
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002298 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002299 if( ( ret = mbedtls_ssl_cookie_setup( &cookie_ctx,
2300 mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002301 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002302 mbedtls_printf( " failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002303 goto exit;
2304 }
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002305
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002306 mbedtls_ssl_conf_dtls_cookies( &conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002307 &cookie_ctx );
2308 }
2309 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002310#endif /* MBEDTLS_SSL_COOKIE_C */
2311#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002312 if( opt.cookies == 0 )
2313 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002314 mbedtls_ssl_conf_dtls_cookies( &conf, NULL, NULL, NULL );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002315 }
2316 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002317#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002318 {
2319 ; /* Nothing to do */
2320 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002321
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002322#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002323 if( opt.anti_replay != DFL_ANTI_REPLAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002324 mbedtls_ssl_conf_dtls_anti_replay( &conf, opt.anti_replay );
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002325#endif
2326
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002327#if defined(MBEDTLS_SSL_DTLS_BADMAC_LIMIT)
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002328 if( opt.badmac_limit != DFL_BADMAC_LIMIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002329 mbedtls_ssl_conf_dtls_badmac_limit( &conf, opt.badmac_limit );
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002330#endif
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002331 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002332#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002333
Paul Bakker41c83d32013-03-20 14:39:14 +01002334 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002335 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002336
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02002337#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002338 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002339 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02002340#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002341
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02002342 if( opt.version_suites != NULL )
2343 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002344 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[0],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002345 MBEDTLS_SSL_MAJOR_VERSION_3,
2346 MBEDTLS_SSL_MINOR_VERSION_0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002347 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[1],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002348 MBEDTLS_SSL_MAJOR_VERSION_3,
2349 MBEDTLS_SSL_MINOR_VERSION_1 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002350 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[2],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002351 MBEDTLS_SSL_MAJOR_VERSION_3,
2352 MBEDTLS_SSL_MINOR_VERSION_2 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002353 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[3],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002354 MBEDTLS_SSL_MAJOR_VERSION_3,
2355 MBEDTLS_SSL_MINOR_VERSION_3 );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02002356 }
2357
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002358 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002359 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002360#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002361 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002362
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002363 if( opt.renego_delay != DFL_RENEGO_DELAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002364 mbedtls_ssl_conf_renegotiation_enforced( &conf, opt.renego_delay );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002365
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002366 if( opt.renego_period != DFL_RENEGO_PERIOD )
2367 {
Andres AG692ad842017-01-19 16:30:57 +00002368 PUT_UINT64_BE( renego_period, opt.renego_period, 0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002369 mbedtls_ssl_conf_renegotiation_period( &conf, renego_period );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002370 }
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01002371#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002372
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002373#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002374 if( strcmp( opt.ca_path, "none" ) != 0 &&
2375 strcmp( opt.ca_file, "none" ) != 0 )
2376 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002377 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002378 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002379 if( key_cert_init )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002380 {
2381 mbedtls_pk_context *pk = &pkey;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002382#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002383 if( opt.async_private_delay1 >= 0 )
2384 {
Gilles Peskine44817442018-06-13 18:09:28 +02002385 ret = ssl_async_set_key( &ssl_async_keys, &srvcert, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002386 opt.async_private_delay1 );
2387 if( ret < 0 )
2388 {
2389 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2390 ret );
2391 goto exit;
2392 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002393 pk = NULL;
2394 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002395#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002396 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002397 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002398 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002399 goto exit;
2400 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002401 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002402 if( key_cert_init2 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002403 {
2404 mbedtls_pk_context *pk = &pkey2;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002405#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002406 if( opt.async_private_delay2 >= 0 )
2407 {
Gilles Peskine44817442018-06-13 18:09:28 +02002408 ret = ssl_async_set_key( &ssl_async_keys, &srvcert2, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002409 opt.async_private_delay2 );
2410 if( ret < 0 )
2411 {
2412 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2413 ret );
2414 goto exit;
2415 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002416 pk = NULL;
2417 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002418#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002419 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert2, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002420 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002421 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002422 goto exit;
2423 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002424 }
2425
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002426#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002427 if( opt.async_operations[0] != '-' )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002428 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002429 mbedtls_ssl_async_sign_t *sign = NULL;
2430 mbedtls_ssl_async_decrypt_t *decrypt = NULL;
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002431 const char *r;
2432 for( r = opt.async_operations; *r; r++ )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002433 {
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002434 switch( *r )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002435 {
2436 case 'd':
2437 decrypt = ssl_async_decrypt;
2438 break;
2439 case 's':
2440 sign = ssl_async_sign;
2441 break;
2442 }
2443 }
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002444 ssl_async_keys.inject_error = ( opt.async_private_error < 0 ?
2445 - opt.async_private_error :
2446 opt.async_private_error );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002447 ssl_async_keys.f_rng = mbedtls_ctr_drbg_random;
2448 ssl_async_keys.p_rng = &ctr_drbg;
2449 mbedtls_ssl_conf_async_private_cb( &conf,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002450 sign,
2451 decrypt,
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002452 ssl_async_resume,
2453 ssl_async_cancel,
2454 &ssl_async_keys );
2455 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002456#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002457#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +02002458
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002459#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002460 if( opt.sni != NULL )
Gilles Peskine166ce742018-04-30 10:30:49 +02002461 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002462 mbedtls_ssl_conf_sni( &conf, sni_callback, sni_info );
Gilles Peskine166ce742018-04-30 10:30:49 +02002463#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
2464 if( opt.async_private_delay2 >= 0 )
2465 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002466 sni_entry *cur;
2467 for( cur = sni_info; cur != NULL; cur = cur->next )
Gilles Peskine166ce742018-04-30 10:30:49 +02002468 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002469 ret = ssl_async_set_key( &ssl_async_keys,
Gilles Peskine44817442018-06-13 18:09:28 +02002470 cur->cert, cur->key, 1,
Gilles Peskinee2479892018-06-13 18:06:51 +02002471 opt.async_private_delay2 );
2472 if( ret < 0 )
2473 {
2474 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2475 ret );
2476 goto exit;
2477 }
2478 cur->key = NULL;
Gilles Peskine166ce742018-04-30 10:30:49 +02002479 }
Gilles Peskine166ce742018-04-30 10:30:49 +02002480 }
2481#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
2482 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002483#endif
2484
Hanno Beckere6706e62017-05-15 16:05:15 +01002485#if defined(MBEDTLS_ECP_C)
2486 if( opt.curves != NULL &&
2487 strcmp( opt.curves, "default" ) != 0 )
2488 {
2489 mbedtls_ssl_conf_curves( &conf, curve_list );
2490 }
2491#endif
2492
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002493#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002494 if( strlen( opt.psk ) != 0 && strlen( opt.psk_identity ) != 0 )
2495 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002496 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002497 (const unsigned char *) opt.psk_identity,
2498 strlen( opt.psk_identity ) );
2499 if( ret != 0 )
2500 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002501 mbedtls_printf( " failed\n mbedtls_ssl_conf_psk returned -0x%04X\n\n", - ret );
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002502 goto exit;
2503 }
2504 }
2505
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002506 if( opt.psk_list != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002507 mbedtls_ssl_conf_psk_cb( &conf, psk_callback, psk_info );
Paul Bakkered27a042013-04-18 22:46:23 +02002508#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002509
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002510#if defined(MBEDTLS_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +00002511 /*
2512 * Use different group than default DHM group
2513 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002514#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002515 if( opt.dhm_file != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002516 ret = mbedtls_ssl_conf_dh_param_ctx( &conf, &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002517#endif
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002518 if( ret != 0 )
2519 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002520 mbedtls_printf( " failed\n mbedtls_ssl_conf_dh_param returned -0x%04X\n\n", - ret );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002521 goto exit;
2522 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002523#endif
2524
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002525 if( opt.min_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002526 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.min_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00002527
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002528 if( opt.max_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002529 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.max_version );
Paul Bakkerc1516be2013-06-29 16:01:32 +02002530
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002531 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2532 {
2533 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", -ret );
2534 goto exit;
2535 }
2536
2537 if( opt.nbio == 2 )
2538 mbedtls_ssl_set_bio( &ssl, &client_fd, my_send, my_recv, NULL );
2539 else
2540 mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02002541 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002542
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02002543#if defined(MBEDTLS_SSL_PROTO_DTLS)
2544 if( opt.dtls_mtu != DFL_DTLS_MTU )
2545 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
2546#endif
2547
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002548#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002549 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2550 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002551#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002552
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002553 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002554
2555reset:
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002556#if !defined(_WIN32)
2557 if( received_sigterm )
2558 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002559 mbedtls_printf( " interrupted by SIGTERM (not in net_accept())\n" );
2560 if( ret == MBEDTLS_ERR_NET_INVALID_CONTEXT )
2561 ret = 0;
2562
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002563 goto exit;
2564 }
2565#endif
2566
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002567 if( ret == MBEDTLS_ERR_SSL_CLIENT_RECONNECT )
2568 {
2569 mbedtls_printf( " ! Client initiated reconnection from same port\n" );
2570 goto handshake;
2571 }
2572
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002573#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002574 if( ret != 0 )
2575 {
2576 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002577 mbedtls_strerror( ret, error_buf, 100 );
2578 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002579 }
2580#endif
2581
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002582 mbedtls_net_free( &client_fd );
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002583
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002584 mbedtls_ssl_session_reset( &ssl );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002585
2586 /*
2587 * 3. Wait until a client connects
2588 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002589 mbedtls_printf( " . Waiting for a remote connection ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002590 fflush( stdout );
2591
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002592 if( ( ret = mbedtls_net_accept( &listen_fd, &client_fd,
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002593 client_ip, sizeof( client_ip ), &cliip_len ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002594 {
Paul Bakkerc1283d32014-08-18 11:05:51 +02002595#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002596 if( received_sigterm )
2597 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002598 mbedtls_printf( " interrupted by SIGTERM (in net_accept())\n" );
2599 if( ret == MBEDTLS_ERR_NET_ACCEPT_FAILED )
2600 ret = 0;
2601
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002602 goto exit;
2603 }
Paul Bakkerc1283d32014-08-18 11:05:51 +02002604#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002605
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002606 mbedtls_printf( " failed\n ! mbedtls_net_accept returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002607 goto exit;
2608 }
2609
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002610 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002611 ret = mbedtls_net_set_nonblock( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002612 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002613 ret = mbedtls_net_set_block( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002614 if( ret != 0 )
2615 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002616 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002617 goto exit;
2618 }
2619
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002620 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002621
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002622#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
2623 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002624 {
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002625 if( ( ret = mbedtls_ssl_set_client_transport_id( &ssl,
2626 client_ip, cliip_len ) ) != 0 )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002627 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002628 mbedtls_printf( " failed\n ! mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n",
2629 -ret );
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002630 goto exit;
2631 }
2632 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002633#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002634
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002635#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
2636 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
2637 {
2638 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
2639 (const unsigned char *) opt.ecjpake_pw,
2640 strlen( opt.ecjpake_pw ) ) ) != 0 )
2641 {
2642 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n", ret );
2643 goto exit;
2644 }
2645 }
2646#endif
2647
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002648 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002649
2650 /*
2651 * 4. Handshake
2652 */
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002653handshake:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002654 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002655 fflush( stdout );
2656
Hanno Becker16970d22017-10-10 15:56:37 +01002657 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002658 {
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002659#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002660 if( ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS &&
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002661 ssl_async_keys.inject_error == SSL_ASYNC_INJECT_ERROR_CANCEL )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002662 {
2663 mbedtls_printf( " cancelling on injected error\n" );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002664 break;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002665 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002666#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskineb44692f2018-04-24 12:18:19 +02002667
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002668 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01002669 break;
2670
2671 /* For event-driven IO, wait for socket to become available */
2672 if( opt.event == 1 /* level triggered IO */ )
2673 {
2674#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002675 ret = idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002676#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002677 ret = idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002678#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002679 if( ret != 0 )
2680 goto reset;
Hanno Becker16970d22017-10-10 15:56:37 +01002681 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002682 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002683
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002684 if( ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED )
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002685 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002686 mbedtls_printf( " hello verification requested\n" );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002687 ret = 0;
2688 goto reset;
2689 }
2690 else if( ret != 0 )
2691 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002692 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02002693
2694#if defined(MBEDTLS_X509_CRT_PARSE_C)
2695 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
2696 {
2697 char vrfy_buf[512];
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +02002698 flags = mbedtls_ssl_get_verify_result( &ssl );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02002699
2700 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
2701
2702 mbedtls_printf( "%s\n", vrfy_buf );
2703 }
2704#endif
2705
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002706#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002707 if( opt.async_private_error < 0 )
2708 /* Injected error only the first time round, to test reset */
2709 ssl_async_keys.inject_error = SSL_ASYNC_INJECT_ERROR_NONE;
2710#endif
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002711 goto reset;
2712 }
2713 else /* ret == 0 */
2714 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002715 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
2716 mbedtls_ssl_get_version( &ssl ), mbedtls_ssl_get_ciphersuite( &ssl ) );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002717 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002718
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002719 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
2720 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002721 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002722 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002723
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002724#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
2725 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
2726 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
2727#endif
2728
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002729#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002730 if( opt.alpn_string != NULL )
2731 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002732 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
2733 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002734 alp ? alp : "(none)" );
2735 }
2736#endif
2737
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002738#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002739 /*
Ron Eldor2a47be52017-06-20 15:23:23 +03002740 * 5. Verify the client certificate
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002741 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002742 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002743
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002744 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002745 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002746 char vrfy_buf[512];
2747
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002748 mbedtls_printf( " failed\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002749
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002750 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002751
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002752 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002753 }
2754 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002755 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002756
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002757 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002758 {
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002759 char crt_buf[512];
2760
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002761 mbedtls_printf( " . Peer certificate information ...\n" );
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002762 mbedtls_x509_crt_info( crt_buf, sizeof( crt_buf ), " ",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002763 mbedtls_ssl_get_peer_cert( &ssl ) );
Manuel Pégourié-Gonnard67557172015-07-02 11:15:48 +02002764 mbedtls_printf( "%s\n", crt_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002765 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002766#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002767
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02002768 if( opt.exchanges == 0 )
2769 goto close_notify;
2770
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00002771 exchanges_left = opt.exchanges;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002772data_exchange:
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002773 /*
2774 * 6. Read the HTTP Request
2775 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002776 mbedtls_printf( " < Read from client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002777 fflush( stdout );
2778
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002779 /*
2780 * TLS and DTLS need different reading styles (stream vs datagram)
2781 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002782 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002783 {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002784 do
2785 {
2786 int terminated = 0;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002787 len = opt.buffer_size - 1;
2788 memset( buf, 0, opt.buffer_size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002789 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002790
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002791 if( mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01002792 {
2793 if( opt.event == 1 /* level triggered IO */ )
2794 {
2795#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002796 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002797#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002798 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002799#endif
2800 }
2801
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002802 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002803 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002804
2805 if( ret <= 0 )
2806 {
2807 switch( ret )
2808 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002809 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2810 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002811 goto close_notify;
2812
2813 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002814 case MBEDTLS_ERR_NET_CONN_RESET:
2815 mbedtls_printf( " connection was reset by peer\n" );
2816 ret = MBEDTLS_ERR_NET_CONN_RESET;
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002817 goto reset;
2818
2819 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002820 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002821 goto reset;
2822 }
2823 }
2824
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002825 if( mbedtls_ssl_get_bytes_avail( &ssl ) == 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002826 {
2827 len = ret;
2828 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002829 mbedtls_printf( " %d bytes read\n\n%s\n", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002830
2831 /* End of message should be detected according to the syntax of the
2832 * application protocol (eg HTTP), just use a dummy test here. */
2833 if( buf[len - 1] == '\n' )
2834 terminated = 1;
2835 }
2836 else
2837 {
2838 int extra_len, ori_len;
2839 unsigned char *larger_buf;
2840
2841 ori_len = ret;
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002842 extra_len = (int) mbedtls_ssl_get_bytes_avail( &ssl );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002843
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +02002844 larger_buf = mbedtls_calloc( 1, ori_len + extra_len + 1 );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002845 if( larger_buf == NULL )
2846 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002847 mbedtls_printf( " ! memory allocation failed\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002848 ret = 1;
2849 goto reset;
2850 }
2851
2852 memset( larger_buf, 0, ori_len + extra_len );
2853 memcpy( larger_buf, buf, ori_len );
2854
2855 /* This read should never fail and get the whole cached data */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002856 ret = mbedtls_ssl_read( &ssl, larger_buf + ori_len, extra_len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002857 if( ret != extra_len ||
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002858 mbedtls_ssl_get_bytes_avail( &ssl ) != 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002859 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002860 mbedtls_printf( " ! mbedtls_ssl_read failed on cached data\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002861 ret = 1;
2862 goto reset;
2863 }
2864
2865 larger_buf[ori_len + extra_len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002866 mbedtls_printf( " %u bytes read (%u + %u)\n\n%s\n",
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002867 ori_len + extra_len, ori_len, extra_len,
2868 (char *) larger_buf );
2869
2870 /* End of message should be detected according to the syntax of the
2871 * application protocol (eg HTTP), just use a dummy test here. */
2872 if( larger_buf[ori_len + extra_len - 1] == '\n' )
2873 terminated = 1;
2874
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002875 mbedtls_free( larger_buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002876 }
2877
2878 if( terminated )
2879 {
2880 ret = 0;
2881 break;
2882 }
2883 }
2884 while( 1 );
2885 }
2886 else /* Not stream, so datagram */
2887 {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002888 len = opt.buffer_size - 1;
2889 memset( buf, 0, opt.buffer_size );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002890
Gilles Peskineb44692f2018-04-24 12:18:19 +02002891 do
Hanno Becker16970d22017-10-10 15:56:37 +01002892 {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00002893 /* Without the call to `mbedtls_ssl_check_pending`, it might
2894 * happen that the client sends application data in the same
2895 * datagram as the Finished message concluding the handshake.
2896 * In this case, the application data would be ready to be
2897 * processed while the underlying transport wouldn't signal
2898 * any further incoming data.
2899 *
2900 * See the test 'Event-driven I/O: session-id resume, UDP packing'
2901 * in tests/ssl-opt.sh.
2902 */
2903
2904 /* For event-driven IO, wait for socket to become available */
2905 if( mbedtls_ssl_check_pending( &ssl ) == 0 &&
2906 opt.event == 1 /* level triggered IO */ )
2907 {
2908#if defined(MBEDTLS_TIMING_C)
2909 idle( &client_fd, &timer, MBEDTLS_ERR_SSL_WANT_READ );
2910#else
2911 idle( &client_fd, MBEDTLS_ERR_SSL_WANT_READ );
2912#endif
2913 }
2914
Hanno Becker16970d22017-10-10 15:56:37 +01002915 ret = mbedtls_ssl_read( &ssl, buf, len );
2916
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00002917 /* Note that even if `mbedtls_ssl_check_pending` returns true,
2918 * it can happen that the subsequent call to `mbedtls_ssl_read`
2919 * returns `MBEDTLS_ERR_SSL_WANT_READ`, because the pending messages
2920 * might be discarded (e.g. because they are retransmissions). */
Hanno Becker16970d22017-10-10 15:56:37 +01002921 }
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002922 while( mbedtls_status_is_ssl_in_progress( ret ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002923
2924 if( ret <= 0 )
2925 {
2926 switch( ret )
2927 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002928 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2929 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002930 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002931 goto close_notify;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002932
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002933 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002934 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002935 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002936 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002937 }
2938
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002939 len = ret;
2940 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002941 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002942 ret = 0;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002943 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002944
2945 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002946 * 7a. Request renegotiation while client is waiting for input from us.
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02002947 * (only on the first exchange, to be able to test retransmission)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002948 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002949#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard3a173f42015-01-22 13:30:33 +00002950 if( opt.renegotiate && exchanges_left == opt.exchanges )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002951 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002952 mbedtls_printf( " . Requestion renegotiation..." );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002953 fflush( stdout );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002954
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002955 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002956 {
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002957 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002958 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002959 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002960 goto reset;
2961 }
Hanno Becker16970d22017-10-10 15:56:37 +01002962
2963 /* For event-driven IO, wait for socket to become available */
2964 if( opt.event == 1 /* level triggered IO */ )
2965 {
2966#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002967 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002968#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002969 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002970#endif
2971 }
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002972 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002973
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002974 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002975 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002976#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02002977
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002978 /*
2979 * 7. Write the 200 Response
2980 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002981 mbedtls_printf( " > Write to client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002982 fflush( stdout );
2983
2984 len = sprintf( (char *) buf, HTTP_RESPONSE,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002985 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002986
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002987 /* Add padding to the response to reach opt.response_size in length */
2988 if( opt.response_size != DFL_RESPONSE_SIZE &&
2989 len < opt.response_size )
2990 {
2991 memset( buf + len, 'B', opt.response_size - len );
2992 len += opt.response_size - len;
2993 }
2994
2995 /* Truncate if response size is smaller than the "natural" size */
2996 if( opt.response_size != DFL_RESPONSE_SIZE &&
2997 len > opt.response_size )
2998 {
2999 len = opt.response_size;
3000
3001 /* Still end with \r\n unless that's really not possible */
3002 if( len >= 2 ) buf[len - 2] = '\r';
3003 if( len >= 1 ) buf[len - 1] = '\n';
3004 }
3005
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003006 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003007 {
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003008 for( written = 0, frags = 0; written < len; written += ret, frags++ )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003009 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003010 while( ( ret = mbedtls_ssl_write( &ssl, buf + written, len - written ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003011 <= 0 )
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003012 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003013 if( ret == MBEDTLS_ERR_NET_CONN_RESET )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003014 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003015 mbedtls_printf( " failed\n ! peer closed the connection\n\n" );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003016 goto reset;
3017 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003018
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003019 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003020 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003021 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003022 goto reset;
3023 }
Hanno Becker16970d22017-10-10 15:56:37 +01003024
3025 /* For event-driven IO, wait for socket to become available */
3026 if( opt.event == 1 /* level triggered IO */ )
3027 {
3028#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003029 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003030#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003031 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003032#endif
3033 }
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003034 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003035 }
3036 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003037 else /* Not stream, so datagram */
3038 {
Hanno Becker16970d22017-10-10 15:56:37 +01003039 while( 1 )
3040 {
3041 ret = mbedtls_ssl_write( &ssl, buf, len );
3042
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003043 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01003044 break;
3045
3046 /* For event-driven IO, wait for socket to become available */
3047 if( opt.event == 1 /* level triggered IO */ )
3048 {
3049#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003050 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003051#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003052 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003053#endif
3054 }
3055 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003056
3057 if( ret < 0 )
3058 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003059 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003060 goto reset;
3061 }
3062
3063 frags = 1;
3064 written = ret;
3065 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003066
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003067 buf[written] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003068 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf );
Manuel Pégourié-Gonnarda92ed482015-01-14 10:46:08 +01003069 ret = 0;
Manuel Pégourié-Gonnardf3dc2f62013-10-29 18:17:41 +01003070
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003071 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003072 * 7b. Continue doing data exchanges?
3073 */
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003074 if( --exchanges_left > 0 )
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003075 goto data_exchange;
3076
3077 /*
3078 * 8. Done, cleanly close the connection
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003079 */
3080close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003081 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01003082
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003083 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003084 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01003085 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003086 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003087
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003088 mbedtls_printf( " done\n" );
Rich Evansf90016a2015-01-19 14:26:37 +00003089
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003090 goto reset;
3091
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003092 /*
3093 * Cleanup and exit
3094 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003095exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003096#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003097 if( ret != 0 )
3098 {
3099 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003100 mbedtls_strerror( ret, error_buf, 100 );
3101 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003102 }
3103#endif
3104
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003105 mbedtls_printf( " . Cleaning up..." );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003106 fflush( stdout );
3107
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003108 mbedtls_net_free( &client_fd );
3109 mbedtls_net_free( &listen_fd );
Paul Bakker0c226102014-04-17 16:02:36 +02003110
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003111#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3112 mbedtls_dhm_free( &dhm );
Paul Bakkera317a982014-06-18 16:44:11 +02003113#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003114#if defined(MBEDTLS_X509_CRT_PARSE_C)
3115 mbedtls_x509_crt_free( &cacert );
3116 mbedtls_x509_crt_free( &srvcert );
3117 mbedtls_pk_free( &pkey );
3118 mbedtls_x509_crt_free( &srvcert2 );
3119 mbedtls_pk_free( &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +02003120#endif
Gilles Peskine44817442018-06-13 18:09:28 +02003121#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
3122 for( i = 0; (size_t) i < ssl_async_keys.slots_used; i++ )
3123 {
3124 if( ssl_async_keys.slots[i].pk_owned )
3125 {
3126 mbedtls_pk_free( ssl_async_keys.slots[i].pk );
3127 mbedtls_free( ssl_async_keys.slots[i].pk );
3128 ssl_async_keys.slots[i].pk = NULL;
3129 }
3130 }
3131#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02003132#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01003133 sni_free( sni_info );
3134#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003135#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003136 psk_free( psk_info );
3137#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003138#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3139 mbedtls_dhm_free( &dhm );
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003140#endif
Paul Bakkered27a042013-04-18 22:46:23 +02003141
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003142 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02003143 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003144 mbedtls_ctr_drbg_free( &ctr_drbg );
3145 mbedtls_entropy_free( &entropy );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003146
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003147#if defined(MBEDTLS_SSL_CACHE_C)
3148 mbedtls_ssl_cache_free( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00003149#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02003150#if defined(MBEDTLS_SSL_SESSION_TICKETS)
3151 mbedtls_ssl_ticket_free( &ticket_ctx );
3152#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003153#if defined(MBEDTLS_SSL_COOKIE_C)
3154 mbedtls_ssl_cookie_free( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02003155#endif
Paul Bakker0a597072012-09-25 21:55:46 +00003156
Hanno Becker095d9cf2018-10-09 12:39:13 +01003157 mbedtls_free( buf );
3158
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003159#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3160#if defined(MBEDTLS_MEMORY_DEBUG)
3161 mbedtls_memory_buffer_alloc_status();
Paul Bakker82024bf2013-07-04 11:52:32 +02003162#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003163 mbedtls_memory_buffer_alloc_free();
Paul Bakker1337aff2013-09-29 14:45:34 +02003164#endif
Paul Bakker82024bf2013-07-04 11:52:32 +02003165
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003166 mbedtls_printf( " done.\n" );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003167
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003168#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003169 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003170 fflush( stdout ); getchar();
3171#endif
3172
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003173 // Shell can not handle large exit numbers -> 1 for errors
3174 if( ret < 0 )
3175 ret = 1;
3176
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003177 return( ret );
3178}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003179#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
3180 MBEDTLS_SSL_SRV_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003181 MBEDTLS_CTR_DRBG_C */