blob: db99ef6b4af8619442094e78eeb3765eca01c191 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Rich Evans18b78c72015-02-11 14:06:19 +000031#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010032#include <stdlib.h>
33#define mbedtls_time time
34#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035#define mbedtls_printf printf
36#define mbedtls_fprintf fprintf
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037#define mbedtls_snprintf snprintf
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010038#define mbedtls_exit exit
39#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
40#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Rich Evansf90016a2015-01-19 14:26:37 +000041#endif
42
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020043#if !defined(MBEDTLS_ENTROPY_C) || \
44 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_CLI_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020045 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020046int main( void )
47{
48 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
49 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_CLI_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020050 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020051 return( 0 );
52}
53#else
54
Andres AG788aa4a2016-09-14 14:32:09 +010055#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000056#include "mbedtls/ssl.h"
57#include "mbedtls/entropy.h"
58#include "mbedtls/ctr_drbg.h"
59#include "mbedtls/certs.h"
60#include "mbedtls/x509.h"
61#include "mbedtls/error.h"
62#include "mbedtls/debug.h"
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020063#include "mbedtls/timing.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000064
Rich Evans18b78c72015-02-11 14:06:19 +000065#include <stdio.h>
66#include <stdlib.h>
67#include <string.h>
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010068
Hanno Beckere4ad3e82017-09-18 15:05:46 +010069#define MAX_REQUEST_SIZE 20000
70#define MAX_REQUEST_SIZE_STR "20000"
71
Paul Bakker9caf2d22010-02-18 19:37:19 +000072#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010073#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020074#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +000075#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +020076#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +000077#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010078#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010079#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020080#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +020081#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +000082#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +000083#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +000084#define DFL_CRT_FILE ""
85#define DFL_KEY_FILE ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020086#define DFL_PSK ""
87#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020088#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +020089#define DFL_EC_MAX_OPS -1
Paul Bakker51936882011-02-20 16:05:58 +000090#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020091#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010092#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010093#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +020094#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +020095#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +000096#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +000097#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +020098#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +010099#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200100#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100101#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100102#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200103#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200104#define DFL_RECONNECT 0
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100105#define DFL_RECO_DELAY 0
Hanno Becker7a7aa192019-04-09 17:24:19 +0100106#define DFL_CID_ENABLED 0
107#define DFL_CID_VALUE ""
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200108#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200109#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200110#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100111#define DFL_CURVES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200112#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200113#define DFL_HS_TO_MIN 0
114#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200115#define DFL_DTLS_MTU -1
Hanno Becker4d615912018-08-14 13:33:30 +0100116#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200117#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200118#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100119#define DFL_ETM -1
Paul Bakker0e6975b2009-02-10 22:19:10 +0000120
Paul Bakker93c32b22014-04-25 13:40:05 +0200121#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
122#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000123
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200124#if defined(MBEDTLS_X509_CRT_PARSE_C)
125#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000126#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100127 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
128 " default: \"\" (pre-loaded)\n" \
129 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
130 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
131 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
132 " default: \"\" (pre-loaded)\n" \
Paul Bakker5690efc2011-05-26 13:16:06 +0000133 " key_file=%%s default: \"\" (pre-loaded)\n"
134#else
135#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200136 " No file operations available (MBEDTLS_FS_IO not defined)\n"
137#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200138#else
139#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200141
Hanno Becker7a7aa192019-04-09 17:24:19 +0100142#if defined(MBEDTLS_SSL_CID)
143#define USAGE_CID \
144 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
145 " default: 0 (disabled)\n" \
146 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
147 " default: \"\"\n"
148#else /* MBEDTLS_SSL_CID */
149#define USAGE_CID ""
150#endif /* MBEDTLS_SSL_CID */
151
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkered27a042013-04-18 22:46:23 +0200153#define USAGE_PSK \
154 " psk=%%s default: \"\" (in hex, without 0x)\n" \
155 " psk_identity=%%s default: \"Client_identity\"\n"
156#else
157#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakker5690efc2011-05-26 13:16:06 +0000159
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200160#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200161#define USAGE_TICKETS \
162 " tickets=%%d default: 1 (enabled)\n"
163#else
164#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200165#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200166
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200167#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Paul Bakker1f2bc622013-08-15 13:45:55 +0200168#define USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100169 " trunc_hmac=%%d default: library default\n"
Paul Bakker1f2bc622013-08-15 13:45:55 +0200170#else
171#define USAGE_TRUNC_HMAC ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200172#endif /* MBEDTLS_SSL_TRUNCATED_HMAC */
Paul Bakker1f2bc622013-08-15 13:45:55 +0200173
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200175#define USAGE_MAX_FRAG_LEN \
176 " max_frag_len=%%d default: 16384 (tls default)\n" \
177 " options: 512, 1024, 2048, 4096\n"
178#else
179#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200180#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200181
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200182#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100183#define USAGE_RECSPLIT \
Manuel Pégourié-Gonnardbf27eaa2015-06-11 17:02:10 +0200184 " recsplit=0/1 default: (library default: on)\n"
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100185#else
186#define USAGE_RECSPLIT
187#endif
188
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200189#if defined(MBEDTLS_DHM_C)
190#define USAGE_DHMLEN \
191 " dhmlen=%%d default: (library default: 1024 bits)\n"
192#else
193#define USAGE_DHMLEN
194#endif
195
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200196#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200197#define USAGE_ALPN \
198 " alpn=%%s default: \"\" (disabled)\n" \
199 " example: spdy/1,http/1.1\n"
200#else
201#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200202#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200203
Hanno Beckere6706e62017-05-15 16:05:15 +0100204#if defined(MBEDTLS_ECP_C)
205#define USAGE_CURVES \
206 " curves=a,b,c,d default: \"default\" (library default)\n" \
207 " example: \"secp521r1,brainpoolP512r1\"\n" \
208 " - use \"none\" for empty list\n" \
209 " - see mbedtls_ecp_curve_list()\n" \
210 " for acceptable curve names\n"
211#else
212#define USAGE_CURVES ""
213#endif
214
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200216#define USAGE_DTLS \
217 " dtls=%%d default: 0 (TLS)\n" \
218 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200219 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Becker4d615912018-08-14 13:33:30 +0100220 " mtu=%%d default: (library default: unlimited)\n" \
221 " dgram_packing=%%d default: 1 (allowed)\n" \
222 " allow or forbid packing of multiple\n" \
223 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200224#else
225#define USAGE_DTLS ""
226#endif
227
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200228#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200229#define USAGE_FALLBACK \
230 " fallback=0/1 default: (library default: off)\n"
231#else
232#define USAGE_FALLBACK ""
233#endif
234
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200236#define USAGE_EMS \
237 " extended_ms=0/1 default: (library default: on)\n"
238#else
239#define USAGE_EMS ""
240#endif
241
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200242#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100243#define USAGE_ETM \
244 " etm=0/1 default: (library default: on)\n"
245#else
246#define USAGE_ETM ""
247#endif
248
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100250#define USAGE_RENEGO \
251 " renegotiation=%%d default: 0 (disabled)\n" \
252 " renegotiate=%%d default: 0 (disabled)\n"
253#else
254#define USAGE_RENEGO ""
255#endif
256
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200257#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
258#define USAGE_ECJPAKE \
259 " ecjpake_pw=%%s default: none (disabled)\n"
260#else
261#define USAGE_ECJPAKE ""
262#endif
263
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200264#if defined(MBEDTLS_ECP_RESTARTABLE)
265#define USAGE_ECRESTART \
266 " ec_max_ops=%%s default: library default (restart disabled)\n"
267#else
268#define USAGE_ECRESTART ""
269#endif
270
Paul Bakker9caf2d22010-02-18 19:37:19 +0000271#define USAGE \
Paul Bakker67968392010-07-18 08:28:20 +0000272 "\n usage: ssl_client2 param=<>...\n" \
273 "\n acceptable parameters:\n" \
274 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100275 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000276 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000277 " request_page=%%s default: \".\"\n" \
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +0100278 " request_size=%%d default: about 34 (basic request)\n" \
279 " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \
280 " If 0, in the first exchange only an empty\n" \
281 " application data message is sent followed by\n" \
282 " a second non-empty message before attempting\n" \
283 " to read a response from the server\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100284 " debug_level=%%d default: 0 (disabled)\n" \
285 " nbio=%%d default: 0 (blocking I/O)\n" \
286 " options: 1 (non-blocking), 2 (added delays)\n" \
287 " event=%%d default: 0 (loop)\n" \
288 " options: 1 (level-triggered, implies nbio=1),\n" \
289 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200290 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100291 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200292 USAGE_DTLS \
Hanno Becker7a7aa192019-04-09 17:24:19 +0100293 USAGE_CID \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200294 "\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100295 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100296 " options: none, optional, required\n" \
297 USAGE_IO \
298 "\n" \
299 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200300 USAGE_ECJPAKE \
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200301 USAGE_ECRESTART \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100302 "\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100303 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100304 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200305 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200306 " reconnect=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200307 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200308 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200309 USAGE_TICKETS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100310 USAGE_MAX_FRAG_LEN \
311 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200312 USAGE_ALPN \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200313 USAGE_FALLBACK \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200314 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100315 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100316 USAGE_CURVES \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100317 USAGE_RECSPLIT \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200318 USAGE_DHMLEN \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000319 "\n" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100320 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200321 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200322 " min_version=%%s default: (library default: tls1)\n" \
323 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000324 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100325 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000326 "\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000327 " force_ciphersuite=<name> default: all enabled\n"\
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100328 " query_config=<name> return 0 if the specified\n" \
329 " configuration macro is defined and 1\n" \
330 " otherwise. The expansion of the macro\n" \
331 " is printed if it is defined\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000332 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000333
Hanno Becker8651a432017-06-09 16:13:22 +0100334#define ALPN_LIST_SIZE 10
335#define CURVE_LIST_SIZE 20
336
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100337#if defined(MBEDTLS_CHECK_PARAMS)
338#include "mbedtls/platform_util.h"
339void mbedtls_param_failed( const char *failure_condition,
340 const char *file,
341 int line )
Simon Butcher63cb97e2018-12-06 17:43:31 +0000342{
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100343 mbedtls_printf( "%s:%i: Input param failed - %s\n",
344 file, line, failure_condition );
Simon Butcher63cb97e2018-12-06 17:43:31 +0000345 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
346}
347#endif
348
Rich Evans85b05ec2015-02-12 11:37:29 +0000349/*
350 * global options
351 */
352struct options
353{
354 const char *server_name; /* hostname of the server (client only) */
355 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200356 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000357 int debug_level; /* level of debugging */
358 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100359 int event; /* loop or event-driven IO? level or edge triggered? */
360 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000361 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000362 const char *request_page; /* page on server to request */
363 int request_size; /* pad request with header to requested size */
364 const char *ca_file; /* the file with the CA certificate(s) */
365 const char *ca_path; /* the path with the CA certificate(s) reside */
366 const char *crt_file; /* the file with the client certificate */
367 const char *key_file; /* the file with the client key */
368 const char *psk; /* the pre-shared key */
369 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200370 const char *ecjpake_pw; /* the EC J-PAKE password */
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200371 int ec_max_ops; /* EC consecutive operations limit */
Rich Evans85b05ec2015-02-12 11:37:29 +0000372 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
373 int renegotiation; /* enable / disable renegotiation */
374 int allow_legacy; /* allow legacy renegotiation */
375 int renegotiate; /* attempt renegotiation? */
376 int renego_delay; /* delay before enforcing renegotiation */
377 int exchanges; /* number of data exchanges */
378 int min_version; /* minimum protocol version accepted */
379 int max_version; /* maximum protocol version accepted */
380 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200381 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000382 int auth_mode; /* verify mode for connection */
383 unsigned char mfl_code; /* code for maximum fragment length */
384 int trunc_hmac; /* negotiate truncated hmac or not */
385 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200386 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000387 int reconnect; /* attempt to resume session */
388 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200389 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000390 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100391 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000392 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000393 int transport; /* TLS or DTLS? */
394 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
395 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200396 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Rich Evans85b05ec2015-02-12 11:37:29 +0000397 int fallback; /* is this a fallback connection? */
Hanno Becker4d615912018-08-14 13:33:30 +0100398 int dgram_packing; /* allow/forbid datagram packing */
Rich Evans85b05ec2015-02-12 11:37:29 +0000399 int extended_ms; /* negotiate extended master secret? */
400 int etm; /* negotiate encrypt then mac? */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100401 int cid_enabled; /* whether to use the CID extension or not */
402 const char *cid_val; /* the CID to use for incoming messages */
Rich Evans85b05ec2015-02-12 11:37:29 +0000403} opt;
404
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100405int query_config( const char *config );
406
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200407static void my_debug( void *ctx, int level,
408 const char *file, int line,
409 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000410{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200411 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000412
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200413 /* Extract basename from file */
414 for( p = basename = file; *p != '\0'; p++ )
415 if( *p == '/' || *p == '\\' )
416 basename = p + 1;
417
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100418 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s",
419 basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000420 fflush( (FILE *) ctx );
421}
422
423/*
424 * Test recv/send functions that make sure each try returns
425 * WANT_READ/WANT_WRITE at least once before sucesseding
426 */
427static int my_recv( void *ctx, unsigned char *buf, size_t len )
428{
429 static int first_try = 1;
430 int ret;
431
432 if( first_try )
433 {
434 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100435 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000436 }
437
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200438 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100439 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000440 first_try = 1; /* Next call will be a new operation */
441 return( ret );
442}
443
444static int my_send( void *ctx, const unsigned char *buf, size_t len )
445{
446 static int first_try = 1;
447 int ret;
448
449 if( first_try )
450 {
451 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100452 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000453 }
454
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200455 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100456 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000457 first_try = 1; /* Next call will be a new operation */
458 return( ret );
459}
460
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200461#if defined(MBEDTLS_X509_CRT_PARSE_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000462/*
463 * Enabled if debug_level > 1 in code below
464 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100465static int my_verify( void *data, mbedtls_x509_crt *crt,
466 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000467{
468 char buf[1024];
469 ((void) data);
470
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200471 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
472 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
473 mbedtls_printf( "%s", buf );
Rich Evans85b05ec2015-02-12 11:37:29 +0000474
Rich Evans85b05ec2015-02-12 11:37:29 +0000475 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200476 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100477 else
478 {
479 mbedtls_x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
480 mbedtls_printf( "%s\n", buf );
481 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000482
483 return( 0 );
484}
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200485
486static int ssl_sig_hashes_for_test[] = {
487#if defined(MBEDTLS_SHA512_C)
488 MBEDTLS_MD_SHA512,
489 MBEDTLS_MD_SHA384,
490#endif
491#if defined(MBEDTLS_SHA256_C)
492 MBEDTLS_MD_SHA256,
493 MBEDTLS_MD_SHA224,
494#endif
495#if defined(MBEDTLS_SHA1_C)
496 /* Allow SHA-1 as we use it extensively in tests. */
497 MBEDTLS_MD_SHA1,
498#endif
499 MBEDTLS_MD_NONE
500};
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200501#endif /* MBEDTLS_X509_CRT_PARSE_C */
Rich Evans85b05ec2015-02-12 11:37:29 +0000502
Hanno Becker16970d22017-10-10 15:56:37 +0100503/*
504 * Wait for an event from the underlying transport or the timer
505 * (Used in event-driven IO mode).
506 */
507#if !defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000508int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000509 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +0100510#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000511int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000512 mbedtls_timing_delay_context *timer,
513 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +0100514#endif
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000515{
Hanno Becker16970d22017-10-10 15:56:37 +0100516
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000517 int ret;
Hanno Becker16970d22017-10-10 15:56:37 +0100518 int poll_type = 0;
519
520 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
521 poll_type = MBEDTLS_NET_POLL_WRITE;
522 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
523 poll_type = MBEDTLS_NET_POLL_READ;
524#if !defined(MBEDTLS_TIMING_C)
525 else
Hanno Beckeref527962018-03-15 15:49:24 +0000526 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +0100527#endif
528
529 while( 1 )
530 {
Hanno Becker197a91c2017-10-31 10:58:53 +0000531 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +0100532#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +0000533 if( timer != NULL &&
534 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +0100535 {
Hanno Becker16970d22017-10-10 15:56:37 +0100536 break;
537 }
Hanno Becker197a91c2017-10-31 10:58:53 +0000538#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +0100539
Hanno Becker197a91c2017-10-31 10:58:53 +0000540 /* Check if underlying transport became available */
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000541 if( poll_type != 0 )
Hanno Becker16970d22017-10-10 15:56:37 +0100542 {
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000543 ret = mbedtls_net_poll( fd, poll_type, 0 );
544 if( ret < 0 )
545 return( ret );
546 if( ret == poll_type )
547 break;
Hanno Becker16970d22017-10-10 15:56:37 +0100548 }
549 }
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000550
551 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +0100552}
553
Hanno Beckerec370302019-04-09 17:12:56 +0100554/* Unhexify `hex` into `dst`. `dst` must have
555 * size at least `strlen( hex ) / 2`. */
Hanno Becker7a7aa192019-04-09 17:24:19 +0100556int unhexify( char const *hex, unsigned char *dst )
Hanno Beckerec370302019-04-09 17:12:56 +0100557{
558 unsigned char c;
559 size_t j;
560 size_t len = strlen( hex );
561
562 if( len % 2 != 0 )
563 return( -1 );
564
565 for( j = 0; j < len; j += 2 )
566 {
567 c = hex[j];
568 if( c >= '0' && c <= '9' )
569 c -= '0';
570 else if( c >= 'a' && c <= 'f' )
571 c -= 'a' - 10;
572 else if( c >= 'A' && c <= 'F' )
573 c -= 'A' - 10;
574 else
575 return( -1 );
576 dst[ j / 2 ] = c << 4;
577
578 c = hex[j + 1];
579 if( c >= '0' && c <= '9' )
580 c -= '0';
581 else if( c >= 'a' && c <= 'f' )
582 c -= 'a' - 10;
583 else if( c >= 'A' && c <= 'F' )
584 c -= 'A' - 10;
585 else
586 return( -1 );
587 dst[ j / 2 ] |= c;
588 }
589
590 return( 0 );
591}
592
Paul Bakker9caf2d22010-02-18 19:37:19 +0000593int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000594{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200595 int ret = 0, len, tail_len, i, written, frags, retry_left;
596 mbedtls_net_context server_fd;
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100597
598 unsigned char buf[MAX_REQUEST_SIZE + 1];
599
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200600#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
601 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200602 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200603#endif
Hanno Becker7a7aa192019-04-09 17:24:19 +0100604
605#if defined(MBEDTLS_SSL_CID)
606 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
607 size_t cid_len = 0;
608#endif
609
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200610#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100611 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200612#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100613#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +0100614 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100615 const mbedtls_ecp_curve_info *curve_cur;
616#endif
617
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200618 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000619
Gilles Peskineef86ab22017-05-05 18:59:02 +0200620#if defined(MBEDTLS_X509_CRT_PARSE_C)
621 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
622#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200623 mbedtls_entropy_context entropy;
624 mbedtls_ctr_drbg_context ctr_drbg;
625 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200626 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200627 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200628#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200629 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200630#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200631#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200632 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200633 mbedtls_x509_crt cacert;
634 mbedtls_x509_crt clicert;
635 mbedtls_pk_context pkey;
Paul Bakkered27a042013-04-18 22:46:23 +0200636#endif
Paul Bakker9caf2d22010-02-18 19:37:19 +0000637 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000638 const int *list;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000639
Paul Bakker1a207ec2011-02-06 13:22:40 +0000640 /*
641 * Make sure memory references are valid.
642 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200643 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200644 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200645 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200646 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200647 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200648#if defined(MBEDTLS_X509_CRT_PARSE_C)
649 mbedtls_x509_crt_init( &cacert );
650 mbedtls_x509_crt_init( &clicert );
651 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200652#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200653#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200654 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200655#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000656
Paul Bakker9caf2d22010-02-18 19:37:19 +0000657 if( argc == 0 )
658 {
659 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000660 if( ret == 0 )
661 ret = 1;
662
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200663 mbedtls_printf( USAGE );
Paul Bakker51936882011-02-20 16:05:58 +0000664
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200665 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000666 while( *list )
667 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200668 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200669 list++;
670 if( !*list )
671 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200672 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000673 list++;
674 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200675 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000676 goto exit;
677 }
678
679 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100680 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000681 opt.server_port = DFL_SERVER_PORT;
682 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker7a7aa192019-04-09 17:24:19 +0100683 opt.cid_enabled = DFL_CID_ENABLED;
684 opt.cid_val = DFL_CID_VALUE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100685 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100686 opt.event = DFL_EVENT;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200687 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200688 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000689 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200690 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000691 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000692 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000693 opt.crt_file = DFL_CRT_FILE;
694 opt.key_file = DFL_KEY_FILE;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200695 opt.psk = DFL_PSK;
696 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200697 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200698 opt.ec_max_ops = DFL_EC_MAX_OPS;
Paul Bakker51936882011-02-20 16:05:58 +0000699 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Paul Bakker48916f92012-09-16 19:57:18 +0000700 opt.renegotiation = DFL_RENEGOTIATION;
701 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100702 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200703 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000704 opt.min_version = DFL_MIN_VERSION;
705 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100706 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200707 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100708 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200709 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200710 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100711 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200712 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200713 opt.reconnect = DFL_RECONNECT;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100714 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200715 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200716 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200717 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100718 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200719 opt.transport = DFL_TRANSPORT;
720 opt.hs_to_min = DFL_HS_TO_MIN;
721 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200722 opt.dtls_mtu = DFL_DTLS_MTU;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200723 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200724 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100725 opt.etm = DFL_ETM;
Hanno Becker4d615912018-08-14 13:33:30 +0100726 opt.dgram_packing = DFL_DGRAM_PACKING;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000727
728 for( i = 1; i < argc; i++ )
729 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000730 p = argv[i];
731 if( ( q = strchr( p, '=' ) ) == NULL )
732 goto usage;
733 *q++ = '\0';
734
735 if( strcmp( p, "server_name" ) == 0 )
736 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100737 else if( strcmp( p, "server_addr" ) == 0 )
738 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000739 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200740 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100741 else if( strcmp( p, "dtls" ) == 0 )
742 {
743 int t = atoi( q );
744 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200745 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100746 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200747 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100748 else
749 goto usage;
750 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000751 else if( strcmp( p, "debug_level" ) == 0 )
752 {
753 opt.debug_level = atoi( q );
754 if( opt.debug_level < 0 || opt.debug_level > 65535 )
755 goto usage;
756 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100757 else if( strcmp( p, "nbio" ) == 0 )
758 {
759 opt.nbio = atoi( q );
760 if( opt.nbio < 0 || opt.nbio > 2 )
761 goto usage;
762 }
Hanno Becker16970d22017-10-10 15:56:37 +0100763 else if( strcmp( p, "event" ) == 0 )
764 {
765 opt.event = atoi( q );
766 if( opt.event < 0 || opt.event > 2 )
767 goto usage;
768 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200769 else if( strcmp( p, "read_timeout" ) == 0 )
770 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200771 else if( strcmp( p, "max_resend" ) == 0 )
772 {
773 opt.max_resend = atoi( q );
774 if( opt.max_resend < 0 )
775 goto usage;
776 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000777 else if( strcmp( p, "request_page" ) == 0 )
778 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +0200779 else if( strcmp( p, "request_size" ) == 0 )
780 {
781 opt.request_size = atoi( q );
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100782 if( opt.request_size < 0 ||
783 opt.request_size > MAX_REQUEST_SIZE )
Paul Bakker93c32b22014-04-25 13:40:05 +0200784 goto usage;
785 }
Paul Bakker5690efc2011-05-26 13:16:06 +0000786 else if( strcmp( p, "ca_file" ) == 0 )
787 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +0000788 else if( strcmp( p, "ca_path" ) == 0 )
789 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +0000790 else if( strcmp( p, "crt_file" ) == 0 )
791 opt.crt_file = q;
792 else if( strcmp( p, "key_file" ) == 0 )
793 opt.key_file = q;
Hanno Becker7a7aa192019-04-09 17:24:19 +0100794#if defined(MBEDTLS_SSL_CID)
795 else if( strcmp( p, "cid" ) == 0 )
796 {
797 opt.cid_enabled = atoi( q );
798 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
799 goto usage;
800 }
801 else if( strcmp( p, "cid_val" ) == 0 )
802 {
803 opt.cid_val = q;
804 }
805#endif /* MBEDTLS_SSL_CID */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200806 else if( strcmp( p, "psk" ) == 0 )
807 opt.psk = q;
808 else if( strcmp( p, "psk_identity" ) == 0 )
809 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200810 else if( strcmp( p, "ecjpake_pw" ) == 0 )
811 opt.ecjpake_pw = q;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200812 else if( strcmp( p, "ec_max_ops" ) == 0 )
813 opt.ec_max_ops = atoi( q );
Paul Bakker51936882011-02-20 16:05:58 +0000814 else if( strcmp( p, "force_ciphersuite" ) == 0 )
815 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200816 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +0000817
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +0200818 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +0000819 {
820 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +0000821 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +0000822 }
Paul Bakker51936882011-02-20 16:05:58 +0000823 opt.force_ciphersuite[1] = 0;
824 }
Paul Bakker48916f92012-09-16 19:57:18 +0000825 else if( strcmp( p, "renegotiation" ) == 0 )
826 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100827 opt.renegotiation = (atoi( q )) ?
828 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
829 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +0000830 }
831 else if( strcmp( p, "allow_legacy" ) == 0 )
832 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100833 switch( atoi( q ) )
834 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100835 case -1:
836 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
837 break;
838 case 0:
839 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
840 break;
841 case 1:
842 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
843 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100844 default: goto usage;
845 }
Paul Bakker48916f92012-09-16 19:57:18 +0000846 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100847 else if( strcmp( p, "renegotiate" ) == 0 )
848 {
849 opt.renegotiate = atoi( q );
850 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
851 goto usage;
852 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200853 else if( strcmp( p, "exchanges" ) == 0 )
854 {
855 opt.exchanges = atoi( q );
856 if( opt.exchanges < 1 )
857 goto usage;
858 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200859 else if( strcmp( p, "reconnect" ) == 0 )
860 {
861 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +0200862 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200863 goto usage;
864 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100865 else if( strcmp( p, "reco_delay" ) == 0 )
866 {
867 opt.reco_delay = atoi( q );
868 if( opt.reco_delay < 0 )
869 goto usage;
870 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200871 else if( strcmp( p, "reconnect_hard" ) == 0 )
872 {
873 opt.reconnect_hard = atoi( q );
874 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
875 goto usage;
876 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200877 else if( strcmp( p, "tickets" ) == 0 )
878 {
879 opt.tickets = atoi( q );
880 if( opt.tickets < 0 || opt.tickets > 2 )
881 goto usage;
882 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200883 else if( strcmp( p, "alpn" ) == 0 )
884 {
885 opt.alpn_string = q;
886 }
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200887 else if( strcmp( p, "fallback" ) == 0 )
888 {
889 switch( atoi( q ) )
890 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200891 case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break;
892 case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200893 default: goto usage;
894 }
895 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200896 else if( strcmp( p, "extended_ms" ) == 0 )
897 {
898 switch( atoi( q ) )
899 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100900 case 0:
901 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
902 break;
903 case 1:
904 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
905 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200906 default: goto usage;
907 }
908 }
Hanno Beckere6706e62017-05-15 16:05:15 +0100909 else if( strcmp( p, "curves" ) == 0 )
910 opt.curves = q;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100911 else if( strcmp( p, "etm" ) == 0 )
912 {
913 switch( atoi( q ) )
914 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200915 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
916 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100917 default: goto usage;
918 }
919 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000920 else if( strcmp( p, "min_version" ) == 0 )
921 {
922 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200923 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000924 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200925 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100926 else if( strcmp( q, "tls1_1" ) == 0 ||
927 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200928 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100929 else if( strcmp( q, "tls1_2" ) == 0 ||
930 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200931 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000932 else
933 goto usage;
934 }
935 else if( strcmp( p, "max_version" ) == 0 )
936 {
937 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200938 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000939 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200940 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100941 else if( strcmp( q, "tls1_1" ) == 0 ||
942 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200943 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100944 else if( strcmp( q, "tls1_2" ) == 0 ||
945 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200946 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000947 else
948 goto usage;
949 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100950 else if( strcmp( p, "arc4" ) == 0 )
951 {
952 switch( atoi( q ) )
953 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200954 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
955 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100956 default: goto usage;
957 }
958 }
Gilles Peskinebc70a182017-05-09 15:59:24 +0200959 else if( strcmp( p, "allow_sha1" ) == 0 )
960 {
961 switch( atoi( q ) )
962 {
963 case 0: opt.allow_sha1 = 0; break;
964 case 1: opt.allow_sha1 = 1; break;
965 default: goto usage;
966 }
967 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000968 else if( strcmp( p, "force_version" ) == 0 )
969 {
970 if( strcmp( q, "ssl3" ) == 0 )
971 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200972 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
973 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000974 }
975 else if( strcmp( q, "tls1" ) == 0 )
976 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200977 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
978 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000979 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100980 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +0000981 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200982 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
983 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000984 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100985 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +0000986 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200987 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
988 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000989 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100990 else if( strcmp( q, "dtls1" ) == 0 )
991 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200992 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
993 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
994 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100995 }
996 else if( strcmp( q, "dtls1_2" ) == 0 )
997 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200998 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
999 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1000 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001001 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001002 else
1003 goto usage;
1004 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001005 else if( strcmp( p, "auth_mode" ) == 0 )
1006 {
1007 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001008 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001009 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001010 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001011 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001012 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001013 else
1014 goto usage;
1015 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001016 else if( strcmp( p, "max_frag_len" ) == 0 )
1017 {
1018 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001019 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001020 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001021 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001022 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001023 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001024 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001025 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001026 else
1027 goto usage;
1028 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001029 else if( strcmp( p, "trunc_hmac" ) == 0 )
1030 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001031 switch( atoi( q ) )
1032 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001033 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1034 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001035 default: goto usage;
1036 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001037 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001038 else if( strcmp( p, "hs_timeout" ) == 0 )
1039 {
1040 if( ( p = strchr( q, '-' ) ) == NULL )
1041 goto usage;
1042 *p++ = '\0';
1043 opt.hs_to_min = atoi( q );
1044 opt.hs_to_max = atoi( p );
1045 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1046 goto usage;
1047 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001048 else if( strcmp( p, "mtu" ) == 0 )
1049 {
1050 opt.dtls_mtu = atoi( q );
1051 if( opt.dtls_mtu < 0 )
1052 goto usage;
1053 }
Hanno Becker4d615912018-08-14 13:33:30 +01001054 else if( strcmp( p, "dgram_packing" ) == 0 )
1055 {
1056 opt.dgram_packing = atoi( q );
1057 if( opt.dgram_packing != 0 &&
1058 opt.dgram_packing != 1 )
1059 {
1060 goto usage;
1061 }
1062 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001063 else if( strcmp( p, "recsplit" ) == 0 )
1064 {
1065 opt.recsplit = atoi( q );
1066 if( opt.recsplit < 0 || opt.recsplit > 1 )
1067 goto usage;
1068 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001069 else if( strcmp( p, "dhmlen" ) == 0 )
1070 {
1071 opt.dhmlen = atoi( q );
1072 if( opt.dhmlen < 0 )
1073 goto usage;
1074 }
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +01001075 else if( strcmp( p, "query_config" ) == 0 )
1076 {
1077 return query_config( q );
1078 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001079 else
1080 goto usage;
1081 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001082
Hanno Becker16970d22017-10-10 15:56:37 +01001083 /* Event-driven IO is incompatible with the above custom
1084 * receive and send functions, as the polling builds on
1085 * refers to the underlying net_context. */
1086 if( opt.event == 1 && opt.nbio != 1 )
1087 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001088 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001089 opt.nbio = 1;
1090 }
1091
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001092#if defined(MBEDTLS_DEBUG_C)
1093 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001094#endif
1095
Paul Bakkerc1516be2013-06-29 16:01:32 +02001096 if( opt.force_ciphersuite[0] > 0 )
1097 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001098 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001099 ciphersuite_info =
1100 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001101
Paul Bakker66c48102013-07-26 14:05:32 +02001102 if( opt.max_version != -1 &&
1103 ciphersuite_info->min_minor_ver > opt.max_version )
1104 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001105 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker66c48102013-07-26 14:05:32 +02001106 ret = 2;
1107 goto usage;
1108 }
1109 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02001110 ciphersuite_info->max_minor_ver < opt.min_version )
1111 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001112 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001113 ret = 2;
1114 goto usage;
1115 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001116
1117 /* If the server selects a version that's not supported by
1118 * this suite, then there will be no common ciphersuite... */
1119 if( opt.max_version == -1 ||
1120 opt.max_version > ciphersuite_info->max_minor_ver )
1121 {
Paul Bakker66c48102013-07-26 14:05:32 +02001122 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001123 }
Paul Bakker66c48102013-07-26 14:05:32 +02001124 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001125 {
Paul Bakker66c48102013-07-26 14:05:32 +02001126 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001127 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001128 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1129 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1130 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001131 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001132
1133 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001134 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001135 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001136 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001137 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001138 mbedtls_printf( "forced RC4 ciphersuite with RC4 disabled\n" );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001139 ret = 2;
1140 goto usage;
1141 }
1142
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001143 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001144 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001145 }
1146
Hanno Becker7a7aa192019-04-09 17:24:19 +01001147#if defined(MBEDTLS_SSL_CID)
1148 if( strlen( opt.cid_val ) )
1149 {
1150 cid_len = strlen( opt.cid_val ) / 2;
1151 if( cid_len > sizeof( cid ) )
1152 {
1153 mbedtls_printf( "CID too long\n" );
1154 goto exit;
1155 }
1156
1157 if( unhexify( opt.cid_val, cid ) != 0 )
1158 {
1159 mbedtls_printf( "CID not valid hex\n" );
1160 goto exit;
1161 }
1162 }
1163#endif /* MBEDTLS_SSL_CID */
1164
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001165#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001166 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001167 * Unhexify the pre-shared key if any is given
1168 */
1169 if( strlen( opt.psk ) )
1170 {
Hanno Beckerec370302019-04-09 17:12:56 +01001171 psk_len = strlen( opt.psk ) / 2;
1172 if( psk_len > sizeof( psk ) )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001173 {
Hanno Beckerec370302019-04-09 17:12:56 +01001174 mbedtls_printf( "pre-shared key too long\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001175 goto exit;
1176 }
1177
Hanno Beckerec370302019-04-09 17:12:56 +01001178 if( unhexify( opt.psk, psk ) != 0 )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001179 {
Hanno Beckerec370302019-04-09 17:12:56 +01001180 mbedtls_printf( "pre-shared key not valid hex\n" );
1181 goto exit;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001182 }
1183 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001184#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001185
Hanno Beckere6706e62017-05-15 16:05:15 +01001186#if defined(MBEDTLS_ECP_C)
1187 if( opt.curves != NULL )
1188 {
1189 p = (char *) opt.curves;
1190 i = 0;
1191
1192 if( strcmp( p, "none" ) == 0 )
1193 {
1194 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1195 }
1196 else if( strcmp( p, "default" ) != 0 )
1197 {
1198 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001199 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001200 {
1201 q = p;
1202
1203 /* Terminate the current string */
1204 while( *p != ',' && *p != '\0' )
1205 p++;
1206 if( *p == ',' )
1207 *p++ = '\0';
1208
1209 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1210 {
1211 curve_list[i++] = curve_cur->grp_id;
1212 }
1213 else
1214 {
1215 mbedtls_printf( "unknown curve %s\n", q );
1216 mbedtls_printf( "supported curves: " );
1217 for( curve_cur = mbedtls_ecp_curve_list();
1218 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1219 curve_cur++ )
1220 {
1221 mbedtls_printf( "%s ", curve_cur->name );
1222 }
1223 mbedtls_printf( "\n" );
1224 goto exit;
1225 }
1226 }
1227
1228 mbedtls_printf("Number of curves: %d\n", i );
1229
Hanno Becker8651a432017-06-09 16:13:22 +01001230 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001231 {
Hanno Becker8651a432017-06-09 16:13:22 +01001232 mbedtls_printf( "curves list too long, maximum %d",
1233 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001234 goto exit;
1235 }
1236
1237 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1238 }
1239 }
1240#endif /* MBEDTLS_ECP_C */
1241
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001242#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001243 if( opt.alpn_string != NULL )
1244 {
1245 p = (char *) opt.alpn_string;
1246 i = 0;
1247
1248 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001249 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001250 {
1251 alpn_list[i++] = p;
1252
1253 /* Terminate the current string and move on to next one */
1254 while( *p != ',' && *p != '\0' )
1255 p++;
1256 if( *p == ',' )
1257 *p++ = '\0';
1258 }
1259 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001260#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001261
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001262 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001263 * 0. Initialize the RNG and the session data
1264 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001265 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001266 fflush( stdout );
1267
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001268 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001269 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
1270 &entropy, (const unsigned char *) pers,
1271 strlen( pers ) ) ) != 0 )
Paul Bakker508ad5a2011-12-04 17:09:26 +00001272 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001273 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
1274 -ret );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001275 goto exit;
1276 }
1277
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001278 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001279
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001280#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001281 /*
1282 * 1.1. Load the trusted CA
1283 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001284 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001285 fflush( stdout );
1286
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001287#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001288 if( strlen( opt.ca_path ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001289 if( strcmp( opt.ca_path, "none" ) == 0 )
1290 ret = 0;
1291 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001292 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001293 else if( strlen( opt.ca_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001294 if( strcmp( opt.ca_file, "none" ) == 0 )
1295 ret = 0;
1296 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001297 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001298 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001299#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001300#if defined(MBEDTLS_CERTS_C)
1301 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001302 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001303 ret = mbedtls_x509_crt_parse( &cacert,
1304 (const unsigned char *) mbedtls_test_cas[i],
1305 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001306 if( ret != 0 )
1307 break;
1308 }
Paul Bakker5690efc2011-05-26 13:16:06 +00001309#else
1310 {
1311 ret = 1;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001312 mbedtls_printf( "MBEDTLS_CERTS_C not defined." );
Paul Bakker5690efc2011-05-26 13:16:06 +00001313 }
1314#endif
Paul Bakker42488232012-05-16 08:21:05 +00001315 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001316 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001317 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1318 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001319 goto exit;
1320 }
1321
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001322 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001323
1324 /*
1325 * 1.2. Load own certificate and private key
1326 *
1327 * (can be skipped if client authentication is not required)
1328 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001329 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001330 fflush( stdout );
1331
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001332#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001333 if( strlen( opt.crt_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001334 if( strcmp( opt.crt_file, "none" ) == 0 )
1335 ret = 0;
1336 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001337 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001338 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001339#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001340#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001341 ret = mbedtls_x509_crt_parse( &clicert,
1342 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001343 mbedtls_test_cli_crt_len );
Paul Bakker5690efc2011-05-26 13:16:06 +00001344#else
1345 {
1346 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001347 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakker5690efc2011-05-26 13:16:06 +00001348 }
1349#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001350 if( ret != 0 )
1351 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001352 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1353 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001354 goto exit;
1355 }
1356
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001357#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001358 if( strlen( opt.key_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001359 if( strcmp( opt.key_file, "none" ) == 0 )
1360 ret = 0;
1361 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001362 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" );
Paul Bakker67968392010-07-18 08:28:20 +00001363 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001364#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001365#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001366 ret = mbedtls_pk_parse_key( &pkey,
1367 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001368 mbedtls_test_cli_key_len, NULL, 0 );
Paul Bakker5690efc2011-05-26 13:16:06 +00001369#else
1370 {
1371 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001372 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakker5690efc2011-05-26 13:16:06 +00001373 }
1374#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001375 if( ret != 0 )
1376 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001377 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
1378 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001379 goto exit;
1380 }
1381
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001382 mbedtls_printf( " ok\n" );
1383#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001384
1385 /*
1386 * 2. Start the connection
1387 */
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +01001388 if( opt.server_addr == NULL)
1389 opt.server_addr = opt.server_name;
1390
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001391 mbedtls_printf( " . Connecting to %s/%s/%s...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001392 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01001393 opt.server_addr, opt.server_port );
Paul Bakker5121ce52009-01-03 21:22:43 +00001394 fflush( stdout );
1395
Hanno Becker16970d22017-10-10 15:56:37 +01001396 if( ( ret = mbedtls_net_connect( &server_fd,
1397 opt.server_addr, opt.server_port,
1398 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
1399 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001400 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001401 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
1402 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001403 goto exit;
1404 }
1405
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001406 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001407 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001408 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001409 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001410 if( ret != 0 )
1411 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001412 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
1413 -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001414 goto exit;
1415 }
1416
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001417 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001418
1419 /*
1420 * 3. Setup stuff
1421 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001422 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001423 fflush( stdout );
1424
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001425 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1426 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001427 opt.transport,
1428 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001429 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001430 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
1431 -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001432 goto exit;
1433 }
1434
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001435#if defined(MBEDTLS_X509_CRT_PARSE_C)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001436 /* The default algorithms profile disables SHA-1, but our tests still
1437 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001438 if( opt.allow_sha1 > 0 )
1439 {
1440 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1441 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
1442 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
1443 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02001444
Paul Bakker915275b2012-09-28 07:10:55 +00001445 if( opt.debug_level > 0 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001446 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
Gilles Peskineef86ab22017-05-05 18:59:02 +02001447#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker915275b2012-09-28 07:10:55 +00001448
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001449 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001450 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001451
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001452#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001453 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001454 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1455 opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001456
Hanno Becker4d615912018-08-14 13:33:30 +01001457 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01001458 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001459#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001460
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001461#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001462 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001463 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001464 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1465 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001466 goto exit;
1467 }
Paul Bakker05decb22013-08-15 13:33:48 +02001468#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001469
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001470#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001471 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001472 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Paul Bakker1f2bc622013-08-15 13:45:55 +02001473#endif
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001474
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001475#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001476 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001477 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001478#endif
1479
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001480#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001481 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001482 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001483#endif
1484
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001485#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001486 if( opt.recsplit != DFL_RECSPLIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001487 mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit
Hanno Becker16970d22017-10-10 15:56:37 +01001488 ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED
1489 : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED );
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001490#endif
1491
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001492#if defined(MBEDTLS_DHM_C)
1493 if( opt.dhmlen != DFL_DHMLEN )
1494 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1495#endif
1496
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001497#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001498 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001499 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001500 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001501 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1502 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001503 goto exit;
1504 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001505#endif
1506
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001507 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
1508 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001509
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001510 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001511
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001512#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001513 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001514#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001515
Paul Bakker645ce3a2012-10-31 12:32:41 +00001516 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001517 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001518
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001519#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001520 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001521 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001522#endif
Paul Bakker51936882011-02-20 16:05:58 +00001523
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001524 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001525 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001526#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001527 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001528#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001529
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001530#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001531 if( strcmp( opt.ca_path, "none" ) != 0 &&
1532 strcmp( opt.ca_file, "none" ) != 0 )
1533 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001534 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001535 }
1536 if( strcmp( opt.crt_file, "none" ) != 0 &&
1537 strcmp( opt.key_file, "none" ) != 0 )
1538 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001539 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001540 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001541 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
1542 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001543 goto exit;
1544 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001545 }
Paul Bakkered27a042013-04-18 22:46:23 +02001546#endif
1547
Hanno Beckere6706e62017-05-15 16:05:15 +01001548#if defined(MBEDTLS_ECP_C)
1549 if( opt.curves != NULL &&
1550 strcmp( opt.curves, "default" ) != 0 )
1551 {
1552 mbedtls_ssl_conf_curves( &conf, curve_list );
1553 }
1554#endif
1555
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001556#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001557 if( ( ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001558 (const unsigned char *) opt.psk_identity,
1559 strlen( opt.psk_identity ) ) ) != 0 )
1560 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001561 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n",
1562 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001563 goto exit;
1564 }
Paul Bakkered27a042013-04-18 22:46:23 +02001565#endif
1566
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001567 if( opt.min_version != DFL_MIN_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001568 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1569 opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01001570
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001571 if( opt.max_version != DFL_MAX_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001572 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1573 opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00001574
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001575#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001576 if( opt.fallback != DFL_FALLBACK )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001577 mbedtls_ssl_conf_fallback( &conf, opt.fallback );
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001578#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001579
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001580 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
1581 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001582 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
1583 -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001584 goto exit;
1585 }
1586
1587#if defined(MBEDTLS_X509_CRT_PARSE_C)
1588 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
1589 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001590 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
1591 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001592 goto exit;
1593 }
1594#endif
1595
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001596#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
1597 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
1598 {
1599 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
1600 (const unsigned char *) opt.ecjpake_pw,
1601 strlen( opt.ecjpake_pw ) ) ) != 0 )
1602 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001603 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
1604 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001605 goto exit;
1606 }
1607 }
1608#endif
1609
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001610 if( opt.nbio == 2 )
1611 mbedtls_ssl_set_bio( &ssl, &server_fd, my_send, my_recv, NULL );
1612 else
Hanno Becker16970d22017-10-10 15:56:37 +01001613 mbedtls_ssl_set_bio( &ssl, &server_fd,
1614 mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02001615 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001616
Hanno Becker7a7aa192019-04-09 17:24:19 +01001617#if defined(MBEDTLS_SSL_CID)
1618 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
1619 {
1620 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
1621 cid, cid_len ) ) != 0 )
1622 {
1623 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
1624 ret );
1625 goto exit;
1626 }
1627 }
1628#endif /* MBEDTLS_SSL_CID */
1629
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02001630#if defined(MBEDTLS_SSL_PROTO_DTLS)
1631 if( opt.dtls_mtu != DFL_DTLS_MTU )
1632 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
1633#endif
1634
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001635#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001636 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
1637 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001638#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001639
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001640#if defined(MBEDTLS_ECP_RESTARTABLE)
1641 if( opt.ec_max_ops != DFL_EC_MAX_OPS )
1642 mbedtls_ecp_set_max_ops( opt.ec_max_ops );
1643#endif
1644
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001645 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001646
Paul Bakker5121ce52009-01-03 21:22:43 +00001647 /*
1648 * 4. Handshake
1649 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001650 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001651 fflush( stdout );
1652
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001653 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001654 {
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001655 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1656 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001657 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Paul Bakker40e46942009-01-03 21:51:57 +00001658 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001659 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
1660 -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001661 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
1662 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01001663 " Unable to verify the server's certificate. "
1664 "Either it is invalid,\n"
1665 " or you didn't set ca_file or ca_path "
1666 "to an appropriate value.\n"
1667 " Alternatively, you may want to use "
1668 "auth_mode=optional for testing purposes.\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001669 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001670 goto exit;
Paul Bakker40e46942009-01-03 21:51:57 +00001671 }
Hanno Becker16970d22017-10-10 15:56:37 +01001672
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001673#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02001674 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
1675 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001676#endif
1677
Hanno Becker16970d22017-10-10 15:56:37 +01001678 /* For event-driven IO, wait for socket to become available */
1679 if( opt.event == 1 /* level triggered IO */ )
1680 {
1681#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001682 ret = idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001683#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001684 ret = idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001685#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001686 if( ret != 0 )
1687 goto exit;
Hanno Becker16970d22017-10-10 15:56:37 +01001688 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001689 }
1690
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001691 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
Hanno Becker16970d22017-10-10 15:56:37 +01001692 mbedtls_ssl_get_version( &ssl ),
1693 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00001694
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001695 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
1696 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001697 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001698 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001699
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02001700#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
1701 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
1702 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
1703#endif
1704
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001705#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001706 if( opt.alpn_string != NULL )
1707 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001708 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
1709 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001710 alp ? alp : "(none)" );
1711 }
1712#endif
1713
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001714 if( opt.reconnect != 0 )
1715 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001716 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001717 fflush( stdout );
1718
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001719 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001720 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001721 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
1722 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001723 goto exit;
1724 }
1725
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001726 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001727 }
1728
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001729#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001730 /*
1731 * 5. Verify the server certificate
1732 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001733 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001734
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02001735 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001736 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001737 char vrfy_buf[512];
1738
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001739 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001740
Hanno Becker16970d22017-10-10 15:56:37 +01001741 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
1742 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00001743
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001744 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001745 }
1746 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001747 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001748
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001749 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001750 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001751 mbedtls_printf( " . Peer certificate information ...\n" );
1752 mbedtls_x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ",
1753 mbedtls_ssl_get_peer_cert( &ssl ) );
1754 mbedtls_printf( "%s\n", buf );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001755 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001756#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001757
Hanno Becker7a7aa192019-04-09 17:24:19 +01001758#if defined(MBEDTLS_SSL_CID)
1759 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
1760 {
1761 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
1762 size_t peer_cid_len;
1763 int cid_negotiated;
1764
1765 /* Check if the use of a CID has been negotiated */
1766 ret = mbedtls_ssl_get_peer_cid( &ssl, &cid_negotiated,
1767 peer_cid, &peer_cid_len );
1768 if( ret != 0 )
1769 {
1770 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
1771 -ret );
1772 goto exit;
1773 }
1774
1775 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
1776 {
1777 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
1778 {
1779 mbedtls_printf( "Use of Connection ID was rejected by the server.\n" );
1780 }
1781 }
1782 else
1783 {
Hanno Becker6dde3dd2019-04-23 11:50:59 +01001784 size_t idx=0;
Hanno Becker7a7aa192019-04-09 17:24:19 +01001785 mbedtls_printf( "Use of Connection ID has been negotiated.\n" );
Hanno Becker6dde3dd2019-04-23 11:50:59 +01001786 mbedtls_printf( "Peer CID (length %u Bytes): ",
1787 (unsigned) peer_cid_len );
1788 while( idx < peer_cid_len )
1789 {
1790 mbedtls_printf( "%#02x ", peer_cid[ idx ] );
1791 idx++;
1792 }
1793 mbedtls_printf( "\n" );
Hanno Becker7a7aa192019-04-09 17:24:19 +01001794 }
1795 }
1796#endif /* MBEDTLS_SSL_CID */
1797
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001798#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001799 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001800 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001801 /*
1802 * Perform renegotiation (this must be done when the server is waiting
1803 * for input from our side).
1804 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001805 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001806 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001807 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001808 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001809 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001810 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001811 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001812 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001813 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
1814 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001815 goto exit;
1816 }
Hanno Becker16970d22017-10-10 15:56:37 +01001817
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02001818#if defined(MBEDTLS_ECP_RESTARTABLE)
1819 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
1820 continue;
1821#endif
1822
Hanno Becker16970d22017-10-10 15:56:37 +01001823 /* For event-driven IO, wait for socket to become available */
1824 if( opt.event == 1 /* level triggered IO */ )
1825 {
1826#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001827 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001828#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001829 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001830#endif
1831 }
1832
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001833 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001834 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001835 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001836#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001837
Paul Bakker5121ce52009-01-03 21:22:43 +00001838 /*
1839 * 6. Write the GET request
1840 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02001841 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001842send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001843 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001844 fflush( stdout );
1845
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001846 len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST,
1847 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02001848 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001849
1850 /* Add padding to GET request to reach opt.request_size in length */
1851 if( opt.request_size != DFL_REQUEST_SIZE &&
1852 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02001853 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001854 memset( buf + len, 'A', opt.request_size - len - tail_len );
1855 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02001856 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001857
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001858 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001859 len += tail_len;
1860
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02001861 /* Truncate if request size is smaller than the "natural" size */
1862 if( opt.request_size != DFL_REQUEST_SIZE &&
1863 len > opt.request_size )
1864 {
1865 len = opt.request_size;
1866
1867 /* Still end with \r\n unless that's really not possible */
1868 if( len >= 2 ) buf[len - 2] = '\r';
1869 if( len >= 1 ) buf[len - 1] = '\n';
1870 }
1871
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001872 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00001873 {
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001874 written = 0;
1875 frags = 0;
1876
1877 do
Paul Bakker5121ce52009-01-03 21:22:43 +00001878 {
Hanno Becker16970d22017-10-10 15:56:37 +01001879 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001880 len - written ) ) < 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001881 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001882 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001883 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001884 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001885 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001886 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
1887 -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001888 goto exit;
1889 }
Hanno Becker16970d22017-10-10 15:56:37 +01001890
1891 /* For event-driven IO, wait for socket to become available */
1892 if( opt.event == 1 /* level triggered IO */ )
1893 {
1894#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001895 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001896#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001897 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001898#endif
1899 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001900 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001901
1902 frags++;
1903 written += ret;
Paul Bakker5121ce52009-01-03 21:22:43 +00001904 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001905 while( written < len );
Paul Bakker5121ce52009-01-03 21:22:43 +00001906 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001907 else /* Not stream, so datagram */
1908 {
Hanno Becker16970d22017-10-10 15:56:37 +01001909 while( 1 )
1910 {
1911 ret = mbedtls_ssl_write( &ssl, buf, len );
1912
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001913#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001914 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001915 continue;
1916#endif
1917
Hanno Becker16970d22017-10-10 15:56:37 +01001918 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1919 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
1920 break;
1921
1922 /* For event-driven IO, wait for socket to become available */
1923 if( opt.event == 1 /* level triggered IO */ )
1924 {
1925#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001926 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001927#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001928 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001929#endif
1930 }
1931 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001932
1933 if( ret < 0 )
1934 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001935 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
1936 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001937 goto exit;
1938 }
1939
1940 frags = 1;
1941 written = ret;
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001942
1943 if( written < len )
1944 {
1945 mbedtls_printf( " warning\n ! request didn't fit into single datagram and "
1946 "was truncated to size %u", (unsigned) written );
1947 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001948 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001949
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001950 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01001951 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
1952 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001953
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001954 /* Send a non-empty request if request_size == 0 */
1955 if ( len == 0 )
1956 {
1957 opt.request_size = DFL_REQUEST_SIZE;
1958 goto send_request;
1959 }
1960
Paul Bakker5121ce52009-01-03 21:22:43 +00001961 /*
1962 * 7. Read the HTTP response
1963 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001964 mbedtls_printf( " < Read from server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001965 fflush( stdout );
1966
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001967 /*
1968 * TLS and DTLS need different reading styles (stream vs datagram)
1969 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001970 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001971 {
1972 do
1973 {
1974 len = sizeof( buf ) - 1;
1975 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001976 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001977
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001978#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001979 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001980 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001981#endif
1982
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001983 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
1984 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01001985 {
1986 /* For event-driven IO, wait for socket to become available */
1987 if( opt.event == 1 /* level triggered IO */ )
1988 {
1989#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001990 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001991#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001992 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001993#endif
1994 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001995 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01001996 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001997
1998 if( ret <= 0 )
1999 {
2000 switch( ret )
2001 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002002 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2003 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002004 ret = 0;
2005 goto close_notify;
2006
2007 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002008 case MBEDTLS_ERR_NET_CONN_RESET:
2009 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002010 ret = 0;
2011 goto reconnect;
2012
2013 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002014 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
2015 -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002016 goto exit;
2017 }
2018 }
2019
2020 len = ret;
2021 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002022 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002023
2024 /* End of message should be detected according to the syntax of the
2025 * application protocol (eg HTTP), just use a dummy test here. */
2026 if( ret > 0 && buf[len-1] == '\n' )
2027 {
2028 ret = 0;
2029 break;
2030 }
2031 }
2032 while( 1 );
2033 }
2034 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00002035 {
2036 len = sizeof( buf ) - 1;
2037 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00002038
Hanno Becker16970d22017-10-10 15:56:37 +01002039 while( 1 )
2040 {
2041 ret = mbedtls_ssl_read( &ssl, buf, len );
2042
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002043#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002044 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002045 continue;
2046#endif
2047
Hanno Becker16970d22017-10-10 15:56:37 +01002048 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2049 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2050 break;
2051
2052 /* For event-driven IO, wait for socket to become available */
2053 if( opt.event == 1 /* level triggered IO */ )
2054 {
2055#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002056 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002057#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002058 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002059#endif
2060 }
2061 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002062
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002063 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002064 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002065 switch( ret )
2066 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002067 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002068 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002069 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02002070 goto send_request;
2071 goto exit;
2072
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002073 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2074 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002075 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002076 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00002077
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002078 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002079 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002080 goto exit;
2081 }
Paul Bakker5690efc2011-05-26 13:16:06 +00002082 }
2083
Paul Bakker5121ce52009-01-03 21:22:43 +00002084 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02002085 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002086 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002087 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00002088 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002089
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002090 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002091 * 7b. Simulate hard reset and reconnect from same port?
2092 */
2093 if( opt.reconnect_hard != 0 )
2094 {
2095 opt.reconnect_hard = 0;
2096
2097 mbedtls_printf( " . Restarting connection from same port..." );
2098 fflush( stdout );
2099
2100 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
2101 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002102 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
2103 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002104 goto exit;
2105 }
2106
2107 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
2108 {
2109 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002110 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002111 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002112 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002113 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
2114 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002115 goto exit;
2116 }
Hanno Becker16970d22017-10-10 15:56:37 +01002117
2118 /* For event-driven IO, wait for socket to become available */
2119 if( opt.event == 1 /* level triggered IO */ )
2120 {
2121#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002122 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002123#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002124 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002125#endif
2126 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002127 }
2128
2129 mbedtls_printf( " ok\n" );
2130
2131 goto send_request;
2132 }
2133
2134 /*
2135 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002136 */
2137 if( --opt.exchanges > 0 )
2138 goto send_request;
2139
2140 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002141 * 8. Done, cleanly close the connection
2142 */
2143close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002144 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002145 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002146
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02002147 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002148 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002149 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02002150 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002151
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002152 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002153
2154 /*
2155 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002156 */
2157reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002158 if( opt.reconnect != 0 )
2159 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02002160 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002161
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002162 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01002163
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002164#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002165 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02002166 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002167#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02002168
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002169 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002170
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002171 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002172 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002173 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
2174 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002175 goto exit;
2176 }
2177
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002178 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002179 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002180 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_session returned %d\n\n",
2181 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002182 goto exit;
2183 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002184
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002185 if( ( ret = mbedtls_net_connect( &server_fd,
2186 opt.server_addr, opt.server_port,
2187 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2188 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002189 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002190 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
2191 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002192 goto exit;
2193 }
2194
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002195 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002196 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002197 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002198 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002199 if( ret != 0 )
2200 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002201 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002202 -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002203 goto exit;
2204 }
2205
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002206 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002207 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002208 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002209 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002210 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002211 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002212 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
2213 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002214 goto exit;
2215 }
2216 }
2217
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002218 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002219
2220 goto send_request;
2221 }
2222
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002223 /*
2224 * Cleanup and exit
2225 */
Paul Bakker5121ce52009-01-03 21:22:43 +00002226exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002227#ifdef MBEDTLS_ERROR_C
Paul Bakkera3d195c2011-11-27 21:07:34 +00002228 if( ret != 0 )
2229 {
2230 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002231 mbedtls_strerror( ret, error_buf, 100 );
2232 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00002233 }
2234#endif
2235
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002236 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002237
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002238#if defined(MBEDTLS_X509_CRT_PARSE_C)
2239 mbedtls_x509_crt_free( &clicert );
2240 mbedtls_x509_crt_free( &cacert );
2241 mbedtls_pk_free( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +02002242#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002243 mbedtls_ssl_session_free( &saved_session );
2244 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002245 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002246 mbedtls_ctr_drbg_free( &ctr_drbg );
2247 mbedtls_entropy_free( &entropy );
Paul Bakker5121ce52009-01-03 21:22:43 +00002248
Paul Bakkercce9d772011-11-18 14:26:47 +00002249#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002250 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002251 fflush( stdout ); getchar();
2252#endif
2253
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02002254 // Shell can not handle large exit numbers -> 1 for errors
2255 if( ret < 0 )
2256 ret = 1;
2257
Paul Bakker5121ce52009-01-03 21:22:43 +00002258 return( ret );
2259}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002260#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
2261 MBEDTLS_SSL_CLI_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002262 MBEDTLS_CTR_DRBG_C MBEDTLS_TIMING_C */