blob: 4f26b575da54736e7c0198f873fa83a200180045 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Bence Szépkútia2947ac2020-08-19 16:37:36 +02004 * Copyright The Mbed TLS Contributors
Bence Szépkútif744bd72020-06-05 13:02:18 +02005 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
6 *
7 * This file is provided under the Apache License 2.0, or the
8 * GNU General Public License v2.0 or later.
9 *
10 * **********
11 * Apache License 2.0:
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020012 *
13 * Licensed under the Apache License, Version 2.0 (the "License"); you may
14 * not use this file except in compliance with the License.
15 * You may obtain a copy of the License at
16 *
17 * http://www.apache.org/licenses/LICENSE-2.0
18 *
19 * Unless required by applicable law or agreed to in writing, software
20 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
21 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
22 * See the License for the specific language governing permissions and
23 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000024 *
Bence Szépkútif744bd72020-06-05 13:02:18 +020025 * **********
26 *
27 * **********
28 * GNU General Public License v2.0 or later:
29 *
30 * This program is free software; you can redistribute it and/or modify
31 * it under the terms of the GNU General Public License as published by
32 * the Free Software Foundation; either version 2 of the License, or
33 * (at your option) any later version.
34 *
35 * This program is distributed in the hope that it will be useful,
36 * but WITHOUT ANY WARRANTY; without even the implied warranty of
37 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
38 * GNU General Public License for more details.
39 *
40 * You should have received a copy of the GNU General Public License along
41 * with this program; if not, write to the Free Software Foundation, Inc.,
42 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
43 *
44 * **********
Paul Bakker5121ce52009-01-03 21:22:43 +000045 */
46
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020047#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000048#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020049#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020051#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000052
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020053#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000054#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000055#else
Rich Evans18b78c72015-02-11 14:06:19 +000056#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010057#include <stdlib.h>
58#define mbedtls_time time
59#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060#define mbedtls_printf printf
61#define mbedtls_fprintf fprintf
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020062#define mbedtls_snprintf snprintf
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010063#define mbedtls_exit exit
64#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
65#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Rich Evansf90016a2015-01-19 14:26:37 +000066#endif
67
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020068#if !defined(MBEDTLS_ENTROPY_C) || \
69 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_CLI_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020070 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020071int main( void )
72{
73 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
74 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_CLI_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020075 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Krzysztof Stachowiak3b0c4302019-04-24 14:24:46 +020076 mbedtls_exit( 0 );
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020077}
78#else
79
Andres AG788aa4a2016-09-14 14:32:09 +010080#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000081#include "mbedtls/ssl.h"
82#include "mbedtls/entropy.h"
83#include "mbedtls/ctr_drbg.h"
84#include "mbedtls/certs.h"
85#include "mbedtls/x509.h"
86#include "mbedtls/error.h"
87#include "mbedtls/debug.h"
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020088#include "mbedtls/timing.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000089
Rich Evans18b78c72015-02-11 14:06:19 +000090#include <stdio.h>
91#include <stdlib.h>
92#include <string.h>
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010093
Hanno Beckere4ad3e82017-09-18 15:05:46 +010094#define MAX_REQUEST_SIZE 20000
95#define MAX_REQUEST_SIZE_STR "20000"
96
Paul Bakker9caf2d22010-02-18 19:37:19 +000097#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010098#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020099#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000100#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +0200101#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +0000102#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100103#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +0100104#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200105#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200106#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +0000107#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +0000108#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +0000109#define DFL_CRT_FILE ""
110#define DFL_KEY_FILE ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200111#define DFL_PSK ""
112#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200113#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200114#define DFL_EC_MAX_OPS -1
Paul Bakker51936882011-02-20 16:05:58 +0000115#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200116#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100117#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100118#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200119#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200120#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +0000121#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000122#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200123#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100124#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200125#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100126#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100127#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200128#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200129#define DFL_RECONNECT 0
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100130#define DFL_RECO_DELAY 0
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200131#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200133#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100134#define DFL_CURVES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200135#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200136#define DFL_HS_TO_MIN 0
137#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200138#define DFL_DTLS_MTU -1
Hanno Becker4d615912018-08-14 13:33:30 +0100139#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200140#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200141#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100142#define DFL_ETM -1
Manuel Pégourié-Gonnard498e6322020-02-17 11:04:33 +0100143#define DFL_SKIP_CLOSE_NOTIFY 0
Paul Bakker0e6975b2009-02-10 22:19:10 +0000144
Paul Bakker93c32b22014-04-25 13:40:05 +0200145#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
146#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000147
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200148#if defined(MBEDTLS_X509_CRT_PARSE_C)
149#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000150#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100151 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
152 " default: \"\" (pre-loaded)\n" \
Hanno Becker1ce1a512019-05-01 11:16:28 +0100153 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100154 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
155 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker1ce1a512019-05-01 11:16:28 +0100156 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100157 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
158 " default: \"\" (pre-loaded)\n" \
Paul Bakker5690efc2011-05-26 13:16:06 +0000159 " key_file=%%s default: \"\" (pre-loaded)\n"
160#else
161#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200162 " No file operations available (MBEDTLS_FS_IO not defined)\n"
163#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200164#else
165#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200166#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200167
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkered27a042013-04-18 22:46:23 +0200169#define USAGE_PSK \
170 " psk=%%s default: \"\" (in hex, without 0x)\n" \
171 " psk_identity=%%s default: \"Client_identity\"\n"
172#else
173#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakker5690efc2011-05-26 13:16:06 +0000175
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200176#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200177#define USAGE_TICKETS \
178 " tickets=%%d default: 1 (enabled)\n"
179#else
180#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200182
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Paul Bakker1f2bc622013-08-15 13:45:55 +0200184#define USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100185 " trunc_hmac=%%d default: library default\n"
Paul Bakker1f2bc622013-08-15 13:45:55 +0200186#else
187#define USAGE_TRUNC_HMAC ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188#endif /* MBEDTLS_SSL_TRUNCATED_HMAC */
Paul Bakker1f2bc622013-08-15 13:45:55 +0200189
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200191#define USAGE_MAX_FRAG_LEN \
192 " max_frag_len=%%d default: 16384 (tls default)\n" \
193 " options: 512, 1024, 2048, 4096\n"
194#else
195#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200196#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200197
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200198#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100199#define USAGE_RECSPLIT \
Manuel Pégourié-Gonnardbf27eaa2015-06-11 17:02:10 +0200200 " recsplit=0/1 default: (library default: on)\n"
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100201#else
202#define USAGE_RECSPLIT
203#endif
204
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200205#if defined(MBEDTLS_DHM_C)
206#define USAGE_DHMLEN \
207 " dhmlen=%%d default: (library default: 1024 bits)\n"
208#else
209#define USAGE_DHMLEN
210#endif
211
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200212#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200213#define USAGE_ALPN \
214 " alpn=%%s default: \"\" (disabled)\n" \
215 " example: spdy/1,http/1.1\n"
216#else
217#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200218#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200219
Hanno Beckere6706e62017-05-15 16:05:15 +0100220#if defined(MBEDTLS_ECP_C)
221#define USAGE_CURVES \
222 " curves=a,b,c,d default: \"default\" (library default)\n" \
223 " example: \"secp521r1,brainpoolP512r1\"\n" \
224 " - use \"none\" for empty list\n" \
225 " - see mbedtls_ecp_curve_list()\n" \
226 " for acceptable curve names\n"
227#else
228#define USAGE_CURVES ""
229#endif
230
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200232#define USAGE_DTLS \
233 " dtls=%%d default: 0 (TLS)\n" \
234 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200235 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Becker4d615912018-08-14 13:33:30 +0100236 " mtu=%%d default: (library default: unlimited)\n" \
237 " dgram_packing=%%d default: 1 (allowed)\n" \
238 " allow or forbid packing of multiple\n" \
239 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200240#else
241#define USAGE_DTLS ""
242#endif
243
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200244#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200245#define USAGE_FALLBACK \
246 " fallback=0/1 default: (library default: off)\n"
247#else
248#define USAGE_FALLBACK ""
249#endif
250
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200252#define USAGE_EMS \
253 " extended_ms=0/1 default: (library default: on)\n"
254#else
255#define USAGE_EMS ""
256#endif
257
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200258#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100259#define USAGE_ETM \
260 " etm=0/1 default: (library default: on)\n"
261#else
262#define USAGE_ETM ""
263#endif
264
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200265#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100266#define USAGE_RENEGO \
267 " renegotiation=%%d default: 0 (disabled)\n" \
268 " renegotiate=%%d default: 0 (disabled)\n"
269#else
270#define USAGE_RENEGO ""
271#endif
272
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200273#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
274#define USAGE_ECJPAKE \
275 " ecjpake_pw=%%s default: none (disabled)\n"
276#else
277#define USAGE_ECJPAKE ""
278#endif
279
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200280#if defined(MBEDTLS_ECP_RESTARTABLE)
281#define USAGE_ECRESTART \
282 " ec_max_ops=%%s default: library default (restart disabled)\n"
283#else
284#define USAGE_ECRESTART ""
285#endif
286
Gilles Peskined135bbd2020-04-14 19:41:01 +0200287/* USAGE is arbitrarily split to stay under the portable string literal
288 * length limit: 4095 bytes in C99. */
289#define USAGE1 \
Paul Bakker67968392010-07-18 08:28:20 +0000290 "\n usage: ssl_client2 param=<>...\n" \
291 "\n acceptable parameters:\n" \
292 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100293 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000294 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000295 " request_page=%%s default: \".\"\n" \
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +0100296 " request_size=%%d default: about 34 (basic request)\n" \
297 " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \
298 " If 0, in the first exchange only an empty\n" \
299 " application data message is sent followed by\n" \
300 " a second non-empty message before attempting\n" \
301 " to read a response from the server\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100302 " debug_level=%%d default: 0 (disabled)\n" \
303 " nbio=%%d default: 0 (blocking I/O)\n" \
304 " options: 1 (non-blocking), 2 (added delays)\n" \
305 " event=%%d default: 0 (loop)\n" \
306 " options: 1 (level-triggered, implies nbio=1),\n" \
307 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200308 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard498e6322020-02-17 11:04:33 +0100309 " skip_close_notify=%%d default: 0 (send close_notify)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100310 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200311 USAGE_DTLS \
Gilles Peskined135bbd2020-04-14 19:41:01 +0200312 "\n"
313#define USAGE2 \
Hanno Becker16970d22017-10-10 15:56:37 +0100314 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100315 " options: none, optional, required\n" \
316 USAGE_IO \
317 "\n" \
318 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200319 USAGE_ECJPAKE \
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200320 USAGE_ECRESTART \
Gilles Peskined135bbd2020-04-14 19:41:01 +0200321 "\n"
322#define USAGE3 \
Hanno Becker16970d22017-10-10 15:56:37 +0100323 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100324 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200325 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200326 " reconnect=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200327 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200328 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200329 USAGE_TICKETS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100330 USAGE_MAX_FRAG_LEN \
331 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200332 USAGE_ALPN \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200333 USAGE_FALLBACK \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200334 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100335 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100336 USAGE_CURVES \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100337 USAGE_RECSPLIT \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200338 USAGE_DHMLEN \
Gilles Peskined135bbd2020-04-14 19:41:01 +0200339 "\n"
340#define USAGE4 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100341 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200342 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200343 " min_version=%%s default: (library default: tls1)\n" \
344 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000345 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100346 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000347 "\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000348 " force_ciphersuite=<name> default: all enabled\n"\
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100349 " query_config=<name> return 0 if the specified\n" \
350 " configuration macro is defined and 1\n" \
351 " otherwise. The expansion of the macro\n" \
352 " is printed if it is defined\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000353 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000354
Hanno Becker8651a432017-06-09 16:13:22 +0100355#define ALPN_LIST_SIZE 10
356#define CURVE_LIST_SIZE 20
357
Simon Butcher63cb97e2018-12-06 17:43:31 +0000358
Rich Evans85b05ec2015-02-12 11:37:29 +0000359/*
360 * global options
361 */
362struct options
363{
364 const char *server_name; /* hostname of the server (client only) */
365 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200366 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000367 int debug_level; /* level of debugging */
368 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100369 int event; /* loop or event-driven IO? level or edge triggered? */
370 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000371 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000372 const char *request_page; /* page on server to request */
373 int request_size; /* pad request with header to requested size */
374 const char *ca_file; /* the file with the CA certificate(s) */
375 const char *ca_path; /* the path with the CA certificate(s) reside */
376 const char *crt_file; /* the file with the client certificate */
377 const char *key_file; /* the file with the client key */
378 const char *psk; /* the pre-shared key */
379 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200380 const char *ecjpake_pw; /* the EC J-PAKE password */
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200381 int ec_max_ops; /* EC consecutive operations limit */
Rich Evans85b05ec2015-02-12 11:37:29 +0000382 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
383 int renegotiation; /* enable / disable renegotiation */
384 int allow_legacy; /* allow legacy renegotiation */
385 int renegotiate; /* attempt renegotiation? */
386 int renego_delay; /* delay before enforcing renegotiation */
387 int exchanges; /* number of data exchanges */
388 int min_version; /* minimum protocol version accepted */
389 int max_version; /* maximum protocol version accepted */
390 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200391 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000392 int auth_mode; /* verify mode for connection */
393 unsigned char mfl_code; /* code for maximum fragment length */
394 int trunc_hmac; /* negotiate truncated hmac or not */
395 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200396 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000397 int reconnect; /* attempt to resume session */
398 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200399 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000400 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100401 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000402 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000403 int transport; /* TLS or DTLS? */
404 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
405 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200406 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Rich Evans85b05ec2015-02-12 11:37:29 +0000407 int fallback; /* is this a fallback connection? */
Hanno Becker4d615912018-08-14 13:33:30 +0100408 int dgram_packing; /* allow/forbid datagram packing */
Rich Evans85b05ec2015-02-12 11:37:29 +0000409 int extended_ms; /* negotiate extended master secret? */
410 int etm; /* negotiate encrypt then mac? */
Manuel Pégourié-Gonnard498e6322020-02-17 11:04:33 +0100411 int skip_close_notify; /* skip sending the close_notify alert */
Rich Evans85b05ec2015-02-12 11:37:29 +0000412} opt;
413
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100414int query_config( const char *config );
415
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200416static void my_debug( void *ctx, int level,
417 const char *file, int line,
418 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000419{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200420 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000421
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200422 /* Extract basename from file */
423 for( p = basename = file; *p != '\0'; p++ )
424 if( *p == '/' || *p == '\\' )
425 basename = p + 1;
426
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100427 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s",
428 basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000429 fflush( (FILE *) ctx );
430}
431
432/*
433 * Test recv/send functions that make sure each try returns
434 * WANT_READ/WANT_WRITE at least once before sucesseding
435 */
436static int my_recv( void *ctx, unsigned char *buf, size_t len )
437{
438 static int first_try = 1;
439 int ret;
440
441 if( first_try )
442 {
443 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100444 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000445 }
446
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200447 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100448 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000449 first_try = 1; /* Next call will be a new operation */
450 return( ret );
451}
452
453static int my_send( void *ctx, const unsigned char *buf, size_t len )
454{
455 static int first_try = 1;
456 int ret;
457
458 if( first_try )
459 {
460 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100461 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000462 }
463
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200464 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100465 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000466 first_try = 1; /* Next call will be a new operation */
467 return( ret );
468}
469
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200470#if defined(MBEDTLS_X509_CRT_PARSE_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000471/*
472 * Enabled if debug_level > 1 in code below
473 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100474static int my_verify( void *data, mbedtls_x509_crt *crt,
475 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000476{
477 char buf[1024];
478 ((void) data);
479
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200480 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
481 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
482 mbedtls_printf( "%s", buf );
Rich Evans85b05ec2015-02-12 11:37:29 +0000483
Rich Evans85b05ec2015-02-12 11:37:29 +0000484 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200485 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100486 else
487 {
488 mbedtls_x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
489 mbedtls_printf( "%s\n", buf );
490 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000491
492 return( 0 );
493}
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200494
495static int ssl_sig_hashes_for_test[] = {
496#if defined(MBEDTLS_SHA512_C)
497 MBEDTLS_MD_SHA512,
498 MBEDTLS_MD_SHA384,
499#endif
500#if defined(MBEDTLS_SHA256_C)
501 MBEDTLS_MD_SHA256,
502 MBEDTLS_MD_SHA224,
503#endif
504#if defined(MBEDTLS_SHA1_C)
505 /* Allow SHA-1 as we use it extensively in tests. */
506 MBEDTLS_MD_SHA1,
507#endif
508 MBEDTLS_MD_NONE
509};
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200510#endif /* MBEDTLS_X509_CRT_PARSE_C */
Rich Evans85b05ec2015-02-12 11:37:29 +0000511
Hanno Becker16970d22017-10-10 15:56:37 +0100512/*
513 * Wait for an event from the underlying transport or the timer
514 * (Used in event-driven IO mode).
515 */
516#if !defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000517int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000518 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +0100519#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000520int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000521 mbedtls_timing_delay_context *timer,
522 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +0100523#endif
Hanno Becker9b2b66e2018-03-15 12:21:15 +0000524{
Hanno Becker16970d22017-10-10 15:56:37 +0100525
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000526 int ret;
Hanno Becker16970d22017-10-10 15:56:37 +0100527 int poll_type = 0;
528
529 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
530 poll_type = MBEDTLS_NET_POLL_WRITE;
531 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
532 poll_type = MBEDTLS_NET_POLL_READ;
533#if !defined(MBEDTLS_TIMING_C)
534 else
Hanno Beckeref527962018-03-15 15:49:24 +0000535 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +0100536#endif
537
538 while( 1 )
539 {
Hanno Becker197a91c2017-10-31 10:58:53 +0000540 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +0100541#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +0000542 if( timer != NULL &&
543 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +0100544 {
Hanno Becker16970d22017-10-10 15:56:37 +0100545 break;
546 }
Hanno Becker197a91c2017-10-31 10:58:53 +0000547#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +0100548
Hanno Becker197a91c2017-10-31 10:58:53 +0000549 /* Check if underlying transport became available */
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000550 if( poll_type != 0 )
Hanno Becker16970d22017-10-10 15:56:37 +0100551 {
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000552 ret = mbedtls_net_poll( fd, poll_type, 0 );
553 if( ret < 0 )
554 return( ret );
555 if( ret == poll_type )
556 break;
Hanno Becker16970d22017-10-10 15:56:37 +0100557 }
558 }
Hanno Beckeradfa64f2018-03-15 11:35:07 +0000559
560 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +0100561}
562
Paul Bakker9caf2d22010-02-18 19:37:19 +0000563int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000564{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200565 int ret = 0, len, tail_len, i, written, frags, retry_left;
566 mbedtls_net_context server_fd;
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100567
568 unsigned char buf[MAX_REQUEST_SIZE + 1];
569
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200570#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
571 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200572 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200573#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200574#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100575 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200576#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100577#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +0100578 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100579 const mbedtls_ecp_curve_info *curve_cur;
580#endif
581
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200582 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000583
Gilles Peskineef86ab22017-05-05 18:59:02 +0200584#if defined(MBEDTLS_X509_CRT_PARSE_C)
585 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
586#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200587 mbedtls_entropy_context entropy;
588 mbedtls_ctr_drbg_context ctr_drbg;
589 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200590 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200591 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200592#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200593 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200594#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200595#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200596 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200597 mbedtls_x509_crt cacert;
598 mbedtls_x509_crt clicert;
599 mbedtls_pk_context pkey;
Paul Bakkered27a042013-04-18 22:46:23 +0200600#endif
Paul Bakker9caf2d22010-02-18 19:37:19 +0000601 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000602 const int *list;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000603
Paul Bakker1a207ec2011-02-06 13:22:40 +0000604 /*
605 * Make sure memory references are valid.
606 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200607 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200608 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200609 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200610 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200611 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200612#if defined(MBEDTLS_X509_CRT_PARSE_C)
613 mbedtls_x509_crt_init( &cacert );
614 mbedtls_x509_crt_init( &clicert );
615 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200616#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200617#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200618 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200619#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000620
Paul Bakker9caf2d22010-02-18 19:37:19 +0000621 if( argc == 0 )
622 {
623 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000624 if( ret == 0 )
625 ret = 1;
626
Gilles Peskined135bbd2020-04-14 19:41:01 +0200627 mbedtls_printf( USAGE1 );
628 mbedtls_printf( USAGE2 );
629 mbedtls_printf( USAGE3 );
630 mbedtls_printf( USAGE4 );
Paul Bakker51936882011-02-20 16:05:58 +0000631
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200632 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000633 while( *list )
634 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200635 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200636 list++;
637 if( !*list )
638 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200639 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000640 list++;
641 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200642 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000643 goto exit;
644 }
645
646 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100647 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000648 opt.server_port = DFL_SERVER_PORT;
649 opt.debug_level = DFL_DEBUG_LEVEL;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100650 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100651 opt.event = DFL_EVENT;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200652 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200653 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000654 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200655 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000656 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000657 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000658 opt.crt_file = DFL_CRT_FILE;
659 opt.key_file = DFL_KEY_FILE;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200660 opt.psk = DFL_PSK;
661 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200662 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200663 opt.ec_max_ops = DFL_EC_MAX_OPS;
Paul Bakker51936882011-02-20 16:05:58 +0000664 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Paul Bakker48916f92012-09-16 19:57:18 +0000665 opt.renegotiation = DFL_RENEGOTIATION;
666 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100667 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200668 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000669 opt.min_version = DFL_MIN_VERSION;
670 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100671 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200672 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100673 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200674 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200675 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100676 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200677 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200678 opt.reconnect = DFL_RECONNECT;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100679 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200680 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200681 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200682 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100683 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200684 opt.transport = DFL_TRANSPORT;
685 opt.hs_to_min = DFL_HS_TO_MIN;
686 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200687 opt.dtls_mtu = DFL_DTLS_MTU;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200688 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200689 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100690 opt.etm = DFL_ETM;
Hanno Becker4d615912018-08-14 13:33:30 +0100691 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnard498e6322020-02-17 11:04:33 +0100692 opt.skip_close_notify = DFL_SKIP_CLOSE_NOTIFY;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000693
694 for( i = 1; i < argc; i++ )
695 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000696 p = argv[i];
697 if( ( q = strchr( p, '=' ) ) == NULL )
698 goto usage;
699 *q++ = '\0';
700
701 if( strcmp( p, "server_name" ) == 0 )
702 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100703 else if( strcmp( p, "server_addr" ) == 0 )
704 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000705 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200706 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100707 else if( strcmp( p, "dtls" ) == 0 )
708 {
709 int t = atoi( q );
710 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200711 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100712 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200713 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100714 else
715 goto usage;
716 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000717 else if( strcmp( p, "debug_level" ) == 0 )
718 {
719 opt.debug_level = atoi( q );
720 if( opt.debug_level < 0 || opt.debug_level > 65535 )
721 goto usage;
722 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100723 else if( strcmp( p, "nbio" ) == 0 )
724 {
725 opt.nbio = atoi( q );
726 if( opt.nbio < 0 || opt.nbio > 2 )
727 goto usage;
728 }
Hanno Becker16970d22017-10-10 15:56:37 +0100729 else if( strcmp( p, "event" ) == 0 )
730 {
731 opt.event = atoi( q );
732 if( opt.event < 0 || opt.event > 2 )
733 goto usage;
734 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200735 else if( strcmp( p, "read_timeout" ) == 0 )
736 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200737 else if( strcmp( p, "max_resend" ) == 0 )
738 {
739 opt.max_resend = atoi( q );
740 if( opt.max_resend < 0 )
741 goto usage;
742 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000743 else if( strcmp( p, "request_page" ) == 0 )
744 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +0200745 else if( strcmp( p, "request_size" ) == 0 )
746 {
747 opt.request_size = atoi( q );
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100748 if( opt.request_size < 0 ||
749 opt.request_size > MAX_REQUEST_SIZE )
Paul Bakker93c32b22014-04-25 13:40:05 +0200750 goto usage;
751 }
Paul Bakker5690efc2011-05-26 13:16:06 +0000752 else if( strcmp( p, "ca_file" ) == 0 )
753 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +0000754 else if( strcmp( p, "ca_path" ) == 0 )
755 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +0000756 else if( strcmp( p, "crt_file" ) == 0 )
757 opt.crt_file = q;
758 else if( strcmp( p, "key_file" ) == 0 )
759 opt.key_file = q;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200760 else if( strcmp( p, "psk" ) == 0 )
761 opt.psk = q;
762 else if( strcmp( p, "psk_identity" ) == 0 )
763 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200764 else if( strcmp( p, "ecjpake_pw" ) == 0 )
765 opt.ecjpake_pw = q;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200766 else if( strcmp( p, "ec_max_ops" ) == 0 )
767 opt.ec_max_ops = atoi( q );
Paul Bakker51936882011-02-20 16:05:58 +0000768 else if( strcmp( p, "force_ciphersuite" ) == 0 )
769 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200770 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +0000771
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +0200772 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +0000773 {
774 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +0000775 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +0000776 }
Paul Bakker51936882011-02-20 16:05:58 +0000777 opt.force_ciphersuite[1] = 0;
778 }
Paul Bakker48916f92012-09-16 19:57:18 +0000779 else if( strcmp( p, "renegotiation" ) == 0 )
780 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100781 opt.renegotiation = (atoi( q )) ?
782 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
783 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +0000784 }
785 else if( strcmp( p, "allow_legacy" ) == 0 )
786 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100787 switch( atoi( q ) )
788 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100789 case -1:
790 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
791 break;
792 case 0:
793 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
794 break;
795 case 1:
796 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
797 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100798 default: goto usage;
799 }
Paul Bakker48916f92012-09-16 19:57:18 +0000800 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100801 else if( strcmp( p, "renegotiate" ) == 0 )
802 {
803 opt.renegotiate = atoi( q );
804 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
805 goto usage;
806 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200807 else if( strcmp( p, "exchanges" ) == 0 )
808 {
809 opt.exchanges = atoi( q );
810 if( opt.exchanges < 1 )
811 goto usage;
812 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200813 else if( strcmp( p, "reconnect" ) == 0 )
814 {
815 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +0200816 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200817 goto usage;
818 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100819 else if( strcmp( p, "reco_delay" ) == 0 )
820 {
821 opt.reco_delay = atoi( q );
822 if( opt.reco_delay < 0 )
823 goto usage;
824 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200825 else if( strcmp( p, "reconnect_hard" ) == 0 )
826 {
827 opt.reconnect_hard = atoi( q );
828 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
829 goto usage;
830 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200831 else if( strcmp( p, "tickets" ) == 0 )
832 {
833 opt.tickets = atoi( q );
834 if( opt.tickets < 0 || opt.tickets > 2 )
835 goto usage;
836 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200837 else if( strcmp( p, "alpn" ) == 0 )
838 {
839 opt.alpn_string = q;
840 }
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200841 else if( strcmp( p, "fallback" ) == 0 )
842 {
843 switch( atoi( q ) )
844 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200845 case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break;
846 case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200847 default: goto usage;
848 }
849 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200850 else if( strcmp( p, "extended_ms" ) == 0 )
851 {
852 switch( atoi( q ) )
853 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100854 case 0:
855 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
856 break;
857 case 1:
858 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
859 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200860 default: goto usage;
861 }
862 }
Hanno Beckere6706e62017-05-15 16:05:15 +0100863 else if( strcmp( p, "curves" ) == 0 )
864 opt.curves = q;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100865 else if( strcmp( p, "etm" ) == 0 )
866 {
867 switch( atoi( q ) )
868 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200869 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
870 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100871 default: goto usage;
872 }
873 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000874 else if( strcmp( p, "min_version" ) == 0 )
875 {
876 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200877 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000878 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200879 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100880 else if( strcmp( q, "tls1_1" ) == 0 ||
881 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200882 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100883 else if( strcmp( q, "tls1_2" ) == 0 ||
884 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200885 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000886 else
887 goto usage;
888 }
889 else if( strcmp( p, "max_version" ) == 0 )
890 {
891 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200892 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000893 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200894 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100895 else if( strcmp( q, "tls1_1" ) == 0 ||
896 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200897 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100898 else if( strcmp( q, "tls1_2" ) == 0 ||
899 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200900 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000901 else
902 goto usage;
903 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100904 else if( strcmp( p, "arc4" ) == 0 )
905 {
906 switch( atoi( q ) )
907 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200908 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
909 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100910 default: goto usage;
911 }
912 }
Gilles Peskinebc70a182017-05-09 15:59:24 +0200913 else if( strcmp( p, "allow_sha1" ) == 0 )
914 {
915 switch( atoi( q ) )
916 {
917 case 0: opt.allow_sha1 = 0; break;
918 case 1: opt.allow_sha1 = 1; break;
919 default: goto usage;
920 }
921 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000922 else if( strcmp( p, "force_version" ) == 0 )
923 {
924 if( strcmp( q, "ssl3" ) == 0 )
925 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200926 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
927 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000928 }
929 else if( strcmp( q, "tls1" ) == 0 )
930 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200931 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
932 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000933 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100934 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +0000935 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200936 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
937 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000938 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100939 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +0000940 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200941 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
942 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000943 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100944 else if( strcmp( q, "dtls1" ) == 0 )
945 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200946 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
947 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
948 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100949 }
950 else if( strcmp( q, "dtls1_2" ) == 0 )
951 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200952 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
953 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
954 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100955 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000956 else
957 goto usage;
958 }
Paul Bakker91ebfb52012-11-23 14:04:08 +0100959 else if( strcmp( p, "auth_mode" ) == 0 )
960 {
961 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200962 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100963 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200964 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100965 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200966 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100967 else
968 goto usage;
969 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200970 else if( strcmp( p, "max_frag_len" ) == 0 )
971 {
972 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200973 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200974 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200975 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200976 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200977 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200978 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200979 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200980 else
981 goto usage;
982 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200983 else if( strcmp( p, "trunc_hmac" ) == 0 )
984 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100985 switch( atoi( q ) )
986 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200987 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
988 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100989 default: goto usage;
990 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200991 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200992 else if( strcmp( p, "hs_timeout" ) == 0 )
993 {
994 if( ( p = strchr( q, '-' ) ) == NULL )
995 goto usage;
996 *p++ = '\0';
997 opt.hs_to_min = atoi( q );
998 opt.hs_to_max = atoi( p );
999 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1000 goto usage;
1001 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001002 else if( strcmp( p, "mtu" ) == 0 )
1003 {
1004 opt.dtls_mtu = atoi( q );
1005 if( opt.dtls_mtu < 0 )
1006 goto usage;
1007 }
Hanno Becker4d615912018-08-14 13:33:30 +01001008 else if( strcmp( p, "dgram_packing" ) == 0 )
1009 {
1010 opt.dgram_packing = atoi( q );
1011 if( opt.dgram_packing != 0 &&
1012 opt.dgram_packing != 1 )
1013 {
1014 goto usage;
1015 }
1016 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001017 else if( strcmp( p, "recsplit" ) == 0 )
1018 {
1019 opt.recsplit = atoi( q );
1020 if( opt.recsplit < 0 || opt.recsplit > 1 )
1021 goto usage;
1022 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001023 else if( strcmp( p, "dhmlen" ) == 0 )
1024 {
1025 opt.dhmlen = atoi( q );
1026 if( opt.dhmlen < 0 )
1027 goto usage;
1028 }
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +01001029 else if( strcmp( p, "query_config" ) == 0 )
1030 {
Krzysztof Stachowiak3b0c4302019-04-24 14:24:46 +02001031 mbedtls_exit( query_config( q ) );
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +01001032 }
Manuel Pégourié-Gonnard498e6322020-02-17 11:04:33 +01001033 else if( strcmp( p, "skip_close_notify" ) == 0 )
1034 {
1035 opt.skip_close_notify = atoi( q );
1036 if( opt.skip_close_notify < 0 || opt.skip_close_notify > 1 )
1037 goto usage;
1038 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001039 else
1040 goto usage;
1041 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001042
Hanno Becker16970d22017-10-10 15:56:37 +01001043 /* Event-driven IO is incompatible with the above custom
1044 * receive and send functions, as the polling builds on
1045 * refers to the underlying net_context. */
1046 if( opt.event == 1 && opt.nbio != 1 )
1047 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001048 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001049 opt.nbio = 1;
1050 }
1051
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001052#if defined(MBEDTLS_DEBUG_C)
1053 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001054#endif
1055
Paul Bakkerc1516be2013-06-29 16:01:32 +02001056 if( opt.force_ciphersuite[0] > 0 )
1057 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001058 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001059 ciphersuite_info =
1060 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001061
Paul Bakker66c48102013-07-26 14:05:32 +02001062 if( opt.max_version != -1 &&
1063 ciphersuite_info->min_minor_ver > opt.max_version )
1064 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001065 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker66c48102013-07-26 14:05:32 +02001066 ret = 2;
1067 goto usage;
1068 }
1069 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02001070 ciphersuite_info->max_minor_ver < opt.min_version )
1071 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001072 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001073 ret = 2;
1074 goto usage;
1075 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001076
1077 /* If the server selects a version that's not supported by
1078 * this suite, then there will be no common ciphersuite... */
1079 if( opt.max_version == -1 ||
1080 opt.max_version > ciphersuite_info->max_minor_ver )
1081 {
Paul Bakker66c48102013-07-26 14:05:32 +02001082 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001083 }
Paul Bakker66c48102013-07-26 14:05:32 +02001084 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001085 {
Paul Bakker66c48102013-07-26 14:05:32 +02001086 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001087 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001088 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1089 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1090 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001091 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001092
1093 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001094 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001095 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001096 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001097 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001098 mbedtls_printf( "forced RC4 ciphersuite with RC4 disabled\n" );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001099 ret = 2;
1100 goto usage;
1101 }
1102
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001103 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001104 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001105 }
1106
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001107#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001108 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001109 * Unhexify the pre-shared key if any is given
1110 */
1111 if( strlen( opt.psk ) )
1112 {
1113 unsigned char c;
1114 size_t j;
1115
1116 if( strlen( opt.psk ) % 2 != 0 )
1117 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001118 mbedtls_printf( "pre-shared key not valid hex\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001119 goto exit;
1120 }
1121
1122 psk_len = strlen( opt.psk ) / 2;
1123
1124 for( j = 0; j < strlen( opt.psk ); j += 2 )
1125 {
1126 c = opt.psk[j];
1127 if( c >= '0' && c <= '9' )
1128 c -= '0';
1129 else if( c >= 'a' && c <= 'f' )
1130 c -= 'a' - 10;
1131 else if( c >= 'A' && c <= 'F' )
1132 c -= 'A' - 10;
1133 else
1134 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001135 mbedtls_printf( "pre-shared key not valid hex\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001136 goto exit;
1137 }
1138 psk[ j / 2 ] = c << 4;
1139
1140 c = opt.psk[j + 1];
1141 if( c >= '0' && c <= '9' )
1142 c -= '0';
1143 else if( c >= 'a' && c <= 'f' )
1144 c -= 'a' - 10;
1145 else if( c >= 'A' && c <= 'F' )
1146 c -= 'A' - 10;
1147 else
1148 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001149 mbedtls_printf( "pre-shared key not valid hex\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001150 goto exit;
1151 }
1152 psk[ j / 2 ] |= c;
1153 }
1154 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001155#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001156
Hanno Beckere6706e62017-05-15 16:05:15 +01001157#if defined(MBEDTLS_ECP_C)
1158 if( opt.curves != NULL )
1159 {
1160 p = (char *) opt.curves;
1161 i = 0;
1162
1163 if( strcmp( p, "none" ) == 0 )
1164 {
1165 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1166 }
1167 else if( strcmp( p, "default" ) != 0 )
1168 {
1169 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001170 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001171 {
1172 q = p;
1173
1174 /* Terminate the current string */
1175 while( *p != ',' && *p != '\0' )
1176 p++;
1177 if( *p == ',' )
1178 *p++ = '\0';
1179
1180 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1181 {
1182 curve_list[i++] = curve_cur->grp_id;
1183 }
1184 else
1185 {
1186 mbedtls_printf( "unknown curve %s\n", q );
1187 mbedtls_printf( "supported curves: " );
1188 for( curve_cur = mbedtls_ecp_curve_list();
1189 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1190 curve_cur++ )
1191 {
1192 mbedtls_printf( "%s ", curve_cur->name );
1193 }
1194 mbedtls_printf( "\n" );
1195 goto exit;
1196 }
1197 }
1198
1199 mbedtls_printf("Number of curves: %d\n", i );
1200
Hanno Becker8651a432017-06-09 16:13:22 +01001201 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001202 {
Hanno Becker8651a432017-06-09 16:13:22 +01001203 mbedtls_printf( "curves list too long, maximum %d",
1204 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001205 goto exit;
1206 }
1207
1208 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1209 }
1210 }
1211#endif /* MBEDTLS_ECP_C */
1212
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001213#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001214 if( opt.alpn_string != NULL )
1215 {
1216 p = (char *) opt.alpn_string;
1217 i = 0;
1218
1219 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001220 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001221 {
1222 alpn_list[i++] = p;
1223
1224 /* Terminate the current string and move on to next one */
1225 while( *p != ',' && *p != '\0' )
1226 p++;
1227 if( *p == ',' )
1228 *p++ = '\0';
1229 }
1230 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001231#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001232
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001233 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001234 * 0. Initialize the RNG and the session data
1235 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001236 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001237 fflush( stdout );
1238
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001239 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001240 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
1241 &entropy, (const unsigned char *) pers,
1242 strlen( pers ) ) ) != 0 )
Paul Bakker508ad5a2011-12-04 17:09:26 +00001243 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001244 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
1245 -ret );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001246 goto exit;
1247 }
1248
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001249 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001250
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001251#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001252 /*
1253 * 1.1. Load the trusted CA
1254 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001255 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001256 fflush( stdout );
1257
Hanno Beckera7242062019-03-05 16:02:15 +00001258 if( strcmp( opt.ca_path, "none" ) == 0 ||
1259 strcmp( opt.ca_file, "none" ) == 0 )
1260 {
1261 ret = 0;
1262 }
1263 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001264#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001265 if( strlen( opt.ca_path ) )
Hanno Beckera7242062019-03-05 16:02:15 +00001266 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001267 else if( strlen( opt.ca_file ) )
Hanno Beckera7242062019-03-05 16:02:15 +00001268 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001269 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001270#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001271#if defined(MBEDTLS_CERTS_C)
Hanno Beckerbb676f72019-02-01 08:15:06 +00001272 {
1273#if defined(MBEDTLS_PEM_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001274 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001275 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001276 ret = mbedtls_x509_crt_parse( &cacert,
1277 (const unsigned char *) mbedtls_test_cas[i],
1278 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001279 if( ret != 0 )
1280 break;
1281 }
Hanno Beckerbb676f72019-02-01 08:15:06 +00001282 if( ret == 0 )
1283#endif /* MBEDTLS_PEM_PARSE_C */
1284 for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ )
1285 {
1286 ret = mbedtls_x509_crt_parse_der( &cacert,
1287 (const unsigned char *) mbedtls_test_cas_der[i],
1288 mbedtls_test_cas_der_len[i] );
1289 if( ret != 0 )
1290 break;
1291 }
1292 }
Paul Bakker5690efc2011-05-26 13:16:06 +00001293#else
1294 {
1295 ret = 1;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001296 mbedtls_printf( "MBEDTLS_CERTS_C not defined." );
Paul Bakker5690efc2011-05-26 13:16:06 +00001297 }
Hanno Beckerbb676f72019-02-01 08:15:06 +00001298#endif /* MBEDTLS_CERTS_C */
Paul Bakker42488232012-05-16 08:21:05 +00001299 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001300 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001301 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1302 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001303 goto exit;
1304 }
1305
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001306 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001307
1308 /*
1309 * 1.2. Load own certificate and private key
1310 *
1311 * (can be skipped if client authentication is not required)
1312 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001313 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001314 fflush( stdout );
1315
Hanno Beckera7242062019-03-05 16:02:15 +00001316 if( strcmp( opt.crt_file, "none" ) == 0 )
1317 ret = 0;
1318 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001319#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001320 if( strlen( opt.crt_file ) )
Hanno Beckera7242062019-03-05 16:02:15 +00001321 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001322 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001323#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001324#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001325 ret = mbedtls_x509_crt_parse( &clicert,
1326 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001327 mbedtls_test_cli_crt_len );
Paul Bakker5690efc2011-05-26 13:16:06 +00001328#else
1329 {
1330 ret = 1;
Hanno Beckerc258c442018-12-05 16:49:42 +00001331 mbedtls_printf( "MBEDTLS_CERTS_C not defined." );
Paul Bakker5690efc2011-05-26 13:16:06 +00001332 }
1333#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001334 if( ret != 0 )
1335 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001336 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1337 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001338 goto exit;
1339 }
1340
Hanno Beckera7242062019-03-05 16:02:15 +00001341 if( strcmp( opt.key_file, "none" ) == 0 )
1342 ret = 0;
1343 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001344#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001345 if( strlen( opt.key_file ) )
Hanno Beckera7242062019-03-05 16:02:15 +00001346 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" );
Paul Bakker67968392010-07-18 08:28:20 +00001347 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001348#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001349#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001350 ret = mbedtls_pk_parse_key( &pkey,
1351 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001352 mbedtls_test_cli_key_len, NULL, 0 );
Paul Bakker5690efc2011-05-26 13:16:06 +00001353#else
1354 {
1355 ret = 1;
Hanno Beckerc258c442018-12-05 16:49:42 +00001356 mbedtls_printf( "MBEDTLS_CERTS_C not defined." );
Paul Bakker5690efc2011-05-26 13:16:06 +00001357 }
1358#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001359 if( ret != 0 )
1360 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001361 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
1362 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001363 goto exit;
1364 }
1365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001366 mbedtls_printf( " ok\n" );
1367#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001368
1369 /*
1370 * 2. Start the connection
1371 */
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +01001372 if( opt.server_addr == NULL)
1373 opt.server_addr = opt.server_name;
1374
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001375 mbedtls_printf( " . Connecting to %s/%s/%s...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001376 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01001377 opt.server_addr, opt.server_port );
Paul Bakker5121ce52009-01-03 21:22:43 +00001378 fflush( stdout );
1379
Hanno Becker16970d22017-10-10 15:56:37 +01001380 if( ( ret = mbedtls_net_connect( &server_fd,
1381 opt.server_addr, opt.server_port,
1382 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
1383 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001384 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001385 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
1386 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001387 goto exit;
1388 }
1389
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001390 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001391 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001392 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001393 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001394 if( ret != 0 )
1395 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001396 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
1397 -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001398 goto exit;
1399 }
1400
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001401 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001402
1403 /*
1404 * 3. Setup stuff
1405 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001406 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001407 fflush( stdout );
1408
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001409 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1410 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001411 opt.transport,
1412 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001413 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001414 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
1415 -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001416 goto exit;
1417 }
1418
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001419#if defined(MBEDTLS_X509_CRT_PARSE_C)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001420 /* The default algorithms profile disables SHA-1, but our tests still
1421 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001422 if( opt.allow_sha1 > 0 )
1423 {
1424 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1425 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
1426 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
1427 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02001428
Paul Bakker915275b2012-09-28 07:10:55 +00001429 if( opt.debug_level > 0 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001430 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
Gilles Peskineef86ab22017-05-05 18:59:02 +02001431#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker915275b2012-09-28 07:10:55 +00001432
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001433 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001434 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001435
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001436#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001437 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001438 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1439 opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001440
Hanno Becker4d615912018-08-14 13:33:30 +01001441 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01001442 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001443#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001444
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001445#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001446 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001447 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001448 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1449 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001450 goto exit;
1451 }
Paul Bakker05decb22013-08-15 13:33:48 +02001452#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001453
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001454#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001455 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001456 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Paul Bakker1f2bc622013-08-15 13:45:55 +02001457#endif
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001458
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001459#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001460 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001461 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001462#endif
1463
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001464#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001465 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001466 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001467#endif
1468
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001469#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001470 if( opt.recsplit != DFL_RECSPLIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001471 mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit
Hanno Becker16970d22017-10-10 15:56:37 +01001472 ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED
1473 : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED );
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001474#endif
1475
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001476#if defined(MBEDTLS_DHM_C)
1477 if( opt.dhmlen != DFL_DHMLEN )
1478 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1479#endif
1480
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001481#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001482 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001483 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001484 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001485 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1486 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001487 goto exit;
1488 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001489#endif
1490
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001491 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
1492 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001493
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001494 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001495
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001496#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001497 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001498#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001499
Paul Bakker645ce3a2012-10-31 12:32:41 +00001500 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001501 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001502
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001503#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001504 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001505 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001506#endif
Paul Bakker51936882011-02-20 16:05:58 +00001507
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001508 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001509 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001510#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001511 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001512#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001513
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001514#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001515 if( strcmp( opt.ca_path, "none" ) != 0 &&
1516 strcmp( opt.ca_file, "none" ) != 0 )
1517 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001518 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001519 }
1520 if( strcmp( opt.crt_file, "none" ) != 0 &&
1521 strcmp( opt.key_file, "none" ) != 0 )
1522 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001523 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001524 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001525 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
1526 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001527 goto exit;
1528 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001529 }
Paul Bakkered27a042013-04-18 22:46:23 +02001530#endif
1531
Hanno Beckere6706e62017-05-15 16:05:15 +01001532#if defined(MBEDTLS_ECP_C)
1533 if( opt.curves != NULL &&
1534 strcmp( opt.curves, "default" ) != 0 )
1535 {
1536 mbedtls_ssl_conf_curves( &conf, curve_list );
1537 }
1538#endif
1539
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001540#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001541 if( ( ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001542 (const unsigned char *) opt.psk_identity,
1543 strlen( opt.psk_identity ) ) ) != 0 )
1544 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001545 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n",
1546 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001547 goto exit;
1548 }
Paul Bakkered27a042013-04-18 22:46:23 +02001549#endif
1550
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001551 if( opt.min_version != DFL_MIN_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001552 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1553 opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01001554
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001555 if( opt.max_version != DFL_MAX_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001556 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1557 opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00001558
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001559#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001560 if( opt.fallback != DFL_FALLBACK )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001561 mbedtls_ssl_conf_fallback( &conf, opt.fallback );
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001562#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001563
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001564 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
1565 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001566 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
1567 -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001568 goto exit;
1569 }
1570
1571#if defined(MBEDTLS_X509_CRT_PARSE_C)
1572 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
1573 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001574 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
1575 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001576 goto exit;
1577 }
1578#endif
1579
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001580#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
1581 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
1582 {
1583 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
1584 (const unsigned char *) opt.ecjpake_pw,
1585 strlen( opt.ecjpake_pw ) ) ) != 0 )
1586 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001587 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
1588 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001589 goto exit;
1590 }
1591 }
1592#endif
1593
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001594 if( opt.nbio == 2 )
1595 mbedtls_ssl_set_bio( &ssl, &server_fd, my_send, my_recv, NULL );
1596 else
Hanno Becker16970d22017-10-10 15:56:37 +01001597 mbedtls_ssl_set_bio( &ssl, &server_fd,
1598 mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02001599 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001600
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02001601#if defined(MBEDTLS_SSL_PROTO_DTLS)
1602 if( opt.dtls_mtu != DFL_DTLS_MTU )
1603 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
1604#endif
1605
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001606#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001607 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
1608 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001609#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001610
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001611#if defined(MBEDTLS_ECP_RESTARTABLE)
1612 if( opt.ec_max_ops != DFL_EC_MAX_OPS )
1613 mbedtls_ecp_set_max_ops( opt.ec_max_ops );
1614#endif
1615
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001616 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001617
Paul Bakker5121ce52009-01-03 21:22:43 +00001618 /*
1619 * 4. Handshake
1620 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001621 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001622 fflush( stdout );
1623
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001624 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001625 {
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001626 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1627 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001628 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Paul Bakker40e46942009-01-03 21:51:57 +00001629 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001630 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
1631 -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001632 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
1633 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01001634 " Unable to verify the server's certificate. "
1635 "Either it is invalid,\n"
1636 " or you didn't set ca_file or ca_path "
1637 "to an appropriate value.\n"
1638 " Alternatively, you may want to use "
1639 "auth_mode=optional for testing purposes.\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001640 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001641 goto exit;
Paul Bakker40e46942009-01-03 21:51:57 +00001642 }
Hanno Becker16970d22017-10-10 15:56:37 +01001643
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001644#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02001645 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
1646 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001647#endif
1648
Hanno Becker16970d22017-10-10 15:56:37 +01001649 /* For event-driven IO, wait for socket to become available */
1650 if( opt.event == 1 /* level triggered IO */ )
1651 {
1652#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001653 ret = idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001654#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001655 ret = idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001656#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001657 if( ret != 0 )
1658 goto exit;
Hanno Becker16970d22017-10-10 15:56:37 +01001659 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001660 }
1661
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001662 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
Hanno Becker16970d22017-10-10 15:56:37 +01001663 mbedtls_ssl_get_version( &ssl ),
1664 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00001665
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001666 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
1667 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001668 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001669 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001670
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02001671#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
1672 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
1673 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
1674#endif
1675
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001676#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001677 if( opt.alpn_string != NULL )
1678 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001679 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
1680 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001681 alp ? alp : "(none)" );
1682 }
1683#endif
1684
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001685 if( opt.reconnect != 0 )
1686 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001687 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001688 fflush( stdout );
1689
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001690 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001691 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001692 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
1693 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001694 goto exit;
1695 }
1696
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001697 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001698 }
1699
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001700#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001701 /*
1702 * 5. Verify the server certificate
1703 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001704 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001705
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02001706 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001707 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001708 char vrfy_buf[512];
1709
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001710 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001711
Hanno Becker16970d22017-10-10 15:56:37 +01001712 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
1713 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00001714
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001715 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001716 }
1717 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001718 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001719
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001720 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001721 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001722 mbedtls_printf( " . Peer certificate information ...\n" );
1723 mbedtls_x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ",
1724 mbedtls_ssl_get_peer_cert( &ssl ) );
1725 mbedtls_printf( "%s\n", buf );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001726 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001727#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001728
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001729#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001730 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001731 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001732 /*
1733 * Perform renegotiation (this must be done when the server is waiting
1734 * for input from our side).
1735 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001736 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001737 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001738 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001739 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001740 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001741 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001742 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001743 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001744 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
1745 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001746 goto exit;
1747 }
Hanno Becker16970d22017-10-10 15:56:37 +01001748
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02001749#if defined(MBEDTLS_ECP_RESTARTABLE)
1750 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
1751 continue;
1752#endif
1753
Hanno Becker16970d22017-10-10 15:56:37 +01001754 /* For event-driven IO, wait for socket to become available */
1755 if( opt.event == 1 /* level triggered IO */ )
1756 {
1757#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001758 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001759#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001760 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001761#endif
1762 }
1763
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001764 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001765 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001766 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001767#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001768
Paul Bakker5121ce52009-01-03 21:22:43 +00001769 /*
1770 * 6. Write the GET request
1771 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02001772 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001773send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001774 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001775 fflush( stdout );
1776
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001777 len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST,
1778 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02001779 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001780
1781 /* Add padding to GET request to reach opt.request_size in length */
1782 if( opt.request_size != DFL_REQUEST_SIZE &&
1783 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02001784 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001785 memset( buf + len, 'A', opt.request_size - len - tail_len );
1786 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02001787 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001788
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001789 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001790 len += tail_len;
1791
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02001792 /* Truncate if request size is smaller than the "natural" size */
1793 if( opt.request_size != DFL_REQUEST_SIZE &&
1794 len > opt.request_size )
1795 {
1796 len = opt.request_size;
1797
1798 /* Still end with \r\n unless that's really not possible */
1799 if( len >= 2 ) buf[len - 2] = '\r';
1800 if( len >= 1 ) buf[len - 1] = '\n';
1801 }
1802
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001803 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00001804 {
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001805 written = 0;
1806 frags = 0;
1807
1808 do
Paul Bakker5121ce52009-01-03 21:22:43 +00001809 {
Hanno Becker16970d22017-10-10 15:56:37 +01001810 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001811 len - written ) ) < 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001812 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001813 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001814 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001815 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001816 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001817 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
1818 -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001819 goto exit;
1820 }
Hanno Becker16970d22017-10-10 15:56:37 +01001821
1822 /* For event-driven IO, wait for socket to become available */
1823 if( opt.event == 1 /* level triggered IO */ )
1824 {
1825#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001826 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001827#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001828 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001829#endif
1830 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001831 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001832
1833 frags++;
1834 written += ret;
Paul Bakker5121ce52009-01-03 21:22:43 +00001835 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001836 while( written < len );
Paul Bakker5121ce52009-01-03 21:22:43 +00001837 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001838 else /* Not stream, so datagram */
1839 {
Hanno Becker16970d22017-10-10 15:56:37 +01001840 while( 1 )
1841 {
1842 ret = mbedtls_ssl_write( &ssl, buf, len );
1843
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001844#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001845 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001846 continue;
1847#endif
1848
Hanno Becker16970d22017-10-10 15:56:37 +01001849 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1850 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
1851 break;
1852
1853 /* For event-driven IO, wait for socket to become available */
1854 if( opt.event == 1 /* level triggered IO */ )
1855 {
1856#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001857 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001858#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001859 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001860#endif
1861 }
1862 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001863
1864 if( ret < 0 )
1865 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001866 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
1867 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001868 goto exit;
1869 }
1870
1871 frags = 1;
1872 written = ret;
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001873
1874 if( written < len )
1875 {
1876 mbedtls_printf( " warning\n ! request didn't fit into single datagram and "
1877 "was truncated to size %u", (unsigned) written );
1878 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001879 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001880
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001881 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01001882 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
1883 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001884
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01001885 /* Send a non-empty request if request_size == 0 */
1886 if ( len == 0 )
1887 {
1888 opt.request_size = DFL_REQUEST_SIZE;
1889 goto send_request;
1890 }
1891
Paul Bakker5121ce52009-01-03 21:22:43 +00001892 /*
1893 * 7. Read the HTTP response
1894 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001895 mbedtls_printf( " < Read from server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001896 fflush( stdout );
1897
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001898 /*
1899 * TLS and DTLS need different reading styles (stream vs datagram)
1900 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001901 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001902 {
1903 do
1904 {
1905 len = sizeof( buf ) - 1;
1906 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001907 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001908
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001909#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001910 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001911 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001912#endif
1913
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001914 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
1915 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01001916 {
1917 /* For event-driven IO, wait for socket to become available */
1918 if( opt.event == 1 /* level triggered IO */ )
1919 {
1920#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001921 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001922#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001923 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001924#endif
1925 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001926 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01001927 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001928
1929 if( ret <= 0 )
1930 {
1931 switch( ret )
1932 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001933 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
1934 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001935 ret = 0;
1936 goto close_notify;
1937
1938 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001939 case MBEDTLS_ERR_NET_CONN_RESET:
1940 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001941 ret = 0;
1942 goto reconnect;
1943
1944 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001945 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
1946 -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001947 goto exit;
1948 }
1949 }
1950
1951 len = ret;
1952 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001953 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001954
1955 /* End of message should be detected according to the syntax of the
1956 * application protocol (eg HTTP), just use a dummy test here. */
1957 if( ret > 0 && buf[len-1] == '\n' )
1958 {
1959 ret = 0;
1960 break;
1961 }
1962 }
1963 while( 1 );
1964 }
1965 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00001966 {
1967 len = sizeof( buf ) - 1;
1968 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00001969
Hanno Becker16970d22017-10-10 15:56:37 +01001970 while( 1 )
1971 {
1972 ret = mbedtls_ssl_read( &ssl, buf, len );
1973
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001974#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02001975 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02001976 continue;
1977#endif
1978
Hanno Becker16970d22017-10-10 15:56:37 +01001979 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1980 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
1981 break;
1982
1983 /* For event-driven IO, wait for socket to become available */
1984 if( opt.event == 1 /* level triggered IO */ )
1985 {
1986#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001987 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001988#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001989 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001990#endif
1991 }
1992 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001993
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001994 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001995 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001996 switch( ret )
1997 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001998 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001999 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002000 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02002001 goto send_request;
2002 goto exit;
2003
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002004 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2005 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002006 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002007 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00002008
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002009 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002010 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002011 goto exit;
2012 }
Paul Bakker5690efc2011-05-26 13:16:06 +00002013 }
2014
Paul Bakker5121ce52009-01-03 21:22:43 +00002015 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02002016 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002017 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002018 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00002019 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002020
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002021 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002022 * 7b. Simulate hard reset and reconnect from same port?
2023 */
2024 if( opt.reconnect_hard != 0 )
2025 {
2026 opt.reconnect_hard = 0;
2027
2028 mbedtls_printf( " . Restarting connection from same port..." );
2029 fflush( stdout );
2030
2031 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
2032 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002033 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
2034 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002035 goto exit;
2036 }
2037
2038 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
2039 {
2040 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002041 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002042 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002043 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002044 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
2045 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002046 goto exit;
2047 }
Hanno Becker16970d22017-10-10 15:56:37 +01002048
2049 /* For event-driven IO, wait for socket to become available */
2050 if( opt.event == 1 /* level triggered IO */ )
2051 {
2052#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002053 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002054#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002055 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002056#endif
2057 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002058 }
2059
2060 mbedtls_printf( " ok\n" );
2061
2062 goto send_request;
2063 }
2064
2065 /*
2066 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002067 */
2068 if( --opt.exchanges > 0 )
2069 goto send_request;
2070
2071 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002072 * 8. Done, cleanly close the connection
2073 */
2074close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002075 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002076 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002077
Manuel Pégourié-Gonnard498e6322020-02-17 11:04:33 +01002078 /*
2079 * Most of the time sending a close_notify before closing is the right
2080 * thing to do. However, when the server already knows how many messages
2081 * are expected and closes the connection by itself, this alert becomes
2082 * redundant. Sometimes with DTLS this redundancy becomes a problem by
2083 * leading to a race condition where the server might close the connection
2084 * before seeing the alert, and since UDP is connection-less when the
2085 * alert arrives it will be seen as a new connection, which will fail as
2086 * the alert is clearly not a valid ClientHello. This may cause spurious
2087 * failures in tests that use DTLS and resumption with ssl_server2 in
2088 * ssl-opt.sh, avoided by enabling skip_close_notify client-side.
2089 */
2090 if( opt.skip_close_notify == 0 )
2091 {
2092 /* No error checking, the connection might be closed already */
2093 do ret = mbedtls_ssl_close_notify( &ssl );
2094 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
2095 ret = 0;
2096 }
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002097
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002098 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002099
2100 /*
2101 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002102 */
2103reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002104 if( opt.reconnect != 0 )
2105 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02002106 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002107
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002108 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01002109
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002110#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002111 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02002112 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002113#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02002114
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002115 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002116
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002117 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002118 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002119 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
2120 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002121 goto exit;
2122 }
2123
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002124 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002125 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002126 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_session returned %d\n\n",
2127 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002128 goto exit;
2129 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002130
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002131 if( ( ret = mbedtls_net_connect( &server_fd,
2132 opt.server_addr, opt.server_port,
2133 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2134 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002135 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002136 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
2137 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002138 goto exit;
2139 }
2140
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002141 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002142 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002143 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002144 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002145 if( ret != 0 )
2146 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002147 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002148 -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002149 goto exit;
2150 }
2151
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002152 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002153 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002154 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002155 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002156 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002157 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002158 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
2159 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002160 goto exit;
2161 }
2162 }
2163
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002164 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002165
2166 goto send_request;
2167 }
2168
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002169 /*
2170 * Cleanup and exit
2171 */
Paul Bakker5121ce52009-01-03 21:22:43 +00002172exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002173#ifdef MBEDTLS_ERROR_C
Paul Bakkera3d195c2011-11-27 21:07:34 +00002174 if( ret != 0 )
2175 {
2176 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002177 mbedtls_strerror( ret, error_buf, 100 );
2178 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00002179 }
2180#endif
2181
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002182 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002183
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002184#if defined(MBEDTLS_X509_CRT_PARSE_C)
2185 mbedtls_x509_crt_free( &clicert );
2186 mbedtls_x509_crt_free( &cacert );
2187 mbedtls_pk_free( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +02002188#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002189 mbedtls_ssl_session_free( &saved_session );
2190 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002191 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002192 mbedtls_ctr_drbg_free( &ctr_drbg );
2193 mbedtls_entropy_free( &entropy );
Paul Bakker5121ce52009-01-03 21:22:43 +00002194
Paul Bakkercce9d772011-11-18 14:26:47 +00002195#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002196 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002197 fflush( stdout ); getchar();
2198#endif
2199
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02002200 // Shell can not handle large exit numbers -> 1 for errors
2201 if( ret < 0 )
2202 ret = 1;
2203
Krzysztof Stachowiak3b0c4302019-04-24 14:24:46 +02002204 mbedtls_exit( ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00002205}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002206#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
2207 MBEDTLS_SSL_CLI_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002208 MBEDTLS_CTR_DRBG_C MBEDTLS_TIMING_C */