Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /* |
| 2 | * SSL client with certificate authentication |
| 3 | * |
Bence Szépkúti | a2947ac | 2020-08-19 16:37:36 +0200 | [diff] [blame^] | 4 | * Copyright The Mbed TLS Contributors |
Bence Szépkúti | f744bd7 | 2020-06-05 13:02:18 +0200 | [diff] [blame] | 5 | * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later |
| 6 | * |
| 7 | * This file is provided under the Apache License 2.0, or the |
| 8 | * GNU General Public License v2.0 or later. |
| 9 | * |
| 10 | * ********** |
| 11 | * Apache License 2.0: |
Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 12 | * |
| 13 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 14 | * not use this file except in compliance with the License. |
| 15 | * You may obtain a copy of the License at |
| 16 | * |
| 17 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 18 | * |
| 19 | * Unless required by applicable law or agreed to in writing, software |
| 20 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 21 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 22 | * See the License for the specific language governing permissions and |
| 23 | * limitations under the License. |
Paul Bakker | b96f154 | 2010-07-18 20:36:00 +0000 | [diff] [blame] | 24 | * |
Bence Szépkúti | f744bd7 | 2020-06-05 13:02:18 +0200 | [diff] [blame] | 25 | * ********** |
| 26 | * |
| 27 | * ********** |
| 28 | * GNU General Public License v2.0 or later: |
| 29 | * |
| 30 | * This program is free software; you can redistribute it and/or modify |
| 31 | * it under the terms of the GNU General Public License as published by |
| 32 | * the Free Software Foundation; either version 2 of the License, or |
| 33 | * (at your option) any later version. |
| 34 | * |
| 35 | * This program is distributed in the hope that it will be useful, |
| 36 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 37 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 38 | * GNU General Public License for more details. |
| 39 | * |
| 40 | * You should have received a copy of the GNU General Public License along |
| 41 | * with this program; if not, write to the Free Software Foundation, Inc., |
| 42 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. |
| 43 | * |
| 44 | * ********** |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 45 | */ |
| 46 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 47 | #if !defined(MBEDTLS_CONFIG_FILE) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 48 | #include "mbedtls/config.h" |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 49 | #else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 50 | #include MBEDTLS_CONFIG_FILE |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 51 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 52 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 53 | #if defined(MBEDTLS_PLATFORM_C) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 54 | #include "mbedtls/platform.h" |
Rich Evans | f90016a | 2015-01-19 14:26:37 +0000 | [diff] [blame] | 55 | #else |
Rich Evans | 18b78c7 | 2015-02-11 14:06:19 +0000 | [diff] [blame] | 56 | #include <stdio.h> |
Simon Butcher | d3138c3 | 2016-04-27 01:26:50 +0100 | [diff] [blame] | 57 | #include <stdlib.h> |
| 58 | #define mbedtls_time time |
| 59 | #define mbedtls_time_t time_t |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 60 | #define mbedtls_printf printf |
| 61 | #define mbedtls_fprintf fprintf |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 62 | #define mbedtls_snprintf snprintf |
Manuel Pégourié-Gonnard | 3ef6a6d | 2018-12-10 14:31:45 +0100 | [diff] [blame] | 63 | #define mbedtls_exit exit |
| 64 | #define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS |
| 65 | #define MBEDTLS_EXIT_FAILURE EXIT_FAILURE |
Rich Evans | f90016a | 2015-01-19 14:26:37 +0000 | [diff] [blame] | 66 | #endif |
| 67 | |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 68 | #if !defined(MBEDTLS_ENTROPY_C) || \ |
| 69 | !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_CLI_C) || \ |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 70 | !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C) |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 71 | int main( void ) |
| 72 | { |
| 73 | mbedtls_printf("MBEDTLS_ENTROPY_C and/or " |
| 74 | "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_CLI_C and/or " |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 75 | "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n"); |
Krzysztof Stachowiak | 3b0c430 | 2019-04-24 14:24:46 +0200 | [diff] [blame] | 76 | mbedtls_exit( 0 ); |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 77 | } |
| 78 | #else |
| 79 | |
Andres AG | 788aa4a | 2016-09-14 14:32:09 +0100 | [diff] [blame] | 80 | #include "mbedtls/net_sockets.h" |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 81 | #include "mbedtls/ssl.h" |
| 82 | #include "mbedtls/entropy.h" |
| 83 | #include "mbedtls/ctr_drbg.h" |
| 84 | #include "mbedtls/certs.h" |
| 85 | #include "mbedtls/x509.h" |
| 86 | #include "mbedtls/error.h" |
| 87 | #include "mbedtls/debug.h" |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 88 | #include "mbedtls/timing.h" |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 89 | |
Rich Evans | 18b78c7 | 2015-02-11 14:06:19 +0000 | [diff] [blame] | 90 | #include <stdio.h> |
| 91 | #include <stdlib.h> |
| 92 | #include <string.h> |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 93 | |
Hanno Becker | e4ad3e8 | 2017-09-18 15:05:46 +0100 | [diff] [blame] | 94 | #define MAX_REQUEST_SIZE 20000 |
| 95 | #define MAX_REQUEST_SIZE_STR "20000" |
| 96 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 97 | #define DFL_SERVER_NAME "localhost" |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 98 | #define DFL_SERVER_ADDR NULL |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 99 | #define DFL_SERVER_PORT "4433" |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 100 | #define DFL_REQUEST_PAGE "/" |
Manuel Pégourié-Gonnard | dea29c5 | 2014-06-18 13:07:56 +0200 | [diff] [blame] | 101 | #define DFL_REQUEST_SIZE -1 |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 102 | #define DFL_DEBUG_LEVEL 0 |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 103 | #define DFL_NBIO 0 |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 104 | #define DFL_EVENT 0 |
Manuel Pégourié-Gonnard | 6b65141 | 2014-10-01 18:29:03 +0200 | [diff] [blame] | 105 | #define DFL_READ_TIMEOUT 0 |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 106 | #define DFL_MAX_RESEND 0 |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 107 | #define DFL_CA_FILE "" |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 108 | #define DFL_CA_PATH "" |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 109 | #define DFL_CRT_FILE "" |
| 110 | #define DFL_KEY_FILE "" |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 111 | #define DFL_PSK "" |
| 112 | #define DFL_PSK_IDENTITY "Client_identity" |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 113 | #define DFL_ECJPAKE_PW NULL |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 114 | #define DFL_EC_MAX_OPS -1 |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 115 | #define DFL_FORCE_CIPHER 0 |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 116 | #define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 117 | #define DFL_ALLOW_LEGACY -2 |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 118 | #define DFL_RENEGOTIATE 0 |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 119 | #define DFL_EXCHANGES 1 |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 120 | #define DFL_MIN_VERSION -1 |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 121 | #define DFL_MAX_VERSION -1 |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 122 | #define DFL_ARC4 -1 |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 123 | #define DFL_SHA1 -1 |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 124 | #define DFL_AUTH_MODE -1 |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 125 | #define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 126 | #define DFL_TRUNC_HMAC -1 |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 127 | #define DFL_RECSPLIT -1 |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 128 | #define DFL_DHMLEN -1 |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 129 | #define DFL_RECONNECT 0 |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 130 | #define DFL_RECO_DELAY 0 |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 131 | #define DFL_RECONNECT_HARD 0 |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 132 | #define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 133 | #define DFL_ALPN_STRING NULL |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 134 | #define DFL_CURVES NULL |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 135 | #define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 136 | #define DFL_HS_TO_MIN 0 |
| 137 | #define DFL_HS_TO_MAX 0 |
Manuel Pégourié-Gonnard | b747c6c | 2018-08-12 13:28:53 +0200 | [diff] [blame] | 138 | #define DFL_DTLS_MTU -1 |
Hanno Becker | 4d61591 | 2018-08-14 13:33:30 +0100 | [diff] [blame] | 139 | #define DFL_DGRAM_PACKING 1 |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 140 | #define DFL_FALLBACK -1 |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 141 | #define DFL_EXTENDED_MS -1 |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 142 | #define DFL_ETM -1 |
Manuel Pégourié-Gonnard | 498e632 | 2020-02-17 11:04:33 +0100 | [diff] [blame] | 143 | #define DFL_SKIP_CLOSE_NOTIFY 0 |
Paul Bakker | 0e6975b | 2009-02-10 22:19:10 +0000 | [diff] [blame] | 144 | |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 145 | #define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: " |
| 146 | #define GET_REQUEST_END "\r\n\r\n" |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 147 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 148 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 149 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 150 | #define USAGE_IO \ |
Paul Bakker | 1f9d02d | 2012-11-20 10:30:55 +0100 | [diff] [blame] | 151 | " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \ |
| 152 | " default: \"\" (pre-loaded)\n" \ |
Hanno Becker | 1ce1a51 | 2019-05-01 11:16:28 +0100 | [diff] [blame] | 153 | " use \"none\" to skip loading any top-level CAs.\n" \ |
Paul Bakker | 1f9d02d | 2012-11-20 10:30:55 +0100 | [diff] [blame] | 154 | " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \ |
| 155 | " default: \"\" (pre-loaded) (overrides ca_file)\n" \ |
Hanno Becker | 1ce1a51 | 2019-05-01 11:16:28 +0100 | [diff] [blame] | 156 | " use \"none\" to skip loading any top-level CAs.\n" \ |
Paul Bakker | 1f9d02d | 2012-11-20 10:30:55 +0100 | [diff] [blame] | 157 | " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \ |
| 158 | " default: \"\" (pre-loaded)\n" \ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 159 | " key_file=%%s default: \"\" (pre-loaded)\n" |
| 160 | #else |
| 161 | #define USAGE_IO \ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 162 | " No file operations available (MBEDTLS_FS_IO not defined)\n" |
| 163 | #endif /* MBEDTLS_FS_IO */ |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 164 | #else |
| 165 | #define USAGE_IO "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 166 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 167 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 168 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 169 | #define USAGE_PSK \ |
| 170 | " psk=%%s default: \"\" (in hex, without 0x)\n" \ |
| 171 | " psk_identity=%%s default: \"Client_identity\"\n" |
| 172 | #else |
| 173 | #define USAGE_PSK "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 174 | #endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 175 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 176 | #if defined(MBEDTLS_SSL_SESSION_TICKETS) |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 177 | #define USAGE_TICKETS \ |
| 178 | " tickets=%%d default: 1 (enabled)\n" |
| 179 | #else |
| 180 | #define USAGE_TICKETS "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 181 | #endif /* MBEDTLS_SSL_SESSION_TICKETS */ |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 182 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 183 | #if defined(MBEDTLS_SSL_TRUNCATED_HMAC) |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 184 | #define USAGE_TRUNC_HMAC \ |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 185 | " trunc_hmac=%%d default: library default\n" |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 186 | #else |
| 187 | #define USAGE_TRUNC_HMAC "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 188 | #endif /* MBEDTLS_SSL_TRUNCATED_HMAC */ |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 189 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 190 | #if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) |
Paul Bakker | 05decb2 | 2013-08-15 13:33:48 +0200 | [diff] [blame] | 191 | #define USAGE_MAX_FRAG_LEN \ |
| 192 | " max_frag_len=%%d default: 16384 (tls default)\n" \ |
| 193 | " options: 512, 1024, 2048, 4096\n" |
| 194 | #else |
| 195 | #define USAGE_MAX_FRAG_LEN "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 196 | #endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */ |
Paul Bakker | 05decb2 | 2013-08-15 13:33:48 +0200 | [diff] [blame] | 197 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 198 | #if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING) |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 199 | #define USAGE_RECSPLIT \ |
Manuel Pégourié-Gonnard | bf27eaa | 2015-06-11 17:02:10 +0200 | [diff] [blame] | 200 | " recsplit=0/1 default: (library default: on)\n" |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 201 | #else |
| 202 | #define USAGE_RECSPLIT |
| 203 | #endif |
| 204 | |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 205 | #if defined(MBEDTLS_DHM_C) |
| 206 | #define USAGE_DHMLEN \ |
| 207 | " dhmlen=%%d default: (library default: 1024 bits)\n" |
| 208 | #else |
| 209 | #define USAGE_DHMLEN |
| 210 | #endif |
| 211 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 212 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 213 | #define USAGE_ALPN \ |
| 214 | " alpn=%%s default: \"\" (disabled)\n" \ |
| 215 | " example: spdy/1,http/1.1\n" |
| 216 | #else |
| 217 | #define USAGE_ALPN "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 218 | #endif /* MBEDTLS_SSL_ALPN */ |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 219 | |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 220 | #if defined(MBEDTLS_ECP_C) |
| 221 | #define USAGE_CURVES \ |
| 222 | " curves=a,b,c,d default: \"default\" (library default)\n" \ |
| 223 | " example: \"secp521r1,brainpoolP512r1\"\n" \ |
| 224 | " - use \"none\" for empty list\n" \ |
| 225 | " - see mbedtls_ecp_curve_list()\n" \ |
| 226 | " for acceptable curve names\n" |
| 227 | #else |
| 228 | #define USAGE_CURVES "" |
| 229 | #endif |
| 230 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 231 | #if defined(MBEDTLS_SSL_PROTO_DTLS) |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 232 | #define USAGE_DTLS \ |
| 233 | " dtls=%%d default: 0 (TLS)\n" \ |
| 234 | " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \ |
Manuel Pégourié-Gonnard | b747c6c | 2018-08-12 13:28:53 +0200 | [diff] [blame] | 235 | " range of DTLS handshake timeouts in millisecs\n" \ |
Hanno Becker | 4d61591 | 2018-08-14 13:33:30 +0100 | [diff] [blame] | 236 | " mtu=%%d default: (library default: unlimited)\n" \ |
| 237 | " dgram_packing=%%d default: 1 (allowed)\n" \ |
| 238 | " allow or forbid packing of multiple\n" \ |
| 239 | " records within a single datgram.\n" |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 240 | #else |
| 241 | #define USAGE_DTLS "" |
| 242 | #endif |
| 243 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 244 | #if defined(MBEDTLS_SSL_FALLBACK_SCSV) |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 245 | #define USAGE_FALLBACK \ |
| 246 | " fallback=0/1 default: (library default: off)\n" |
| 247 | #else |
| 248 | #define USAGE_FALLBACK "" |
| 249 | #endif |
| 250 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 251 | #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 252 | #define USAGE_EMS \ |
| 253 | " extended_ms=0/1 default: (library default: on)\n" |
| 254 | #else |
| 255 | #define USAGE_EMS "" |
| 256 | #endif |
| 257 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 258 | #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 259 | #define USAGE_ETM \ |
| 260 | " etm=0/1 default: (library default: on)\n" |
| 261 | #else |
| 262 | #define USAGE_ETM "" |
| 263 | #endif |
| 264 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 265 | #if defined(MBEDTLS_SSL_RENEGOTIATION) |
Manuel Pégourié-Gonnard | 615e677 | 2014-11-03 08:23:14 +0100 | [diff] [blame] | 266 | #define USAGE_RENEGO \ |
| 267 | " renegotiation=%%d default: 0 (disabled)\n" \ |
| 268 | " renegotiate=%%d default: 0 (disabled)\n" |
| 269 | #else |
| 270 | #define USAGE_RENEGO "" |
| 271 | #endif |
| 272 | |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 273 | #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) |
| 274 | #define USAGE_ECJPAKE \ |
| 275 | " ecjpake_pw=%%s default: none (disabled)\n" |
| 276 | #else |
| 277 | #define USAGE_ECJPAKE "" |
| 278 | #endif |
| 279 | |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 280 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
| 281 | #define USAGE_ECRESTART \ |
| 282 | " ec_max_ops=%%s default: library default (restart disabled)\n" |
| 283 | #else |
| 284 | #define USAGE_ECRESTART "" |
| 285 | #endif |
| 286 | |
Gilles Peskine | d135bbd | 2020-04-14 19:41:01 +0200 | [diff] [blame] | 287 | /* USAGE is arbitrarily split to stay under the portable string literal |
| 288 | * length limit: 4095 bytes in C99. */ |
| 289 | #define USAGE1 \ |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 290 | "\n usage: ssl_client2 param=<>...\n" \ |
| 291 | "\n acceptable parameters:\n" \ |
| 292 | " server_name=%%s default: localhost\n" \ |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 293 | " server_addr=%%s default: given by name\n" \ |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 294 | " server_port=%%d default: 4433\n" \ |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 295 | " request_page=%%s default: \".\"\n" \ |
Andres Amaya Garcia | ce6fbac | 2018-07-04 09:29:34 +0100 | [diff] [blame] | 296 | " request_size=%%d default: about 34 (basic request)\n" \ |
| 297 | " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \ |
| 298 | " If 0, in the first exchange only an empty\n" \ |
| 299 | " application data message is sent followed by\n" \ |
| 300 | " a second non-empty message before attempting\n" \ |
| 301 | " to read a response from the server\n" \ |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 302 | " debug_level=%%d default: 0 (disabled)\n" \ |
| 303 | " nbio=%%d default: 0 (blocking I/O)\n" \ |
| 304 | " options: 1 (non-blocking), 2 (added delays)\n" \ |
| 305 | " event=%%d default: 0 (loop)\n" \ |
| 306 | " options: 1 (level-triggered, implies nbio=1),\n" \ |
| 307 | " read_timeout=%%d default: 0 ms (no timeout)\n" \ |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 308 | " max_resend=%%d default: 0 (no resend on timeout)\n" \ |
Manuel Pégourié-Gonnard | 498e632 | 2020-02-17 11:04:33 +0100 | [diff] [blame] | 309 | " skip_close_notify=%%d default: 0 (send close_notify)\n" \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 310 | "\n" \ |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 311 | USAGE_DTLS \ |
Gilles Peskine | d135bbd | 2020-04-14 19:41:01 +0200 | [diff] [blame] | 312 | "\n" |
| 313 | #define USAGE2 \ |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 314 | " auth_mode=%%s default: (library default: none)\n" \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 315 | " options: none, optional, required\n" \ |
| 316 | USAGE_IO \ |
| 317 | "\n" \ |
| 318 | USAGE_PSK \ |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 319 | USAGE_ECJPAKE \ |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 320 | USAGE_ECRESTART \ |
Gilles Peskine | d135bbd | 2020-04-14 19:41:01 +0200 | [diff] [blame] | 321 | "\n" |
| 322 | #define USAGE3 \ |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 323 | " allow_legacy=%%d default: (library default: no)\n" \ |
Manuel Pégourié-Gonnard | 615e677 | 2014-11-03 08:23:14 +0100 | [diff] [blame] | 324 | USAGE_RENEGO \ |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 325 | " exchanges=%%d default: 1\n" \ |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 326 | " reconnect=%%d default: 0 (disabled)\n" \ |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 327 | " reco_delay=%%d default: 0 seconds\n" \ |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 328 | " reconnect_hard=%%d default: 0 (disabled)\n" \ |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 329 | USAGE_TICKETS \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 330 | USAGE_MAX_FRAG_LEN \ |
| 331 | USAGE_TRUNC_HMAC \ |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 332 | USAGE_ALPN \ |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 333 | USAGE_FALLBACK \ |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 334 | USAGE_EMS \ |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 335 | USAGE_ETM \ |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 336 | USAGE_CURVES \ |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 337 | USAGE_RECSPLIT \ |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 338 | USAGE_DHMLEN \ |
Gilles Peskine | d135bbd | 2020-04-14 19:41:01 +0200 | [diff] [blame] | 339 | "\n" |
| 340 | #define USAGE4 \ |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 341 | " arc4=%%d default: (library default: 0)\n" \ |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 342 | " allow_sha1=%%d default: 0\n" \ |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 343 | " min_version=%%s default: (library default: tls1)\n" \ |
| 344 | " max_version=%%s default: (library default: tls1_2)\n" \ |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 345 | " force_version=%%s default: \"\" (none)\n" \ |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 346 | " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \ |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 347 | "\n" \ |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 348 | " force_ciphersuite=<name> default: all enabled\n"\ |
Andres Amaya Garcia | bfa3e09 | 2018-10-16 21:08:38 +0100 | [diff] [blame] | 349 | " query_config=<name> return 0 if the specified\n" \ |
| 350 | " configuration macro is defined and 1\n" \ |
| 351 | " otherwise. The expansion of the macro\n" \ |
| 352 | " is printed if it is defined\n" \ |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 353 | " acceptable ciphersuite names:\n" |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 354 | |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 355 | #define ALPN_LIST_SIZE 10 |
| 356 | #define CURVE_LIST_SIZE 20 |
| 357 | |
Simon Butcher | 63cb97e | 2018-12-06 17:43:31 +0000 | [diff] [blame] | 358 | |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 359 | /* |
| 360 | * global options |
| 361 | */ |
| 362 | struct options |
| 363 | { |
| 364 | const char *server_name; /* hostname of the server (client only) */ |
| 365 | const char *server_addr; /* address of the server (client only) */ |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 366 | const char *server_port; /* port on which the ssl service runs */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 367 | int debug_level; /* level of debugging */ |
| 368 | int nbio; /* should I/O be blocking? */ |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 369 | int event; /* loop or event-driven IO? level or edge triggered? */ |
| 370 | uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */ |
Manuel Pégourié-Gonnard | d901d17 | 2015-02-16 18:37:53 +0000 | [diff] [blame] | 371 | int max_resend; /* DTLS times to resend on read timeout */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 372 | const char *request_page; /* page on server to request */ |
| 373 | int request_size; /* pad request with header to requested size */ |
| 374 | const char *ca_file; /* the file with the CA certificate(s) */ |
| 375 | const char *ca_path; /* the path with the CA certificate(s) reside */ |
| 376 | const char *crt_file; /* the file with the client certificate */ |
| 377 | const char *key_file; /* the file with the client key */ |
| 378 | const char *psk; /* the pre-shared key */ |
| 379 | const char *psk_identity; /* the pre-shared key identity */ |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 380 | const char *ecjpake_pw; /* the EC J-PAKE password */ |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 381 | int ec_max_ops; /* EC consecutive operations limit */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 382 | int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */ |
| 383 | int renegotiation; /* enable / disable renegotiation */ |
| 384 | int allow_legacy; /* allow legacy renegotiation */ |
| 385 | int renegotiate; /* attempt renegotiation? */ |
| 386 | int renego_delay; /* delay before enforcing renegotiation */ |
| 387 | int exchanges; /* number of data exchanges */ |
| 388 | int min_version; /* minimum protocol version accepted */ |
| 389 | int max_version; /* maximum protocol version accepted */ |
| 390 | int arc4; /* flag for arc4 suites support */ |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 391 | int allow_sha1; /* flag for SHA-1 support */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 392 | int auth_mode; /* verify mode for connection */ |
| 393 | unsigned char mfl_code; /* code for maximum fragment length */ |
| 394 | int trunc_hmac; /* negotiate truncated hmac or not */ |
| 395 | int recsplit; /* enable record splitting? */ |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 396 | int dhmlen; /* minimum DHM params len in bits */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 397 | int reconnect; /* attempt to resume session */ |
| 398 | int reco_delay; /* delay in seconds before resuming session */ |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 399 | int reconnect_hard; /* unexpectedly reconnect from the same port */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 400 | int tickets; /* enable / disable session tickets */ |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 401 | const char *curves; /* list of supported elliptic curves */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 402 | const char *alpn_string; /* ALPN supported protocols */ |
Manuel Pégourié-Gonnard | d901d17 | 2015-02-16 18:37:53 +0000 | [diff] [blame] | 403 | int transport; /* TLS or DTLS? */ |
| 404 | uint32_t hs_to_min; /* Initial value of DTLS handshake timer */ |
| 405 | uint32_t hs_to_max; /* Max value of DTLS handshake timer */ |
Manuel Pégourié-Gonnard | b747c6c | 2018-08-12 13:28:53 +0200 | [diff] [blame] | 406 | int dtls_mtu; /* UDP Maximum tranport unit for DTLS */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 407 | int fallback; /* is this a fallback connection? */ |
Hanno Becker | 4d61591 | 2018-08-14 13:33:30 +0100 | [diff] [blame] | 408 | int dgram_packing; /* allow/forbid datagram packing */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 409 | int extended_ms; /* negotiate extended master secret? */ |
| 410 | int etm; /* negotiate encrypt then mac? */ |
Manuel Pégourié-Gonnard | 498e632 | 2020-02-17 11:04:33 +0100 | [diff] [blame] | 411 | int skip_close_notify; /* skip sending the close_notify alert */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 412 | } opt; |
| 413 | |
Andres Amaya Garcia | bfa3e09 | 2018-10-16 21:08:38 +0100 | [diff] [blame] | 414 | int query_config( const char *config ); |
| 415 | |
Manuel Pégourié-Gonnard | 61ee351 | 2015-06-23 17:35:03 +0200 | [diff] [blame] | 416 | static void my_debug( void *ctx, int level, |
| 417 | const char *file, int line, |
| 418 | const char *str ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 419 | { |
Manuel Pégourié-Gonnard | 052f288 | 2015-07-01 11:50:23 +0200 | [diff] [blame] | 420 | const char *p, *basename; |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 421 | |
Manuel Pégourié-Gonnard | 052f288 | 2015-07-01 11:50:23 +0200 | [diff] [blame] | 422 | /* Extract basename from file */ |
| 423 | for( p = basename = file; *p != '\0'; p++ ) |
| 424 | if( *p == '/' || *p == '\\' ) |
| 425 | basename = p + 1; |
| 426 | |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 427 | mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s", |
| 428 | basename, line, level, str ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 429 | fflush( (FILE *) ctx ); |
| 430 | } |
| 431 | |
| 432 | /* |
| 433 | * Test recv/send functions that make sure each try returns |
| 434 | * WANT_READ/WANT_WRITE at least once before sucesseding |
| 435 | */ |
| 436 | static int my_recv( void *ctx, unsigned char *buf, size_t len ) |
| 437 | { |
| 438 | static int first_try = 1; |
| 439 | int ret; |
| 440 | |
| 441 | if( first_try ) |
| 442 | { |
| 443 | first_try = 0; |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 444 | return( MBEDTLS_ERR_SSL_WANT_READ ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 445 | } |
| 446 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 447 | ret = mbedtls_net_recv( ctx, buf, len ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 448 | if( ret != MBEDTLS_ERR_SSL_WANT_READ ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 449 | first_try = 1; /* Next call will be a new operation */ |
| 450 | return( ret ); |
| 451 | } |
| 452 | |
| 453 | static int my_send( void *ctx, const unsigned char *buf, size_t len ) |
| 454 | { |
| 455 | static int first_try = 1; |
| 456 | int ret; |
| 457 | |
| 458 | if( first_try ) |
| 459 | { |
| 460 | first_try = 0; |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 461 | return( MBEDTLS_ERR_SSL_WANT_WRITE ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 462 | } |
| 463 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 464 | ret = mbedtls_net_send( ctx, buf, len ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 465 | if( ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 466 | first_try = 1; /* Next call will be a new operation */ |
| 467 | return( ret ); |
| 468 | } |
| 469 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 470 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 471 | /* |
| 472 | * Enabled if debug_level > 1 in code below |
| 473 | */ |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 474 | static int my_verify( void *data, mbedtls_x509_crt *crt, |
| 475 | int depth, uint32_t *flags ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 476 | { |
| 477 | char buf[1024]; |
| 478 | ((void) data); |
| 479 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 480 | mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth ); |
| 481 | mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt ); |
| 482 | mbedtls_printf( "%s", buf ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 483 | |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 484 | if ( ( *flags ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 485 | mbedtls_printf( " This certificate has no flags\n" ); |
Manuel Pégourié-Gonnard | 89addc4 | 2015-04-20 10:56:18 +0100 | [diff] [blame] | 486 | else |
| 487 | { |
| 488 | mbedtls_x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags ); |
| 489 | mbedtls_printf( "%s\n", buf ); |
| 490 | } |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 491 | |
| 492 | return( 0 ); |
| 493 | } |
Gilles Peskine | cd3c845 | 2017-05-09 14:57:45 +0200 | [diff] [blame] | 494 | |
| 495 | static int ssl_sig_hashes_for_test[] = { |
| 496 | #if defined(MBEDTLS_SHA512_C) |
| 497 | MBEDTLS_MD_SHA512, |
| 498 | MBEDTLS_MD_SHA384, |
| 499 | #endif |
| 500 | #if defined(MBEDTLS_SHA256_C) |
| 501 | MBEDTLS_MD_SHA256, |
| 502 | MBEDTLS_MD_SHA224, |
| 503 | #endif |
| 504 | #if defined(MBEDTLS_SHA1_C) |
| 505 | /* Allow SHA-1 as we use it extensively in tests. */ |
| 506 | MBEDTLS_MD_SHA1, |
| 507 | #endif |
| 508 | MBEDTLS_MD_NONE |
| 509 | }; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 510 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 511 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 512 | /* |
| 513 | * Wait for an event from the underlying transport or the timer |
| 514 | * (Used in event-driven IO mode). |
| 515 | */ |
| 516 | #if !defined(MBEDTLS_TIMING_C) |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 517 | int idle( mbedtls_net_context *fd, |
Hanno Becker | 9b2b66e | 2018-03-15 12:21:15 +0000 | [diff] [blame] | 518 | int idle_reason ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 519 | #else |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 520 | int idle( mbedtls_net_context *fd, |
Hanno Becker | 9b2b66e | 2018-03-15 12:21:15 +0000 | [diff] [blame] | 521 | mbedtls_timing_delay_context *timer, |
| 522 | int idle_reason ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 523 | #endif |
Hanno Becker | 9b2b66e | 2018-03-15 12:21:15 +0000 | [diff] [blame] | 524 | { |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 525 | |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 526 | int ret; |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 527 | int poll_type = 0; |
| 528 | |
| 529 | if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE ) |
| 530 | poll_type = MBEDTLS_NET_POLL_WRITE; |
| 531 | else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ ) |
| 532 | poll_type = MBEDTLS_NET_POLL_READ; |
| 533 | #if !defined(MBEDTLS_TIMING_C) |
| 534 | else |
Hanno Becker | ef52796 | 2018-03-15 15:49:24 +0000 | [diff] [blame] | 535 | return( 0 ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 536 | #endif |
| 537 | |
| 538 | while( 1 ) |
| 539 | { |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 540 | /* Check if timer has expired */ |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 541 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 542 | if( timer != NULL && |
| 543 | mbedtls_timing_get_delay( timer ) == 2 ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 544 | { |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 545 | break; |
| 546 | } |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 547 | #endif /* MBEDTLS_TIMING_C */ |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 548 | |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 549 | /* Check if underlying transport became available */ |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 550 | if( poll_type != 0 ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 551 | { |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 552 | ret = mbedtls_net_poll( fd, poll_type, 0 ); |
| 553 | if( ret < 0 ) |
| 554 | return( ret ); |
| 555 | if( ret == poll_type ) |
| 556 | break; |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 557 | } |
| 558 | } |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 559 | |
| 560 | return( 0 ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 561 | } |
| 562 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 563 | int main( int argc, char *argv[] ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 564 | { |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 565 | int ret = 0, len, tail_len, i, written, frags, retry_left; |
| 566 | mbedtls_net_context server_fd; |
Hanno Becker | e4ad3e8 | 2017-09-18 15:05:46 +0100 | [diff] [blame] | 567 | |
| 568 | unsigned char buf[MAX_REQUEST_SIZE + 1]; |
| 569 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 570 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
| 571 | unsigned char psk[MBEDTLS_PSK_MAX_LEN]; |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 572 | size_t psk_len = 0; |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 573 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 574 | #if defined(MBEDTLS_SSL_ALPN) |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 575 | const char *alpn_list[ALPN_LIST_SIZE]; |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 576 | #endif |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 577 | #if defined(MBEDTLS_ECP_C) |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 578 | mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE]; |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 579 | const mbedtls_ecp_curve_info *curve_cur; |
| 580 | #endif |
| 581 | |
Paul Bakker | ef3f8c7 | 2013-06-24 13:01:08 +0200 | [diff] [blame] | 582 | const char *pers = "ssl_client2"; |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 583 | |
Gilles Peskine | ef86ab2 | 2017-05-05 18:59:02 +0200 | [diff] [blame] | 584 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 585 | mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default; |
| 586 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 587 | mbedtls_entropy_context entropy; |
| 588 | mbedtls_ctr_drbg_context ctr_drbg; |
| 589 | mbedtls_ssl_context ssl; |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 590 | mbedtls_ssl_config conf; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 591 | mbedtls_ssl_session saved_session; |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 592 | #if defined(MBEDTLS_TIMING_C) |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 593 | mbedtls_timing_delay_context timer; |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 594 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 595 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Manuel Pégourié-Gonnard | db1cc76 | 2015-05-12 11:27:25 +0200 | [diff] [blame] | 596 | uint32_t flags; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 597 | mbedtls_x509_crt cacert; |
| 598 | mbedtls_x509_crt clicert; |
| 599 | mbedtls_pk_context pkey; |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 600 | #endif |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 601 | char *p, *q; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 602 | const int *list; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 603 | |
Paul Bakker | 1a207ec | 2011-02-06 13:22:40 +0000 | [diff] [blame] | 604 | /* |
| 605 | * Make sure memory references are valid. |
| 606 | */ |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 607 | mbedtls_net_init( &server_fd ); |
Manuel Pégourié-Gonnard | 41d479e | 2015-04-29 00:48:22 +0200 | [diff] [blame] | 608 | mbedtls_ssl_init( &ssl ); |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 609 | mbedtls_ssl_config_init( &conf ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 610 | memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) ); |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 611 | mbedtls_ctr_drbg_init( &ctr_drbg ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 612 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 613 | mbedtls_x509_crt_init( &cacert ); |
| 614 | mbedtls_x509_crt_init( &clicert ); |
| 615 | mbedtls_pk_init( &pkey ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 616 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 617 | #if defined(MBEDTLS_SSL_ALPN) |
Paul Bakker | 525f875 | 2014-05-01 10:58:57 +0200 | [diff] [blame] | 618 | memset( (void * ) alpn_list, 0, sizeof( alpn_list ) ); |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 619 | #endif |
Paul Bakker | 1a207ec | 2011-02-06 13:22:40 +0000 | [diff] [blame] | 620 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 621 | if( argc == 0 ) |
| 622 | { |
| 623 | usage: |
Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 624 | if( ret == 0 ) |
| 625 | ret = 1; |
| 626 | |
Gilles Peskine | d135bbd | 2020-04-14 19:41:01 +0200 | [diff] [blame] | 627 | mbedtls_printf( USAGE1 ); |
| 628 | mbedtls_printf( USAGE2 ); |
| 629 | mbedtls_printf( USAGE3 ); |
| 630 | mbedtls_printf( USAGE4 ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 631 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 632 | list = mbedtls_ssl_list_ciphersuites(); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 633 | while( *list ) |
| 634 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 635 | mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 636 | list++; |
| 637 | if( !*list ) |
| 638 | break; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 639 | mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 640 | list++; |
| 641 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 642 | mbedtls_printf("\n"); |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 643 | goto exit; |
| 644 | } |
| 645 | |
| 646 | opt.server_name = DFL_SERVER_NAME; |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 647 | opt.server_addr = DFL_SERVER_ADDR; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 648 | opt.server_port = DFL_SERVER_PORT; |
| 649 | opt.debug_level = DFL_DEBUG_LEVEL; |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 650 | opt.nbio = DFL_NBIO; |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 651 | opt.event = DFL_EVENT; |
Manuel Pégourié-Gonnard | 6b65141 | 2014-10-01 18:29:03 +0200 | [diff] [blame] | 652 | opt.read_timeout = DFL_READ_TIMEOUT; |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 653 | opt.max_resend = DFL_MAX_RESEND; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 654 | opt.request_page = DFL_REQUEST_PAGE; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 655 | opt.request_size = DFL_REQUEST_SIZE; |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 656 | opt.ca_file = DFL_CA_FILE; |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 657 | opt.ca_path = DFL_CA_PATH; |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 658 | opt.crt_file = DFL_CRT_FILE; |
| 659 | opt.key_file = DFL_KEY_FILE; |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 660 | opt.psk = DFL_PSK; |
| 661 | opt.psk_identity = DFL_PSK_IDENTITY; |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 662 | opt.ecjpake_pw = DFL_ECJPAKE_PW; |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 663 | opt.ec_max_ops = DFL_EC_MAX_OPS; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 664 | opt.force_ciphersuite[0]= DFL_FORCE_CIPHER; |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 665 | opt.renegotiation = DFL_RENEGOTIATION; |
| 666 | opt.allow_legacy = DFL_ALLOW_LEGACY; |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 667 | opt.renegotiate = DFL_RENEGOTIATE; |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 668 | opt.exchanges = DFL_EXCHANGES; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 669 | opt.min_version = DFL_MIN_VERSION; |
| 670 | opt.max_version = DFL_MAX_VERSION; |
Manuel Pégourié-Gonnard | bd47a58 | 2015-01-12 13:43:29 +0100 | [diff] [blame] | 671 | opt.arc4 = DFL_ARC4; |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 672 | opt.allow_sha1 = DFL_SHA1; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 673 | opt.auth_mode = DFL_AUTH_MODE; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 674 | opt.mfl_code = DFL_MFL_CODE; |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 675 | opt.trunc_hmac = DFL_TRUNC_HMAC; |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 676 | opt.recsplit = DFL_RECSPLIT; |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 677 | opt.dhmlen = DFL_DHMLEN; |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 678 | opt.reconnect = DFL_RECONNECT; |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 679 | opt.reco_delay = DFL_RECO_DELAY; |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 680 | opt.reconnect_hard = DFL_RECONNECT_HARD; |
Manuel Pégourié-Gonnard | aa0d4d1 | 2013-08-03 13:02:31 +0200 | [diff] [blame] | 681 | opt.tickets = DFL_TICKETS; |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 682 | opt.alpn_string = DFL_ALPN_STRING; |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 683 | opt.curves = DFL_CURVES; |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 684 | opt.transport = DFL_TRANSPORT; |
| 685 | opt.hs_to_min = DFL_HS_TO_MIN; |
| 686 | opt.hs_to_max = DFL_HS_TO_MAX; |
Manuel Pégourié-Gonnard | b747c6c | 2018-08-12 13:28:53 +0200 | [diff] [blame] | 687 | opt.dtls_mtu = DFL_DTLS_MTU; |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 688 | opt.fallback = DFL_FALLBACK; |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 689 | opt.extended_ms = DFL_EXTENDED_MS; |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 690 | opt.etm = DFL_ETM; |
Hanno Becker | 4d61591 | 2018-08-14 13:33:30 +0100 | [diff] [blame] | 691 | opt.dgram_packing = DFL_DGRAM_PACKING; |
Manuel Pégourié-Gonnard | 498e632 | 2020-02-17 11:04:33 +0100 | [diff] [blame] | 692 | opt.skip_close_notify = DFL_SKIP_CLOSE_NOTIFY; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 693 | |
| 694 | for( i = 1; i < argc; i++ ) |
| 695 | { |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 696 | p = argv[i]; |
| 697 | if( ( q = strchr( p, '=' ) ) == NULL ) |
| 698 | goto usage; |
| 699 | *q++ = '\0'; |
| 700 | |
| 701 | if( strcmp( p, "server_name" ) == 0 ) |
| 702 | opt.server_name = q; |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 703 | else if( strcmp( p, "server_addr" ) == 0 ) |
| 704 | opt.server_addr = q; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 705 | else if( strcmp( p, "server_port" ) == 0 ) |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 706 | opt.server_port = q; |
Manuel Pégourié-Gonnard | e29fd4b | 2014-02-06 14:02:55 +0100 | [diff] [blame] | 707 | else if( strcmp( p, "dtls" ) == 0 ) |
| 708 | { |
| 709 | int t = atoi( q ); |
| 710 | if( t == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 711 | opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM; |
Manuel Pégourié-Gonnard | e29fd4b | 2014-02-06 14:02:55 +0100 | [diff] [blame] | 712 | else if( t == 1 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 713 | opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM; |
Manuel Pégourié-Gonnard | e29fd4b | 2014-02-06 14:02:55 +0100 | [diff] [blame] | 714 | else |
| 715 | goto usage; |
| 716 | } |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 717 | else if( strcmp( p, "debug_level" ) == 0 ) |
| 718 | { |
| 719 | opt.debug_level = atoi( q ); |
| 720 | if( opt.debug_level < 0 || opt.debug_level > 65535 ) |
| 721 | goto usage; |
| 722 | } |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 723 | else if( strcmp( p, "nbio" ) == 0 ) |
| 724 | { |
| 725 | opt.nbio = atoi( q ); |
| 726 | if( opt.nbio < 0 || opt.nbio > 2 ) |
| 727 | goto usage; |
| 728 | } |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 729 | else if( strcmp( p, "event" ) == 0 ) |
| 730 | { |
| 731 | opt.event = atoi( q ); |
| 732 | if( opt.event < 0 || opt.event > 2 ) |
| 733 | goto usage; |
| 734 | } |
Manuel Pégourié-Gonnard | 6b65141 | 2014-10-01 18:29:03 +0200 | [diff] [blame] | 735 | else if( strcmp( p, "read_timeout" ) == 0 ) |
| 736 | opt.read_timeout = atoi( q ); |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 737 | else if( strcmp( p, "max_resend" ) == 0 ) |
| 738 | { |
| 739 | opt.max_resend = atoi( q ); |
| 740 | if( opt.max_resend < 0 ) |
| 741 | goto usage; |
| 742 | } |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 743 | else if( strcmp( p, "request_page" ) == 0 ) |
| 744 | opt.request_page = q; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 745 | else if( strcmp( p, "request_size" ) == 0 ) |
| 746 | { |
| 747 | opt.request_size = atoi( q ); |
Hanno Becker | e4ad3e8 | 2017-09-18 15:05:46 +0100 | [diff] [blame] | 748 | if( opt.request_size < 0 || |
| 749 | opt.request_size > MAX_REQUEST_SIZE ) |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 750 | goto usage; |
| 751 | } |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 752 | else if( strcmp( p, "ca_file" ) == 0 ) |
| 753 | opt.ca_file = q; |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 754 | else if( strcmp( p, "ca_path" ) == 0 ) |
| 755 | opt.ca_path = q; |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 756 | else if( strcmp( p, "crt_file" ) == 0 ) |
| 757 | opt.crt_file = q; |
| 758 | else if( strcmp( p, "key_file" ) == 0 ) |
| 759 | opt.key_file = q; |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 760 | else if( strcmp( p, "psk" ) == 0 ) |
| 761 | opt.psk = q; |
| 762 | else if( strcmp( p, "psk_identity" ) == 0 ) |
| 763 | opt.psk_identity = q; |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 764 | else if( strcmp( p, "ecjpake_pw" ) == 0 ) |
| 765 | opt.ecjpake_pw = q; |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 766 | else if( strcmp( p, "ec_max_ops" ) == 0 ) |
| 767 | opt.ec_max_ops = atoi( q ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 768 | else if( strcmp( p, "force_ciphersuite" ) == 0 ) |
| 769 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 770 | opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 771 | |
Manuel Pégourié-Gonnard | 8de259b | 2014-06-11 14:19:06 +0200 | [diff] [blame] | 772 | if( opt.force_ciphersuite[0] == 0 ) |
Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 773 | { |
| 774 | ret = 2; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 775 | goto usage; |
Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 776 | } |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 777 | opt.force_ciphersuite[1] = 0; |
| 778 | } |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 779 | else if( strcmp( p, "renegotiation" ) == 0 ) |
| 780 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 781 | opt.renegotiation = (atoi( q )) ? |
| 782 | MBEDTLS_SSL_RENEGOTIATION_ENABLED : |
| 783 | MBEDTLS_SSL_RENEGOTIATION_DISABLED; |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 784 | } |
| 785 | else if( strcmp( p, "allow_legacy" ) == 0 ) |
| 786 | { |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 787 | switch( atoi( q ) ) |
| 788 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 789 | case -1: |
| 790 | opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE; |
| 791 | break; |
| 792 | case 0: |
| 793 | opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION; |
| 794 | break; |
| 795 | case 1: |
| 796 | opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION; |
| 797 | break; |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 798 | default: goto usage; |
| 799 | } |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 800 | } |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 801 | else if( strcmp( p, "renegotiate" ) == 0 ) |
| 802 | { |
| 803 | opt.renegotiate = atoi( q ); |
| 804 | if( opt.renegotiate < 0 || opt.renegotiate > 1 ) |
| 805 | goto usage; |
| 806 | } |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 807 | else if( strcmp( p, "exchanges" ) == 0 ) |
| 808 | { |
| 809 | opt.exchanges = atoi( q ); |
| 810 | if( opt.exchanges < 1 ) |
| 811 | goto usage; |
| 812 | } |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 813 | else if( strcmp( p, "reconnect" ) == 0 ) |
| 814 | { |
| 815 | opt.reconnect = atoi( q ); |
Manuel Pégourié-Gonnard | cf2e97e | 2013-08-02 15:04:36 +0200 | [diff] [blame] | 816 | if( opt.reconnect < 0 || opt.reconnect > 2 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 817 | goto usage; |
| 818 | } |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 819 | else if( strcmp( p, "reco_delay" ) == 0 ) |
| 820 | { |
| 821 | opt.reco_delay = atoi( q ); |
| 822 | if( opt.reco_delay < 0 ) |
| 823 | goto usage; |
| 824 | } |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 825 | else if( strcmp( p, "reconnect_hard" ) == 0 ) |
| 826 | { |
| 827 | opt.reconnect_hard = atoi( q ); |
| 828 | if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 ) |
| 829 | goto usage; |
| 830 | } |
Manuel Pégourié-Gonnard | aa0d4d1 | 2013-08-03 13:02:31 +0200 | [diff] [blame] | 831 | else if( strcmp( p, "tickets" ) == 0 ) |
| 832 | { |
| 833 | opt.tickets = atoi( q ); |
| 834 | if( opt.tickets < 0 || opt.tickets > 2 ) |
| 835 | goto usage; |
| 836 | } |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 837 | else if( strcmp( p, "alpn" ) == 0 ) |
| 838 | { |
| 839 | opt.alpn_string = q; |
| 840 | } |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 841 | else if( strcmp( p, "fallback" ) == 0 ) |
| 842 | { |
| 843 | switch( atoi( q ) ) |
| 844 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 845 | case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break; |
| 846 | case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break; |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 847 | default: goto usage; |
| 848 | } |
| 849 | } |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 850 | else if( strcmp( p, "extended_ms" ) == 0 ) |
| 851 | { |
| 852 | switch( atoi( q ) ) |
| 853 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 854 | case 0: |
| 855 | opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED; |
| 856 | break; |
| 857 | case 1: |
| 858 | opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED; |
| 859 | break; |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 860 | default: goto usage; |
| 861 | } |
| 862 | } |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 863 | else if( strcmp( p, "curves" ) == 0 ) |
| 864 | opt.curves = q; |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 865 | else if( strcmp( p, "etm" ) == 0 ) |
| 866 | { |
| 867 | switch( atoi( q ) ) |
| 868 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 869 | case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break; |
| 870 | case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break; |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 871 | default: goto usage; |
| 872 | } |
| 873 | } |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 874 | else if( strcmp( p, "min_version" ) == 0 ) |
| 875 | { |
| 876 | if( strcmp( q, "ssl3" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 877 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 878 | else if( strcmp( q, "tls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 879 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 880 | else if( strcmp( q, "tls1_1" ) == 0 || |
| 881 | strcmp( q, "dtls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 882 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 883 | else if( strcmp( q, "tls1_2" ) == 0 || |
| 884 | strcmp( q, "dtls1_2" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 885 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 886 | else |
| 887 | goto usage; |
| 888 | } |
| 889 | else if( strcmp( p, "max_version" ) == 0 ) |
| 890 | { |
| 891 | if( strcmp( q, "ssl3" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 892 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 893 | else if( strcmp( q, "tls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 894 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 895 | else if( strcmp( q, "tls1_1" ) == 0 || |
| 896 | strcmp( q, "dtls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 897 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 898 | else if( strcmp( q, "tls1_2" ) == 0 || |
| 899 | strcmp( q, "dtls1_2" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 900 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 901 | else |
| 902 | goto usage; |
| 903 | } |
Manuel Pégourié-Gonnard | bd47a58 | 2015-01-12 13:43:29 +0100 | [diff] [blame] | 904 | else if( strcmp( p, "arc4" ) == 0 ) |
| 905 | { |
| 906 | switch( atoi( q ) ) |
| 907 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 908 | case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break; |
| 909 | case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break; |
Manuel Pégourié-Gonnard | bd47a58 | 2015-01-12 13:43:29 +0100 | [diff] [blame] | 910 | default: goto usage; |
| 911 | } |
| 912 | } |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 913 | else if( strcmp( p, "allow_sha1" ) == 0 ) |
| 914 | { |
| 915 | switch( atoi( q ) ) |
| 916 | { |
| 917 | case 0: opt.allow_sha1 = 0; break; |
| 918 | case 1: opt.allow_sha1 = 1; break; |
| 919 | default: goto usage; |
| 920 | } |
| 921 | } |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 922 | else if( strcmp( p, "force_version" ) == 0 ) |
| 923 | { |
| 924 | if( strcmp( q, "ssl3" ) == 0 ) |
| 925 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 926 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0; |
| 927 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 928 | } |
| 929 | else if( strcmp( q, "tls1" ) == 0 ) |
| 930 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 931 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1; |
| 932 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 933 | } |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 934 | else if( strcmp( q, "tls1_1" ) == 0 ) |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 935 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 936 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
| 937 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 938 | } |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 939 | else if( strcmp( q, "tls1_2" ) == 0 ) |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 940 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 941 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3; |
| 942 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 943 | } |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 944 | else if( strcmp( q, "dtls1" ) == 0 ) |
| 945 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 946 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
| 947 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2; |
| 948 | opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM; |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 949 | } |
| 950 | else if( strcmp( q, "dtls1_2" ) == 0 ) |
| 951 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 952 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3; |
| 953 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3; |
| 954 | opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM; |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 955 | } |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 956 | else |
| 957 | goto usage; |
| 958 | } |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 959 | else if( strcmp( p, "auth_mode" ) == 0 ) |
| 960 | { |
| 961 | if( strcmp( q, "none" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 962 | opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 963 | else if( strcmp( q, "optional" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 964 | opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 965 | else if( strcmp( q, "required" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 966 | opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 967 | else |
| 968 | goto usage; |
| 969 | } |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 970 | else if( strcmp( p, "max_frag_len" ) == 0 ) |
| 971 | { |
| 972 | if( strcmp( q, "512" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 973 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 974 | else if( strcmp( q, "1024" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 975 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 976 | else if( strcmp( q, "2048" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 977 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 978 | else if( strcmp( q, "4096" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 979 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 980 | else |
| 981 | goto usage; |
| 982 | } |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 983 | else if( strcmp( p, "trunc_hmac" ) == 0 ) |
| 984 | { |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 985 | switch( atoi( q ) ) |
| 986 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 987 | case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break; |
| 988 | case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break; |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 989 | default: goto usage; |
| 990 | } |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 991 | } |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 992 | else if( strcmp( p, "hs_timeout" ) == 0 ) |
| 993 | { |
| 994 | if( ( p = strchr( q, '-' ) ) == NULL ) |
| 995 | goto usage; |
| 996 | *p++ = '\0'; |
| 997 | opt.hs_to_min = atoi( q ); |
| 998 | opt.hs_to_max = atoi( p ); |
| 999 | if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min ) |
| 1000 | goto usage; |
| 1001 | } |
Manuel Pégourié-Gonnard | b747c6c | 2018-08-12 13:28:53 +0200 | [diff] [blame] | 1002 | else if( strcmp( p, "mtu" ) == 0 ) |
| 1003 | { |
| 1004 | opt.dtls_mtu = atoi( q ); |
| 1005 | if( opt.dtls_mtu < 0 ) |
| 1006 | goto usage; |
| 1007 | } |
Hanno Becker | 4d61591 | 2018-08-14 13:33:30 +0100 | [diff] [blame] | 1008 | else if( strcmp( p, "dgram_packing" ) == 0 ) |
| 1009 | { |
| 1010 | opt.dgram_packing = atoi( q ); |
| 1011 | if( opt.dgram_packing != 0 && |
| 1012 | opt.dgram_packing != 1 ) |
| 1013 | { |
| 1014 | goto usage; |
| 1015 | } |
| 1016 | } |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 1017 | else if( strcmp( p, "recsplit" ) == 0 ) |
| 1018 | { |
| 1019 | opt.recsplit = atoi( q ); |
| 1020 | if( opt.recsplit < 0 || opt.recsplit > 1 ) |
| 1021 | goto usage; |
| 1022 | } |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 1023 | else if( strcmp( p, "dhmlen" ) == 0 ) |
| 1024 | { |
| 1025 | opt.dhmlen = atoi( q ); |
| 1026 | if( opt.dhmlen < 0 ) |
| 1027 | goto usage; |
| 1028 | } |
Andres Amaya Garcia | bfa3e09 | 2018-10-16 21:08:38 +0100 | [diff] [blame] | 1029 | else if( strcmp( p, "query_config" ) == 0 ) |
| 1030 | { |
Krzysztof Stachowiak | 3b0c430 | 2019-04-24 14:24:46 +0200 | [diff] [blame] | 1031 | mbedtls_exit( query_config( q ) ); |
Andres Amaya Garcia | bfa3e09 | 2018-10-16 21:08:38 +0100 | [diff] [blame] | 1032 | } |
Manuel Pégourié-Gonnard | 498e632 | 2020-02-17 11:04:33 +0100 | [diff] [blame] | 1033 | else if( strcmp( p, "skip_close_notify" ) == 0 ) |
| 1034 | { |
| 1035 | opt.skip_close_notify = atoi( q ); |
| 1036 | if( opt.skip_close_notify < 0 || opt.skip_close_notify > 1 ) |
| 1037 | goto usage; |
| 1038 | } |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 1039 | else |
| 1040 | goto usage; |
| 1041 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1042 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1043 | /* Event-driven IO is incompatible with the above custom |
| 1044 | * receive and send functions, as the polling builds on |
| 1045 | * refers to the underlying net_context. */ |
| 1046 | if( opt.event == 1 && opt.nbio != 1 ) |
| 1047 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1048 | mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1049 | opt.nbio = 1; |
| 1050 | } |
| 1051 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1052 | #if defined(MBEDTLS_DEBUG_C) |
| 1053 | mbedtls_debug_set_threshold( opt.debug_level ); |
Paul Bakker | c73079a | 2014-04-25 16:34:30 +0200 | [diff] [blame] | 1054 | #endif |
| 1055 | |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 1056 | if( opt.force_ciphersuite[0] > 0 ) |
| 1057 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1058 | const mbedtls_ssl_ciphersuite_t *ciphersuite_info; |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1059 | ciphersuite_info = |
| 1060 | mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] ); |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 1061 | |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 1062 | if( opt.max_version != -1 && |
| 1063 | ciphersuite_info->min_minor_ver > opt.max_version ) |
| 1064 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1065 | mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" ); |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 1066 | ret = 2; |
| 1067 | goto usage; |
| 1068 | } |
| 1069 | if( opt.min_version != -1 && |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 1070 | ciphersuite_info->max_minor_ver < opt.min_version ) |
| 1071 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1072 | mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" ); |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 1073 | ret = 2; |
| 1074 | goto usage; |
| 1075 | } |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1076 | |
| 1077 | /* If the server selects a version that's not supported by |
| 1078 | * this suite, then there will be no common ciphersuite... */ |
| 1079 | if( opt.max_version == -1 || |
| 1080 | opt.max_version > ciphersuite_info->max_minor_ver ) |
| 1081 | { |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 1082 | opt.max_version = ciphersuite_info->max_minor_ver; |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1083 | } |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 1084 | if( opt.min_version < ciphersuite_info->min_minor_ver ) |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1085 | { |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 1086 | opt.min_version = ciphersuite_info->min_minor_ver; |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1087 | /* DTLS starts with TLS 1.1 */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1088 | if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM && |
| 1089 | opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 ) |
| 1090 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1091 | } |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1092 | |
| 1093 | /* Enable RC4 if needed and not explicitly disabled */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1094 | if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 ) |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1095 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1096 | if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED ) |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1097 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1098 | mbedtls_printf( "forced RC4 ciphersuite with RC4 disabled\n" ); |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1099 | ret = 2; |
| 1100 | goto usage; |
| 1101 | } |
| 1102 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1103 | opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1104 | } |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 1105 | } |
| 1106 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1107 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1108 | /* |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1109 | * Unhexify the pre-shared key if any is given |
| 1110 | */ |
| 1111 | if( strlen( opt.psk ) ) |
| 1112 | { |
| 1113 | unsigned char c; |
| 1114 | size_t j; |
| 1115 | |
| 1116 | if( strlen( opt.psk ) % 2 != 0 ) |
| 1117 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1118 | mbedtls_printf( "pre-shared key not valid hex\n" ); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1119 | goto exit; |
| 1120 | } |
| 1121 | |
| 1122 | psk_len = strlen( opt.psk ) / 2; |
| 1123 | |
| 1124 | for( j = 0; j < strlen( opt.psk ); j += 2 ) |
| 1125 | { |
| 1126 | c = opt.psk[j]; |
| 1127 | if( c >= '0' && c <= '9' ) |
| 1128 | c -= '0'; |
| 1129 | else if( c >= 'a' && c <= 'f' ) |
| 1130 | c -= 'a' - 10; |
| 1131 | else if( c >= 'A' && c <= 'F' ) |
| 1132 | c -= 'A' - 10; |
| 1133 | else |
| 1134 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1135 | mbedtls_printf( "pre-shared key not valid hex\n" ); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1136 | goto exit; |
| 1137 | } |
| 1138 | psk[ j / 2 ] = c << 4; |
| 1139 | |
| 1140 | c = opt.psk[j + 1]; |
| 1141 | if( c >= '0' && c <= '9' ) |
| 1142 | c -= '0'; |
| 1143 | else if( c >= 'a' && c <= 'f' ) |
| 1144 | c -= 'a' - 10; |
| 1145 | else if( c >= 'A' && c <= 'F' ) |
| 1146 | c -= 'A' - 10; |
| 1147 | else |
| 1148 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1149 | mbedtls_printf( "pre-shared key not valid hex\n" ); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1150 | goto exit; |
| 1151 | } |
| 1152 | psk[ j / 2 ] |= c; |
| 1153 | } |
| 1154 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1155 | #endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */ |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1156 | |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 1157 | #if defined(MBEDTLS_ECP_C) |
| 1158 | if( opt.curves != NULL ) |
| 1159 | { |
| 1160 | p = (char *) opt.curves; |
| 1161 | i = 0; |
| 1162 | |
| 1163 | if( strcmp( p, "none" ) == 0 ) |
| 1164 | { |
| 1165 | curve_list[0] = MBEDTLS_ECP_DP_NONE; |
| 1166 | } |
| 1167 | else if( strcmp( p, "default" ) != 0 ) |
| 1168 | { |
| 1169 | /* Leave room for a final NULL in curve list */ |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 1170 | while( i < CURVE_LIST_SIZE - 1 && *p != '\0' ) |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 1171 | { |
| 1172 | q = p; |
| 1173 | |
| 1174 | /* Terminate the current string */ |
| 1175 | while( *p != ',' && *p != '\0' ) |
| 1176 | p++; |
| 1177 | if( *p == ',' ) |
| 1178 | *p++ = '\0'; |
| 1179 | |
| 1180 | if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL ) |
| 1181 | { |
| 1182 | curve_list[i++] = curve_cur->grp_id; |
| 1183 | } |
| 1184 | else |
| 1185 | { |
| 1186 | mbedtls_printf( "unknown curve %s\n", q ); |
| 1187 | mbedtls_printf( "supported curves: " ); |
| 1188 | for( curve_cur = mbedtls_ecp_curve_list(); |
| 1189 | curve_cur->grp_id != MBEDTLS_ECP_DP_NONE; |
| 1190 | curve_cur++ ) |
| 1191 | { |
| 1192 | mbedtls_printf( "%s ", curve_cur->name ); |
| 1193 | } |
| 1194 | mbedtls_printf( "\n" ); |
| 1195 | goto exit; |
| 1196 | } |
| 1197 | } |
| 1198 | |
| 1199 | mbedtls_printf("Number of curves: %d\n", i ); |
| 1200 | |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 1201 | if( i == CURVE_LIST_SIZE - 1 && *p != '\0' ) |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 1202 | { |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 1203 | mbedtls_printf( "curves list too long, maximum %d", |
| 1204 | CURVE_LIST_SIZE - 1 ); |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 1205 | goto exit; |
| 1206 | } |
| 1207 | |
| 1208 | curve_list[i] = MBEDTLS_ECP_DP_NONE; |
| 1209 | } |
| 1210 | } |
| 1211 | #endif /* MBEDTLS_ECP_C */ |
| 1212 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1213 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1214 | if( opt.alpn_string != NULL ) |
| 1215 | { |
| 1216 | p = (char *) opt.alpn_string; |
| 1217 | i = 0; |
| 1218 | |
| 1219 | /* Leave room for a final NULL in alpn_list */ |
Hanno Becker | 8651a43 | 2017-06-09 16:13:22 +0100 | [diff] [blame] | 1220 | while( i < ALPN_LIST_SIZE - 1 && *p != '\0' ) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1221 | { |
| 1222 | alpn_list[i++] = p; |
| 1223 | |
| 1224 | /* Terminate the current string and move on to next one */ |
| 1225 | while( *p != ',' && *p != '\0' ) |
| 1226 | p++; |
| 1227 | if( *p == ',' ) |
| 1228 | *p++ = '\0'; |
| 1229 | } |
| 1230 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1231 | #endif /* MBEDTLS_SSL_ALPN */ |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1232 | |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1233 | /* |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1234 | * 0. Initialize the RNG and the session data |
| 1235 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1236 | mbedtls_printf( "\n . Seeding the random number generator..." ); |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 1237 | fflush( stdout ); |
| 1238 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1239 | mbedtls_entropy_init( &entropy ); |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1240 | if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, |
| 1241 | &entropy, (const unsigned char *) pers, |
| 1242 | strlen( pers ) ) ) != 0 ) |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 1243 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1244 | mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n", |
| 1245 | -ret ); |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 1246 | goto exit; |
| 1247 | } |
| 1248 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1249 | mbedtls_printf( " ok\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1250 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1251 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1252 | /* |
| 1253 | * 1.1. Load the trusted CA |
| 1254 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1255 | mbedtls_printf( " . Loading the CA root certificate ..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1256 | fflush( stdout ); |
| 1257 | |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1258 | if( strcmp( opt.ca_path, "none" ) == 0 || |
| 1259 | strcmp( opt.ca_file, "none" ) == 0 ) |
| 1260 | { |
| 1261 | ret = 0; |
| 1262 | } |
| 1263 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1264 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 1265 | if( strlen( opt.ca_path ) ) |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1266 | ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path ); |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 1267 | else if( strlen( opt.ca_file ) ) |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1268 | ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1269 | else |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1270 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1271 | #if defined(MBEDTLS_CERTS_C) |
Hanno Becker | bb676f7 | 2019-02-01 08:15:06 +0000 | [diff] [blame] | 1272 | { |
| 1273 | #if defined(MBEDTLS_PEM_PARSE_C) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1274 | for( i = 0; mbedtls_test_cas[i] != NULL; i++ ) |
Manuel Pégourié-Gonnard | 2f16506 | 2015-03-27 10:20:26 +0100 | [diff] [blame] | 1275 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1276 | ret = mbedtls_x509_crt_parse( &cacert, |
| 1277 | (const unsigned char *) mbedtls_test_cas[i], |
| 1278 | mbedtls_test_cas_len[i] ); |
Manuel Pégourié-Gonnard | 2f16506 | 2015-03-27 10:20:26 +0100 | [diff] [blame] | 1279 | if( ret != 0 ) |
| 1280 | break; |
| 1281 | } |
Hanno Becker | bb676f7 | 2019-02-01 08:15:06 +0000 | [diff] [blame] | 1282 | if( ret == 0 ) |
| 1283 | #endif /* MBEDTLS_PEM_PARSE_C */ |
| 1284 | for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ ) |
| 1285 | { |
| 1286 | ret = mbedtls_x509_crt_parse_der( &cacert, |
| 1287 | (const unsigned char *) mbedtls_test_cas_der[i], |
| 1288 | mbedtls_test_cas_der_len[i] ); |
| 1289 | if( ret != 0 ) |
| 1290 | break; |
| 1291 | } |
| 1292 | } |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1293 | #else |
| 1294 | { |
| 1295 | ret = 1; |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1296 | mbedtls_printf( "MBEDTLS_CERTS_C not defined." ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1297 | } |
Hanno Becker | bb676f7 | 2019-02-01 08:15:06 +0000 | [diff] [blame] | 1298 | #endif /* MBEDTLS_CERTS_C */ |
Paul Bakker | 4248823 | 2012-05-16 08:21:05 +0000 | [diff] [blame] | 1299 | if( ret < 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1300 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1301 | mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", |
| 1302 | -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1303 | goto exit; |
| 1304 | } |
| 1305 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1306 | mbedtls_printf( " ok (%d skipped)\n", ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1307 | |
| 1308 | /* |
| 1309 | * 1.2. Load own certificate and private key |
| 1310 | * |
| 1311 | * (can be skipped if client authentication is not required) |
| 1312 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1313 | mbedtls_printf( " . Loading the client cert. and key..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1314 | fflush( stdout ); |
| 1315 | |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1316 | if( strcmp( opt.crt_file, "none" ) == 0 ) |
| 1317 | ret = 0; |
| 1318 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1319 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 1320 | if( strlen( opt.crt_file ) ) |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1321 | ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1322 | else |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1323 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1324 | #if defined(MBEDTLS_CERTS_C) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1325 | ret = mbedtls_x509_crt_parse( &clicert, |
| 1326 | (const unsigned char *) mbedtls_test_cli_crt, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1327 | mbedtls_test_cli_crt_len ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1328 | #else |
| 1329 | { |
| 1330 | ret = 1; |
Hanno Becker | c258c44 | 2018-12-05 16:49:42 +0000 | [diff] [blame] | 1331 | mbedtls_printf( "MBEDTLS_CERTS_C not defined." ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1332 | } |
| 1333 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1334 | if( ret != 0 ) |
| 1335 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1336 | mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", |
| 1337 | -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1338 | goto exit; |
| 1339 | } |
| 1340 | |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1341 | if( strcmp( opt.key_file, "none" ) == 0 ) |
| 1342 | ret = 0; |
| 1343 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1344 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 1345 | if( strlen( opt.key_file ) ) |
Hanno Becker | a724206 | 2019-03-05 16:02:15 +0000 | [diff] [blame] | 1346 | ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" ); |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 1347 | else |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1348 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1349 | #if defined(MBEDTLS_CERTS_C) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1350 | ret = mbedtls_pk_parse_key( &pkey, |
| 1351 | (const unsigned char *) mbedtls_test_cli_key, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1352 | mbedtls_test_cli_key_len, NULL, 0 ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1353 | #else |
| 1354 | { |
| 1355 | ret = 1; |
Hanno Becker | c258c44 | 2018-12-05 16:49:42 +0000 | [diff] [blame] | 1356 | mbedtls_printf( "MBEDTLS_CERTS_C not defined." ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1357 | } |
| 1358 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1359 | if( ret != 0 ) |
| 1360 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1361 | mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n", |
| 1362 | -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1363 | goto exit; |
| 1364 | } |
| 1365 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1366 | mbedtls_printf( " ok\n" ); |
| 1367 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1368 | |
| 1369 | /* |
| 1370 | * 2. Start the connection |
| 1371 | */ |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 1372 | if( opt.server_addr == NULL) |
| 1373 | opt.server_addr = opt.server_name; |
| 1374 | |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 1375 | mbedtls_printf( " . Connecting to %s/%s/%s...", |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1376 | opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp", |
Manuel Pégourié-Gonnard | 8a06d9c | 2014-03-23 18:23:41 +0100 | [diff] [blame] | 1377 | opt.server_addr, opt.server_port ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1378 | fflush( stdout ); |
| 1379 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1380 | if( ( ret = mbedtls_net_connect( &server_fd, |
| 1381 | opt.server_addr, opt.server_port, |
| 1382 | opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? |
| 1383 | MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1384 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1385 | mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n", |
| 1386 | -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1387 | goto exit; |
| 1388 | } |
| 1389 | |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1390 | if( opt.nbio > 0 ) |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 1391 | ret = mbedtls_net_set_nonblock( &server_fd ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1392 | else |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 1393 | ret = mbedtls_net_set_block( &server_fd ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1394 | if( ret != 0 ) |
| 1395 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1396 | mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", |
| 1397 | -ret ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1398 | goto exit; |
| 1399 | } |
| 1400 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1401 | mbedtls_printf( " ok\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1402 | |
| 1403 | /* |
| 1404 | * 3. Setup stuff |
| 1405 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1406 | mbedtls_printf( " . Setting up the SSL/TLS structure..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1407 | fflush( stdout ); |
| 1408 | |
Manuel Pégourié-Gonnard | 419d5ae | 2015-05-04 19:32:36 +0200 | [diff] [blame] | 1409 | if( ( ret = mbedtls_ssl_config_defaults( &conf, |
| 1410 | MBEDTLS_SSL_IS_CLIENT, |
Manuel Pégourié-Gonnard | b31c5f6 | 2015-06-17 13:53:47 +0200 | [diff] [blame] | 1411 | opt.transport, |
| 1412 | MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 ) |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 1413 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1414 | mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n", |
| 1415 | -ret ); |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 1416 | goto exit; |
| 1417 | } |
| 1418 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1419 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Gilles Peskine | ef86ab2 | 2017-05-05 18:59:02 +0200 | [diff] [blame] | 1420 | /* The default algorithms profile disables SHA-1, but our tests still |
| 1421 | rely on it heavily. */ |
Gilles Peskine | bc70a18 | 2017-05-09 15:59:24 +0200 | [diff] [blame] | 1422 | if( opt.allow_sha1 > 0 ) |
| 1423 | { |
| 1424 | crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 ); |
| 1425 | mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test ); |
| 1426 | mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test ); |
| 1427 | } |
Gilles Peskine | ef86ab2 | 2017-05-05 18:59:02 +0200 | [diff] [blame] | 1428 | |
Paul Bakker | 915275b | 2012-09-28 07:10:55 +0000 | [diff] [blame] | 1429 | if( opt.debug_level > 0 ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1430 | mbedtls_ssl_conf_verify( &conf, my_verify, NULL ); |
Gilles Peskine | ef86ab2 | 2017-05-05 18:59:02 +0200 | [diff] [blame] | 1431 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | 915275b | 2012-09-28 07:10:55 +0000 | [diff] [blame] | 1432 | |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 1433 | if( opt.auth_mode != DFL_AUTH_MODE ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1434 | mbedtls_ssl_conf_authmode( &conf, opt.auth_mode ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1435 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1436 | #if defined(MBEDTLS_SSL_PROTO_DTLS) |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 1437 | if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1438 | mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min, |
| 1439 | opt.hs_to_max ); |
Manuel Pégourié-Gonnard | b747c6c | 2018-08-12 13:28:53 +0200 | [diff] [blame] | 1440 | |
Hanno Becker | 4d61591 | 2018-08-14 13:33:30 +0100 | [diff] [blame] | 1441 | if( opt.dgram_packing != DFL_DGRAM_PACKING ) |
Hanno Becker | 1841b0a | 2018-08-24 11:13:57 +0100 | [diff] [blame] | 1442 | mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1443 | #endif /* MBEDTLS_SSL_PROTO_DTLS */ |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 1444 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1445 | #if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1446 | if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1447 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1448 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", |
| 1449 | ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1450 | goto exit; |
| 1451 | } |
Paul Bakker | 05decb2 | 2013-08-15 13:33:48 +0200 | [diff] [blame] | 1452 | #endif |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 1453 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1454 | #if defined(MBEDTLS_SSL_TRUNCATED_HMAC) |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 1455 | if( opt.trunc_hmac != DFL_TRUNC_HMAC ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1456 | mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac ); |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 1457 | #endif |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 1458 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1459 | #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 1460 | if( opt.extended_ms != DFL_EXTENDED_MS ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1461 | mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms ); |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 1462 | #endif |
| 1463 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1464 | #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 1465 | if( opt.etm != DFL_ETM ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1466 | mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm ); |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 1467 | #endif |
| 1468 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1469 | #if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING) |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 1470 | if( opt.recsplit != DFL_RECSPLIT ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1471 | mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1472 | ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED |
| 1473 | : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED ); |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 1474 | #endif |
| 1475 | |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 1476 | #if defined(MBEDTLS_DHM_C) |
| 1477 | if( opt.dhmlen != DFL_DHMLEN ) |
| 1478 | mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen ); |
| 1479 | #endif |
| 1480 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1481 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1482 | if( opt.alpn_string != NULL ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1483 | if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1484 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1485 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", |
| 1486 | ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1487 | goto exit; |
| 1488 | } |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1489 | #endif |
| 1490 | |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1491 | mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg ); |
| 1492 | mbedtls_ssl_conf_dbg( &conf, my_debug, stdout ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1493 | |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1494 | mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1495 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1496 | #if defined(MBEDTLS_SSL_SESSION_TICKETS) |
Manuel Pégourié-Gonnard | b596abf | 2015-05-20 10:45:29 +0200 | [diff] [blame] | 1497 | mbedtls_ssl_conf_session_tickets( &conf, opt.tickets ); |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 1498 | #endif |
Manuel Pégourié-Gonnard | aa0d4d1 | 2013-08-03 13:02:31 +0200 | [diff] [blame] | 1499 | |
Paul Bakker | 645ce3a | 2012-10-31 12:32:41 +0000 | [diff] [blame] | 1500 | if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1501 | mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite ); |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1502 | |
Manuel Pégourié-Gonnard | 66dc555 | 2015-05-14 12:28:21 +0200 | [diff] [blame] | 1503 | #if defined(MBEDTLS_ARC4_C) |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1504 | if( opt.arc4 != DFL_ARC4 ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1505 | mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 ); |
Manuel Pégourié-Gonnard | 66dc555 | 2015-05-14 12:28:21 +0200 | [diff] [blame] | 1506 | #endif |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 1507 | |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 1508 | if( opt.allow_legacy != DFL_ALLOW_LEGACY ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1509 | mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1510 | #if defined(MBEDTLS_SSL_RENEGOTIATION) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1511 | mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation ); |
Manuel Pégourié-Gonnard | 615e677 | 2014-11-03 08:23:14 +0100 | [diff] [blame] | 1512 | #endif |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 1513 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1514 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1515 | if( strcmp( opt.ca_path, "none" ) != 0 && |
| 1516 | strcmp( opt.ca_file, "none" ) != 0 ) |
| 1517 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1518 | mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL ); |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1519 | } |
| 1520 | if( strcmp( opt.crt_file, "none" ) != 0 && |
| 1521 | strcmp( opt.key_file, "none" ) != 0 ) |
| 1522 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1523 | if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1524 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1525 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", |
| 1526 | ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1527 | goto exit; |
| 1528 | } |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1529 | } |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1530 | #endif |
| 1531 | |
Hanno Becker | e6706e6 | 2017-05-15 16:05:15 +0100 | [diff] [blame] | 1532 | #if defined(MBEDTLS_ECP_C) |
| 1533 | if( opt.curves != NULL && |
| 1534 | strcmp( opt.curves, "default" ) != 0 ) |
| 1535 | { |
| 1536 | mbedtls_ssl_conf_curves( &conf, curve_list ); |
| 1537 | } |
| 1538 | #endif |
| 1539 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1540 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1541 | if( ( ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len, |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1542 | (const unsigned char *) opt.psk_identity, |
| 1543 | strlen( opt.psk_identity ) ) ) != 0 ) |
| 1544 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1545 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n", |
| 1546 | ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1547 | goto exit; |
| 1548 | } |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1549 | #endif |
| 1550 | |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 1551 | if( opt.min_version != DFL_MIN_VERSION ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1552 | mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, |
| 1553 | opt.min_version ); |
Manuel Pégourié-Gonnard | 864a81f | 2014-02-10 14:25:10 +0100 | [diff] [blame] | 1554 | |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 1555 | if( opt.max_version != DFL_MAX_VERSION ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1556 | mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, |
| 1557 | opt.max_version ); |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 1558 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1559 | #if defined(MBEDTLS_SSL_FALLBACK_SCSV) |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 1560 | if( opt.fallback != DFL_FALLBACK ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1561 | mbedtls_ssl_conf_fallback( &conf, opt.fallback ); |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 1562 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1563 | |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1564 | if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 ) |
| 1565 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1566 | mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", |
| 1567 | -ret ); |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1568 | goto exit; |
| 1569 | } |
| 1570 | |
| 1571 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 1572 | if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 ) |
| 1573 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1574 | mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n", |
| 1575 | ret ); |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1576 | goto exit; |
| 1577 | } |
| 1578 | #endif |
| 1579 | |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 1580 | #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) |
| 1581 | if( opt.ecjpake_pw != DFL_ECJPAKE_PW ) |
| 1582 | { |
| 1583 | if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl, |
| 1584 | (const unsigned char *) opt.ecjpake_pw, |
| 1585 | strlen( opt.ecjpake_pw ) ) ) != 0 ) |
| 1586 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1587 | mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n", |
| 1588 | ret ); |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 1589 | goto exit; |
| 1590 | } |
| 1591 | } |
| 1592 | #endif |
| 1593 | |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1594 | if( opt.nbio == 2 ) |
| 1595 | mbedtls_ssl_set_bio( &ssl, &server_fd, my_send, my_recv, NULL ); |
| 1596 | else |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1597 | mbedtls_ssl_set_bio( &ssl, &server_fd, |
| 1598 | mbedtls_net_send, mbedtls_net_recv, |
Manuel Pégourié-Gonnard | d4f04db | 2015-05-14 18:58:17 +0200 | [diff] [blame] | 1599 | opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL ); |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1600 | |
Manuel Pégourié-Gonnard | 6e7aaca | 2018-08-20 10:37:23 +0200 | [diff] [blame] | 1601 | #if defined(MBEDTLS_SSL_PROTO_DTLS) |
| 1602 | if( opt.dtls_mtu != DFL_DTLS_MTU ) |
| 1603 | mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu ); |
| 1604 | #endif |
| 1605 | |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1606 | #if defined(MBEDTLS_TIMING_C) |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 1607 | mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay, |
| 1608 | mbedtls_timing_get_delay ); |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1609 | #endif |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 1610 | |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 1611 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
| 1612 | if( opt.ec_max_ops != DFL_EC_MAX_OPS ) |
| 1613 | mbedtls_ecp_set_max_ops( opt.ec_max_ops ); |
| 1614 | #endif |
| 1615 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1616 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1617 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1618 | /* |
| 1619 | * 4. Handshake |
| 1620 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1621 | mbedtls_printf( " . Performing the SSL/TLS handshake..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1622 | fflush( stdout ); |
| 1623 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1624 | while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1625 | { |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 1626 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1627 | ret != MBEDTLS_ERR_SSL_WANT_WRITE && |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 1628 | ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Paul Bakker | 40e4694 | 2009-01-03 21:51:57 +0000 | [diff] [blame] | 1629 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1630 | mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n", |
| 1631 | -ret ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1632 | if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED ) |
| 1633 | mbedtls_printf( |
Manuel Pégourié-Gonnard | fcf2fc2 | 2014-03-11 11:10:27 +0100 | [diff] [blame] | 1634 | " Unable to verify the server's certificate. " |
| 1635 | "Either it is invalid,\n" |
| 1636 | " or you didn't set ca_file or ca_path " |
| 1637 | "to an appropriate value.\n" |
| 1638 | " Alternatively, you may want to use " |
| 1639 | "auth_mode=optional for testing purposes.\n" ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1640 | mbedtls_printf( "\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1641 | goto exit; |
Paul Bakker | 40e4694 | 2009-01-03 21:51:57 +0000 | [diff] [blame] | 1642 | } |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1643 | |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1644 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 25781f9 | 2018-10-15 15:28:16 +0200 | [diff] [blame] | 1645 | if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
| 1646 | continue; |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1647 | #endif |
| 1648 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1649 | /* For event-driven IO, wait for socket to become available */ |
| 1650 | if( opt.event == 1 /* level triggered IO */ ) |
| 1651 | { |
| 1652 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 1653 | ret = idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1654 | #else |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 1655 | ret = idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1656 | #endif |
Hanno Becker | adfa64f | 2018-03-15 11:35:07 +0000 | [diff] [blame] | 1657 | if( ret != 0 ) |
| 1658 | goto exit; |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1659 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1660 | } |
| 1661 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1662 | mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n", |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1663 | mbedtls_ssl_get_version( &ssl ), |
| 1664 | mbedtls_ssl_get_ciphersuite( &ssl ) ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1665 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1666 | if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 ) |
| 1667 | mbedtls_printf( " [ Record expansion is %d ]\n", ret ); |
Manuel Pégourié-Gonnard | 9b35f18 | 2014-10-14 17:47:31 +0200 | [diff] [blame] | 1668 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1669 | mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" ); |
Manuel Pégourié-Gonnard | 9b35f18 | 2014-10-14 17:47:31 +0200 | [diff] [blame] | 1670 | |
Manuel Pégourié-Gonnard | a2cda6b | 2015-08-31 18:30:52 +0200 | [diff] [blame] | 1671 | #if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) |
| 1672 | mbedtls_printf( " [ Maximum fragment length is %u ]\n", |
| 1673 | (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) ); |
| 1674 | #endif |
| 1675 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1676 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1677 | if( opt.alpn_string != NULL ) |
| 1678 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1679 | const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl ); |
| 1680 | mbedtls_printf( " [ Application Layer Protocol is %s ]\n", |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1681 | alp ? alp : "(none)" ); |
| 1682 | } |
| 1683 | #endif |
| 1684 | |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1685 | if( opt.reconnect != 0 ) |
| 1686 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1687 | mbedtls_printf(" . Saving session for reuse..." ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1688 | fflush( stdout ); |
| 1689 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1690 | if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1691 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1692 | mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n", |
| 1693 | -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1694 | goto exit; |
| 1695 | } |
| 1696 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1697 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1698 | } |
| 1699 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1700 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1701 | /* |
| 1702 | * 5. Verify the server certificate |
| 1703 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1704 | mbedtls_printf( " . Verifying peer X.509 certificate..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1705 | |
Manuel Pégourié-Gonnard | e6ef16f | 2015-05-11 19:54:43 +0200 | [diff] [blame] | 1706 | if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1707 | { |
Manuel Pégourié-Gonnard | 89addc4 | 2015-04-20 10:56:18 +0100 | [diff] [blame] | 1708 | char vrfy_buf[512]; |
| 1709 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1710 | mbedtls_printf( " failed\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1711 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1712 | mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), |
| 1713 | " ! ", flags ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1714 | |
Manuel Pégourié-Gonnard | 89addc4 | 2015-04-20 10:56:18 +0100 | [diff] [blame] | 1715 | mbedtls_printf( "%s\n", vrfy_buf ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1716 | } |
| 1717 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1718 | mbedtls_printf( " ok\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1719 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1720 | if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL ) |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1721 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1722 | mbedtls_printf( " . Peer certificate information ...\n" ); |
| 1723 | mbedtls_x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ", |
| 1724 | mbedtls_ssl_get_peer_cert( &ssl ) ); |
| 1725 | mbedtls_printf( "%s\n", buf ); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1726 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1727 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1728 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1729 | #if defined(MBEDTLS_SSL_RENEGOTIATION) |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1730 | if( opt.renegotiate ) |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1731 | { |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1732 | /* |
| 1733 | * Perform renegotiation (this must be done when the server is waiting |
| 1734 | * for input from our side). |
| 1735 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1736 | mbedtls_printf( " . Performing renegotiation..." ); |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1737 | fflush( stdout ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1738 | while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 ) |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1739 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1740 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 1741 | ret != MBEDTLS_ERR_SSL_WANT_WRITE && |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 1742 | ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1743 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1744 | mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", |
| 1745 | ret ); |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1746 | goto exit; |
| 1747 | } |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1748 | |
Manuel Pégourié-Gonnard | 25781f9 | 2018-10-15 15:28:16 +0200 | [diff] [blame] | 1749 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
| 1750 | if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
| 1751 | continue; |
| 1752 | #endif |
| 1753 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1754 | /* For event-driven IO, wait for socket to become available */ |
| 1755 | if( opt.event == 1 /* level triggered IO */ ) |
| 1756 | { |
| 1757 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1758 | idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1759 | #else |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1760 | idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1761 | #endif |
| 1762 | } |
| 1763 | |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1764 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1765 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1766 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1767 | #endif /* MBEDTLS_SSL_RENEGOTIATION */ |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1768 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1769 | /* |
| 1770 | * 6. Write the GET request |
| 1771 | */ |
Manuel Pégourié-Gonnard | e63582a | 2014-10-14 11:47:21 +0200 | [diff] [blame] | 1772 | retry_left = opt.max_resend; |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1773 | send_request: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1774 | mbedtls_printf( " > Write to server:" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1775 | fflush( stdout ); |
| 1776 | |
Hanno Becker | e4ad3e8 | 2017-09-18 15:05:46 +0100 | [diff] [blame] | 1777 | len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST, |
| 1778 | opt.request_page ); |
Manuel Pégourié-Gonnard | 9de64f5 | 2015-07-01 15:51:43 +0200 | [diff] [blame] | 1779 | tail_len = (int) strlen( GET_REQUEST_END ); |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1780 | |
| 1781 | /* Add padding to GET request to reach opt.request_size in length */ |
| 1782 | if( opt.request_size != DFL_REQUEST_SIZE && |
| 1783 | len + tail_len < opt.request_size ) |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 1784 | { |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1785 | memset( buf + len, 'A', opt.request_size - len - tail_len ); |
| 1786 | len += opt.request_size - len - tail_len; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 1787 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1788 | |
Hanno Becker | e4ad3e8 | 2017-09-18 15:05:46 +0100 | [diff] [blame] | 1789 | strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 ); |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1790 | len += tail_len; |
| 1791 | |
Manuel Pégourié-Gonnard | dea29c5 | 2014-06-18 13:07:56 +0200 | [diff] [blame] | 1792 | /* Truncate if request size is smaller than the "natural" size */ |
| 1793 | if( opt.request_size != DFL_REQUEST_SIZE && |
| 1794 | len > opt.request_size ) |
| 1795 | { |
| 1796 | len = opt.request_size; |
| 1797 | |
| 1798 | /* Still end with \r\n unless that's really not possible */ |
| 1799 | if( len >= 2 ) buf[len - 2] = '\r'; |
| 1800 | if( len >= 1 ) buf[len - 1] = '\n'; |
| 1801 | } |
| 1802 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1803 | if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1804 | { |
Andres Amaya Garcia | ce6fbac | 2018-07-04 09:29:34 +0100 | [diff] [blame] | 1805 | written = 0; |
| 1806 | frags = 0; |
| 1807 | |
| 1808 | do |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1809 | { |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1810 | while( ( ret = mbedtls_ssl_write( &ssl, buf + written, |
Andres Amaya Garcia | ce6fbac | 2018-07-04 09:29:34 +0100 | [diff] [blame] | 1811 | len - written ) ) < 0 ) |
Manuel Pégourié-Gonnard | 787b658 | 2013-07-16 15:43:17 +0200 | [diff] [blame] | 1812 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1813 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 1814 | ret != MBEDTLS_ERR_SSL_WANT_WRITE && |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 1815 | ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1816 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1817 | mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n", |
| 1818 | -ret ); |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1819 | goto exit; |
| 1820 | } |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1821 | |
| 1822 | /* For event-driven IO, wait for socket to become available */ |
| 1823 | if( opt.event == 1 /* level triggered IO */ ) |
| 1824 | { |
| 1825 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1826 | idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1827 | #else |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1828 | idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1829 | #endif |
| 1830 | } |
Manuel Pégourié-Gonnard | 787b658 | 2013-07-16 15:43:17 +0200 | [diff] [blame] | 1831 | } |
Andres Amaya Garcia | ce6fbac | 2018-07-04 09:29:34 +0100 | [diff] [blame] | 1832 | |
| 1833 | frags++; |
| 1834 | written += ret; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1835 | } |
Andres Amaya Garcia | ce6fbac | 2018-07-04 09:29:34 +0100 | [diff] [blame] | 1836 | while( written < len ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1837 | } |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1838 | else /* Not stream, so datagram */ |
| 1839 | { |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1840 | while( 1 ) |
| 1841 | { |
| 1842 | ret = mbedtls_ssl_write( &ssl, buf, len ); |
| 1843 | |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1844 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 1845 | if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1846 | continue; |
| 1847 | #endif |
| 1848 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1849 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1850 | ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
| 1851 | break; |
| 1852 | |
| 1853 | /* For event-driven IO, wait for socket to become available */ |
| 1854 | if( opt.event == 1 /* level triggered IO */ ) |
| 1855 | { |
| 1856 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1857 | idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1858 | #else |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1859 | idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1860 | #endif |
| 1861 | } |
| 1862 | } |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1863 | |
| 1864 | if( ret < 0 ) |
| 1865 | { |
Hanno Becker | df4180a | 2017-10-27 13:43:58 +0100 | [diff] [blame] | 1866 | mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", |
| 1867 | ret ); |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1868 | goto exit; |
| 1869 | } |
| 1870 | |
| 1871 | frags = 1; |
| 1872 | written = ret; |
Hanno Becker | e4ad3e8 | 2017-09-18 15:05:46 +0100 | [diff] [blame] | 1873 | |
| 1874 | if( written < len ) |
| 1875 | { |
| 1876 | mbedtls_printf( " warning\n ! request didn't fit into single datagram and " |
| 1877 | "was truncated to size %u", (unsigned) written ); |
| 1878 | } |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1879 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1880 | |
Manuel Pégourié-Gonnard | 787b658 | 2013-07-16 15:43:17 +0200 | [diff] [blame] | 1881 | buf[written] = '\0'; |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1882 | mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n", |
| 1883 | written, frags, (char *) buf ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1884 | |
Andres Amaya Garcia | ce6fbac | 2018-07-04 09:29:34 +0100 | [diff] [blame] | 1885 | /* Send a non-empty request if request_size == 0 */ |
| 1886 | if ( len == 0 ) |
| 1887 | { |
| 1888 | opt.request_size = DFL_REQUEST_SIZE; |
| 1889 | goto send_request; |
| 1890 | } |
| 1891 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1892 | /* |
| 1893 | * 7. Read the HTTP response |
| 1894 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1895 | mbedtls_printf( " < Read from server:" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1896 | fflush( stdout ); |
| 1897 | |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1898 | /* |
| 1899 | * TLS and DTLS need different reading styles (stream vs datagram) |
| 1900 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1901 | if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ) |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1902 | { |
| 1903 | do |
| 1904 | { |
| 1905 | len = sizeof( buf ) - 1; |
| 1906 | memset( buf, 0, sizeof( buf ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1907 | ret = mbedtls_ssl_read( &ssl, buf, len ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1908 | |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1909 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 1910 | if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1911 | continue; |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1912 | #endif |
| 1913 | |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1914 | if( ret == MBEDTLS_ERR_SSL_WANT_READ || |
| 1915 | ret == MBEDTLS_ERR_SSL_WANT_WRITE ) |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1916 | { |
| 1917 | /* For event-driven IO, wait for socket to become available */ |
| 1918 | if( opt.event == 1 /* level triggered IO */ ) |
| 1919 | { |
| 1920 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1921 | idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1922 | #else |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1923 | idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1924 | #endif |
| 1925 | } |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1926 | continue; |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1927 | } |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1928 | |
| 1929 | if( ret <= 0 ) |
| 1930 | { |
| 1931 | switch( ret ) |
| 1932 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1933 | case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY: |
| 1934 | mbedtls_printf( " connection was closed gracefully\n" ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1935 | ret = 0; |
| 1936 | goto close_notify; |
| 1937 | |
| 1938 | case 0: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1939 | case MBEDTLS_ERR_NET_CONN_RESET: |
| 1940 | mbedtls_printf( " connection was reset by peer\n" ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1941 | ret = 0; |
| 1942 | goto reconnect; |
| 1943 | |
| 1944 | default: |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 1945 | mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", |
| 1946 | -ret ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1947 | goto exit; |
| 1948 | } |
| 1949 | } |
| 1950 | |
| 1951 | len = ret; |
| 1952 | buf[len] = '\0'; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1953 | mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1954 | |
| 1955 | /* End of message should be detected according to the syntax of the |
| 1956 | * application protocol (eg HTTP), just use a dummy test here. */ |
| 1957 | if( ret > 0 && buf[len-1] == '\n' ) |
| 1958 | { |
| 1959 | ret = 0; |
| 1960 | break; |
| 1961 | } |
| 1962 | } |
| 1963 | while( 1 ); |
| 1964 | } |
| 1965 | else /* Not stream, so datagram */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1966 | { |
| 1967 | len = sizeof( buf ) - 1; |
| 1968 | memset( buf, 0, sizeof( buf ) ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1969 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1970 | while( 1 ) |
| 1971 | { |
| 1972 | ret = mbedtls_ssl_read( &ssl, buf, len ); |
| 1973 | |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1974 | #if defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 1975 | if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | da19f4c | 2018-06-12 12:40:54 +0200 | [diff] [blame] | 1976 | continue; |
| 1977 | #endif |
| 1978 | |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1979 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1980 | ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
| 1981 | break; |
| 1982 | |
| 1983 | /* For event-driven IO, wait for socket to become available */ |
| 1984 | if( opt.event == 1 /* level triggered IO */ ) |
| 1985 | { |
| 1986 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1987 | idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1988 | #else |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 1989 | idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 1990 | #endif |
| 1991 | } |
| 1992 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1993 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1994 | if( ret <= 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1995 | { |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1996 | switch( ret ) |
| 1997 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1998 | case MBEDTLS_ERR_SSL_TIMEOUT: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1999 | mbedtls_printf( " timeout\n" ); |
Manuel Pégourié-Gonnard | e63582a | 2014-10-14 11:47:21 +0200 | [diff] [blame] | 2000 | if( retry_left-- > 0 ) |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 2001 | goto send_request; |
| 2002 | goto exit; |
| 2003 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2004 | case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY: |
| 2005 | mbedtls_printf( " connection was closed gracefully\n" ); |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2006 | ret = 0; |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 2007 | goto close_notify; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2008 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2009 | default: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2010 | mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret ); |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2011 | goto exit; |
| 2012 | } |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 2013 | } |
| 2014 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2015 | len = ret; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 2016 | buf[len] = '\0'; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2017 | mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 2018 | ret = 0; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2019 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2020 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2021 | /* |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 2022 | * 7b. Simulate hard reset and reconnect from same port? |
| 2023 | */ |
| 2024 | if( opt.reconnect_hard != 0 ) |
| 2025 | { |
| 2026 | opt.reconnect_hard = 0; |
| 2027 | |
| 2028 | mbedtls_printf( " . Restarting connection from same port..." ); |
| 2029 | fflush( stdout ); |
| 2030 | |
| 2031 | if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 ) |
| 2032 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2033 | mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n", |
| 2034 | -ret ); |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 2035 | goto exit; |
| 2036 | } |
| 2037 | |
| 2038 | while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) |
| 2039 | { |
| 2040 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 2041 | ret != MBEDTLS_ERR_SSL_WANT_WRITE && |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 2042 | ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 2043 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2044 | mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", |
| 2045 | -ret ); |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 2046 | goto exit; |
| 2047 | } |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 2048 | |
| 2049 | /* For event-driven IO, wait for socket to become available */ |
| 2050 | if( opt.event == 1 /* level triggered IO */ ) |
| 2051 | { |
| 2052 | #if defined(MBEDTLS_TIMING_C) |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 2053 | idle( &server_fd, &timer, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 2054 | #else |
Hanno Becker | 197a91c | 2017-10-31 10:58:53 +0000 | [diff] [blame] | 2055 | idle( &server_fd, ret ); |
Hanno Becker | 16970d2 | 2017-10-10 15:56:37 +0100 | [diff] [blame] | 2056 | #endif |
| 2057 | } |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 2058 | } |
| 2059 | |
| 2060 | mbedtls_printf( " ok\n" ); |
| 2061 | |
| 2062 | goto send_request; |
| 2063 | } |
| 2064 | |
| 2065 | /* |
| 2066 | * 7c. Continue doing data exchanges? |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 2067 | */ |
| 2068 | if( --opt.exchanges > 0 ) |
| 2069 | goto send_request; |
| 2070 | |
| 2071 | /* |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 2072 | * 8. Done, cleanly close the connection |
| 2073 | */ |
| 2074 | close_notify: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2075 | mbedtls_printf( " . Closing the connection..." ); |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 2076 | fflush( stdout ); |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 2077 | |
Manuel Pégourié-Gonnard | 498e632 | 2020-02-17 11:04:33 +0100 | [diff] [blame] | 2078 | /* |
| 2079 | * Most of the time sending a close_notify before closing is the right |
| 2080 | * thing to do. However, when the server already knows how many messages |
| 2081 | * are expected and closes the connection by itself, this alert becomes |
| 2082 | * redundant. Sometimes with DTLS this redundancy becomes a problem by |
| 2083 | * leading to a race condition where the server might close the connection |
| 2084 | * before seeing the alert, and since UDP is connection-less when the |
| 2085 | * alert arrives it will be seen as a new connection, which will fail as |
| 2086 | * the alert is clearly not a valid ClientHello. This may cause spurious |
| 2087 | * failures in tests that use DTLS and resumption with ssl_server2 in |
| 2088 | * ssl-opt.sh, avoided by enabling skip_close_notify client-side. |
| 2089 | */ |
| 2090 | if( opt.skip_close_notify == 0 ) |
| 2091 | { |
| 2092 | /* No error checking, the connection might be closed already */ |
| 2093 | do ret = mbedtls_ssl_close_notify( &ssl ); |
| 2094 | while( ret == MBEDTLS_ERR_SSL_WANT_WRITE ); |
| 2095 | ret = 0; |
| 2096 | } |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 2097 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2098 | mbedtls_printf( " done\n" ); |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 2099 | |
| 2100 | /* |
| 2101 | * 9. Reconnect? |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2102 | */ |
| 2103 | reconnect: |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2104 | if( opt.reconnect != 0 ) |
| 2105 | { |
Manuel Pégourié-Gonnard | cf2e97e | 2013-08-02 15:04:36 +0200 | [diff] [blame] | 2106 | --opt.reconnect; |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2107 | |
Manuel Pégourié-Gonnard | 3d7d00a | 2015-06-30 15:55:03 +0200 | [diff] [blame] | 2108 | mbedtls_net_free( &server_fd ); |
Manuel Pégourié-Gonnard | 6b0d268 | 2014-03-25 11:24:43 +0100 | [diff] [blame] | 2109 | |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 2110 | #if defined(MBEDTLS_TIMING_C) |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 2111 | if( opt.reco_delay > 0 ) |
Manuel Pégourié-Gonnard | a63bc94 | 2015-05-14 18:22:47 +0200 | [diff] [blame] | 2112 | mbedtls_net_usleep( 1000000 * opt.reco_delay ); |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 2113 | #endif |
Manuel Pégourié-Gonnard | 38d1eba | 2013-08-23 10:44:29 +0200 | [diff] [blame] | 2114 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2115 | mbedtls_printf( " . Reconnecting with saved session..." ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2116 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2117 | if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2118 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2119 | mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n", |
| 2120 | -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2121 | goto exit; |
| 2122 | } |
| 2123 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2124 | if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 2125 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2126 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_session returned %d\n\n", |
| 2127 | ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 2128 | goto exit; |
| 2129 | } |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2130 | |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2131 | if( ( ret = mbedtls_net_connect( &server_fd, |
| 2132 | opt.server_addr, opt.server_port, |
| 2133 | opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? |
| 2134 | MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2135 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2136 | mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n", |
| 2137 | -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2138 | goto exit; |
| 2139 | } |
| 2140 | |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 2141 | if( opt.nbio > 0 ) |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 2142 | ret = mbedtls_net_set_nonblock( &server_fd ); |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 2143 | else |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 2144 | ret = mbedtls_net_set_block( &server_fd ); |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 2145 | if( ret != 0 ) |
| 2146 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2147 | mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2148 | -ret ); |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 2149 | goto exit; |
| 2150 | } |
| 2151 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2152 | while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2153 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 2154 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
Manuel Pégourié-Gonnard | b3c8307 | 2017-05-16 08:50:24 +0200 | [diff] [blame] | 2155 | ret != MBEDTLS_ERR_SSL_WANT_WRITE && |
Manuel Pégourié-Gonnard | 558da9c | 2018-06-13 12:02:12 +0200 | [diff] [blame] | 2156 | ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2157 | { |
Hanno Becker | 4cb1f4d | 2017-10-10 15:59:57 +0100 | [diff] [blame] | 2158 | mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", |
| 2159 | -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2160 | goto exit; |
| 2161 | } |
| 2162 | } |
| 2163 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2164 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 2165 | |
| 2166 | goto send_request; |
| 2167 | } |
| 2168 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2169 | /* |
| 2170 | * Cleanup and exit |
| 2171 | */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2172 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2173 | #ifdef MBEDTLS_ERROR_C |
Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 2174 | if( ret != 0 ) |
| 2175 | { |
| 2176 | char error_buf[100]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2177 | mbedtls_strerror( ret, error_buf, 100 ); |
| 2178 | mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf ); |
Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 2179 | } |
| 2180 | #endif |
| 2181 | |
Manuel Pégourié-Gonnard | 3d7d00a | 2015-06-30 15:55:03 +0200 | [diff] [blame] | 2182 | mbedtls_net_free( &server_fd ); |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 2183 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2184 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 2185 | mbedtls_x509_crt_free( &clicert ); |
| 2186 | mbedtls_x509_crt_free( &cacert ); |
| 2187 | mbedtls_pk_free( &pkey ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 2188 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2189 | mbedtls_ssl_session_free( &saved_session ); |
| 2190 | mbedtls_ssl_free( &ssl ); |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 2191 | mbedtls_ssl_config_free( &conf ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2192 | mbedtls_ctr_drbg_free( &ctr_drbg ); |
| 2193 | mbedtls_entropy_free( &entropy ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2194 | |
Paul Bakker | cce9d77 | 2011-11-18 14:26:47 +0000 | [diff] [blame] | 2195 | #if defined(_WIN32) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2196 | mbedtls_printf( " + Press Enter to exit this program.\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2197 | fflush( stdout ); getchar(); |
| 2198 | #endif |
| 2199 | |
Paul Bakker | dbd79ca | 2013-07-24 16:28:35 +0200 | [diff] [blame] | 2200 | // Shell can not handle large exit numbers -> 1 for errors |
| 2201 | if( ret < 0 ) |
| 2202 | ret = 1; |
| 2203 | |
Krzysztof Stachowiak | 3b0c430 | 2019-04-24 14:24:46 +0200 | [diff] [blame] | 2204 | mbedtls_exit( ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 2205 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 2206 | #endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C && |
| 2207 | MBEDTLS_SSL_CLI_C && MBEDTLS_NET_C && MBEDTLS_RSA_C && |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 2208 | MBEDTLS_CTR_DRBG_C MBEDTLS_TIMING_C */ |