blob: 34cd9d6d09b7bc7a1a789ff5519df1772199a17e [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Paul Bakker3c5ef712013-06-25 16:37:45 +02004 * Copyright (C) 2006-2013, Brainspark B.V.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00005 *
6 * This file is part of PolarSSL (http://www.polarssl.org)
7 * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>
8 *
9 * All rights reserved.
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
15 *
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 * GNU General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License along
22 * with this program; if not, write to the Free Software Foundation, Inc.,
23 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
24 */
25
Manuel Pégourié-Gonnardabd6e022013-09-20 13:30:43 +020026#include "polarssl/config.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000027
28#if defined(_WIN32)
29#include <windows.h>
30#endif
31
32#include <string.h>
33#include <stdlib.h>
34#include <stdio.h>
35
Paul Bakkerb60b95f2012-09-25 09:05:17 +000036#include "polarssl/net.h"
37#include "polarssl/ssl.h"
38#include "polarssl/entropy.h"
39#include "polarssl/ctr_drbg.h"
40#include "polarssl/certs.h"
41#include "polarssl/x509.h"
42#include "polarssl/error.h"
43
Paul Bakker0a597072012-09-25 21:55:46 +000044#if defined(POLARSSL_SSL_CACHE_C)
45#include "polarssl/ssl_cache.h"
46#endif
47
Paul Bakker82024bf2013-07-04 11:52:32 +020048#if defined(POLARSSL_MEMORY_BUFFER_ALLOC_C)
49#include "polarssl/memory.h"
50#endif
51
Paul Bakkerb60b95f2012-09-25 09:05:17 +000052#define DFL_SERVER_PORT 4433
53#define DFL_REQUEST_PAGE "/"
54#define DFL_DEBUG_LEVEL 0
55#define DFL_CA_FILE ""
56#define DFL_CA_PATH ""
57#define DFL_CRT_FILE ""
58#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +020059#define DFL_CRT_FILE2 ""
60#define DFL_KEY_FILE2 ""
Paul Bakkerfbb17802013-04-17 19:10:21 +020061#define DFL_PSK ""
62#define DFL_PSK_IDENTITY "Client_identity"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000063#define DFL_FORCE_CIPHER 0
64#define DFL_RENEGOTIATION SSL_RENEGOTIATION_ENABLED
65#define DFL_ALLOW_LEGACY SSL_LEGACY_NO_RENEGOTIATION
Paul Bakker1d29fb52012-09-28 13:28:45 +000066#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +020067#define DFL_MAX_VERSION -1
Paul Bakker91ebfb52012-11-23 14:04:08 +010068#define DFL_AUTH_MODE SSL_VERIFY_OPTIONAL
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +020069#define DFL_MFL_CODE SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +020070#define DFL_TICKETS SSL_SESSION_TICKETS_ENABLED
Paul Bakkerb60b95f2012-09-25 09:05:17 +000071
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +020072#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
73 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
74 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
75 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
76 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
77 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
78 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +020079
Paul Bakker8e714d72013-07-18 11:05:13 +020080/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
81 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +000082#define HTTP_RESPONSE \
83 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
84 "<h2>PolarSSL Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +020085 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +000086
87/*
Paul Bakkerb60b95f2012-09-25 09:05:17 +000088 * global options
89 */
90struct options
91{
92 int server_port; /* port on which the ssl service runs */
93 int debug_level; /* level of debugging */
Paul Bakkeref3f8c72013-06-24 13:01:08 +020094 const char *ca_file; /* the file with the CA certificate(s) */
95 const char *ca_path; /* the path with the CA certificate(s) reside */
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +020096 const char *crt_file; /* the file with the server certificate */
97 const char *key_file; /* the file with the server key */
98 const char *crt_file2; /* the file with the 2nd server certificate */
99 const char *key_file2; /* the file with the 2nd server key */
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200100 const char *psk; /* the pre-shared key */
101 const char *psk_identity; /* the pre-shared key identity */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000102 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
103 int renegotiation; /* enable / disable renegotiation */
104 int allow_legacy; /* allow legacy renegotiation */
Paul Bakker1d29fb52012-09-28 13:28:45 +0000105 int min_version; /* minimum protocol version accepted */
Paul Bakkerc1516be2013-06-29 16:01:32 +0200106 int max_version; /* maximum protocol version accepted */
Paul Bakker91ebfb52012-11-23 14:04:08 +0100107 int auth_mode; /* verify mode for connection */
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200108 unsigned char mfl_code; /* code for maximum fragment length */
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200109 int tickets; /* enable / disable session tickets */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000110} opt;
111
Paul Bakker3c5ef712013-06-25 16:37:45 +0200112static void my_debug( void *ctx, int level, const char *str )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000113{
114 if( level < opt.debug_level )
115 {
116 fprintf( (FILE *) ctx, "%s", str );
117 fflush( (FILE *) ctx );
118 }
119}
120
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200121
122#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000123#if defined(POLARSSL_FS_IO)
124#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100125 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
126 " default: \"\" (pre-loaded)\n" \
127 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
128 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
129 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
130 " default: \"\" (pre-loaded)\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200131 " key_file=%%s default: \"\" (pre-loaded)\n" \
132 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
133 " default: \"\" (pre-loaded)\n" \
134 " key_file2=%%s default: \"\" (pre-loaded)\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000135#else
136#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200137 "\n" \
138 " No file operations available (POLARSSL_FS_IO not defined)\n" \
139 "\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000140#endif /* POLARSSL_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200141#else
142#define USAGE_IO ""
Paul Bakker36713e82013-09-17 13:25:29 +0200143#endif /* POLARSSL_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200144
145#if defined(POLARSSL_KEY_EXCHANGE_PSK_ENABLED)
146#define USAGE_PSK \
147 " psk=%%s default: \"\" (in hex, without 0x)\n" \
148 " psk_identity=%%s default: \"Client_identity\"\n"
149#else
150#define USAGE_PSK ""
151#endif /* POLARSSL_KEY_EXCHANGE_PSK_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000152
Paul Bakkera503a632013-08-14 13:48:06 +0200153#if defined(POLARSSL_SSL_SESSION_TICKETS)
154#define USAGE_TICKETS \
155 " tickets=%%d default: 1 (enabled)\n"
156#else
157#define USAGE_TICKETS ""
158#endif /* POLARSSL_SSL_SESSION_TICKETS */
159
Paul Bakker05decb22013-08-15 13:33:48 +0200160#if defined(POLARSSL_SSL_MAX_FRAGMENT_LENGTH)
161#define USAGE_MAX_FRAG_LEN \
162 " max_frag_len=%%d default: 16384 (tls default)\n" \
163 " options: 512, 1024, 2048, 4096\n"
164#else
165#define USAGE_MAX_FRAG_LEN ""
166#endif /* POLARSSL_SSL_MAX_FRAGMENT_LENGTH */
167
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000168#define USAGE \
169 "\n usage: ssl_server2 param=<>...\n" \
170 "\n acceptable parameters:\n" \
171 " server_port=%%d default: 4433\n" \
172 " debug_level=%%d default: 0 (disabled)\n" \
173 USAGE_IO \
174 " request_page=%%s default: \".\"\n" \
175 " renegotiation=%%d default: 1 (enabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200176 USAGE_TICKETS \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000177 " allow_legacy=%%d default: 0 (disabled)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000178 " min_version=%%s default: \"ssl3\"\n" \
Paul Bakkerc1516be2013-06-29 16:01:32 +0200179 " max_version=%%s default: \"tls1_2\"\n" \
180 " force_version=%%s default: \"\" (none)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000181 " options: ssl3, tls1, tls1_1, tls1_2\n" \
Paul Bakkerc1516be2013-06-29 16:01:32 +0200182 " auth_mode=%%s default: \"optional\"\n" \
Paul Bakker91ebfb52012-11-23 14:04:08 +0100183 " options: none, optional, required\n" \
Paul Bakker05decb22013-08-15 13:33:48 +0200184 USAGE_MAX_FRAG_LEN \
Paul Bakkered27a042013-04-18 22:46:23 +0200185 USAGE_PSK \
Paul Bakkerfbb17802013-04-17 19:10:21 +0200186 "\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000187 " force_ciphersuite=<name> default: all enabled\n"\
188 " acceptable ciphersuite names:\n"
189
Paul Bakkered27a042013-04-18 22:46:23 +0200190#if !defined(POLARSSL_ENTROPY_C) || \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000191 !defined(POLARSSL_SSL_TLS_C) || !defined(POLARSSL_SSL_SRV_C) || \
Paul Bakkered27a042013-04-18 22:46:23 +0200192 !defined(POLARSSL_NET_C) || !defined(POLARSSL_CTR_DRBG_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000193int main( int argc, char *argv[] )
194{
195 ((void) argc);
196 ((void) argv);
197
Paul Bakkered27a042013-04-18 22:46:23 +0200198 printf("POLARSSL_ENTROPY_C and/or "
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000199 "POLARSSL_SSL_TLS_C and/or POLARSSL_SSL_SRV_C and/or "
Paul Bakkered27a042013-04-18 22:46:23 +0200200 "POLARSSL_NET_C and/or POLARSSL_CTR_DRBG_C not defined.\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000201 return( 0 );
202}
203#else
204int main( int argc, char *argv[] )
205{
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200206 int ret = 0, len, written, frags;
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000207 int listen_fd;
208 int client_fd = -1;
209 unsigned char buf[1024];
Paul Bakkered27a042013-04-18 22:46:23 +0200210#if defined(POLARSSL_KEY_EXCHANGE_PSK_ENABLED)
Paul Bakkerfbb17802013-04-17 19:10:21 +0200211 unsigned char psk[256];
212 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200213#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200214 const char *pers = "ssl_server2";
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000215
216 entropy_context entropy;
217 ctr_drbg_context ctr_drbg;
218 ssl_context ssl;
Paul Bakker36713e82013-09-17 13:25:29 +0200219#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakkerc559c7a2013-09-18 14:13:26 +0200220 x509_crt cacert;
221 x509_crt srvcert;
Manuel Pégourié-Gonnardac755232013-08-19 14:10:16 +0200222 pk_context pkey;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200223 x509_crt srvcert2;
224 pk_context pkey2;
Paul Bakkered27a042013-04-18 22:46:23 +0200225#endif
Paul Bakker0a597072012-09-25 21:55:46 +0000226#if defined(POLARSSL_SSL_CACHE_C)
227 ssl_cache_context cache;
228#endif
Paul Bakker82024bf2013-07-04 11:52:32 +0200229#if defined(POLARSSL_MEMORY_BUFFER_ALLOC_C)
230 unsigned char alloc_buf[100000];
231#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000232
233 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000234 char *p, *q;
235 const int *list;
236
Paul Bakker82024bf2013-07-04 11:52:32 +0200237#if defined(POLARSSL_MEMORY_BUFFER_ALLOC_C)
238 memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
239#endif
240
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000241 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +0200242 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000243 */
244 listen_fd = 0;
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +0200245 memset( &ssl, 0, sizeof( ssl_context ) );
Paul Bakker36713e82013-09-17 13:25:29 +0200246#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakker369d2eb2013-09-18 11:58:25 +0200247 x509_crt_init( &cacert );
248 x509_crt_init( &srvcert );
Manuel Pégourié-Gonnardac755232013-08-19 14:10:16 +0200249 pk_init( &pkey );
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200250 x509_crt_init( &srvcert2 );
251 pk_init( &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +0200252#endif
Paul Bakker0a597072012-09-25 21:55:46 +0000253#if defined(POLARSSL_SSL_CACHE_C)
254 ssl_cache_init( &cache );
255#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000256
257 if( argc == 0 )
258 {
259 usage:
260 if( ret == 0 )
261 ret = 1;
262
263 printf( USAGE );
264
265 list = ssl_list_ciphersuites();
266 while( *list )
267 {
Paul Bakkerbcbe2d82013-04-19 09:10:20 +0200268 printf(" %-42s", ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200269 list++;
270 if( !*list )
271 break;
272 printf(" %s\n", ssl_get_ciphersuite_name( *list ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000273 list++;
274 }
275 printf("\n");
276 goto exit;
277 }
278
279 opt.server_port = DFL_SERVER_PORT;
280 opt.debug_level = DFL_DEBUG_LEVEL;
281 opt.ca_file = DFL_CA_FILE;
282 opt.ca_path = DFL_CA_PATH;
283 opt.crt_file = DFL_CRT_FILE;
284 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200285 opt.crt_file2 = DFL_CRT_FILE2;
286 opt.key_file2 = DFL_KEY_FILE2;
Paul Bakkerfbb17802013-04-17 19:10:21 +0200287 opt.psk = DFL_PSK;
288 opt.psk_identity = DFL_PSK_IDENTITY;
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000289 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
290 opt.renegotiation = DFL_RENEGOTIATION;
291 opt.allow_legacy = DFL_ALLOW_LEGACY;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000292 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +0200293 opt.max_version = DFL_MAX_VERSION;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100294 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200295 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200296 opt.tickets = DFL_TICKETS;
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000297
298 for( i = 1; i < argc; i++ )
299 {
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000300 p = argv[i];
301 if( ( q = strchr( p, '=' ) ) == NULL )
302 goto usage;
303 *q++ = '\0';
304
305 if( strcmp( p, "server_port" ) == 0 )
306 {
307 opt.server_port = atoi( q );
308 if( opt.server_port < 1 || opt.server_port > 65535 )
309 goto usage;
310 }
311 else if( strcmp( p, "debug_level" ) == 0 )
312 {
313 opt.debug_level = atoi( q );
314 if( opt.debug_level < 0 || opt.debug_level > 65535 )
315 goto usage;
316 }
317 else if( strcmp( p, "ca_file" ) == 0 )
318 opt.ca_file = q;
319 else if( strcmp( p, "ca_path" ) == 0 )
320 opt.ca_path = q;
321 else if( strcmp( p, "crt_file" ) == 0 )
322 opt.crt_file = q;
323 else if( strcmp( p, "key_file" ) == 0 )
324 opt.key_file = q;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200325 else if( strcmp( p, "crt_file2" ) == 0 )
326 opt.crt_file2 = q;
327 else if( strcmp( p, "key_file2" ) == 0 )
328 opt.key_file2 = q;
Paul Bakkerfbb17802013-04-17 19:10:21 +0200329 else if( strcmp( p, "psk" ) == 0 )
330 opt.psk = q;
331 else if( strcmp( p, "psk_identity" ) == 0 )
332 opt.psk_identity = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000333 else if( strcmp( p, "force_ciphersuite" ) == 0 )
334 {
335 opt.force_ciphersuite[0] = -1;
336
337 opt.force_ciphersuite[0] = ssl_get_ciphersuite_id( q );
338
339 if( opt.force_ciphersuite[0] <= 0 )
340 {
341 ret = 2;
342 goto usage;
343 }
344 opt.force_ciphersuite[1] = 0;
345 }
346 else if( strcmp( p, "renegotiation" ) == 0 )
347 {
348 opt.renegotiation = (atoi( q )) ? SSL_RENEGOTIATION_ENABLED :
349 SSL_RENEGOTIATION_DISABLED;
350 }
351 else if( strcmp( p, "allow_legacy" ) == 0 )
352 {
353 opt.allow_legacy = atoi( q );
354 if( opt.allow_legacy < 0 || opt.allow_legacy > 1 )
355 goto usage;
356 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000357 else if( strcmp( p, "min_version" ) == 0 )
358 {
359 if( strcmp( q, "ssl3" ) == 0 )
360 opt.min_version = SSL_MINOR_VERSION_0;
361 else if( strcmp( q, "tls1" ) == 0 )
362 opt.min_version = SSL_MINOR_VERSION_1;
363 else if( strcmp( q, "tls1_1" ) == 0 )
364 opt.min_version = SSL_MINOR_VERSION_2;
365 else if( strcmp( q, "tls1_2" ) == 0 )
366 opt.min_version = SSL_MINOR_VERSION_3;
367 else
368 goto usage;
369 }
Paul Bakkerc1516be2013-06-29 16:01:32 +0200370 else if( strcmp( p, "max_version" ) == 0 )
371 {
372 if( strcmp( q, "ssl3" ) == 0 )
373 opt.max_version = SSL_MINOR_VERSION_0;
374 else if( strcmp( q, "tls1" ) == 0 )
375 opt.max_version = SSL_MINOR_VERSION_1;
376 else if( strcmp( q, "tls1_1" ) == 0 )
377 opt.max_version = SSL_MINOR_VERSION_2;
378 else if( strcmp( q, "tls1_2" ) == 0 )
379 opt.max_version = SSL_MINOR_VERSION_3;
380 else
381 goto usage;
382 }
383 else if( strcmp( p, "force_version" ) == 0 )
384 {
385 if( strcmp( q, "ssl3" ) == 0 )
386 {
387 opt.min_version = SSL_MINOR_VERSION_0;
388 opt.max_version = SSL_MINOR_VERSION_0;
389 }
390 else if( strcmp( q, "tls1" ) == 0 )
391 {
392 opt.min_version = SSL_MINOR_VERSION_1;
393 opt.max_version = SSL_MINOR_VERSION_1;
394 }
395 else if( strcmp( q, "tls1_1" ) == 0 )
396 {
397 opt.min_version = SSL_MINOR_VERSION_2;
398 opt.max_version = SSL_MINOR_VERSION_2;
399 }
400 else if( strcmp( q, "tls1_2" ) == 0 )
401 {
402 opt.min_version = SSL_MINOR_VERSION_3;
403 opt.max_version = SSL_MINOR_VERSION_3;
404 }
405 else
406 goto usage;
407 }
Paul Bakker91ebfb52012-11-23 14:04:08 +0100408 else if( strcmp( p, "auth_mode" ) == 0 )
409 {
410 if( strcmp( q, "none" ) == 0 )
411 opt.auth_mode = SSL_VERIFY_NONE;
412 else if( strcmp( q, "optional" ) == 0 )
413 opt.auth_mode = SSL_VERIFY_OPTIONAL;
414 else if( strcmp( q, "required" ) == 0 )
415 opt.auth_mode = SSL_VERIFY_REQUIRED;
416 else
417 goto usage;
418 }
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200419 else if( strcmp( p, "max_frag_len" ) == 0 )
420 {
421 if( strcmp( q, "512" ) == 0 )
422 opt.mfl_code = SSL_MAX_FRAG_LEN_512;
423 else if( strcmp( q, "1024" ) == 0 )
424 opt.mfl_code = SSL_MAX_FRAG_LEN_1024;
425 else if( strcmp( q, "2048" ) == 0 )
426 opt.mfl_code = SSL_MAX_FRAG_LEN_2048;
427 else if( strcmp( q, "4096" ) == 0 )
428 opt.mfl_code = SSL_MAX_FRAG_LEN_4096;
429 else
430 goto usage;
431 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200432 else if( strcmp( p, "tickets" ) == 0 )
433 {
434 opt.tickets = atoi( q );
435 if( opt.tickets < 0 || opt.tickets > 1 )
436 goto usage;
437 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000438 else
439 goto usage;
440 }
441
Paul Bakkerc1516be2013-06-29 16:01:32 +0200442 if( opt.force_ciphersuite[0] > 0 )
443 {
444 const ssl_ciphersuite_t *ciphersuite_info;
445 ciphersuite_info = ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
446
Paul Bakker5b55b792013-07-19 13:43:43 +0200447 if( opt.max_version != -1 &&
448 ciphersuite_info->min_minor_ver > opt.max_version )
449 {
450 printf("forced ciphersuite not allowed with this protocol version\n");
451 ret = 2;
452 goto usage;
453 }
454 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +0200455 ciphersuite_info->max_minor_ver < opt.min_version )
456 {
457 printf("forced ciphersuite not allowed with this protocol version\n");
458 ret = 2;
459 goto usage;
460 }
Paul Bakker5b55b792013-07-19 13:43:43 +0200461 if( opt.max_version > ciphersuite_info->max_minor_ver )
462 opt.max_version = ciphersuite_info->max_minor_ver;
463 if( opt.min_version < ciphersuite_info->min_minor_ver )
464 opt.min_version = ciphersuite_info->min_minor_ver;
Paul Bakkerc1516be2013-06-29 16:01:32 +0200465 }
466
Paul Bakkered27a042013-04-18 22:46:23 +0200467#if defined(POLARSSL_KEY_EXCHANGE_PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000468 /*
Paul Bakkerfbb17802013-04-17 19:10:21 +0200469 * Unhexify the pre-shared key if any is given
470 */
471 if( strlen( opt.psk ) )
472 {
473 unsigned char c;
474 size_t j;
475
476 if( strlen( opt.psk ) % 2 != 0 )
477 {
478 printf("pre-shared key not valid hex\n");
479 goto exit;
480 }
481
482 psk_len = strlen( opt.psk ) / 2;
483
484 for( j = 0; j < strlen( opt.psk ); j += 2 )
485 {
486 c = opt.psk[j];
487 if( c >= '0' && c <= '9' )
488 c -= '0';
489 else if( c >= 'a' && c <= 'f' )
490 c -= 'a' - 10;
491 else if( c >= 'A' && c <= 'F' )
492 c -= 'A' - 10;
493 else
494 {
495 printf("pre-shared key not valid hex\n");
496 goto exit;
497 }
498 psk[ j / 2 ] = c << 4;
499
500 c = opt.psk[j + 1];
501 if( c >= '0' && c <= '9' )
502 c -= '0';
503 else if( c >= 'a' && c <= 'f' )
504 c -= 'a' - 10;
505 else if( c >= 'A' && c <= 'F' )
506 c -= 'A' - 10;
507 else
508 {
509 printf("pre-shared key not valid hex\n");
510 goto exit;
511 }
512 psk[ j / 2 ] |= c;
513 }
514 }
Paul Bakkered27a042013-04-18 22:46:23 +0200515#endif /* POLARSSL_KEY_EXCHANGE_PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +0200516
517 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000518 * 0. Initialize the RNG and the session data
519 */
520 printf( "\n . Seeding the random number generator..." );
521 fflush( stdout );
522
523 entropy_init( &entropy );
524 if( ( ret = ctr_drbg_init( &ctr_drbg, entropy_func, &entropy,
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200525 (const unsigned char *) pers,
526 strlen( pers ) ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000527 {
528 printf( " failed\n ! ctr_drbg_init returned -0x%x\n", -ret );
529 goto exit;
530 }
531
532 printf( " ok\n" );
533
Paul Bakker36713e82013-09-17 13:25:29 +0200534#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000535 /*
536 * 1.1. Load the trusted CA
537 */
538 printf( " . Loading the CA root certificate ..." );
539 fflush( stdout );
540
541#if defined(POLARSSL_FS_IO)
542 if( strlen( opt.ca_path ) )
Paul Bakkerddf26b42013-09-18 13:46:23 +0200543 ret = x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000544 else if( strlen( opt.ca_file ) )
Paul Bakkerddf26b42013-09-18 13:46:23 +0200545 ret = x509_crt_parse_file( &cacert, opt.ca_file );
546 else
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000547#endif
548#if defined(POLARSSL_CERTS_C)
Paul Bakkerddf26b42013-09-18 13:46:23 +0200549 ret = x509_crt_parse( &cacert, (const unsigned char *) test_ca_crt,
550 strlen( test_ca_crt ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000551#else
552 {
553 ret = 1;
554 printf("POLARSSL_CERTS_C not defined.");
555 }
556#endif
557 if( ret < 0 )
558 {
Paul Bakkerddf26b42013-09-18 13:46:23 +0200559 printf( " failed\n ! x509_crt_parse returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000560 goto exit;
561 }
562
563 printf( " ok (%d skipped)\n", ret );
564
565 /*
566 * 1.2. Load own certificate and private key
567 */
568 printf( " . Loading the server cert. and key..." );
569 fflush( stdout );
570
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +0200571#if defined(POLARSSL_FS_IO)
572 if( strlen( opt.crt_file ) )
573 ret = x509_crt_parse_file( &srvcert, opt.crt_file );
574 else
575#endif
576#if defined(POLARSSL_CERTS_C)
577 ret = x509_crt_parse( &srvcert, (const unsigned char *) test_srv_crt,
578 strlen( test_srv_crt ) );
579#else
580 {
581 ret = 1;
582 printf("POLARSSL_CERTS_C not defined.");
583 }
584#endif
585 if( ret != 0 )
586 {
587 printf( " failed\n ! x509_crt_parse returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000588 goto exit;
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +0200589 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000590
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +0200591#if defined(POLARSSL_FS_IO)
592 if( strlen( opt.key_file ) )
593 ret = pk_parse_keyfile( &pkey, opt.key_file, "" );
594 else
595#endif
596#if defined(POLARSSL_CERTS_C)
597 ret = pk_parse_key( &pkey, (const unsigned char *) test_srv_key,
598 strlen( test_srv_key ), NULL, 0 );
599#else
600 {
601 ret = 1;
602 printf("POLARSSL_CERTS_C not defined.");
603 }
604#endif
605 if( ret != 0 )
606 {
607 printf( " failed\n ! pk_parse_key returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000608 goto exit;
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +0200609 }
610
611#if defined(POLARSSL_RSA_C) && defined(POLARSSL_ECDSA_C)
612#if defined(POLARSSL_FS_IO)
613 if( strlen( opt.crt_file2 ) )
614 ret = x509_crt_parse_file( &srvcert2, opt.crt_file2 );
615 else
616#endif
617#if defined(POLARSSL_CERTS_C)
618 ret = x509_crt_parse( &srvcert2, (const unsigned char *) test_srv_crt2,
619 strlen( test_srv_crt2 ) );
620#else
621 {
622 ret = 1;
623 printf("POLARSSL_CERTS_C not defined.");
624 }
625#endif
626 if( ret != 0 )
627 {
628 printf( " failed\n ! x509_crt_parse(2) returned -0x%x\n\n", -ret );
629 goto exit;
630 }
631
632#if defined(POLARSSL_FS_IO)
633 if( strlen( opt.key_file2 ) )
634 ret = pk_parse_keyfile( &pkey2, opt.key_file2, "" );
635 else
636#endif
637#if defined(POLARSSL_CERTS_C)
638 ret = pk_parse_key( &pkey2, (const unsigned char *) test_srv_key2,
639 strlen( test_srv_key2 ), NULL, 0 );
640#else
641 {
642 ret = 1;
643 printf("POLARSSL_CERTS_C not defined.");
644 }
645#endif
646 if( ret != 0 )
647 {
648 printf( " failed\n ! pk_parse_key(2) returned -0x%x\n\n", -ret );
649 goto exit;
650 }
651#endif /* POLARSSL_RSA_C && POLARSSL_ECDSA_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000652
653 printf( " ok\n" );
Paul Bakker36713e82013-09-17 13:25:29 +0200654#endif /* POLARSSL_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000655
656 /*
657 * 2. Setup the listening TCP socket
658 */
659 printf( " . Bind on tcp://localhost:%-4d/ ...", opt.server_port );
660 fflush( stdout );
661
662 if( ( ret = net_bind( &listen_fd, NULL, opt.server_port ) ) != 0 )
663 {
664 printf( " failed\n ! net_bind returned -0x%x\n\n", -ret );
665 goto exit;
666 }
667
668 printf( " ok\n" );
669
670 /*
671 * 3. Setup stuff
672 */
673 printf( " . Setting up the SSL/TLS structure..." );
674 fflush( stdout );
675
676 if( ( ret = ssl_init( &ssl ) ) != 0 )
677 {
678 printf( " failed\n ! ssl_init returned -0x%x\n\n", -ret );
679 goto exit;
680 }
681
682 ssl_set_endpoint( &ssl, SSL_IS_SERVER );
Paul Bakker91ebfb52012-11-23 14:04:08 +0100683 ssl_set_authmode( &ssl, opt.auth_mode );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000684
Paul Bakker05decb22013-08-15 13:33:48 +0200685#if defined(POLARSSL_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200686 ssl_set_max_frag_len( &ssl, opt.mfl_code );
Paul Bakker05decb22013-08-15 13:33:48 +0200687#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200688
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000689 ssl_set_rng( &ssl, ctr_drbg_random, &ctr_drbg );
690 ssl_set_dbg( &ssl, my_debug, stdout );
691
Paul Bakker0a597072012-09-25 21:55:46 +0000692#if defined(POLARSSL_SSL_CACHE_C)
693 ssl_set_session_cache( &ssl, ssl_cache_get, &cache,
694 ssl_cache_set, &cache );
695#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000696
Paul Bakkera503a632013-08-14 13:48:06 +0200697#if defined(POLARSSL_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200698 ssl_set_session_tickets( &ssl, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +0200699#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200700
Paul Bakker41c83d32013-03-20 14:39:14 +0100701 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000702 ssl_set_ciphersuites( &ssl, opt.force_ciphersuite );
703
704 ssl_set_renegotiation( &ssl, opt.renegotiation );
705 ssl_legacy_renegotiation( &ssl, opt.allow_legacy );
706
Paul Bakker36713e82013-09-17 13:25:29 +0200707#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000708 ssl_set_ca_chain( &ssl, &cacert, NULL, NULL );
Manuel Pégourié-Gonnardac755232013-08-19 14:10:16 +0200709 ssl_set_own_cert( &ssl, &srvcert, &pkey );
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +0200710#if defined(POLARSSL_RSA_C) && defined(POLARSSL_ECDSA_C)
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200711 ssl_set_own_cert( &ssl, &srvcert2, &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +0200712#endif
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +0200713#endif
Paul Bakkered27a042013-04-18 22:46:23 +0200714
715#if defined(POLARSSL_KEY_EXCHANGE_PSK_ENABLED)
Paul Bakker3c5ef712013-06-25 16:37:45 +0200716 ssl_set_psk( &ssl, psk, psk_len, (const unsigned char *) opt.psk_identity,
Paul Bakkerfbb17802013-04-17 19:10:21 +0200717 strlen( opt.psk_identity ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200718#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000719
720#if defined(POLARSSL_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +0000721 /*
722 * Use different group than default DHM group
723 */
Paul Bakkerd4324102012-09-26 08:29:38 +0000724 ssl_set_dh_param( &ssl, POLARSSL_DHM_RFC5114_MODP_2048_P,
725 POLARSSL_DHM_RFC5114_MODP_2048_G );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000726#endif
727
Paul Bakker1d29fb52012-09-28 13:28:45 +0000728 if( opt.min_version != -1 )
729 ssl_set_min_version( &ssl, SSL_MAJOR_VERSION_3, opt.min_version );
730
Paul Bakkerc1516be2013-06-29 16:01:32 +0200731 if( opt.max_version != -1 )
732 ssl_set_max_version( &ssl, SSL_MAJOR_VERSION_3, opt.max_version );
733
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000734 printf( " ok\n" );
735
736reset:
737#ifdef POLARSSL_ERROR_C
738 if( ret != 0 )
739 {
740 char error_buf[100];
Paul Bakker03a8a792013-06-30 12:18:08 +0200741 polarssl_strerror( ret, error_buf, 100 );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000742 printf("Last error was: %d - %s\n\n", ret, error_buf );
743 }
744#endif
745
746 if( client_fd != -1 )
747 net_close( client_fd );
748
749 ssl_session_reset( &ssl );
750
751 /*
752 * 3. Wait until a client connects
753 */
754#if defined(_WIN32_WCE)
755 {
756 SHELLEXECUTEINFO sei;
757
758 ZeroMemory( &sei, sizeof( SHELLEXECUTEINFO ) );
759
760 sei.cbSize = sizeof( SHELLEXECUTEINFO );
761 sei.fMask = 0;
762 sei.hwnd = 0;
763 sei.lpVerb = _T( "open" );
764 sei.lpFile = _T( "https://localhost:4433/" );
765 sei.lpParameters = NULL;
766 sei.lpDirectory = NULL;
767 sei.nShow = SW_SHOWNORMAL;
768
769 ShellExecuteEx( &sei );
770 }
771#elif defined(_WIN32)
772 ShellExecute( NULL, "open", "https://localhost:4433/",
773 NULL, NULL, SW_SHOWNORMAL );
774#endif
775
776 client_fd = -1;
777
778 printf( " . Waiting for a remote connection ..." );
779 fflush( stdout );
780
781 if( ( ret = net_accept( listen_fd, &client_fd, NULL ) ) != 0 )
782 {
783 printf( " failed\n ! net_accept returned -0x%x\n\n", -ret );
784 goto exit;
785 }
786
787 ssl_set_bio( &ssl, net_recv, &client_fd,
788 net_send, &client_fd );
789
790 printf( " ok\n" );
791
792 /*
793 * 4. Handshake
794 */
795 printf( " . Performing the SSL/TLS handshake..." );
796 fflush( stdout );
797
798 while( ( ret = ssl_handshake( &ssl ) ) != 0 )
799 {
800 if( ret != POLARSSL_ERR_NET_WANT_READ && ret != POLARSSL_ERR_NET_WANT_WRITE )
801 {
802 printf( " failed\n ! ssl_handshake returned -0x%x\n\n", -ret );
Paul Bakker1d29fb52012-09-28 13:28:45 +0000803 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000804 }
805 }
806
807 printf( " ok\n [ Ciphersuite is %s ]\n",
808 ssl_get_ciphersuite( &ssl ) );
809
Paul Bakker36713e82013-09-17 13:25:29 +0200810#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000811 /*
812 * 5. Verify the server certificate
813 */
814 printf( " . Verifying peer X.509 certificate..." );
815
816 if( ( ret = ssl_get_verify_result( &ssl ) ) != 0 )
817 {
818 printf( " failed\n" );
819
Paul Bakkerb0550d92012-10-30 07:51:03 +0000820 if( !ssl_get_peer_cert( &ssl ) )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000821 printf( " ! no client certificate sent\n" );
822
823 if( ( ret & BADCERT_EXPIRED ) != 0 )
824 printf( " ! client certificate has expired\n" );
825
826 if( ( ret & BADCERT_REVOKED ) != 0 )
827 printf( " ! client certificate has been revoked\n" );
828
829 if( ( ret & BADCERT_NOT_TRUSTED ) != 0 )
830 printf( " ! self-signed or not signed by a trusted CA\n" );
831
832 printf( "\n" );
833 }
834 else
835 printf( " ok\n" );
836
Paul Bakkerb0550d92012-10-30 07:51:03 +0000837 if( ssl_get_peer_cert( &ssl ) )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000838 {
839 printf( " . Peer certificate information ...\n" );
Paul Bakkerddf26b42013-09-18 13:46:23 +0200840 x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ",
841 ssl_get_peer_cert( &ssl ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000842 printf( "%s\n", buf );
843 }
Paul Bakker36713e82013-09-17 13:25:29 +0200844#endif /* POLARSSL_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000845
846 /*
847 * 6. Read the HTTP Request
848 */
849 printf( " < Read from client:" );
850 fflush( stdout );
851
852 do
853 {
854 len = sizeof( buf ) - 1;
855 memset( buf, 0, sizeof( buf ) );
856 ret = ssl_read( &ssl, buf, len );
857
858 if( ret == POLARSSL_ERR_NET_WANT_READ || ret == POLARSSL_ERR_NET_WANT_WRITE )
859 continue;
860
861 if( ret <= 0 )
862 {
863 switch( ret )
864 {
865 case POLARSSL_ERR_SSL_PEER_CLOSE_NOTIFY:
866 printf( " connection was closed gracefully\n" );
867 break;
868
869 case POLARSSL_ERR_NET_CONN_RESET:
870 printf( " connection was reset by peer\n" );
871 break;
872
873 default:
874 printf( " ssl_read returned -0x%x\n", -ret );
875 break;
876 }
877
878 break;
879 }
880
881 len = ret;
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200882 printf( " %d bytes read\n\n%s\n", len, (char *) buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000883
Paul Bakker82024bf2013-07-04 11:52:32 +0200884 if( memcmp( buf, "SERVERQUIT", 10 ) == 0 )
Manuel Pégourié-Gonnarde8ea0c02013-09-07 17:09:14 +0200885 {
886 ret = 0;
Paul Bakker82024bf2013-07-04 11:52:32 +0200887 goto exit;
Manuel Pégourié-Gonnarde8ea0c02013-09-07 17:09:14 +0200888 }
Paul Bakker82024bf2013-07-04 11:52:32 +0200889
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000890 if( ret > 0 )
891 break;
892 }
893 while( 1 );
894
895 /*
896 * 7. Write the 200 Response
897 */
898 printf( " > Write to client:" );
899 fflush( stdout );
900
901 len = sprintf( (char *) buf, HTTP_RESPONSE,
902 ssl_get_ciphersuite( &ssl ) );
903
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200904 for( written = 0, frags = 0; written < len; written += ret, frags++ )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000905 {
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200906 while( ( ret = ssl_write( &ssl, buf + written, len - written ) ) <= 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000907 {
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200908 if( ret == POLARSSL_ERR_NET_CONN_RESET )
909 {
910 printf( " failed\n ! peer closed the connection\n\n" );
911 goto reset;
912 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000913
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200914 if( ret != POLARSSL_ERR_NET_WANT_READ && ret != POLARSSL_ERR_NET_WANT_WRITE )
915 {
916 printf( " failed\n ! ssl_write returned %d\n\n", ret );
917 goto exit;
918 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000919 }
920 }
921
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200922 buf[written] = '\0';
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200923 printf( " %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000924
925 ret = 0;
926 goto reset;
927
928exit:
929
930#ifdef POLARSSL_ERROR_C
931 if( ret != 0 )
932 {
933 char error_buf[100];
Paul Bakker03a8a792013-06-30 12:18:08 +0200934 polarssl_strerror( ret, error_buf, 100 );
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000935 printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
936 }
937#endif
938
939 net_close( client_fd );
Paul Bakker36713e82013-09-17 13:25:29 +0200940#if defined(POLARSSL_X509_CRT_PARSE_C)
Paul Bakker36713e82013-09-17 13:25:29 +0200941 x509_crt_free( &cacert );
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200942 x509_crt_free( &srvcert );
Manuel Pégourié-Gonnardac755232013-08-19 14:10:16 +0200943 pk_free( &pkey );
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200944 x509_crt_free( &srvcert2 );
945 pk_free( &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +0200946#endif
947
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000948 ssl_free( &ssl );
949
Paul Bakker0a597072012-09-25 21:55:46 +0000950#if defined(POLARSSL_SSL_CACHE_C)
951 ssl_cache_free( &cache );
952#endif
953
Paul Bakker82024bf2013-07-04 11:52:32 +0200954#if defined(POLARSSL_MEMORY_BUFFER_ALLOC_C) && defined(POLARSSL_MEMORY_DEBUG)
955 memory_buffer_alloc_status();
956#endif
957
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000958#if defined(_WIN32)
959 printf( " + Press Enter to exit this program.\n" );
960 fflush( stdout ); getchar();
961#endif
962
Paul Bakkerdbd79ca2013-07-24 16:28:35 +0200963 // Shell can not handle large exit numbers -> 1 for errors
964 if( ret < 0 )
965 ret = 1;
966
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000967 return( ret );
968}
969#endif /* POLARSSL_BIGNUM_C && POLARSSL_ENTROPY_C && POLARSSL_SSL_TLS_C &&
970 POLARSSL_SSL_SRV_C && POLARSSL_NET_C && POLARSSL_RSA_C &&
971 POLARSSL_CTR_DRBG_C */