blob: 3d03269e64226acf500d167b900a16801f9d1522 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Rich Evans18b78c72015-02-11 14:06:19 +000031#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010032#include <stdlib.h>
33#define mbedtls_time time
34#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035#define mbedtls_printf printf
36#define mbedtls_fprintf fprintf
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037#define mbedtls_snprintf snprintf
Rich Evansf90016a2015-01-19 14:26:37 +000038#endif
39
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020040#if !defined(MBEDTLS_ENTROPY_C) || \
41 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_CLI_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020042 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020043int main( void )
44{
45 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
46 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_CLI_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020047 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020048 return( 0 );
49}
50#else
51
Andres AG788aa4a2016-09-14 14:32:09 +010052#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000053#include "mbedtls/ssl.h"
54#include "mbedtls/entropy.h"
55#include "mbedtls/ctr_drbg.h"
56#include "mbedtls/certs.h"
57#include "mbedtls/x509.h"
58#include "mbedtls/error.h"
59#include "mbedtls/debug.h"
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020060#include "mbedtls/timing.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000061
Rich Evans18b78c72015-02-11 14:06:19 +000062#include <stdio.h>
63#include <stdlib.h>
64#include <string.h>
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010065
Paul Bakker9caf2d22010-02-18 19:37:19 +000066#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010067#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020068#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +000069#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +020070#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +000071#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010072#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010073#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020074#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +020075#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +000076#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +000077#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +000078#define DFL_CRT_FILE ""
79#define DFL_KEY_FILE ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020080#define DFL_PSK ""
81#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020082#define DFL_ECJPAKE_PW NULL
Paul Bakker51936882011-02-20 16:05:58 +000083#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020084#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010085#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010086#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +020087#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +020088#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +000089#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +000090#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +020091#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +010092#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +010094#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +010095#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +020096#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +020097#define DFL_RECONNECT 0
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010098#define DFL_RECO_DELAY 0
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +020099#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200100#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200101#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100102#define DFL_CURVES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200103#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200104#define DFL_HS_TO_MIN 0
105#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200106#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200107#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100108#define DFL_ETM -1
Paul Bakker0e6975b2009-02-10 22:19:10 +0000109
Paul Bakker93c32b22014-04-25 13:40:05 +0200110#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
111#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113#if defined(MBEDTLS_X509_CRT_PARSE_C)
114#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000115#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100116 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
117 " default: \"\" (pre-loaded)\n" \
118 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
119 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
120 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
121 " default: \"\" (pre-loaded)\n" \
Paul Bakker5690efc2011-05-26 13:16:06 +0000122 " key_file=%%s default: \"\" (pre-loaded)\n"
123#else
124#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200125 " No file operations available (MBEDTLS_FS_IO not defined)\n"
126#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200127#else
128#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200129#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200130
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200131#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkered27a042013-04-18 22:46:23 +0200132#define USAGE_PSK \
133 " psk=%%s default: \"\" (in hex, without 0x)\n" \
134 " psk_identity=%%s default: \"Client_identity\"\n"
135#else
136#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakker5690efc2011-05-26 13:16:06 +0000138
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200139#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200140#define USAGE_TICKETS \
141 " tickets=%%d default: 1 (enabled)\n"
142#else
143#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200145
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200146#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Paul Bakker1f2bc622013-08-15 13:45:55 +0200147#define USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100148 " trunc_hmac=%%d default: library default\n"
Paul Bakker1f2bc622013-08-15 13:45:55 +0200149#else
150#define USAGE_TRUNC_HMAC ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200151#endif /* MBEDTLS_SSL_TRUNCATED_HMAC */
Paul Bakker1f2bc622013-08-15 13:45:55 +0200152
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200153#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200154#define USAGE_MAX_FRAG_LEN \
155 " max_frag_len=%%d default: 16384 (tls default)\n" \
156 " options: 512, 1024, 2048, 4096\n"
157#else
158#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200159#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200160
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200161#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100162#define USAGE_RECSPLIT \
Manuel Pégourié-Gonnardbf27eaa2015-06-11 17:02:10 +0200163 " recsplit=0/1 default: (library default: on)\n"
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100164#else
165#define USAGE_RECSPLIT
166#endif
167
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200168#if defined(MBEDTLS_DHM_C)
169#define USAGE_DHMLEN \
170 " dhmlen=%%d default: (library default: 1024 bits)\n"
171#else
172#define USAGE_DHMLEN
173#endif
174
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200176#define USAGE_ALPN \
177 " alpn=%%s default: \"\" (disabled)\n" \
178 " example: spdy/1,http/1.1\n"
179#else
180#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200182
Hanno Beckere6706e62017-05-15 16:05:15 +0100183#if defined(MBEDTLS_ECP_C)
184#define USAGE_CURVES \
185 " curves=a,b,c,d default: \"default\" (library default)\n" \
186 " example: \"secp521r1,brainpoolP512r1\"\n" \
187 " - use \"none\" for empty list\n" \
188 " - see mbedtls_ecp_curve_list()\n" \
189 " for acceptable curve names\n"
190#else
191#define USAGE_CURVES ""
192#endif
193
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200194#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200195#define USAGE_DTLS \
196 " dtls=%%d default: 0 (TLS)\n" \
197 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
198 " range of DTLS handshake timeouts in millisecs\n"
199#else
200#define USAGE_DTLS ""
201#endif
202
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200203#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200204#define USAGE_FALLBACK \
205 " fallback=0/1 default: (library default: off)\n"
206#else
207#define USAGE_FALLBACK ""
208#endif
209
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200210#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200211#define USAGE_EMS \
212 " extended_ms=0/1 default: (library default: on)\n"
213#else
214#define USAGE_EMS ""
215#endif
216
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200217#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100218#define USAGE_ETM \
219 " etm=0/1 default: (library default: on)\n"
220#else
221#define USAGE_ETM ""
222#endif
223
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200224#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100225#define USAGE_RENEGO \
226 " renegotiation=%%d default: 0 (disabled)\n" \
227 " renegotiate=%%d default: 0 (disabled)\n"
228#else
229#define USAGE_RENEGO ""
230#endif
231
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200232#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
233#define USAGE_ECJPAKE \
234 " ecjpake_pw=%%s default: none (disabled)\n"
235#else
236#define USAGE_ECJPAKE ""
237#endif
238
Paul Bakker9caf2d22010-02-18 19:37:19 +0000239#define USAGE \
Paul Bakker67968392010-07-18 08:28:20 +0000240 "\n usage: ssl_client2 param=<>...\n" \
241 "\n acceptable parameters:\n" \
242 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100243 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000244 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000245 " request_page=%%s default: \".\"\n" \
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +0200246 " request_size=%%d default: about 34 (basic request)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100247 " (minimum: 0, max: 16384)\n" \
248 " debug_level=%%d default: 0 (disabled)\n" \
249 " nbio=%%d default: 0 (blocking I/O)\n" \
250 " options: 1 (non-blocking), 2 (added delays)\n" \
251 " event=%%d default: 0 (loop)\n" \
252 " options: 1 (level-triggered, implies nbio=1),\n" \
253 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200254 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100255 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200256 USAGE_DTLS \
257 "\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100258 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100259 " options: none, optional, required\n" \
260 USAGE_IO \
261 "\n" \
262 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200263 USAGE_ECJPAKE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100264 "\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100265 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100266 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200267 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200268 " reconnect=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200269 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200270 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200271 USAGE_TICKETS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100272 USAGE_MAX_FRAG_LEN \
273 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200274 USAGE_ALPN \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200275 USAGE_FALLBACK \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200276 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100277 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100278 USAGE_CURVES \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100279 USAGE_RECSPLIT \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200280 USAGE_DHMLEN \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000281 "\n" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100282 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200283 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200284 " min_version=%%s default: (library default: tls1)\n" \
285 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000286 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100287 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000288 "\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000289 " force_ciphersuite=<name> default: all enabled\n"\
290 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000291
Hanno Becker8651a432017-06-09 16:13:22 +0100292#define ALPN_LIST_SIZE 10
293#define CURVE_LIST_SIZE 20
294
Rich Evans85b05ec2015-02-12 11:37:29 +0000295/*
296 * global options
297 */
298struct options
299{
300 const char *server_name; /* hostname of the server (client only) */
301 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200302 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000303 int debug_level; /* level of debugging */
304 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100305 int event; /* loop or event-driven IO? level or edge triggered? */
306 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000307 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000308 const char *request_page; /* page on server to request */
309 int request_size; /* pad request with header to requested size */
310 const char *ca_file; /* the file with the CA certificate(s) */
311 const char *ca_path; /* the path with the CA certificate(s) reside */
312 const char *crt_file; /* the file with the client certificate */
313 const char *key_file; /* the file with the client key */
314 const char *psk; /* the pre-shared key */
315 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200316 const char *ecjpake_pw; /* the EC J-PAKE password */
Rich Evans85b05ec2015-02-12 11:37:29 +0000317 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
318 int renegotiation; /* enable / disable renegotiation */
319 int allow_legacy; /* allow legacy renegotiation */
320 int renegotiate; /* attempt renegotiation? */
321 int renego_delay; /* delay before enforcing renegotiation */
322 int exchanges; /* number of data exchanges */
323 int min_version; /* minimum protocol version accepted */
324 int max_version; /* maximum protocol version accepted */
325 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200326 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000327 int auth_mode; /* verify mode for connection */
328 unsigned char mfl_code; /* code for maximum fragment length */
329 int trunc_hmac; /* negotiate truncated hmac or not */
330 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200331 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000332 int reconnect; /* attempt to resume session */
333 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200334 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000335 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100336 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000337 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000338 int transport; /* TLS or DTLS? */
339 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
340 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Rich Evans85b05ec2015-02-12 11:37:29 +0000341 int fallback; /* is this a fallback connection? */
342 int extended_ms; /* negotiate extended master secret? */
343 int etm; /* negotiate encrypt then mac? */
344} opt;
345
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200346static void my_debug( void *ctx, int level,
347 const char *file, int line,
348 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000349{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200350 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000351
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200352 /* Extract basename from file */
353 for( p = basename = file; *p != '\0'; p++ )
354 if( *p == '/' || *p == '\\' )
355 basename = p + 1;
356
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100357 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s",
358 basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000359 fflush( (FILE *) ctx );
360}
361
362/*
363 * Test recv/send functions that make sure each try returns
364 * WANT_READ/WANT_WRITE at least once before sucesseding
365 */
366static int my_recv( void *ctx, unsigned char *buf, size_t len )
367{
368 static int first_try = 1;
369 int ret;
370
371 if( first_try )
372 {
373 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100374 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000375 }
376
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200377 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100378 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000379 first_try = 1; /* Next call will be a new operation */
380 return( ret );
381}
382
383static int my_send( void *ctx, const unsigned char *buf, size_t len )
384{
385 static int first_try = 1;
386 int ret;
387
388 if( first_try )
389 {
390 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100391 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000392 }
393
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200394 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100395 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000396 first_try = 1; /* Next call will be a new operation */
397 return( ret );
398}
399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400#if defined(MBEDTLS_X509_CRT_PARSE_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000401/*
402 * Enabled if debug_level > 1 in code below
403 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100404static int my_verify( void *data, mbedtls_x509_crt *crt,
405 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000406{
407 char buf[1024];
408 ((void) data);
409
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200410 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
411 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
412 mbedtls_printf( "%s", buf );
Rich Evans85b05ec2015-02-12 11:37:29 +0000413
Rich Evans85b05ec2015-02-12 11:37:29 +0000414 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200415 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100416 else
417 {
418 mbedtls_x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
419 mbedtls_printf( "%s\n", buf );
420 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000421
422 return( 0 );
423}
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200424
425static int ssl_sig_hashes_for_test[] = {
426#if defined(MBEDTLS_SHA512_C)
427 MBEDTLS_MD_SHA512,
428 MBEDTLS_MD_SHA384,
429#endif
430#if defined(MBEDTLS_SHA256_C)
431 MBEDTLS_MD_SHA256,
432 MBEDTLS_MD_SHA224,
433#endif
434#if defined(MBEDTLS_SHA1_C)
435 /* Allow SHA-1 as we use it extensively in tests. */
436 MBEDTLS_MD_SHA1,
437#endif
438 MBEDTLS_MD_NONE
439};
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200440#endif /* MBEDTLS_X509_CRT_PARSE_C */
Rich Evans85b05ec2015-02-12 11:37:29 +0000441
Hanno Becker16970d22017-10-10 15:56:37 +0100442/*
443 * Wait for an event from the underlying transport or the timer
444 * (Used in event-driven IO mode).
445 */
446#if !defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +0000447void idle( mbedtls_net_context *fd,
Hanno Becker16970d22017-10-10 15:56:37 +0100448 int idle_reason )
449{
450#else
Hanno Becker197a91c2017-10-31 10:58:53 +0000451void idle( mbedtls_net_context *fd,
Hanno Becker16970d22017-10-10 15:56:37 +0100452 mbedtls_timing_delay_context *timer,
453 int idle_reason )
454{
Hanno Becker16970d22017-10-10 15:56:37 +0100455#endif
456
457 int poll_type = 0;
458
459 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
460 poll_type = MBEDTLS_NET_POLL_WRITE;
461 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
462 poll_type = MBEDTLS_NET_POLL_READ;
463#if !defined(MBEDTLS_TIMING_C)
464 else
Hanno Becker16970d22017-10-10 15:56:37 +0100465 return;
Hanno Becker16970d22017-10-10 15:56:37 +0100466#endif
467
468 while( 1 )
469 {
Hanno Becker197a91c2017-10-31 10:58:53 +0000470 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +0100471#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +0000472 if( timer != NULL &&
473 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +0100474 {
Hanno Becker16970d22017-10-10 15:56:37 +0100475 break;
476 }
Hanno Becker197a91c2017-10-31 10:58:53 +0000477#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +0100478
Hanno Becker197a91c2017-10-31 10:58:53 +0000479 /* Check if underlying transport became available */
Hanno Becker16970d22017-10-10 15:56:37 +0100480 if( poll_type != 0 &&
481 mbedtls_net_poll( fd, poll_type, 0 ) == poll_type )
482 {
Hanno Becker16970d22017-10-10 15:56:37 +0100483 break;
484 }
485 }
486}
487
Paul Bakker9caf2d22010-02-18 19:37:19 +0000488int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000489{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200490 int ret = 0, len, tail_len, i, written, frags, retry_left;
491 mbedtls_net_context server_fd;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200492 unsigned char buf[MBEDTLS_SSL_MAX_CONTENT_LEN + 1];
493#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
494 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200495 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200496#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200497#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100498 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200499#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100500#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +0100501 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100502 const mbedtls_ecp_curve_info *curve_cur;
503#endif
504
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200505 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000506
Gilles Peskineef86ab22017-05-05 18:59:02 +0200507#if defined(MBEDTLS_X509_CRT_PARSE_C)
508 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
509#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200510 mbedtls_entropy_context entropy;
511 mbedtls_ctr_drbg_context ctr_drbg;
512 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200513 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200514 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200515#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200516 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200517#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200518#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200519 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200520 mbedtls_x509_crt cacert;
521 mbedtls_x509_crt clicert;
522 mbedtls_pk_context pkey;
Paul Bakkered27a042013-04-18 22:46:23 +0200523#endif
Paul Bakker9caf2d22010-02-18 19:37:19 +0000524 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000525 const int *list;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000526
Paul Bakker1a207ec2011-02-06 13:22:40 +0000527 /*
528 * Make sure memory references are valid.
529 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200530 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200531 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200532 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200533 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200534 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200535#if defined(MBEDTLS_X509_CRT_PARSE_C)
536 mbedtls_x509_crt_init( &cacert );
537 mbedtls_x509_crt_init( &clicert );
538 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200539#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200540#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200541 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200542#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000543
Paul Bakker9caf2d22010-02-18 19:37:19 +0000544 if( argc == 0 )
545 {
546 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000547 if( ret == 0 )
548 ret = 1;
549
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200550 mbedtls_printf( USAGE );
Paul Bakker51936882011-02-20 16:05:58 +0000551
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200552 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000553 while( *list )
554 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200555 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200556 list++;
557 if( !*list )
558 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200559 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000560 list++;
561 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200562 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000563 goto exit;
564 }
565
566 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100567 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000568 opt.server_port = DFL_SERVER_PORT;
569 opt.debug_level = DFL_DEBUG_LEVEL;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100570 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100571 opt.event = DFL_EVENT;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200572 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200573 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000574 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200575 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000576 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000577 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000578 opt.crt_file = DFL_CRT_FILE;
579 opt.key_file = DFL_KEY_FILE;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200580 opt.psk = DFL_PSK;
581 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200582 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Paul Bakker51936882011-02-20 16:05:58 +0000583 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Paul Bakker48916f92012-09-16 19:57:18 +0000584 opt.renegotiation = DFL_RENEGOTIATION;
585 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100586 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200587 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000588 opt.min_version = DFL_MIN_VERSION;
589 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100590 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200591 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100592 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200593 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200594 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100595 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200596 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200597 opt.reconnect = DFL_RECONNECT;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100598 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200599 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200600 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200601 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100602 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200603 opt.transport = DFL_TRANSPORT;
604 opt.hs_to_min = DFL_HS_TO_MIN;
605 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200606 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200607 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100608 opt.etm = DFL_ETM;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000609
610 for( i = 1; i < argc; i++ )
611 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000612 p = argv[i];
613 if( ( q = strchr( p, '=' ) ) == NULL )
614 goto usage;
615 *q++ = '\0';
616
617 if( strcmp( p, "server_name" ) == 0 )
618 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100619 else if( strcmp( p, "server_addr" ) == 0 )
620 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000621 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200622 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100623 else if( strcmp( p, "dtls" ) == 0 )
624 {
625 int t = atoi( q );
626 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200627 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100628 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200629 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100630 else
631 goto usage;
632 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000633 else if( strcmp( p, "debug_level" ) == 0 )
634 {
635 opt.debug_level = atoi( q );
636 if( opt.debug_level < 0 || opt.debug_level > 65535 )
637 goto usage;
638 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100639 else if( strcmp( p, "nbio" ) == 0 )
640 {
641 opt.nbio = atoi( q );
642 if( opt.nbio < 0 || opt.nbio > 2 )
643 goto usage;
644 }
Hanno Becker16970d22017-10-10 15:56:37 +0100645 else if( strcmp( p, "event" ) == 0 )
646 {
647 opt.event = atoi( q );
648 if( opt.event < 0 || opt.event > 2 )
649 goto usage;
650 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200651 else if( strcmp( p, "read_timeout" ) == 0 )
652 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200653 else if( strcmp( p, "max_resend" ) == 0 )
654 {
655 opt.max_resend = atoi( q );
656 if( opt.max_resend < 0 )
657 goto usage;
658 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000659 else if( strcmp( p, "request_page" ) == 0 )
660 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +0200661 else if( strcmp( p, "request_size" ) == 0 )
662 {
663 opt.request_size = atoi( q );
Hanno Beckerb6f880b2018-03-13 12:48:37 +0000664 if( opt.request_size < 0 || opt.request_size > MBEDTLS_SSL_MAX_CONTENT_LEN )
Paul Bakker93c32b22014-04-25 13:40:05 +0200665 goto usage;
666 }
Paul Bakker5690efc2011-05-26 13:16:06 +0000667 else if( strcmp( p, "ca_file" ) == 0 )
668 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +0000669 else if( strcmp( p, "ca_path" ) == 0 )
670 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +0000671 else if( strcmp( p, "crt_file" ) == 0 )
672 opt.crt_file = q;
673 else if( strcmp( p, "key_file" ) == 0 )
674 opt.key_file = q;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200675 else if( strcmp( p, "psk" ) == 0 )
676 opt.psk = q;
677 else if( strcmp( p, "psk_identity" ) == 0 )
678 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200679 else if( strcmp( p, "ecjpake_pw" ) == 0 )
680 opt.ecjpake_pw = q;
Paul Bakker51936882011-02-20 16:05:58 +0000681 else if( strcmp( p, "force_ciphersuite" ) == 0 )
682 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200683 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +0000684
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +0200685 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +0000686 {
687 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +0000688 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +0000689 }
Paul Bakker51936882011-02-20 16:05:58 +0000690 opt.force_ciphersuite[1] = 0;
691 }
Paul Bakker48916f92012-09-16 19:57:18 +0000692 else if( strcmp( p, "renegotiation" ) == 0 )
693 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100694 opt.renegotiation = (atoi( q )) ?
695 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
696 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +0000697 }
698 else if( strcmp( p, "allow_legacy" ) == 0 )
699 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100700 switch( atoi( q ) )
701 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100702 case -1:
703 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
704 break;
705 case 0:
706 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
707 break;
708 case 1:
709 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
710 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100711 default: goto usage;
712 }
Paul Bakker48916f92012-09-16 19:57:18 +0000713 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100714 else if( strcmp( p, "renegotiate" ) == 0 )
715 {
716 opt.renegotiate = atoi( q );
717 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
718 goto usage;
719 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200720 else if( strcmp( p, "exchanges" ) == 0 )
721 {
722 opt.exchanges = atoi( q );
723 if( opt.exchanges < 1 )
724 goto usage;
725 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200726 else if( strcmp( p, "reconnect" ) == 0 )
727 {
728 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +0200729 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200730 goto usage;
731 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100732 else if( strcmp( p, "reco_delay" ) == 0 )
733 {
734 opt.reco_delay = atoi( q );
735 if( opt.reco_delay < 0 )
736 goto usage;
737 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200738 else if( strcmp( p, "reconnect_hard" ) == 0 )
739 {
740 opt.reconnect_hard = atoi( q );
741 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
742 goto usage;
743 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200744 else if( strcmp( p, "tickets" ) == 0 )
745 {
746 opt.tickets = atoi( q );
747 if( opt.tickets < 0 || opt.tickets > 2 )
748 goto usage;
749 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200750 else if( strcmp( p, "alpn" ) == 0 )
751 {
752 opt.alpn_string = q;
753 }
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200754 else if( strcmp( p, "fallback" ) == 0 )
755 {
756 switch( atoi( q ) )
757 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200758 case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break;
759 case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200760 default: goto usage;
761 }
762 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200763 else if( strcmp( p, "extended_ms" ) == 0 )
764 {
765 switch( atoi( q ) )
766 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100767 case 0:
768 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
769 break;
770 case 1:
771 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
772 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200773 default: goto usage;
774 }
775 }
Hanno Beckere6706e62017-05-15 16:05:15 +0100776 else if( strcmp( p, "curves" ) == 0 )
777 opt.curves = q;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100778 else if( strcmp( p, "etm" ) == 0 )
779 {
780 switch( atoi( q ) )
781 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200782 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
783 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100784 default: goto usage;
785 }
786 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000787 else if( strcmp( p, "min_version" ) == 0 )
788 {
789 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200790 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000791 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200792 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100793 else if( strcmp( q, "tls1_1" ) == 0 ||
794 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200795 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100796 else if( strcmp( q, "tls1_2" ) == 0 ||
797 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200798 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000799 else
800 goto usage;
801 }
802 else if( strcmp( p, "max_version" ) == 0 )
803 {
804 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200805 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000806 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200807 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100808 else if( strcmp( q, "tls1_1" ) == 0 ||
809 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200810 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100811 else if( strcmp( q, "tls1_2" ) == 0 ||
812 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200813 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000814 else
815 goto usage;
816 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100817 else if( strcmp( p, "arc4" ) == 0 )
818 {
819 switch( atoi( q ) )
820 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200821 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
822 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +0100823 default: goto usage;
824 }
825 }
Gilles Peskinebc70a182017-05-09 15:59:24 +0200826 else if( strcmp( p, "allow_sha1" ) == 0 )
827 {
828 switch( atoi( q ) )
829 {
830 case 0: opt.allow_sha1 = 0; break;
831 case 1: opt.allow_sha1 = 1; break;
832 default: goto usage;
833 }
834 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000835 else if( strcmp( p, "force_version" ) == 0 )
836 {
837 if( strcmp( q, "ssl3" ) == 0 )
838 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200839 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
840 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000841 }
842 else if( strcmp( q, "tls1" ) == 0 )
843 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200844 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
845 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000846 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100847 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +0000848 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200849 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
850 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000851 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100852 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +0000853 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200854 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
855 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000856 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100857 else if( strcmp( q, "dtls1" ) == 0 )
858 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200859 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
860 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
861 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100862 }
863 else if( strcmp( q, "dtls1_2" ) == 0 )
864 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200865 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
866 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
867 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +0100868 }
Paul Bakker1d29fb52012-09-28 13:28:45 +0000869 else
870 goto usage;
871 }
Paul Bakker91ebfb52012-11-23 14:04:08 +0100872 else if( strcmp( p, "auth_mode" ) == 0 )
873 {
874 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200875 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100876 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200877 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100878 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200879 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100880 else
881 goto usage;
882 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200883 else if( strcmp( p, "max_frag_len" ) == 0 )
884 {
885 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200886 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200887 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200888 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200889 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200890 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200891 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200892 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200893 else
894 goto usage;
895 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200896 else if( strcmp( p, "trunc_hmac" ) == 0 )
897 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100898 switch( atoi( q ) )
899 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200900 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
901 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100902 default: goto usage;
903 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200904 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200905 else if( strcmp( p, "hs_timeout" ) == 0 )
906 {
907 if( ( p = strchr( q, '-' ) ) == NULL )
908 goto usage;
909 *p++ = '\0';
910 opt.hs_to_min = atoi( q );
911 opt.hs_to_max = atoi( p );
912 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
913 goto usage;
914 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100915 else if( strcmp( p, "recsplit" ) == 0 )
916 {
917 opt.recsplit = atoi( q );
918 if( opt.recsplit < 0 || opt.recsplit > 1 )
919 goto usage;
920 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200921 else if( strcmp( p, "dhmlen" ) == 0 )
922 {
923 opt.dhmlen = atoi( q );
924 if( opt.dhmlen < 0 )
925 goto usage;
926 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000927 else
928 goto usage;
929 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000930
Hanno Becker16970d22017-10-10 15:56:37 +0100931 /* Event-driven IO is incompatible with the above custom
932 * receive and send functions, as the polling builds on
933 * refers to the underlying net_context. */
934 if( opt.event == 1 && opt.nbio != 1 )
935 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +0100936 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +0100937 opt.nbio = 1;
938 }
939
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200940#if defined(MBEDTLS_DEBUG_C)
941 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +0200942#endif
943
Paul Bakkerc1516be2013-06-29 16:01:32 +0200944 if( opt.force_ciphersuite[0] > 0 )
945 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200946 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100947 ciphersuite_info =
948 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +0200949
Paul Bakker66c48102013-07-26 14:05:32 +0200950 if( opt.max_version != -1 &&
951 ciphersuite_info->min_minor_ver > opt.max_version )
952 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100953 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker66c48102013-07-26 14:05:32 +0200954 ret = 2;
955 goto usage;
956 }
957 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +0200958 ciphersuite_info->max_minor_ver < opt.min_version )
959 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100960 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +0200961 ret = 2;
962 goto usage;
963 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +0100964
965 /* If the server selects a version that's not supported by
966 * this suite, then there will be no common ciphersuite... */
967 if( opt.max_version == -1 ||
968 opt.max_version > ciphersuite_info->max_minor_ver )
969 {
Paul Bakker66c48102013-07-26 14:05:32 +0200970 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +0100971 }
Paul Bakker66c48102013-07-26 14:05:32 +0200972 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +0100973 {
Paul Bakker66c48102013-07-26 14:05:32 +0200974 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +0100975 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200976 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
977 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
978 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +0100979 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000980
981 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200982 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000983 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200984 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000985 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100986 mbedtls_printf( "forced RC4 ciphersuite with RC4 disabled\n" );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000987 ret = 2;
988 goto usage;
989 }
990
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200991 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000992 }
Paul Bakkerc1516be2013-06-29 16:01:32 +0200993 }
994
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200995#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +0000996 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200997 * Unhexify the pre-shared key if any is given
998 */
999 if( strlen( opt.psk ) )
1000 {
1001 unsigned char c;
1002 size_t j;
1003
1004 if( strlen( opt.psk ) % 2 != 0 )
1005 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001006 mbedtls_printf( "pre-shared key not valid hex\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001007 goto exit;
1008 }
1009
1010 psk_len = strlen( opt.psk ) / 2;
1011
1012 for( j = 0; j < strlen( opt.psk ); j += 2 )
1013 {
1014 c = opt.psk[j];
1015 if( c >= '0' && c <= '9' )
1016 c -= '0';
1017 else if( c >= 'a' && c <= 'f' )
1018 c -= 'a' - 10;
1019 else if( c >= 'A' && c <= 'F' )
1020 c -= 'A' - 10;
1021 else
1022 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001023 mbedtls_printf( "pre-shared key not valid hex\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001024 goto exit;
1025 }
1026 psk[ j / 2 ] = c << 4;
1027
1028 c = opt.psk[j + 1];
1029 if( c >= '0' && c <= '9' )
1030 c -= '0';
1031 else if( c >= 'a' && c <= 'f' )
1032 c -= 'a' - 10;
1033 else if( c >= 'A' && c <= 'F' )
1034 c -= 'A' - 10;
1035 else
1036 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001037 mbedtls_printf( "pre-shared key not valid hex\n" );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001038 goto exit;
1039 }
1040 psk[ j / 2 ] |= c;
1041 }
1042 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001043#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001044
Hanno Beckere6706e62017-05-15 16:05:15 +01001045#if defined(MBEDTLS_ECP_C)
1046 if( opt.curves != NULL )
1047 {
1048 p = (char *) opt.curves;
1049 i = 0;
1050
1051 if( strcmp( p, "none" ) == 0 )
1052 {
1053 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1054 }
1055 else if( strcmp( p, "default" ) != 0 )
1056 {
1057 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001058 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001059 {
1060 q = p;
1061
1062 /* Terminate the current string */
1063 while( *p != ',' && *p != '\0' )
1064 p++;
1065 if( *p == ',' )
1066 *p++ = '\0';
1067
1068 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1069 {
1070 curve_list[i++] = curve_cur->grp_id;
1071 }
1072 else
1073 {
1074 mbedtls_printf( "unknown curve %s\n", q );
1075 mbedtls_printf( "supported curves: " );
1076 for( curve_cur = mbedtls_ecp_curve_list();
1077 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1078 curve_cur++ )
1079 {
1080 mbedtls_printf( "%s ", curve_cur->name );
1081 }
1082 mbedtls_printf( "\n" );
1083 goto exit;
1084 }
1085 }
1086
1087 mbedtls_printf("Number of curves: %d\n", i );
1088
Hanno Becker8651a432017-06-09 16:13:22 +01001089 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001090 {
Hanno Becker8651a432017-06-09 16:13:22 +01001091 mbedtls_printf( "curves list too long, maximum %d",
1092 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001093 goto exit;
1094 }
1095
1096 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1097 }
1098 }
1099#endif /* MBEDTLS_ECP_C */
1100
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001101#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001102 if( opt.alpn_string != NULL )
1103 {
1104 p = (char *) opt.alpn_string;
1105 i = 0;
1106
1107 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001108 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001109 {
1110 alpn_list[i++] = p;
1111
1112 /* Terminate the current string and move on to next one */
1113 while( *p != ',' && *p != '\0' )
1114 p++;
1115 if( *p == ',' )
1116 *p++ = '\0';
1117 }
1118 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001119#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001120
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001121 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001122 * 0. Initialize the RNG and the session data
1123 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001124 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001125 fflush( stdout );
1126
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001127 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001128 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
1129 &entropy, (const unsigned char *) pers,
1130 strlen( pers ) ) ) != 0 )
Paul Bakker508ad5a2011-12-04 17:09:26 +00001131 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001132 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
1133 -ret );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001134 goto exit;
1135 }
1136
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001137 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001138
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001139#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001140 /*
1141 * 1.1. Load the trusted CA
1142 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001143 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001144 fflush( stdout );
1145
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001146#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001147 if( strlen( opt.ca_path ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001148 if( strcmp( opt.ca_path, "none" ) == 0 )
1149 ret = 0;
1150 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001151 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001152 else if( strlen( opt.ca_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001153 if( strcmp( opt.ca_file, "none" ) == 0 )
1154 ret = 0;
1155 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001156 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001157 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001158#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001159#if defined(MBEDTLS_CERTS_C)
1160 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001161 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001162 ret = mbedtls_x509_crt_parse( &cacert,
1163 (const unsigned char *) mbedtls_test_cas[i],
1164 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001165 if( ret != 0 )
1166 break;
1167 }
Paul Bakker5690efc2011-05-26 13:16:06 +00001168#else
1169 {
1170 ret = 1;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001171 mbedtls_printf( "MBEDTLS_CERTS_C not defined." );
Paul Bakker5690efc2011-05-26 13:16:06 +00001172 }
1173#endif
Paul Bakker42488232012-05-16 08:21:05 +00001174 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001175 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001176 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1177 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001178 goto exit;
1179 }
1180
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001181 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001182
1183 /*
1184 * 1.2. Load own certificate and private key
1185 *
1186 * (can be skipped if client authentication is not required)
1187 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001188 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001189 fflush( stdout );
1190
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001191#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001192 if( strlen( opt.crt_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001193 if( strcmp( opt.crt_file, "none" ) == 0 )
1194 ret = 0;
1195 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001196 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001197 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001198#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001199#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001200 ret = mbedtls_x509_crt_parse( &clicert,
1201 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001202 mbedtls_test_cli_crt_len );
Paul Bakker5690efc2011-05-26 13:16:06 +00001203#else
1204 {
1205 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001206 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakker5690efc2011-05-26 13:16:06 +00001207 }
1208#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001209 if( ret != 0 )
1210 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001211 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
1212 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001213 goto exit;
1214 }
1215
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001216#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001217 if( strlen( opt.key_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001218 if( strcmp( opt.key_file, "none" ) == 0 )
1219 ret = 0;
1220 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001221 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" );
Paul Bakker67968392010-07-18 08:28:20 +00001222 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001223#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001224#if defined(MBEDTLS_CERTS_C)
Hanno Becker16970d22017-10-10 15:56:37 +01001225 ret = mbedtls_pk_parse_key( &pkey,
1226 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001227 mbedtls_test_cli_key_len, NULL, 0 );
Paul Bakker5690efc2011-05-26 13:16:06 +00001228#else
1229 {
1230 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001231 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakker5690efc2011-05-26 13:16:06 +00001232 }
1233#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001234 if( ret != 0 )
1235 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001236 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
1237 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001238 goto exit;
1239 }
1240
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001241 mbedtls_printf( " ok\n" );
1242#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001243
1244 /*
1245 * 2. Start the connection
1246 */
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +01001247 if( opt.server_addr == NULL)
1248 opt.server_addr = opt.server_name;
1249
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001250 mbedtls_printf( " . Connecting to %s/%s/%s...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001251 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01001252 opt.server_addr, opt.server_port );
Paul Bakker5121ce52009-01-03 21:22:43 +00001253 fflush( stdout );
1254
Hanno Becker16970d22017-10-10 15:56:37 +01001255 if( ( ret = mbedtls_net_connect( &server_fd,
1256 opt.server_addr, opt.server_port,
1257 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
1258 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001259 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001260 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
1261 -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001262 goto exit;
1263 }
1264
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001265 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001266 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001267 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001268 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001269 if( ret != 0 )
1270 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001271 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
1272 -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001273 goto exit;
1274 }
1275
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001276 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001277
1278 /*
1279 * 3. Setup stuff
1280 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001281 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001282 fflush( stdout );
1283
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001284 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1285 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001286 opt.transport,
1287 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001288 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001289 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
1290 -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001291 goto exit;
1292 }
1293
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001294#if defined(MBEDTLS_X509_CRT_PARSE_C)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001295 /* The default algorithms profile disables SHA-1, but our tests still
1296 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001297 if( opt.allow_sha1 > 0 )
1298 {
1299 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1300 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
1301 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
1302 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02001303
Paul Bakker915275b2012-09-28 07:10:55 +00001304 if( opt.debug_level > 0 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001305 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
Gilles Peskineef86ab22017-05-05 18:59:02 +02001306#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker915275b2012-09-28 07:10:55 +00001307
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001308 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001309 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001310
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001311#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001312 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001313 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1314 opt.hs_to_max );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001315#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001316
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001317#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001318 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001319 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001320 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1321 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001322 goto exit;
1323 }
Paul Bakker05decb22013-08-15 13:33:48 +02001324#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001325
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001326#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001327 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001328 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Paul Bakker1f2bc622013-08-15 13:45:55 +02001329#endif
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001330
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001331#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001332 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001333 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001334#endif
1335
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001336#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001337 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001338 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001339#endif
1340
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001341#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001342 if( opt.recsplit != DFL_RECSPLIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001343 mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit
Hanno Becker16970d22017-10-10 15:56:37 +01001344 ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED
1345 : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED );
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001346#endif
1347
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001348#if defined(MBEDTLS_DHM_C)
1349 if( opt.dhmlen != DFL_DHMLEN )
1350 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1351#endif
1352
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001353#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001354 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001355 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001356 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001357 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1358 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001359 goto exit;
1360 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001361#endif
1362
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001363 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
1364 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001365
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001366 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001367
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001368#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001369 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001370#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001371
Paul Bakker645ce3a2012-10-31 12:32:41 +00001372 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001373 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001374
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001375#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001376 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001377 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02001378#endif
Paul Bakker51936882011-02-20 16:05:58 +00001379
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001380 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001381 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001382#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001383 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001384#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001385
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001386#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001387 if( strcmp( opt.ca_path, "none" ) != 0 &&
1388 strcmp( opt.ca_file, "none" ) != 0 )
1389 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001390 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001391 }
1392 if( strcmp( opt.crt_file, "none" ) != 0 &&
1393 strcmp( opt.key_file, "none" ) != 0 )
1394 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001395 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001396 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001397 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
1398 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001399 goto exit;
1400 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001401 }
Paul Bakkered27a042013-04-18 22:46:23 +02001402#endif
1403
Hanno Beckere6706e62017-05-15 16:05:15 +01001404#if defined(MBEDTLS_ECP_C)
1405 if( opt.curves != NULL &&
1406 strcmp( opt.curves, "default" ) != 0 )
1407 {
1408 mbedtls_ssl_conf_curves( &conf, curve_list );
1409 }
1410#endif
1411
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001412#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001413 if( ( ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001414 (const unsigned char *) opt.psk_identity,
1415 strlen( opt.psk_identity ) ) ) != 0 )
1416 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001417 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n",
1418 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001419 goto exit;
1420 }
Paul Bakkered27a042013-04-18 22:46:23 +02001421#endif
1422
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001423 if( opt.min_version != DFL_MIN_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001424 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1425 opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01001426
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001427 if( opt.max_version != DFL_MAX_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001428 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1429 opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00001430
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001431#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001432 if( opt.fallback != DFL_FALLBACK )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001433 mbedtls_ssl_conf_fallback( &conf, opt.fallback );
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001434#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001435
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001436 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
1437 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001438 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
1439 -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001440 goto exit;
1441 }
1442
1443#if defined(MBEDTLS_X509_CRT_PARSE_C)
1444 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
1445 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001446 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
1447 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001448 goto exit;
1449 }
1450#endif
1451
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001452#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
1453 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
1454 {
1455 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
1456 (const unsigned char *) opt.ecjpake_pw,
1457 strlen( opt.ecjpake_pw ) ) ) != 0 )
1458 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001459 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
1460 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001461 goto exit;
1462 }
1463 }
1464#endif
1465
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001466 if( opt.nbio == 2 )
1467 mbedtls_ssl_set_bio( &ssl, &server_fd, my_send, my_recv, NULL );
1468 else
Hanno Becker16970d22017-10-10 15:56:37 +01001469 mbedtls_ssl_set_bio( &ssl, &server_fd,
1470 mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02001471 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001472
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001473#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001474 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
1475 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001476#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001477
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001478 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001479
Paul Bakker5121ce52009-01-03 21:22:43 +00001480 /*
1481 * 4. Handshake
1482 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001483 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001484 fflush( stdout );
1485
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001486 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001487 {
Hanno Becker16970d22017-10-10 15:56:37 +01001488 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1489 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Paul Bakker40e46942009-01-03 21:51:57 +00001490 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001491 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
1492 -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001493 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
1494 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01001495 " Unable to verify the server's certificate. "
1496 "Either it is invalid,\n"
1497 " or you didn't set ca_file or ca_path "
1498 "to an appropriate value.\n"
1499 " Alternatively, you may want to use "
1500 "auth_mode=optional for testing purposes.\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001501 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001502 goto exit;
Paul Bakker40e46942009-01-03 21:51:57 +00001503 }
Hanno Becker16970d22017-10-10 15:56:37 +01001504
1505 /* For event-driven IO, wait for socket to become available */
1506 if( opt.event == 1 /* level triggered IO */ )
1507 {
1508#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001509 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001510#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001511 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001512#endif
1513 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001514 }
1515
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001516 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
Hanno Becker16970d22017-10-10 15:56:37 +01001517 mbedtls_ssl_get_version( &ssl ),
1518 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00001519
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001520 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
1521 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001522 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001523 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02001524
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02001525#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
1526 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
1527 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
1528#endif
1529
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001530#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001531 if( opt.alpn_string != NULL )
1532 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001533 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
1534 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001535 alp ? alp : "(none)" );
1536 }
1537#endif
1538
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001539 if( opt.reconnect != 0 )
1540 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001541 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001542 fflush( stdout );
1543
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001544 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001545 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001546 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
1547 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001548 goto exit;
1549 }
1550
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001551 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001552 }
1553
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001554#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001555 /*
1556 * 5. Verify the server certificate
1557 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001558 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001559
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02001560 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001561 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001562 char vrfy_buf[512];
1563
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001564 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001565
Hanno Becker16970d22017-10-10 15:56:37 +01001566 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
1567 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00001568
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01001569 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001570 }
1571 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001572 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001573
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001574 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001575 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001576 mbedtls_printf( " . Peer certificate information ...\n" );
1577 mbedtls_x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ",
1578 mbedtls_ssl_get_peer_cert( &ssl ) );
1579 mbedtls_printf( "%s\n", buf );
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001580 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001581#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001582
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001583#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001584 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001585 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001586 /*
1587 * Perform renegotiation (this must be done when the server is waiting
1588 * for input from our side).
1589 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001590 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001591 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001592 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001593 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001594 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1595 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001596 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001597 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
1598 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001599 goto exit;
1600 }
Hanno Becker16970d22017-10-10 15:56:37 +01001601
1602 /* For event-driven IO, wait for socket to become available */
1603 if( opt.event == 1 /* level triggered IO */ )
1604 {
1605#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001606 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001607#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001608 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001609#endif
1610 }
1611
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001612 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001613 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001614 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001615#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01001616
Paul Bakker5121ce52009-01-03 21:22:43 +00001617 /*
1618 * 6. Write the GET request
1619 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02001620 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001621send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001622 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001623 fflush( stdout );
1624
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001625 len = mbedtls_snprintf( (char *) buf, sizeof(buf) - 1, GET_REQUEST,
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001626 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02001627 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001628
1629 /* Add padding to GET request to reach opt.request_size in length */
1630 if( opt.request_size != DFL_REQUEST_SIZE &&
1631 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02001632 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001633 memset( buf + len, 'A', opt.request_size - len - tail_len );
1634 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02001635 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001636
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02001637 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof(buf) - len - 1 );
1638 len += tail_len;
1639
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02001640 /* Truncate if request size is smaller than the "natural" size */
1641 if( opt.request_size != DFL_REQUEST_SIZE &&
1642 len > opt.request_size )
1643 {
1644 len = opt.request_size;
1645
1646 /* Still end with \r\n unless that's really not possible */
1647 if( len >= 2 ) buf[len - 2] = '\r';
1648 if( len >= 1 ) buf[len - 1] = '\n';
1649 }
1650
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001651 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00001652 {
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001653 for( written = 0, frags = 0; written < len; written += ret, frags++ )
Paul Bakker5121ce52009-01-03 21:22:43 +00001654 {
Hanno Becker16970d22017-10-10 15:56:37 +01001655 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
1656 len - written ) ) <= 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001657 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001658 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1659 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001660 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001661 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
1662 -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001663 goto exit;
1664 }
Hanno Becker16970d22017-10-10 15:56:37 +01001665
1666 /* For event-driven IO, wait for socket to become available */
1667 if( opt.event == 1 /* level triggered IO */ )
1668 {
1669#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001670 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001671#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001672 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001673#endif
1674 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001675 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001676 }
1677 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001678 else /* Not stream, so datagram */
1679 {
Hanno Becker16970d22017-10-10 15:56:37 +01001680 while( 1 )
1681 {
1682 ret = mbedtls_ssl_write( &ssl, buf, len );
1683
1684 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1685 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
1686 break;
1687
1688 /* For event-driven IO, wait for socket to become available */
1689 if( opt.event == 1 /* level triggered IO */ )
1690 {
1691#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001692 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001693#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001694 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001695#endif
1696 }
1697 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001698
1699 if( ret < 0 )
1700 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001701 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
1702 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02001703 goto exit;
1704 }
1705
1706 frags = 1;
1707 written = ret;
1708 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001709
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02001710 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01001711 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
1712 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00001713
1714 /*
1715 * 7. Read the HTTP response
1716 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001717 mbedtls_printf( " < Read from server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001718 fflush( stdout );
1719
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001720 /*
1721 * TLS and DTLS need different reading styles (stream vs datagram)
1722 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001723 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001724 {
1725 do
1726 {
1727 len = sizeof( buf ) - 1;
1728 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001729 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001730
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001731 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
1732 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01001733 {
1734 /* For event-driven IO, wait for socket to become available */
1735 if( opt.event == 1 /* level triggered IO */ )
1736 {
1737#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001738 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001739#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001740 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001741#endif
1742 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001743 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01001744 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001745
1746 if( ret <= 0 )
1747 {
1748 switch( ret )
1749 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001750 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
1751 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001752 ret = 0;
1753 goto close_notify;
1754
1755 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001756 case MBEDTLS_ERR_NET_CONN_RESET:
1757 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001758 ret = 0;
1759 goto reconnect;
1760
1761 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001762 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
1763 -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001764 goto exit;
1765 }
1766 }
1767
1768 len = ret;
1769 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001770 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001771
1772 /* End of message should be detected according to the syntax of the
1773 * application protocol (eg HTTP), just use a dummy test here. */
1774 if( ret > 0 && buf[len-1] == '\n' )
1775 {
1776 ret = 0;
1777 break;
1778 }
1779 }
1780 while( 1 );
1781 }
1782 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00001783 {
1784 len = sizeof( buf ) - 1;
1785 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00001786
Hanno Becker16970d22017-10-10 15:56:37 +01001787 while( 1 )
1788 {
1789 ret = mbedtls_ssl_read( &ssl, buf, len );
1790
1791 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1792 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
1793 break;
1794
1795 /* For event-driven IO, wait for socket to become available */
1796 if( opt.event == 1 /* level triggered IO */ )
1797 {
1798#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001799 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001800#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001801 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001802#endif
1803 }
1804 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001805
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001806 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001807 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001808 switch( ret )
1809 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001810 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001811 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02001812 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02001813 goto send_request;
1814 goto exit;
1815
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001816 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
1817 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001818 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02001819 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00001820
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001821 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001822 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001823 goto exit;
1824 }
Paul Bakker5690efc2011-05-26 13:16:06 +00001825 }
1826
Paul Bakker5121ce52009-01-03 21:22:43 +00001827 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02001828 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001829 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02001830 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00001831 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001832
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001833 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001834 * 7b. Simulate hard reset and reconnect from same port?
1835 */
1836 if( opt.reconnect_hard != 0 )
1837 {
1838 opt.reconnect_hard = 0;
1839
1840 mbedtls_printf( " . Restarting connection from same port..." );
1841 fflush( stdout );
1842
1843 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
1844 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001845 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
1846 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001847 goto exit;
1848 }
1849
1850 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
1851 {
1852 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1853 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
1854 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001855 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
1856 -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001857 goto exit;
1858 }
Hanno Becker16970d22017-10-10 15:56:37 +01001859
1860 /* For event-driven IO, wait for socket to become available */
1861 if( opt.event == 1 /* level triggered IO */ )
1862 {
1863#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001864 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001865#else
Hanno Becker197a91c2017-10-31 10:58:53 +00001866 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01001867#endif
1868 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001869 }
1870
1871 mbedtls_printf( " ok\n" );
1872
1873 goto send_request;
1874 }
1875
1876 /*
1877 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02001878 */
1879 if( --opt.exchanges > 0 )
1880 goto send_request;
1881
1882 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02001883 * 8. Done, cleanly close the connection
1884 */
1885close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001886 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001887 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02001888
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02001889 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001890 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001891 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02001892 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02001893
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001894 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02001895
1896 /*
1897 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001898 */
1899reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001900 if( opt.reconnect != 0 )
1901 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02001902 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001903
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02001904 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01001905
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001906#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001907 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02001908 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001909#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02001910
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001911 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001912
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001913 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001914 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001915 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
1916 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001917 goto exit;
1918 }
1919
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001920 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001921 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001922 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_session returned %d\n\n",
1923 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001924 goto exit;
1925 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001926
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001927 if( ( ret = mbedtls_net_connect( &server_fd,
1928 opt.server_addr, opt.server_port,
1929 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
1930 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001931 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001932 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
1933 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001934 goto exit;
1935 }
1936
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02001937 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001938 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02001939 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001940 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02001941 if( ret != 0 )
1942 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001943 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001944 -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02001945 goto exit;
1946 }
1947
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001948 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001949 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01001950 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
1951 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001952 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001953 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
1954 -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001955 goto exit;
1956 }
1957 }
1958
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001959 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001960
1961 goto send_request;
1962 }
1963
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001964 /*
1965 * Cleanup and exit
1966 */
Paul Bakker5121ce52009-01-03 21:22:43 +00001967exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001968#ifdef MBEDTLS_ERROR_C
Paul Bakkera3d195c2011-11-27 21:07:34 +00001969 if( ret != 0 )
1970 {
1971 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001972 mbedtls_strerror( ret, error_buf, 100 );
1973 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00001974 }
1975#endif
1976
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02001977 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02001978
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001979#if defined(MBEDTLS_X509_CRT_PARSE_C)
1980 mbedtls_x509_crt_free( &clicert );
1981 mbedtls_x509_crt_free( &cacert );
1982 mbedtls_pk_free( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +02001983#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001984 mbedtls_ssl_session_free( &saved_session );
1985 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001986 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001987 mbedtls_ctr_drbg_free( &ctr_drbg );
1988 mbedtls_entropy_free( &entropy );
Paul Bakker5121ce52009-01-03 21:22:43 +00001989
Paul Bakkercce9d772011-11-18 14:26:47 +00001990#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001991 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001992 fflush( stdout ); getchar();
1993#endif
1994
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02001995 // Shell can not handle large exit numbers -> 1 for errors
1996 if( ret < 0 )
1997 ret = 1;
1998
Paul Bakker5121ce52009-01-03 21:22:43 +00001999 return( ret );
2000}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002001#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
2002 MBEDTLS_SSL_CLI_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002003 MBEDTLS_CTR_DRBG_C MBEDTLS_TIMING_C */