blob: 86a9c1e196ed898d454400e896ccb2abbde3f0ff [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19
Mateusz Starzyk6c2e9b62021-05-19 17:54:54 +020020#define MBEDTLS_ALLOW_PRIVATE_ACCESS
21
Gilles Peskineab7ce962021-01-05 21:27:53 +010022#include "ssl_test_lib.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000023
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +010024#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +020025#include "test/psa_crypto_helpers.h"
Przemek Stekiel3f076df2022-03-04 09:36:46 +010026#endif /* MBEDTLS_USE_PSA_CRYPTO || MBEDTLS_SSL_PROTO_TLS1_3 */
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +020027
Gilles Peskineab7ce962021-01-05 21:27:53 +010028#if defined(MBEDTLS_SSL_TEST_IMPOSSIBLE)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020029int main( void )
30{
Gilles Peskineab7ce962021-01-05 21:27:53 +010031 mbedtls_printf( MBEDTLS_SSL_TEST_IMPOSSIBLE );
32 mbedtls_exit( 0 );
33}
34#elif !defined(MBEDTLS_SSL_CLI_C)
35int main( void )
36{
37 mbedtls_printf( "MBEDTLS_SSL_CLI_C not defined.\n" );
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +020038 mbedtls_exit( 0 );
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020039}
Gilles Peskineb4df7542021-01-08 21:20:09 +010040#else /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_CLI_C */
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020041
Piotr Nowicki7d01ef62019-11-20 15:00:17 +010042/* Size of memory to be allocated for the heap, when using the library's memory
43 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
44#define MEMORY_HEAP_SIZE 120000
45
Hanno Beckere4ad3e82017-09-18 15:05:46 +010046#define MAX_REQUEST_SIZE 20000
47#define MAX_REQUEST_SIZE_STR "20000"
48
Paul Bakker9caf2d22010-02-18 19:37:19 +000049#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010050#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020051#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +000052#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +020053#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +000054#define DFL_DEBUG_LEVEL 0
Hanno Beckerbb425db2019-04-03 12:59:58 +010055#define DFL_CONTEXT_CRT_CB 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010056#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010057#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020058#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +020059#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +000060#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +000061#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +000062#define DFL_CRT_FILE ""
63#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +010064#define DFL_KEY_OPAQUE 0
Hanno Beckerca04fdc2018-11-07 16:22:14 +000065#define DFL_KEY_PWD ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020066#define DFL_PSK ""
Hanno Becker1d911cd2018-11-15 13:06:09 +000067#define DFL_PSK_OPAQUE 0
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020068#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020069#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +020070#define DFL_EC_MAX_OPS -1
Paul Bakker51936882011-02-20 16:05:58 +000071#define DFL_FORCE_CIPHER 0
Xiaofei Bai746f9482021-11-12 08:53:56 +000072#define DFL_TLS1_3_KEX_MODES MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020073#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010074#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010075#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +020076#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +020077#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +000078#define DFL_MAX_VERSION -1
Gilles Peskinebc70a182017-05-09 15:59:24 +020079#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +010080#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020081#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +010082#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +010083#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +020084#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +020085#define DFL_RECONNECT 0
Jerry Yuad9e99b2022-10-28 12:18:52 +080086#define DFL_RECO_SERVER_NAME NULL
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010087#define DFL_RECO_DELAY 0
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +020088#define DFL_RECO_MODE 1
Hanno Becker90cb3592019-04-09 17:24:19 +010089#define DFL_CID_ENABLED 0
90#define DFL_CID_VALUE ""
Hanno Beckerb42ec0d2019-05-03 17:30:59 +010091#define DFL_CID_ENABLED_RENEGO -1
92#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +020093#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020094#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +020095#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +010096#define DFL_CURVES NULL
Hanno Becker11ceadd2021-08-10 13:36:41 +010097#define DFL_SIG_ALGS NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020098#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +020099#define DFL_HS_TO_MIN 0
100#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200101#define DFL_DTLS_MTU -1
Hanno Becker4d615912018-08-14 13:33:30 +0100102#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200103#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200104#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100105#define DFL_ETM -1
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300106#define DFL_SERIALIZE 0
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200107#define DFL_CONTEXT_FILE ""
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300108#define DFL_EXTENDED_MS_ENFORCE -1
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200109#define DFL_CA_CALLBACK 0
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300110#define DFL_EAP_TLS 0
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200111#define DFL_REPRODUCIBLE 0
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100112#define DFL_NSS_KEYLOG 0
113#define DFL_NSS_KEYLOG_FILE NULL
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100114#define DFL_SKIP_CLOSE_NOTIFY 0
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200115#define DFL_QUERY_CONFIG_MODE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300116#define DFL_USE_SRTP 0
Ron Eldor311b95a2018-07-08 08:50:31 +0300117#define DFL_SRTP_FORCE_PROFILE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300118#define DFL_SRTP_MKI ""
Przemek Stekielf1822fe2022-04-25 12:45:41 +0200119#define DFL_KEY_OPAQUE_ALG "none"
Paul Bakker0e6975b2009-02-10 22:19:10 +0000120
Paul Bakker93c32b22014-04-25 13:40:05 +0200121#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
122#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000123
Ronald Crone68ab4f2022-10-05 12:46:29 +0200124#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Janos Follathae13beb2019-04-05 14:06:58 +0100125#define USAGE_CONTEXT_CRT_CB \
Hanno Beckerbb425db2019-04-03 12:59:58 +0100126 " context_crt_cb=%%d This determines whether the CRT verification callback is bound\n" \
127 " to the SSL configuration of the SSL context.\n" \
128 " Possible values:\n"\
129 " - 0 (default): Use CRT callback bound to configuration\n" \
130 " - 1: Use CRT callback bound to SSL context\n"
131#else
Janos Follathae13beb2019-04-05 14:06:58 +0100132#define USAGE_CONTEXT_CRT_CB ""
Ronald Crone68ab4f2022-10-05 12:46:29 +0200133#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
134#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200135#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000136#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100137 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
138 " default: \"\" (pre-loaded)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100139 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100140 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
141 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100142 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100143 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
144 " default: \"\" (pre-loaded)\n" \
Hanno Beckerbffa54f2020-08-17 09:42:19 +0100145 " key_file=%%s default: \"\" (pre-loaded)\n"\
146 " key_pwd=%%s Password for key specified by key_file argument\n"\
147 " default: none\n"
Paul Bakker5690efc2011-05-26 13:16:06 +0000148#else
149#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200150 " No file operations available (MBEDTLS_FS_IO not defined)\n"
151#endif /* MBEDTLS_FS_IO */
Ronald Crone68ab4f2022-10-05 12:46:29 +0200152#else /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +0200153#define USAGE_IO ""
Ronald Crone68ab4f2022-10-05 12:46:29 +0200154#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
155#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100156#define USAGE_KEY_OPAQUE \
157 " key_opaque=%%d Handle your private key as if it were opaque\n" \
158 " default: 0 (disabled)\n"
159#else
160#define USAGE_KEY_OPAQUE ""
161#endif
Paul Bakkered27a042013-04-18 22:46:23 +0200162
Hanno Beckera0e20d02019-05-15 14:03:01 +0100163#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100164#define USAGE_CID \
165 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
166 " default: 0 (disabled)\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100167 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100168 " default: same as 'cid' parameter\n" \
Hanno Becker90cb3592019-04-09 17:24:19 +0100169 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100170 " default: \"\"\n" \
171 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100172 " default: same as 'cid_val' parameter\n"
Hanno Beckera0e20d02019-05-15 14:03:01 +0100173#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +0100174#define USAGE_CID ""
Hanno Beckera0e20d02019-05-15 14:03:01 +0100175#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +0100176
Ronald Cron73fe8df2022-10-05 14:31:43 +0200177#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckere86964c2018-10-23 11:37:50 +0100178#define USAGE_PSK_RAW \
Piotr Nowicki9926eaf2019-11-20 14:54:36 +0100179 " psk=%%s default: \"\" (disabled)\n" \
180 " The PSK values are in hex, without 0x.\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200181 " psk_identity=%%s default: \"Client_identity\"\n"
Hanno Beckere86964c2018-10-23 11:37:50 +0100182#if defined(MBEDTLS_USE_PSA_CRYPTO)
183#define USAGE_PSK_SLOT \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000184 " psk_opaque=%%d default: 0 (don't use opaque static PSK)\n" \
185 " Enable this to store the PSK configured through command line\n" \
186 " parameter `psk` in a PSA-based key slot.\n" \
Hanno Beckere86964c2018-10-23 11:37:50 +0100187 " Note: Currently only supported in conjunction with\n" \
188 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
189 " to force a particular PSK-only ciphersuite.\n" \
190 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
191 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
192 " with prepopulated key slots instead of importing raw key material.\n"
193#else
194#define USAGE_PSK_SLOT ""
195#endif /* MBEDTLS_USE_PSA_CRYPTO */
Hanno Becker1bac87c2019-03-29 12:02:26 +0000196#define USAGE_PSK USAGE_PSK_RAW USAGE_PSK_SLOT
197#else
198#define USAGE_PSK ""
Ronald Cron73fe8df2022-10-05 14:31:43 +0200199#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Hanno Becker1bac87c2019-03-29 12:02:26 +0000200
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200201#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
202#define USAGE_CA_CALLBACK \
203 " ca_callback=%%d default: 0 (disabled)\n" \
204 " Enable this to use the trusted certificate callback function\n"
205#else
206#define USAGE_CA_CALLBACK ""
207#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Paul Bakker5690efc2011-05-26 13:16:06 +0000208
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200209#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200210#define USAGE_TICKETS \
211 " tickets=%%d default: 1 (enabled)\n"
212#else
213#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200214#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200215
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300216#define USAGE_EAP_TLS \
217 " eap_tls=%%d default: 0 (disabled)\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100218#define USAGE_NSS_KEYLOG \
Hanno Beckerbc5308c2019-09-09 11:38:51 +0100219 " nss_keylog=%%d default: 0 (disabled)\n" \
220 " This cannot be used with eap_tls=1\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100221#define USAGE_NSS_KEYLOG_FILE \
222 " nss_keylog_file=%%s\n"
Ron Eldor65b56ef2019-09-26 16:40:48 +0300223#if defined(MBEDTLS_SSL_DTLS_SRTP)
224#define USAGE_SRTP \
225 " use_srtp=%%d default: 0 (disabled)\n" \
226 " This cannot be used with eap_tls=1 or "\
227 " nss_keylog=1\n" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200228 " srtp_force_profile=%%d default: 0 (all enabled)\n" \
Ron Eldor65b56ef2019-09-26 16:40:48 +0300229 " available profiles:\n" \
230 " 1 - SRTP_AES128_CM_HMAC_SHA1_80\n" \
231 " 2 - SRTP_AES128_CM_HMAC_SHA1_32\n" \
232 " 3 - SRTP_NULL_HMAC_SHA1_80\n" \
233 " 4 - SRTP_NULL_HMAC_SHA1_32\n" \
234 " mki=%%s default: \"\" (in hex, without 0x)\n"
235#else /* MBEDTLS_SSL_DTLS_SRTP */
236#define USAGE_SRTP ""
237#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300238
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200239#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200240#define USAGE_MAX_FRAG_LEN \
241 " max_frag_len=%%d default: 16384 (tls default)\n" \
242 " options: 512, 1024, 2048, 4096\n"
243#else
244#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200246
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200247#if defined(MBEDTLS_DHM_C)
248#define USAGE_DHMLEN \
249 " dhmlen=%%d default: (library default: 1024 bits)\n"
250#else
251#define USAGE_DHMLEN
252#endif
253
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200254#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200255#define USAGE_ALPN \
256 " alpn=%%s default: \"\" (disabled)\n" \
257 " example: spdy/1,http/1.1\n"
258#else
259#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200260#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200261
Hanno Beckere6706e62017-05-15 16:05:15 +0100262#if defined(MBEDTLS_ECP_C)
263#define USAGE_CURVES \
264 " curves=a,b,c,d default: \"default\" (library default)\n" \
265 " example: \"secp521r1,brainpoolP512r1\"\n" \
266 " - use \"none\" for empty list\n" \
267 " - see mbedtls_ecp_curve_list()\n" \
268 " for acceptable curve names\n"
269#else
270#define USAGE_CURVES ""
271#endif
272
Ronald Crone68ab4f2022-10-05 12:46:29 +0200273#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +0100274#define USAGE_SIG_ALGS \
275 " sig_algs=a,b,c,d default: \"default\" (library default)\n" \
276 " example: \"ecdsa_secp256r1_sha256,ecdsa_secp384r1_sha384\"\n"
277#else
278#define USAGE_SIG_ALGS ""
279#endif
280
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200281#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200282#define USAGE_DTLS \
283 " dtls=%%d default: 0 (TLS)\n" \
284 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200285 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Becker4d615912018-08-14 13:33:30 +0100286 " mtu=%%d default: (library default: unlimited)\n" \
287 " dgram_packing=%%d default: 1 (allowed)\n" \
288 " allow or forbid packing of multiple\n" \
289 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200290#else
291#define USAGE_DTLS ""
292#endif
293
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200294#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200295#define USAGE_EMS \
296 " extended_ms=0/1 default: (library default: on)\n"
297#else
298#define USAGE_EMS ""
299#endif
300
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200301#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100302#define USAGE_ETM \
303 " etm=0/1 default: (library default: on)\n"
304#else
305#define USAGE_ETM ""
306#endif
307
Philippe Antoine738153a2019-06-18 20:16:43 +0200308#define USAGE_REPRODUCIBLE \
309 " reproducible=0/1 default: 0 (disabled)\n"
310
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200311#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100312#define USAGE_RENEGO \
313 " renegotiation=%%d default: 0 (disabled)\n" \
314 " renegotiate=%%d default: 0 (disabled)\n"
315#else
316#define USAGE_RENEGO ""
317#endif
318
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200319#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
320#define USAGE_ECJPAKE \
321 " ecjpake_pw=%%s default: none (disabled)\n"
322#else
323#define USAGE_ECJPAKE ""
324#endif
325
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200326#if defined(MBEDTLS_ECP_RESTARTABLE)
327#define USAGE_ECRESTART \
328 " ec_max_ops=%%s default: library default (restart disabled)\n"
329#else
330#define USAGE_ECRESTART ""
331#endif
332
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300333#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
334#define USAGE_SERIALIZATION \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200335 " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
336 " options: 1 (serialize)\n" \
337 " 2 (serialize with re-initialization)\n" \
338 " context_file=%%s The file path to write a serialized connection\n"\
339 " in the form of base64 code (serialize option\n" \
340 " must be set)\n" \
341 " default: \"\" (do nothing)\n" \
342 " option: a file path\n"
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300343#else
344#define USAGE_SERIALIZATION ""
345#endif
346
Przemek Stekielf1822fe2022-04-25 12:45:41 +0200347#define USAGE_KEY_OPAQUE_ALGS \
348 " key_opaque_algs=%%s Allowed opaque key algorithms.\n" \
Ronald Cron50969e32022-09-16 15:54:33 +0200349 " comma-separated pair of values among the following:\n" \
350 " rsa-sign-pkcs1, rsa-sign-pss, rsa-sign-pss-sha256,\n" \
351 " rsa-sign-pss-sha384, rsa-sign-pss-sha512, rsa-decrypt,\n" \
352 " ecdsa-sign, ecdh, none (only acceptable for\n" \
353 " the second value).\n" \
Przemek Stekielf1822fe2022-04-25 12:45:41 +0200354
Ronald Cron6f135e12021-12-08 16:57:54 +0100355#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +0000356#define USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100357 " tls13_kex_modes=%%s default: all\n" \
Jerry Yu31c01d32021-08-24 10:49:06 +0800358 " options: psk, psk_ephemeral, ephemeral, ephemeral_all, psk_all, all\n"
Hanno Becker2c0f6972021-07-24 06:27:16 +0100359#else
Xiaofei Bai746f9482021-11-12 08:53:56 +0000360#define USAGE_TLS1_3_KEY_EXCHANGE_MODES ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100361#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +0100362
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200363/* USAGE is arbitrarily split to stay under the portable string literal
364 * length limit: 4095 bytes in C99. */
365#define USAGE1 \
Paul Bakker67968392010-07-18 08:28:20 +0000366 "\n usage: ssl_client2 param=<>...\n" \
367 "\n acceptable parameters:\n" \
368 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100369 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000370 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000371 " request_page=%%s default: \".\"\n" \
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +0100372 " request_size=%%d default: about 34 (basic request)\n" \
373 " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \
374 " If 0, in the first exchange only an empty\n" \
375 " application data message is sent followed by\n" \
376 " a second non-empty message before attempting\n" \
377 " to read a response from the server\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100378 " debug_level=%%d default: 0 (disabled)\n" \
379 " nbio=%%d default: 0 (blocking I/O)\n" \
380 " options: 1 (non-blocking), 2 (added delays)\n" \
381 " event=%%d default: 0 (loop)\n" \
382 " options: 1 (level-triggered, implies nbio=1),\n" \
383 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200384 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100385 " skip_close_notify=%%d default: 0 (send close_notify)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100386 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200387 USAGE_DTLS \
Hanno Becker90cb3592019-04-09 17:24:19 +0100388 USAGE_CID \
Ron Eldor6ea64512018-07-02 10:08:07 +0300389 USAGE_SRTP \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200390 "\n"
391#define USAGE2 \
Hanno Becker16970d22017-10-10 15:56:37 +0100392 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100393 " options: none, optional, required\n" \
394 USAGE_IO \
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100395 USAGE_KEY_OPAQUE \
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200396 USAGE_CA_CALLBACK \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100397 "\n" \
398 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200399 USAGE_ECJPAKE \
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200400 USAGE_ECRESTART \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200401 "\n"
402#define USAGE3 \
Hanno Becker16970d22017-10-10 15:56:37 +0100403 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100404 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200405 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200406 " reconnect=%%d number of reconnections using session resumption\n" \
Jerry Yuad9e99b2022-10-28 12:18:52 +0800407 " default: 0 (disabled)\n" \
408 " reco_server_name=%%s default: NULL\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200409 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnard686adb42019-06-03 09:55:16 +0200410 " reco_mode=%%d 0: copy session, 1: serialize session\n" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200411 " default: 1\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200412 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200413 USAGE_TICKETS \
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300414 USAGE_EAP_TLS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100415 USAGE_MAX_FRAG_LEN \
Janos Follathae13beb2019-04-05 14:06:58 +0100416 USAGE_CONTEXT_CRT_CB \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200417 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200418 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100419 USAGE_ETM \
Philippe Antoine738153a2019-06-18 20:16:43 +0200420 USAGE_REPRODUCIBLE \
Hanno Beckere6706e62017-05-15 16:05:15 +0100421 USAGE_CURVES \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000422 USAGE_SIG_ALGS \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200423 USAGE_DHMLEN \
Przemek Stekielf1822fe2022-04-25 12:45:41 +0200424 USAGE_KEY_OPAQUE_ALGS \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200425 "\n"
Jerry Yub1dc59a2021-08-05 15:58:09 +0800426
Ronald Cron6f135e12021-12-08 16:57:54 +0100427#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +0000428#define TLS1_3_VERSION_OPTIONS ", tls13"
Ronald Cron6f135e12021-12-08 16:57:54 +0100429#else /* MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800430#define TLS1_3_VERSION_OPTIONS ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100431#endif /* !MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800432
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200433#define USAGE4 \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100434 " allow_sha1=%%d default: 0\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000435 " min_version=%%s default: (library default: tls12)\n" \
436 " max_version=%%s default: (library default: tls12)\n" \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100437 " force_version=%%s default: \"\" (none)\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000438 " options: tls12, dtls12" TLS1_3_VERSION_OPTIONS \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100439 "\n\n" \
440 " force_ciphersuite=<name> default: all enabled\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000441 USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100442 " query_config=<name> return 0 if the specified\n" \
Andres Amaya Garciabc818842018-10-16 21:08:38 +0100443 " configuration macro is defined and 1\n" \
444 " otherwise. The expansion of the macro\n" \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100445 " is printed if it is defined\n" \
446 USAGE_SERIALIZATION \
Paul Bakker51936882011-02-20 16:05:58 +0000447 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000448
Hanno Becker11ceadd2021-08-10 13:36:41 +0100449#define ALPN_LIST_SIZE 10
450#define CURVE_LIST_SIZE 20
451#define SIG_ALG_LIST_SIZE 5
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500452
Rich Evans85b05ec2015-02-12 11:37:29 +0000453/*
454 * global options
455 */
456struct options
457{
458 const char *server_name; /* hostname of the server (client only) */
459 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200460 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000461 int debug_level; /* level of debugging */
462 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100463 int event; /* loop or event-driven IO? level or edge triggered? */
464 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000465 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000466 const char *request_page; /* page on server to request */
467 int request_size; /* pad request with header to requested size */
468 const char *ca_file; /* the file with the CA certificate(s) */
469 const char *ca_path; /* the path with the CA certificate(s) reside */
470 const char *crt_file; /* the file with the client certificate */
471 const char *key_file; /* the file with the client key */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100472 int key_opaque; /* handle private key as if it were opaque */
Hanno Beckere86964c2018-10-23 11:37:50 +0100473#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000474 int psk_opaque;
Hanno Beckere86964c2018-10-23 11:37:50 +0100475#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200476#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Beckercbb59032019-03-28 14:14:22 +0000477 int ca_callback; /* Use callback for trusted certificate list */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200478#endif
Hanno Beckerca04fdc2018-11-07 16:22:14 +0000479 const char *key_pwd; /* the password for the client key */
Rich Evans85b05ec2015-02-12 11:37:29 +0000480 const char *psk; /* the pre-shared key */
481 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200482 const char *ecjpake_pw; /* the EC J-PAKE password */
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200483 int ec_max_ops; /* EC consecutive operations limit */
Rich Evans85b05ec2015-02-12 11:37:29 +0000484 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
Ronald Cron6f135e12021-12-08 16:57:54 +0100485#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +0100486 int tls13_kex_modes; /* supported TLS 1.3 key exchange modes */
Ronald Cron6f135e12021-12-08 16:57:54 +0100487#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000488 int renegotiation; /* enable / disable renegotiation */
489 int allow_legacy; /* allow legacy renegotiation */
490 int renegotiate; /* attempt renegotiation? */
491 int renego_delay; /* delay before enforcing renegotiation */
492 int exchanges; /* number of data exchanges */
493 int min_version; /* minimum protocol version accepted */
494 int max_version; /* maximum protocol version accepted */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200495 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000496 int auth_mode; /* verify mode for connection */
497 unsigned char mfl_code; /* code for maximum fragment length */
498 int trunc_hmac; /* negotiate truncated hmac or not */
499 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200500 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000501 int reconnect; /* attempt to resume session */
Xiaokang Qianfb8ac462022-10-08 11:09:54 +0000502 const char *reco_server_name; /* hostname of the server (re-connect) */
Rich Evans85b05ec2015-02-12 11:37:29 +0000503 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200504 int reco_mode; /* how to keep the session around */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200505 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000506 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100507 const char *curves; /* list of supported elliptic curves */
Hanno Becker11ceadd2021-08-10 13:36:41 +0100508 const char *sig_algs; /* supported TLS 1.3 signature algorithms */
Rich Evans85b05ec2015-02-12 11:37:29 +0000509 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000510 int transport; /* TLS or DTLS? */
511 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
512 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800513 int dtls_mtu; /* UDP Maximum transport unit for DTLS */
Rich Evans85b05ec2015-02-12 11:37:29 +0000514 int fallback; /* is this a fallback connection? */
Hanno Becker4d615912018-08-14 13:33:30 +0100515 int dgram_packing; /* allow/forbid datagram packing */
Rich Evans85b05ec2015-02-12 11:37:29 +0000516 int extended_ms; /* negotiate extended master secret? */
517 int etm; /* negotiate encrypt then mac? */
Hanno Beckerbb425db2019-04-03 12:59:58 +0100518 int context_crt_cb; /* use context-specific CRT verify callback */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300519 int eap_tls; /* derive EAP-TLS keying material? */
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100520 int nss_keylog; /* export NSS key log material */
521 const char *nss_keylog_file; /* NSS key log file */
Hanno Becker90cb3592019-04-09 17:24:19 +0100522 int cid_enabled; /* whether to use the CID extension or not */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100523 int cid_enabled_renego; /* whether to use the CID extension or not
524 * during renegotiation */
Hanno Becker90cb3592019-04-09 17:24:19 +0100525 const char *cid_val; /* the CID to use for incoming messages */
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300526 int serialize; /* serialize/deserialize connection */
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200527 const char *context_file; /* the file to write a serialized connection
528 * in the form of base64 code (serialize
529 * option must be set) */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100530 const char *cid_val_renego; /* the CID to use for incoming messages
531 * after renegotiation */
Philippe Antoine154feb22019-06-11 17:50:23 +0200532 int reproducible; /* make communication reproducible */
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100533 int skip_close_notify; /* skip sending the close_notify alert */
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200534 int query_config_mode; /* whether to read config */
Ron Eldor6ea64512018-07-02 10:08:07 +0300535 int use_srtp; /* Support SRTP */
536 int force_srtp_profile; /* SRTP protection profile to use or all */
Ron Eldoref72faf2018-07-12 11:54:20 +0300537 const char *mki; /* The dtls mki value to use */
Przemek Stekielf1822fe2022-04-25 12:45:41 +0200538 const char *key_opaque_alg1; /* Allowed opaque key alg 1 */
539 const char *key_opaque_alg2; /* Allowed Opaque key alg 2 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000540} opt;
541
Gilles Peskine0d980b82021-01-05 23:34:27 +0100542#include "ssl_test_common_source.c"
Hanno Becker8b1af2f2019-07-03 17:02:43 +0100543
Ronald Crone68ab4f2022-10-05 12:46:29 +0200544#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Beckera1051b42019-02-26 11:38:29 +0000545static unsigned char peer_crt_info[1024];
Hanno Beckera9766c2c2019-02-25 17:43:18 +0000546
Rich Evans85b05ec2015-02-12 11:37:29 +0000547/*
548 * Enabled if debug_level > 1 in code below
549 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100550static int my_verify( void *data, mbedtls_x509_crt *crt,
551 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000552{
553 char buf[1024];
554 ((void) data);
555
Hanno Becker7ac83f92020-10-09 10:48:22 +0100556 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
557
Hanno Becker612a2f12020-10-09 09:19:39 +0100558#if !defined(MBEDTLS_X509_REMOVE_INFO)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200559 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
Hanno Beckera9766c2c2019-02-25 17:43:18 +0000560 if( depth == 0 )
561 memcpy( peer_crt_info, buf, sizeof( buf ) );
562
563 if( opt.debug_level == 0 )
564 return( 0 );
565
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200566 mbedtls_printf( "%s", buf );
Peter Kolbus9a969b62018-12-11 13:55:56 -0600567#else
568 ((void) crt);
569 ((void) depth);
570#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000571
Rich Evans85b05ec2015-02-12 11:37:29 +0000572 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200573 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100574 else
575 {
Hanno Becker7ac83f92020-10-09 10:48:22 +0100576 x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100577 mbedtls_printf( "%s\n", buf );
578 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000579
580 return( 0 );
581}
Ronald Crone68ab4f2022-10-05 12:46:29 +0200582#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200583
Hanno Beckera0e20d02019-05-15 14:03:01 +0100584#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100585int report_cid_usage( mbedtls_ssl_context *ssl,
586 const char *additional_description )
587{
588 int ret;
589 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
590 size_t peer_cid_len;
591 int cid_negotiated;
592
593 if( opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM )
594 return( 0 );
595
Hanno Becker6ae14c02019-05-22 16:59:25 +0100596 /* Check if the use of a CID has been negotiated,
597 * but don't ask for the CID value and length.
598 *
599 * Note: Here and below, we're demonstrating the various ways
600 * in which mbedtls_ssl_get_peer_cid() can be called,
601 * depending on whether or not the length/value of the
602 * peer's CID is needed.
603 *
604 * An actual application, however, should use
605 * just one call to mbedtls_ssl_get_peer_cid(). */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100606 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
Hanno Becker6ae14c02019-05-22 16:59:25 +0100607 NULL, NULL );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100608 if( ret != 0 )
609 {
610 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200611 (unsigned int) -ret );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100612 return( ret );
613 }
614
615 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
616 {
617 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
618 {
619 mbedtls_printf( "(%s) Use of Connection ID was rejected by the server.\n",
620 additional_description );
621 }
622 }
623 else
624 {
625 size_t idx=0;
626 mbedtls_printf( "(%s) Use of Connection ID has been negotiated.\n",
627 additional_description );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100628
629 /* Ask for just the length of the peer's CID. */
630 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
631 NULL, &peer_cid_len );
632 if( ret != 0 )
633 {
634 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200635 (unsigned int) -ret );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100636 return( ret );
637 }
638
639 /* Ask for just length + value of the peer's CID. */
640 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
641 peer_cid, &peer_cid_len );
642 if( ret != 0 )
643 {
644 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200645 (unsigned int) -ret );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100646 return( ret );
647 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100648 mbedtls_printf( "(%s) Peer CID (length %u Bytes): ",
649 additional_description,
650 (unsigned) peer_cid_len );
651 while( idx < peer_cid_len )
652 {
653 mbedtls_printf( "%02x ", peer_cid[ idx ] );
654 idx++;
655 }
656 mbedtls_printf( "\n" );
657 }
658
659 return( 0 );
660}
Hanno Beckera0e20d02019-05-15 14:03:01 +0100661#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100662
Jerry Yu02035342022-08-03 12:43:06 +0800663static int ssl_save_session_serialize( mbedtls_ssl_context *ssl,
664 unsigned char **session_data,
665 size_t *session_data_len )
666{
667 int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
668 mbedtls_ssl_session exported_session;
669
670 /* free any previously saved data */
671 if( *session_data != NULL )
672 {
673 mbedtls_platform_zeroize( *session_data, *session_data_len );
674 mbedtls_free( *session_data );
675 *session_data = NULL;
676 *session_data_len = 0;
677 }
678
679 mbedtls_ssl_session_init( &exported_session );
680 ret = mbedtls_ssl_get_session( ssl, &exported_session );
681 if( ret != 0 )
682 {
683 mbedtls_printf(
684 "failed\n ! mbedtls_ssl_get_session() returned -%#02x\n",
685 (unsigned) -ret );
686 goto exit;
687 }
688
689 /* get size of the buffer needed */
690 mbedtls_ssl_session_save( &exported_session, NULL, 0, session_data_len );
691 *session_data = mbedtls_calloc( 1, *session_data_len );
692 if( *session_data == NULL )
693 {
694 mbedtls_printf( " failed\n ! alloc %u bytes for session data\n",
695 (unsigned) *session_data_len );
696 ret = MBEDTLS_ERR_SSL_ALLOC_FAILED;
697 goto exit;
698 }
699
700 /* actually save session data */
701 if( ( ret = mbedtls_ssl_session_save( &exported_session,
702 *session_data, *session_data_len,
703 session_data_len ) ) != 0 )
704 {
705 mbedtls_printf( " failed\n ! mbedtls_ssl_session_saved returned -0x%04x\n\n",
706 (unsigned int) -ret );
707 goto exit;
708 }
709
710exit:
711 mbedtls_ssl_session_free( &exported_session );
712 return( ret );
713}
Jerry Yu4746b102022-09-13 11:11:48 +0800714
Paul Bakker9caf2d22010-02-18 19:37:19 +0000715int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000716{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200717 int ret = 0, len, tail_len, i, written, frags, retry_left;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200718 int query_config_ret = 0;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200719 mbedtls_net_context server_fd;
Hanno Becker8b1af2f2019-07-03 17:02:43 +0100720 io_ctx_t io_ctx;
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100721
Ronald Crone68ab4f2022-10-05 12:46:29 +0200722#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +0100723 uint16_t sig_alg_list[SIG_ALG_LIST_SIZE];
Ronald Cron81378b72022-10-05 09:18:01 +0200724#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +0100725
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100726 unsigned char buf[MAX_REQUEST_SIZE + 1];
727
Ronald Cron73fe8df2022-10-05 14:31:43 +0200728#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200729 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200730 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200731#endif
Hanno Becker90cb3592019-04-09 17:24:19 +0100732
Hanno Beckera0e20d02019-05-15 14:03:01 +0100733#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100734 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100735 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Becker90cb3592019-04-09 17:24:19 +0100736 size_t cid_len = 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100737 size_t cid_renego_len = 0;
Hanno Becker90cb3592019-04-09 17:24:19 +0100738#endif
739
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200740#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100741 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200742#endif
Piotr Nowicki7d01ef62019-11-20 15:00:17 +0100743
744#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
745 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
746#endif
747
Hanno Beckere6706e62017-05-15 16:05:15 +0100748#if defined(MBEDTLS_ECP_C)
Brett Warren25386b72021-08-17 09:32:04 +0100749 uint16_t group_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100750 const mbedtls_ecp_curve_info *curve_cur;
751#endif
Ron Eldor6ea64512018-07-02 10:08:07 +0300752#if defined(MBEDTLS_SSL_DTLS_SRTP)
Johan Pascal85269572020-08-25 10:01:54 +0200753 unsigned char mki[MBEDTLS_TLS_SRTP_MAX_MKI_LENGTH];
Johan Pascal48f62e92020-08-22 22:04:20 +0200754 size_t mki_len=0;
Ron Eldor6ea64512018-07-02 10:08:07 +0300755#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100756
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200757 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000758
Hanno Beckere86964c2018-10-23 11:37:50 +0100759#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cron73fe8df2022-10-05 14:31:43 +0200760#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Andrzej Kurek03e01462022-01-03 12:53:24 +0100761 mbedtls_svc_key_id_t slot = MBEDTLS_SVC_KEY_ID_INIT;
Hanno Beckere86964c2018-10-23 11:37:50 +0100762 psa_algorithm_t alg = 0;
Janos Follathbe4efc22019-08-08 11:38:18 +0100763 psa_key_attributes_t key_attributes;
Andrzej Kurek7a58d522022-01-19 12:34:02 -0500764#endif
Hanno Beckere86964c2018-10-23 11:37:50 +0100765 psa_status_t status;
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +0100766#elif defined(MBEDTLS_SSL_PROTO_TLS1_3)
767 psa_status_t status;
Hanno Beckere86964c2018-10-23 11:37:50 +0100768#endif
769
Gilles Peskinef1cb75f2021-01-13 18:46:01 +0100770 rng_context_t rng;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200771 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200772 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200773 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +0200774 unsigned char *session_data = NULL;
775 size_t session_data_len = 0;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200776#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200777 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200778#endif
Ronald Crone68ab4f2022-10-05 12:46:29 +0200779#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200780 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200781 mbedtls_x509_crt cacert;
782 mbedtls_x509_crt clicert;
783 mbedtls_pk_context pkey;
Andrzej Kurek6ee1e202022-10-12 10:17:25 -0400784 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100785#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek03e01462022-01-03 12:53:24 +0100786 mbedtls_svc_key_id_t key_slot = MBEDTLS_SVC_KEY_ID_INIT; /* invalid key slot */
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100787#endif
Ronald Crone68ab4f2022-10-05 12:46:29 +0200788#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakker9caf2d22010-02-18 19:37:19 +0000789 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000790 const int *list;
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +0200791#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
792 unsigned char *context_buf = NULL;
793 size_t context_buf_len;
794#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300795 unsigned char eap_tls_keymaterial[16];
796 unsigned char eap_tls_iv[8];
797 const char* eap_tls_label = "client EAP encryption";
798 eap_tls_keys eap_tls_keying;
Ron Eldor65b56ef2019-09-26 16:40:48 +0300799#if defined( MBEDTLS_SSL_DTLS_SRTP )
800 /*! master keys and master salt for SRTP generated during handshake */
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200801 unsigned char dtls_srtp_key_material[MBEDTLS_TLS_SRTP_MAX_KEY_MATERIAL_LENGTH];
802 const char* dtls_srtp_label = "EXTRACTOR-dtls_srtp";
803 dtls_srtp_keys dtls_srtp_keying;
804 const mbedtls_ssl_srtp_profile default_profiles[] = {
Johan Pascal43f94902020-09-22 12:25:52 +0200805 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80,
806 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32,
807 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80,
Johan Pascal253d0262020-09-22 13:04:45 +0200808 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32,
809 MBEDTLS_TLS_SRTP_UNSET
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200810 };
Ron Eldor65b56ef2019-09-26 16:40:48 +0300811#endif /* MBEDTLS_SSL_DTLS_SRTP */
Paul Bakker9caf2d22010-02-18 19:37:19 +0000812
Piotr Nowicki7d01ef62019-11-20 15:00:17 +0100813#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
814 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
815#endif
816
Gilles Peskine60fe6602021-02-16 18:56:42 +0100817#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +0100818 test_hooks_init( );
Gilles Peskine60fe6602021-02-16 18:56:42 +0100819#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +0100820
Paul Bakker1a207ec2011-02-06 13:22:40 +0000821 /*
822 * Make sure memory references are valid.
823 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200824 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200825 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200826 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200827 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Gilles Peskinef1cb75f2021-01-13 18:46:01 +0100828 rng_init( &rng );
Ronald Crone68ab4f2022-10-05 12:46:29 +0200829#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200830 mbedtls_x509_crt_init( &cacert );
831 mbedtls_x509_crt_init( &clicert );
832 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200833#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200834#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200835 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200836#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000837
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +0100838#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Beckerb2b468b2018-11-12 17:46:59 +0000839 status = psa_crypto_init();
840 if( status != PSA_SUCCESS )
841 {
842 mbedtls_fprintf( stderr, "Failed to initialize PSA Crypto implementation: %d\n",
843 (int) status );
844 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
845 goto exit;
846 }
Przemek Stekiel3f076df2022-03-04 09:36:46 +0100847#endif /* MBEDTLS_USE_PSA_CRYPTO || MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine21462112021-01-13 23:53:09 +0100848#if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
849 mbedtls_test_enable_insecure_external_rng( );
Gilles Peskine94ad8312021-01-25 13:42:28 +0100850#endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
Hanno Beckerb2b468b2018-11-12 17:46:59 +0000851
Paul Bakker9caf2d22010-02-18 19:37:19 +0000852 if( argc == 0 )
853 {
854 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000855 if( ret == 0 )
856 ret = 1;
857
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200858 mbedtls_printf( USAGE1 );
859 mbedtls_printf( USAGE2 );
860 mbedtls_printf( USAGE3 );
861 mbedtls_printf( USAGE4 );
Paul Bakker51936882011-02-20 16:05:58 +0000862
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200863 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000864 while( *list )
865 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200866 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200867 list++;
868 if( !*list )
869 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200870 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000871 list++;
872 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200873 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000874 goto exit;
875 }
876
877 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100878 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000879 opt.server_port = DFL_SERVER_PORT;
880 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker90cb3592019-04-09 17:24:19 +0100881 opt.cid_enabled = DFL_CID_ENABLED;
882 opt.cid_val = DFL_CID_VALUE;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100883 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
884 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100885 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100886 opt.event = DFL_EVENT;
Hanno Beckerbb425db2019-04-03 12:59:58 +0100887 opt.context_crt_cb = DFL_CONTEXT_CRT_CB;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200888 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200889 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000890 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200891 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000892 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000893 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000894 opt.crt_file = DFL_CRT_FILE;
895 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100896 opt.key_opaque = DFL_KEY_OPAQUE;
Hanno Beckerca04fdc2018-11-07 16:22:14 +0000897 opt.key_pwd = DFL_KEY_PWD;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200898 opt.psk = DFL_PSK;
Hanno Beckere86964c2018-10-23 11:37:50 +0100899#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000900 opt.psk_opaque = DFL_PSK_OPAQUE;
Hanno Beckere86964c2018-10-23 11:37:50 +0100901#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200902#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
903 opt.ca_callback = DFL_CA_CALLBACK;
904#endif
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200905 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200906 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200907 opt.ec_max_ops = DFL_EC_MAX_OPS;
Paul Bakker51936882011-02-20 16:05:58 +0000908 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Ronald Cron6f135e12021-12-08 16:57:54 +0100909#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +0000910 opt.tls13_kex_modes = DFL_TLS1_3_KEX_MODES;
Ronald Cron6f135e12021-12-08 16:57:54 +0100911#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker48916f92012-09-16 19:57:18 +0000912 opt.renegotiation = DFL_RENEGOTIATION;
913 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100914 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200915 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000916 opt.min_version = DFL_MIN_VERSION;
917 opt.max_version = DFL_MAX_VERSION;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200918 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100919 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200920 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200921 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100922 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200923 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200924 opt.reconnect = DFL_RECONNECT;
Jerry Yuad9e99b2022-10-28 12:18:52 +0800925 opt.reco_server_name = DFL_RECO_SERVER_NAME;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100926 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200927 opt.reco_mode = DFL_RECO_MODE;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200928 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200929 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200930 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100931 opt.curves = DFL_CURVES;
Hanno Becker11ceadd2021-08-10 13:36:41 +0100932 opt.sig_algs = DFL_SIG_ALGS;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200933 opt.transport = DFL_TRANSPORT;
934 opt.hs_to_min = DFL_HS_TO_MIN;
935 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200936 opt.dtls_mtu = DFL_DTLS_MTU;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200937 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200938 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100939 opt.etm = DFL_ETM;
Hanno Becker4d615912018-08-14 13:33:30 +0100940 opt.dgram_packing = DFL_DGRAM_PACKING;
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300941 opt.serialize = DFL_SERIALIZE;
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200942 opt.context_file = DFL_CONTEXT_FILE;
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300943 opt.eap_tls = DFL_EAP_TLS;
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200944 opt.reproducible = DFL_REPRODUCIBLE;
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100945 opt.nss_keylog = DFL_NSS_KEYLOG;
946 opt.nss_keylog_file = DFL_NSS_KEYLOG_FILE;
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100947 opt.skip_close_notify = DFL_SKIP_CLOSE_NOTIFY;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200948 opt.query_config_mode = DFL_QUERY_CONFIG_MODE;
Ron Eldor6ea64512018-07-02 10:08:07 +0300949 opt.use_srtp = DFL_USE_SRTP;
950 opt.force_srtp_profile = DFL_SRTP_FORCE_PROFILE;
951 opt.mki = DFL_SRTP_MKI;
Przemek Stekielf1822fe2022-04-25 12:45:41 +0200952 opt.key_opaque_alg1 = DFL_KEY_OPAQUE_ALG;
953 opt.key_opaque_alg2 = DFL_KEY_OPAQUE_ALG;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000954
955 for( i = 1; i < argc; i++ )
956 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000957 p = argv[i];
958 if( ( q = strchr( p, '=' ) ) == NULL )
959 goto usage;
960 *q++ = '\0';
961
962 if( strcmp( p, "server_name" ) == 0 )
963 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100964 else if( strcmp( p, "server_addr" ) == 0 )
965 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000966 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200967 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100968 else if( strcmp( p, "dtls" ) == 0 )
969 {
970 int t = atoi( q );
971 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200972 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100973 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200974 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100975 else
976 goto usage;
977 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000978 else if( strcmp( p, "debug_level" ) == 0 )
979 {
980 opt.debug_level = atoi( q );
981 if( opt.debug_level < 0 || opt.debug_level > 65535 )
982 goto usage;
983 }
Hanno Beckerbb425db2019-04-03 12:59:58 +0100984 else if( strcmp( p, "context_crt_cb" ) == 0 )
985 {
986 opt.context_crt_cb = atoi( q );
987 if( opt.context_crt_cb != 0 && opt.context_crt_cb != 1 )
988 goto usage;
989 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100990 else if( strcmp( p, "nbio" ) == 0 )
991 {
992 opt.nbio = atoi( q );
993 if( opt.nbio < 0 || opt.nbio > 2 )
994 goto usage;
995 }
Hanno Becker16970d22017-10-10 15:56:37 +0100996 else if( strcmp( p, "event" ) == 0 )
997 {
998 opt.event = atoi( q );
999 if( opt.event < 0 || opt.event > 2 )
1000 goto usage;
1001 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001002 else if( strcmp( p, "read_timeout" ) == 0 )
1003 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02001004 else if( strcmp( p, "max_resend" ) == 0 )
1005 {
1006 opt.max_resend = atoi( q );
1007 if( opt.max_resend < 0 )
1008 goto usage;
1009 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001010 else if( strcmp( p, "request_page" ) == 0 )
1011 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +02001012 else if( strcmp( p, "request_size" ) == 0 )
1013 {
1014 opt.request_size = atoi( q );
Hanno Beckere4ad3e82017-09-18 15:05:46 +01001015 if( opt.request_size < 0 ||
1016 opt.request_size > MAX_REQUEST_SIZE )
Paul Bakker93c32b22014-04-25 13:40:05 +02001017 goto usage;
1018 }
Paul Bakker5690efc2011-05-26 13:16:06 +00001019 else if( strcmp( p, "ca_file" ) == 0 )
1020 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +00001021 else if( strcmp( p, "ca_path" ) == 0 )
1022 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +00001023 else if( strcmp( p, "crt_file" ) == 0 )
1024 opt.crt_file = q;
1025 else if( strcmp( p, "key_file" ) == 0 )
1026 opt.key_file = q;
Hanno Becker2d3ac682020-08-17 09:42:37 +01001027 else if( strcmp( p, "key_pwd" ) == 0 )
1028 opt.key_pwd = q;
Ronald Crone68ab4f2022-10-05 12:46:29 +02001029#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001030 else if( strcmp( p, "key_opaque" ) == 0 )
1031 opt.key_opaque = atoi( q );
1032#endif
Hanno Beckera0e20d02019-05-15 14:03:01 +01001033#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +01001034 else if( strcmp( p, "cid" ) == 0 )
1035 {
1036 opt.cid_enabled = atoi( q );
1037 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
1038 goto usage;
1039 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001040 else if( strcmp( p, "cid_renego" ) == 0 )
1041 {
1042 opt.cid_enabled_renego = atoi( q );
1043 if( opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1 )
1044 goto usage;
1045 }
Hanno Becker90cb3592019-04-09 17:24:19 +01001046 else if( strcmp( p, "cid_val" ) == 0 )
1047 {
1048 opt.cid_val = q;
1049 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001050 else if( strcmp( p, "cid_val_renego" ) == 0 )
1051 {
1052 opt.cid_val_renego = q;
1053 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001054#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001055 else if( strcmp( p, "psk" ) == 0 )
1056 opt.psk = q;
Hanno Beckere86964c2018-10-23 11:37:50 +01001057#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001058 else if( strcmp( p, "psk_opaque" ) == 0 )
1059 opt.psk_opaque = atoi( q );
Hanno Beckere86964c2018-10-23 11:37:50 +01001060#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001061#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1062 else if( strcmp( p, "ca_callback" ) == 0)
1063 opt.ca_callback = atoi( q );
1064#endif
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001065 else if( strcmp( p, "psk_identity" ) == 0 )
1066 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001067 else if( strcmp( p, "ecjpake_pw" ) == 0 )
1068 opt.ecjpake_pw = q;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001069 else if( strcmp( p, "ec_max_ops" ) == 0 )
1070 opt.ec_max_ops = atoi( q );
Paul Bakker51936882011-02-20 16:05:58 +00001071 else if( strcmp( p, "force_ciphersuite" ) == 0 )
1072 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001073 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +00001074
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +02001075 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +00001076 {
1077 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +00001078 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +00001079 }
Paul Bakker51936882011-02-20 16:05:58 +00001080 opt.force_ciphersuite[1] = 0;
1081 }
Paul Bakker48916f92012-09-16 19:57:18 +00001082 else if( strcmp( p, "renegotiation" ) == 0 )
1083 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001084 opt.renegotiation = (atoi( q )) ?
1085 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1086 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +00001087 }
1088 else if( strcmp( p, "allow_legacy" ) == 0 )
1089 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001090 switch( atoi( q ) )
1091 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001092 case -1:
1093 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1094 break;
1095 case 0:
1096 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1097 break;
1098 case 1:
1099 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1100 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001101 default: goto usage;
1102 }
Paul Bakker48916f92012-09-16 19:57:18 +00001103 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001104 else if( strcmp( p, "renegotiate" ) == 0 )
1105 {
1106 opt.renegotiate = atoi( q );
1107 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1108 goto usage;
1109 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02001110 else if( strcmp( p, "exchanges" ) == 0 )
1111 {
1112 opt.exchanges = atoi( q );
1113 if( opt.exchanges < 1 )
1114 goto usage;
1115 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001116 else if( strcmp( p, "reconnect" ) == 0 )
1117 {
1118 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02001119 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001120 goto usage;
1121 }
Jerry Yuad9e99b2022-10-28 12:18:52 +08001122 else if( strcmp( p, "reco_server_name" ) == 0 )
Xiaokang Qianfb8ac462022-10-08 11:09:54 +00001123 opt.reco_server_name = q;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001124 else if( strcmp( p, "reco_delay" ) == 0 )
1125 {
1126 opt.reco_delay = atoi( q );
1127 if( opt.reco_delay < 0 )
1128 goto usage;
1129 }
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02001130 else if( strcmp( p, "reco_mode" ) == 0 )
1131 {
1132 opt.reco_mode = atoi( q );
1133 if( opt.reco_mode < 0 )
1134 goto usage;
1135 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001136 else if( strcmp( p, "reconnect_hard" ) == 0 )
1137 {
1138 opt.reconnect_hard = atoi( q );
1139 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
1140 goto usage;
1141 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001142 else if( strcmp( p, "tickets" ) == 0 )
1143 {
1144 opt.tickets = atoi( q );
Jerry Yu7a513052022-08-09 13:34:21 +08001145 if( opt.tickets < 0 )
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001146 goto usage;
1147 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001148 else if( strcmp( p, "alpn" ) == 0 )
1149 {
1150 opt.alpn_string = q;
1151 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001152 else if( strcmp( p, "extended_ms" ) == 0 )
1153 {
1154 switch( atoi( q ) )
1155 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001156 case 0:
1157 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1158 break;
1159 case 1:
1160 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1161 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001162 default: goto usage;
1163 }
1164 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001165 else if( strcmp( p, "curves" ) == 0 )
1166 opt.curves = q;
Ronald Crone68ab4f2022-10-05 12:46:29 +02001167#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +01001168 else if( strcmp( p, "sig_algs" ) == 0 )
1169 opt.sig_algs = q;
Ronald Cron81378b72022-10-05 09:18:01 +02001170#endif
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001171 else if( strcmp( p, "etm" ) == 0 )
1172 {
1173 switch( atoi( q ) )
1174 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001175 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1176 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001177 default: goto usage;
1178 }
1179 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001180#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +01001181 else if( strcmp( p, "tls13_kex_modes" ) == 0 )
1182 {
Jerry Yu31c01d32021-08-24 10:49:06 +08001183 if( strcmp( q, "psk" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001184 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001185 else if( strcmp(q, "psk_ephemeral" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001186 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL;
Jerry Yu31c01d32021-08-24 10:49:06 +08001187 else if( strcmp(q, "ephemeral" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001188 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001189 else if( strcmp(q, "ephemeral_all" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001190 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ALL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001191 else if( strcmp( q, "psk_all" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001192 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ALL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001193 else if( strcmp( q, "all" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001194 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001195 else goto usage;
1196 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001197#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001198 else if( strcmp( p, "min_version" ) == 0 )
1199 {
Xiaofei Baid25fab62021-12-02 06:36:27 +00001200 if( strcmp( q, "tls12" ) == 0 ||
1201 strcmp( q, "dtls12" ) == 0 )
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001202 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
Ronald Cron6f135e12021-12-08 16:57:54 +01001203#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +00001204 else if( strcmp( q, "tls13" ) == 0 )
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001205 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_3;
Ronald Cron6f135e12021-12-08 16:57:54 +01001206#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001207 else
1208 goto usage;
1209 }
1210 else if( strcmp( p, "max_version" ) == 0 )
1211 {
Xiaofei Baid25fab62021-12-02 06:36:27 +00001212 if( strcmp( q, "tls12" ) == 0 ||
1213 strcmp( q, "dtls12" ) == 0 )
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001214 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Ronald Cron6f135e12021-12-08 16:57:54 +01001215#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +00001216 else if( strcmp( q, "tls13" ) == 0 )
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001217 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_3;
Ronald Cron6f135e12021-12-08 16:57:54 +01001218#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001219 else
1220 goto usage;
1221 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001222 else if( strcmp( p, "allow_sha1" ) == 0 )
1223 {
1224 switch( atoi( q ) )
1225 {
1226 case 0: opt.allow_sha1 = 0; break;
1227 case 1: opt.allow_sha1 = 1; break;
1228 default: goto usage;
1229 }
1230 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001231 else if( strcmp( p, "force_version" ) == 0 )
1232 {
Xiaofei Baid25fab62021-12-02 06:36:27 +00001233 if( strcmp( q, "tls12" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001234 {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001235 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
1236 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001237 }
Xiaofei Baid25fab62021-12-02 06:36:27 +00001238 else if( strcmp( q, "dtls12" ) == 0 )
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001239 {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001240 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
1241 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001242 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001243 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001244#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +00001245 else if( strcmp( q, "tls13" ) == 0 )
Jerry Yub1dc59a2021-08-05 15:58:09 +08001246 {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001247 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_3;
1248 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_3;
Jerry Yub1dc59a2021-08-05 15:58:09 +08001249 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001250#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001251 else
1252 goto usage;
1253 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001254 else if( strcmp( p, "auth_mode" ) == 0 )
1255 {
1256 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001257 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001258 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001259 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001260 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001261 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001262 else
1263 goto usage;
1264 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001265 else if( strcmp( p, "max_frag_len" ) == 0 )
1266 {
1267 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001268 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001269 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001270 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001271 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001272 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001273 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001274 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001275 else
1276 goto usage;
1277 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001278 else if( strcmp( p, "trunc_hmac" ) == 0 )
1279 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001280 switch( atoi( q ) )
1281 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001282 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1283 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001284 default: goto usage;
1285 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001286 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001287 else if( strcmp( p, "hs_timeout" ) == 0 )
1288 {
1289 if( ( p = strchr( q, '-' ) ) == NULL )
1290 goto usage;
1291 *p++ = '\0';
1292 opt.hs_to_min = atoi( q );
1293 opt.hs_to_max = atoi( p );
1294 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1295 goto usage;
1296 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001297 else if( strcmp( p, "mtu" ) == 0 )
1298 {
1299 opt.dtls_mtu = atoi( q );
1300 if( opt.dtls_mtu < 0 )
1301 goto usage;
1302 }
Hanno Becker4d615912018-08-14 13:33:30 +01001303 else if( strcmp( p, "dgram_packing" ) == 0 )
1304 {
1305 opt.dgram_packing = atoi( q );
1306 if( opt.dgram_packing != 0 &&
1307 opt.dgram_packing != 1 )
1308 {
1309 goto usage;
1310 }
1311 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001312 else if( strcmp( p, "recsplit" ) == 0 )
1313 {
1314 opt.recsplit = atoi( q );
1315 if( opt.recsplit < 0 || opt.recsplit > 1 )
1316 goto usage;
1317 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001318 else if( strcmp( p, "dhmlen" ) == 0 )
1319 {
1320 opt.dhmlen = atoi( q );
1321 if( opt.dhmlen < 0 )
1322 goto usage;
1323 }
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001324 else if( strcmp( p, "query_config" ) == 0 )
1325 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001326 opt.query_config_mode = 1;
1327 query_config_ret = query_config( q );
gabor-mezei-arm78595852020-04-28 10:40:30 +02001328 goto exit;
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001329 }
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001330 else if( strcmp( p, "serialize") == 0 )
1331 {
1332 opt.serialize = atoi( q );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03001333 if( opt.serialize < 0 || opt.serialize > 2)
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001334 goto usage;
1335 }
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001336 else if( strcmp( p, "context_file") == 0 )
1337 {
1338 opt.context_file = q;
1339 }
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001340 else if( strcmp( p, "eap_tls" ) == 0 )
1341 {
1342 opt.eap_tls = atoi( q );
1343 if( opt.eap_tls < 0 || opt.eap_tls > 1 )
1344 goto usage;
1345 }
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001346 else if( strcmp( p, "reproducible" ) == 0 )
1347 {
1348 opt.reproducible = 1;
1349 }
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001350 else if( strcmp( p, "nss_keylog" ) == 0 )
1351 {
1352 opt.nss_keylog = atoi( q );
1353 if( opt.nss_keylog < 0 || opt.nss_keylog > 1 )
1354 goto usage;
1355 }
1356 else if( strcmp( p, "nss_keylog_file" ) == 0 )
1357 {
1358 opt.nss_keylog_file = q;
1359 }
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01001360 else if( strcmp( p, "skip_close_notify" ) == 0 )
1361 {
1362 opt.skip_close_notify = atoi( q );
1363 if( opt.skip_close_notify < 0 || opt.skip_close_notify > 1 )
1364 goto usage;
Johan Pascalb64eab72020-04-24 02:53:49 +07001365 }
Ron Eldor6ea64512018-07-02 10:08:07 +03001366 else if( strcmp( p, "use_srtp" ) == 0 )
1367 {
1368 opt.use_srtp = atoi ( q );
1369 }
1370 else if( strcmp( p, "srtp_force_profile" ) == 0 )
1371 {
1372 opt.force_srtp_profile = atoi( q );
1373 }
1374 else if( strcmp( p, "mki" ) == 0 )
1375 {
1376 opt.mki = q;
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01001377 }
Przemek Stekielf1822fe2022-04-25 12:45:41 +02001378 else if( strcmp( p, "key_opaque_algs" ) == 0 )
1379 {
Przemek Stekiel77fc9ab2022-04-29 09:51:54 +02001380 if( key_opaque_alg_parse( q, &opt.key_opaque_alg1,
1381 &opt.key_opaque_alg2 ) != 0 )
Przemek Stekielf1822fe2022-04-25 12:45:41 +02001382 goto usage;
1383 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001384 else
1385 goto usage;
1386 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001387
Hanno Beckerbc5308c2019-09-09 11:38:51 +01001388 if( opt.nss_keylog != 0 && opt.eap_tls != 0 )
1389 {
1390 mbedtls_printf( "Error: eap_tls and nss_keylog options cannot be used together.\n" );
1391 goto usage;
1392 }
1393
Hanno Becker16970d22017-10-10 15:56:37 +01001394 /* Event-driven IO is incompatible with the above custom
1395 * receive and send functions, as the polling builds on
1396 * refers to the underlying net_context. */
1397 if( opt.event == 1 && opt.nbio != 1 )
1398 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001399 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001400 opt.nbio = 1;
1401 }
1402
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001403#if defined(MBEDTLS_DEBUG_C)
1404 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001405#endif
1406
Ronald Cron73fe8df2022-10-05 14:31:43 +02001407#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001408 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001409 * Unhexify the pre-shared key if any is given
1410 */
1411 if( strlen( opt.psk ) )
1412 {
Ronald Cron7d866162020-06-18 10:36:26 +02001413 if( mbedtls_test_unhexify( psk, sizeof( psk ),
1414 opt.psk, &psk_len ) != 0 )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001415 {
Ronald Cron7d866162020-06-18 10:36:26 +02001416 mbedtls_printf( "pre-shared key not valid\n" );
Hanno Becker1f583ee2019-04-09 17:12:56 +01001417 goto exit;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001418 }
1419 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02001420#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001421
Hanno Beckere86964c2018-10-23 11:37:50 +01001422#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001423 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001424 {
1425 if( opt.psk == NULL )
1426 {
Hanno Becker1d911cd2018-11-15 13:06:09 +00001427 mbedtls_printf( "psk_opaque set but no psk to be imported specified.\n" );
Hanno Beckere86964c2018-10-23 11:37:50 +01001428 ret = 2;
1429 goto usage;
1430 }
1431
1432 if( opt.force_ciphersuite[0] <= 0 )
1433 {
1434 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1435 ret = 2;
1436 goto usage;
1437 }
1438 }
1439#endif /* MBEDTLS_USE_PSA_CRYPTO */
1440
1441 if( opt.force_ciphersuite[0] > 0 )
1442 {
1443 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
1444 ciphersuite_info =
1445 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
1446
1447 if( opt.max_version != -1 &&
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001448 ciphersuite_info->min_tls_version > opt.max_version )
Hanno Beckere86964c2018-10-23 11:37:50 +01001449 {
1450 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
1451 ret = 2;
1452 goto usage;
1453 }
1454 if( opt.min_version != -1 &&
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001455 ciphersuite_info->max_tls_version < opt.min_version )
Hanno Beckere86964c2018-10-23 11:37:50 +01001456 {
1457 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
1458 ret = 2;
1459 goto usage;
1460 }
1461
1462 /* If the server selects a version that's not supported by
1463 * this suite, then there will be no common ciphersuite... */
1464 if( opt.max_version == -1 ||
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001465 opt.max_version > ciphersuite_info->max_tls_version )
Hanno Beckere86964c2018-10-23 11:37:50 +01001466 {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001467 opt.max_version = ciphersuite_info->max_tls_version;
Hanno Beckere86964c2018-10-23 11:37:50 +01001468 }
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001469 if( opt.min_version < ciphersuite_info->min_tls_version )
Hanno Beckere86964c2018-10-23 11:37:50 +01001470 {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001471 opt.min_version = ciphersuite_info->min_tls_version;
TRodziewicz4ca18aa2021-05-20 14:46:20 +02001472 /* DTLS starts with TLS 1.2 */
Hanno Beckere86964c2018-10-23 11:37:50 +01001473 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
Glenn Strausse3af4cb2022-03-15 03:23:42 -04001474 opt.min_version < MBEDTLS_SSL_VERSION_TLS1_2 )
1475 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
Hanno Beckere86964c2018-10-23 11:37:50 +01001476 }
1477
Hanno Beckere86964c2018-10-23 11:37:50 +01001478#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cron73fe8df2022-10-05 14:31:43 +02001479#if defined (MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001480 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001481 {
Hanno Beckere86964c2018-10-23 11:37:50 +01001482 /* Determine KDF algorithm the opaque PSK will be used in. */
Manuel Pégourié-Gonnarde8967052022-09-15 11:41:16 +02001483#if defined(MBEDTLS_HAS_ALG_SHA_384_VIA_MD_OR_PSA_BASED_ON_USE_PSA)
Hanno Beckere86964c2018-10-23 11:37:50 +01001484 if( ciphersuite_info->mac == MBEDTLS_MD_SHA384 )
1485 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_384);
1486 else
Manuel Pégourié-Gonnarde8967052022-09-15 11:41:16 +02001487#endif /* MBEDTLS_HAS_ALG_SHA_384_VIA_MD_OR_PSA_BASED_ON_USE_PSA */
Hanno Beckere86964c2018-10-23 11:37:50 +01001488 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_256);
1489 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02001490#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Hanno Beckere86964c2018-10-23 11:37:50 +01001491#endif /* MBEDTLS_USE_PSA_CRYPTO */
1492 }
1493
Hanno Beckera0e20d02019-05-15 14:03:01 +01001494#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Ronald Cron7d866162020-06-18 10:36:26 +02001495 if( mbedtls_test_unhexify( cid, sizeof( cid ),
1496 opt.cid_val, &cid_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001497 {
Ronald Cron7d866162020-06-18 10:36:26 +02001498 mbedtls_printf( "CID not valid\n" );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001499 goto exit;
1500 }
1501
1502 /* Keep CID settings for renegotiation unless
1503 * specified otherwise. */
1504 if( opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO )
1505 opt.cid_enabled_renego = opt.cid_enabled;
1506 if( opt.cid_val_renego == DFL_CID_VALUE_RENEGO )
1507 opt.cid_val_renego = opt.cid_val;
1508
Ronald Cron7d866162020-06-18 10:36:26 +02001509 if( mbedtls_test_unhexify( cid_renego, sizeof( cid_renego ),
1510 opt.cid_val_renego, &cid_renego_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001511 {
Ronald Cron7d866162020-06-18 10:36:26 +02001512 mbedtls_printf( "CID not valid\n" );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001513 goto exit;
1514 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001515#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01001516
Hanno Beckere6706e62017-05-15 16:05:15 +01001517#if defined(MBEDTLS_ECP_C)
1518 if( opt.curves != NULL )
1519 {
1520 p = (char *) opt.curves;
1521 i = 0;
1522
1523 if( strcmp( p, "none" ) == 0 )
1524 {
Brett Warren25386b72021-08-17 09:32:04 +01001525 group_list[0] = 0;
Hanno Beckere6706e62017-05-15 16:05:15 +01001526 }
1527 else if( strcmp( p, "default" ) != 0 )
1528 {
1529 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001530 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001531 {
1532 q = p;
1533
1534 /* Terminate the current string */
1535 while( *p != ',' && *p != '\0' )
1536 p++;
1537 if( *p == ',' )
1538 *p++ = '\0';
1539
1540 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1541 {
Brett Warren25386b72021-08-17 09:32:04 +01001542 group_list[i++] = curve_cur->tls_id;
Hanno Beckere6706e62017-05-15 16:05:15 +01001543 }
1544 else
1545 {
1546 mbedtls_printf( "unknown curve %s\n", q );
1547 mbedtls_printf( "supported curves: " );
1548 for( curve_cur = mbedtls_ecp_curve_list();
1549 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1550 curve_cur++ )
1551 {
1552 mbedtls_printf( "%s ", curve_cur->name );
1553 }
1554 mbedtls_printf( "\n" );
1555 goto exit;
1556 }
1557 }
1558
1559 mbedtls_printf("Number of curves: %d\n", i );
1560
Hanno Becker8651a432017-06-09 16:13:22 +01001561 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001562 {
Hanno Becker8651a432017-06-09 16:13:22 +01001563 mbedtls_printf( "curves list too long, maximum %d",
1564 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001565 goto exit;
1566 }
1567
Brett Warren25386b72021-08-17 09:32:04 +01001568 group_list[i] = 0;
Hanno Beckere6706e62017-05-15 16:05:15 +01001569 }
1570 }
1571#endif /* MBEDTLS_ECP_C */
1572
Ronald Crone68ab4f2022-10-05 12:46:29 +02001573#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +01001574 if( opt.sig_algs != NULL )
1575 {
1576 p = (char *) opt.sig_algs;
1577 i = 0;
1578
Xiaofei Bai746f9482021-11-12 08:53:56 +00001579 /* Leave room for a final MBEDTLS_TLS1_3_SIG_NONE in signature algorithm list (sig_alg_list). */
Hanno Becker11ceadd2021-08-10 13:36:41 +01001580 while( i < SIG_ALG_LIST_SIZE - 1 && *p != '\0' )
1581 {
1582 q = p;
1583
1584 /* Terminate the current string */
1585 while( *p != ',' && *p != '\0' )
1586 p++;
1587 if( *p == ',' )
1588 *p++ = '\0';
1589
Jerry Yu64f410c2022-06-24 13:09:27 +08001590 if( strcmp( q, "rsa_pkcs1_sha256" ) == 0 )
1591 {
1592 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA256;
1593 }
1594 else if( strcmp( q, "rsa_pkcs1_sha384" ) == 0 )
1595 {
1596 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA384;
1597 }
1598 else if( strcmp( q, "rsa_pkcs1_sha512" ) == 0 )
1599 {
1600 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA512;
1601 }
1602 else if( strcmp( q, "ecdsa_secp256r1_sha256" ) == 0 )
Hanno Becker11ceadd2021-08-10 13:36:41 +01001603 {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001604 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP256R1_SHA256;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001605 }
1606 else if( strcmp( q, "ecdsa_secp384r1_sha384" ) == 0 )
1607 {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001608 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP384R1_SHA384;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001609 }
1610 else if( strcmp( q, "ecdsa_secp521r1_sha512" ) == 0 )
1611 {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001612 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP521R1_SHA512;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001613 }
XiaokangQianff5f6c82021-11-23 08:49:51 +00001614 else if( strcmp( q, "rsa_pss_rsae_sha256" ) == 0 )
XiaokangQianf977e9a2021-11-23 07:19:23 +00001615 {
Xiaofei Bai95395012021-11-25 08:51:30 +00001616 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA256;
XiaokangQianf977e9a2021-11-23 07:19:23 +00001617 }
Jerry Yu3a58b462022-02-22 16:42:29 +08001618 else if( strcmp( q, "rsa_pss_rsae_sha384" ) == 0 )
1619 {
1620 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA384;
1621 }
1622 else if( strcmp( q, "rsa_pss_rsae_sha512" ) == 0 )
1623 {
1624 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA512;
1625 }
Jerry Yu64f410c2022-06-24 13:09:27 +08001626 else if( strcmp( q, "ed25519" ) == 0 )
XiaokangQian4d2329f2021-11-24 02:27:38 +00001627 {
Jerry Yu64f410c2022-06-24 13:09:27 +08001628 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ED25519;
1629 }
1630 else if( strcmp( q, "ed448" ) == 0 )
1631 {
1632 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ED448;
1633 }
1634 else if( strcmp( q, "rsa_pss_pss_sha256" ) == 0 )
1635 {
1636 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA256;
1637 }
1638 else if( strcmp( q, "rsa_pss_pss_sha384" ) == 0 )
1639 {
1640 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA384;
1641 }
1642 else if( strcmp( q, "rsa_pss_pss_sha512" ) == 0 )
1643 {
1644 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA512;
1645 }
1646 else if( strcmp( q, "rsa_pkcs1_sha1" ) == 0 )
1647 {
1648 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA1;
1649 }
1650 else if( strcmp( q, "ecdsa_sha1" ) == 0 )
1651 {
1652 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SHA1;
XiaokangQian4d2329f2021-11-24 02:27:38 +00001653 }
Hanno Becker11ceadd2021-08-10 13:36:41 +01001654 else
1655 {
Jerry Yu64f410c2022-06-24 13:09:27 +08001656 ret = -1;
1657 mbedtls_printf( "unknown signature algorithm \"%s\"\n", q );
Jerry Yu202919c2022-06-27 16:21:00 +08001658 mbedtls_print_supported_sig_algs();
Hanno Becker11ceadd2021-08-10 13:36:41 +01001659 goto exit;
1660 }
1661 }
1662
1663 if( i == ( SIG_ALG_LIST_SIZE - 1 ) && *p != '\0' )
1664 {
1665 mbedtls_printf( "signature algorithm list too long, maximum %d",
1666 SIG_ALG_LIST_SIZE - 1 );
1667 goto exit;
1668 }
1669
Xiaofei Bai746f9482021-11-12 08:53:56 +00001670 sig_alg_list[i] = MBEDTLS_TLS1_3_SIG_NONE;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001671 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02001672#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Hanno Becker11ceadd2021-08-10 13:36:41 +01001673
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001674#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001675 if( opt.alpn_string != NULL )
1676 {
1677 p = (char *) opt.alpn_string;
1678 i = 0;
1679
1680 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001681 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001682 {
1683 alpn_list[i++] = p;
1684
1685 /* Terminate the current string and move on to next one */
1686 while( *p != ',' && *p != '\0' )
1687 p++;
1688 if( *p == ',' )
1689 *p++ = '\0';
1690 }
1691 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001692#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001693
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001694 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001695 * 0. Initialize the RNG and the session data
1696 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001697 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001698 fflush( stdout );
1699
Gilles Peskine4a23c982021-02-03 13:54:41 +01001700 ret = rng_seed( &rng, opt.reproducible, pers );
1701 if( ret != 0 )
Gilles Peskinedaa94c42021-01-13 18:38:27 +01001702 goto exit;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001703 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001704
Ronald Crone68ab4f2022-10-05 12:46:29 +02001705#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001706 /*
1707 * 1.1. Load the trusted CA
1708 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001709 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001710 fflush( stdout );
1711
Hanno Becker623e7b42019-03-05 16:02:15 +00001712 if( strcmp( opt.ca_path, "none" ) == 0 ||
1713 strcmp( opt.ca_file, "none" ) == 0 )
1714 {
1715 ret = 0;
1716 }
1717 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001718#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001719 if( strlen( opt.ca_path ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001720 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001721 else if( strlen( opt.ca_file ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001722 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001723 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001724#endif
Hanno Becker2900b142019-02-01 08:15:06 +00001725 {
1726#if defined(MBEDTLS_PEM_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001727 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001728 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001729 ret = mbedtls_x509_crt_parse( &cacert,
1730 (const unsigned char *) mbedtls_test_cas[i],
1731 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001732 if( ret != 0 )
1733 break;
1734 }
Hanno Becker2900b142019-02-01 08:15:06 +00001735#endif /* MBEDTLS_PEM_PARSE_C */
David Horstmannf160ef12022-10-24 13:11:38 +01001736 if( ret == 0 )
Hanno Becker2900b142019-02-01 08:15:06 +00001737 {
David Horstmannf160ef12022-10-24 13:11:38 +01001738 for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ )
1739 {
1740 ret = mbedtls_x509_crt_parse_der( &cacert,
1741 (const unsigned char *) mbedtls_test_cas_der[i],
1742 mbedtls_test_cas_der_len[i] );
1743 if( ret != 0 )
1744 break;
1745 }
Hanno Becker2900b142019-02-01 08:15:06 +00001746 }
1747 }
Paul Bakker42488232012-05-16 08:21:05 +00001748 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001749 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001750 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001751 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001752 goto exit;
1753 }
1754
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001755 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001756
1757 /*
1758 * 1.2. Load own certificate and private key
1759 *
1760 * (can be skipped if client authentication is not required)
1761 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001762 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001763 fflush( stdout );
1764
Hanno Becker623e7b42019-03-05 16:02:15 +00001765 if( strcmp( opt.crt_file, "none" ) == 0 )
1766 ret = 0;
1767 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001768#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001769 if( strlen( opt.crt_file ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001770 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001771 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001772#endif
Hanno Becker16970d22017-10-10 15:56:37 +01001773 ret = mbedtls_x509_crt_parse( &clicert,
1774 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001775 mbedtls_test_cli_crt_len );
Paul Bakker5121ce52009-01-03 21:22:43 +00001776 if( ret != 0 )
1777 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001778 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001779 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001780 goto exit;
1781 }
1782
Hanno Becker623e7b42019-03-05 16:02:15 +00001783 if( strcmp( opt.key_file, "none" ) == 0 )
1784 ret = 0;
1785 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001786#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001787 if( strlen( opt.key_file ) )
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02001788 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, opt.key_pwd, rng_get, &rng );
Paul Bakker67968392010-07-18 08:28:20 +00001789 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001790#endif
Hanno Becker16970d22017-10-10 15:56:37 +01001791 ret = mbedtls_pk_parse_key( &pkey,
1792 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02001793 mbedtls_test_cli_key_len, NULL, 0, rng_get, &rng );
Paul Bakker5121ce52009-01-03 21:22:43 +00001794 if( ret != 0 )
1795 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001796 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001797 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001798 goto exit;
1799 }
1800
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001801#if defined(MBEDTLS_USE_PSA_CRYPTO)
1802 if( opt.key_opaque != 0 )
1803 {
Przemek Stekielcb20d202022-05-06 08:42:34 +02001804 psa_algorithm_t psa_alg, psa_alg2 = PSA_ALG_NONE;
1805 psa_key_usage_t usage = 0;
Neil Armstrong94e371a2022-04-22 13:58:05 +02001806
Przemek Stekielcb20d202022-05-06 08:42:34 +02001807 if( key_opaque_set_alg_usage( opt.key_opaque_alg1,
1808 opt.key_opaque_alg2,
1809 &psa_alg, &psa_alg2,
1810 &usage,
1811 mbedtls_pk_get_type( &pkey ) ) == 0 )
Przemek Stekiel09212832022-05-04 15:11:24 +02001812 {
Przemek Stekielcb20d202022-05-06 08:42:34 +02001813 ret = mbedtls_pk_wrap_as_opaque( &pkey, &key_slot, psa_alg,
1814 usage, psa_alg2 );
Przemek Stekiela17b5c62022-05-02 13:50:24 +02001815 if( ret != 0 )
1816 {
Przemek Stekielcb20d202022-05-06 08:42:34 +02001817 mbedtls_printf( " failed\n ! "
1818 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n",
1819 (unsigned int) -ret );
Przemek Stekiela17b5c62022-05-02 13:50:24 +02001820 goto exit;
1821 }
Neil Armstrong94e371a2022-04-22 13:58:05 +02001822 }
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001823 }
1824#endif /* MBEDTLS_USE_PSA_CRYPTO */
1825
Gilles Peskine05bf89d2022-01-25 17:50:25 +01001826 mbedtls_printf( " ok (key type: %s)\n",
Przemek Stekiel632939d2022-07-07 09:27:20 +02001827 strlen( opt.key_file ) || strlen( opt.key_opaque_alg1 ) ?
1828 mbedtls_pk_get_name( &pkey ) : "none" );
Ronald Crone68ab4f2022-10-05 12:46:29 +02001829#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakker5121ce52009-01-03 21:22:43 +00001830
1831 /*
Jerry Yu2a572cf2021-08-06 11:21:08 +08001832 * 2. Setup stuff
Paul Bakker5121ce52009-01-03 21:22:43 +00001833 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001834 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001835 fflush( stdout );
1836
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001837 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1838 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001839 opt.transport,
1840 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001841 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001842 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001843 (unsigned int) -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001844 goto exit;
1845 }
1846
Ronald Crone68ab4f2022-10-05 12:46:29 +02001847#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001848 /* The default algorithms profile disables SHA-1, but our tests still
1849 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001850 if( opt.allow_sha1 > 0 )
1851 {
1852 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1853 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
Jerry Yu11f0a9c2022-01-12 18:43:08 +08001854 mbedtls_ssl_conf_sig_algs( &conf, ssl_sig_algs_for_test );
Gilles Peskinebc70a182017-05-09 15:59:24 +02001855 }
Hanno Beckerbb425db2019-04-03 12:59:58 +01001856 if( opt.context_crt_cb == 0 )
1857 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
1858
Hanno Beckera1051b42019-02-26 11:38:29 +00001859 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Ronald Crone68ab4f2022-10-05 12:46:29 +02001860#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakker915275b2012-09-28 07:10:55 +00001861
Hanno Beckera0e20d02019-05-15 14:03:01 +01001862#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001863 if( opt.cid_enabled == 1 || opt.cid_enabled_renego == 1 )
Hanno Beckerad4a1372019-05-03 13:06:44 +01001864 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001865 if( opt.cid_enabled == 1 &&
1866 opt.cid_enabled_renego == 1 &&
1867 cid_len != cid_renego_len )
1868 {
1869 mbedtls_printf( "CID length must not change during renegotiation\n" );
1870 goto usage;
1871 }
1872
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001873 if( opt.cid_enabled == 1 )
Hanno Becker8367ccc2019-05-14 11:30:10 +01001874 ret = mbedtls_ssl_conf_cid( &conf, cid_len,
1875 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001876 else
Hanno Becker8367ccc2019-05-14 11:30:10 +01001877 ret = mbedtls_ssl_conf_cid( &conf, cid_renego_len,
1878 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001879
Hanno Beckerad4a1372019-05-03 13:06:44 +01001880 if( ret != 0 )
1881 {
Hanno Beckerd5eed422019-05-23 16:58:22 +01001882 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001883 (unsigned int) -ret );
Hanno Beckerad4a1372019-05-03 13:06:44 +01001884 goto exit;
1885 }
1886 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001887#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerad4a1372019-05-03 13:06:44 +01001888
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001889 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001890 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001891
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001892#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001893 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001894 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1895 opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001896
Hanno Becker4d615912018-08-14 13:33:30 +01001897 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01001898 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001899#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001900
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001901#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001902 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001903 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001904 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1905 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001906 goto exit;
1907 }
Paul Bakker05decb22013-08-15 13:33:48 +02001908#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001909
Ron Eldor6ea64512018-07-02 10:08:07 +03001910#if defined(MBEDTLS_SSL_DTLS_SRTP)
Bence Szépkúti880334c2020-12-14 14:42:13 +01001911 const mbedtls_ssl_srtp_profile forced_profile[] =
1912 { opt.force_srtp_profile, MBEDTLS_TLS_SRTP_UNSET };
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001913 if( opt.use_srtp == 1 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001914 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001915 if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001916 {
Johan Pascal253d0262020-09-22 13:04:45 +02001917 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles ( &conf, forced_profile );
Ron Eldor6ea64512018-07-02 10:08:07 +03001918 }
1919 else
1920 {
Johan Pascal253d0262020-09-22 13:04:45 +02001921 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles ( &conf, default_profiles );
Ron Eldor6ea64512018-07-02 10:08:07 +03001922 }
1923
1924 if( ret != 0 )
1925 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001926 mbedtls_printf( " failed\n ! "
1927 "mbedtls_ssl_conf_dtls_srtp_protection_profiles returned %d\n\n",
1928 ret );
Ron Eldor6ea64512018-07-02 10:08:07 +03001929 goto exit;
1930 }
1931
1932 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001933 else if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001934 {
1935 mbedtls_printf( " failed\n ! must enable use_srtp to force srtp profile\n\n" );
1936 goto exit;
1937 }
1938#endif /* MBEDTLS_SSL_DTLS_SRTP */
1939
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001940#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001941 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001942 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001943#endif
1944
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001945#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001946 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001947 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001948#endif
1949
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001950#if defined(MBEDTLS_DHM_C)
1951 if( opt.dhmlen != DFL_DHMLEN )
1952 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1953#endif
1954
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001955#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001956 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001957 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001958 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001959 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1960 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001961 goto exit;
1962 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001963#endif
1964
Philippe Antoine986b6f22019-06-07 15:04:32 +02001965 if (opt.reproducible)
1966 {
Philippe Antoinef91b3722019-06-11 16:02:43 +02001967#if defined(MBEDTLS_HAVE_TIME)
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001968#if defined(MBEDTLS_PLATFORM_TIME_ALT)
1969 mbedtls_platform_set_time( dummy_constant_time );
1970#else
Philippe Antoine7c9d7242019-06-11 12:11:36 +02001971 fprintf( stderr, "Warning: reproducible option used without constant time\n" );
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001972#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01001973#endif /* MBEDTLS_HAVE_TIME */
Philippe Antoine986b6f22019-06-07 15:04:32 +02001974 }
Gilles Peskine535fb372021-01-13 18:59:46 +01001975 mbedtls_ssl_conf_rng( &conf, rng_get, &rng );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001976 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001977
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001978 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001979
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001980#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001981 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001982#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001983
Paul Bakker645ce3a2012-10-31 12:32:41 +00001984 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001985 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001986
Ronald Cron6f135e12021-12-08 16:57:54 +01001987#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +01001988 mbedtls_ssl_conf_tls13_key_exchange_modes( &conf, opt.tls13_kex_modes );
Ronald Cron6f135e12021-12-08 16:57:54 +01001989#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +01001990
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001991 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001992 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001993#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001994 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001995#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001996
Ronald Crone68ab4f2022-10-05 12:46:29 +02001997#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001998 if( strcmp( opt.ca_path, "none" ) != 0 &&
1999 strcmp( opt.ca_file, "none" ) != 0 )
2000 {
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02002001#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
2002 if( opt.ca_callback != 0 )
Hanno Beckercbb59032019-03-28 14:14:22 +00002003 mbedtls_ssl_conf_ca_cb( &conf, ca_callback, &cacert );
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02002004 else
2005#endif
2006 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002007 }
2008 if( strcmp( opt.crt_file, "none" ) != 0 &&
2009 strcmp( opt.key_file, "none" ) != 0 )
2010 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002011 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002012 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002013 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
2014 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002015 goto exit;
2016 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002017 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02002018#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +02002019
Hanno Beckere6706e62017-05-15 16:05:15 +01002020#if defined(MBEDTLS_ECP_C)
2021 if( opt.curves != NULL &&
2022 strcmp( opt.curves, "default" ) != 0 )
2023 {
Brett Warren25386b72021-08-17 09:32:04 +01002024 mbedtls_ssl_conf_groups( &conf, group_list );
Hanno Beckere6706e62017-05-15 16:05:15 +01002025 }
2026#endif
2027
Ronald Crone68ab4f2022-10-05 12:46:29 +02002028#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +01002029 if( opt.sig_algs != NULL )
2030 mbedtls_ssl_conf_sig_algs( &conf, sig_alg_list );
Ronald Cron20a8e632022-10-03 17:36:44 +02002031#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01002032
Ronald Cron73fe8df2022-10-05 14:31:43 +02002033#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckere86964c2018-10-23 11:37:50 +01002034#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00002035 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01002036 {
Janos Follathbe4efc22019-08-08 11:38:18 +01002037 key_attributes = psa_key_attributes_init();
2038 psa_set_key_usage_flags( &key_attributes, PSA_KEY_USAGE_DERIVE );
2039 psa_set_key_algorithm( &key_attributes, alg );
2040 psa_set_key_type( &key_attributes, PSA_KEY_TYPE_DERIVE );
Hanno Beckere86964c2018-10-23 11:37:50 +01002041
Janos Follathbe4efc22019-08-08 11:38:18 +01002042 status = psa_import_key( &key_attributes, psk, psk_len, &slot );
Hanno Beckere86964c2018-10-23 11:37:50 +01002043 if( status != PSA_SUCCESS )
2044 {
2045 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
2046 goto exit;
2047 }
2048
2049 if( ( ret = mbedtls_ssl_conf_psk_opaque( &conf, slot,
2050 (const unsigned char *) opt.psk_identity,
Hanno Becker5cd607b2018-11-05 12:52:42 +00002051 strlen( opt.psk_identity ) ) ) != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01002052 {
2053 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk_opaque returned %d\n\n",
2054 ret );
2055 goto exit;
2056 }
2057 }
2058 else
2059#endif /* MBEDTLS_USE_PSA_CRYPTO */
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01002060 if( psk_len > 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002061 {
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01002062 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
2063 (const unsigned char *) opt.psk_identity,
2064 strlen( opt.psk_identity ) );
2065 if( ret != 0 )
2066 {
2067 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n", ret );
2068 goto exit;
2069 }
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002070 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02002071#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +02002072
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002073 if( opt.min_version != DFL_MIN_VERSION )
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002074 mbedtls_ssl_conf_min_tls_version( &conf, opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01002075
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002076 if( opt.max_version != DFL_MAX_VERSION )
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002077 mbedtls_ssl_conf_max_tls_version( &conf, opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00002078
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002079 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2080 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002081 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002082 (unsigned int) -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002083 goto exit;
2084 }
2085
Hanno Becker7e6c1782021-06-08 09:24:55 +01002086 if( opt.eap_tls != 0 )
2087 {
2088 mbedtls_ssl_set_export_keys_cb( &ssl, eap_tls_key_derivation,
2089 &eap_tls_keying );
2090 }
2091 else if( opt.nss_keylog != 0 )
2092 {
2093 mbedtls_ssl_set_export_keys_cb( &ssl,
2094 nss_keylog_export,
2095 NULL );
2096 }
2097#if defined( MBEDTLS_SSL_DTLS_SRTP )
2098 else if( opt.use_srtp != 0 )
2099 {
2100 mbedtls_ssl_set_export_keys_cb( &ssl, dtls_srtp_key_derivation,
2101 &dtls_srtp_keying );
2102 }
2103#endif /* MBEDTLS_SSL_DTLS_SRTP */
Hanno Becker7e6c1782021-06-08 09:24:55 +01002104
Ronald Crone68ab4f2022-10-05 12:46:29 +02002105#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002106 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
2107 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002108 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
2109 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002110 goto exit;
2111 }
2112#endif
2113
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002114#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
2115 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
2116 {
2117 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
2118 (const unsigned char *) opt.ecjpake_pw,
2119 strlen( opt.ecjpake_pw ) ) ) != 0 )
2120 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002121 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
2122 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002123 goto exit;
2124 }
2125 }
2126#endif
2127
Ronald Crone68ab4f2022-10-05 12:46:29 +02002128#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Beckerbb425db2019-04-03 12:59:58 +01002129 if( opt.context_crt_cb == 1 )
2130 mbedtls_ssl_set_verify( &ssl, my_verify, NULL );
Ronald Crone68ab4f2022-10-05 12:46:29 +02002131#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Hanno Beckerbb425db2019-04-03 12:59:58 +01002132
Hanno Becker8b1af2f2019-07-03 17:02:43 +01002133 io_ctx.ssl = &ssl;
2134 io_ctx.net = &server_fd;
2135 mbedtls_ssl_set_bio( &ssl, &io_ctx, send_cb, recv_cb,
2136 opt.nbio == 0 ? recv_timeout_cb : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002137
Hanno Beckera0e20d02019-05-15 14:03:01 +01002138#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +01002139 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2140 {
2141 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
2142 cid, cid_len ) ) != 0 )
2143 {
2144 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2145 ret );
2146 goto exit;
2147 }
2148 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002149#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01002150
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02002151#if defined(MBEDTLS_SSL_PROTO_DTLS)
2152 if( opt.dtls_mtu != DFL_DTLS_MTU )
2153 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
2154#endif
2155
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002156#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002157 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2158 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002159#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002160
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002161#if defined(MBEDTLS_ECP_RESTARTABLE)
2162 if( opt.ec_max_ops != DFL_EC_MAX_OPS )
2163 mbedtls_ecp_set_max_ops( opt.ec_max_ops );
2164#endif
2165
Ron Eldor65b56ef2019-09-26 16:40:48 +03002166#if defined(MBEDTLS_SSL_DTLS_SRTP)
Johan Pascald576fdb2020-09-22 10:39:53 +02002167 if( opt.use_srtp != 0 && strlen( opt.mki ) != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002168 {
2169 if( mbedtls_test_unhexify( mki, sizeof( mki ),
2170 opt.mki,&mki_len ) != 0 )
2171 {
2172 mbedtls_printf( "mki value not valid hex\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002173 goto exit;
Ron Eldor6ea64512018-07-02 10:08:07 +03002174 }
2175
2176 mbedtls_ssl_conf_srtp_mki_value_supported( &conf, MBEDTLS_SSL_DTLS_SRTP_MKI_SUPPORTED );
Ron Eldoref72faf2018-07-12 11:54:20 +03002177 if( ( ret = mbedtls_ssl_dtls_srtp_set_mki_value( &ssl, mki,
Johan Pascald387aa02020-09-23 18:47:56 +02002178 (uint16_t) strlen( opt.mki ) / 2 ) ) != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002179 {
2180 mbedtls_printf( " failed\n ! mbedtls_ssl_dtls_srtp_set_mki_value returned %d\n\n", ret );
2181 goto exit;
2182 }
2183 }
2184#endif
2185
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002186 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002187
Paul Bakker5121ce52009-01-03 21:22:43 +00002188 /*
Jerry Yu2a572cf2021-08-06 11:21:08 +08002189 * 3. Start the connection
2190 */
2191 if( opt.server_addr == NULL)
2192 opt.server_addr = opt.server_name;
2193
2194 mbedtls_printf( " . Connecting to %s/%s/%s...",
2195 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
2196 opt.server_addr, opt.server_port );
2197 fflush( stdout );
2198
2199 if( ( ret = mbedtls_net_connect( &server_fd,
2200 opt.server_addr, opt.server_port,
2201 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2202 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
2203 {
2204 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
2205 (unsigned int) -ret );
2206 goto exit;
2207 }
2208
2209 if( opt.nbio > 0 )
2210 ret = mbedtls_net_set_nonblock( &server_fd );
2211 else
2212 ret = mbedtls_net_set_block( &server_fd );
2213 if( ret != 0 )
2214 {
2215 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
2216 (unsigned int) -ret );
2217 goto exit;
2218 }
2219
2220 mbedtls_printf( " ok\n" );
2221
2222 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00002223 * 4. Handshake
2224 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002225 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00002226 fflush( stdout );
2227
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002228 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002229 {
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002230 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2231 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002232 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Paul Bakker5121ce52009-01-03 21:22:43 +00002233 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002234 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002235 (unsigned int) -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002236 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
2237 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01002238 " Unable to verify the server's certificate. "
2239 "Either it is invalid,\n"
2240 " or you didn't set ca_file or ca_path "
2241 "to an appropriate value.\n"
2242 " Alternatively, you may want to use "
Jerry Yuc3a7fa32022-10-28 12:38:33 +08002243 "auth_mode=optional for testing purposes if "
Jerry Yu28832192022-10-30 13:53:31 +08002244 "not using TLS 1.3.\n"
Jerry Yuc3a7fa32022-10-28 12:38:33 +08002245 " For TLS 1.3 server, try `ca_path=/etc/ssl/certs/`"
2246 "or other folder that has root certificates\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002247 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002248 goto exit;
2249 }
Hanno Becker16970d22017-10-10 15:56:37 +01002250
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002251#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002252 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2253 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002254#endif
2255
Hanno Becker16970d22017-10-10 15:56:37 +01002256 /* For event-driven IO, wait for socket to become available */
2257 if( opt.event == 1 /* level triggered IO */ )
2258 {
2259#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002260 ret = idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002261#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002262 ret = idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002263#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002264 if( ret != 0 )
2265 goto exit;
Hanno Becker16970d22017-10-10 15:56:37 +01002266 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002267 }
2268
Glenn Strauss6eef5632022-01-23 08:37:02 -05002269 {
2270 int suite_id = mbedtls_ssl_get_ciphersuite_id_from_ssl( &ssl );
2271 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
2272 ciphersuite_info = mbedtls_ssl_ciphersuite_from_id( suite_id );
2273
2274 mbedtls_printf( " ok\n [ Protocol is %s ]\n"
2275 " [ Ciphersuite is %s ]\n"
2276 " [ Key size is %u ]\n",
2277 mbedtls_ssl_get_version( &ssl ),
2278 mbedtls_ssl_ciphersuite_get_name( ciphersuite_info ),
2279 (unsigned int)
2280 mbedtls_ssl_ciphersuite_get_cipher_key_bitlen( ciphersuite_info ) );
2281 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002282
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002283 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
2284 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002285 else
Mateusz Starzykf5c53512021-04-15 13:28:52 +02002286 mbedtls_printf( " [ Record expansion is unknown ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002287
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002288#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Hanno Becker59d36702021-06-08 05:35:29 +01002289 mbedtls_printf( " [ Maximum incoming record payload length is %u ]\n",
2290 (unsigned int) mbedtls_ssl_get_max_in_record_payload( &ssl ) );
2291 mbedtls_printf( " [ Maximum outgoing record payload length is %u ]\n",
2292 (unsigned int) mbedtls_ssl_get_max_out_record_payload( &ssl ) );
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002293#endif
2294
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002295#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002296 if( opt.alpn_string != NULL )
2297 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002298 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
2299 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002300 alp ? alp : "(none)" );
2301 }
2302#endif
2303
Ron Eldor51d3ab52019-05-12 14:54:30 +03002304 if( opt.eap_tls != 0 )
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002305 {
2306 size_t j = 0;
Ron Eldor51d3ab52019-05-12 14:54:30 +03002307
2308 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type,
2309 eap_tls_keying.master_secret,
2310 sizeof( eap_tls_keying.master_secret ),
2311 eap_tls_label,
2312 eap_tls_keying.randbytes,
2313 sizeof( eap_tls_keying.randbytes ),
2314 eap_tls_keymaterial,
2315 sizeof( eap_tls_keymaterial ) ) )
2316 != 0 )
2317 {
2318 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002319 (unsigned int) -ret );
Ron Eldor51d3ab52019-05-12 14:54:30 +03002320 goto exit;
2321 }
2322
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002323 mbedtls_printf( " EAP-TLS key material is:" );
2324 for( j = 0; j < sizeof( eap_tls_keymaterial ); j++ )
2325 {
2326 if( j % 8 == 0 )
2327 mbedtls_printf("\n ");
2328 mbedtls_printf("%02x ", eap_tls_keymaterial[j] );
2329 }
2330 mbedtls_printf("\n");
2331
Ron Eldor51d3ab52019-05-12 14:54:30 +03002332 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type, NULL, 0,
Ron Eldor51c45072019-05-15 17:49:54 +03002333 eap_tls_label,
2334 eap_tls_keying.randbytes,
2335 sizeof( eap_tls_keying.randbytes ),
2336 eap_tls_iv,
2337 sizeof( eap_tls_iv ) ) ) != 0 )
Ron Eldor51d3ab52019-05-12 14:54:30 +03002338 {
2339 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002340 (unsigned int) -ret );
Ron Eldor51d3ab52019-05-12 14:54:30 +03002341 goto exit;
2342 }
2343
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002344 mbedtls_printf( " EAP-TLS IV is:" );
2345 for( j = 0; j < sizeof( eap_tls_iv ); j++ )
2346 {
2347 if( j % 8 == 0 )
2348 mbedtls_printf("\n ");
2349 mbedtls_printf("%02x ", eap_tls_iv[j] );
2350 }
2351 mbedtls_printf("\n");
2352 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002353
2354#if defined( MBEDTLS_SSL_DTLS_SRTP )
2355 else if( opt.use_srtp != 0 )
2356 {
2357 size_t j = 0;
Johan Pascal2258a4f2020-10-28 13:53:09 +01002358 mbedtls_dtls_srtp_info dtls_srtp_negotiation_result;
2359 mbedtls_ssl_get_dtls_srtp_negotiation_result( &ssl, &dtls_srtp_negotiation_result );
Ron Eldor65b56ef2019-09-26 16:40:48 +03002360
Johan Pascal5fbe9e72020-10-29 10:49:21 +01002361 if( dtls_srtp_negotiation_result.chosen_dtls_srtp_profile
2362 == MBEDTLS_TLS_SRTP_UNSET )
Ron Eldor65b56ef2019-09-26 16:40:48 +03002363 {
Johan Pascald576fdb2020-09-22 10:39:53 +02002364 mbedtls_printf( " Unable to negotiate "
2365 "the use of DTLS-SRTP\n" );
Ron Eldor65b56ef2019-09-26 16:40:48 +03002366 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002367 else
Ron Eldor65b56ef2019-09-26 16:40:48 +03002368 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002369 if( ( ret = mbedtls_ssl_tls_prf( dtls_srtp_keying.tls_prf_type,
2370 dtls_srtp_keying.master_secret,
2371 sizeof( dtls_srtp_keying.master_secret ),
2372 dtls_srtp_label,
2373 dtls_srtp_keying.randbytes,
2374 sizeof( dtls_srtp_keying.randbytes ),
2375 dtls_srtp_key_material,
2376 sizeof( dtls_srtp_key_material ) ) )
2377 != 0 )
2378 {
2379 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
2380 (unsigned int) -ret );
2381 goto exit;
2382 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002383
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002384 mbedtls_printf( " DTLS-SRTP key material is:" );
2385 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
2386 {
2387 if( j % 8 == 0 )
Johan Pascald576fdb2020-09-22 10:39:53 +02002388 mbedtls_printf( "\n " );
2389 mbedtls_printf( "%02x ", dtls_srtp_key_material[j] );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002390 }
Johan Pascal9bc50b02020-09-24 12:01:13 +02002391 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002392
Johan Pascal9bc50b02020-09-24 12:01:13 +02002393 /* produce a less readable output used to perform automatic checks
2394 * - compare client and server output
2395 * - interop test with openssl which client produces this kind of output
2396 */
2397 mbedtls_printf( " Keying material: " );
2398 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
2399 {
2400 mbedtls_printf( "%02X", dtls_srtp_key_material[j] );
2401 }
Johan Pascald576fdb2020-09-22 10:39:53 +02002402 mbedtls_printf( "\n" );
Johan Pascal20c7db32020-10-26 22:45:58 +01002403
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002404 if ( dtls_srtp_negotiation_result.mki_len > 0 )
Johan Pascal20c7db32020-10-26 22:45:58 +01002405 {
2406 mbedtls_printf( " DTLS-SRTP mki value: " );
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002407 for( j = 0; j < dtls_srtp_negotiation_result.mki_len; j++ )
Johan Pascal20c7db32020-10-26 22:45:58 +01002408 {
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002409 mbedtls_printf( "%02X", dtls_srtp_negotiation_result.mki_value[j] );
Johan Pascal20c7db32020-10-26 22:45:58 +01002410 }
2411 }
2412 else
2413 {
Johan Pascal5ef72d22020-10-28 17:05:47 +01002414 mbedtls_printf( " DTLS-SRTP no mki value negotiated" );
Johan Pascal20c7db32020-10-26 22:45:58 +01002415 }
2416 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002417 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002418 }
2419#endif /* MBEDTLS_SSL_DTLS_SRTP */
Jerry Yu02035342022-08-03 12:43:06 +08002420 if( opt.reconnect != 0 && ssl.tls_version != MBEDTLS_SSL_VERSION_TLS1_3 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002421 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002422 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002423 fflush( stdout );
2424
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002425 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002426 {
Jerry Yu02035342022-08-03 12:43:06 +08002427 if( ( ret = ssl_save_session_serialize( &ssl,
2428 &session_data, &session_data_len ) ) != 0 )
Manuel Pégourié-Gonnard4d591d62019-05-24 10:26:41 +02002429 {
Jerry Yu02035342022-08-03 12:43:06 +08002430 mbedtls_printf( " failed\n ! ssl_save_session_serialize returned -0x%04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002431 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002432 goto exit;
2433 }
Hanno Becker494dc712021-05-14 15:08:51 +01002434
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002435 }
2436 else
2437 {
2438 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
2439 {
2440 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002441 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002442 goto exit;
2443 }
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002444 }
2445
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002446 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002447
2448 if( opt.reco_mode == 1 )
2449 {
2450 mbedtls_printf( " [ Saved %u bytes of session data]\n",
2451 (unsigned) session_data_len );
2452 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002453 }
2454
Ronald Crone68ab4f2022-10-05 12:46:29 +02002455#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00002456 /*
2457 * 5. Verify the server certificate
2458 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002459 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00002460
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002461 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002462 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002463 char vrfy_buf[512];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002464 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002465
Hanno Becker7ac83f92020-10-09 10:48:22 +01002466 x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
Hanno Becker16970d22017-10-10 15:56:37 +01002467 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00002468
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002469 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002470 }
2471 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002472 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002473
Hanno Becker5d4c4b12019-06-11 17:16:13 +01002474#if !defined(MBEDTLS_X509_REMOVE_INFO)
Hanno Beckera9766c2c2019-02-25 17:43:18 +00002475 mbedtls_printf( " . Peer certificate information ...\n" );
2476 mbedtls_printf( "%s\n", peer_crt_info );
Hanno Becker5d4c4b12019-06-11 17:16:13 +01002477#endif /* !MBEDTLS_X509_REMOVE_INFO */
Ronald Crone68ab4f2022-10-05 12:46:29 +02002478#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakker5121ce52009-01-03 21:22:43 +00002479
Hanno Beckera0e20d02019-05-15 14:03:01 +01002480#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002481 ret = report_cid_usage( &ssl, "initial handshake" );
2482 if( ret != 0 )
2483 goto exit;
2484
Hanno Becker90cb3592019-04-09 17:24:19 +01002485 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2486 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002487 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled_renego,
2488 cid_renego,
2489 cid_renego_len ) ) != 0 )
Hanno Becker90cb3592019-04-09 17:24:19 +01002490 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002491 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2492 ret );
gabor-mezei-arm78595852020-04-28 10:40:30 +02002493 goto exit;
Hanno Becker90cb3592019-04-09 17:24:19 +01002494 }
2495 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002496#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01002497
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002498#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002499 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002500 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002501 /*
2502 * Perform renegotiation (this must be done when the server is waiting
2503 * for input from our side).
2504 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002505 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002506 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002507 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002508 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002509 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002510 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002511 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002512 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002513 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
2514 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002515 goto exit;
2516 }
Hanno Becker16970d22017-10-10 15:56:37 +01002517
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002518#if defined(MBEDTLS_ECP_RESTARTABLE)
2519 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2520 continue;
2521#endif
2522
Hanno Becker16970d22017-10-10 15:56:37 +01002523 /* For event-driven IO, wait for socket to become available */
2524 if( opt.event == 1 /* level triggered IO */ )
2525 {
2526#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002527 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002528#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002529 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002530#endif
2531 }
2532
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002533 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002534 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002535 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002536#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002537
Hanno Beckera0e20d02019-05-15 14:03:01 +01002538#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002539 ret = report_cid_usage( &ssl, "after renegotiation" );
2540 if( ret != 0 )
2541 goto exit;
Hanno Beckera0e20d02019-05-15 14:03:01 +01002542#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002543
Paul Bakker5121ce52009-01-03 21:22:43 +00002544 /*
2545 * 6. Write the GET request
2546 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002547 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002548send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002549 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002550 fflush( stdout );
2551
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002552 len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST,
2553 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002554 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002555
2556 /* Add padding to GET request to reach opt.request_size in length */
2557 if( opt.request_size != DFL_REQUEST_SIZE &&
2558 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02002559 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002560 memset( buf + len, 'A', opt.request_size - len - tail_len );
2561 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02002562 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002563
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002564 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002565 len += tail_len;
2566
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02002567 /* Truncate if request size is smaller than the "natural" size */
2568 if( opt.request_size != DFL_REQUEST_SIZE &&
2569 len > opt.request_size )
2570 {
2571 len = opt.request_size;
2572
2573 /* Still end with \r\n unless that's really not possible */
2574 if( len >= 2 ) buf[len - 2] = '\r';
2575 if( len >= 1 ) buf[len - 1] = '\n';
2576 }
2577
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002578 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00002579 {
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002580 written = 0;
2581 frags = 0;
2582
2583 do
Paul Bakker5121ce52009-01-03 21:22:43 +00002584 {
Hanno Becker16970d22017-10-10 15:56:37 +01002585 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002586 len - written ) ) < 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002587 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002588 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002589 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002590 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002591 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002592 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002593 (unsigned int) -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002594 goto exit;
2595 }
Hanno Becker16970d22017-10-10 15:56:37 +01002596
2597 /* For event-driven IO, wait for socket to become available */
2598 if( opt.event == 1 /* level triggered IO */ )
2599 {
2600#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002601 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002602#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002603 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002604#endif
2605 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002606 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002607
2608 frags++;
2609 written += ret;
Paul Bakker5121ce52009-01-03 21:22:43 +00002610 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002611 while( written < len );
Paul Bakker5121ce52009-01-03 21:22:43 +00002612 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002613 else /* Not stream, so datagram */
2614 {
Hanno Becker16970d22017-10-10 15:56:37 +01002615 while( 1 )
2616 {
2617 ret = mbedtls_ssl_write( &ssl, buf, len );
2618
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002619#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002620 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002621 continue;
2622#endif
2623
Hanno Becker16970d22017-10-10 15:56:37 +01002624 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2625 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2626 break;
2627
2628 /* For event-driven IO, wait for socket to become available */
2629 if( opt.event == 1 /* level triggered IO */ )
2630 {
2631#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002632 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002633#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002634 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002635#endif
2636 }
2637 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002638
2639 if( ret < 0 )
2640 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002641 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
2642 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002643 goto exit;
2644 }
2645
2646 frags = 1;
2647 written = ret;
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002648
2649 if( written < len )
2650 {
2651 mbedtls_printf( " warning\n ! request didn't fit into single datagram and "
2652 "was truncated to size %u", (unsigned) written );
2653 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002654 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002655
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002656 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01002657 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
2658 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002659
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002660 /* Send a non-empty request if request_size == 0 */
2661 if ( len == 0 )
2662 {
2663 opt.request_size = DFL_REQUEST_SIZE;
2664 goto send_request;
2665 }
2666
Paul Bakker5121ce52009-01-03 21:22:43 +00002667 /*
2668 * 7. Read the HTTP response
2669 */
Paul Bakker5121ce52009-01-03 21:22:43 +00002670
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002671 /*
2672 * TLS and DTLS need different reading styles (stream vs datagram)
2673 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002674 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002675 {
Jerry Yu7a513052022-08-09 13:34:21 +08002676#if defined(MBEDTLS_SSL_PROTO_TLS1_3) && defined(MBEDTLS_SSL_SESSION_TICKETS)
2677 int ticket_id = 0;
2678#endif
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002679 do
2680 {
2681 len = sizeof( buf ) - 1;
2682 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002683 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002684
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002685#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002686 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002687 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002688#endif
2689
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002690 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
2691 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01002692 {
2693 /* For event-driven IO, wait for socket to become available */
2694 if( opt.event == 1 /* level triggered IO */ )
2695 {
2696#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002697 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002698#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002699 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002700#endif
2701 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002702 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002703 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002704
2705 if( ret <= 0 )
2706 {
2707 switch( ret )
2708 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002709 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2710 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002711 ret = 0;
2712 goto close_notify;
2713
2714 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002715 case MBEDTLS_ERR_NET_CONN_RESET:
2716 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002717 ret = 0;
2718 goto reconnect;
2719
Jerry Yu2b4f02d2022-07-07 11:41:58 +00002720#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
2721
2722#if defined(MBEDTLS_SSL_SESSION_TICKETS)
2723 case MBEDTLS_ERR_SSL_RECEIVED_NEW_SESSION_TICKET:
2724 /* We were waiting for application data but got
2725 * a NewSessionTicket instead. */
Jerry Yu7a513052022-08-09 13:34:21 +08002726 mbedtls_printf( " got new session ticket ( %d ).\n",
2727 ticket_id++ );
Jerry Yu02035342022-08-03 12:43:06 +08002728 if( opt.reconnect != 0 )
2729 {
2730 mbedtls_printf(" . Saving session for reuse..." );
2731 fflush( stdout );
2732
2733 if( opt.reco_mode == 1 )
2734 {
2735 if( ( ret = ssl_save_session_serialize( &ssl,
2736 &session_data, &session_data_len ) ) != 0 )
2737 {
2738 mbedtls_printf( " failed\n ! ssl_save_session_serialize returned -0x%04x\n\n",
2739 (unsigned int) -ret );
2740 goto exit;
2741 }
2742 }
2743 else
2744 {
2745 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
2746 {
2747 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
2748 (unsigned int) -ret );
2749 goto exit;
2750 }
2751 }
2752
2753 mbedtls_printf( " ok\n" );
2754
2755 if( opt.reco_mode == 1 )
2756 {
2757 mbedtls_printf( " [ Saved %u bytes of session data]\n",
2758 (unsigned) session_data_len );
2759 }
2760 }
Jerry Yu2b4f02d2022-07-07 11:41:58 +00002761 continue;
2762#endif /* MBEDTLS_SSL_SESSION_TICKETS */
2763
2764#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
2765
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002766 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002767 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002768 (unsigned int) -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002769 goto exit;
2770 }
2771 }
2772
2773 len = ret;
2774 buf[len] = '\0';
Jerry Yu2b4f02d2022-07-07 11:41:58 +00002775 mbedtls_printf( " < Read from server: %d bytes read\n\n%s", len, (char *) buf );
2776 fflush( stdout );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002777 /* End of message should be detected according to the syntax of the
2778 * application protocol (eg HTTP), just use a dummy test here. */
2779 if( ret > 0 && buf[len-1] == '\n' )
2780 {
2781 ret = 0;
2782 break;
2783 }
2784 }
2785 while( 1 );
2786 }
2787 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00002788 {
2789 len = sizeof( buf ) - 1;
2790 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00002791
Hanno Becker16970d22017-10-10 15:56:37 +01002792 while( 1 )
2793 {
2794 ret = mbedtls_ssl_read( &ssl, buf, len );
2795
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002796#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002797 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002798 continue;
2799#endif
2800
Hanno Becker16970d22017-10-10 15:56:37 +01002801 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2802 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2803 break;
2804
2805 /* For event-driven IO, wait for socket to become available */
2806 if( opt.event == 1 /* level triggered IO */ )
2807 {
2808#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002809 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002810#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002811 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002812#endif
2813 }
2814 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002815
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002816 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002817 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002818 switch( ret )
2819 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002820 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002821 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002822 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02002823 goto send_request;
2824 goto exit;
2825
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002826 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2827 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002828 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002829 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00002830
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002831 default:
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002832 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002833 goto exit;
2834 }
Paul Bakker5690efc2011-05-26 13:16:06 +00002835 }
2836
Paul Bakker5121ce52009-01-03 21:22:43 +00002837 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02002838 buf[len] = '\0';
Jerry Yu2b4f02d2022-07-07 11:41:58 +00002839 mbedtls_printf( " < Read from server: %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002840 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00002841 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002842
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002843 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002844 * 7b. Simulate hard reset and reconnect from same port?
2845 */
2846 if( opt.reconnect_hard != 0 )
2847 {
2848 opt.reconnect_hard = 0;
2849
2850 mbedtls_printf( " . Restarting connection from same port..." );
2851 fflush( stdout );
2852
Ronald Crone68ab4f2022-10-05 12:46:29 +02002853#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker23699ef2019-02-26 12:36:53 +00002854 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Ronald Crone68ab4f2022-10-05 12:46:29 +02002855#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Hanno Becker23699ef2019-02-26 12:36:53 +00002856
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002857 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
2858 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002859 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002860 (unsigned int) -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002861 goto exit;
2862 }
2863
2864 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
2865 {
2866 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002867 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002868 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002869 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002870 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002871 (unsigned int) -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002872 goto exit;
2873 }
Hanno Becker16970d22017-10-10 15:56:37 +01002874
2875 /* For event-driven IO, wait for socket to become available */
2876 if( opt.event == 1 /* level triggered IO */ )
2877 {
2878#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002879 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002880#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002881 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002882#endif
2883 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002884 }
2885
2886 mbedtls_printf( " ok\n" );
2887
2888 goto send_request;
2889 }
2890
2891 /*
Jarno Lamsa77e66652019-05-29 15:15:08 +03002892 * 7c. Simulate serialize/deserialize and go back to data exchange
2893 */
Jarno Lamsabbc7b412019-06-04 11:06:31 +03002894#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002895 if( opt.serialize != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002896 {
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002897 size_t buf_len;
Jarno Lamsa77e66652019-05-29 15:15:08 +03002898
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002899 mbedtls_printf( " . Serializing live connection..." );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002900
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002901 ret = mbedtls_ssl_context_save( &ssl, NULL, 0, &buf_len );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002902 if( ret != MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002903 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002904 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002905 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002906
2907 goto exit;
2908 }
2909
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002910 if( ( context_buf = mbedtls_calloc( 1, buf_len ) ) == NULL )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002911 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002912 mbedtls_printf( " failed\n ! Couldn't allocate buffer for "
2913 "serialized context" );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002914
2915 goto exit;
2916 }
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02002917 context_buf_len = buf_len;
Jarno Lamsa77e66652019-05-29 15:15:08 +03002918
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002919 if( ( ret = mbedtls_ssl_context_save( &ssl, context_buf,
2920 buf_len, &buf_len ) ) != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002921 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002922 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002923 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002924
2925 goto exit;
2926 }
2927
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002928 mbedtls_printf( " ok\n" );
2929
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002930 /* Save serialized context to the 'opt.context_file' as a base64 code */
2931 if( 0 < strlen( opt.context_file ) )
2932 {
2933 FILE *b64_file;
2934 uint8_t *b64_buf;
2935 size_t b64_len;
2936
2937 mbedtls_printf( " . Save serialized context to a file... " );
2938
2939 mbedtls_base64_encode( NULL, 0, &b64_len, context_buf, buf_len );
2940
2941 if( ( b64_buf = mbedtls_calloc( 1, b64_len ) ) == NULL )
2942 {
2943 mbedtls_printf( "failed\n ! Couldn't allocate buffer for "
2944 "the base64 code\n" );
2945 goto exit;
2946 }
2947
2948 if( ( ret = mbedtls_base64_encode( b64_buf, b64_len, &b64_len,
2949 context_buf, buf_len ) ) != 0 )
2950 {
2951 mbedtls_printf( "failed\n ! mbedtls_base64_encode returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002952 "-0x%x\n", (unsigned int) -ret );
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002953 mbedtls_free( b64_buf );
2954 goto exit;
2955 }
2956
2957 if( ( b64_file = fopen( opt.context_file, "w" ) ) == NULL )
2958 {
2959 mbedtls_printf( "failed\n ! Cannot open '%s' for writing.\n",
2960 opt.context_file );
2961 mbedtls_free( b64_buf );
2962 goto exit;
2963 }
2964
2965 if( b64_len != fwrite( b64_buf, 1, b64_len, b64_file ) )
2966 {
2967 mbedtls_printf( "failed\n ! fwrite(%ld bytes) failed\n",
2968 (long) b64_len );
2969 mbedtls_free( b64_buf );
2970 fclose( b64_file );
2971 goto exit;
2972 }
2973
2974 mbedtls_free( b64_buf );
2975 fclose( b64_file );
2976
2977 mbedtls_printf( "ok\n" );
2978 }
2979
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002980 if( opt.serialize == 1 )
2981 {
Manuel Pégourié-Gonnard9df5a822019-07-23 14:51:09 +02002982 /* nothing to do here, done by context_save() already */
Piotr Nowicki136bebf2020-04-17 14:37:00 +02002983 mbedtls_printf( " . Context has been reset... ok\n" );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002984 }
2985
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002986 if( opt.serialize == 2 )
2987 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002988 mbedtls_printf( " . Freeing and reinitializing context..." );
2989
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002990 mbedtls_ssl_free( &ssl );
2991
2992 mbedtls_ssl_init( &ssl );
2993
2994 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2995 {
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002996 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002997 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002998 goto exit;
2999 }
3000
3001 if( opt.nbio == 2 )
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003002 mbedtls_ssl_set_bio( &ssl, &server_fd, delayed_send,
3003 delayed_recv, NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003004 else
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003005 mbedtls_ssl_set_bio( &ssl, &server_fd, mbedtls_net_send,
3006 mbedtls_net_recv,
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003007 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003008
Jarno Lamsa8e253212019-06-13 11:45:06 +03003009#if defined(MBEDTLS_TIMING_C)
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003010 mbedtls_ssl_set_timer_cb( &ssl, &timer,
3011 mbedtls_timing_set_delay,
3012 mbedtls_timing_get_delay );
Jarno Lamsa8e253212019-06-13 11:45:06 +03003013#endif /* MBEDTLS_TIMING_C */
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003014
3015 mbedtls_printf( " ok\n" );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003016 }
3017
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003018 mbedtls_printf( " . Deserializing connection..." );
Jarno Lamsa77e66652019-05-29 15:15:08 +03003019
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003020 if( ( ret = mbedtls_ssl_context_load( &ssl, context_buf,
3021 buf_len ) ) != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03003022 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03003023 mbedtls_printf( "failed\n ! mbedtls_ssl_context_load returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003024 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03003025
3026 goto exit;
3027 }
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003028
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02003029 mbedtls_free( context_buf );
3030 context_buf = NULL;
3031 context_buf_len = 0;
3032
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003033 mbedtls_printf( " ok\n" );
Jarno Lamsa77e66652019-05-29 15:15:08 +03003034 }
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03003035#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
Jarno Lamsa77e66652019-05-29 15:15:08 +03003036
3037 /*
3038 * 7d. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003039 */
3040 if( --opt.exchanges > 0 )
3041 goto send_request;
3042
3043 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02003044 * 8. Done, cleanly close the connection
3045 */
3046close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003047 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02003048 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02003049
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003050 /*
3051 * Most of the time sending a close_notify before closing is the right
3052 * thing to do. However, when the server already knows how many messages
3053 * are expected and closes the connection by itself, this alert becomes
3054 * redundant. Sometimes with DTLS this redundancy becomes a problem by
3055 * leading to a race condition where the server might close the connection
3056 * before seeing the alert, and since UDP is connection-less when the
3057 * alert arrives it will be seen as a new connection, which will fail as
3058 * the alert is clearly not a valid ClientHello. This may cause spurious
3059 * failures in tests that use DTLS and resumption with ssl_server2 in
3060 * ssl-opt.sh, avoided by enabling skip_close_notify client-side.
3061 */
3062 if( opt.skip_close_notify == 0 )
3063 {
3064 /* No error checking, the connection might be closed already */
3065 do ret = mbedtls_ssl_close_notify( &ssl );
3066 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
3067 ret = 0;
3068 }
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02003069
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003070 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02003071
3072 /*
3073 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003074 */
3075reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003076 if( opt.reconnect != 0 )
3077 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02003078 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003079
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003080 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01003081
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003082#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003083 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02003084 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003085#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02003086
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003087 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003088
Ronald Crone68ab4f2022-10-05 12:46:29 +02003089#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Beckera1051b42019-02-26 11:38:29 +00003090 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Ronald Crone68ab4f2022-10-05 12:46:29 +02003091#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Hanno Beckera1051b42019-02-26 11:38:29 +00003092
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003093 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003094 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01003095 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003096 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003097 goto exit;
3098 }
3099
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003100 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02003101 {
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003102 if( ( ret = mbedtls_ssl_session_load( &saved_session,
3103 session_data,
3104 session_data_len ) ) != 0 )
3105 {
3106 mbedtls_printf( " failed\n ! mbedtls_ssl_session_load returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003107 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003108 goto exit;
3109 }
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02003110 }
3111
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003112 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02003113 {
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02003114 mbedtls_printf( " failed\n ! mbedtls_ssl_set_session returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003115 (unsigned int) -ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02003116 goto exit;
3117 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003118
Xiaokang Qian281fd1b2022-09-20 11:35:41 +00003119#if defined(MBEDTLS_X509_CRT_PARSE_C)
Jerry Yuad9e99b2022-10-28 12:18:52 +08003120 if( opt.reco_server_name != NULL &&
3121 ( ret = mbedtls_ssl_set_hostname( &ssl,
Xiaokang Qianbc663a02022-10-09 11:14:39 +00003122 opt.reco_server_name ) ) != 0 )
Xiaokang Qian281fd1b2022-09-20 11:35:41 +00003123 {
Xiaokang Qianadf84a42022-10-09 09:21:22 +00003124 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
Xiaokang Qian281fd1b2022-09-20 11:35:41 +00003125 ret );
3126 goto exit;
3127 }
3128#endif
3129
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01003130 if( ( ret = mbedtls_net_connect( &server_fd,
3131 opt.server_addr, opt.server_port,
3132 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
3133 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003134 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01003135 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003136 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003137 goto exit;
3138 }
3139
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003140 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02003141 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003142 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02003143 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003144 if( ret != 0 )
3145 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003146 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003147 (unsigned int) -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003148 goto exit;
3149 }
3150
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003151 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003152 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01003153 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02003154 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02003155 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003156 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01003157 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003158 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003159 goto exit;
3160 }
3161 }
3162
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003163 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003164
3165 goto send_request;
3166 }
3167
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003168 /*
3169 * Cleanup and exit
3170 */
Paul Bakker5121ce52009-01-03 21:22:43 +00003171exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003172#ifdef MBEDTLS_ERROR_C
gabor-mezei-armde472172020-09-04 14:44:25 +02003173 if( ret != 0 )
Paul Bakkera3d195c2011-11-27 21:07:34 +00003174 {
3175 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003176 mbedtls_strerror( ret, error_buf, 100 );
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003177 mbedtls_printf("Last error was: -0x%X - %s\n\n", (unsigned int) -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00003178 }
3179#endif
3180
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003181 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003182
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01003183 mbedtls_ssl_free( &ssl );
3184 mbedtls_ssl_config_free( &conf );
3185 mbedtls_ssl_session_free( &saved_session );
3186
3187 if( session_data != NULL )
3188 mbedtls_platform_zeroize( session_data, session_data_len );
3189 mbedtls_free( session_data );
3190#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
3191 if( context_buf != NULL )
3192 mbedtls_platform_zeroize( context_buf, context_buf_len );
3193 mbedtls_free( context_buf );
3194#endif
3195
Ronald Crone68ab4f2022-10-05 12:46:29 +02003196#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003197 mbedtls_x509_crt_free( &clicert );
3198 mbedtls_x509_crt_free( &cacert );
3199 mbedtls_pk_free( &pkey );
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01003200#if defined(MBEDTLS_USE_PSA_CRYPTO)
3201 psa_destroy_key( key_slot );
3202#endif
Ronald Crone68ab4f2022-10-05 12:46:29 +02003203#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakker5121ce52009-01-03 21:22:43 +00003204
Ronald Cron73fe8df2022-10-05 14:31:43 +02003205#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED) && \
Hanno Becker3f24ea92018-11-05 13:25:17 +00003206 defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00003207 if( opt.psk_opaque != 0 )
Hanno Becker3f24ea92018-11-05 13:25:17 +00003208 {
3209 /* This is ok even if the slot hasn't been
3210 * initialized (we might have jumed here
3211 * immediately because of bad cmd line params,
3212 * for example). */
Hanno Becker1d911cd2018-11-15 13:06:09 +00003213 status = psa_destroy_key( slot );
gabor-mezei-armde472172020-09-04 14:44:25 +02003214 if( ( status != PSA_SUCCESS ) &&
3215 ( opt.query_config_mode == DFL_QUERY_CONFIG_MODE ) )
Hanno Becker3f24ea92018-11-05 13:25:17 +00003216 {
Ronald Cronadc2ff22020-09-16 16:49:27 +02003217 mbedtls_printf( "Failed to destroy key slot %u - error was %d",
Andrzej Kurek03e01462022-01-03 12:53:24 +01003218 (unsigned) MBEDTLS_SVC_KEY_ID_GET_KEY_ID( slot ),
3219 (int) status );
Hanno Becker3f24ea92018-11-05 13:25:17 +00003220 if( ret == 0 )
3221 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
3222 }
3223 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02003224#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED &&
Hanno Becker3f24ea92018-11-05 13:25:17 +00003225 MBEDTLS_USE_PSA_CRYPTO */
3226
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +01003227#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01003228 const char* message = mbedtls_test_helper_is_psa_leaking();
3229 if( message )
3230 {
3231 if( ret == 0 )
3232 ret = 1;
3233 mbedtls_printf( "PSA memory leak detected: %s\n", message);
3234 }
Przemek Stekiel3f076df2022-03-04 09:36:46 +01003235#endif /* MBEDTLS_USE_PSA_CRYPTO || MBEDTLS_SSL_PROTO_TLS1_3 */
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01003236
3237 /* For builds with MBEDTLS_TEST_USE_PSA_CRYPTO_RNG psa crypto
3238 * resources are freed by rng_free(). */
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +01003239#if (defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)) && \
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01003240 !defined(MBEDTLS_TEST_USE_PSA_CRYPTO_RNG)
Gilles Peskine414e7172021-02-03 00:04:08 +01003241 mbedtls_psa_crypto_free( );
3242#endif
3243
Gilles Peskineb8c48402021-02-08 20:28:22 +01003244 rng_free( &rng );
Gilles Peskineb8c48402021-02-08 20:28:22 +01003245
Gilles Peskine60fe6602021-02-16 18:56:42 +01003246#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +01003247 if( test_hooks_failure_detected( ) )
3248 {
3249 if( ret == 0 )
3250 ret = 1;
3251 mbedtls_printf( "Test hooks detected errors.\n" );
3252 }
3253 test_hooks_free( );
Gilles Peskine60fe6602021-02-16 18:56:42 +01003254#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01003255
Piotr Nowicki7d01ef62019-11-20 15:00:17 +01003256#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3257#if defined(MBEDTLS_MEMORY_DEBUG)
3258 mbedtls_memory_buffer_alloc_status();
3259#endif
3260 mbedtls_memory_buffer_alloc_free();
Gilles Peskine34babfc2021-02-16 15:44:37 +01003261#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Piotr Nowicki7d01ef62019-11-20 15:00:17 +01003262
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003263 // Shell can not handle large exit numbers -> 1 for errors
3264 if( ret < 0 )
3265 ret = 1;
3266
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003267 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3268 mbedtls_exit( ret );
3269 else
3270 mbedtls_exit( query_config_ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00003271}
Gilles Peskineb4df7542021-01-08 21:20:09 +01003272#endif /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_CLI_C */