blob: 6becf8d91316b78e565f797ea42e52a6712dc74d [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL server demonstration program
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +00005 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Paul Bakker5121ce52009-01-03 21:22:43 +00006 */
7
Bence Szépkútic662b362021-05-27 11:25:03 +02008#include "mbedtls/build_info.h"
Paul Bakker5121ce52009-01-03 21:22:43 +00009
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000010#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000011
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010012#if !defined(MBEDTLS_BIGNUM_C) || !defined(MBEDTLS_PEM_PARSE_C) || \
13 !defined(MBEDTLS_ENTROPY_C) || !defined(MBEDTLS_SSL_TLS_C) || \
14 !defined(MBEDTLS_SSL_SRV_C) || !defined(MBEDTLS_NET_C) || \
15 !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_CTR_DRBG_C) || \
16 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +010017int main(void)
Paul Bakker5690efc2011-05-26 13:16:06 +000018{
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010019 mbedtls_printf("MBEDTLS_BIGNUM_C and/or MBEDTLS_ENTROPY_C "
Gilles Peskine449bd832023-01-11 14:50:10 +010020 "and/or MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_SRV_C and/or "
21 "MBEDTLS_NET_C and/or MBEDTLS_RSA_C and/or "
22 "MBEDTLS_CTR_DRBG_C and/or MBEDTLS_X509_CRT_PARSE_C "
23 "and/or MBEDTLS_PEM_PARSE_C not defined.\n");
24 mbedtls_exit(0);
Paul Bakker5690efc2011-05-26 13:16:06 +000025}
26#else
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010027
28#include <stdlib.h>
29#include <string.h>
30
31#if defined(_WIN32)
32#include <windows.h>
33#endif
34
35#include "mbedtls/entropy.h"
36#include "mbedtls/ctr_drbg.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010037#include "mbedtls/x509.h"
38#include "mbedtls/ssl.h"
Andres AG788aa4a2016-09-14 14:32:09 +010039#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010040#include "mbedtls/error.h"
41#include "mbedtls/debug.h"
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010042#include "test/certs.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010043
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020044#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010045#include "mbedtls/ssl_cache.h"
46#endif
47
48#define HTTP_RESPONSE \
49 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Gilles Peskinee820c0a2023-08-03 17:45:20 +020050 "<h2>Mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010051 "<p>Successful connection using: %s</p>\r\n"
52
53#define DEBUG_LEVEL 0
54
Simon Butcher63cb97e2018-12-06 17:43:31 +000055
Gilles Peskine449bd832023-01-11 14:50:10 +010056static void my_debug(void *ctx, int level,
57 const char *file, int line,
58 const char *str)
Paul Bakker9a97c5d2013-09-15 17:07:33 +020059{
Paul Bakkerc73079a2014-04-25 16:34:30 +020060 ((void) level);
61
Gilles Peskine449bd832023-01-11 14:50:10 +010062 mbedtls_fprintf((FILE *) ctx, "%s:%04d: %s", file, line, str);
63 fflush((FILE *) ctx);
Paul Bakker9a97c5d2013-09-15 17:07:33 +020064}
65
Gilles Peskine449bd832023-01-11 14:50:10 +010066int main(void)
Paul Bakker5121ce52009-01-03 21:22:43 +000067{
68 int ret, len;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +020069 mbedtls_net_context listen_fd, client_fd;
Paul Bakker5121ce52009-01-03 21:22:43 +000070 unsigned char buf[1024];
Paul Bakkeref3f8c72013-06-24 13:01:08 +020071 const char *pers = "ssl_server";
Paul Bakker5121ce52009-01-03 21:22:43 +000072
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020073 mbedtls_entropy_context entropy;
74 mbedtls_ctr_drbg_context ctr_drbg;
75 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +020076 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020077 mbedtls_x509_crt srvcert;
78 mbedtls_pk_context pkey;
79#if defined(MBEDTLS_SSL_CACHE_C)
80 mbedtls_ssl_cache_context cache;
Paul Bakkerd4324102012-09-26 08:29:38 +000081#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000082
Gilles Peskine449bd832023-01-11 14:50:10 +010083 mbedtls_net_init(&listen_fd);
84 mbedtls_net_init(&client_fd);
85 mbedtls_ssl_init(&ssl);
86 mbedtls_ssl_config_init(&conf);
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020087#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +010088 mbedtls_ssl_cache_init(&cache);
Paul Bakker0a597072012-09-25 21:55:46 +000089#endif
Gilles Peskine449bd832023-01-11 14:50:10 +010090 mbedtls_x509_crt_init(&srvcert);
91 mbedtls_pk_init(&pkey);
92 mbedtls_entropy_init(&entropy);
93 mbedtls_ctr_drbg_init(&ctr_drbg);
Paul Bakkerfab5c822012-02-06 16:45:10 +000094
Przemek Stekiela0a1c1e2023-04-17 11:10:05 +020095#if defined(MBEDTLS_USE_PSA_CRYPTO)
96 psa_status_t status = psa_crypto_init();
97 if (status != PSA_SUCCESS) {
98 mbedtls_fprintf(stderr, "Failed to initialize PSA Crypto implementation: %d\n",
99 (int) status);
100 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
101 goto exit;
102 }
103#endif /* MBEDTLS_USE_PSA_CRYPTO */
104
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200105#if defined(MBEDTLS_DEBUG_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100106 mbedtls_debug_set_threshold(DEBUG_LEVEL);
Paul Bakkerc73079a2014-04-25 16:34:30 +0200107#endif
108
Paul Bakker5121ce52009-01-03 21:22:43 +0000109 /*
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200110 * 1. Seed the RNG
111 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100112 mbedtls_printf(" . Seeding the random number generator...");
113 fflush(stdout);
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200114
Gilles Peskine449bd832023-01-11 14:50:10 +0100115 if ((ret = mbedtls_ctr_drbg_seed(&ctr_drbg, mbedtls_entropy_func, &entropy,
116 (const unsigned char *) pers,
117 strlen(pers))) != 0) {
118 mbedtls_printf(" failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret);
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200119 goto exit;
120 }
121
Gilles Peskine449bd832023-01-11 14:50:10 +0100122 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200123
124 /*
125 * 2. Load the certificates and private RSA key
Paul Bakker5121ce52009-01-03 21:22:43 +0000126 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100127 mbedtls_printf("\n . Loading the server cert. and key...");
128 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000129
Paul Bakker5121ce52009-01-03 21:22:43 +0000130 /*
131 * This demonstration program uses embedded test certificates.
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 * Instead, you may want to use mbedtls_x509_crt_parse_file() to read the
133 * server and CA certificates, as well as mbedtls_pk_parse_keyfile().
Paul Bakker5121ce52009-01-03 21:22:43 +0000134 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100135 ret = mbedtls_x509_crt_parse(&srvcert, (const unsigned char *) mbedtls_test_srv_crt,
136 mbedtls_test_srv_crt_len);
137 if (ret != 0) {
138 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000139 goto exit;
140 }
141
Gilles Peskine449bd832023-01-11 14:50:10 +0100142 ret = mbedtls_x509_crt_parse(&srvcert, (const unsigned char *) mbedtls_test_cas_pem,
143 mbedtls_test_cas_pem_len);
144 if (ret != 0) {
145 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000146 goto exit;
147 }
148
Gilles Peskine449bd832023-01-11 14:50:10 +0100149 ret = mbedtls_pk_parse_key(&pkey, (const unsigned char *) mbedtls_test_srv_key,
150 mbedtls_test_srv_key_len, NULL, 0,
151 mbedtls_ctr_drbg_random, &ctr_drbg);
152 if (ret != 0) {
153 mbedtls_printf(" failed\n ! mbedtls_pk_parse_key returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000154 goto exit;
155 }
156
Gilles Peskine449bd832023-01-11 14:50:10 +0100157 mbedtls_printf(" ok\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000158
159 /*
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200160 * 3. Setup the listening TCP socket
Paul Bakker5121ce52009-01-03 21:22:43 +0000161 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100162 mbedtls_printf(" . Bind on https://localhost:4433/ ...");
163 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000164
Gilles Peskine449bd832023-01-11 14:50:10 +0100165 if ((ret = mbedtls_net_bind(&listen_fd, NULL, "4433", MBEDTLS_NET_PROTO_TCP)) != 0) {
166 mbedtls_printf(" failed\n ! mbedtls_net_bind returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000167 goto exit;
168 }
169
Gilles Peskine449bd832023-01-11 14:50:10 +0100170 mbedtls_printf(" ok\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000171
172 /*
Paul Bakker508ad5a2011-12-04 17:09:26 +0000173 * 4. Setup stuff
174 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100175 mbedtls_printf(" . Setting up the SSL data....");
176 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000177
Gilles Peskine449bd832023-01-11 14:50:10 +0100178 if ((ret = mbedtls_ssl_config_defaults(&conf,
179 MBEDTLS_SSL_IS_SERVER,
180 MBEDTLS_SSL_TRANSPORT_STREAM,
181 MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
182 mbedtls_printf(" failed\n ! mbedtls_ssl_config_defaults returned %d\n\n", ret);
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200183 goto exit;
184 }
185
Gilles Peskine449bd832023-01-11 14:50:10 +0100186 mbedtls_ssl_conf_rng(&conf, mbedtls_ctr_drbg_random, &ctr_drbg);
187 mbedtls_ssl_conf_dbg(&conf, my_debug, stdout);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000188
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200189#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100190 mbedtls_ssl_conf_session_cache(&conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +0100191 mbedtls_ssl_cache_get,
Gilles Peskine449bd832023-01-11 14:50:10 +0100192 mbedtls_ssl_cache_set);
Paul Bakker0a597072012-09-25 21:55:46 +0000193#endif
Paul Bakker5121ce52009-01-03 21:22:43 +0000194
Gilles Peskine449bd832023-01-11 14:50:10 +0100195 mbedtls_ssl_conf_ca_chain(&conf, srvcert.next, NULL);
196 if ((ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, &pkey)) != 0) {
197 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +0200198 goto exit;
199 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000200
Gilles Peskine449bd832023-01-11 14:50:10 +0100201 if ((ret = mbedtls_ssl_setup(&ssl, &conf)) != 0) {
202 mbedtls_printf(" failed\n ! mbedtls_ssl_setup returned %d\n\n", ret);
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +0200203 goto exit;
204 }
205
Gilles Peskine449bd832023-01-11 14:50:10 +0100206 mbedtls_printf(" ok\n");
Paul Bakker7eb013f2011-10-06 12:37:39 +0000207
208reset:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200209#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +0100210 if (ret != 0) {
Paul Bakkera3d195c2011-11-27 21:07:34 +0000211 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +0100212 mbedtls_strerror(ret, error_buf, 100);
213 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf);
Paul Bakkera3d195c2011-11-27 21:07:34 +0000214 }
215#endif
216
Gilles Peskine449bd832023-01-11 14:50:10 +0100217 mbedtls_net_free(&client_fd);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000218
Gilles Peskine449bd832023-01-11 14:50:10 +0100219 mbedtls_ssl_session_reset(&ssl);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000220
221 /*
222 * 3. Wait until a client connects
223 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100224 mbedtls_printf(" . Waiting for a remote connection ...");
225 fflush(stdout);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000226
Gilles Peskine449bd832023-01-11 14:50:10 +0100227 if ((ret = mbedtls_net_accept(&listen_fd, &client_fd,
228 NULL, 0, NULL)) != 0) {
229 mbedtls_printf(" failed\n ! mbedtls_net_accept returned %d\n\n", ret);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000230 goto exit;
231 }
232
Gilles Peskine449bd832023-01-11 14:50:10 +0100233 mbedtls_ssl_set_bio(&ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv, NULL);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000234
Gilles Peskine449bd832023-01-11 14:50:10 +0100235 mbedtls_printf(" ok\n");
Paul Bakker7eb013f2011-10-06 12:37:39 +0000236
Paul Bakker5121ce52009-01-03 21:22:43 +0000237 /*
238 * 5. Handshake
239 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100240 mbedtls_printf(" . Performing the SSL/TLS handshake...");
241 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000242
Gilles Peskine449bd832023-01-11 14:50:10 +0100243 while ((ret = mbedtls_ssl_handshake(&ssl)) != 0) {
244 if (ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE) {
245 mbedtls_printf(" failed\n ! mbedtls_ssl_handshake returned %d\n\n", ret);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000246 goto reset;
Paul Bakker5121ce52009-01-03 21:22:43 +0000247 }
248 }
249
Gilles Peskine449bd832023-01-11 14:50:10 +0100250 mbedtls_printf(" ok\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000251
252 /*
253 * 6. Read the HTTP Request
254 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100255 mbedtls_printf(" < Read from client:");
256 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000257
Gilles Peskine449bd832023-01-11 14:50:10 +0100258 do {
259 len = sizeof(buf) - 1;
260 memset(buf, 0, sizeof(buf));
261 ret = mbedtls_ssl_read(&ssl, buf, len);
Paul Bakker5121ce52009-01-03 21:22:43 +0000262
Gilles Peskine449bd832023-01-11 14:50:10 +0100263 if (ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE) {
Paul Bakker5121ce52009-01-03 21:22:43 +0000264 continue;
Gilles Peskine449bd832023-01-11 14:50:10 +0100265 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000266
Gilles Peskine449bd832023-01-11 14:50:10 +0100267 if (ret <= 0) {
268 switch (ret) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200269 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Gilles Peskine449bd832023-01-11 14:50:10 +0100270 mbedtls_printf(" connection was closed gracefully\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000271 break;
272
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200273 case MBEDTLS_ERR_NET_CONN_RESET:
Gilles Peskine449bd832023-01-11 14:50:10 +0100274 mbedtls_printf(" connection was reset by peer\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000275 break;
276
277 default:
Gilles Peskine449bd832023-01-11 14:50:10 +0100278 mbedtls_printf(" mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000279 break;
280 }
281
282 break;
283 }
284
285 len = ret;
Gilles Peskine449bd832023-01-11 14:50:10 +0100286 mbedtls_printf(" %d bytes read\n\n%s", len, (char *) buf);
Paul Bakker48916f92012-09-16 19:57:18 +0000287
Gilles Peskine449bd832023-01-11 14:50:10 +0100288 if (ret > 0) {
Paul Bakker48916f92012-09-16 19:57:18 +0000289 break;
Gilles Peskine449bd832023-01-11 14:50:10 +0100290 }
291 } while (1);
Paul Bakker5121ce52009-01-03 21:22:43 +0000292
293 /*
294 * 7. Write the 200 Response
295 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100296 mbedtls_printf(" > Write to client:");
297 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000298
Gilles Peskine449bd832023-01-11 14:50:10 +0100299 len = sprintf((char *) buf, HTTP_RESPONSE,
300 mbedtls_ssl_get_ciphersuite(&ssl));
Paul Bakker5121ce52009-01-03 21:22:43 +0000301
Gilles Peskine449bd832023-01-11 14:50:10 +0100302 while ((ret = mbedtls_ssl_write(&ssl, buf, len)) <= 0) {
303 if (ret == MBEDTLS_ERR_NET_CONN_RESET) {
304 mbedtls_printf(" failed\n ! peer closed the connection\n\n");
Paul Bakker7eb013f2011-10-06 12:37:39 +0000305 goto reset;
Paul Bakker5121ce52009-01-03 21:22:43 +0000306 }
307
Gilles Peskine449bd832023-01-11 14:50:10 +0100308 if (ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE) {
309 mbedtls_printf(" failed\n ! mbedtls_ssl_write returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000310 goto exit;
311 }
312 }
313
314 len = ret;
Gilles Peskine449bd832023-01-11 14:50:10 +0100315 mbedtls_printf(" %d bytes written\n\n%s\n", len, (char *) buf);
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100316
Gilles Peskine449bd832023-01-11 14:50:10 +0100317 mbedtls_printf(" . Closing the connection...");
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100318
Gilles Peskine449bd832023-01-11 14:50:10 +0100319 while ((ret = mbedtls_ssl_close_notify(&ssl)) < 0) {
320 if (ret != MBEDTLS_ERR_SSL_WANT_READ &&
321 ret != MBEDTLS_ERR_SSL_WANT_WRITE) {
322 mbedtls_printf(" failed\n ! mbedtls_ssl_close_notify returned %d\n\n", ret);
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100323 goto reset;
324 }
325 }
326
Gilles Peskine449bd832023-01-11 14:50:10 +0100327 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100328
Paul Bakkera3d195c2011-11-27 21:07:34 +0000329 ret = 0;
Paul Bakker7eb013f2011-10-06 12:37:39 +0000330 goto reset;
Paul Bakker5121ce52009-01-03 21:22:43 +0000331
332exit:
333
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200334#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +0100335 if (ret != 0) {
Paul Bakkera3d195c2011-11-27 21:07:34 +0000336 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +0100337 mbedtls_strerror(ret, error_buf, 100);
338 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf);
Paul Bakkera3d195c2011-11-27 21:07:34 +0000339 }
340#endif
341
Gilles Peskine449bd832023-01-11 14:50:10 +0100342 mbedtls_net_free(&client_fd);
343 mbedtls_net_free(&listen_fd);
Gilles Peskine449bd832023-01-11 14:50:10 +0100344 mbedtls_x509_crt_free(&srvcert);
345 mbedtls_pk_free(&pkey);
346 mbedtls_ssl_free(&ssl);
347 mbedtls_ssl_config_free(&conf);
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200348#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100349 mbedtls_ssl_cache_free(&cache);
Paul Bakker0a597072012-09-25 21:55:46 +0000350#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100351 mbedtls_ctr_drbg_free(&ctr_drbg);
352 mbedtls_entropy_free(&entropy);
Przemek Stekiel758aef62023-04-19 13:47:43 +0200353#if defined(MBEDTLS_USE_PSA_CRYPTO)
Przemek Stekiela8c560a2023-04-19 10:15:26 +0200354 mbedtls_psa_crypto_free();
Przemek Stekiel758aef62023-04-19 13:47:43 +0200355#endif /* MBEDTLS_USE_PSA_CRYPTO */
Paul Bakker5121ce52009-01-03 21:22:43 +0000356
Gilles Peskine449bd832023-01-11 14:50:10 +0100357 mbedtls_exit(ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000358}
Mateusz Starzyk1aec6462021-02-08 15:34:42 +0100359#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C &&
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200360 MBEDTLS_SSL_TLS_C && MBEDTLS_SSL_SRV_C && MBEDTLS_NET_C &&
361 MBEDTLS_RSA_C && MBEDTLS_CTR_DRBG_C && MBEDTLS_X509_CRT_PARSE_C
362 && MBEDTLS_FS_IO && MBEDTLS_PEM_PARSE_C */