blob: bcfe025e7655567cefb6cd1aff848fda15434578 [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb60b95f2012-09-25 09:05:17 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakkerb60b95f2012-09-25 09:05:17 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Manuel Pégourié-Gonnard8a4d5712014-06-24 14:19:59 +020031#include <stdio.h>
Simon Butcherd3138c32016-04-27 01:26:50 +010032#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020033#define mbedtls_free free
Simon Butcherd3138c32016-04-27 01:26:50 +010034#define mbedtls_time time
35#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +020036#define mbedtls_calloc calloc
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037#define mbedtls_fprintf fprintf
38#define mbedtls_printf printf
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010039#define mbedtls_exit exit
40#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
41#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Rich Evans18b78c72015-02-11 14:06:19 +000042#endif
Manuel Pégourié-Gonnard8a4d5712014-06-24 14:19:59 +020043
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020044#if !defined(MBEDTLS_ENTROPY_C) || \
45 !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_SRV_C) || \
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020046 !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020047int main( void )
48{
49 mbedtls_printf("MBEDTLS_ENTROPY_C and/or "
50 "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_SRV_C and/or "
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +020051 "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n");
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020052 return( 0 );
53}
54#else
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +010055
Andres AG788aa4a2016-09-14 14:32:09 +010056#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000057#include "mbedtls/ssl.h"
58#include "mbedtls/entropy.h"
59#include "mbedtls/ctr_drbg.h"
60#include "mbedtls/certs.h"
61#include "mbedtls/x509.h"
62#include "mbedtls/error.h"
63#include "mbedtls/debug.h"
Manuel Pégourié-Gonnard56273da2015-05-26 12:19:45 +020064#include "mbedtls/timing.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000065
Rich Evans18b78c72015-02-11 14:06:19 +000066#include <stdio.h>
67#include <stdlib.h>
68#include <string.h>
Andres AG692ad842017-01-19 16:30:57 +000069#include <stdint.h>
Andres AG0b736db2017-02-08 14:05:57 +000070
71#if !defined(_MSC_VER)
Andres AG692ad842017-01-19 16:30:57 +000072#include <inttypes.h>
Andres AG0b736db2017-02-08 14:05:57 +000073#endif
Rich Evans18b78c72015-02-11 14:06:19 +000074
75#if !defined(_WIN32)
76#include <signal.h>
77#endif
78
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020079#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000080#include "mbedtls/ssl_cache.h"
Paul Bakker0a597072012-09-25 21:55:46 +000081#endif
82
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +020083#if defined(MBEDTLS_SSL_TICKET_C)
84#include "mbedtls/ssl_ticket.h"
85#endif
86
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020087#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000088#include "mbedtls/ssl_cookie.h"
Manuel Pégourié-Gonnard232edd42014-07-23 16:56:27 +020089#endif
90
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020091#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000092#include "mbedtls/memory_buffer_alloc.h"
Paul Bakker82024bf2013-07-04 11:52:32 +020093#endif
94
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020095#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && defined(MBEDTLS_FS_IO)
96#define SNI_OPTION
97#endif
98
99#if defined(_WIN32)
100#include <windows.h>
101#endif
102
Simon Butchercce68be2018-07-23 14:26:09 +0100103/* Size of memory to be allocated for the heap, when using the library's memory
104 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
105#define MEMORY_HEAP_SIZE 120000
106
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +0100107#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200108#define DFL_SERVER_PORT "4433"
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200109#define DFL_RESPONSE_SIZE -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000110#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100111#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +0100112#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200113#define DFL_READ_TIMEOUT 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000114#define DFL_CA_FILE ""
115#define DFL_CA_PATH ""
116#define DFL_CRT_FILE ""
117#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200118#define DFL_CRT_FILE2 ""
119#define DFL_KEY_FILE2 ""
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100120#define DFL_ASYNC_OPERATIONS "-"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100121#define DFL_ASYNC_PRIVATE_DELAY1 ( -1 )
122#define DFL_ASYNC_PRIVATE_DELAY2 ( -1 )
Gilles Peskine3665f1d2018-01-05 21:22:12 +0100123#define DFL_ASYNC_PRIVATE_ERROR ( 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +0200124#define DFL_PSK ""
125#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200126#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200127#define DFL_PSK_LIST NULL
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000128#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200129#define DFL_VERSION_SUITES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200130#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100131#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100132#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +0200133#define DFL_RENEGO_DELAY -2
Andres AG692ad842017-01-19 16:30:57 +0000134#define DFL_RENEGO_PERIOD ( (uint64_t)-1 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200135#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200136#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +0200137#define DFL_MAX_VERSION -1
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +0000138#define DFL_ARC4 -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200139#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100140#define DFL_AUTH_MODE -1
Janos Follath4817e272017-04-10 13:44:33 +0100141#define DFL_CERT_REQ_CA_LIST MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200142#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100143#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200145#define DFL_TICKET_TIMEOUT 86400
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100146#define DFL_CACHE_MAX -1
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100147#define DFL_CACHE_TIMEOUT -1
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100148#define DFL_SNI NULL
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200149#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100150#define DFL_CURVES NULL
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200151#define DFL_DHM_FILE NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200153#define DFL_COOKIES 1
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200154#define DFL_ANTI_REPLAY -1
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200155#define DFL_HS_TO_MIN 0
156#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200157#define DFL_DTLS_MTU -1
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200158#define DFL_BADMAC_LIMIT -1
Hanno Beckere7675d02018-08-14 13:28:56 +0100159#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200160#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100161#define DFL_ETM -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000162
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200163#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
164 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
165 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
166 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
167 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
168 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
169 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200170
Paul Bakker8e714d72013-07-18 11:05:13 +0200171/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
172 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000173#define HTTP_RESPONSE \
174 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Manuel Pégourié-Gonnard91699212015-01-22 16:26:39 +0000175 "<h2>mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200176 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000177
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200178/*
179 * Size of the basic I/O buffer. Able to hold our default response.
180 *
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181 * You will need to adapt the mbedtls_ssl_get_bytes_avail() test in ssl-opt.sh
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200182 * if you change this value to something outside the range <= 100 or > 500
183 */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200184#define DFL_IO_BUF_LEN 200
Manuel Pégourié-Gonnarde7a3b102014-06-11 18:21:20 +0200185
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200186#if defined(MBEDTLS_X509_CRT_PARSE_C)
187#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000188#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100189 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
190 " default: \"\" (pre-loaded)\n" \
191 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
192 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
193 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200194 " default: see note after key_file2\n" \
195 " key_file=%%s default: see note after key_file2\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200196 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200197 " default: see note after key_file2\n" \
198 " key_file2=%%s default: see note below\n" \
199 " note: if neither crt_file/key_file nor crt_file2/key_file2 are used,\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200200 " preloaded certificate(s) and key(s) are used if available\n" \
201 " dhm_file=%%s File containing Diffie-Hellman parameters\n" \
202 " default: preloaded parameters\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000203#else
204#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200205 "\n" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200206 " No file operations available (MBEDTLS_FS_IO not defined)\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200207 "\n"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200209#else
210#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200211#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200212
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200213#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100214#define USAGE_SSL_ASYNC \
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100215 " async_operations=%%c... d=decrypt, s=sign (default: -=off)\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100216 " async_private_delay1=%%d Asynchronous delay for key_file or preloaded key\n" \
Gilles Peskine166ce742018-04-30 10:30:49 +0200217 " async_private_delay2=%%d Asynchronous delay for key_file2 and sni\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100218 " default: -1 (not asynchronous)\n" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +0100219 " async_private_error=%%d Async callback error injection (default=0=none,\n" \
Gilles Peskinec9125722018-04-26 07:15:40 +0200220 " 1=start, 2=cancel, 3=resume, negative=first time only)"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100221#else
222#define USAGE_SSL_ASYNC ""
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200223#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100224
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200225#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Hanno Beckerd0d01c52018-10-25 16:49:48 +0100226#define USAGE_PSK \
227 " psk=%%s default: \"\" (in hex, without 0x)\n" \
228 " psk_list=%%s default: \"\"\n" \
Hanno Becker5ddc0632018-10-26 10:04:13 +0100229 " A list of (PSK identity, PSK value) pairs.\n" \
230 " The PSK values are in hex, without 0x.\n" \
Hanno Beckerd0d01c52018-10-25 16:49:48 +0100231 " id1,psk1[,id2,psk2[,...]]\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200232 " psk_identity=%%s default: \"Client_identity\"\n"
233#else
234#define USAGE_PSK ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000236
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200237#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200238#define USAGE_TICKETS \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +0100239 " tickets=%%d default: 1 (enabled)\n" \
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200240 " ticket_timeout=%%d default: 86400 (one day)\n"
Paul Bakkera503a632013-08-14 13:48:06 +0200241#else
242#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200244
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100246#define USAGE_CACHE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100247 " cache_max=%%d default: cache default (50)\n" \
248 " cache_timeout=%%d default: cache default (1d)\n"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100249#else
250#define USAGE_CACHE ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251#endif /* MBEDTLS_SSL_CACHE_C */
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100252
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200253#if defined(SNI_OPTION)
Ron Eldor24eec792019-04-04 15:02:01 +0300254#if defined(MBEDTLS_X509_CRL_PARSE_C)
255#define SNI_CRL ",crl"
256#else
257#define SNI_CRL ""
258#endif
259
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100260#define USAGE_SNI \
Ron Eldor24eec792019-04-04 15:02:01 +0300261 " sni=%%s name1,cert1,key1,ca1"SNI_CRL",auth1[,...]\n" \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200262 " default: disabled\n"
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100263#else
264#define USAGE_SNI ""
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200265#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100266
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200267#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200268#define USAGE_MAX_FRAG_LEN \
269 " max_frag_len=%%d default: 16384 (tls default)\n" \
270 " options: 512, 1024, 2048, 4096\n"
271#else
272#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200273#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200274
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200275#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100276#define USAGE_TRUNC_HMAC \
277 " trunc_hmac=%%d default: library default\n"
278#else
279#define USAGE_TRUNC_HMAC ""
280#endif
281
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200282#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200283#define USAGE_ALPN \
284 " alpn=%%s default: \"\" (disabled)\n" \
285 " example: spdy/1,http/1.1\n"
286#else
287#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200288#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200289
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200290#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200291#define USAGE_COOKIES \
292 " cookies=0/1/-1 default: 1 (enabled)\n" \
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200293 " 0: disabled, -1: library default (broken)\n"
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200294#else
295#define USAGE_COOKIES ""
296#endif
297
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200298#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200299#define USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200300 " anti_replay=0/1 default: (library default: enabled)\n"
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200301#else
302#define USAGE_ANTI_REPLAY ""
303#endif
304
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305#if defined(MBEDTLS_SSL_DTLS_BADMAC_LIMIT)
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200306#define USAGE_BADMAC_LIMIT \
307 " badmac_limit=%%d default: (library default: disabled)\n"
308#else
309#define USAGE_BADMAC_LIMIT ""
310#endif
311
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200312#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200313#define USAGE_DTLS \
314 " dtls=%%d default: 0 (TLS)\n" \
315 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200316 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Beckere7675d02018-08-14 13:28:56 +0100317 " mtu=%%d default: (library default: unlimited)\n" \
318 " dgram_packing=%%d default: 1 (allowed)\n" \
319 " allow or forbid packing of multiple\n" \
320 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200321#else
322#define USAGE_DTLS ""
323#endif
324
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200325#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200326#define USAGE_EMS \
327 " extended_ms=0/1 default: (library default: on)\n"
328#else
329#define USAGE_EMS ""
330#endif
331
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200332#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100333#define USAGE_ETM \
334 " etm=0/1 default: (library default: on)\n"
335#else
336#define USAGE_ETM ""
337#endif
338
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200339#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100340#define USAGE_RENEGO \
341 " renegotiation=%%d default: 0 (disabled)\n" \
342 " renegotiate=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +0100343 " renego_delay=%%d default: -2 (library default)\n" \
Andres AG692ad842017-01-19 16:30:57 +0000344 " renego_period=%%d default: (2^64 - 1 for TLS, 2^48 - 1 for DTLS)\n"
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100345#else
346#define USAGE_RENEGO ""
347#endif
348
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200349#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
350#define USAGE_ECJPAKE \
351 " ecjpake_pw=%%s default: none (disabled)\n"
352#else
353#define USAGE_ECJPAKE ""
354#endif
355
Hanno Beckere6706e62017-05-15 16:05:15 +0100356#if defined(MBEDTLS_ECP_C)
357#define USAGE_CURVES \
358 " curves=a,b,c,d default: \"default\" (library default)\n" \
359 " example: \"secp521r1,brainpoolP512r1\"\n" \
360 " - use \"none\" for empty list\n" \
361 " - see mbedtls_ecp_curve_list()\n" \
362 " for acceptable curve names\n"
363#else
364#define USAGE_CURVES ""
365#endif
366
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000367#define USAGE \
368 "\n usage: ssl_server2 param=<>...\n" \
369 "\n acceptable parameters:\n" \
Ron Eldor71f68c42017-09-26 11:29:11 +0300370 " server_addr=%%s default: (all interfaces)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000371 " server_port=%%d default: 4433\n" \
372 " debug_level=%%d default: 0 (disabled)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200373 " buffer_size=%%d default: 200 \n" \
374 " (minimum: 1, max: 16385)\n" \
375 " response_size=%%d default: about 152 (basic response)\n" \
376 " (minimum: 0, max: 16384)\n" \
377 " increases buffer_size if bigger\n"\
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100378 " nbio=%%d default: 0 (blocking I/O)\n" \
379 " options: 1 (non-blocking), 2 (added delays)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100380 " event=%%d default: 0 (loop)\n" \
381 " options: 1 (level-triggered, implies nbio=1),\n" \
Manuel Pégourié-Gonnard22311ae2015-09-09 11:22:58 +0200382 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100383 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200384 USAGE_DTLS \
385 USAGE_COOKIES \
386 USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200387 USAGE_BADMAC_LIMIT \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200388 "\n" \
Manuel Pégourié-Gonnardee6139c2015-05-07 10:18:26 +0100389 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100390 " options: none, optional, required\n" \
Janos Follath4817e272017-04-10 13:44:33 +0100391 " cert_req_ca_list=%%d default: 1 (send ca list)\n" \
392 " options: 1 (send ca list), 0 (don't send)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000393 USAGE_IO \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100394 USAGE_SSL_ASYNC \
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100395 USAGE_SNI \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100396 "\n" \
397 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200398 USAGE_ECJPAKE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100399 "\n" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100400 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100401 USAGE_RENEGO \
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200402 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200403 "\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100404 USAGE_TICKETS \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100405 USAGE_CACHE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100406 USAGE_MAX_FRAG_LEN \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100407 USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200408 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200409 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100410 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100411 USAGE_CURVES \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100412 "\n" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100413 " arc4=%%d default: (library default: 0)\n" \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200414 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200415 " min_version=%%s default: (library default: tls1)\n" \
416 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakkerc1516be2013-06-29 16:01:32 +0200417 " force_version=%%s default: \"\" (none)\n" \
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +0100418 " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200419 "\n" \
420 " version_suites=a,b,c,d per-version ciphersuites\n" \
421 " in order from ssl3 to tls1_2\n" \
422 " default: all enabled\n" \
423 " force_ciphersuite=<name> default: all enabled\n" \
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100424 " query_config=<name> return 0 if the specified\n" \
425 " configuration macro is defined and 1\n" \
426 " otherwise. The expansion of the macro\n" \
427 " is printed if it is defined\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000428 " acceptable ciphersuite names:\n"
429
Andres AG692ad842017-01-19 16:30:57 +0000430
Hanno Becker8651a432017-06-09 16:13:22 +0100431#define ALPN_LIST_SIZE 10
432#define CURVE_LIST_SIZE 20
433
Andres AG692ad842017-01-19 16:30:57 +0000434#define PUT_UINT64_BE(out_be,in_le,i) \
435{ \
436 (out_be)[(i) + 0] = (unsigned char)( ( (in_le) >> 56 ) & 0xFF ); \
437 (out_be)[(i) + 1] = (unsigned char)( ( (in_le) >> 48 ) & 0xFF ); \
438 (out_be)[(i) + 2] = (unsigned char)( ( (in_le) >> 40 ) & 0xFF ); \
439 (out_be)[(i) + 3] = (unsigned char)( ( (in_le) >> 32 ) & 0xFF ); \
440 (out_be)[(i) + 4] = (unsigned char)( ( (in_le) >> 24 ) & 0xFF ); \
441 (out_be)[(i) + 5] = (unsigned char)( ( (in_le) >> 16 ) & 0xFF ); \
442 (out_be)[(i) + 6] = (unsigned char)( ( (in_le) >> 8 ) & 0xFF ); \
443 (out_be)[(i) + 7] = (unsigned char)( ( (in_le) >> 0 ) & 0xFF ); \
444}
445
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100446#if defined(MBEDTLS_CHECK_PARAMS)
447#include "mbedtls/platform_util.h"
448void mbedtls_param_failed( const char *failure_condition,
449 const char *file,
450 int line )
Simon Butcher63cb97e2018-12-06 17:43:31 +0000451{
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +0100452 mbedtls_printf( "%s:%i: Input param failed - %s\n",
453 file, line, failure_condition );
Simon Butcher63cb97e2018-12-06 17:43:31 +0000454 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
455}
456#endif
457
Rich Evans85b05ec2015-02-12 11:37:29 +0000458/*
459 * global options
460 */
461struct options
462{
463 const char *server_addr; /* address on which the ssl service runs */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200464 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000465 int debug_level; /* level of debugging */
466 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100467 int event; /* loop or event-driven IO? level or edge triggered? */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200468 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200469 int response_size; /* pad response with header to requested size */
470 uint16_t buffer_size; /* IO buffer size */
Rich Evans85b05ec2015-02-12 11:37:29 +0000471 const char *ca_file; /* the file with the CA certificate(s) */
472 const char *ca_path; /* the path with the CA certificate(s) reside */
473 const char *crt_file; /* the file with the server certificate */
474 const char *key_file; /* the file with the server key */
475 const char *crt_file2; /* the file with the 2nd server certificate */
476 const char *key_file2; /* the file with the 2nd server key */
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100477 const char *async_operations; /* supported SSL asynchronous operations */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100478 int async_private_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
479 int async_private_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
480 int async_private_error; /* inject error in async private callback */
Rich Evans85b05ec2015-02-12 11:37:29 +0000481 const char *psk; /* the pre-shared key */
482 const char *psk_identity; /* the pre-shared key identity */
483 char *psk_list; /* list of PSK id/key pairs for callback */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200484 const char *ecjpake_pw; /* the EC J-PAKE password */
Rich Evans85b05ec2015-02-12 11:37:29 +0000485 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
486 const char *version_suites; /* per-version ciphersuites */
487 int renegotiation; /* enable / disable renegotiation */
488 int allow_legacy; /* allow legacy renegotiation */
489 int renegotiate; /* attempt renegotiation? */
490 int renego_delay; /* delay before enforcing renegotiation */
Andres AG692ad842017-01-19 16:30:57 +0000491 uint64_t renego_period; /* period for automatic renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000492 int exchanges; /* number of data exchanges */
493 int min_version; /* minimum protocol version accepted */
494 int max_version; /* maximum protocol version accepted */
495 int arc4; /* flag for arc4 suites support */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200496 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000497 int auth_mode; /* verify mode for connection */
Janos Follath4817e272017-04-10 13:44:33 +0100498 int cert_req_ca_list; /* should we send the CA list? */
Rich Evans85b05ec2015-02-12 11:37:29 +0000499 unsigned char mfl_code; /* code for maximum fragment length */
500 int trunc_hmac; /* accept truncated hmac? */
501 int tickets; /* enable / disable session tickets */
502 int ticket_timeout; /* session ticket lifetime */
503 int cache_max; /* max number of session cache entries */
504 int cache_timeout; /* expiration delay of session cache entries */
505 char *sni; /* string describing sni information */
Hanno Beckere6706e62017-05-15 16:05:15 +0100506 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000507 const char *alpn_string; /* ALPN supported protocols */
508 const char *dhm_file; /* the file with the DH parameters */
509 int extended_ms; /* allow negotiation of extended MS? */
510 int etm; /* allow negotiation of encrypt-then-MAC? */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000511 int transport; /* TLS or DTLS? */
512 int cookies; /* Use cookies for DTLS? -1 to break them */
513 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
514 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
515 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200516 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Hanno Beckere7675d02018-08-14 13:28:56 +0100517 int dgram_packing; /* allow/forbid datagram packing */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000518 int badmac_limit; /* Limit of records with bad MAC */
Rich Evans85b05ec2015-02-12 11:37:29 +0000519} opt;
520
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +0100521int query_config( const char *config );
522
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200523static void my_debug( void *ctx, int level,
524 const char *file, int line,
525 const char *str )
Rich Evans85b05ec2015-02-12 11:37:29 +0000526{
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200527 const char *p, *basename;
Rich Evans85b05ec2015-02-12 11:37:29 +0000528
Manuel Pégourié-Gonnard052f2882015-07-01 11:50:23 +0200529 /* Extract basename from file */
530 for( p = basename = file; *p != '\0'; p++ )
531 if( *p == '/' || *p == '\\' )
532 basename = p + 1;
533
534 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s", basename, line, level, str );
Rich Evans85b05ec2015-02-12 11:37:29 +0000535 fflush( (FILE *) ctx );
536}
537
538/*
539 * Test recv/send functions that make sure each try returns
540 * WANT_READ/WANT_WRITE at least once before sucesseding
541 */
542static int my_recv( void *ctx, unsigned char *buf, size_t len )
543{
544 static int first_try = 1;
545 int ret;
546
547 if( first_try )
548 {
549 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100550 return( MBEDTLS_ERR_SSL_WANT_READ );
Rich Evans85b05ec2015-02-12 11:37:29 +0000551 }
552
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553 ret = mbedtls_net_recv( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100554 if( ret != MBEDTLS_ERR_SSL_WANT_READ )
Rich Evans85b05ec2015-02-12 11:37:29 +0000555 first_try = 1; /* Next call will be a new operation */
556 return( ret );
557}
558
559static int my_send( void *ctx, const unsigned char *buf, size_t len )
560{
561 static int first_try = 1;
562 int ret;
563
564 if( first_try )
565 {
566 first_try = 0;
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100567 return( MBEDTLS_ERR_SSL_WANT_WRITE );
Rich Evans85b05ec2015-02-12 11:37:29 +0000568 }
569
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200570 ret = mbedtls_net_send( ctx, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100571 if( ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Rich Evans85b05ec2015-02-12 11:37:29 +0000572 first_try = 1; /* Next call will be a new operation */
573 return( ret );
574}
575
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200576/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200577 * Return authmode from string, or -1 on error
578 */
579static int get_auth_mode( const char *s )
580{
581 if( strcmp( s, "none" ) == 0 )
582 return( MBEDTLS_SSL_VERIFY_NONE );
583 if( strcmp( s, "optional" ) == 0 )
584 return( MBEDTLS_SSL_VERIFY_OPTIONAL );
585 if( strcmp( s, "required" ) == 0 )
586 return( MBEDTLS_SSL_VERIFY_REQUIRED );
587
588 return( -1 );
589}
590
591/*
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200592 * Used by sni_parse and psk_parse to handle coma-separated lists
593 */
594#define GET_ITEM( dst ) \
Hanno Beckerd6028a12018-10-15 12:01:35 +0100595 do \
596 { \
597 (dst) = p; \
598 while( *p != ',' ) \
599 if( ++p > end ) \
600 goto error; \
601 *p++ = '\0'; \
602 } while( 0 )
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200603
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200604#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100605typedef struct _sni_entry sni_entry;
606
607struct _sni_entry {
608 const char *name;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200609 mbedtls_x509_crt *cert;
610 mbedtls_pk_context *key;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200611 mbedtls_x509_crt* ca;
612 mbedtls_x509_crl* crl;
613 int authmode;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100614 sni_entry *next;
615};
616
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100617void sni_free( sni_entry *head )
618{
619 sni_entry *cur = head, *next;
620
621 while( cur != NULL )
622 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200623 mbedtls_x509_crt_free( cur->cert );
624 mbedtls_free( cur->cert );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100625
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200626 mbedtls_pk_free( cur->key );
627 mbedtls_free( cur->key );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100628
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200629 mbedtls_x509_crt_free( cur->ca );
630 mbedtls_free( cur->ca );
Ron Eldor24eec792019-04-04 15:02:01 +0300631#if defined(MBEDTLS_X509_CRL_PARSE_C)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200632 mbedtls_x509_crl_free( cur->crl );
633 mbedtls_free( cur->crl );
Ron Eldor24eec792019-04-04 15:02:01 +0300634#endif
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100635 next = cur->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200636 mbedtls_free( cur );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100637 cur = next;
638 }
639}
640
641/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200642 * Parse a string of sextuples name1,crt1,key1,ca1,crl1,auth1[,...]
643 * into a usable sni_entry list. For ca1, crl1, auth1, the special value
644 * '-' means unset. If ca1 is unset, then crl1 is ignored too.
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000645 *
646 * Modifies the input string! This is not production quality!
647 */
648sni_entry *sni_parse( char *sni_string )
649{
650 sni_entry *cur = NULL, *new = NULL;
651 char *p = sni_string;
652 char *end = p;
Ron Eldor24eec792019-04-04 15:02:01 +0300653 char *crt_file, *key_file, *ca_file, *auth_str;
654#if defined(MBEDTLS_X509_CRL_PARSE_C)
655 char *crl_file;
656#endif
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000657
658 while( *end != '\0' )
659 ++end;
660 *end = ',';
661
662 while( p <= end )
663 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200664 if( ( new = mbedtls_calloc( 1, sizeof( sni_entry ) ) ) == NULL )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000665 {
666 sni_free( cur );
667 return( NULL );
668 }
669
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200670 GET_ITEM( new->name );
671 GET_ITEM( crt_file );
672 GET_ITEM( key_file );
673 GET_ITEM( ca_file );
Ron Eldor24eec792019-04-04 15:02:01 +0300674#if defined(MBEDTLS_X509_CRL_PARSE_C)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200675 GET_ITEM( crl_file );
Ron Eldor24eec792019-04-04 15:02:01 +0300676#endif
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200677 GET_ITEM( auth_str );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000678
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200679 if( ( new->cert = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL ||
680 ( new->key = mbedtls_calloc( 1, sizeof( mbedtls_pk_context ) ) ) == NULL )
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200681 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000682
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200683 mbedtls_x509_crt_init( new->cert );
684 mbedtls_pk_init( new->key );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000685
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200686 if( mbedtls_x509_crt_parse_file( new->cert, crt_file ) != 0 ||
687 mbedtls_pk_parse_keyfile( new->key, key_file, "" ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000688 goto error;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200689
690 if( strcmp( ca_file, "-" ) != 0 )
691 {
692 if( ( new->ca = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL )
693 goto error;
694
695 mbedtls_x509_crt_init( new->ca );
696
697 if( mbedtls_x509_crt_parse_file( new->ca, ca_file ) != 0 )
698 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000699 }
700
Ron Eldor24eec792019-04-04 15:02:01 +0300701#if defined(MBEDTLS_X509_CRL_PARSE_C)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200702 if( strcmp( crl_file, "-" ) != 0 )
703 {
704 if( ( new->crl = mbedtls_calloc( 1, sizeof( mbedtls_x509_crl ) ) ) == NULL )
705 goto error;
706
707 mbedtls_x509_crl_init( new->crl );
708
709 if( mbedtls_x509_crl_parse_file( new->crl, crl_file ) != 0 )
710 goto error;
711 }
Ron Eldor24eec792019-04-04 15:02:01 +0300712#endif
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200713
714 if( strcmp( auth_str, "-" ) != 0 )
715 {
716 if( ( new->authmode = get_auth_mode( auth_str ) ) < 0 )
717 goto error;
718 }
719 else
720 new->authmode = DFL_AUTH_MODE;
721
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000722 new->next = cur;
723 cur = new;
724 }
725
726 return( cur );
727
728error:
729 sni_free( new );
730 sni_free( cur );
731 return( NULL );
732}
733
734/*
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100735 * SNI callback.
736 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200737int sni_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100738 const unsigned char *name, size_t name_len )
739{
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200740 const sni_entry *cur = (const sni_entry *) p_info;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100741
742 while( cur != NULL )
743 {
744 if( name_len == strlen( cur->name ) &&
745 memcmp( name, cur->name, name_len ) == 0 )
746 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200747 if( cur->ca != NULL )
748 mbedtls_ssl_set_hs_ca_chain( ssl, cur->ca, cur->crl );
749
750 if( cur->authmode != DFL_AUTH_MODE )
751 mbedtls_ssl_set_hs_authmode( ssl, cur->authmode );
752
Manuel Pégourié-Gonnard1af6c852015-05-10 23:10:37 +0200753 return( mbedtls_ssl_set_hs_own_cert( ssl, cur->cert, cur->key ) );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100754 }
755
756 cur = cur->next;
757 }
758
759 return( -1 );
760}
761
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200762#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100763
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200764#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200765
Hanno Beckerd6028a12018-10-15 12:01:35 +0100766#define HEX2NUM( c ) \
767 do \
768 { \
769 if( (c) >= '0' && (c) <= '9' ) \
770 (c) -= '0'; \
771 else if( (c) >= 'a' && (c) <= 'f' ) \
772 (c) -= 'a' - 10; \
773 else if( (c) >= 'A' && (c) <= 'F' ) \
774 (c) -= 'A' - 10; \
775 else \
776 return( -1 ); \
777 } while( 0 )
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200778
779/*
780 * Convert a hex string to bytes.
781 * Return 0 on success, -1 on error.
782 */
783int unhexify( unsigned char *output, const char *input, size_t *olen )
784{
785 unsigned char c;
786 size_t j;
787
788 *olen = strlen( input );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200789 if( *olen % 2 != 0 || *olen / 2 > MBEDTLS_PSK_MAX_LEN )
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200790 return( -1 );
791 *olen /= 2;
792
793 for( j = 0; j < *olen * 2; j += 2 )
794 {
795 c = input[j];
796 HEX2NUM( c );
797 output[ j / 2 ] = c << 4;
798
799 c = input[j + 1];
800 HEX2NUM( c );
801 output[ j / 2 ] |= c;
802 }
803
804 return( 0 );
805}
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200806
807typedef struct _psk_entry psk_entry;
808
809struct _psk_entry
810{
811 const char *name;
812 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200813 unsigned char key[MBEDTLS_PSK_MAX_LEN];
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200814 psk_entry *next;
815};
816
817/*
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000818 * Free a list of psk_entry's
819 */
820void psk_free( psk_entry *head )
821{
822 psk_entry *next;
823
824 while( head != NULL )
825 {
826 next = head->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200827 mbedtls_free( head );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000828 head = next;
829 }
830}
831
832/*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200833 * Parse a string of pairs name1,key1[,name2,key2[,...]]
834 * into a usable psk_entry list.
835 *
836 * Modifies the input string! This is not production quality!
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200837 */
838psk_entry *psk_parse( char *psk_string )
839{
840 psk_entry *cur = NULL, *new = NULL;
841 char *p = psk_string;
842 char *end = p;
843 char *key_hex;
844
845 while( *end != '\0' )
846 ++end;
847 *end = ',';
848
849 while( p <= end )
850 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200851 if( ( new = mbedtls_calloc( 1, sizeof( psk_entry ) ) ) == NULL )
Manuel Pégourié-Gonnardb1990952015-02-18 09:32:06 +0000852 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200853
854 memset( new, 0, sizeof( psk_entry ) );
855
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200856 GET_ITEM( new->name );
857 GET_ITEM( key_hex );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200858
859 if( unhexify( new->key, key_hex, &new->key_len ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000860 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200861
862 new->next = cur;
863 cur = new;
864 }
865
866 return( cur );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200867
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000868error:
869 psk_free( new );
870 psk_free( cur );
871 return( 0 );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200872}
873
874/*
875 * PSK callback
876 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200877int psk_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200878 const unsigned char *name, size_t name_len )
879{
880 psk_entry *cur = (psk_entry *) p_info;
881
882 while( cur != NULL )
883 {
884 if( name_len == strlen( cur->name ) &&
885 memcmp( name, cur->name, name_len ) == 0 )
886 {
Manuel Pégourié-Gonnard4b682962015-05-07 15:59:54 +0100887 return( mbedtls_ssl_set_hs_psk( ssl, cur->key, cur->key_len ) );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200888 }
889
890 cur = cur->next;
891 }
892
893 return( -1 );
894}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200895#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200896
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200897static mbedtls_net_context listen_fd, client_fd;
Paul Bakkerbc3e54c2014-08-18 14:36:17 +0200898
899/* Interruption handler to ensure clean exit (for valgrind testing) */
900#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200901static int received_sigterm = 0;
902void term_handler( int sig )
903{
904 ((void) sig);
905 received_sigterm = 1;
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200906 mbedtls_net_free( &listen_fd ); /* causes mbedtls_net_accept() to abort */
907 mbedtls_net_free( &client_fd ); /* causes net_read() to abort */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200908}
Paul Bakkerc1283d32014-08-18 11:05:51 +0200909#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200910
Gilles Peskine682df092017-05-11 19:01:11 +0200911#if defined(MBEDTLS_X509_CRT_PARSE_C)
912static int ssl_sig_hashes_for_test[] = {
913#if defined(MBEDTLS_SHA512_C)
914 MBEDTLS_MD_SHA512,
915 MBEDTLS_MD_SHA384,
916#endif
917#if defined(MBEDTLS_SHA256_C)
918 MBEDTLS_MD_SHA256,
919 MBEDTLS_MD_SHA224,
920#endif
921#if defined(MBEDTLS_SHA1_C)
922 /* Allow SHA-1 as we use it extensively in tests. */
923 MBEDTLS_MD_SHA1,
924#endif
925 MBEDTLS_MD_NONE
926};
927#endif /* MBEDTLS_X509_CRT_PARSE_C */
928
Gilles Peskinea36ac4f2018-04-26 08:05:02 +0200929/** Return true if \p ret is a status code indicating that there is an
930 * operation in progress on an SSL connection, and false if it indicates
931 * success or a fatal error.
932 *
933 * The possible operations in progress are:
934 *
935 * - A read, when the SSL input buffer does not contain a full message.
936 * - A write, when the SSL output buffer contains some data that has not
937 * been sent over the network yet.
938 * - An asynchronous callback that has not completed yet. */
939static int mbedtls_status_is_ssl_in_progress( int ret )
940{
941 return( ret == MBEDTLS_ERR_SSL_WANT_READ ||
942 ret == MBEDTLS_ERR_SSL_WANT_WRITE ||
943 ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
944}
945
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200946#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100947typedef struct
948{
Gilles Peskine44817442018-06-13 18:09:28 +0200949 mbedtls_x509_crt *cert; /*!< Certificate corresponding to the key */
950 mbedtls_pk_context *pk; /*!< Private key */
951 unsigned delay; /*!< Number of resume steps to go through */
952 unsigned pk_owned : 1; /*!< Whether to free the pk object on exit */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100953} ssl_async_key_slot_t;
954
955typedef enum {
Gilles Peskinead28bf02018-04-26 00:19:16 +0200956 SSL_ASYNC_INJECT_ERROR_NONE = 0, /*!< Let the callbacks succeed */
957 SSL_ASYNC_INJECT_ERROR_START, /*!< Inject error during start */
958 SSL_ASYNC_INJECT_ERROR_CANCEL, /*!< Close the connection after async start */
959 SSL_ASYNC_INJECT_ERROR_RESUME, /*!< Inject error during resume */
Gilles Peskinec9125722018-04-26 07:15:40 +0200960#define SSL_ASYNC_INJECT_ERROR_MAX SSL_ASYNC_INJECT_ERROR_RESUME
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100961} ssl_async_inject_error_t;
962
963typedef struct
964{
Gilles Peskinee2479892018-06-13 18:06:51 +0200965 ssl_async_key_slot_t slots[4]; /* key, key2, sni1, sni2 */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100966 size_t slots_used;
967 ssl_async_inject_error_t inject_error;
968 int (*f_rng)(void *, unsigned char *, size_t);
969 void *p_rng;
970} ssl_async_key_context_t;
971
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200972int ssl_async_set_key( ssl_async_key_context_t *ctx,
Gilles Peskine44817442018-06-13 18:09:28 +0200973 mbedtls_x509_crt *cert,
974 mbedtls_pk_context *pk,
975 int pk_take_ownership,
976 unsigned delay )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100977{
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200978 if( ctx->slots_used >= sizeof( ctx->slots ) / sizeof( *ctx->slots ) )
979 return( -1 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100980 ctx->slots[ctx->slots_used].cert = cert;
981 ctx->slots[ctx->slots_used].pk = pk;
982 ctx->slots[ctx->slots_used].delay = delay;
Gilles Peskine44817442018-06-13 18:09:28 +0200983 ctx->slots[ctx->slots_used].pk_owned = pk_take_ownership;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100984 ++ctx->slots_used;
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200985 return( 0 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100986}
987
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100988#define SSL_ASYNC_INPUT_MAX_SIZE 512
Gilles Peskined3268832018-04-26 06:23:59 +0200989
990typedef enum
991{
992 ASYNC_OP_SIGN,
993 ASYNC_OP_DECRYPT,
994} ssl_async_operation_type_t;
995/* Note that the enum above and the array below need to be kept in sync!
996 * `ssl_async_operation_names[op]` is the name of op for each value `op`
997 * of type `ssl_async_operation_type_t`. */
998static const char *const ssl_async_operation_names[] =
999{
1000 "sign",
1001 "decrypt",
1002};
1003
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001004typedef struct
1005{
Gilles Peskine6331d782018-04-26 13:27:43 +02001006 unsigned slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001007 ssl_async_operation_type_t operation_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001008 mbedtls_md_type_t md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001009 unsigned char input[SSL_ASYNC_INPUT_MAX_SIZE];
1010 size_t input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001011 unsigned remaining_delay;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001012} ssl_async_operation_context_t;
1013
Gilles Peskine8f97af72018-04-26 11:46:10 +02001014static int ssl_async_start( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001015 mbedtls_x509_crt *cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001016 ssl_async_operation_type_t op_type,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001017 mbedtls_md_type_t md_alg,
1018 const unsigned char *input,
1019 size_t input_len )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001020{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001021 ssl_async_key_context_t *config_data =
1022 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskine6331d782018-04-26 13:27:43 +02001023 unsigned slot;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001024 ssl_async_operation_context_t *ctx = NULL;
Gilles Peskined3268832018-04-26 06:23:59 +02001025 const char *op_name = ssl_async_operation_names[op_type];
Gilles Peskinef1127252018-04-24 13:05:39 +02001026
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001027 {
1028 char dn[100];
Gilles Peskined5d983e2018-06-15 14:05:10 +02001029 if( mbedtls_x509_dn_gets( dn, sizeof( dn ), &cert->subject ) > 0 )
1030 mbedtls_printf( "Async %s callback: looking for DN=%s\n",
1031 op_name, dn );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001032 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001033
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001034 /* Look for a private key that matches the public key in cert.
1035 * Since this test code has the private key inside Mbed TLS,
1036 * we call mbedtls_pk_check_pair to match a private key with the
1037 * public key. */
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001038 for( slot = 0; slot < config_data->slots_used; slot++ )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001039 {
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001040 if( mbedtls_pk_check_pair( &cert->pk,
1041 config_data->slots[slot].pk ) == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001042 break;
1043 }
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001044 if( slot == config_data->slots_used )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001045 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001046 mbedtls_printf( "Async %s callback: no key matches this certificate.\n",
1047 op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001048 return( MBEDTLS_ERR_SSL_HW_ACCEL_FALLTHROUGH );
1049 }
Gilles Peskine6331d782018-04-26 13:27:43 +02001050 mbedtls_printf( "Async %s callback: using key slot %u, delay=%u.\n",
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001051 op_name, slot, config_data->slots[slot].delay );
Gilles Peskinef1127252018-04-24 13:05:39 +02001052
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001053 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_START )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001054 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001055 mbedtls_printf( "Async %s callback: injected error\n", op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001056 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1057 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001058
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001059 if( input_len > SSL_ASYNC_INPUT_MAX_SIZE )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001060 return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
Gilles Peskinef1127252018-04-24 13:05:39 +02001061
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001062 ctx = mbedtls_calloc( 1, sizeof( *ctx ) );
1063 if( ctx == NULL )
1064 return( MBEDTLS_ERR_SSL_ALLOC_FAILED );
1065 ctx->slot = slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001066 ctx->operation_type = op_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001067 ctx->md_alg = md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001068 memcpy( ctx->input, input, input_len );
1069 ctx->input_len = input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001070 ctx->remaining_delay = config_data->slots[slot].delay;
Gilles Peskinea668c602018-04-30 11:54:39 +02001071 mbedtls_ssl_set_async_operation_data( ssl, ctx );
Gilles Peskinef1127252018-04-24 13:05:39 +02001072
Gilles Peskineceb541b2018-04-26 06:30:45 +02001073 if( ctx->remaining_delay == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001074 return( 0 );
1075 else
1076 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1077}
1078
Gilles Peskine8f97af72018-04-26 11:46:10 +02001079static int ssl_async_sign( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001080 mbedtls_x509_crt *cert,
1081 mbedtls_md_type_t md_alg,
1082 const unsigned char *hash,
1083 size_t hash_len )
1084{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001085 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001086 ASYNC_OP_SIGN, md_alg,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001087 hash, hash_len ) );
1088}
1089
Gilles Peskine8f97af72018-04-26 11:46:10 +02001090static int ssl_async_decrypt( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001091 mbedtls_x509_crt *cert,
1092 const unsigned char *input,
1093 size_t input_len )
1094{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001095 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001096 ASYNC_OP_DECRYPT, MBEDTLS_MD_NONE,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001097 input, input_len ) );
1098}
1099
Gilles Peskine8f97af72018-04-26 11:46:10 +02001100static int ssl_async_resume( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001101 unsigned char *output,
1102 size_t *output_len,
1103 size_t output_size )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001104{
Gilles Peskinea668c602018-04-30 11:54:39 +02001105 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine8f97af72018-04-26 11:46:10 +02001106 ssl_async_key_context_t *config_data =
1107 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001108 ssl_async_key_slot_t *key_slot = &config_data->slots[ctx->slot];
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001109 int ret;
Gilles Peskinef5a99962018-04-30 16:37:23 +02001110 const char *op_name;
Gilles Peskinef1127252018-04-24 13:05:39 +02001111
Gilles Peskineceb541b2018-04-26 06:30:45 +02001112 if( ctx->remaining_delay > 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001113 {
Gilles Peskineceb541b2018-04-26 06:30:45 +02001114 --ctx->remaining_delay;
Gilles Peskine6331d782018-04-26 13:27:43 +02001115 mbedtls_printf( "Async resume (slot %u): call %u more times.\n",
Gilles Peskineceb541b2018-04-26 06:30:45 +02001116 ctx->slot, ctx->remaining_delay );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001117 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1118 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001119
Gilles Peskined3268832018-04-26 06:23:59 +02001120 switch( ctx->operation_type )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001121 {
Gilles Peskined3268832018-04-26 06:23:59 +02001122 case ASYNC_OP_DECRYPT:
Gilles Peskined3268832018-04-26 06:23:59 +02001123 ret = mbedtls_pk_decrypt( key_slot->pk,
1124 ctx->input, ctx->input_len,
1125 output, output_len, output_size,
1126 config_data->f_rng, config_data->p_rng );
1127 break;
1128 case ASYNC_OP_SIGN:
Gilles Peskined3268832018-04-26 06:23:59 +02001129 ret = mbedtls_pk_sign( key_slot->pk,
1130 ctx->md_alg,
1131 ctx->input, ctx->input_len,
1132 output, output_len,
1133 config_data->f_rng, config_data->p_rng );
1134 break;
1135 default:
Gilles Peskine6331d782018-04-26 13:27:43 +02001136 mbedtls_printf( "Async resume (slot %u): unknown operation type %ld. This shouldn't happen.\n",
Gilles Peskined3268832018-04-26 06:23:59 +02001137 ctx->slot, (long) ctx->operation_type );
Gilles Peskine44817442018-06-13 18:09:28 +02001138 mbedtls_free( ctx );
Gilles Peskined3268832018-04-26 06:23:59 +02001139 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1140 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001141 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001142
Gilles Peskinef5a99962018-04-30 16:37:23 +02001143 op_name = ssl_async_operation_names[ctx->operation_type];
1144
Gilles Peskinec9125722018-04-26 07:15:40 +02001145 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_RESUME )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001146 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001147 mbedtls_printf( "Async resume callback: %s done but injected error\n",
1148 op_name );
Gilles Peskine2636fad2018-06-12 14:17:39 +02001149 mbedtls_free( ctx );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001150 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1151 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001152
Gilles Peskine6331d782018-04-26 13:27:43 +02001153 mbedtls_printf( "Async resume (slot %u): %s done, status=%d.\n",
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001154 ctx->slot, op_name, ret );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001155 mbedtls_free( ctx );
1156 return( ret );
1157}
1158
Gilles Peskine8f97af72018-04-26 11:46:10 +02001159static void ssl_async_cancel( mbedtls_ssl_context *ssl )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001160{
Gilles Peskinea668c602018-04-30 11:54:39 +02001161 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001162 mbedtls_printf( "Async cancel callback.\n" );
1163 mbedtls_free( ctx );
1164}
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001165#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001166
Hanno Becker16970d22017-10-10 15:56:37 +01001167/*
1168 * Wait for an event from the underlying transport or the timer
1169 * (Used in event-driven IO mode).
1170 */
1171#if !defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001172int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001173 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +01001174#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001175int idle( mbedtls_net_context *fd,
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001176 mbedtls_timing_delay_context *timer,
1177 int idle_reason )
Hanno Becker16970d22017-10-10 15:56:37 +01001178#endif
Hanno Becker9b2b66e2018-03-15 12:21:15 +00001179{
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001180 int ret;
Hanno Becker16970d22017-10-10 15:56:37 +01001181 int poll_type = 0;
1182
1183 if( idle_reason == MBEDTLS_ERR_SSL_WANT_WRITE )
1184 poll_type = MBEDTLS_NET_POLL_WRITE;
1185 else if( idle_reason == MBEDTLS_ERR_SSL_WANT_READ )
1186 poll_type = MBEDTLS_NET_POLL_READ;
1187#if !defined(MBEDTLS_TIMING_C)
1188 else
Hanno Beckeref527962018-03-15 15:49:24 +00001189 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +01001190#endif
1191
1192 while( 1 )
1193 {
Hanno Becker197a91c2017-10-31 10:58:53 +00001194 /* Check if timer has expired */
Hanno Becker16970d22017-10-10 15:56:37 +01001195#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00001196 if( timer != NULL &&
1197 mbedtls_timing_get_delay( timer ) == 2 )
Hanno Becker16970d22017-10-10 15:56:37 +01001198 {
Hanno Becker16970d22017-10-10 15:56:37 +01001199 break;
1200 }
Hanno Becker197a91c2017-10-31 10:58:53 +00001201#endif /* MBEDTLS_TIMING_C */
Hanno Becker16970d22017-10-10 15:56:37 +01001202
Hanno Becker197a91c2017-10-31 10:58:53 +00001203 /* Check if underlying transport became available */
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001204 if( poll_type != 0 )
Hanno Becker16970d22017-10-10 15:56:37 +01001205 {
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001206 ret = mbedtls_net_poll( fd, poll_type, 0 );
1207 if( ret < 0 )
1208 return( ret );
1209 if( ret == poll_type )
1210 break;
Hanno Becker16970d22017-10-10 15:56:37 +01001211 }
1212 }
Hanno Beckeradfa64f2018-03-15 11:35:07 +00001213
1214 return( 0 );
Hanno Becker16970d22017-10-10 15:56:37 +01001215}
1216
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001217int main( int argc, char *argv[] )
1218{
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00001219 int ret = 0, len, written, frags, exchanges_left;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001220 int version_suites[4][2];
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001221 unsigned char* buf = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001222#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
1223 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerfbb17802013-04-17 19:10:21 +02001224 size_t psk_len = 0;
Paul Bakker9b7fb6f2014-06-12 23:01:43 +02001225 psk_entry *psk_info = NULL;
Paul Bakkered27a042013-04-18 22:46:23 +02001226#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +02001227 const char *pers = "ssl_server2";
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02001228 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02001229 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001230#if defined(MBEDTLS_SSL_COOKIE_C)
1231 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001232#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001233
Gilles Peskineef86ab22017-05-05 18:59:02 +02001234#if defined(MBEDTLS_X509_CRT_PARSE_C)
1235 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
1236#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001237 mbedtls_entropy_context entropy;
1238 mbedtls_ctr_drbg_context ctr_drbg;
1239 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001240 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001241#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001242 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001243#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001244#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001245 unsigned char renego_period[8] = { 0 };
1246#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001247#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +02001248 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001249 mbedtls_x509_crt cacert;
1250 mbedtls_x509_crt srvcert;
1251 mbedtls_pk_context pkey;
1252 mbedtls_x509_crt srvcert2;
1253 mbedtls_pk_context pkey2;
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02001254 int key_cert_init = 0, key_cert_init2 = 0;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001255#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001256 ssl_async_key_context_t ssl_async_keys;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001257#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001258#endif /* MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001259#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1260 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001261#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001262#if defined(MBEDTLS_SSL_CACHE_C)
1263 mbedtls_ssl_cache_context cache;
Paul Bakker0a597072012-09-25 21:55:46 +00001264#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001265#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1266 mbedtls_ssl_ticket_context ticket_ctx;
1267#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02001268#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001269 sni_entry *sni_info = NULL;
1270#endif
Hanno Beckere6706e62017-05-15 16:05:15 +01001271#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +01001272 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +01001273 const mbedtls_ecp_curve_info * curve_cur;
1274#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001275#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +01001276 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001277#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001278#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Simon Butchercce68be2018-07-23 14:26:09 +01001279 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
Paul Bakker82024bf2013-07-04 11:52:32 +02001280#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001281
1282 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001283 char *p, *q;
1284 const int *list;
1285
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001286#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1287 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
Paul Bakker82024bf2013-07-04 11:52:32 +02001288#endif
1289
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001290 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +02001291 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001292 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001293 mbedtls_net_init( &client_fd );
1294 mbedtls_net_init( &listen_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +02001295 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001296 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +02001297 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001298#if defined(MBEDTLS_X509_CRT_PARSE_C)
1299 mbedtls_x509_crt_init( &cacert );
1300 mbedtls_x509_crt_init( &srvcert );
1301 mbedtls_pk_init( &pkey );
1302 mbedtls_x509_crt_init( &srvcert2 );
1303 mbedtls_pk_init( &pkey2 );
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001304#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
1305 memset( &ssl_async_keys, 0, sizeof( ssl_async_keys ) );
1306#endif
Paul Bakkered27a042013-04-18 22:46:23 +02001307#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001308#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1309 mbedtls_dhm_init( &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001310#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001311#if defined(MBEDTLS_SSL_CACHE_C)
1312 mbedtls_ssl_cache_init( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00001313#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001314#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1315 mbedtls_ssl_ticket_init( &ticket_ctx );
1316#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001317#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +02001318 memset( (void *) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001319#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001320#if defined(MBEDTLS_SSL_COOKIE_C)
1321 mbedtls_ssl_cookie_init( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001322#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001323
Paul Bakkerc1283d32014-08-18 11:05:51 +02001324#if !defined(_WIN32)
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001325 /* Abort cleanly on SIGTERM and SIGINT */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001326 signal( SIGTERM, term_handler );
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001327 signal( SIGINT, term_handler );
Paul Bakkerc1283d32014-08-18 11:05:51 +02001328#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001329
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001330 if( argc == 0 )
1331 {
1332 usage:
1333 if( ret == 0 )
1334 ret = 1;
1335
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001336 mbedtls_printf( USAGE );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001337
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001338 list = mbedtls_ssl_list_ciphersuites();
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001339 while( *list )
1340 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001341 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +02001342 list++;
1343 if( !*list )
1344 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001345 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001346 list++;
1347 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001348 mbedtls_printf("\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001349 goto exit;
1350 }
1351
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001352 opt.buffer_size = DFL_IO_BUF_LEN;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001353 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001354 opt.server_port = DFL_SERVER_PORT;
1355 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker16970d22017-10-10 15:56:37 +01001356 opt.event = DFL_EVENT;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001357 opt.response_size = DFL_RESPONSE_SIZE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001358 opt.nbio = DFL_NBIO;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001359 opt.read_timeout = DFL_READ_TIMEOUT;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001360 opt.ca_file = DFL_CA_FILE;
1361 opt.ca_path = DFL_CA_PATH;
1362 opt.crt_file = DFL_CRT_FILE;
1363 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001364 opt.crt_file2 = DFL_CRT_FILE2;
1365 opt.key_file2 = DFL_KEY_FILE2;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001366 opt.async_operations = DFL_ASYNC_OPERATIONS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001367 opt.async_private_delay1 = DFL_ASYNC_PRIVATE_DELAY1;
1368 opt.async_private_delay2 = DFL_ASYNC_PRIVATE_DELAY2;
1369 opt.async_private_error = DFL_ASYNC_PRIVATE_ERROR;
Paul Bakkerfbb17802013-04-17 19:10:21 +02001370 opt.psk = DFL_PSK;
1371 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001372 opt.psk_list = DFL_PSK_LIST;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001373 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001374 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001375 opt.version_suites = DFL_VERSION_SUITES;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001376 opt.renegotiation = DFL_RENEGOTIATION;
1377 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001378 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001379 opt.renego_delay = DFL_RENEGO_DELAY;
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001380 opt.renego_period = DFL_RENEGO_PERIOD;
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001381 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001382 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001383 opt.max_version = DFL_MAX_VERSION;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001384 opt.arc4 = DFL_ARC4;
Gilles Peskinebc70a182017-05-09 15:59:24 +02001385 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001386 opt.auth_mode = DFL_AUTH_MODE;
Janos Follath4817e272017-04-10 13:44:33 +01001387 opt.cert_req_ca_list = DFL_CERT_REQ_CA_LIST;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001388 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001389 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001390 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001391 opt.ticket_timeout = DFL_TICKET_TIMEOUT;
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001392 opt.cache_max = DFL_CACHE_MAX;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001393 opt.cache_timeout = DFL_CACHE_TIMEOUT;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001394 opt.sni = DFL_SNI;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001395 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +01001396 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001397 opt.dhm_file = DFL_DHM_FILE;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001398 opt.transport = DFL_TRANSPORT;
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001399 opt.cookies = DFL_COOKIES;
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001400 opt.anti_replay = DFL_ANTI_REPLAY;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001401 opt.hs_to_min = DFL_HS_TO_MIN;
1402 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001403 opt.dtls_mtu = DFL_DTLS_MTU;
Hanno Beckere7675d02018-08-14 13:28:56 +01001404 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001405 opt.badmac_limit = DFL_BADMAC_LIMIT;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001406 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001407 opt.etm = DFL_ETM;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001408
1409 for( i = 1; i < argc; i++ )
1410 {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001411 p = argv[i];
1412 if( ( q = strchr( p, '=' ) ) == NULL )
1413 goto usage;
1414 *q++ = '\0';
1415
1416 if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001417 opt.server_port = q;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001418 else if( strcmp( p, "server_addr" ) == 0 )
1419 opt.server_addr = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001420 else if( strcmp( p, "dtls" ) == 0 )
1421 {
1422 int t = atoi( q );
1423 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001424 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001425 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001426 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001427 else
1428 goto usage;
1429 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001430 else if( strcmp( p, "debug_level" ) == 0 )
1431 {
1432 opt.debug_level = atoi( q );
1433 if( opt.debug_level < 0 || opt.debug_level > 65535 )
1434 goto usage;
1435 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001436 else if( strcmp( p, "nbio" ) == 0 )
1437 {
1438 opt.nbio = atoi( q );
1439 if( opt.nbio < 0 || opt.nbio > 2 )
1440 goto usage;
1441 }
Hanno Becker16970d22017-10-10 15:56:37 +01001442 else if( strcmp( p, "event" ) == 0 )
1443 {
1444 opt.event = atoi( q );
1445 if( opt.event < 0 || opt.event > 2 )
1446 goto usage;
1447 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001448 else if( strcmp( p, "read_timeout" ) == 0 )
1449 opt.read_timeout = atoi( q );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001450 else if( strcmp( p, "buffer_size" ) == 0 )
1451 {
1452 opt.buffer_size = atoi( q );
1453 if( opt.buffer_size < 1 || opt.buffer_size > MBEDTLS_SSL_MAX_CONTENT_LEN + 1 )
1454 goto usage;
1455 }
1456 else if( strcmp( p, "response_size" ) == 0 )
1457 {
1458 opt.response_size = atoi( q );
1459 if( opt.response_size < 0 || opt.response_size > MBEDTLS_SSL_MAX_CONTENT_LEN )
1460 goto usage;
1461 if( opt.buffer_size < opt.response_size )
1462 opt.buffer_size = opt.response_size;
1463 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001464 else if( strcmp( p, "ca_file" ) == 0 )
1465 opt.ca_file = q;
1466 else if( strcmp( p, "ca_path" ) == 0 )
1467 opt.ca_path = q;
1468 else if( strcmp( p, "crt_file" ) == 0 )
1469 opt.crt_file = q;
1470 else if( strcmp( p, "key_file" ) == 0 )
1471 opt.key_file = q;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001472 else if( strcmp( p, "crt_file2" ) == 0 )
1473 opt.crt_file2 = q;
1474 else if( strcmp( p, "key_file2" ) == 0 )
1475 opt.key_file2 = q;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001476 else if( strcmp( p, "dhm_file" ) == 0 )
1477 opt.dhm_file = q;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001478#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001479 else if( strcmp( p, "async_operations" ) == 0 )
1480 opt.async_operations = q;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001481 else if( strcmp( p, "async_private_delay1" ) == 0 )
1482 opt.async_private_delay1 = atoi( q );
1483 else if( strcmp( p, "async_private_delay2" ) == 0 )
1484 opt.async_private_delay2 = atoi( q );
1485 else if( strcmp( p, "async_private_error" ) == 0 )
1486 {
1487 int n = atoi( q );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01001488 if( n < -SSL_ASYNC_INJECT_ERROR_MAX ||
1489 n > SSL_ASYNC_INJECT_ERROR_MAX )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001490 {
1491 ret = 2;
1492 goto usage;
1493 }
1494 opt.async_private_error = n;
1495 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001496#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001497 else if( strcmp( p, "psk" ) == 0 )
1498 opt.psk = q;
1499 else if( strcmp( p, "psk_identity" ) == 0 )
1500 opt.psk_identity = q;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001501 else if( strcmp( p, "psk_list" ) == 0 )
1502 opt.psk_list = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001503 else if( strcmp( p, "ecjpake_pw" ) == 0 )
1504 opt.ecjpake_pw = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001505 else if( strcmp( p, "force_ciphersuite" ) == 0 )
1506 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001507 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001508
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +02001509 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001510 {
1511 ret = 2;
1512 goto usage;
1513 }
1514 opt.force_ciphersuite[1] = 0;
1515 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001516 else if( strcmp( p, "curves" ) == 0 )
1517 opt.curves = q;
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001518 else if( strcmp( p, "version_suites" ) == 0 )
1519 opt.version_suites = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001520 else if( strcmp( p, "renegotiation" ) == 0 )
1521 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001522 opt.renegotiation = (atoi( q )) ?
1523 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1524 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001525 }
1526 else if( strcmp( p, "allow_legacy" ) == 0 )
1527 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001528 switch( atoi( q ) )
1529 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001530 case -1:
1531 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1532 break;
1533 case 0:
1534 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1535 break;
1536 case 1:
1537 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1538 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001539 default: goto usage;
1540 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001541 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001542 else if( strcmp( p, "renegotiate" ) == 0 )
1543 {
1544 opt.renegotiate = atoi( q );
1545 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1546 goto usage;
1547 }
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001548 else if( strcmp( p, "renego_delay" ) == 0 )
1549 {
1550 opt.renego_delay = atoi( q );
1551 }
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001552 else if( strcmp( p, "renego_period" ) == 0 )
1553 {
Andres AG0b736db2017-02-08 14:05:57 +00001554#if defined(_MSC_VER)
1555 opt.renego_period = _strtoui64( q, NULL, 10 );
1556#else
1557 if( sscanf( q, "%" SCNu64, &opt.renego_period ) != 1 )
1558 goto usage;
1559#endif /* _MSC_VER */
1560 if( opt.renego_period < 2 )
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001561 goto usage;
1562 }
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001563 else if( strcmp( p, "exchanges" ) == 0 )
1564 {
1565 opt.exchanges = atoi( q );
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02001566 if( opt.exchanges < 0 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001567 goto usage;
1568 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001569 else if( strcmp( p, "min_version" ) == 0 )
1570 {
1571 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001572 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001573 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001574 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001575 else if( strcmp( q, "tls1_1" ) == 0 ||
1576 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001577 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001578 else if( strcmp( q, "tls1_2" ) == 0 ||
1579 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001580 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001581 else
1582 goto usage;
1583 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001584 else if( strcmp( p, "max_version" ) == 0 )
1585 {
1586 if( strcmp( q, "ssl3" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001587 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001588 else if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001589 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001590 else if( strcmp( q, "tls1_1" ) == 0 ||
1591 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001592 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001593 else if( strcmp( q, "tls1_2" ) == 0 ||
1594 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001595 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001596 else
1597 goto usage;
1598 }
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001599 else if( strcmp( p, "arc4" ) == 0 )
1600 {
1601 switch( atoi( q ) )
1602 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001603 case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break;
1604 case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break;
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001605 default: goto usage;
1606 }
1607 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001608 else if( strcmp( p, "allow_sha1" ) == 0 )
1609 {
1610 switch( atoi( q ) )
1611 {
1612 case 0: opt.allow_sha1 = 0; break;
1613 case 1: opt.allow_sha1 = 1; break;
1614 default: goto usage;
1615 }
1616 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001617 else if( strcmp( p, "force_version" ) == 0 )
1618 {
1619 if( strcmp( q, "ssl3" ) == 0 )
1620 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001621 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0;
1622 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001623 }
1624 else if( strcmp( q, "tls1" ) == 0 )
1625 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001626 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
1627 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001628 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001629 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001630 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001631 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1632 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001633 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001634 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001635 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001636 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1637 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001638 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001639 else if( strcmp( q, "dtls1" ) == 0 )
1640 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001641 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1642 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
1643 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001644 }
1645 else if( strcmp( q, "dtls1_2" ) == 0 )
1646 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001647 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1648 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1649 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001650 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001651 else
1652 goto usage;
1653 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001654 else if( strcmp( p, "auth_mode" ) == 0 )
1655 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02001656 if( ( opt.auth_mode = get_auth_mode( q ) ) < 0 )
Paul Bakker91ebfb52012-11-23 14:04:08 +01001657 goto usage;
1658 }
Janos Follath4817e272017-04-10 13:44:33 +01001659 else if( strcmp( p, "cert_req_ca_list" ) == 0 )
1660 {
1661 opt.cert_req_ca_list = atoi( q );
1662 if( opt.cert_req_ca_list < 0 || opt.cert_req_ca_list > 1 )
1663 goto usage;
1664 }
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001665 else if( strcmp( p, "max_frag_len" ) == 0 )
1666 {
1667 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001668 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001669 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001670 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001671 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001672 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001673 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001674 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001675 else
1676 goto usage;
1677 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001678 else if( strcmp( p, "alpn" ) == 0 )
1679 {
1680 opt.alpn_string = q;
1681 }
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001682 else if( strcmp( p, "trunc_hmac" ) == 0 )
1683 {
1684 switch( atoi( q ) )
1685 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001686 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1687 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001688 default: goto usage;
1689 }
1690 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001691 else if( strcmp( p, "extended_ms" ) == 0 )
1692 {
1693 switch( atoi( q ) )
1694 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001695 case 0:
1696 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1697 break;
1698 case 1:
1699 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1700 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001701 default: goto usage;
1702 }
1703 }
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001704 else if( strcmp( p, "etm" ) == 0 )
1705 {
1706 switch( atoi( q ) )
1707 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001708 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1709 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001710 default: goto usage;
1711 }
1712 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001713 else if( strcmp( p, "tickets" ) == 0 )
1714 {
1715 opt.tickets = atoi( q );
1716 if( opt.tickets < 0 || opt.tickets > 1 )
1717 goto usage;
1718 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001719 else if( strcmp( p, "ticket_timeout" ) == 0 )
1720 {
1721 opt.ticket_timeout = atoi( q );
1722 if( opt.ticket_timeout < 0 )
1723 goto usage;
1724 }
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001725 else if( strcmp( p, "cache_max" ) == 0 )
1726 {
1727 opt.cache_max = atoi( q );
1728 if( opt.cache_max < 0 )
1729 goto usage;
1730 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001731 else if( strcmp( p, "cache_timeout" ) == 0 )
1732 {
1733 opt.cache_timeout = atoi( q );
1734 if( opt.cache_timeout < 0 )
1735 goto usage;
1736 }
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001737 else if( strcmp( p, "cookies" ) == 0 )
1738 {
1739 opt.cookies = atoi( q );
1740 if( opt.cookies < -1 || opt.cookies > 1)
1741 goto usage;
1742 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001743 else if( strcmp( p, "anti_replay" ) == 0 )
1744 {
1745 opt.anti_replay = atoi( q );
1746 if( opt.anti_replay < 0 || opt.anti_replay > 1)
1747 goto usage;
1748 }
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001749 else if( strcmp( p, "badmac_limit" ) == 0 )
1750 {
1751 opt.badmac_limit = atoi( q );
1752 if( opt.badmac_limit < 0 )
1753 goto usage;
1754 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001755 else if( strcmp( p, "hs_timeout" ) == 0 )
1756 {
1757 if( ( p = strchr( q, '-' ) ) == NULL )
1758 goto usage;
1759 *p++ = '\0';
1760 opt.hs_to_min = atoi( q );
1761 opt.hs_to_max = atoi( p );
1762 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1763 goto usage;
1764 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001765 else if( strcmp( p, "mtu" ) == 0 )
1766 {
1767 opt.dtls_mtu = atoi( q );
1768 if( opt.dtls_mtu < 0 )
1769 goto usage;
1770 }
Hanno Beckere7675d02018-08-14 13:28:56 +01001771 else if( strcmp( p, "dgram_packing" ) == 0 )
1772 {
1773 opt.dgram_packing = atoi( q );
1774 if( opt.dgram_packing != 0 &&
1775 opt.dgram_packing != 1 )
1776 {
1777 goto usage;
1778 }
1779 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001780 else if( strcmp( p, "sni" ) == 0 )
1781 {
1782 opt.sni = q;
1783 }
Andres Amaya Garciabfa3e092018-10-16 21:08:38 +01001784 else if( strcmp( p, "query_config" ) == 0 )
1785 {
1786 return query_config( q );
1787 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001788 else
1789 goto usage;
1790 }
1791
Hanno Becker16970d22017-10-10 15:56:37 +01001792 /* Event-driven IO is incompatible with the above custom
1793 * receive and send functions, as the polling builds on
1794 * refers to the underlying net_context. */
1795 if( opt.event == 1 && opt.nbio != 1 )
1796 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001797 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001798 opt.nbio = 1;
1799 }
1800
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001801#if defined(MBEDTLS_DEBUG_C)
1802 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001803#endif
Andrzej Kurekda4029d2018-06-20 07:07:55 -04001804 buf = mbedtls_calloc( 1, opt.buffer_size + 1 );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001805 if( buf == NULL )
1806 {
Andrzej Kurek755890f2018-06-20 08:17:04 -04001807 mbedtls_printf( "Could not allocate %u bytes\n", opt.buffer_size );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001808 ret = 3;
1809 goto exit;
1810 }
Paul Bakkerc73079a2014-04-25 16:34:30 +02001811
Paul Bakkerc1516be2013-06-29 16:01:32 +02001812 if( opt.force_ciphersuite[0] > 0 )
1813 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001814 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001815 ciphersuite_info =
1816 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001817
Paul Bakker5b55b792013-07-19 13:43:43 +02001818 if( opt.max_version != -1 &&
1819 ciphersuite_info->min_minor_ver > opt.max_version )
1820 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001821 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker5b55b792013-07-19 13:43:43 +02001822 ret = 2;
1823 goto usage;
1824 }
1825 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02001826 ciphersuite_info->max_minor_ver < opt.min_version )
1827 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001828 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02001829 ret = 2;
1830 goto usage;
1831 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001832
1833 /* If we select a version that's not supported by
1834 * this suite, then there will be no common ciphersuite... */
1835 if( opt.max_version == -1 ||
1836 opt.max_version > ciphersuite_info->max_minor_ver )
1837 {
Paul Bakker5b55b792013-07-19 13:43:43 +02001838 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001839 }
Paul Bakker5b55b792013-07-19 13:43:43 +02001840 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001841 {
Paul Bakker5b55b792013-07-19 13:43:43 +02001842 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001843 /* DTLS starts with TLS 1.1 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001844 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1845 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1846 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01001847 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001848
1849 /* Enable RC4 if needed and not explicitly disabled */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001850 if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001851 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001852 if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED )
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001853 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001854 mbedtls_printf("forced RC4 ciphersuite with RC4 disabled\n");
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001855 ret = 2;
1856 goto usage;
1857 }
1858
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001859 opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED;
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001860 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001861 }
1862
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001863 if( opt.version_suites != NULL )
1864 {
1865 const char *name[4] = { 0 };
1866
1867 /* Parse 4-element coma-separated list */
1868 for( i = 0, p = (char *) opt.version_suites;
1869 i < 4 && *p != '\0';
1870 i++ )
1871 {
1872 name[i] = p;
1873
1874 /* Terminate the current string and move on to next one */
1875 while( *p != ',' && *p != '\0' )
1876 p++;
1877 if( *p == ',' )
1878 *p++ = '\0';
1879 }
1880
1881 if( i != 4 )
1882 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001883 mbedtls_printf( "too few values for version_suites\n" );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001884 ret = 1;
1885 goto exit;
1886 }
1887
1888 memset( version_suites, 0, sizeof( version_suites ) );
1889
1890 /* Get the suites identifiers from their name */
1891 for( i = 0; i < 4; i++ )
1892 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001893 version_suites[i][0] = mbedtls_ssl_get_ciphersuite_id( name[i] );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001894
1895 if( version_suites[i][0] == 0 )
1896 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001897 mbedtls_printf( "unknown ciphersuite: '%s'\n", name[i] );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02001898 ret = 2;
1899 goto usage;
1900 }
1901 }
1902 }
1903
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001904#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001905 /*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001906 * Unhexify the pre-shared key and parse the list if any given
Paul Bakkerfbb17802013-04-17 19:10:21 +02001907 */
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001908 if( unhexify( psk, opt.psk, &psk_len ) != 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +02001909 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001910 mbedtls_printf( "pre-shared key not valid hex\n" );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001911 goto exit;
1912 }
1913
1914 if( opt.psk_list != NULL )
1915 {
1916 if( ( psk_info = psk_parse( opt.psk_list ) ) == NULL )
Paul Bakkerfbb17802013-04-17 19:10:21 +02001917 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001918 mbedtls_printf( "psk_list invalid" );
Paul Bakkerfbb17802013-04-17 19:10:21 +02001919 goto exit;
1920 }
Paul Bakkerfbb17802013-04-17 19:10:21 +02001921 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001922#endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001923
Hanno Beckere6706e62017-05-15 16:05:15 +01001924#if defined(MBEDTLS_ECP_C)
1925 if( opt.curves != NULL )
1926 {
1927 p = (char *) opt.curves;
1928 i = 0;
1929
1930 if( strcmp( p, "none" ) == 0 )
1931 {
1932 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1933 }
1934 else if( strcmp( p, "default" ) != 0 )
1935 {
1936 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001937 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001938 {
1939 q = p;
1940
1941 /* Terminate the current string */
1942 while( *p != ',' && *p != '\0' )
1943 p++;
1944 if( *p == ',' )
1945 *p++ = '\0';
1946
1947 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1948 {
1949 curve_list[i++] = curve_cur->grp_id;
1950 }
1951 else
1952 {
1953 mbedtls_printf( "unknown curve %s\n", q );
1954 mbedtls_printf( "supported curves: " );
1955 for( curve_cur = mbedtls_ecp_curve_list();
1956 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1957 curve_cur++ )
1958 {
1959 mbedtls_printf( "%s ", curve_cur->name );
1960 }
1961 mbedtls_printf( "\n" );
1962 goto exit;
1963 }
1964 }
1965
1966 mbedtls_printf("Number of curves: %d\n", i );
1967
Hanno Becker8651a432017-06-09 16:13:22 +01001968 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001969 {
Hanno Becker8651a432017-06-09 16:13:22 +01001970 mbedtls_printf( "curves list too long, maximum %d",
1971 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001972 goto exit;
1973 }
1974
1975 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1976 }
1977 }
1978#endif /* MBEDTLS_ECP_C */
1979
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001980#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001981 if( opt.alpn_string != NULL )
1982 {
1983 p = (char *) opt.alpn_string;
1984 i = 0;
1985
1986 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001987 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001988 {
1989 alpn_list[i++] = p;
1990
1991 /* Terminate the current string and move on to next one */
1992 while( *p != ',' && *p != '\0' )
1993 p++;
1994 if( *p == ',' )
1995 *p++ = '\0';
1996 }
1997 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001998#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001999
Paul Bakkerfbb17802013-04-17 19:10:21 +02002000 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002001 * 0. Initialize the RNG and the session data
2002 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002003 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002004 fflush( stdout );
2005
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002006 mbedtls_entropy_init( &entropy );
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002007 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func,
2008 &entropy, (const unsigned char *) pers,
2009 strlen( pers ) ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002010 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002011 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n",
2012 -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002013 goto exit;
2014 }
2015
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002016 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002017
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002018#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002019 /*
2020 * 1.1. Load the trusted CA
2021 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002022 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002023 fflush( stdout );
2024
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002025#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002026 if( strlen( opt.ca_path ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002027 if( strcmp( opt.ca_path, "none" ) == 0 )
2028 ret = 0;
2029 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002030 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002031 else if( strlen( opt.ca_file ) )
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002032 if( strcmp( opt.ca_file, "none" ) == 0 )
2033 ret = 0;
2034 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002035 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkerddf26b42013-09-18 13:46:23 +02002036 else
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002037#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002038#if defined(MBEDTLS_CERTS_C)
Hanno Becker38566cc2019-02-01 08:13:19 +00002039 {
2040#if defined(MBEDTLS_PEM_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002041 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002042 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002043 ret = mbedtls_x509_crt_parse( &cacert,
2044 (const unsigned char *) mbedtls_test_cas[i],
2045 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002046 if( ret != 0 )
2047 break;
2048 }
Hanno Becker38566cc2019-02-01 08:13:19 +00002049 if( ret == 0 )
2050#endif /* MBEDTLS_PEM_PARSE_C */
2051 for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ )
2052 {
2053 ret = mbedtls_x509_crt_parse_der( &cacert,
2054 (const unsigned char *) mbedtls_test_cas_der[i],
2055 mbedtls_test_cas_der_len[i] );
2056 if( ret != 0 )
2057 break;
2058 }
2059 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002060#else
2061 {
2062 ret = 1;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002063 mbedtls_printf("MBEDTLS_CERTS_C not defined.");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002064 }
Hanno Becker38566cc2019-02-01 08:13:19 +00002065#endif /* MBEDTLS_CERTS_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002066 if( ret < 0 )
2067 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002068 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002069 goto exit;
2070 }
2071
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002072 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002073
2074 /*
2075 * 1.2. Load own certificate and private key
2076 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002077 mbedtls_printf( " . Loading the server cert. and key..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002078 fflush( stdout );
2079
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002080#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002081 if( strlen( opt.crt_file ) && strcmp( opt.crt_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002082 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002083 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002084 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert, opt.crt_file ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002085 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002086 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file returned -0x%x\n\n",
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002087 -ret );
2088 goto exit;
2089 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002090 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002091 if( strlen( opt.key_file ) && strcmp( opt.key_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002092 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002093 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002094 if( ( ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002095 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002096 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002097 goto exit;
2098 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002099 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002100 if( key_cert_init == 1 )
2101 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002102 mbedtls_printf( " failed\n ! crt_file without key_file or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002103 goto exit;
2104 }
2105
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002106 if( strlen( opt.crt_file2 ) && strcmp( opt.crt_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002107 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002108 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002109 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert2, opt.crt_file2 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002110 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002111 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file(2) returned -0x%x\n\n",
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002112 -ret );
2113 goto exit;
2114 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002115 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002116 if( strlen( opt.key_file2 ) && strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002117 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002118 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002119 if( ( ret = mbedtls_pk_parse_keyfile( &pkey2, opt.key_file2, "" ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002120 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002121 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile(2) returned -0x%x\n\n",
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002122 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002123 goto exit;
2124 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002125 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002126 if( key_cert_init2 == 1 )
2127 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002128 mbedtls_printf( " failed\n ! crt_file2 without key_file2 or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002129 goto exit;
2130 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002131#endif
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002132 if( key_cert_init == 0 &&
2133 strcmp( opt.crt_file, "none" ) != 0 &&
2134 strcmp( opt.key_file, "none" ) != 0 &&
2135 key_cert_init2 == 0 &&
2136 strcmp( opt.crt_file2, "none" ) != 0 &&
2137 strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002138 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002139#if !defined(MBEDTLS_CERTS_C)
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002140 mbedtls_printf( "Not certificated or key provided, and \nMBEDTLS_CERTS_C not defined!\n" );
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002141 goto exit;
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002142#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002143#if defined(MBEDTLS_RSA_C)
2144 if( ( ret = mbedtls_x509_crt_parse( &srvcert,
2145 (const unsigned char *) mbedtls_test_srv_crt_rsa,
2146 mbedtls_test_srv_crt_rsa_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002147 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002148 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2149 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002150 goto exit;
2151 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002152 if( ( ret = mbedtls_pk_parse_key( &pkey,
2153 (const unsigned char *) mbedtls_test_srv_key_rsa,
2154 mbedtls_test_srv_key_rsa_len, NULL, 0 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002155 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002156 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
2157 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002158 goto exit;
2159 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002160 key_cert_init = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002161#endif /* MBEDTLS_RSA_C */
2162#if defined(MBEDTLS_ECDSA_C)
2163 if( ( ret = mbedtls_x509_crt_parse( &srvcert2,
2164 (const unsigned char *) mbedtls_test_srv_crt_ec,
2165 mbedtls_test_srv_crt_ec_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002166 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002167 mbedtls_printf( " failed\n ! x509_crt_parse2 returned -0x%x\n\n",
2168 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002169 goto exit;
2170 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002171 if( ( ret = mbedtls_pk_parse_key( &pkey2,
2172 (const unsigned char *) mbedtls_test_srv_key_ec,
2173 mbedtls_test_srv_key_ec_len, NULL, 0 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002174 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002175 mbedtls_printf( " failed\n ! pk_parse_key2 returned -0x%x\n\n",
2176 -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002177 goto exit;
2178 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002179 key_cert_init2 = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002180#endif /* MBEDTLS_ECDSA_C */
2181#endif /* MBEDTLS_CERTS_C */
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002182 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002183
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002184 mbedtls_printf( " ok\n" );
2185#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002186
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002187#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002188 if( opt.dhm_file != NULL )
2189 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002190 mbedtls_printf( " . Loading DHM parameters..." );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002191 fflush( stdout );
2192
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002193 if( ( ret = mbedtls_dhm_parse_dhmfile( &dhm, opt.dhm_file ) ) != 0 )
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002194 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002195 mbedtls_printf( " failed\n ! mbedtls_dhm_parse_dhmfile returned -0x%04X\n\n",
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002196 -ret );
2197 goto exit;
2198 }
2199
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002200 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002201 }
2202#endif
2203
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002204#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002205 if( opt.sni != NULL )
2206 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002207 mbedtls_printf( " . Setting up SNI information..." );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002208 fflush( stdout );
2209
2210 if( ( sni_info = sni_parse( opt.sni ) ) == NULL )
2211 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002212 mbedtls_printf( " failed\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002213 goto exit;
2214 }
2215
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002216 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002217 }
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002218#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002219
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002220 /*
2221 * 2. Setup the listening TCP socket
2222 */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02002223 mbedtls_printf( " . Bind on %s://%s:%s/ ...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002224 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002225 opt.server_addr ? opt.server_addr : "*",
2226 opt.server_port );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002227 fflush( stdout );
2228
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002229 if( ( ret = mbedtls_net_bind( &listen_fd, opt.server_addr, opt.server_port,
2230 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2231 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002232 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002233 mbedtls_printf( " failed\n ! mbedtls_net_bind returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002234 goto exit;
2235 }
2236
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002237 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002238
2239 /*
2240 * 3. Setup stuff
2241 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002242 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002243 fflush( stdout );
2244
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02002245 if( ( ret = mbedtls_ssl_config_defaults( &conf,
2246 MBEDTLS_SSL_IS_SERVER,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02002247 opt.transport,
2248 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002249 {
2250 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n", -ret );
2251 goto exit;
2252 }
2253
Gilles Peskineef86ab22017-05-05 18:59:02 +02002254#if defined(MBEDTLS_X509_CRT_PARSE_C)
2255 /* The default algorithms profile disables SHA-1, but our tests still
2256 rely on it heavily. Hence we allow it here. A real-world server
2257 should use the default profile unless there is a good reason not to. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02002258 if( opt.allow_sha1 > 0 )
2259 {
2260 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
2261 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
Gilles Peskine682df092017-05-11 19:01:11 +02002262 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
Gilles Peskinebc70a182017-05-09 15:59:24 +02002263 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02002264#endif /* MBEDTLS_X509_CRT_PARSE_C */
2265
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002266 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002267 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002268
Janos Follath4817e272017-04-10 13:44:33 +01002269 if( opt.cert_req_ca_list != DFL_CERT_REQ_CA_LIST )
2270 mbedtls_ssl_conf_cert_req_ca_list( &conf, opt.cert_req_ca_list );
2271
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002272#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002273 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002274 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min, opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02002275
Hanno Beckere7675d02018-08-14 13:28:56 +01002276 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01002277 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002278#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002279
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002280#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002281 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002282 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002283 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002284 goto exit;
2285 };
Paul Bakker05decb22013-08-15 13:33:48 +02002286#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002287
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002288#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002289 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002290 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002291#endif
2292
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002293#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002294 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002295 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002296#endif
2297
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002298#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002299 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002300 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002301#endif
2302
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002303#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002304 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002305 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002306 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002307 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002308 goto exit;
2309 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002310#endif
2311
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002312 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
2313 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002314
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002315#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002316 if( opt.cache_max != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002317 mbedtls_ssl_cache_set_max_entries( &cache, opt.cache_max );
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002318
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002319 if( opt.cache_timeout != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002320 mbedtls_ssl_cache_set_timeout( &cache, opt.cache_timeout );
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002321
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002322 mbedtls_ssl_conf_session_cache( &conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +01002323 mbedtls_ssl_cache_get,
2324 mbedtls_ssl_cache_set );
Paul Bakker0a597072012-09-25 21:55:46 +00002325#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002326
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002327#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002328 if( opt.tickets == MBEDTLS_SSL_SESSION_TICKETS_ENABLED )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002329 {
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002330 if( ( ret = mbedtls_ssl_ticket_setup( &ticket_ctx,
2331 mbedtls_ctr_drbg_random, &ctr_drbg,
Manuel Pégourié-Gonnarda0adc1b2015-05-25 10:35:16 +02002332 MBEDTLS_CIPHER_AES_256_GCM,
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002333 opt.ticket_timeout ) ) != 0 )
2334 {
2335 mbedtls_printf( " failed\n ! mbedtls_ssl_ticket_setup returned %d\n\n", ret );
2336 goto exit;
2337 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002338
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002339 mbedtls_ssl_conf_session_tickets_cb( &conf,
2340 mbedtls_ssl_ticket_write,
2341 mbedtls_ssl_ticket_parse,
2342 &ticket_ctx );
2343 }
Paul Bakkera503a632013-08-14 13:48:06 +02002344#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002345
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002346#if defined(MBEDTLS_SSL_PROTO_DTLS)
2347 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002348 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002349#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002350 if( opt.cookies > 0 )
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002351 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002352 if( ( ret = mbedtls_ssl_cookie_setup( &cookie_ctx,
2353 mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002354 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002355 mbedtls_printf( " failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002356 goto exit;
2357 }
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002358
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002359 mbedtls_ssl_conf_dtls_cookies( &conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002360 &cookie_ctx );
2361 }
2362 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002363#endif /* MBEDTLS_SSL_COOKIE_C */
2364#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002365 if( opt.cookies == 0 )
2366 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002367 mbedtls_ssl_conf_dtls_cookies( &conf, NULL, NULL, NULL );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002368 }
2369 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002370#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002371 {
2372 ; /* Nothing to do */
2373 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002374
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002375#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002376 if( opt.anti_replay != DFL_ANTI_REPLAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002377 mbedtls_ssl_conf_dtls_anti_replay( &conf, opt.anti_replay );
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002378#endif
2379
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002380#if defined(MBEDTLS_SSL_DTLS_BADMAC_LIMIT)
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002381 if( opt.badmac_limit != DFL_BADMAC_LIMIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002382 mbedtls_ssl_conf_dtls_badmac_limit( &conf, opt.badmac_limit );
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002383#endif
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002384 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002385#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002386
Paul Bakker41c83d32013-03-20 14:39:14 +01002387 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002388 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002389
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02002390#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002391 if( opt.arc4 != DFL_ARC4 )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002392 mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 );
Manuel Pégourié-Gonnard66dc5552015-05-14 12:28:21 +02002393#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002394
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02002395 if( opt.version_suites != NULL )
2396 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002397 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[0],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002398 MBEDTLS_SSL_MAJOR_VERSION_3,
2399 MBEDTLS_SSL_MINOR_VERSION_0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002400 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[1],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002401 MBEDTLS_SSL_MAJOR_VERSION_3,
2402 MBEDTLS_SSL_MINOR_VERSION_1 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002403 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[2],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002404 MBEDTLS_SSL_MAJOR_VERSION_3,
2405 MBEDTLS_SSL_MINOR_VERSION_2 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002406 mbedtls_ssl_conf_ciphersuites_for_version( &conf, version_suites[3],
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002407 MBEDTLS_SSL_MAJOR_VERSION_3,
2408 MBEDTLS_SSL_MINOR_VERSION_3 );
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +02002409 }
2410
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002411 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002412 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002413#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002414 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002415
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002416 if( opt.renego_delay != DFL_RENEGO_DELAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002417 mbedtls_ssl_conf_renegotiation_enforced( &conf, opt.renego_delay );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002418
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002419 if( opt.renego_period != DFL_RENEGO_PERIOD )
2420 {
Andres AG692ad842017-01-19 16:30:57 +00002421 PUT_UINT64_BE( renego_period, opt.renego_period, 0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002422 mbedtls_ssl_conf_renegotiation_period( &conf, renego_period );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002423 }
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01002424#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002425
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002426#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002427 if( strcmp( opt.ca_path, "none" ) != 0 &&
2428 strcmp( opt.ca_file, "none" ) != 0 )
2429 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002430 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002431 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002432 if( key_cert_init )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002433 {
2434 mbedtls_pk_context *pk = &pkey;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002435#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002436 if( opt.async_private_delay1 >= 0 )
2437 {
Gilles Peskine44817442018-06-13 18:09:28 +02002438 ret = ssl_async_set_key( &ssl_async_keys, &srvcert, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002439 opt.async_private_delay1 );
2440 if( ret < 0 )
2441 {
2442 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2443 ret );
2444 goto exit;
2445 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002446 pk = NULL;
2447 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002448#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002449 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002450 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002451 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002452 goto exit;
2453 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002454 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002455 if( key_cert_init2 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002456 {
2457 mbedtls_pk_context *pk = &pkey2;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002458#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002459 if( opt.async_private_delay2 >= 0 )
2460 {
Gilles Peskine44817442018-06-13 18:09:28 +02002461 ret = ssl_async_set_key( &ssl_async_keys, &srvcert2, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002462 opt.async_private_delay2 );
2463 if( ret < 0 )
2464 {
2465 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2466 ret );
2467 goto exit;
2468 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002469 pk = NULL;
2470 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002471#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002472 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert2, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002473 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002474 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002475 goto exit;
2476 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002477 }
2478
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002479#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002480 if( opt.async_operations[0] != '-' )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002481 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002482 mbedtls_ssl_async_sign_t *sign = NULL;
2483 mbedtls_ssl_async_decrypt_t *decrypt = NULL;
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002484 const char *r;
2485 for( r = opt.async_operations; *r; r++ )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002486 {
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002487 switch( *r )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002488 {
2489 case 'd':
2490 decrypt = ssl_async_decrypt;
2491 break;
2492 case 's':
2493 sign = ssl_async_sign;
2494 break;
2495 }
2496 }
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002497 ssl_async_keys.inject_error = ( opt.async_private_error < 0 ?
2498 - opt.async_private_error :
2499 opt.async_private_error );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002500 ssl_async_keys.f_rng = mbedtls_ctr_drbg_random;
2501 ssl_async_keys.p_rng = &ctr_drbg;
2502 mbedtls_ssl_conf_async_private_cb( &conf,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002503 sign,
2504 decrypt,
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002505 ssl_async_resume,
2506 ssl_async_cancel,
2507 &ssl_async_keys );
2508 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002509#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002510#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +02002511
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002512#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002513 if( opt.sni != NULL )
Gilles Peskine166ce742018-04-30 10:30:49 +02002514 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002515 mbedtls_ssl_conf_sni( &conf, sni_callback, sni_info );
Gilles Peskine166ce742018-04-30 10:30:49 +02002516#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
2517 if( opt.async_private_delay2 >= 0 )
2518 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002519 sni_entry *cur;
2520 for( cur = sni_info; cur != NULL; cur = cur->next )
Gilles Peskine166ce742018-04-30 10:30:49 +02002521 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002522 ret = ssl_async_set_key( &ssl_async_keys,
Gilles Peskine44817442018-06-13 18:09:28 +02002523 cur->cert, cur->key, 1,
Gilles Peskinee2479892018-06-13 18:06:51 +02002524 opt.async_private_delay2 );
2525 if( ret < 0 )
2526 {
2527 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2528 ret );
2529 goto exit;
2530 }
2531 cur->key = NULL;
Gilles Peskine166ce742018-04-30 10:30:49 +02002532 }
Gilles Peskine166ce742018-04-30 10:30:49 +02002533 }
2534#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
2535 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002536#endif
2537
Hanno Beckere6706e62017-05-15 16:05:15 +01002538#if defined(MBEDTLS_ECP_C)
2539 if( opt.curves != NULL &&
2540 strcmp( opt.curves, "default" ) != 0 )
2541 {
2542 mbedtls_ssl_conf_curves( &conf, curve_list );
2543 }
2544#endif
2545
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002546#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002547 if( strlen( opt.psk ) != 0 && strlen( opt.psk_identity ) != 0 )
2548 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002549 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002550 (const unsigned char *) opt.psk_identity,
2551 strlen( opt.psk_identity ) );
2552 if( ret != 0 )
2553 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002554 mbedtls_printf( " failed\n mbedtls_ssl_conf_psk returned -0x%04X\n\n", - ret );
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002555 goto exit;
2556 }
2557 }
2558
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002559 if( opt.psk_list != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002560 mbedtls_ssl_conf_psk_cb( &conf, psk_callback, psk_info );
Paul Bakkered27a042013-04-18 22:46:23 +02002561#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002562
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002563#if defined(MBEDTLS_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +00002564 /*
2565 * Use different group than default DHM group
2566 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002567#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002568 if( opt.dhm_file != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002569 ret = mbedtls_ssl_conf_dh_param_ctx( &conf, &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002570#endif
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002571 if( ret != 0 )
2572 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002573 mbedtls_printf( " failed\n mbedtls_ssl_conf_dh_param returned -0x%04X\n\n", - ret );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002574 goto exit;
2575 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002576#endif
2577
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002578 if( opt.min_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002579 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.min_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00002580
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002581 if( opt.max_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002582 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.max_version );
Paul Bakkerc1516be2013-06-29 16:01:32 +02002583
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002584 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2585 {
2586 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", -ret );
2587 goto exit;
2588 }
2589
2590 if( opt.nbio == 2 )
2591 mbedtls_ssl_set_bio( &ssl, &client_fd, my_send, my_recv, NULL );
2592 else
2593 mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv,
Manuel Pégourié-Gonnardd4f04db2015-05-14 18:58:17 +02002594 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002595
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02002596#if defined(MBEDTLS_SSL_PROTO_DTLS)
2597 if( opt.dtls_mtu != DFL_DTLS_MTU )
2598 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
2599#endif
2600
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002601#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002602 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2603 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002604#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002605
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002606 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002607
2608reset:
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002609#if !defined(_WIN32)
2610 if( received_sigterm )
2611 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002612 mbedtls_printf( " interrupted by SIGTERM (not in net_accept())\n" );
2613 if( ret == MBEDTLS_ERR_NET_INVALID_CONTEXT )
2614 ret = 0;
2615
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002616 goto exit;
2617 }
2618#endif
2619
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002620 if( ret == MBEDTLS_ERR_SSL_CLIENT_RECONNECT )
2621 {
2622 mbedtls_printf( " ! Client initiated reconnection from same port\n" );
2623 goto handshake;
2624 }
2625
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002626#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002627 if( ret != 0 )
2628 {
2629 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002630 mbedtls_strerror( ret, error_buf, 100 );
2631 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002632 }
2633#endif
2634
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002635 mbedtls_net_free( &client_fd );
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002636
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002637 mbedtls_ssl_session_reset( &ssl );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002638
2639 /*
2640 * 3. Wait until a client connects
2641 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002642 mbedtls_printf( " . Waiting for a remote connection ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002643 fflush( stdout );
2644
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002645 if( ( ret = mbedtls_net_accept( &listen_fd, &client_fd,
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002646 client_ip, sizeof( client_ip ), &cliip_len ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002647 {
Paul Bakkerc1283d32014-08-18 11:05:51 +02002648#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002649 if( received_sigterm )
2650 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002651 mbedtls_printf( " interrupted by SIGTERM (in net_accept())\n" );
2652 if( ret == MBEDTLS_ERR_NET_ACCEPT_FAILED )
2653 ret = 0;
2654
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002655 goto exit;
2656 }
Paul Bakkerc1283d32014-08-18 11:05:51 +02002657#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002658
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002659 mbedtls_printf( " failed\n ! mbedtls_net_accept returned -0x%x\n\n", -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002660 goto exit;
2661 }
2662
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002663 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002664 ret = mbedtls_net_set_nonblock( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002665 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002666 ret = mbedtls_net_set_block( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002667 if( ret != 0 )
2668 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002669 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002670 goto exit;
2671 }
2672
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002673 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002674
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002675#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
2676 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002677 {
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002678 if( ( ret = mbedtls_ssl_set_client_transport_id( &ssl,
2679 client_ip, cliip_len ) ) != 0 )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002680 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002681 mbedtls_printf( " failed\n ! mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n",
2682 -ret );
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002683 goto exit;
2684 }
2685 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002686#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002687
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002688#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
2689 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
2690 {
2691 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
2692 (const unsigned char *) opt.ecjpake_pw,
2693 strlen( opt.ecjpake_pw ) ) ) != 0 )
2694 {
2695 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n", ret );
2696 goto exit;
2697 }
2698 }
2699#endif
2700
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002701 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002702
2703 /*
2704 * 4. Handshake
2705 */
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002706handshake:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002707 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002708 fflush( stdout );
2709
Hanno Becker16970d22017-10-10 15:56:37 +01002710 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002711 {
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002712#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002713 if( ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS &&
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002714 ssl_async_keys.inject_error == SSL_ASYNC_INJECT_ERROR_CANCEL )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002715 {
2716 mbedtls_printf( " cancelling on injected error\n" );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002717 break;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002718 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002719#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskineb44692f2018-04-24 12:18:19 +02002720
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002721 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01002722 break;
2723
2724 /* For event-driven IO, wait for socket to become available */
2725 if( opt.event == 1 /* level triggered IO */ )
2726 {
2727#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002728 ret = idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002729#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002730 ret = idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002731#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002732 if( ret != 0 )
2733 goto reset;
Hanno Becker16970d22017-10-10 15:56:37 +01002734 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002735 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002736
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002737 if( ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED )
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002738 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002739 mbedtls_printf( " hello verification requested\n" );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002740 ret = 0;
2741 goto reset;
2742 }
2743 else if( ret != 0 )
2744 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002745 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", -ret );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02002746
2747#if defined(MBEDTLS_X509_CRT_PARSE_C)
2748 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
2749 {
2750 char vrfy_buf[512];
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +02002751 flags = mbedtls_ssl_get_verify_result( &ssl );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02002752
2753 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
2754
2755 mbedtls_printf( "%s\n", vrfy_buf );
2756 }
2757#endif
2758
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002759#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002760 if( opt.async_private_error < 0 )
2761 /* Injected error only the first time round, to test reset */
2762 ssl_async_keys.inject_error = SSL_ASYNC_INJECT_ERROR_NONE;
2763#endif
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002764 goto reset;
2765 }
2766 else /* ret == 0 */
2767 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002768 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
2769 mbedtls_ssl_get_version( &ssl ), mbedtls_ssl_get_ciphersuite( &ssl ) );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02002770 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002771
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002772 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
2773 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002774 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002775 mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002776
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002777#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
2778 mbedtls_printf( " [ Maximum fragment length is %u ]\n",
2779 (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) );
2780#endif
2781
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002782#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002783 if( opt.alpn_string != NULL )
2784 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002785 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
2786 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002787 alp ? alp : "(none)" );
2788 }
2789#endif
2790
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002791#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002792 /*
Ron Eldor2a47be52017-06-20 15:23:23 +03002793 * 5. Verify the client certificate
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002794 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002795 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002796
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002797 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002798 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002799 char vrfy_buf[512];
2800
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002801 mbedtls_printf( " failed\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002802
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002803 mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002804
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002805 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002806 }
2807 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002808 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002809
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002810 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002811 {
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002812 char crt_buf[512];
2813
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002814 mbedtls_printf( " . Peer certificate information ...\n" );
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02002815 mbedtls_x509_crt_info( crt_buf, sizeof( crt_buf ), " ",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002816 mbedtls_ssl_get_peer_cert( &ssl ) );
Manuel Pégourié-Gonnard67557172015-07-02 11:15:48 +02002817 mbedtls_printf( "%s\n", crt_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002818 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002819#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002820
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02002821 if( opt.exchanges == 0 )
2822 goto close_notify;
2823
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00002824 exchanges_left = opt.exchanges;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002825data_exchange:
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002826 /*
2827 * 6. Read the HTTP Request
2828 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002829 mbedtls_printf( " < Read from client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002830 fflush( stdout );
2831
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002832 /*
2833 * TLS and DTLS need different reading styles (stream vs datagram)
2834 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002835 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002836 {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002837 do
2838 {
2839 int terminated = 0;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002840 len = opt.buffer_size - 1;
2841 memset( buf, 0, opt.buffer_size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002842 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002843
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002844 if( mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01002845 {
2846 if( opt.event == 1 /* level triggered IO */ )
2847 {
2848#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002849 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002850#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002851 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002852#endif
2853 }
2854
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002855 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002856 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002857
2858 if( ret <= 0 )
2859 {
2860 switch( ret )
2861 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002862 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2863 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002864 goto close_notify;
2865
2866 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002867 case MBEDTLS_ERR_NET_CONN_RESET:
2868 mbedtls_printf( " connection was reset by peer\n" );
2869 ret = MBEDTLS_ERR_NET_CONN_RESET;
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002870 goto reset;
2871
2872 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002873 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002874 goto reset;
2875 }
2876 }
2877
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002878 if( mbedtls_ssl_get_bytes_avail( &ssl ) == 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002879 {
2880 len = ret;
2881 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002882 mbedtls_printf( " %d bytes read\n\n%s\n", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002883
2884 /* End of message should be detected according to the syntax of the
2885 * application protocol (eg HTTP), just use a dummy test here. */
2886 if( buf[len - 1] == '\n' )
2887 terminated = 1;
2888 }
2889 else
2890 {
2891 int extra_len, ori_len;
2892 unsigned char *larger_buf;
2893
2894 ori_len = ret;
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002895 extra_len = (int) mbedtls_ssl_get_bytes_avail( &ssl );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002896
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +02002897 larger_buf = mbedtls_calloc( 1, ori_len + extra_len + 1 );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002898 if( larger_buf == NULL )
2899 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002900 mbedtls_printf( " ! memory allocation failed\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002901 ret = 1;
2902 goto reset;
2903 }
2904
2905 memset( larger_buf, 0, ori_len + extra_len );
2906 memcpy( larger_buf, buf, ori_len );
2907
2908 /* This read should never fail and get the whole cached data */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002909 ret = mbedtls_ssl_read( &ssl, larger_buf + ori_len, extra_len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002910 if( ret != extra_len ||
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002911 mbedtls_ssl_get_bytes_avail( &ssl ) != 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002912 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002913 mbedtls_printf( " ! mbedtls_ssl_read failed on cached data\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002914 ret = 1;
2915 goto reset;
2916 }
2917
2918 larger_buf[ori_len + extra_len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002919 mbedtls_printf( " %u bytes read (%u + %u)\n\n%s\n",
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002920 ori_len + extra_len, ori_len, extra_len,
2921 (char *) larger_buf );
2922
2923 /* End of message should be detected according to the syntax of the
2924 * application protocol (eg HTTP), just use a dummy test here. */
2925 if( larger_buf[ori_len + extra_len - 1] == '\n' )
2926 terminated = 1;
2927
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002928 mbedtls_free( larger_buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002929 }
2930
2931 if( terminated )
2932 {
2933 ret = 0;
2934 break;
2935 }
2936 }
2937 while( 1 );
2938 }
2939 else /* Not stream, so datagram */
2940 {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002941 len = opt.buffer_size - 1;
2942 memset( buf, 0, opt.buffer_size );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002943
Gilles Peskineb44692f2018-04-24 12:18:19 +02002944 do
Hanno Becker16970d22017-10-10 15:56:37 +01002945 {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00002946 /* Without the call to `mbedtls_ssl_check_pending`, it might
2947 * happen that the client sends application data in the same
2948 * datagram as the Finished message concluding the handshake.
2949 * In this case, the application data would be ready to be
2950 * processed while the underlying transport wouldn't signal
2951 * any further incoming data.
2952 *
2953 * See the test 'Event-driven I/O: session-id resume, UDP packing'
2954 * in tests/ssl-opt.sh.
2955 */
2956
2957 /* For event-driven IO, wait for socket to become available */
2958 if( mbedtls_ssl_check_pending( &ssl ) == 0 &&
2959 opt.event == 1 /* level triggered IO */ )
2960 {
2961#if defined(MBEDTLS_TIMING_C)
2962 idle( &client_fd, &timer, MBEDTLS_ERR_SSL_WANT_READ );
2963#else
2964 idle( &client_fd, MBEDTLS_ERR_SSL_WANT_READ );
2965#endif
2966 }
2967
Hanno Becker16970d22017-10-10 15:56:37 +01002968 ret = mbedtls_ssl_read( &ssl, buf, len );
2969
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00002970 /* Note that even if `mbedtls_ssl_check_pending` returns true,
2971 * it can happen that the subsequent call to `mbedtls_ssl_read`
2972 * returns `MBEDTLS_ERR_SSL_WANT_READ`, because the pending messages
2973 * might be discarded (e.g. because they are retransmissions). */
Hanno Becker16970d22017-10-10 15:56:37 +01002974 }
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02002975 while( mbedtls_status_is_ssl_in_progress( ret ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002976
2977 if( ret <= 0 )
2978 {
2979 switch( ret )
2980 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002981 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2982 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002983 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002984 goto close_notify;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002985
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002986 default:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002987 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002988 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002989 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002990 }
2991
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002992 len = ret;
2993 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002994 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02002995 ret = 0;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002996 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002997
2998 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002999 * 7a. Request renegotiation while client is waiting for input from us.
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02003000 * (only on the first exchange, to be able to test retransmission)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003001 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003002#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard3a173f42015-01-22 13:30:33 +00003003 if( opt.renegotiate && exchanges_left == opt.exchanges )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003004 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003005 mbedtls_printf( " . Requestion renegotiation..." );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003006 fflush( stdout );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003007
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003008 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003009 {
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003010 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003011 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003012 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003013 goto reset;
3014 }
Hanno Becker16970d22017-10-10 15:56:37 +01003015
3016 /* For event-driven IO, wait for socket to become available */
3017 if( opt.event == 1 /* level triggered IO */ )
3018 {
3019#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003020 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003021#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003022 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003023#endif
3024 }
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003025 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003026
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003027 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003028 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003029#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003030
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003031 /*
3032 * 7. Write the 200 Response
3033 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003034 mbedtls_printf( " > Write to client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003035 fflush( stdout );
3036
3037 len = sprintf( (char *) buf, HTTP_RESPONSE,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003038 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003039
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003040 /* Add padding to the response to reach opt.response_size in length */
3041 if( opt.response_size != DFL_RESPONSE_SIZE &&
3042 len < opt.response_size )
3043 {
3044 memset( buf + len, 'B', opt.response_size - len );
3045 len += opt.response_size - len;
3046 }
3047
3048 /* Truncate if response size is smaller than the "natural" size */
3049 if( opt.response_size != DFL_RESPONSE_SIZE &&
3050 len > opt.response_size )
3051 {
3052 len = opt.response_size;
3053
3054 /* Still end with \r\n unless that's really not possible */
3055 if( len >= 2 ) buf[len - 2] = '\r';
3056 if( len >= 1 ) buf[len - 1] = '\n';
3057 }
3058
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003059 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003060 {
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003061 for( written = 0, frags = 0; written < len; written += ret, frags++ )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003062 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003063 while( ( ret = mbedtls_ssl_write( &ssl, buf + written, len - written ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003064 <= 0 )
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003065 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003066 if( ret == MBEDTLS_ERR_NET_CONN_RESET )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003067 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003068 mbedtls_printf( " failed\n ! peer closed the connection\n\n" );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003069 goto reset;
3070 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003071
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003072 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003073 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003074 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003075 goto reset;
3076 }
Hanno Becker16970d22017-10-10 15:56:37 +01003077
3078 /* For event-driven IO, wait for socket to become available */
3079 if( opt.event == 1 /* level triggered IO */ )
3080 {
3081#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003082 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003083#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003084 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003085#endif
3086 }
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003087 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003088 }
3089 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003090 else /* Not stream, so datagram */
3091 {
Hanno Becker16970d22017-10-10 15:56:37 +01003092 while( 1 )
3093 {
3094 ret = mbedtls_ssl_write( &ssl, buf, len );
3095
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003096 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01003097 break;
3098
3099 /* For event-driven IO, wait for socket to become available */
3100 if( opt.event == 1 /* level triggered IO */ )
3101 {
3102#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003103 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003104#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003105 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003106#endif
3107 }
3108 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003109
3110 if( ret < 0 )
3111 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003112 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003113 goto reset;
3114 }
3115
3116 frags = 1;
3117 written = ret;
3118 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003119
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003120 buf[written] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003121 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf );
Manuel Pégourié-Gonnarda92ed482015-01-14 10:46:08 +01003122 ret = 0;
Manuel Pégourié-Gonnardf3dc2f62013-10-29 18:17:41 +01003123
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003124 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003125 * 7b. Continue doing data exchanges?
3126 */
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003127 if( --exchanges_left > 0 )
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003128 goto data_exchange;
3129
3130 /*
3131 * 8. Done, cleanly close the connection
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003132 */
3133close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003134 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01003135
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003136 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003137 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01003138 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003139 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003140
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003141 mbedtls_printf( " done\n" );
Rich Evansf90016a2015-01-19 14:26:37 +00003142
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003143 goto reset;
3144
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003145 /*
3146 * Cleanup and exit
3147 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003148exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003149#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003150 if( ret != 0 )
3151 {
3152 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003153 mbedtls_strerror( ret, error_buf, 100 );
3154 mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003155 }
3156#endif
3157
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003158 mbedtls_printf( " . Cleaning up..." );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003159 fflush( stdout );
3160
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003161 mbedtls_net_free( &client_fd );
3162 mbedtls_net_free( &listen_fd );
Paul Bakker0c226102014-04-17 16:02:36 +02003163
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003164#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3165 mbedtls_dhm_free( &dhm );
Paul Bakkera317a982014-06-18 16:44:11 +02003166#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003167#if defined(MBEDTLS_X509_CRT_PARSE_C)
3168 mbedtls_x509_crt_free( &cacert );
3169 mbedtls_x509_crt_free( &srvcert );
3170 mbedtls_pk_free( &pkey );
3171 mbedtls_x509_crt_free( &srvcert2 );
3172 mbedtls_pk_free( &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +02003173#endif
Gilles Peskine44817442018-06-13 18:09:28 +02003174#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
3175 for( i = 0; (size_t) i < ssl_async_keys.slots_used; i++ )
3176 {
3177 if( ssl_async_keys.slots[i].pk_owned )
3178 {
3179 mbedtls_pk_free( ssl_async_keys.slots[i].pk );
3180 mbedtls_free( ssl_async_keys.slots[i].pk );
3181 ssl_async_keys.slots[i].pk = NULL;
3182 }
3183 }
3184#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02003185#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01003186 sni_free( sni_info );
3187#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003188#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003189 psk_free( psk_info );
3190#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003191#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3192 mbedtls_dhm_free( &dhm );
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003193#endif
Paul Bakkered27a042013-04-18 22:46:23 +02003194
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003195 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02003196 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003197 mbedtls_ctr_drbg_free( &ctr_drbg );
3198 mbedtls_entropy_free( &entropy );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003199
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003200#if defined(MBEDTLS_SSL_CACHE_C)
3201 mbedtls_ssl_cache_free( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00003202#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02003203#if defined(MBEDTLS_SSL_SESSION_TICKETS)
3204 mbedtls_ssl_ticket_free( &ticket_ctx );
3205#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003206#if defined(MBEDTLS_SSL_COOKIE_C)
3207 mbedtls_ssl_cookie_free( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02003208#endif
Paul Bakker0a597072012-09-25 21:55:46 +00003209
Hanno Becker095d9cf2018-10-09 12:39:13 +01003210 mbedtls_free( buf );
3211
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003212#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3213#if defined(MBEDTLS_MEMORY_DEBUG)
3214 mbedtls_memory_buffer_alloc_status();
Paul Bakker82024bf2013-07-04 11:52:32 +02003215#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003216 mbedtls_memory_buffer_alloc_free();
Paul Bakker1337aff2013-09-29 14:45:34 +02003217#endif
Paul Bakker82024bf2013-07-04 11:52:32 +02003218
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003219 mbedtls_printf( " done.\n" );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003220
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003221#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003222 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003223 fflush( stdout ); getchar();
3224#endif
3225
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003226 // Shell can not handle large exit numbers -> 1 for errors
3227 if( ret < 0 )
3228 ret = 1;
3229
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003230 return( ret );
3231}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003232#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C &&
3233 MBEDTLS_SSL_SRV_C && MBEDTLS_NET_C && MBEDTLS_RSA_C &&
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003234 MBEDTLS_CTR_DRBG_C */