blob: b5026959a6d17da6ea0aab07e1bb8789dcc0c3d2 [file] [log] [blame]
Paul Bakkerf9c49532013-12-19 15:40:58 +01001/*
2 * SSL server demonstration program using pthread for handling multiple
3 * clients.
4 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02005 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02006 * SPDX-License-Identifier: Apache-2.0
7 *
8 * Licensed under the Apache License, Version 2.0 (the "License"); you may
9 * not use this file except in compliance with the License.
10 * You may obtain a copy of the License at
11 *
12 * http://www.apache.org/licenses/LICENSE-2.0
13 *
14 * Unless required by applicable law or agreed to in writing, software
15 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 * See the License for the specific language governing permissions and
18 * limitations under the License.
Paul Bakkerf9c49532013-12-19 15:40:58 +010019 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000020 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakkerf9c49532013-12-19 15:40:58 +010021 */
22
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020023#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000024#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020025#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020026#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020027#endif
Paul Bakkerf9c49532013-12-19 15:40:58 +010028
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020029#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000030#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000031#else
Rich Evans18b78c72015-02-11 14:06:19 +000032#include <stdio.h>
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010033#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034#define mbedtls_fprintf fprintf
35#define mbedtls_printf printf
36#define mbedtls_snprintf snprintf
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010037#define mbedtls_exit exit
38#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
39#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Rich Evansf90016a2015-01-19 14:26:37 +000040#endif
41
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020042#if !defined(MBEDTLS_BIGNUM_C) || !defined(MBEDTLS_CERTS_C) || \
43 !defined(MBEDTLS_ENTROPY_C) || !defined(MBEDTLS_SSL_TLS_C) || \
44 !defined(MBEDTLS_SSL_SRV_C) || !defined(MBEDTLS_NET_C) || \
45 !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_CTR_DRBG_C) || \
46 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_FS_IO) || \
47 !defined(MBEDTLS_THREADING_C) || !defined(MBEDTLS_THREADING_PTHREAD) || \
48 !defined(MBEDTLS_PEM_PARSE_C)
Rich Evans85b05ec2015-02-12 11:37:29 +000049int main( void )
Paul Bakkerf9c49532013-12-19 15:40:58 +010050{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020051 mbedtls_printf("MBEDTLS_BIGNUM_C and/or MBEDTLS_CERTS_C and/or MBEDTLS_ENTROPY_C "
52 "and/or MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_SRV_C and/or "
53 "MBEDTLS_NET_C and/or MBEDTLS_RSA_C and/or "
54 "MBEDTLS_CTR_DRBG_C and/or MBEDTLS_X509_CRT_PARSE_C and/or "
55 "MBEDTLS_THREADING_C and/or MBEDTLS_THREADING_PTHREAD "
56 "and/or MBEDTLS_PEM_PARSE_C not defined.\n");
Paul Bakkerf9c49532013-12-19 15:40:58 +010057 return( 0 );
58}
59#else
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010060
61#include <stdlib.h>
62#include <string.h>
63
64#if defined(_WIN32)
65#include <windows.h>
66#endif
67
68#include "mbedtls/entropy.h"
69#include "mbedtls/ctr_drbg.h"
70#include "mbedtls/certs.h"
71#include "mbedtls/x509.h"
72#include "mbedtls/ssl.h"
Andres AG788aa4a2016-09-14 14:32:09 +010073#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010074#include "mbedtls/error.h"
75
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020076#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010077#include "mbedtls/ssl_cache.h"
78#endif
79
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020080#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010081#include "mbedtls/memory_buffer_alloc.h"
82#endif
83
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010084#if defined(MBEDTLS_CHECK_PARAMS)
85#include "mbedtls/platform_util.h"
86void mbedtls_param_failed( const char *failure_condition,
87 const char *file,
88 int line )
89{
90 mbedtls_printf( "%s:%i: Input param failed - %s\n",
91 file, line, failure_condition );
92 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
93}
94#endif
95
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010096#define HTTP_RESPONSE \
97 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
98 "<h2>mbed TLS Test Server</h2>\r\n" \
99 "<p>Successful connection using: %s</p>\r\n"
100
101#define DEBUG_LEVEL 0
102
103#define MAX_NUM_THREADS 5
104
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200105mbedtls_threading_mutex_t debug_mutex;
Paul Bakkerf9c49532013-12-19 15:40:58 +0100106
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200107static void my_mutexed_debug( void *ctx, int level,
108 const char *file, int line,
109 const char *str )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100110{
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200111 long int thread_id = (long int) pthread_self();
112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113 mbedtls_mutex_lock( &debug_mutex );
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +0200114
115 ((void) level);
116 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: [ #%ld ] %s",
117 file, line, thread_id, str );
118 fflush( (FILE *) ctx );
119
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200120 mbedtls_mutex_unlock( &debug_mutex );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100121}
122
123typedef struct {
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200124 mbedtls_net_context client_fd;
Paul Bakkerf9c49532013-12-19 15:40:58 +0100125 int thread_complete;
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200126 const mbedtls_ssl_config *config;
Paul Bakkerf9c49532013-12-19 15:40:58 +0100127} thread_info_t;
128
129typedef struct {
130 int active;
131 thread_info_t data;
132 pthread_t thread;
133} pthread_info_t;
134
Paul Bakkerf9c49532013-12-19 15:40:58 +0100135static thread_info_t base_info;
136static pthread_info_t threads[MAX_NUM_THREADS];
137
138static void *handle_ssl_connection( void *data )
139{
140 int ret, len;
141 thread_info_t *thread_info = (thread_info_t *) data;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200142 mbedtls_net_context *client_fd = &thread_info->client_fd;
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200143 long int thread_id = (long int) pthread_self();
Paul Bakkerf9c49532013-12-19 15:40:58 +0100144 unsigned char buf[1024];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145 mbedtls_ssl_context ssl;
Paul Bakkerf9c49532013-12-19 15:40:58 +0100146
Manuel Pégourié-Gonnard955028f2014-07-12 01:27:34 +0200147 /* Make sure memory references are valid */
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200148 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnard955028f2014-07-12 01:27:34 +0200149
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200150 mbedtls_printf( " [ #%ld ] Setting up SSL/TLS data\n", thread_id );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100151
152 /*
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200153 * 4. Get the SSL context ready
Paul Bakkerf9c49532013-12-19 15:40:58 +0100154 */
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200155 if( ( ret = mbedtls_ssl_setup( &ssl, thread_info->config ) ) != 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100156 {
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200157 mbedtls_printf( " [ #%ld ] failed: mbedtls_ssl_setup returned -0x%04x\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100158 thread_id, -ret );
159 goto thread_exit;
160 }
161
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200162 mbedtls_ssl_set_bio( &ssl, client_fd, mbedtls_net_send, mbedtls_net_recv, NULL );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100163
Paul Bakkerf9c49532013-12-19 15:40:58 +0100164 /*
165 * 5. Handshake
166 */
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200167 mbedtls_printf( " [ #%ld ] Performing the SSL/TLS handshake\n", thread_id );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100168
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100170 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100171 if( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100172 {
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200173 mbedtls_printf( " [ #%ld ] failed: mbedtls_ssl_handshake returned -0x%04x\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100174 thread_id, -ret );
175 goto thread_exit;
176 }
177 }
178
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200179 mbedtls_printf( " [ #%ld ] ok\n", thread_id );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100180
181 /*
182 * 6. Read the HTTP Request
183 */
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200184 mbedtls_printf( " [ #%ld ] < Read from client\n", thread_id );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100185
186 do
187 {
188 len = sizeof( buf ) - 1;
189 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190 ret = mbedtls_ssl_read( &ssl, buf, len );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100191
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100192 if( ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100193 continue;
194
195 if( ret <= 0 )
196 {
197 switch( ret )
198 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200199 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200200 mbedtls_printf( " [ #%ld ] connection was closed gracefully\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100201 thread_id );
202 goto thread_exit;
203
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200204 case MBEDTLS_ERR_NET_CONN_RESET:
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200205 mbedtls_printf( " [ #%ld ] connection was reset by peer\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100206 thread_id );
207 goto thread_exit;
208
209 default:
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200210 mbedtls_printf( " [ #%ld ] mbedtls_ssl_read returned -0x%04x\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100211 thread_id, -ret );
212 goto thread_exit;
213 }
Paul Bakkerf9c49532013-12-19 15:40:58 +0100214 }
215
216 len = ret;
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200217 mbedtls_printf( " [ #%ld ] %d bytes read\n=====\n%s\n=====\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100218 thread_id, len, (char *) buf );
219
220 if( ret > 0 )
221 break;
222 }
223 while( 1 );
224
225 /*
226 * 7. Write the 200 Response
227 */
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200228 mbedtls_printf( " [ #%ld ] > Write to client:\n", thread_id );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100229
230 len = sprintf( (char *) buf, HTTP_RESPONSE,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100232
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200233 while( ( ret = mbedtls_ssl_write( &ssl, buf, len ) ) <= 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100234 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235 if( ret == MBEDTLS_ERR_NET_CONN_RESET )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100236 {
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200237 mbedtls_printf( " [ #%ld ] failed: peer closed the connection\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100238 thread_id );
239 goto thread_exit;
240 }
241
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100242 if( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100243 {
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200244 mbedtls_printf( " [ #%ld ] failed: mbedtls_ssl_write returned -0x%04x\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100245 thread_id, ret );
246 goto thread_exit;
247 }
248 }
249
250 len = ret;
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200251 mbedtls_printf( " [ #%ld ] %d bytes written\n=====\n%s\n=====\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100252 thread_id, len, (char *) buf );
253
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200254 mbedtls_printf( " [ #%ld ] . Closing the connection...", thread_id );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100255
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200256 while( ( ret = mbedtls_ssl_close_notify( &ssl ) ) < 0 )
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100257 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100258 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
259 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100260 {
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200261 mbedtls_printf( " [ #%ld ] failed: mbedtls_ssl_close_notify returned -0x%04x\n",
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100262 thread_id, ret );
263 goto thread_exit;
264 }
265 }
266
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200267 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100268
Paul Bakkerf9c49532013-12-19 15:40:58 +0100269 ret = 0;
270
271thread_exit:
272
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200273#ifdef MBEDTLS_ERROR_C
Paul Bakkerf9c49532013-12-19 15:40:58 +0100274 if( ret != 0 )
275 {
276 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200277 mbedtls_strerror( ret, error_buf, 100 );
Manuel Pégourié-Gonnard30eceb72015-05-11 14:42:56 +0200278 mbedtls_printf(" [ #%ld ] Last error was: -0x%04x - %s\n\n",
Paul Bakkerf9c49532013-12-19 15:40:58 +0100279 thread_id, -ret, error_buf );
280 }
281#endif
282
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200283 mbedtls_net_free( client_fd );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200284 mbedtls_ssl_free( &ssl );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100285
286 thread_info->thread_complete = 1;
287
288 return( NULL );
289}
290
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200291static int thread_create( mbedtls_net_context *client_fd )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100292{
293 int ret, i;
294
295 /*
296 * Find in-active or finished thread slot
297 */
298 for( i = 0; i < MAX_NUM_THREADS; i++ )
299 {
300 if( threads[i].active == 0 )
301 break;
302
303 if( threads[i].data.thread_complete == 1 )
304 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305 mbedtls_printf( " [ main ] Cleaning up thread %d\n", i );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100306 pthread_join(threads[i].thread, NULL );
307 memset( &threads[i], 0, sizeof(pthread_info_t) );
308 break;
309 }
310 }
311
312 if( i == MAX_NUM_THREADS )
313 return( -1 );
314
315 /*
316 * Fill thread-info for thread
317 */
318 memcpy( &threads[i].data, &base_info, sizeof(base_info) );
319 threads[i].active = 1;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200320 memcpy( &threads[i].data.client_fd, client_fd, sizeof( mbedtls_net_context ) );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100321
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200322 if( ( ret = pthread_create( &threads[i].thread, NULL, handle_ssl_connection,
323 &threads[i].data ) ) != 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100324 {
325 return( ret );
326 }
327
328 return( 0 );
329}
330
Rich Evans85b05ec2015-02-12 11:37:29 +0000331int main( void )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100332{
333 int ret;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200334 mbedtls_net_context listen_fd, client_fd;
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200335 const char pers[] = "ssl_pthread_server";
Paul Bakkerf9c49532013-12-19 15:40:58 +0100336
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337 mbedtls_entropy_context entropy;
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200338 mbedtls_ctr_drbg_context ctr_drbg;
339 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200340 mbedtls_x509_crt srvcert;
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200341 mbedtls_x509_crt cachain;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200342 mbedtls_pk_context pkey;
343#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Paul Bakkerf9c49532013-12-19 15:40:58 +0100344 unsigned char alloc_buf[100000];
345#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200346#if defined(MBEDTLS_SSL_CACHE_C)
347 mbedtls_ssl_cache_context cache;
Paul Bakkerf9c49532013-12-19 15:40:58 +0100348#endif
349
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200350#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
351 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100352#endif
353
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200354#if defined(MBEDTLS_SSL_CACHE_C)
355 mbedtls_ssl_cache_init( &cache );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100356#endif
357
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200358 mbedtls_x509_crt_init( &srvcert );
359 mbedtls_x509_crt_init( &cachain );
360
361 mbedtls_ssl_config_init( &conf );
362 mbedtls_ctr_drbg_init( &ctr_drbg );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100363 memset( threads, 0, sizeof(threads) );
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200364 mbedtls_net_init( &listen_fd );
365 mbedtls_net_init( &client_fd );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100366
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200367 mbedtls_mutex_init( &debug_mutex );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100368
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200369 base_info.config = &conf;
370
Paul Bakkerf9c49532013-12-19 15:40:58 +0100371 /*
372 * We use only a single entropy source that is used in all the threads.
373 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200374 mbedtls_entropy_init( &entropy );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100375
376 /*
377 * 1. Load the certificates and private RSA key
378 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200379 mbedtls_printf( "\n . Loading the server cert. and key..." );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100380 fflush( stdout );
381
Paul Bakkerf9c49532013-12-19 15:40:58 +0100382 /*
383 * This demonstration program uses embedded test certificates.
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200384 * Instead, you may want to use mbedtls_x509_crt_parse_file() to read the
385 * server and CA certificates, as well as mbedtls_pk_parse_keyfile().
Paul Bakkerf9c49532013-12-19 15:40:58 +0100386 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200387 ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) mbedtls_test_srv_crt,
388 mbedtls_test_srv_crt_len );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100389 if( ret != 0 )
390 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200391 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100392 goto exit;
393 }
394
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200395 ret = mbedtls_x509_crt_parse( &cachain, (const unsigned char *) mbedtls_test_cas_pem,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396 mbedtls_test_cas_pem_len );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100397 if( ret != 0 )
398 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200399 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100400 goto exit;
401 }
402
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200403 mbedtls_pk_init( &pkey );
404 ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_srv_key,
405 mbedtls_test_srv_key_len, NULL, 0 );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100406 if( ret != 0 )
407 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200408 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned %d\n\n", ret );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100409 goto exit;
410 }
411
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200412 mbedtls_printf( " ok\n" );
413
414 /*
415 * 1b. Seed the random number generator
416 */
417 mbedtls_printf( " . Seeding the random number generator..." );
418
419 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy,
420 (const unsigned char *) pers,
421 strlen( pers ) ) ) != 0 )
422 {
423 mbedtls_printf( " failed: mbedtls_ctr_drbg_seed returned -0x%04x\n",
424 -ret );
425 goto exit;
426 }
Paul Bakkerf9c49532013-12-19 15:40:58 +0100427
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200428 mbedtls_printf( " ok\n" );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100429
430 /*
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200431 * 1c. Prepare SSL configuration
432 */
433 mbedtls_printf( " . Setting up the SSL data...." );
434
435 if( ( ret = mbedtls_ssl_config_defaults( &conf,
436 MBEDTLS_SSL_IS_SERVER,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +0200437 MBEDTLS_SSL_TRANSPORT_STREAM,
438 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200439 {
440 mbedtls_printf( " failed: mbedtls_ssl_config_defaults returned -0x%04x\n",
441 -ret );
442 goto exit;
443 }
444
445 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
446 mbedtls_ssl_conf_dbg( &conf, my_mutexed_debug, stdout );
447
448 /* mbedtls_ssl_cache_get() and mbedtls_ssl_cache_set() are thread-safe if
449 * MBEDTLS_THREADING_C is set.
450 */
451#if defined(MBEDTLS_SSL_CACHE_C)
452 mbedtls_ssl_conf_session_cache( &conf, &cache,
453 mbedtls_ssl_cache_get,
454 mbedtls_ssl_cache_set );
455#endif
456
457 mbedtls_ssl_conf_ca_chain( &conf, &cachain, NULL );
458 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert, &pkey ) ) != 0 )
459 {
460 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
461 goto exit;
462 }
463
464 mbedtls_printf( " ok\n" );
465
466
467 /*
Paul Bakkerf9c49532013-12-19 15:40:58 +0100468 * 2. Setup the listening TCP socket
469 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200470 mbedtls_printf( " . Bind on https://localhost:4433/ ..." );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100471 fflush( stdout );
472
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200473 if( ( ret = mbedtls_net_bind( &listen_fd, NULL, "4433", MBEDTLS_NET_PROTO_TCP ) ) != 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100474 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200475 mbedtls_printf( " failed\n ! mbedtls_net_bind returned %d\n\n", ret );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100476 goto exit;
477 }
478
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200479 mbedtls_printf( " ok\n" );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100480
481reset:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200482#ifdef MBEDTLS_ERROR_C
Paul Bakkerf9c49532013-12-19 15:40:58 +0100483 if( ret != 0 )
484 {
485 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200486 mbedtls_strerror( ret, error_buf, 100 );
487 mbedtls_printf( " [ main ] Last error was: -0x%04x - %s\n", -ret, error_buf );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100488 }
489#endif
490
491 /*
492 * 3. Wait until a client connects
493 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200494 mbedtls_printf( " [ main ] Waiting for a remote connection\n" );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100495
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200496 if( ( ret = mbedtls_net_accept( &listen_fd, &client_fd,
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +0200497 NULL, 0, NULL ) ) != 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100498 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200499 mbedtls_printf( " [ main ] failed: mbedtls_net_accept returned -0x%04x\n", ret );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100500 goto exit;
501 }
502
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200503 mbedtls_printf( " [ main ] ok\n" );
504 mbedtls_printf( " [ main ] Creating a new thread\n" );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100505
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200506 if( ( ret = thread_create( &client_fd ) ) != 0 )
Paul Bakkerf9c49532013-12-19 15:40:58 +0100507 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200508 mbedtls_printf( " [ main ] failed: thread_create returned %d\n", ret );
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200509 mbedtls_net_free( &client_fd );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100510 goto reset;
511 }
512
513 ret = 0;
514 goto reset;
515
516exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200517 mbedtls_x509_crt_free( &srvcert );
518 mbedtls_pk_free( &pkey );
519#if defined(MBEDTLS_SSL_CACHE_C)
520 mbedtls_ssl_cache_free( &cache );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100521#endif
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200522 mbedtls_ctr_drbg_free( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200523 mbedtls_entropy_free( &entropy );
Manuel Pégourié-Gonnard0af00e82015-05-11 11:32:43 +0200524 mbedtls_ssl_config_free( &conf );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100525
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200526 mbedtls_net_free( &listen_fd );
527
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200528 mbedtls_mutex_free( &debug_mutex );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100529
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200530#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
531 mbedtls_memory_buffer_alloc_free();
Paul Bakkerf9c49532013-12-19 15:40:58 +0100532#endif
533
534#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200535 mbedtls_printf( " Press Enter to exit this program.\n" );
Paul Bakkerf9c49532013-12-19 15:40:58 +0100536 fflush( stdout ); getchar();
537#endif
538
539 return( ret );
540}
541
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200542#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_CERTS_C && MBEDTLS_ENTROPY_C &&
543 MBEDTLS_SSL_TLS_C && MBEDTLS_SSL_SRV_C && MBEDTLS_NET_C &&
544 MBEDTLS_RSA_C && MBEDTLS_CTR_DRBG_C && MBEDTLS_THREADING_C &&
545 MBEDTLS_THREADING_PTHREAD && MBEDTLS_PEM_PARSE_C */