blob: eac63562551ba72c1912d2b7d20c219ffa05d74e [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19
Gilles Peskineab7ce962021-01-05 21:27:53 +010020#include "ssl_test_lib.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000021
Gilles Peskineab7ce962021-01-05 21:27:53 +010022#if defined(MBEDTLS_SSL_TEST_IMPOSSIBLE)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020023int main( void )
24{
Gilles Peskineab7ce962021-01-05 21:27:53 +010025 mbedtls_printf( MBEDTLS_SSL_TEST_IMPOSSIBLE );
26 mbedtls_exit( 0 );
27}
28#elif !defined(MBEDTLS_SSL_CLI_C)
29int main( void )
30{
31 mbedtls_printf( "MBEDTLS_SSL_CLI_C not defined.\n" );
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +020032 mbedtls_exit( 0 );
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020033}
Gilles Peskineb4df7542021-01-08 21:20:09 +010034#else /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_CLI_C */
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020035
Piotr Nowicki7d01ef62019-11-20 15:00:17 +010036/* Size of memory to be allocated for the heap, when using the library's memory
37 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
38#define MEMORY_HEAP_SIZE 120000
39
Hanno Beckere4ad3e82017-09-18 15:05:46 +010040#define MAX_REQUEST_SIZE 20000
41#define MAX_REQUEST_SIZE_STR "20000"
42
Paul Bakker9caf2d22010-02-18 19:37:19 +000043#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010044#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020045#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +000046#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +020047#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +000048#define DFL_DEBUG_LEVEL 0
Hanno Beckerbb425db2019-04-03 12:59:58 +010049#define DFL_CONTEXT_CRT_CB 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010050#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010051#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020052#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +020053#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +000054#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +000055#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +000056#define DFL_CRT_FILE ""
57#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +010058#define DFL_KEY_OPAQUE 0
Hanno Beckerca04fdc2018-11-07 16:22:14 +000059#define DFL_KEY_PWD ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020060#define DFL_PSK ""
Hanno Becker1d911cd2018-11-15 13:06:09 +000061#define DFL_PSK_OPAQUE 0
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020062#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020063#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +020064#define DFL_EC_MAX_OPS -1
Paul Bakker51936882011-02-20 16:05:58 +000065#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020066#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010067#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010068#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +020069#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +020070#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +000071#define DFL_MAX_VERSION -1
Gilles Peskinebc70a182017-05-09 15:59:24 +020072#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +010073#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +010075#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +010076#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +020077#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +020078#define DFL_RECONNECT 0
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010079#define DFL_RECO_DELAY 0
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +020080#define DFL_RECO_MODE 1
Hanno Becker90cb3592019-04-09 17:24:19 +010081#define DFL_CID_ENABLED 0
82#define DFL_CID_VALUE ""
Hanno Beckerb42ec0d2019-05-03 17:30:59 +010083#define DFL_CID_ENABLED_RENEGO -1
84#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +020085#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020086#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +020087#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +010088#define DFL_CURVES NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020089#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +020090#define DFL_HS_TO_MIN 0
91#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020092#define DFL_DTLS_MTU -1
Hanno Becker4d615912018-08-14 13:33:30 +010093#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +020094#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +020095#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +010096#define DFL_ETM -1
Jarno Lamsa9831c8a2019-05-29 13:33:32 +030097#define DFL_SERIALIZE 0
Piotr Nowicki3de298f2020-04-16 14:35:19 +020098#define DFL_CONTEXT_FILE ""
Jarno Lamsa9831c8a2019-05-29 13:33:32 +030099#define DFL_EXTENDED_MS_ENFORCE -1
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200100#define DFL_CA_CALLBACK 0
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300101#define DFL_EAP_TLS 0
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200102#define DFL_REPRODUCIBLE 0
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100103#define DFL_NSS_KEYLOG 0
104#define DFL_NSS_KEYLOG_FILE NULL
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100105#define DFL_SKIP_CLOSE_NOTIFY 0
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200106#define DFL_QUERY_CONFIG_MODE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300107#define DFL_USE_SRTP 0
Ron Eldor311b95a2018-07-08 08:50:31 +0300108#define DFL_SRTP_FORCE_PROFILE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300109#define DFL_SRTP_MKI ""
Paul Bakker0e6975b2009-02-10 22:19:10 +0000110
Paul Bakker93c32b22014-04-25 13:40:05 +0200111#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
112#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000113
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114#if defined(MBEDTLS_X509_CRT_PARSE_C)
Janos Follathae13beb2019-04-05 14:06:58 +0100115#define USAGE_CONTEXT_CRT_CB \
Hanno Beckerbb425db2019-04-03 12:59:58 +0100116 " context_crt_cb=%%d This determines whether the CRT verification callback is bound\n" \
117 " to the SSL configuration of the SSL context.\n" \
118 " Possible values:\n"\
119 " - 0 (default): Use CRT callback bound to configuration\n" \
120 " - 1: Use CRT callback bound to SSL context\n"
121#else
Janos Follathae13beb2019-04-05 14:06:58 +0100122#define USAGE_CONTEXT_CRT_CB ""
Hanno Beckerbb425db2019-04-03 12:59:58 +0100123#endif /* MBEDTLS_X509_CRT_PARSE_C */
124#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200125#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000126#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100127 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
128 " default: \"\" (pre-loaded)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100129 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100130 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
131 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100132 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100133 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
134 " default: \"\" (pre-loaded)\n" \
Hanno Beckerbffa54f2020-08-17 09:42:19 +0100135 " key_file=%%s default: \"\" (pre-loaded)\n"\
136 " key_pwd=%%s Password for key specified by key_file argument\n"\
137 " default: none\n"
Paul Bakker5690efc2011-05-26 13:16:06 +0000138#else
139#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140 " No file operations available (MBEDTLS_FS_IO not defined)\n"
141#endif /* MBEDTLS_FS_IO */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100142#else /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200143#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144#endif /* MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100145#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_X509_CRT_PARSE_C)
146#define USAGE_KEY_OPAQUE \
147 " key_opaque=%%d Handle your private key as if it were opaque\n" \
148 " default: 0 (disabled)\n"
149#else
150#define USAGE_KEY_OPAQUE ""
151#endif
Paul Bakkered27a042013-04-18 22:46:23 +0200152
Hanno Beckera0e20d02019-05-15 14:03:01 +0100153#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100154#define USAGE_CID \
155 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
156 " default: 0 (disabled)\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100157 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100158 " default: same as 'cid' parameter\n" \
Hanno Becker90cb3592019-04-09 17:24:19 +0100159 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100160 " default: \"\"\n" \
161 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100162 " default: same as 'cid_val' parameter\n"
Hanno Beckera0e20d02019-05-15 14:03:01 +0100163#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +0100164#define USAGE_CID ""
Hanno Beckera0e20d02019-05-15 14:03:01 +0100165#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +0100166
Gilles Peskineeccd8882020-03-10 12:19:08 +0100167#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckere86964c2018-10-23 11:37:50 +0100168#define USAGE_PSK_RAW \
Piotr Nowicki9926eaf2019-11-20 14:54:36 +0100169 " psk=%%s default: \"\" (disabled)\n" \
170 " The PSK values are in hex, without 0x.\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200171 " psk_identity=%%s default: \"Client_identity\"\n"
Hanno Beckere86964c2018-10-23 11:37:50 +0100172#if defined(MBEDTLS_USE_PSA_CRYPTO)
173#define USAGE_PSK_SLOT \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000174 " psk_opaque=%%d default: 0 (don't use opaque static PSK)\n" \
175 " Enable this to store the PSK configured through command line\n" \
176 " parameter `psk` in a PSA-based key slot.\n" \
Hanno Beckere86964c2018-10-23 11:37:50 +0100177 " Note: Currently only supported in conjunction with\n" \
178 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
179 " to force a particular PSK-only ciphersuite.\n" \
180 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
181 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
182 " with prepopulated key slots instead of importing raw key material.\n"
183#else
184#define USAGE_PSK_SLOT ""
185#endif /* MBEDTLS_USE_PSA_CRYPTO */
Hanno Becker1bac87c2019-03-29 12:02:26 +0000186#define USAGE_PSK USAGE_PSK_RAW USAGE_PSK_SLOT
187#else
188#define USAGE_PSK ""
Gilles Peskineeccd8882020-03-10 12:19:08 +0100189#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Hanno Becker1bac87c2019-03-29 12:02:26 +0000190
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200191#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
192#define USAGE_CA_CALLBACK \
193 " ca_callback=%%d default: 0 (disabled)\n" \
194 " Enable this to use the trusted certificate callback function\n"
195#else
196#define USAGE_CA_CALLBACK ""
197#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Paul Bakker5690efc2011-05-26 13:16:06 +0000198
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200199#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200200#define USAGE_TICKETS \
201 " tickets=%%d default: 1 (enabled)\n"
202#else
203#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200204#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200205
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300206#if defined(MBEDTLS_SSL_EXPORT_KEYS)
207#define USAGE_EAP_TLS \
208 " eap_tls=%%d default: 0 (disabled)\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100209#define USAGE_NSS_KEYLOG \
Hanno Beckerbc5308c2019-09-09 11:38:51 +0100210 " nss_keylog=%%d default: 0 (disabled)\n" \
211 " This cannot be used with eap_tls=1\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100212#define USAGE_NSS_KEYLOG_FILE \
213 " nss_keylog_file=%%s\n"
Ron Eldor65b56ef2019-09-26 16:40:48 +0300214#if defined(MBEDTLS_SSL_DTLS_SRTP)
215#define USAGE_SRTP \
216 " use_srtp=%%d default: 0 (disabled)\n" \
217 " This cannot be used with eap_tls=1 or "\
218 " nss_keylog=1\n" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200219 " srtp_force_profile=%%d default: 0 (all enabled)\n" \
Ron Eldor65b56ef2019-09-26 16:40:48 +0300220 " available profiles:\n" \
221 " 1 - SRTP_AES128_CM_HMAC_SHA1_80\n" \
222 " 2 - SRTP_AES128_CM_HMAC_SHA1_32\n" \
223 " 3 - SRTP_NULL_HMAC_SHA1_80\n" \
224 " 4 - SRTP_NULL_HMAC_SHA1_32\n" \
225 " mki=%%s default: \"\" (in hex, without 0x)\n"
226#else /* MBEDTLS_SSL_DTLS_SRTP */
227#define USAGE_SRTP ""
228#endif
229#else /* MBEDTLS_SSL_EXPORT_KEYS */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300230#define USAGE_EAP_TLS ""
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100231#define USAGE_NSS_KEYLOG ""
232#define USAGE_NSS_KEYLOG_FILE ""
Ron Eldor65b56ef2019-09-26 16:40:48 +0300233#define USAGE_SRTP ""
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300234#endif /* MBEDTLS_SSL_EXPORT_KEYS */
235
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200236#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Paul Bakker1f2bc622013-08-15 13:45:55 +0200237#define USAGE_TRUNC_HMAC \
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +0100238 " trunc_hmac=%%d default: library default\n"
Paul Bakker1f2bc622013-08-15 13:45:55 +0200239#else
240#define USAGE_TRUNC_HMAC ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200241#endif /* MBEDTLS_SSL_TRUNCATED_HMAC */
Paul Bakker1f2bc622013-08-15 13:45:55 +0200242
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200244#define USAGE_MAX_FRAG_LEN \
245 " max_frag_len=%%d default: 16384 (tls default)\n" \
246 " options: 512, 1024, 2048, 4096\n"
247#else
248#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200250
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100252#define USAGE_RECSPLIT \
Manuel Pégourié-Gonnardbf27eaa2015-06-11 17:02:10 +0200253 " recsplit=0/1 default: (library default: on)\n"
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100254#else
255#define USAGE_RECSPLIT
256#endif
257
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200258#if defined(MBEDTLS_DHM_C)
259#define USAGE_DHMLEN \
260 " dhmlen=%%d default: (library default: 1024 bits)\n"
261#else
262#define USAGE_DHMLEN
263#endif
264
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200265#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200266#define USAGE_ALPN \
267 " alpn=%%s default: \"\" (disabled)\n" \
268 " example: spdy/1,http/1.1\n"
269#else
270#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200271#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200272
Hanno Beckere6706e62017-05-15 16:05:15 +0100273#if defined(MBEDTLS_ECP_C)
274#define USAGE_CURVES \
275 " curves=a,b,c,d default: \"default\" (library default)\n" \
276 " example: \"secp521r1,brainpoolP512r1\"\n" \
277 " - use \"none\" for empty list\n" \
278 " - see mbedtls_ecp_curve_list()\n" \
279 " for acceptable curve names\n"
280#else
281#define USAGE_CURVES ""
282#endif
283
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200284#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200285#define USAGE_DTLS \
286 " dtls=%%d default: 0 (TLS)\n" \
287 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200288 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Becker4d615912018-08-14 13:33:30 +0100289 " mtu=%%d default: (library default: unlimited)\n" \
290 " dgram_packing=%%d default: 1 (allowed)\n" \
291 " allow or forbid packing of multiple\n" \
292 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200293#else
294#define USAGE_DTLS ""
295#endif
296
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200297#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200298#define USAGE_FALLBACK \
299 " fallback=0/1 default: (library default: off)\n"
300#else
301#define USAGE_FALLBACK ""
302#endif
303
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200304#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200305#define USAGE_EMS \
306 " extended_ms=0/1 default: (library default: on)\n"
307#else
308#define USAGE_EMS ""
309#endif
310
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200311#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100312#define USAGE_ETM \
313 " etm=0/1 default: (library default: on)\n"
314#else
315#define USAGE_ETM ""
316#endif
317
Philippe Antoine738153a2019-06-18 20:16:43 +0200318#define USAGE_REPRODUCIBLE \
319 " reproducible=0/1 default: 0 (disabled)\n"
320
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200321#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100322#define USAGE_RENEGO \
323 " renegotiation=%%d default: 0 (disabled)\n" \
324 " renegotiate=%%d default: 0 (disabled)\n"
325#else
326#define USAGE_RENEGO ""
327#endif
328
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200329#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
330#define USAGE_ECJPAKE \
331 " ecjpake_pw=%%s default: none (disabled)\n"
332#else
333#define USAGE_ECJPAKE ""
334#endif
335
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200336#if defined(MBEDTLS_ECP_RESTARTABLE)
337#define USAGE_ECRESTART \
338 " ec_max_ops=%%s default: library default (restart disabled)\n"
339#else
340#define USAGE_ECRESTART ""
341#endif
342
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300343#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
344#define USAGE_SERIALIZATION \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200345 " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
346 " options: 1 (serialize)\n" \
347 " 2 (serialize with re-initialization)\n" \
348 " context_file=%%s The file path to write a serialized connection\n"\
349 " in the form of base64 code (serialize option\n" \
350 " must be set)\n" \
351 " default: \"\" (do nothing)\n" \
352 " option: a file path\n"
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300353#else
354#define USAGE_SERIALIZATION ""
355#endif
356
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200357/* USAGE is arbitrarily split to stay under the portable string literal
358 * length limit: 4095 bytes in C99. */
359#define USAGE1 \
Paul Bakker67968392010-07-18 08:28:20 +0000360 "\n usage: ssl_client2 param=<>...\n" \
361 "\n acceptable parameters:\n" \
362 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100363 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000364 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000365 " request_page=%%s default: \".\"\n" \
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +0100366 " request_size=%%d default: about 34 (basic request)\n" \
367 " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \
368 " If 0, in the first exchange only an empty\n" \
369 " application data message is sent followed by\n" \
370 " a second non-empty message before attempting\n" \
371 " to read a response from the server\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100372 " debug_level=%%d default: 0 (disabled)\n" \
373 " nbio=%%d default: 0 (blocking I/O)\n" \
374 " options: 1 (non-blocking), 2 (added delays)\n" \
375 " event=%%d default: 0 (loop)\n" \
376 " options: 1 (level-triggered, implies nbio=1),\n" \
377 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200378 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100379 " skip_close_notify=%%d default: 0 (send close_notify)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100380 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200381 USAGE_DTLS \
Hanno Becker90cb3592019-04-09 17:24:19 +0100382 USAGE_CID \
Ron Eldor6ea64512018-07-02 10:08:07 +0300383 USAGE_SRTP \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200384 "\n"
385#define USAGE2 \
Hanno Becker16970d22017-10-10 15:56:37 +0100386 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100387 " options: none, optional, required\n" \
388 USAGE_IO \
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100389 USAGE_KEY_OPAQUE \
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200390 USAGE_CA_CALLBACK \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100391 "\n" \
392 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200393 USAGE_ECJPAKE \
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200394 USAGE_ECRESTART \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200395 "\n"
396#define USAGE3 \
Hanno Becker16970d22017-10-10 15:56:37 +0100397 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100398 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200399 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200400 " reconnect=%%d number of reconnections using session resumption\n" \
401 " default: 0 (disabled)\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200402 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnard686adb42019-06-03 09:55:16 +0200403 " reco_mode=%%d 0: copy session, 1: serialize session\n" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200404 " default: 1\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200405 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200406 USAGE_TICKETS \
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300407 USAGE_EAP_TLS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100408 USAGE_MAX_FRAG_LEN \
409 USAGE_TRUNC_HMAC \
Janos Follathae13beb2019-04-05 14:06:58 +0100410 USAGE_CONTEXT_CRT_CB \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200411 USAGE_ALPN \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200412 USAGE_FALLBACK \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200413 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100414 USAGE_ETM \
Philippe Antoine738153a2019-06-18 20:16:43 +0200415 USAGE_REPRODUCIBLE \
Hanno Beckere6706e62017-05-15 16:05:15 +0100416 USAGE_CURVES \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100417 USAGE_RECSPLIT \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200418 USAGE_DHMLEN \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200419 "\n"
420#define USAGE4 \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200421 " allow_sha1=%%d default: 0\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200422 " min_version=%%s default: (library default: tls1)\n" \
423 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000424 " force_version=%%s default: \"\" (none)\n" \
Mateusz Starzyk06b07fb2021-02-18 13:55:21 +0100425 " options: tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \
Paul Bakker1d29fb52012-09-28 13:28:45 +0000426 "\n" \
Paul Bakker51936882011-02-20 16:05:58 +0000427 " force_ciphersuite=<name> default: all enabled\n"\
Andres Amaya Garciabc818842018-10-16 21:08:38 +0100428 " query_config=<name> return 0 if the specified\n" \
429 " configuration macro is defined and 1\n" \
430 " otherwise. The expansion of the macro\n" \
431 " is printed if it is defined\n" \
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300432 USAGE_SERIALIZATION \
Paul Bakker51936882011-02-20 16:05:58 +0000433 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000434
Hanno Becker8651a432017-06-09 16:13:22 +0100435#define ALPN_LIST_SIZE 10
436#define CURVE_LIST_SIZE 20
437
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500438
Rich Evans85b05ec2015-02-12 11:37:29 +0000439/*
440 * global options
441 */
442struct options
443{
444 const char *server_name; /* hostname of the server (client only) */
445 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200446 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000447 int debug_level; /* level of debugging */
448 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100449 int event; /* loop or event-driven IO? level or edge triggered? */
450 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000451 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000452 const char *request_page; /* page on server to request */
453 int request_size; /* pad request with header to requested size */
454 const char *ca_file; /* the file with the CA certificate(s) */
455 const char *ca_path; /* the path with the CA certificate(s) reside */
456 const char *crt_file; /* the file with the client certificate */
457 const char *key_file; /* the file with the client key */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100458 int key_opaque; /* handle private key as if it were opaque */
Hanno Beckere86964c2018-10-23 11:37:50 +0100459#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000460 int psk_opaque;
Hanno Beckere86964c2018-10-23 11:37:50 +0100461#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200462#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Beckercbb59032019-03-28 14:14:22 +0000463 int ca_callback; /* Use callback for trusted certificate list */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200464#endif
Hanno Beckerca04fdc2018-11-07 16:22:14 +0000465 const char *key_pwd; /* the password for the client key */
Rich Evans85b05ec2015-02-12 11:37:29 +0000466 const char *psk; /* the pre-shared key */
467 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200468 const char *ecjpake_pw; /* the EC J-PAKE password */
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200469 int ec_max_ops; /* EC consecutive operations limit */
Rich Evans85b05ec2015-02-12 11:37:29 +0000470 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
471 int renegotiation; /* enable / disable renegotiation */
472 int allow_legacy; /* allow legacy renegotiation */
473 int renegotiate; /* attempt renegotiation? */
474 int renego_delay; /* delay before enforcing renegotiation */
475 int exchanges; /* number of data exchanges */
476 int min_version; /* minimum protocol version accepted */
477 int max_version; /* maximum protocol version accepted */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200478 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000479 int auth_mode; /* verify mode for connection */
480 unsigned char mfl_code; /* code for maximum fragment length */
481 int trunc_hmac; /* negotiate truncated hmac or not */
482 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200483 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000484 int reconnect; /* attempt to resume session */
485 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200486 int reco_mode; /* how to keep the session around */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200487 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000488 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100489 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000490 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000491 int transport; /* TLS or DTLS? */
492 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
493 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200494 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Rich Evans85b05ec2015-02-12 11:37:29 +0000495 int fallback; /* is this a fallback connection? */
Hanno Becker4d615912018-08-14 13:33:30 +0100496 int dgram_packing; /* allow/forbid datagram packing */
Rich Evans85b05ec2015-02-12 11:37:29 +0000497 int extended_ms; /* negotiate extended master secret? */
498 int etm; /* negotiate encrypt then mac? */
Hanno Beckerbb425db2019-04-03 12:59:58 +0100499 int context_crt_cb; /* use context-specific CRT verify callback */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300500 int eap_tls; /* derive EAP-TLS keying material? */
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100501 int nss_keylog; /* export NSS key log material */
502 const char *nss_keylog_file; /* NSS key log file */
Hanno Becker90cb3592019-04-09 17:24:19 +0100503 int cid_enabled; /* whether to use the CID extension or not */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100504 int cid_enabled_renego; /* whether to use the CID extension or not
505 * during renegotiation */
Hanno Becker90cb3592019-04-09 17:24:19 +0100506 const char *cid_val; /* the CID to use for incoming messages */
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300507 int serialize; /* serialize/deserialize connection */
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200508 const char *context_file; /* the file to write a serialized connection
509 * in the form of base64 code (serialize
510 * option must be set) */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100511 const char *cid_val_renego; /* the CID to use for incoming messages
512 * after renegotiation */
Philippe Antoine154feb22019-06-11 17:50:23 +0200513 int reproducible; /* make communication reproducible */
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100514 int skip_close_notify; /* skip sending the close_notify alert */
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200515 int query_config_mode; /* whether to read config */
Ron Eldor6ea64512018-07-02 10:08:07 +0300516 int use_srtp; /* Support SRTP */
517 int force_srtp_profile; /* SRTP protection profile to use or all */
Ron Eldoref72faf2018-07-12 11:54:20 +0300518 const char *mki; /* The dtls mki value to use */
Rich Evans85b05ec2015-02-12 11:37:29 +0000519} opt;
520
Gilles Peskine0d980b82021-01-05 23:34:27 +0100521#include "ssl_test_common_source.c"
Hanno Becker8b1af2f2019-07-03 17:02:43 +0100522
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200523#if defined(MBEDTLS_X509_CRT_PARSE_C)
Hanno Beckera1051b42019-02-26 11:38:29 +0000524static unsigned char peer_crt_info[1024];
Hanno Beckera9766c2c2019-02-25 17:43:18 +0000525
Rich Evans85b05ec2015-02-12 11:37:29 +0000526/*
527 * Enabled if debug_level > 1 in code below
528 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100529static int my_verify( void *data, mbedtls_x509_crt *crt,
530 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000531{
532 char buf[1024];
533 ((void) data);
534
Hanno Becker7ac83f92020-10-09 10:48:22 +0100535 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
536
Hanno Becker612a2f12020-10-09 09:19:39 +0100537#if !defined(MBEDTLS_X509_REMOVE_INFO)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200538 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
Hanno Beckera9766c2c2019-02-25 17:43:18 +0000539 if( depth == 0 )
540 memcpy( peer_crt_info, buf, sizeof( buf ) );
541
542 if( opt.debug_level == 0 )
543 return( 0 );
544
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200545 mbedtls_printf( "%s", buf );
Peter Kolbus9a969b62018-12-11 13:55:56 -0600546#else
547 ((void) crt);
548 ((void) depth);
549#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000550
Rich Evans85b05ec2015-02-12 11:37:29 +0000551 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200552 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100553 else
554 {
Hanno Becker7ac83f92020-10-09 10:48:22 +0100555 x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100556 mbedtls_printf( "%s\n", buf );
557 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000558
559 return( 0 );
560}
Gilles Peskinec11eb1f2021-01-05 22:23:14 +0100561#endif /* MBEDTLS_X509_CRT_PARSE_C */
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200562
Hanno Beckera0e20d02019-05-15 14:03:01 +0100563#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100564int report_cid_usage( mbedtls_ssl_context *ssl,
565 const char *additional_description )
566{
567 int ret;
568 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
569 size_t peer_cid_len;
570 int cid_negotiated;
571
572 if( opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM )
573 return( 0 );
574
Hanno Becker6ae14c02019-05-22 16:59:25 +0100575 /* Check if the use of a CID has been negotiated,
576 * but don't ask for the CID value and length.
577 *
578 * Note: Here and below, we're demonstrating the various ways
579 * in which mbedtls_ssl_get_peer_cid() can be called,
580 * depending on whether or not the length/value of the
581 * peer's CID is needed.
582 *
583 * An actual application, however, should use
584 * just one call to mbedtls_ssl_get_peer_cid(). */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100585 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
Hanno Becker6ae14c02019-05-22 16:59:25 +0100586 NULL, NULL );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100587 if( ret != 0 )
588 {
589 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200590 (unsigned int) -ret );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100591 return( ret );
592 }
593
594 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
595 {
596 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
597 {
598 mbedtls_printf( "(%s) Use of Connection ID was rejected by the server.\n",
599 additional_description );
600 }
601 }
602 else
603 {
604 size_t idx=0;
605 mbedtls_printf( "(%s) Use of Connection ID has been negotiated.\n",
606 additional_description );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100607
608 /* Ask for just the length of the peer's CID. */
609 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
610 NULL, &peer_cid_len );
611 if( ret != 0 )
612 {
613 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200614 (unsigned int) -ret );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100615 return( ret );
616 }
617
618 /* Ask for just length + value of the peer's CID. */
619 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
620 peer_cid, &peer_cid_len );
621 if( ret != 0 )
622 {
623 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200624 (unsigned int) -ret );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100625 return( ret );
626 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100627 mbedtls_printf( "(%s) Peer CID (length %u Bytes): ",
628 additional_description,
629 (unsigned) peer_cid_len );
630 while( idx < peer_cid_len )
631 {
632 mbedtls_printf( "%02x ", peer_cid[ idx ] );
633 idx++;
634 }
635 mbedtls_printf( "\n" );
636 }
637
638 return( 0 );
639}
Hanno Beckera0e20d02019-05-15 14:03:01 +0100640#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100641
Paul Bakker9caf2d22010-02-18 19:37:19 +0000642int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000643{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200644 int ret = 0, len, tail_len, i, written, frags, retry_left;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200645 int query_config_ret = 0;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200646 mbedtls_net_context server_fd;
Hanno Becker8b1af2f2019-07-03 17:02:43 +0100647 io_ctx_t io_ctx;
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100648
649 unsigned char buf[MAX_REQUEST_SIZE + 1];
650
Gilles Peskineeccd8882020-03-10 12:19:08 +0100651#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200652 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200653 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200654#endif
Hanno Becker90cb3592019-04-09 17:24:19 +0100655
Hanno Beckera0e20d02019-05-15 14:03:01 +0100656#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100657 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100658 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Becker90cb3592019-04-09 17:24:19 +0100659 size_t cid_len = 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100660 size_t cid_renego_len = 0;
Hanno Becker90cb3592019-04-09 17:24:19 +0100661#endif
662
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200663#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100664 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200665#endif
Piotr Nowicki7d01ef62019-11-20 15:00:17 +0100666
667#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
668 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
669#endif
670
Hanno Beckere6706e62017-05-15 16:05:15 +0100671#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +0100672 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100673 const mbedtls_ecp_curve_info *curve_cur;
674#endif
Ron Eldor6ea64512018-07-02 10:08:07 +0300675#if defined(MBEDTLS_SSL_DTLS_SRTP)
Johan Pascal85269572020-08-25 10:01:54 +0200676 unsigned char mki[MBEDTLS_TLS_SRTP_MAX_MKI_LENGTH];
Johan Pascal48f62e92020-08-22 22:04:20 +0200677 size_t mki_len=0;
Ron Eldor6ea64512018-07-02 10:08:07 +0300678#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100679
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200680 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000681
Hanno Beckere86964c2018-10-23 11:37:50 +0100682#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cronadc2ff22020-09-16 16:49:27 +0200683 psa_key_id_t slot = 0;
Hanno Beckere86964c2018-10-23 11:37:50 +0100684 psa_algorithm_t alg = 0;
Janos Follathbe4efc22019-08-08 11:38:18 +0100685 psa_key_attributes_t key_attributes;
Hanno Beckere86964c2018-10-23 11:37:50 +0100686 psa_status_t status;
687#endif
688
Gilles Peskineef86ab22017-05-05 18:59:02 +0200689#if defined(MBEDTLS_X509_CRT_PARSE_C)
690 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
691#endif
Gilles Peskinef1cb75f2021-01-13 18:46:01 +0100692 rng_context_t rng;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200693 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200694 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200695 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +0200696 unsigned char *session_data = NULL;
697 size_t session_data_len = 0;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200698#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200699 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200700#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200701#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200702 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200703 mbedtls_x509_crt cacert;
704 mbedtls_x509_crt clicert;
705 mbedtls_pk_context pkey;
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100706#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cronadc2ff22020-09-16 16:49:27 +0200707 psa_key_id_t key_slot = 0; /* invalid key slot */
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100708#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +0100709#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker9caf2d22010-02-18 19:37:19 +0000710 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000711 const int *list;
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +0200712#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
713 unsigned char *context_buf = NULL;
714 size_t context_buf_len;
715#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300716#if defined(MBEDTLS_SSL_EXPORT_KEYS)
717 unsigned char eap_tls_keymaterial[16];
718 unsigned char eap_tls_iv[8];
719 const char* eap_tls_label = "client EAP encryption";
720 eap_tls_keys eap_tls_keying;
Ron Eldor65b56ef2019-09-26 16:40:48 +0300721#if defined( MBEDTLS_SSL_DTLS_SRTP )
722 /*! master keys and master salt for SRTP generated during handshake */
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200723 unsigned char dtls_srtp_key_material[MBEDTLS_TLS_SRTP_MAX_KEY_MATERIAL_LENGTH];
724 const char* dtls_srtp_label = "EXTRACTOR-dtls_srtp";
725 dtls_srtp_keys dtls_srtp_keying;
726 const mbedtls_ssl_srtp_profile default_profiles[] = {
Johan Pascal43f94902020-09-22 12:25:52 +0200727 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80,
728 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32,
729 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80,
Johan Pascal253d0262020-09-22 13:04:45 +0200730 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32,
731 MBEDTLS_TLS_SRTP_UNSET
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200732 };
Ron Eldor65b56ef2019-09-26 16:40:48 +0300733#endif /* MBEDTLS_SSL_DTLS_SRTP */
734#endif /* MBEDTLS_SSL_EXPORT_KEYS */
Paul Bakker9caf2d22010-02-18 19:37:19 +0000735
Piotr Nowicki7d01ef62019-11-20 15:00:17 +0100736#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
737 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
738#endif
739
Gilles Peskine60fe6602021-02-16 18:56:42 +0100740#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +0100741 test_hooks_init( );
Gilles Peskine60fe6602021-02-16 18:56:42 +0100742#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +0100743
Paul Bakker1a207ec2011-02-06 13:22:40 +0000744 /*
745 * Make sure memory references are valid.
746 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200747 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200748 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200749 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200750 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Gilles Peskinef1cb75f2021-01-13 18:46:01 +0100751 rng_init( &rng );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200752#if defined(MBEDTLS_X509_CRT_PARSE_C)
753 mbedtls_x509_crt_init( &cacert );
754 mbedtls_x509_crt_init( &clicert );
755 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200756#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200757#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200758 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200759#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000760
Hanno Beckerb2b468b2018-11-12 17:46:59 +0000761#if defined(MBEDTLS_USE_PSA_CRYPTO)
762 status = psa_crypto_init();
763 if( status != PSA_SUCCESS )
764 {
765 mbedtls_fprintf( stderr, "Failed to initialize PSA Crypto implementation: %d\n",
766 (int) status );
767 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
768 goto exit;
769 }
Gilles Peskine48113eb2021-02-09 10:25:20 +0100770#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine21462112021-01-13 23:53:09 +0100771#if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
772 mbedtls_test_enable_insecure_external_rng( );
Gilles Peskine94ad8312021-01-25 13:42:28 +0100773#endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
Hanno Beckerb2b468b2018-11-12 17:46:59 +0000774
Paul Bakker9caf2d22010-02-18 19:37:19 +0000775 if( argc == 0 )
776 {
777 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000778 if( ret == 0 )
779 ret = 1;
780
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200781 mbedtls_printf( USAGE1 );
782 mbedtls_printf( USAGE2 );
783 mbedtls_printf( USAGE3 );
784 mbedtls_printf( USAGE4 );
Paul Bakker51936882011-02-20 16:05:58 +0000785
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200786 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000787 while( *list )
788 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200789 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200790 list++;
791 if( !*list )
792 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200793 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000794 list++;
795 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200796 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000797 goto exit;
798 }
799
800 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100801 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000802 opt.server_port = DFL_SERVER_PORT;
803 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker90cb3592019-04-09 17:24:19 +0100804 opt.cid_enabled = DFL_CID_ENABLED;
805 opt.cid_val = DFL_CID_VALUE;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100806 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
807 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100808 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100809 opt.event = DFL_EVENT;
Hanno Beckerbb425db2019-04-03 12:59:58 +0100810 opt.context_crt_cb = DFL_CONTEXT_CRT_CB;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200811 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200812 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000813 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200814 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000815 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000816 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000817 opt.crt_file = DFL_CRT_FILE;
818 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100819 opt.key_opaque = DFL_KEY_OPAQUE;
Hanno Beckerca04fdc2018-11-07 16:22:14 +0000820 opt.key_pwd = DFL_KEY_PWD;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200821 opt.psk = DFL_PSK;
Hanno Beckere86964c2018-10-23 11:37:50 +0100822#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000823 opt.psk_opaque = DFL_PSK_OPAQUE;
Hanno Beckere86964c2018-10-23 11:37:50 +0100824#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200825#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
826 opt.ca_callback = DFL_CA_CALLBACK;
827#endif
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200828 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200829 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200830 opt.ec_max_ops = DFL_EC_MAX_OPS;
Paul Bakker51936882011-02-20 16:05:58 +0000831 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Paul Bakker48916f92012-09-16 19:57:18 +0000832 opt.renegotiation = DFL_RENEGOTIATION;
833 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100834 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200835 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000836 opt.min_version = DFL_MIN_VERSION;
837 opt.max_version = DFL_MAX_VERSION;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200838 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100839 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200840 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200841 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100842 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200843 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200844 opt.reconnect = DFL_RECONNECT;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100845 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200846 opt.reco_mode = DFL_RECO_MODE;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200847 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200848 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200849 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100850 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200851 opt.transport = DFL_TRANSPORT;
852 opt.hs_to_min = DFL_HS_TO_MIN;
853 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200854 opt.dtls_mtu = DFL_DTLS_MTU;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200855 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200856 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100857 opt.etm = DFL_ETM;
Hanno Becker4d615912018-08-14 13:33:30 +0100858 opt.dgram_packing = DFL_DGRAM_PACKING;
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300859 opt.serialize = DFL_SERIALIZE;
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200860 opt.context_file = DFL_CONTEXT_FILE;
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300861 opt.eap_tls = DFL_EAP_TLS;
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200862 opt.reproducible = DFL_REPRODUCIBLE;
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100863 opt.nss_keylog = DFL_NSS_KEYLOG;
864 opt.nss_keylog_file = DFL_NSS_KEYLOG_FILE;
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100865 opt.skip_close_notify = DFL_SKIP_CLOSE_NOTIFY;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200866 opt.query_config_mode = DFL_QUERY_CONFIG_MODE;
Ron Eldor6ea64512018-07-02 10:08:07 +0300867 opt.use_srtp = DFL_USE_SRTP;
868 opt.force_srtp_profile = DFL_SRTP_FORCE_PROFILE;
869 opt.mki = DFL_SRTP_MKI;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000870
871 for( i = 1; i < argc; i++ )
872 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000873 p = argv[i];
874 if( ( q = strchr( p, '=' ) ) == NULL )
875 goto usage;
876 *q++ = '\0';
877
878 if( strcmp( p, "server_name" ) == 0 )
879 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100880 else if( strcmp( p, "server_addr" ) == 0 )
881 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000882 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200883 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100884 else if( strcmp( p, "dtls" ) == 0 )
885 {
886 int t = atoi( q );
887 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200888 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100889 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200890 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100891 else
892 goto usage;
893 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000894 else if( strcmp( p, "debug_level" ) == 0 )
895 {
896 opt.debug_level = atoi( q );
897 if( opt.debug_level < 0 || opt.debug_level > 65535 )
898 goto usage;
899 }
Hanno Beckerbb425db2019-04-03 12:59:58 +0100900 else if( strcmp( p, "context_crt_cb" ) == 0 )
901 {
902 opt.context_crt_cb = atoi( q );
903 if( opt.context_crt_cb != 0 && opt.context_crt_cb != 1 )
904 goto usage;
905 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100906 else if( strcmp( p, "nbio" ) == 0 )
907 {
908 opt.nbio = atoi( q );
909 if( opt.nbio < 0 || opt.nbio > 2 )
910 goto usage;
911 }
Hanno Becker16970d22017-10-10 15:56:37 +0100912 else if( strcmp( p, "event" ) == 0 )
913 {
914 opt.event = atoi( q );
915 if( opt.event < 0 || opt.event > 2 )
916 goto usage;
917 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200918 else if( strcmp( p, "read_timeout" ) == 0 )
919 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200920 else if( strcmp( p, "max_resend" ) == 0 )
921 {
922 opt.max_resend = atoi( q );
923 if( opt.max_resend < 0 )
924 goto usage;
925 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000926 else if( strcmp( p, "request_page" ) == 0 )
927 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +0200928 else if( strcmp( p, "request_size" ) == 0 )
929 {
930 opt.request_size = atoi( q );
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100931 if( opt.request_size < 0 ||
932 opt.request_size > MAX_REQUEST_SIZE )
Paul Bakker93c32b22014-04-25 13:40:05 +0200933 goto usage;
934 }
Paul Bakker5690efc2011-05-26 13:16:06 +0000935 else if( strcmp( p, "ca_file" ) == 0 )
936 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +0000937 else if( strcmp( p, "ca_path" ) == 0 )
938 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +0000939 else if( strcmp( p, "crt_file" ) == 0 )
940 opt.crt_file = q;
941 else if( strcmp( p, "key_file" ) == 0 )
942 opt.key_file = q;
Hanno Becker2d3ac682020-08-17 09:42:37 +0100943 else if( strcmp( p, "key_pwd" ) == 0 )
944 opt.key_pwd = q;
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100945#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_X509_CRT_PARSE_C)
946 else if( strcmp( p, "key_opaque" ) == 0 )
947 opt.key_opaque = atoi( q );
948#endif
Hanno Beckera0e20d02019-05-15 14:03:01 +0100949#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100950 else if( strcmp( p, "cid" ) == 0 )
951 {
952 opt.cid_enabled = atoi( q );
953 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
954 goto usage;
955 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100956 else if( strcmp( p, "cid_renego" ) == 0 )
957 {
958 opt.cid_enabled_renego = atoi( q );
959 if( opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1 )
960 goto usage;
961 }
Hanno Becker90cb3592019-04-09 17:24:19 +0100962 else if( strcmp( p, "cid_val" ) == 0 )
963 {
964 opt.cid_val = q;
965 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100966 else if( strcmp( p, "cid_val_renego" ) == 0 )
967 {
968 opt.cid_val_renego = q;
969 }
Hanno Beckera0e20d02019-05-15 14:03:01 +0100970#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200971 else if( strcmp( p, "psk" ) == 0 )
972 opt.psk = q;
Hanno Beckere86964c2018-10-23 11:37:50 +0100973#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000974 else if( strcmp( p, "psk_opaque" ) == 0 )
975 opt.psk_opaque = atoi( q );
Hanno Beckere86964c2018-10-23 11:37:50 +0100976#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200977#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
978 else if( strcmp( p, "ca_callback" ) == 0)
979 opt.ca_callback = atoi( q );
980#endif
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200981 else if( strcmp( p, "psk_identity" ) == 0 )
982 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200983 else if( strcmp( p, "ecjpake_pw" ) == 0 )
984 opt.ecjpake_pw = q;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200985 else if( strcmp( p, "ec_max_ops" ) == 0 )
986 opt.ec_max_ops = atoi( q );
Paul Bakker51936882011-02-20 16:05:58 +0000987 else if( strcmp( p, "force_ciphersuite" ) == 0 )
988 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200989 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +0000990
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +0200991 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +0000992 {
993 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +0000994 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +0000995 }
Paul Bakker51936882011-02-20 16:05:58 +0000996 opt.force_ciphersuite[1] = 0;
997 }
Paul Bakker48916f92012-09-16 19:57:18 +0000998 else if( strcmp( p, "renegotiation" ) == 0 )
999 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001000 opt.renegotiation = (atoi( q )) ?
1001 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1002 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +00001003 }
1004 else if( strcmp( p, "allow_legacy" ) == 0 )
1005 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001006 switch( atoi( q ) )
1007 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001008 case -1:
1009 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1010 break;
1011 case 0:
1012 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1013 break;
1014 case 1:
1015 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1016 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001017 default: goto usage;
1018 }
Paul Bakker48916f92012-09-16 19:57:18 +00001019 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001020 else if( strcmp( p, "renegotiate" ) == 0 )
1021 {
1022 opt.renegotiate = atoi( q );
1023 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1024 goto usage;
1025 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02001026 else if( strcmp( p, "exchanges" ) == 0 )
1027 {
1028 opt.exchanges = atoi( q );
1029 if( opt.exchanges < 1 )
1030 goto usage;
1031 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001032 else if( strcmp( p, "reconnect" ) == 0 )
1033 {
1034 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02001035 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001036 goto usage;
1037 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001038 else if( strcmp( p, "reco_delay" ) == 0 )
1039 {
1040 opt.reco_delay = atoi( q );
1041 if( opt.reco_delay < 0 )
1042 goto usage;
1043 }
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02001044 else if( strcmp( p, "reco_mode" ) == 0 )
1045 {
1046 opt.reco_mode = atoi( q );
1047 if( opt.reco_mode < 0 )
1048 goto usage;
1049 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001050 else if( strcmp( p, "reconnect_hard" ) == 0 )
1051 {
1052 opt.reconnect_hard = atoi( q );
1053 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
1054 goto usage;
1055 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001056 else if( strcmp( p, "tickets" ) == 0 )
1057 {
1058 opt.tickets = atoi( q );
1059 if( opt.tickets < 0 || opt.tickets > 2 )
1060 goto usage;
1061 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001062 else if( strcmp( p, "alpn" ) == 0 )
1063 {
1064 opt.alpn_string = q;
1065 }
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001066 else if( strcmp( p, "fallback" ) == 0 )
1067 {
1068 switch( atoi( q ) )
1069 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001070 case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break;
1071 case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001072 default: goto usage;
1073 }
1074 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001075 else if( strcmp( p, "extended_ms" ) == 0 )
1076 {
1077 switch( atoi( q ) )
1078 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001079 case 0:
1080 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1081 break;
1082 case 1:
1083 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1084 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001085 default: goto usage;
1086 }
1087 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001088 else if( strcmp( p, "curves" ) == 0 )
1089 opt.curves = q;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001090 else if( strcmp( p, "etm" ) == 0 )
1091 {
1092 switch( atoi( q ) )
1093 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001094 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1095 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001096 default: goto usage;
1097 }
1098 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001099 else if( strcmp( p, "min_version" ) == 0 )
1100 {
Mateusz Starzyk06b07fb2021-02-18 13:55:21 +01001101 if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001102 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001103 else if( strcmp( q, "tls1_1" ) == 0 ||
1104 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001105 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001106 else if( strcmp( q, "tls1_2" ) == 0 ||
1107 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001108 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001109 else
1110 goto usage;
1111 }
1112 else if( strcmp( p, "max_version" ) == 0 )
1113 {
Mateusz Starzyk06b07fb2021-02-18 13:55:21 +01001114 if( strcmp( q, "tls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001115 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001116 else if( strcmp( q, "tls1_1" ) == 0 ||
1117 strcmp( q, "dtls1" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001118 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001119 else if( strcmp( q, "tls1_2" ) == 0 ||
1120 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001121 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001122 else
1123 goto usage;
1124 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001125 else if( strcmp( p, "allow_sha1" ) == 0 )
1126 {
1127 switch( atoi( q ) )
1128 {
1129 case 0: opt.allow_sha1 = 0; break;
1130 case 1: opt.allow_sha1 = 1; break;
1131 default: goto usage;
1132 }
1133 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001134 else if( strcmp( p, "force_version" ) == 0 )
1135 {
Mateusz Starzyk06b07fb2021-02-18 13:55:21 +01001136 if( strcmp( q, "tls1" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001137 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001138 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1;
1139 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001140 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001141 else if( strcmp( q, "tls1_1" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001142 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001143 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1144 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001145 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001146 else if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001147 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001148 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1149 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001150 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001151 else if( strcmp( q, "dtls1" ) == 0 )
1152 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001153 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1154 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2;
1155 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001156 }
1157 else if( strcmp( q, "dtls1_2" ) == 0 )
1158 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001159 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1160 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1161 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001162 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001163 else
1164 goto usage;
1165 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001166 else if( strcmp( p, "auth_mode" ) == 0 )
1167 {
1168 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001169 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001170 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001171 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001172 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001173 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001174 else
1175 goto usage;
1176 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001177 else if( strcmp( p, "max_frag_len" ) == 0 )
1178 {
1179 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001180 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001181 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001182 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001183 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001184 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001185 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001186 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001187 else
1188 goto usage;
1189 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001190 else if( strcmp( p, "trunc_hmac" ) == 0 )
1191 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001192 switch( atoi( q ) )
1193 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001194 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1195 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001196 default: goto usage;
1197 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001198 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001199 else if( strcmp( p, "hs_timeout" ) == 0 )
1200 {
1201 if( ( p = strchr( q, '-' ) ) == NULL )
1202 goto usage;
1203 *p++ = '\0';
1204 opt.hs_to_min = atoi( q );
1205 opt.hs_to_max = atoi( p );
1206 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1207 goto usage;
1208 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001209 else if( strcmp( p, "mtu" ) == 0 )
1210 {
1211 opt.dtls_mtu = atoi( q );
1212 if( opt.dtls_mtu < 0 )
1213 goto usage;
1214 }
Hanno Becker4d615912018-08-14 13:33:30 +01001215 else if( strcmp( p, "dgram_packing" ) == 0 )
1216 {
1217 opt.dgram_packing = atoi( q );
1218 if( opt.dgram_packing != 0 &&
1219 opt.dgram_packing != 1 )
1220 {
1221 goto usage;
1222 }
1223 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001224 else if( strcmp( p, "recsplit" ) == 0 )
1225 {
1226 opt.recsplit = atoi( q );
1227 if( opt.recsplit < 0 || opt.recsplit > 1 )
1228 goto usage;
1229 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001230 else if( strcmp( p, "dhmlen" ) == 0 )
1231 {
1232 opt.dhmlen = atoi( q );
1233 if( opt.dhmlen < 0 )
1234 goto usage;
1235 }
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001236 else if( strcmp( p, "query_config" ) == 0 )
1237 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001238 opt.query_config_mode = 1;
1239 query_config_ret = query_config( q );
gabor-mezei-arm78595852020-04-28 10:40:30 +02001240 goto exit;
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001241 }
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001242 else if( strcmp( p, "serialize") == 0 )
1243 {
1244 opt.serialize = atoi( q );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03001245 if( opt.serialize < 0 || opt.serialize > 2)
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001246 goto usage;
1247 }
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001248 else if( strcmp( p, "context_file") == 0 )
1249 {
1250 opt.context_file = q;
1251 }
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001252 else if( strcmp( p, "eap_tls" ) == 0 )
1253 {
1254 opt.eap_tls = atoi( q );
1255 if( opt.eap_tls < 0 || opt.eap_tls > 1 )
1256 goto usage;
1257 }
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001258 else if( strcmp( p, "reproducible" ) == 0 )
1259 {
1260 opt.reproducible = 1;
1261 }
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001262 else if( strcmp( p, "nss_keylog" ) == 0 )
1263 {
1264 opt.nss_keylog = atoi( q );
1265 if( opt.nss_keylog < 0 || opt.nss_keylog > 1 )
1266 goto usage;
1267 }
1268 else if( strcmp( p, "nss_keylog_file" ) == 0 )
1269 {
1270 opt.nss_keylog_file = q;
1271 }
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01001272 else if( strcmp( p, "skip_close_notify" ) == 0 )
1273 {
1274 opt.skip_close_notify = atoi( q );
1275 if( opt.skip_close_notify < 0 || opt.skip_close_notify > 1 )
1276 goto usage;
Johan Pascalb64eab72020-04-24 02:53:49 +07001277 }
Ron Eldor6ea64512018-07-02 10:08:07 +03001278 else if( strcmp( p, "use_srtp" ) == 0 )
1279 {
1280 opt.use_srtp = atoi ( q );
1281 }
1282 else if( strcmp( p, "srtp_force_profile" ) == 0 )
1283 {
1284 opt.force_srtp_profile = atoi( q );
1285 }
1286 else if( strcmp( p, "mki" ) == 0 )
1287 {
1288 opt.mki = q;
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01001289 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001290 else
1291 goto usage;
1292 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001293
Hanno Beckerbc5308c2019-09-09 11:38:51 +01001294 if( opt.nss_keylog != 0 && opt.eap_tls != 0 )
1295 {
1296 mbedtls_printf( "Error: eap_tls and nss_keylog options cannot be used together.\n" );
1297 goto usage;
1298 }
1299
Hanno Becker16970d22017-10-10 15:56:37 +01001300 /* Event-driven IO is incompatible with the above custom
1301 * receive and send functions, as the polling builds on
1302 * refers to the underlying net_context. */
1303 if( opt.event == 1 && opt.nbio != 1 )
1304 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001305 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001306 opt.nbio = 1;
1307 }
1308
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001309#if defined(MBEDTLS_DEBUG_C)
1310 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001311#endif
1312
Gilles Peskineeccd8882020-03-10 12:19:08 +01001313#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001314 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001315 * Unhexify the pre-shared key if any is given
1316 */
1317 if( strlen( opt.psk ) )
1318 {
Ronald Cron7d866162020-06-18 10:36:26 +02001319 if( mbedtls_test_unhexify( psk, sizeof( psk ),
1320 opt.psk, &psk_len ) != 0 )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001321 {
Ronald Cron7d866162020-06-18 10:36:26 +02001322 mbedtls_printf( "pre-shared key not valid\n" );
Hanno Becker1f583ee2019-04-09 17:12:56 +01001323 goto exit;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001324 }
1325 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01001326#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001327
Hanno Beckere86964c2018-10-23 11:37:50 +01001328#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001329 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001330 {
1331 if( opt.psk == NULL )
1332 {
Hanno Becker1d911cd2018-11-15 13:06:09 +00001333 mbedtls_printf( "psk_opaque set but no psk to be imported specified.\n" );
Hanno Beckere86964c2018-10-23 11:37:50 +01001334 ret = 2;
1335 goto usage;
1336 }
1337
1338 if( opt.force_ciphersuite[0] <= 0 )
1339 {
1340 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1341 ret = 2;
1342 goto usage;
1343 }
1344 }
1345#endif /* MBEDTLS_USE_PSA_CRYPTO */
1346
1347 if( opt.force_ciphersuite[0] > 0 )
1348 {
1349 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
1350 ciphersuite_info =
1351 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
1352
1353 if( opt.max_version != -1 &&
1354 ciphersuite_info->min_minor_ver > opt.max_version )
1355 {
1356 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
1357 ret = 2;
1358 goto usage;
1359 }
1360 if( opt.min_version != -1 &&
1361 ciphersuite_info->max_minor_ver < opt.min_version )
1362 {
1363 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
1364 ret = 2;
1365 goto usage;
1366 }
1367
1368 /* If the server selects a version that's not supported by
1369 * this suite, then there will be no common ciphersuite... */
1370 if( opt.max_version == -1 ||
1371 opt.max_version > ciphersuite_info->max_minor_ver )
1372 {
1373 opt.max_version = ciphersuite_info->max_minor_ver;
1374 }
1375 if( opt.min_version < ciphersuite_info->min_minor_ver )
1376 {
1377 opt.min_version = ciphersuite_info->min_minor_ver;
1378 /* DTLS starts with TLS 1.1 */
1379 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
1380 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 )
1381 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2;
1382 }
1383
Hanno Beckere86964c2018-10-23 11:37:50 +01001384#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001385 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001386 {
1387 /* Ensure that the chosen ciphersuite is PSK-only; we must know
1388 * the ciphersuite in advance to set the correct policy for the
1389 * PSK key slot. This limitation might go away in the future. */
1390 if( ciphersuite_info->key_exchange != MBEDTLS_KEY_EXCHANGE_PSK ||
1391 opt.min_version != MBEDTLS_SSL_MINOR_VERSION_3 )
1392 {
1393 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1394 ret = 2;
1395 goto usage;
1396 }
1397
1398 /* Determine KDF algorithm the opaque PSK will be used in. */
1399#if defined(MBEDTLS_SHA512_C)
1400 if( ciphersuite_info->mac == MBEDTLS_MD_SHA384 )
1401 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_384);
1402 else
1403#endif /* MBEDTLS_SHA512_C */
1404 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_256);
1405 }
1406#endif /* MBEDTLS_USE_PSA_CRYPTO */
1407 }
1408
Hanno Beckera0e20d02019-05-15 14:03:01 +01001409#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Ronald Cron7d866162020-06-18 10:36:26 +02001410 if( mbedtls_test_unhexify( cid, sizeof( cid ),
1411 opt.cid_val, &cid_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001412 {
Ronald Cron7d866162020-06-18 10:36:26 +02001413 mbedtls_printf( "CID not valid\n" );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001414 goto exit;
1415 }
1416
1417 /* Keep CID settings for renegotiation unless
1418 * specified otherwise. */
1419 if( opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO )
1420 opt.cid_enabled_renego = opt.cid_enabled;
1421 if( opt.cid_val_renego == DFL_CID_VALUE_RENEGO )
1422 opt.cid_val_renego = opt.cid_val;
1423
Ronald Cron7d866162020-06-18 10:36:26 +02001424 if( mbedtls_test_unhexify( cid_renego, sizeof( cid_renego ),
1425 opt.cid_val_renego, &cid_renego_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001426 {
Ronald Cron7d866162020-06-18 10:36:26 +02001427 mbedtls_printf( "CID not valid\n" );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001428 goto exit;
1429 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001430#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01001431
Hanno Beckere6706e62017-05-15 16:05:15 +01001432#if defined(MBEDTLS_ECP_C)
1433 if( opt.curves != NULL )
1434 {
1435 p = (char *) opt.curves;
1436 i = 0;
1437
1438 if( strcmp( p, "none" ) == 0 )
1439 {
1440 curve_list[0] = MBEDTLS_ECP_DP_NONE;
1441 }
1442 else if( strcmp( p, "default" ) != 0 )
1443 {
1444 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001445 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001446 {
1447 q = p;
1448
1449 /* Terminate the current string */
1450 while( *p != ',' && *p != '\0' )
1451 p++;
1452 if( *p == ',' )
1453 *p++ = '\0';
1454
1455 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1456 {
1457 curve_list[i++] = curve_cur->grp_id;
1458 }
1459 else
1460 {
1461 mbedtls_printf( "unknown curve %s\n", q );
1462 mbedtls_printf( "supported curves: " );
1463 for( curve_cur = mbedtls_ecp_curve_list();
1464 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1465 curve_cur++ )
1466 {
1467 mbedtls_printf( "%s ", curve_cur->name );
1468 }
1469 mbedtls_printf( "\n" );
1470 goto exit;
1471 }
1472 }
1473
1474 mbedtls_printf("Number of curves: %d\n", i );
1475
Hanno Becker8651a432017-06-09 16:13:22 +01001476 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001477 {
Hanno Becker8651a432017-06-09 16:13:22 +01001478 mbedtls_printf( "curves list too long, maximum %d",
1479 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001480 goto exit;
1481 }
1482
1483 curve_list[i] = MBEDTLS_ECP_DP_NONE;
1484 }
1485 }
1486#endif /* MBEDTLS_ECP_C */
1487
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001488#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001489 if( opt.alpn_string != NULL )
1490 {
1491 p = (char *) opt.alpn_string;
1492 i = 0;
1493
1494 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001495 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001496 {
1497 alpn_list[i++] = p;
1498
1499 /* Terminate the current string and move on to next one */
1500 while( *p != ',' && *p != '\0' )
1501 p++;
1502 if( *p == ',' )
1503 *p++ = '\0';
1504 }
1505 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001506#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001507
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001508 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001509 * 0. Initialize the RNG and the session data
1510 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001511 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001512 fflush( stdout );
1513
Gilles Peskine4a23c982021-02-03 13:54:41 +01001514 ret = rng_seed( &rng, opt.reproducible, pers );
1515 if( ret != 0 )
Gilles Peskinedaa94c42021-01-13 18:38:27 +01001516 goto exit;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001517 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001518
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001519#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001520 /*
1521 * 1.1. Load the trusted CA
1522 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001523 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001524 fflush( stdout );
1525
Hanno Becker623e7b42019-03-05 16:02:15 +00001526 if( strcmp( opt.ca_path, "none" ) == 0 ||
1527 strcmp( opt.ca_file, "none" ) == 0 )
1528 {
1529 ret = 0;
1530 }
1531 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001532#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001533 if( strlen( opt.ca_path ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001534 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001535 else if( strlen( opt.ca_file ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001536 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001537 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001538#endif
Hanno Becker2900b142019-02-01 08:15:06 +00001539 {
1540#if defined(MBEDTLS_PEM_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001541 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001542 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001543 ret = mbedtls_x509_crt_parse( &cacert,
1544 (const unsigned char *) mbedtls_test_cas[i],
1545 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001546 if( ret != 0 )
1547 break;
1548 }
Hanno Becker2900b142019-02-01 08:15:06 +00001549 if( ret == 0 )
1550#endif /* MBEDTLS_PEM_PARSE_C */
1551 for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ )
1552 {
1553 ret = mbedtls_x509_crt_parse_der( &cacert,
1554 (const unsigned char *) mbedtls_test_cas_der[i],
1555 mbedtls_test_cas_der_len[i] );
1556 if( ret != 0 )
1557 break;
1558 }
1559 }
Paul Bakker42488232012-05-16 08:21:05 +00001560 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001561 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001562 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001563 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001564 goto exit;
1565 }
1566
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001567 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001568
1569 /*
1570 * 1.2. Load own certificate and private key
1571 *
1572 * (can be skipped if client authentication is not required)
1573 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001574 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001575 fflush( stdout );
1576
Hanno Becker623e7b42019-03-05 16:02:15 +00001577 if( strcmp( opt.crt_file, "none" ) == 0 )
1578 ret = 0;
1579 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001580#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001581 if( strlen( opt.crt_file ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001582 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001583 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001584#endif
Hanno Becker16970d22017-10-10 15:56:37 +01001585 ret = mbedtls_x509_crt_parse( &clicert,
1586 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001587 mbedtls_test_cli_crt_len );
Paul Bakker5121ce52009-01-03 21:22:43 +00001588 if( ret != 0 )
1589 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001590 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001591 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001592 goto exit;
1593 }
1594
Hanno Becker623e7b42019-03-05 16:02:15 +00001595 if( strcmp( opt.key_file, "none" ) == 0 )
1596 ret = 0;
1597 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001598#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001599 if( strlen( opt.key_file ) )
Hanno Beckerca04fdc2018-11-07 16:22:14 +00001600 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, opt.key_pwd );
Paul Bakker67968392010-07-18 08:28:20 +00001601 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001602#endif
Hanno Becker16970d22017-10-10 15:56:37 +01001603 ret = mbedtls_pk_parse_key( &pkey,
1604 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001605 mbedtls_test_cli_key_len, NULL, 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +00001606 if( ret != 0 )
1607 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001608 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001609 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001610 goto exit;
1611 }
1612
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001613#if defined(MBEDTLS_USE_PSA_CRYPTO)
1614 if( opt.key_opaque != 0 )
1615 {
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001616 if( ( ret = mbedtls_pk_wrap_as_opaque( &pkey, &key_slot,
1617 PSA_ALG_SHA_256 ) ) != 0 )
1618 {
1619 mbedtls_printf( " failed\n ! "
Paul Elliott61d22092021-01-08 17:06:31 +00001620 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001621 goto exit;
1622 }
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001623 }
1624#endif /* MBEDTLS_USE_PSA_CRYPTO */
1625
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001626 mbedtls_printf( " ok (key type: %s)\n", mbedtls_pk_get_name( &pkey ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001627#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001628
1629 /*
1630 * 2. Start the connection
1631 */
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +01001632 if( opt.server_addr == NULL)
1633 opt.server_addr = opt.server_name;
1634
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001635 mbedtls_printf( " . Connecting to %s/%s/%s...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001636 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01001637 opt.server_addr, opt.server_port );
Paul Bakker5121ce52009-01-03 21:22:43 +00001638 fflush( stdout );
1639
Hanno Becker16970d22017-10-10 15:56:37 +01001640 if( ( ret = mbedtls_net_connect( &server_fd,
1641 opt.server_addr, opt.server_port,
1642 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
1643 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001644 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001645 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001646 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001647 goto exit;
1648 }
1649
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001650 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001651 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001652 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001653 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001654 if( ret != 0 )
1655 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001656 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001657 (unsigned int) -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001658 goto exit;
1659 }
1660
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001661 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001662
1663 /*
1664 * 3. Setup stuff
1665 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001666 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001667 fflush( stdout );
1668
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001669 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1670 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001671 opt.transport,
1672 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001673 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001674 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001675 (unsigned int) -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001676 goto exit;
1677 }
1678
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001679#if defined(MBEDTLS_X509_CRT_PARSE_C)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001680 /* The default algorithms profile disables SHA-1, but our tests still
1681 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001682 if( opt.allow_sha1 > 0 )
1683 {
1684 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1685 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
1686 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
1687 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02001688
Hanno Beckerbb425db2019-04-03 12:59:58 +01001689 if( opt.context_crt_cb == 0 )
1690 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
1691
Hanno Beckera1051b42019-02-26 11:38:29 +00001692 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Gilles Peskineef86ab22017-05-05 18:59:02 +02001693#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker915275b2012-09-28 07:10:55 +00001694
Hanno Beckera0e20d02019-05-15 14:03:01 +01001695#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001696 if( opt.cid_enabled == 1 || opt.cid_enabled_renego == 1 )
Hanno Beckerad4a1372019-05-03 13:06:44 +01001697 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001698 if( opt.cid_enabled == 1 &&
1699 opt.cid_enabled_renego == 1 &&
1700 cid_len != cid_renego_len )
1701 {
1702 mbedtls_printf( "CID length must not change during renegotiation\n" );
1703 goto usage;
1704 }
1705
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001706 if( opt.cid_enabled == 1 )
Hanno Becker8367ccc2019-05-14 11:30:10 +01001707 ret = mbedtls_ssl_conf_cid( &conf, cid_len,
1708 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001709 else
Hanno Becker8367ccc2019-05-14 11:30:10 +01001710 ret = mbedtls_ssl_conf_cid( &conf, cid_renego_len,
1711 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001712
Hanno Beckerad4a1372019-05-03 13:06:44 +01001713 if( ret != 0 )
1714 {
Hanno Beckerd5eed422019-05-23 16:58:22 +01001715 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001716 (unsigned int) -ret );
Hanno Beckerad4a1372019-05-03 13:06:44 +01001717 goto exit;
1718 }
1719 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001720#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerad4a1372019-05-03 13:06:44 +01001721
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001722 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001723 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001724
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001725#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001726 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001727 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1728 opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001729
Hanno Becker4d615912018-08-14 13:33:30 +01001730 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01001731 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001732#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001733
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001734#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001735 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001736 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001737 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1738 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001739 goto exit;
1740 }
Paul Bakker05decb22013-08-15 13:33:48 +02001741#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001742
Ron Eldor6ea64512018-07-02 10:08:07 +03001743#if defined(MBEDTLS_SSL_DTLS_SRTP)
Bence Szépkúti880334c2020-12-14 14:42:13 +01001744 const mbedtls_ssl_srtp_profile forced_profile[] =
1745 { opt.force_srtp_profile, MBEDTLS_TLS_SRTP_UNSET };
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001746 if( opt.use_srtp == 1 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001747 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001748 if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001749 {
Johan Pascal253d0262020-09-22 13:04:45 +02001750 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles ( &conf, forced_profile );
Ron Eldor6ea64512018-07-02 10:08:07 +03001751 }
1752 else
1753 {
Johan Pascal253d0262020-09-22 13:04:45 +02001754 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles ( &conf, default_profiles );
Ron Eldor6ea64512018-07-02 10:08:07 +03001755 }
1756
1757 if( ret != 0 )
1758 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001759 mbedtls_printf( " failed\n ! "
1760 "mbedtls_ssl_conf_dtls_srtp_protection_profiles returned %d\n\n",
1761 ret );
Ron Eldor6ea64512018-07-02 10:08:07 +03001762 goto exit;
1763 }
1764
1765 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001766 else if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001767 {
1768 mbedtls_printf( " failed\n ! must enable use_srtp to force srtp profile\n\n" );
1769 goto exit;
1770 }
1771#endif /* MBEDTLS_SSL_DTLS_SRTP */
1772
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001773#if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001774 if( opt.trunc_hmac != DFL_TRUNC_HMAC )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001775 mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac );
Paul Bakker1f2bc622013-08-15 13:45:55 +02001776#endif
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001777
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001778#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001779 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001780 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001781#endif
1782
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001783#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001784 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001785 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001786#endif
1787
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001788#if defined(MBEDTLS_SSL_EXPORT_KEYS)
1789 if( opt.eap_tls != 0 )
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001790 {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001791 mbedtls_ssl_conf_export_keys_ext_cb( &conf, eap_tls_key_derivation,
1792 &eap_tls_keying );
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001793 }
1794 else if( opt.nss_keylog != 0 )
1795 {
1796 mbedtls_ssl_conf_export_keys_ext_cb( &conf,
1797 nss_keylog_export,
1798 NULL );
1799 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03001800#if defined( MBEDTLS_SSL_DTLS_SRTP )
1801 else if( opt.use_srtp != 0 )
1802 {
1803 mbedtls_ssl_conf_export_keys_ext_cb( &conf, dtls_srtp_key_derivation,
1804 &dtls_srtp_keying );
1805 }
1806#endif /* MBEDTLS_SSL_DTLS_SRTP */
1807#endif /* MBEDTLS_SSL_EXPORT_KEYS */
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001808
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001809#if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING)
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001810 if( opt.recsplit != DFL_RECSPLIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001811 mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit
Hanno Becker16970d22017-10-10 15:56:37 +01001812 ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED
1813 : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED );
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001814#endif
1815
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001816#if defined(MBEDTLS_DHM_C)
1817 if( opt.dhmlen != DFL_DHMLEN )
1818 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1819#endif
1820
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001821#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001822 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001823 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001824 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001825 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1826 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001827 goto exit;
1828 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001829#endif
1830
Philippe Antoine986b6f22019-06-07 15:04:32 +02001831 if (opt.reproducible)
1832 {
Philippe Antoinef91b3722019-06-11 16:02:43 +02001833#if defined(MBEDTLS_HAVE_TIME)
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001834#if defined(MBEDTLS_PLATFORM_TIME_ALT)
1835 mbedtls_platform_set_time( dummy_constant_time );
1836#else
Philippe Antoine7c9d7242019-06-11 12:11:36 +02001837 fprintf( stderr, "Warning: reproducible option used without constant time\n" );
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001838#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01001839#endif /* MBEDTLS_HAVE_TIME */
Philippe Antoine986b6f22019-06-07 15:04:32 +02001840 }
Gilles Peskine535fb372021-01-13 18:59:46 +01001841 mbedtls_ssl_conf_rng( &conf, rng_get, &rng );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001842 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001843
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001844 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001845
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001846#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001847 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001848#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001849
Paul Bakker645ce3a2012-10-31 12:32:41 +00001850 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001851 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001852
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001853 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001854 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001855#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001856 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001857#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001858
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001859#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001860 if( strcmp( opt.ca_path, "none" ) != 0 &&
1861 strcmp( opt.ca_file, "none" ) != 0 )
1862 {
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001863#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1864 if( opt.ca_callback != 0 )
Hanno Beckercbb59032019-03-28 14:14:22 +00001865 mbedtls_ssl_conf_ca_cb( &conf, ca_callback, &cacert );
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001866 else
1867#endif
1868 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001869 }
1870 if( strcmp( opt.crt_file, "none" ) != 0 &&
1871 strcmp( opt.key_file, "none" ) != 0 )
1872 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001873 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001874 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001875 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
1876 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001877 goto exit;
1878 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001879 }
Gilles Peskine34babfc2021-02-16 15:44:37 +01001880#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +02001881
Hanno Beckere6706e62017-05-15 16:05:15 +01001882#if defined(MBEDTLS_ECP_C)
1883 if( opt.curves != NULL &&
1884 strcmp( opt.curves, "default" ) != 0 )
1885 {
1886 mbedtls_ssl_conf_curves( &conf, curve_list );
1887 }
1888#endif
1889
Gilles Peskineeccd8882020-03-10 12:19:08 +01001890#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckere86964c2018-10-23 11:37:50 +01001891#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001892 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001893 {
Janos Follathbe4efc22019-08-08 11:38:18 +01001894 key_attributes = psa_key_attributes_init();
1895 psa_set_key_usage_flags( &key_attributes, PSA_KEY_USAGE_DERIVE );
1896 psa_set_key_algorithm( &key_attributes, alg );
1897 psa_set_key_type( &key_attributes, PSA_KEY_TYPE_DERIVE );
Hanno Beckere86964c2018-10-23 11:37:50 +01001898
Janos Follathbe4efc22019-08-08 11:38:18 +01001899 status = psa_import_key( &key_attributes, psk, psk_len, &slot );
Hanno Beckere86964c2018-10-23 11:37:50 +01001900 if( status != PSA_SUCCESS )
1901 {
1902 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
1903 goto exit;
1904 }
1905
1906 if( ( ret = mbedtls_ssl_conf_psk_opaque( &conf, slot,
1907 (const unsigned char *) opt.psk_identity,
Hanno Becker5cd607b2018-11-05 12:52:42 +00001908 strlen( opt.psk_identity ) ) ) != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001909 {
1910 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk_opaque returned %d\n\n",
1911 ret );
1912 goto exit;
1913 }
1914 }
1915 else
1916#endif /* MBEDTLS_USE_PSA_CRYPTO */
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01001917 if( psk_len > 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001918 {
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01001919 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
1920 (const unsigned char *) opt.psk_identity,
1921 strlen( opt.psk_identity ) );
1922 if( ret != 0 )
1923 {
1924 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n", ret );
1925 goto exit;
1926 }
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001927 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01001928#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +02001929
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001930 if( opt.min_version != DFL_MIN_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001931 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1932 opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01001933
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001934 if( opt.max_version != DFL_MAX_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001935 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1936 opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00001937
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001938#if defined(MBEDTLS_SSL_FALLBACK_SCSV)
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001939 if( opt.fallback != DFL_FALLBACK )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001940 mbedtls_ssl_conf_fallback( &conf, opt.fallback );
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001941#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00001942
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001943 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
1944 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001945 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001946 (unsigned int) -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001947 goto exit;
1948 }
1949
1950#if defined(MBEDTLS_X509_CRT_PARSE_C)
1951 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
1952 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001953 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
1954 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001955 goto exit;
1956 }
1957#endif
1958
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001959#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
1960 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
1961 {
1962 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
1963 (const unsigned char *) opt.ecjpake_pw,
1964 strlen( opt.ecjpake_pw ) ) ) != 0 )
1965 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001966 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
1967 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001968 goto exit;
1969 }
1970 }
1971#endif
1972
Hanno Beckerbb425db2019-04-03 12:59:58 +01001973#if defined(MBEDTLS_X509_CRT_PARSE_C)
1974 if( opt.context_crt_cb == 1 )
1975 mbedtls_ssl_set_verify( &ssl, my_verify, NULL );
1976#endif /* MBEDTLS_X509_CRT_PARSE_C */
1977
Hanno Becker8b1af2f2019-07-03 17:02:43 +01001978 io_ctx.ssl = &ssl;
1979 io_ctx.net = &server_fd;
1980 mbedtls_ssl_set_bio( &ssl, &io_ctx, send_cb, recv_cb,
1981 opt.nbio == 0 ? recv_timeout_cb : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001982
Hanno Beckera0e20d02019-05-15 14:03:01 +01001983#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +01001984 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
1985 {
1986 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
1987 cid, cid_len ) ) != 0 )
1988 {
1989 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
1990 ret );
1991 goto exit;
1992 }
1993 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001994#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01001995
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02001996#if defined(MBEDTLS_SSL_PROTO_DTLS)
1997 if( opt.dtls_mtu != DFL_DTLS_MTU )
1998 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
1999#endif
2000
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002001#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002002 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2003 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002004#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002005
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002006#if defined(MBEDTLS_ECP_RESTARTABLE)
2007 if( opt.ec_max_ops != DFL_EC_MAX_OPS )
2008 mbedtls_ecp_set_max_ops( opt.ec_max_ops );
2009#endif
2010
Ron Eldor65b56ef2019-09-26 16:40:48 +03002011#if defined(MBEDTLS_SSL_DTLS_SRTP)
Johan Pascald576fdb2020-09-22 10:39:53 +02002012 if( opt.use_srtp != 0 && strlen( opt.mki ) != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002013 {
2014 if( mbedtls_test_unhexify( mki, sizeof( mki ),
2015 opt.mki,&mki_len ) != 0 )
2016 {
2017 mbedtls_printf( "mki value not valid hex\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002018 goto exit;
Ron Eldor6ea64512018-07-02 10:08:07 +03002019 }
2020
2021 mbedtls_ssl_conf_srtp_mki_value_supported( &conf, MBEDTLS_SSL_DTLS_SRTP_MKI_SUPPORTED );
Ron Eldoref72faf2018-07-12 11:54:20 +03002022 if( ( ret = mbedtls_ssl_dtls_srtp_set_mki_value( &ssl, mki,
Johan Pascald387aa02020-09-23 18:47:56 +02002023 (uint16_t) strlen( opt.mki ) / 2 ) ) != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002024 {
2025 mbedtls_printf( " failed\n ! mbedtls_ssl_dtls_srtp_set_mki_value returned %d\n\n", ret );
2026 goto exit;
2027 }
2028 }
2029#endif
2030
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002031 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002032
Paul Bakker5121ce52009-01-03 21:22:43 +00002033 /*
2034 * 4. Handshake
2035 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002036 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00002037 fflush( stdout );
2038
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002039 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002040 {
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002041 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2042 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002043 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Paul Bakker40e46942009-01-03 21:51:57 +00002044 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002045 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002046 (unsigned int) -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002047 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
2048 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01002049 " Unable to verify the server's certificate. "
2050 "Either it is invalid,\n"
2051 " or you didn't set ca_file or ca_path "
2052 "to an appropriate value.\n"
2053 " Alternatively, you may want to use "
2054 "auth_mode=optional for testing purposes.\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002055 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002056 goto exit;
Paul Bakker40e46942009-01-03 21:51:57 +00002057 }
Hanno Becker16970d22017-10-10 15:56:37 +01002058
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002059#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002060 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2061 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002062#endif
2063
Hanno Becker16970d22017-10-10 15:56:37 +01002064 /* For event-driven IO, wait for socket to become available */
2065 if( opt.event == 1 /* level triggered IO */ )
2066 {
2067#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002068 ret = idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002069#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002070 ret = idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002071#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002072 if( ret != 0 )
2073 goto exit;
Hanno Becker16970d22017-10-10 15:56:37 +01002074 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002075 }
2076
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002077 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
Hanno Becker16970d22017-10-10 15:56:37 +01002078 mbedtls_ssl_get_version( &ssl ),
2079 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00002080
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002081 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
2082 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002083 else
Mateusz Starzykf5c53512021-04-15 13:28:52 +02002084 mbedtls_printf( " [ Record expansion is unknown ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002085
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002086#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Andrzej Kurek90c6e842020-04-03 05:25:29 -04002087 mbedtls_printf( " [ Maximum input fragment length is %u ]\n",
2088 (unsigned int) mbedtls_ssl_get_input_max_frag_len( &ssl ) );
2089 mbedtls_printf( " [ Maximum output fragment length is %u ]\n",
2090 (unsigned int) mbedtls_ssl_get_output_max_frag_len( &ssl ) );
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002091#endif
2092
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002093#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002094 if( opt.alpn_string != NULL )
2095 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002096 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
2097 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002098 alp ? alp : "(none)" );
2099 }
2100#endif
2101
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002102#if defined(MBEDTLS_SSL_EXPORT_KEYS)
Ron Eldor51d3ab52019-05-12 14:54:30 +03002103 if( opt.eap_tls != 0 )
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002104 {
2105 size_t j = 0;
Ron Eldor51d3ab52019-05-12 14:54:30 +03002106
2107 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type,
2108 eap_tls_keying.master_secret,
2109 sizeof( eap_tls_keying.master_secret ),
2110 eap_tls_label,
2111 eap_tls_keying.randbytes,
2112 sizeof( eap_tls_keying.randbytes ),
2113 eap_tls_keymaterial,
2114 sizeof( eap_tls_keymaterial ) ) )
2115 != 0 )
2116 {
2117 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002118 (unsigned int) -ret );
Ron Eldor51d3ab52019-05-12 14:54:30 +03002119 goto exit;
2120 }
2121
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002122 mbedtls_printf( " EAP-TLS key material is:" );
2123 for( j = 0; j < sizeof( eap_tls_keymaterial ); j++ )
2124 {
2125 if( j % 8 == 0 )
2126 mbedtls_printf("\n ");
2127 mbedtls_printf("%02x ", eap_tls_keymaterial[j] );
2128 }
2129 mbedtls_printf("\n");
2130
Ron Eldor51d3ab52019-05-12 14:54:30 +03002131 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type, NULL, 0,
Ron Eldor51c45072019-05-15 17:49:54 +03002132 eap_tls_label,
2133 eap_tls_keying.randbytes,
2134 sizeof( eap_tls_keying.randbytes ),
2135 eap_tls_iv,
2136 sizeof( eap_tls_iv ) ) ) != 0 )
Ron Eldor51d3ab52019-05-12 14:54:30 +03002137 {
2138 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002139 (unsigned int) -ret );
Ron Eldor51d3ab52019-05-12 14:54:30 +03002140 goto exit;
2141 }
2142
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002143 mbedtls_printf( " EAP-TLS IV is:" );
2144 for( j = 0; j < sizeof( eap_tls_iv ); j++ )
2145 {
2146 if( j % 8 == 0 )
2147 mbedtls_printf("\n ");
2148 mbedtls_printf("%02x ", eap_tls_iv[j] );
2149 }
2150 mbedtls_printf("\n");
2151 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002152
2153#if defined( MBEDTLS_SSL_DTLS_SRTP )
2154 else if( opt.use_srtp != 0 )
2155 {
2156 size_t j = 0;
Johan Pascal2258a4f2020-10-28 13:53:09 +01002157 mbedtls_dtls_srtp_info dtls_srtp_negotiation_result;
2158 mbedtls_ssl_get_dtls_srtp_negotiation_result( &ssl, &dtls_srtp_negotiation_result );
Ron Eldor65b56ef2019-09-26 16:40:48 +03002159
Johan Pascal5fbe9e72020-10-29 10:49:21 +01002160 if( dtls_srtp_negotiation_result.chosen_dtls_srtp_profile
2161 == MBEDTLS_TLS_SRTP_UNSET )
Ron Eldor65b56ef2019-09-26 16:40:48 +03002162 {
Johan Pascald576fdb2020-09-22 10:39:53 +02002163 mbedtls_printf( " Unable to negotiate "
2164 "the use of DTLS-SRTP\n" );
Ron Eldor65b56ef2019-09-26 16:40:48 +03002165 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002166 else
Ron Eldor65b56ef2019-09-26 16:40:48 +03002167 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002168 if( ( ret = mbedtls_ssl_tls_prf( dtls_srtp_keying.tls_prf_type,
2169 dtls_srtp_keying.master_secret,
2170 sizeof( dtls_srtp_keying.master_secret ),
2171 dtls_srtp_label,
2172 dtls_srtp_keying.randbytes,
2173 sizeof( dtls_srtp_keying.randbytes ),
2174 dtls_srtp_key_material,
2175 sizeof( dtls_srtp_key_material ) ) )
2176 != 0 )
2177 {
2178 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
2179 (unsigned int) -ret );
2180 goto exit;
2181 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002182
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002183 mbedtls_printf( " DTLS-SRTP key material is:" );
2184 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
2185 {
2186 if( j % 8 == 0 )
Johan Pascald576fdb2020-09-22 10:39:53 +02002187 mbedtls_printf( "\n " );
2188 mbedtls_printf( "%02x ", dtls_srtp_key_material[j] );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002189 }
Johan Pascal9bc50b02020-09-24 12:01:13 +02002190 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002191
Johan Pascal9bc50b02020-09-24 12:01:13 +02002192 /* produce a less readable output used to perform automatic checks
2193 * - compare client and server output
2194 * - interop test with openssl which client produces this kind of output
2195 */
2196 mbedtls_printf( " Keying material: " );
2197 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
2198 {
2199 mbedtls_printf( "%02X", dtls_srtp_key_material[j] );
2200 }
Johan Pascald576fdb2020-09-22 10:39:53 +02002201 mbedtls_printf( "\n" );
Johan Pascal20c7db32020-10-26 22:45:58 +01002202
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002203 if ( dtls_srtp_negotiation_result.mki_len > 0 )
Johan Pascal20c7db32020-10-26 22:45:58 +01002204 {
2205 mbedtls_printf( " DTLS-SRTP mki value: " );
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002206 for( j = 0; j < dtls_srtp_negotiation_result.mki_len; j++ )
Johan Pascal20c7db32020-10-26 22:45:58 +01002207 {
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002208 mbedtls_printf( "%02X", dtls_srtp_negotiation_result.mki_value[j] );
Johan Pascal20c7db32020-10-26 22:45:58 +01002209 }
2210 }
2211 else
2212 {
Johan Pascal5ef72d22020-10-28 17:05:47 +01002213 mbedtls_printf( " DTLS-SRTP no mki value negotiated" );
Johan Pascal20c7db32020-10-26 22:45:58 +01002214 }
2215 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002216 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002217 }
2218#endif /* MBEDTLS_SSL_DTLS_SRTP */
2219#endif /* MBEDTLS_SSL_EXPORT_KEYS */
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002220 if( opt.reconnect != 0 )
2221 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002222 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002223 fflush( stdout );
2224
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002225 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002226 {
Hanno Becker494dc712021-05-14 15:08:51 +01002227 mbedtls_ssl_session exported_session;
2228
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002229 /* free any previously saved data */
Manuel Pégourié-Gonnard4d591d62019-05-24 10:26:41 +02002230 if( session_data != NULL )
2231 {
2232 mbedtls_platform_zeroize( session_data, session_data_len );
2233 mbedtls_free( session_data );
2234 session_data = NULL;
2235 }
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002236
Hanno Becker494dc712021-05-14 15:08:51 +01002237 mbedtls_ssl_session_init( &exported_session );
2238 ret = mbedtls_ssl_get_session( &ssl, &exported_session );
2239 if( ret != 0 )
2240 {
2241 mbedtls_printf(
2242 "failed\n ! mbedtls_ssl_get_session() returned -%#02x\n",
2243 (unsigned) -ret );
2244 goto exit;
2245 }
2246
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002247 /* get size of the buffer needed */
Hanno Becker494dc712021-05-14 15:08:51 +01002248 mbedtls_ssl_session_save( &exported_session, NULL, 0, &session_data_len );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002249 session_data = mbedtls_calloc( 1, session_data_len );
2250 if( session_data == NULL )
2251 {
2252 mbedtls_printf( " failed\n ! alloc %u bytes for session data\n",
2253 (unsigned) session_data_len );
Hanno Becker494dc712021-05-14 15:08:51 +01002254 mbedtls_ssl_session_free( &exported_session );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002255 ret = MBEDTLS_ERR_SSL_ALLOC_FAILED;
2256 goto exit;
2257 }
2258
2259 /* actually save session data */
Hanno Becker494dc712021-05-14 15:08:51 +01002260 if( ( ret = mbedtls_ssl_session_save( &exported_session,
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002261 session_data, session_data_len,
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002262 &session_data_len ) ) != 0 )
2263 {
2264 mbedtls_printf( " failed\n ! mbedtls_ssl_session_saved returned -0x%04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002265 (unsigned int) -ret );
Hanno Becker494dc712021-05-14 15:08:51 +01002266 mbedtls_ssl_session_free( &exported_session );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002267 goto exit;
2268 }
Hanno Becker494dc712021-05-14 15:08:51 +01002269
2270 mbedtls_ssl_session_free( &exported_session );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002271 }
2272 else
2273 {
2274 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
2275 {
2276 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002277 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002278 goto exit;
2279 }
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002280 }
2281
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002282 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002283
2284 if( opt.reco_mode == 1 )
2285 {
2286 mbedtls_printf( " [ Saved %u bytes of session data]\n",
2287 (unsigned) session_data_len );
2288 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002289 }
2290
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002291#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00002292 /*
2293 * 5. Verify the server certificate
2294 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002295 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00002296
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002297 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002298 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002299 char vrfy_buf[512];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002300 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002301
Hanno Becker7ac83f92020-10-09 10:48:22 +01002302 x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
Hanno Becker16970d22017-10-10 15:56:37 +01002303 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00002304
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002305 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002306 }
2307 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002308 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002309
Hanno Becker5d4c4b12019-06-11 17:16:13 +01002310#if !defined(MBEDTLS_X509_REMOVE_INFO)
Hanno Beckera9766c2c2019-02-25 17:43:18 +00002311 mbedtls_printf( " . Peer certificate information ...\n" );
2312 mbedtls_printf( "%s\n", peer_crt_info );
Hanno Becker5d4c4b12019-06-11 17:16:13 +01002313#endif /* !MBEDTLS_X509_REMOVE_INFO */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002314#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00002315
Hanno Beckera0e20d02019-05-15 14:03:01 +01002316#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002317 ret = report_cid_usage( &ssl, "initial handshake" );
2318 if( ret != 0 )
2319 goto exit;
2320
Hanno Becker90cb3592019-04-09 17:24:19 +01002321 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2322 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002323 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled_renego,
2324 cid_renego,
2325 cid_renego_len ) ) != 0 )
Hanno Becker90cb3592019-04-09 17:24:19 +01002326 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002327 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2328 ret );
gabor-mezei-arm78595852020-04-28 10:40:30 +02002329 goto exit;
Hanno Becker90cb3592019-04-09 17:24:19 +01002330 }
2331 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002332#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01002333
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002334#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002335 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002336 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002337 /*
2338 * Perform renegotiation (this must be done when the server is waiting
2339 * for input from our side).
2340 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002341 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002342 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002343 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002344 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002345 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002346 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002347 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002348 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002349 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
2350 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002351 goto exit;
2352 }
Hanno Becker16970d22017-10-10 15:56:37 +01002353
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002354#if defined(MBEDTLS_ECP_RESTARTABLE)
2355 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2356 continue;
2357#endif
2358
Hanno Becker16970d22017-10-10 15:56:37 +01002359 /* For event-driven IO, wait for socket to become available */
2360 if( opt.event == 1 /* level triggered IO */ )
2361 {
2362#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002363 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002364#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002365 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002366#endif
2367 }
2368
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002369 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002370 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002371 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002372#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002373
Hanno Beckera0e20d02019-05-15 14:03:01 +01002374#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002375 ret = report_cid_usage( &ssl, "after renegotiation" );
2376 if( ret != 0 )
2377 goto exit;
Hanno Beckera0e20d02019-05-15 14:03:01 +01002378#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002379
Paul Bakker5121ce52009-01-03 21:22:43 +00002380 /*
2381 * 6. Write the GET request
2382 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002383 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002384send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002385 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002386 fflush( stdout );
2387
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002388 len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST,
2389 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002390 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002391
2392 /* Add padding to GET request to reach opt.request_size in length */
2393 if( opt.request_size != DFL_REQUEST_SIZE &&
2394 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02002395 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002396 memset( buf + len, 'A', opt.request_size - len - tail_len );
2397 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02002398 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002399
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002400 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002401 len += tail_len;
2402
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02002403 /* Truncate if request size is smaller than the "natural" size */
2404 if( opt.request_size != DFL_REQUEST_SIZE &&
2405 len > opt.request_size )
2406 {
2407 len = opt.request_size;
2408
2409 /* Still end with \r\n unless that's really not possible */
2410 if( len >= 2 ) buf[len - 2] = '\r';
2411 if( len >= 1 ) buf[len - 1] = '\n';
2412 }
2413
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002414 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00002415 {
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002416 written = 0;
2417 frags = 0;
2418
2419 do
Paul Bakker5121ce52009-01-03 21:22:43 +00002420 {
Hanno Becker16970d22017-10-10 15:56:37 +01002421 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002422 len - written ) ) < 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002423 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002424 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002425 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002426 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002427 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002428 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002429 (unsigned int) -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002430 goto exit;
2431 }
Hanno Becker16970d22017-10-10 15:56:37 +01002432
2433 /* For event-driven IO, wait for socket to become available */
2434 if( opt.event == 1 /* level triggered IO */ )
2435 {
2436#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002437 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002438#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002439 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002440#endif
2441 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002442 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002443
2444 frags++;
2445 written += ret;
Paul Bakker5121ce52009-01-03 21:22:43 +00002446 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002447 while( written < len );
Paul Bakker5121ce52009-01-03 21:22:43 +00002448 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002449 else /* Not stream, so datagram */
2450 {
Hanno Becker16970d22017-10-10 15:56:37 +01002451 while( 1 )
2452 {
2453 ret = mbedtls_ssl_write( &ssl, buf, len );
2454
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002455#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002456 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002457 continue;
2458#endif
2459
Hanno Becker16970d22017-10-10 15:56:37 +01002460 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2461 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2462 break;
2463
2464 /* For event-driven IO, wait for socket to become available */
2465 if( opt.event == 1 /* level triggered IO */ )
2466 {
2467#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002468 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002469#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002470 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002471#endif
2472 }
2473 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002474
2475 if( ret < 0 )
2476 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002477 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
2478 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002479 goto exit;
2480 }
2481
2482 frags = 1;
2483 written = ret;
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002484
2485 if( written < len )
2486 {
2487 mbedtls_printf( " warning\n ! request didn't fit into single datagram and "
2488 "was truncated to size %u", (unsigned) written );
2489 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002490 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002491
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002492 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01002493 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
2494 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002495
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002496 /* Send a non-empty request if request_size == 0 */
2497 if ( len == 0 )
2498 {
2499 opt.request_size = DFL_REQUEST_SIZE;
2500 goto send_request;
2501 }
2502
Paul Bakker5121ce52009-01-03 21:22:43 +00002503 /*
2504 * 7. Read the HTTP response
2505 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002506 mbedtls_printf( " < Read from server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002507 fflush( stdout );
2508
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002509 /*
2510 * TLS and DTLS need different reading styles (stream vs datagram)
2511 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002512 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002513 {
2514 do
2515 {
2516 len = sizeof( buf ) - 1;
2517 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002518 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002519
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002520#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002521 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002522 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002523#endif
2524
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002525 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
2526 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01002527 {
2528 /* For event-driven IO, wait for socket to become available */
2529 if( opt.event == 1 /* level triggered IO */ )
2530 {
2531#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002532 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002533#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002534 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002535#endif
2536 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002537 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002538 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002539
2540 if( ret <= 0 )
2541 {
2542 switch( ret )
2543 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002544 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2545 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002546 ret = 0;
2547 goto close_notify;
2548
2549 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002550 case MBEDTLS_ERR_NET_CONN_RESET:
2551 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002552 ret = 0;
2553 goto reconnect;
2554
2555 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002556 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002557 (unsigned int) -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002558 goto exit;
2559 }
2560 }
2561
2562 len = ret;
2563 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002564 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002565
2566 /* End of message should be detected according to the syntax of the
2567 * application protocol (eg HTTP), just use a dummy test here. */
2568 if( ret > 0 && buf[len-1] == '\n' )
2569 {
2570 ret = 0;
2571 break;
2572 }
2573 }
2574 while( 1 );
2575 }
2576 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00002577 {
2578 len = sizeof( buf ) - 1;
2579 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00002580
Hanno Becker16970d22017-10-10 15:56:37 +01002581 while( 1 )
2582 {
2583 ret = mbedtls_ssl_read( &ssl, buf, len );
2584
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002585#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002586 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002587 continue;
2588#endif
2589
Hanno Becker16970d22017-10-10 15:56:37 +01002590 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2591 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2592 break;
2593
2594 /* For event-driven IO, wait for socket to become available */
2595 if( opt.event == 1 /* level triggered IO */ )
2596 {
2597#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002598 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002599#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002600 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002601#endif
2602 }
2603 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002604
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002605 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002606 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002607 switch( ret )
2608 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002609 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002610 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002611 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02002612 goto send_request;
2613 goto exit;
2614
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002615 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2616 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002617 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002618 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00002619
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002620 default:
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002621 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002622 goto exit;
2623 }
Paul Bakker5690efc2011-05-26 13:16:06 +00002624 }
2625
Paul Bakker5121ce52009-01-03 21:22:43 +00002626 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02002627 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002628 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002629 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00002630 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002631
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002632 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002633 * 7b. Simulate hard reset and reconnect from same port?
2634 */
2635 if( opt.reconnect_hard != 0 )
2636 {
2637 opt.reconnect_hard = 0;
2638
2639 mbedtls_printf( " . Restarting connection from same port..." );
2640 fflush( stdout );
2641
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002642#if defined(MBEDTLS_X509_CRT_PARSE_C)
Hanno Becker23699ef2019-02-26 12:36:53 +00002643 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002644#endif /* MBEDTLS_X509_CRT_PARSE_C */
Hanno Becker23699ef2019-02-26 12:36:53 +00002645
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002646 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
2647 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002648 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002649 (unsigned int) -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002650 goto exit;
2651 }
2652
2653 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
2654 {
2655 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002656 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002657 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002658 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002659 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002660 (unsigned int) -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002661 goto exit;
2662 }
Hanno Becker16970d22017-10-10 15:56:37 +01002663
2664 /* For event-driven IO, wait for socket to become available */
2665 if( opt.event == 1 /* level triggered IO */ )
2666 {
2667#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002668 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002669#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002670 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002671#endif
2672 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002673 }
2674
2675 mbedtls_printf( " ok\n" );
2676
2677 goto send_request;
2678 }
2679
2680 /*
Jarno Lamsa77e66652019-05-29 15:15:08 +03002681 * 7c. Simulate serialize/deserialize and go back to data exchange
2682 */
Jarno Lamsabbc7b412019-06-04 11:06:31 +03002683#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002684 if( opt.serialize != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002685 {
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002686 size_t buf_len;
Jarno Lamsa77e66652019-05-29 15:15:08 +03002687
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002688 mbedtls_printf( " . Serializing live connection..." );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002689
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002690 ret = mbedtls_ssl_context_save( &ssl, NULL, 0, &buf_len );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002691 if( ret != MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002692 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002693 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002694 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002695
2696 goto exit;
2697 }
2698
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002699 if( ( context_buf = mbedtls_calloc( 1, buf_len ) ) == NULL )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002700 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002701 mbedtls_printf( " failed\n ! Couldn't allocate buffer for "
2702 "serialized context" );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002703
2704 goto exit;
2705 }
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02002706 context_buf_len = buf_len;
Jarno Lamsa77e66652019-05-29 15:15:08 +03002707
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002708 if( ( ret = mbedtls_ssl_context_save( &ssl, context_buf,
2709 buf_len, &buf_len ) ) != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002710 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002711 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002712 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002713
2714 goto exit;
2715 }
2716
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002717 mbedtls_printf( " ok\n" );
2718
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002719 /* Save serialized context to the 'opt.context_file' as a base64 code */
2720 if( 0 < strlen( opt.context_file ) )
2721 {
2722 FILE *b64_file;
2723 uint8_t *b64_buf;
2724 size_t b64_len;
2725
2726 mbedtls_printf( " . Save serialized context to a file... " );
2727
2728 mbedtls_base64_encode( NULL, 0, &b64_len, context_buf, buf_len );
2729
2730 if( ( b64_buf = mbedtls_calloc( 1, b64_len ) ) == NULL )
2731 {
2732 mbedtls_printf( "failed\n ! Couldn't allocate buffer for "
2733 "the base64 code\n" );
2734 goto exit;
2735 }
2736
2737 if( ( ret = mbedtls_base64_encode( b64_buf, b64_len, &b64_len,
2738 context_buf, buf_len ) ) != 0 )
2739 {
2740 mbedtls_printf( "failed\n ! mbedtls_base64_encode returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002741 "-0x%x\n", (unsigned int) -ret );
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002742 mbedtls_free( b64_buf );
2743 goto exit;
2744 }
2745
2746 if( ( b64_file = fopen( opt.context_file, "w" ) ) == NULL )
2747 {
2748 mbedtls_printf( "failed\n ! Cannot open '%s' for writing.\n",
2749 opt.context_file );
2750 mbedtls_free( b64_buf );
2751 goto exit;
2752 }
2753
2754 if( b64_len != fwrite( b64_buf, 1, b64_len, b64_file ) )
2755 {
2756 mbedtls_printf( "failed\n ! fwrite(%ld bytes) failed\n",
2757 (long) b64_len );
2758 mbedtls_free( b64_buf );
2759 fclose( b64_file );
2760 goto exit;
2761 }
2762
2763 mbedtls_free( b64_buf );
2764 fclose( b64_file );
2765
2766 mbedtls_printf( "ok\n" );
2767 }
2768
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002769 if( opt.serialize == 1 )
2770 {
Manuel Pégourié-Gonnard9df5a822019-07-23 14:51:09 +02002771 /* nothing to do here, done by context_save() already */
Piotr Nowicki136bebf2020-04-17 14:37:00 +02002772 mbedtls_printf( " . Context has been reset... ok\n" );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002773 }
2774
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002775 if( opt.serialize == 2 )
2776 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002777 mbedtls_printf( " . Freeing and reinitializing context..." );
2778
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002779 mbedtls_ssl_free( &ssl );
2780
2781 mbedtls_ssl_init( &ssl );
2782
2783 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2784 {
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002785 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002786 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002787 goto exit;
2788 }
2789
2790 if( opt.nbio == 2 )
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002791 mbedtls_ssl_set_bio( &ssl, &server_fd, delayed_send,
2792 delayed_recv, NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002793 else
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002794 mbedtls_ssl_set_bio( &ssl, &server_fd, mbedtls_net_send,
2795 mbedtls_net_recv,
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002796 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002797
Jarno Lamsa8e253212019-06-13 11:45:06 +03002798#if defined(MBEDTLS_TIMING_C)
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002799 mbedtls_ssl_set_timer_cb( &ssl, &timer,
2800 mbedtls_timing_set_delay,
2801 mbedtls_timing_get_delay );
Jarno Lamsa8e253212019-06-13 11:45:06 +03002802#endif /* MBEDTLS_TIMING_C */
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002803
2804 mbedtls_printf( " ok\n" );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002805 }
2806
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002807 mbedtls_printf( " . Deserializing connection..." );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002808
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002809 if( ( ret = mbedtls_ssl_context_load( &ssl, context_buf,
2810 buf_len ) ) != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002811 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002812 mbedtls_printf( "failed\n ! mbedtls_ssl_context_load returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002813 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002814
2815 goto exit;
2816 }
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002817
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02002818 mbedtls_free( context_buf );
2819 context_buf = NULL;
2820 context_buf_len = 0;
2821
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002822 mbedtls_printf( " ok\n" );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002823 }
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002824#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
Jarno Lamsa77e66652019-05-29 15:15:08 +03002825
2826 /*
2827 * 7d. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002828 */
2829 if( --opt.exchanges > 0 )
2830 goto send_request;
2831
2832 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002833 * 8. Done, cleanly close the connection
2834 */
2835close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002836 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002837 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002838
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01002839 /*
2840 * Most of the time sending a close_notify before closing is the right
2841 * thing to do. However, when the server already knows how many messages
2842 * are expected and closes the connection by itself, this alert becomes
2843 * redundant. Sometimes with DTLS this redundancy becomes a problem by
2844 * leading to a race condition where the server might close the connection
2845 * before seeing the alert, and since UDP is connection-less when the
2846 * alert arrives it will be seen as a new connection, which will fail as
2847 * the alert is clearly not a valid ClientHello. This may cause spurious
2848 * failures in tests that use DTLS and resumption with ssl_server2 in
2849 * ssl-opt.sh, avoided by enabling skip_close_notify client-side.
2850 */
2851 if( opt.skip_close_notify == 0 )
2852 {
2853 /* No error checking, the connection might be closed already */
2854 do ret = mbedtls_ssl_close_notify( &ssl );
2855 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
2856 ret = 0;
2857 }
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002858
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002859 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002860
2861 /*
2862 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002863 */
2864reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002865 if( opt.reconnect != 0 )
2866 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02002867 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002868
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002869 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01002870
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002871#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002872 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02002873 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002874#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02002875
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002876 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002877
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002878#if defined(MBEDTLS_X509_CRT_PARSE_C)
Hanno Beckera1051b42019-02-26 11:38:29 +00002879 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002880#endif /* MBEDTLS_X509_CRT_PARSE_C */
Hanno Beckera1051b42019-02-26 11:38:29 +00002881
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002882 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002883 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002884 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002885 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002886 goto exit;
2887 }
2888
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002889 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002890 {
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002891 if( ( ret = mbedtls_ssl_session_load( &saved_session,
2892 session_data,
2893 session_data_len ) ) != 0 )
2894 {
2895 mbedtls_printf( " failed\n ! mbedtls_ssl_session_load returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002896 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002897 goto exit;
2898 }
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002899 }
2900
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002901 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002902 {
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002903 mbedtls_printf( " failed\n ! mbedtls_ssl_set_session returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002904 (unsigned int) -ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002905 goto exit;
2906 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002907
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002908 if( ( ret = mbedtls_net_connect( &server_fd,
2909 opt.server_addr, opt.server_port,
2910 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2911 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002912 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002913 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002914 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002915 goto exit;
2916 }
2917
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002918 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002919 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002920 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002921 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002922 if( ret != 0 )
2923 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002924 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002925 (unsigned int) -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02002926 goto exit;
2927 }
2928
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002929 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002930 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002931 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002932 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002933 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002934 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002935 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002936 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002937 goto exit;
2938 }
2939 }
2940
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002941 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002942
2943 goto send_request;
2944 }
2945
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002946 /*
2947 * Cleanup and exit
2948 */
Paul Bakker5121ce52009-01-03 21:22:43 +00002949exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002950#ifdef MBEDTLS_ERROR_C
gabor-mezei-armde472172020-09-04 14:44:25 +02002951 if( ret != 0 )
Paul Bakkera3d195c2011-11-27 21:07:34 +00002952 {
2953 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002954 mbedtls_strerror( ret, error_buf, 100 );
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002955 mbedtls_printf("Last error was: -0x%X - %s\n\n", (unsigned int) -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00002956 }
2957#endif
2958
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002959 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002960
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002961#if defined(MBEDTLS_X509_CRT_PARSE_C)
2962 mbedtls_x509_crt_free( &clicert );
2963 mbedtls_x509_crt_free( &cacert );
2964 mbedtls_pk_free( &pkey );
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002965#if defined(MBEDTLS_USE_PSA_CRYPTO)
2966 psa_destroy_key( key_slot );
2967#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01002968#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00002969
Gilles Peskineeccd8882020-03-10 12:19:08 +01002970#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED) && \
Hanno Becker3f24ea92018-11-05 13:25:17 +00002971 defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00002972 if( opt.psk_opaque != 0 )
Hanno Becker3f24ea92018-11-05 13:25:17 +00002973 {
2974 /* This is ok even if the slot hasn't been
2975 * initialized (we might have jumed here
2976 * immediately because of bad cmd line params,
2977 * for example). */
Hanno Becker1d911cd2018-11-15 13:06:09 +00002978 status = psa_destroy_key( slot );
gabor-mezei-armde472172020-09-04 14:44:25 +02002979 if( ( status != PSA_SUCCESS ) &&
2980 ( opt.query_config_mode == DFL_QUERY_CONFIG_MODE ) )
Hanno Becker3f24ea92018-11-05 13:25:17 +00002981 {
Ronald Cronadc2ff22020-09-16 16:49:27 +02002982 mbedtls_printf( "Failed to destroy key slot %u - error was %d",
Ronald Cronc9851142020-11-13 10:08:52 +01002983 (unsigned) slot, (int) status );
Hanno Becker3f24ea92018-11-05 13:25:17 +00002984 if( ret == 0 )
2985 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
2986 }
2987 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01002988#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED &&
Hanno Becker3f24ea92018-11-05 13:25:17 +00002989 MBEDTLS_USE_PSA_CRYPTO */
2990
Gilles Peskineb8c48402021-02-08 20:28:22 +01002991 mbedtls_ssl_session_free( &saved_session );
2992 mbedtls_ssl_free( &ssl );
2993 mbedtls_ssl_config_free( &conf );
2994 rng_free( &rng );
2995 if( session_data != NULL )
2996 mbedtls_platform_zeroize( session_data, session_data_len );
2997 mbedtls_free( session_data );
2998#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
2999 if( context_buf != NULL )
3000 mbedtls_platform_zeroize( context_buf, context_buf_len );
3001 mbedtls_free( context_buf );
3002#endif
3003
Gilles Peskine414e7172021-02-03 00:04:08 +01003004#if defined(MBEDTLS_USE_PSA_CRYPTO)
3005 mbedtls_psa_crypto_free( );
3006#endif
3007
Gilles Peskine60fe6602021-02-16 18:56:42 +01003008#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +01003009 if( test_hooks_failure_detected( ) )
3010 {
3011 if( ret == 0 )
3012 ret = 1;
3013 mbedtls_printf( "Test hooks detected errors.\n" );
3014 }
3015 test_hooks_free( );
Gilles Peskine60fe6602021-02-16 18:56:42 +01003016#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01003017
Piotr Nowicki7d01ef62019-11-20 15:00:17 +01003018#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3019#if defined(MBEDTLS_MEMORY_DEBUG)
3020 mbedtls_memory_buffer_alloc_status();
3021#endif
3022 mbedtls_memory_buffer_alloc_free();
Gilles Peskine34babfc2021-02-16 15:44:37 +01003023#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Piotr Nowicki7d01ef62019-11-20 15:00:17 +01003024
gabor-mezei-armde472172020-09-04 14:44:25 +02003025#if defined(_WIN32)
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003026 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3027 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003028 mbedtls_printf( " + Press Enter to exit this program.\n" );
3029 fflush( stdout ); getchar();
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003030 }
gabor-mezei-armde472172020-09-04 14:44:25 +02003031#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00003032
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003033 // Shell can not handle large exit numbers -> 1 for errors
3034 if( ret < 0 )
3035 ret = 1;
3036
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003037 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3038 mbedtls_exit( ret );
3039 else
3040 mbedtls_exit( query_config_ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00003041}
Gilles Peskineb4df7542021-01-08 21:20:09 +01003042#endif /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_CLI_C */