blob: d2cc4509d034ee8c1fc4d9f675dbe89bf89dd9b2 [file] [log] [blame]
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02001/*
2 * Simple DTLS server demonstration program
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020018 */
19
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000021#include "mbedtls/config.h"
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020022#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020023#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020024#endif
25
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020026#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000027#include "mbedtls/platform.h"
Manuel Pégourié-Gonnardf2246782015-01-29 13:29:20 +000028#else
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020029#include <stdio.h>
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +020030#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031#define mbedtls_printf printf
32#define mbedtls_fprintf fprintf
Simon Butcherdb0feca2016-05-17 00:03:14 +010033#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010034#define mbedtls_exit exit
35#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
36#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
Manuel Pégourié-Gonnardf2246782015-01-29 13:29:20 +000037#endif
38
Simon Butcher6fd96ad2018-05-12 18:23:32 +010039/* Uncomment out the following line to default to IPv4 and disable IPv6 */
40//#define FORCE_IPV4
41
42#ifdef FORCE_IPV4
43#define BIND_IP "0.0.0.0" /* Forces IPv4 */
44#else
45#define BIND_IP "::"
46#endif
47
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020048#if !defined(MBEDTLS_SSL_SRV_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) || \
49 !defined(MBEDTLS_SSL_COOKIE_C) || !defined(MBEDTLS_NET_C) || \
50 !defined(MBEDTLS_ENTROPY_C) || !defined(MBEDTLS_CTR_DRBG_C) || \
51 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_RSA_C) || \
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010052 !defined(MBEDTLS_PEM_PARSE_C) || !defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020053
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020054int main( void )
55{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020056 printf( "MBEDTLS_SSL_SRV_C and/or MBEDTLS_SSL_PROTO_DTLS and/or "
57 "MBEDTLS_SSL_COOKIE_C and/or MBEDTLS_NET_C and/or "
58 "MBEDTLS_ENTROPY_C and/or MBEDTLS_CTR_DRBG_C and/or "
59 "MBEDTLS_X509_CRT_PARSE_C and/or MBEDTLS_RSA_C and/or "
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010060 "MBEDTLS_PEM_PARSE_C and/or MBEDTLS_TIMING_C not defined.\n" );
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +020061 mbedtls_exit( 0 );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020062}
63#else
64
65#if defined(_WIN32)
66#include <windows.h>
67#endif
68
69#include <string.h>
70#include <stdlib.h>
71#include <stdio.h>
72
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000073#include "mbedtls/entropy.h"
74#include "mbedtls/ctr_drbg.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000075#include "mbedtls/x509.h"
76#include "mbedtls/ssl.h"
77#include "mbedtls/ssl_cookie.h"
Andres AG788aa4a2016-09-14 14:32:09 +010078#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000079#include "mbedtls/error.h"
80#include "mbedtls/debug.h"
Manuel Pégourié-Gonnard56273da2015-05-26 12:19:45 +020081#include "mbedtls/timing.h"
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +020082
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010083#include "test/certs.h"
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020084
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020085#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000086#include "mbedtls/ssl_cache.h"
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020087#endif
88
Ryan LaPointedbb192d2021-03-01 10:03:31 -050089#define READ_TIMEOUT_MS 10000 /* 10 seconds */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020090#define DEBUG_LEVEL 0
91
Simon Butcher63cb97e2018-12-06 17:43:31 +000092
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +020093static void my_debug( void *ctx, int level,
94 const char *file, int line,
95 const char *str )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +020096{
97 ((void) level);
98
Manuel Pégourié-Gonnard61ee3512015-06-23 17:35:03 +020099 mbedtls_fprintf( (FILE *) ctx, "%s:%04d: %s", file, line, str );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200100 fflush( (FILE *) ctx );
101}
102
103int main( void )
104{
105 int ret, len;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200106 mbedtls_net_context listen_fd, client_fd;
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200107 unsigned char buf[1024];
108 const char *pers = "dtls_server";
109 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +0200110 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200111 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113 mbedtls_entropy_context entropy;
114 mbedtls_ctr_drbg_context ctr_drbg;
115 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200116 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200117 mbedtls_x509_crt srvcert;
118 mbedtls_pk_context pkey;
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200119 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200120#if defined(MBEDTLS_SSL_CACHE_C)
121 mbedtls_ssl_cache_context cache;
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200122#endif
123
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200124 mbedtls_net_init( &listen_fd );
125 mbedtls_net_init( &client_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200126 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200127 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200128 mbedtls_ssl_cookie_init( &cookie_ctx );
129#if defined(MBEDTLS_SSL_CACHE_C)
130 mbedtls_ssl_cache_init( &cache );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200131#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 mbedtls_x509_crt_init( &srvcert );
133 mbedtls_pk_init( &pkey );
134 mbedtls_entropy_init( &entropy );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200135 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200136
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137#if defined(MBEDTLS_DEBUG_C)
138 mbedtls_debug_set_threshold( DEBUG_LEVEL );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200139#endif
140
141 /*
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200142 * 1. Seed the RNG
143 */
144 printf( " . Seeding the random number generator..." );
145 fflush( stdout );
146
147 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy,
148 (const unsigned char *) pers,
149 strlen( pers ) ) ) != 0 )
150 {
151 printf( " failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret );
152 goto exit;
153 }
154
155 printf( " ok\n" );
156
157 /*
158 * 2. Load the certificates and private RSA key
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200159 */
160 printf( "\n . Loading the server cert. and key..." );
161 fflush( stdout );
162
163 /*
164 * This demonstration program uses embedded test certificates.
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200165 * Instead, you may want to use mbedtls_x509_crt_parse_file() to read the
166 * server and CA certificates, as well as mbedtls_pk_parse_keyfile().
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200167 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168 ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) mbedtls_test_srv_crt,
169 mbedtls_test_srv_crt_len );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200170 if( ret != 0 )
171 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200172 printf( " failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200173 goto exit;
174 }
175
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200176 ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) mbedtls_test_cas_pem,
177 mbedtls_test_cas_pem_len );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200178 if( ret != 0 )
179 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200180 printf( " failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200181 goto exit;
182 }
183
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200184 ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_srv_key,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200185 mbedtls_test_srv_key_len, NULL, 0, mbedtls_ctr_drbg_random, &ctr_drbg );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200186 if( ret != 0 )
187 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188 printf( " failed\n ! mbedtls_pk_parse_key returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200189 goto exit;
190 }
191
192 printf( " ok\n" );
193
194 /*
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200195 * 3. Setup the "listening" UDP socket
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200196 */
197 printf( " . Bind on udp/*/4433 ..." );
198 fflush( stdout );
199
Simon Butcher6fd96ad2018-05-12 18:23:32 +0100200 if( ( ret = mbedtls_net_bind( &listen_fd, BIND_IP, "4433", MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200201 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200202 printf( " failed\n ! mbedtls_net_bind returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200203 goto exit;
204 }
205
206 printf( " ok\n" );
207
208 /*
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200209 * 4. Setup stuff
210 */
211 printf( " . Setting up the DTLS data..." );
212 fflush( stdout );
213
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +0200214 if( ( ret = mbedtls_ssl_config_defaults( &conf,
215 MBEDTLS_SSL_IS_SERVER,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +0200216 MBEDTLS_SSL_TRANSPORT_DATAGRAM,
217 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200218 {
219 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned %d\n\n", ret );
220 goto exit;
221 }
222
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +0200223 mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg );
224 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Ryan LaPointe59244e82021-03-01 10:02:35 -0500225 mbedtls_ssl_conf_read_timeout( &conf, READ_TIMEOUT_MS );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200226
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +0200228 mbedtls_ssl_conf_session_cache( &conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +0100229 mbedtls_ssl_cache_get,
230 mbedtls_ssl_cache_set );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200231#endif
232
Mateusz Starzyk55768f22021-05-27 14:57:03 +0200233 mbedtls_ssl_conf_ca_chain( &conf, srvcert.MBEDTLS_PRIVATE(next), NULL );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +0200234 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200235 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +0200236 printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200237 goto exit;
238 }
239
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200240 if( ( ret = mbedtls_ssl_cookie_setup( &cookie_ctx,
241 mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200242 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243 printf( " failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200244 goto exit;
245 }
246
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +0200247 mbedtls_ssl_conf_dtls_cookies( &conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200248 &cookie_ctx );
249
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +0200250 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
251 {
252 printf( " failed\n ! mbedtls_ssl_setup returned %d\n\n", ret );
253 goto exit;
254 }
255
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200256 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
257 mbedtls_timing_get_delay );
258
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200259 printf( " ok\n" );
260
261reset:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200262#ifdef MBEDTLS_ERROR_C
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200263 if( ret != 0 )
264 {
265 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200266 mbedtls_strerror( ret, error_buf, 100 );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200267 printf("Last error was: %d - %s\n\n", ret, error_buf );
268 }
269#endif
270
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200271 mbedtls_net_free( &client_fd );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200272
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200273 mbedtls_ssl_session_reset( &ssl );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200274
275 /*
276 * 3. Wait until a client connects
277 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200278 printf( " . Waiting for a remote connection ..." );
279 fflush( stdout );
280
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200281 if( ( ret = mbedtls_net_accept( &listen_fd, &client_fd,
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +0200282 client_ip, sizeof( client_ip ), &cliip_len ) ) != 0 )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200283 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200284 printf( " failed\n ! mbedtls_net_accept returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200285 goto exit;
286 }
287
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200288 /* For HelloVerifyRequest cookies */
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +0200289 if( ( ret = mbedtls_ssl_set_client_transport_id( &ssl,
290 client_ip, cliip_len ) ) != 0 )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200291 {
292 printf( " failed\n ! "
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200293 "mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200294 goto exit;
295 }
296
Manuel Pégourié-Gonnard1b511f92015-05-06 15:54:23 +0100297 mbedtls_ssl_set_bio( &ssl, &client_fd,
Manuel Pégourié-Gonnard97fd52c2015-05-06 15:38:52 +0100298 mbedtls_net_send, mbedtls_net_recv, mbedtls_net_recv_timeout );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200299
300 printf( " ok\n" );
301
302 /*
303 * 5. Handshake
304 */
305 printf( " . Performing the DTLS handshake..." );
306 fflush( stdout );
307
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200308 do ret = mbedtls_ssl_handshake( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100309 while( ret == MBEDTLS_ERR_SSL_WANT_READ ||
310 ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200311
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200312 if( ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED )
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200313 {
314 printf( " hello verification requested\n" );
315 ret = 0;
316 goto reset;
317 }
318 else if( ret != 0 )
319 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200320 printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200321 goto reset;
322 }
323
324 printf( " ok\n" );
325
326 /*
327 * 6. Read the echo Request
328 */
329 printf( " < Read from client:" );
330 fflush( stdout );
331
332 len = sizeof( buf ) - 1;
333 memset( buf, 0, sizeof( buf ) );
334
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335 do ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100336 while( ret == MBEDTLS_ERR_SSL_WANT_READ ||
337 ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200338
339 if( ret <= 0 )
340 {
341 switch( ret )
342 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100343 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200344 printf( " timeout\n\n" );
345 goto reset;
346
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200347 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200348 printf( " connection was closed gracefully\n" );
349 ret = 0;
350 goto close_notify;
351
352 default:
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200353 printf( " mbedtls_ssl_read returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200354 goto reset;
355 }
356 }
357
358 len = ret;
359 printf( " %d bytes read\n\n%s\n\n", len, buf );
360
361 /*
362 * 7. Write the 200 Response
363 */
364 printf( " > Write to client:" );
365 fflush( stdout );
366
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200367 do ret = mbedtls_ssl_write( &ssl, buf, len );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100368 while( ret == MBEDTLS_ERR_SSL_WANT_READ ||
369 ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200370
371 if( ret < 0 )
372 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200373 printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200374 goto exit;
375 }
376
377 len = ret;
378 printf( " %d bytes written\n\n%s\n\n", len, buf );
379
380 /*
381 * 8. Done, cleanly close the connection
382 */
383close_notify:
384 printf( " . Closing the connection..." );
385
386 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200387 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +0100388 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200389 ret = 0;
390
391 printf( " done\n" );
392
393 goto reset;
394
395 /*
396 * Final clean-ups and exit
397 */
398exit:
399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400#ifdef MBEDTLS_ERROR_C
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200401 if( ret != 0 )
402 {
403 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200404 mbedtls_strerror( ret, error_buf, 100 );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200405 printf( "Last error was: %d - %s\n\n", ret, error_buf );
406 }
407#endif
408
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200409 mbedtls_net_free( &client_fd );
410 mbedtls_net_free( &listen_fd );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200411
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200412 mbedtls_x509_crt_free( &srvcert );
413 mbedtls_pk_free( &pkey );
414 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200415 mbedtls_ssl_config_free( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200416 mbedtls_ssl_cookie_free( &cookie_ctx );
417#if defined(MBEDTLS_SSL_CACHE_C)
418 mbedtls_ssl_cache_free( &cache );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200419#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200420 mbedtls_ctr_drbg_free( &ctr_drbg );
421 mbedtls_entropy_free( &entropy );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200422
423#if defined(_WIN32)
424 printf( " Press Enter to exit this program.\n" );
425 fflush( stdout ); getchar();
426#endif
427
428 /* Shell can not handle large exit numbers -> 1 for errors */
429 if( ret < 0 )
430 ret = 1;
431
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +0200432 mbedtls_exit( ret );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +0200433}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200434#endif /* MBEDTLS_SSL_SRV_C && MBEDTLS_SSL_PROTO_DTLS &&
435 MBEDTLS_SSL_COOKIE_C && MBEDTLS_NET_C && MBEDTLS_ENTROPY_C &&
436 MBEDTLS_CTR_DRBG_C && MBEDTLS_X509_CRT_PARSE_C && MBEDTLS_RSA_C
Mateusz Starzyk1aec6462021-02-08 15:34:42 +0100437 && MBEDTLS_PEM_PARSE_C && MBEDTLS_TIMING_C */