blob: d70fdb1eecdd1b7e6e7deff48ed52f9c1eea2d8d [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL server demonstration program
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19
Bence Szépkútic662b362021-05-27 11:25:03 +020020#include "mbedtls/build_info.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000021
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000022#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000023
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010024#if !defined(MBEDTLS_BIGNUM_C) || !defined(MBEDTLS_PEM_PARSE_C) || \
25 !defined(MBEDTLS_ENTROPY_C) || !defined(MBEDTLS_SSL_TLS_C) || \
26 !defined(MBEDTLS_SSL_SRV_C) || !defined(MBEDTLS_NET_C) || \
27 !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_CTR_DRBG_C) || \
28 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +010029int main(void)
Paul Bakker5690efc2011-05-26 13:16:06 +000030{
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010031 mbedtls_printf("MBEDTLS_BIGNUM_C and/or MBEDTLS_ENTROPY_C "
Gilles Peskine449bd832023-01-11 14:50:10 +010032 "and/or MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_SRV_C and/or "
33 "MBEDTLS_NET_C and/or MBEDTLS_RSA_C and/or "
34 "MBEDTLS_CTR_DRBG_C and/or MBEDTLS_X509_CRT_PARSE_C "
35 "and/or MBEDTLS_PEM_PARSE_C not defined.\n");
36 mbedtls_exit(0);
Paul Bakker5690efc2011-05-26 13:16:06 +000037}
38#else
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010039
40#include <stdlib.h>
41#include <string.h>
42
43#if defined(_WIN32)
44#include <windows.h>
45#endif
46
47#include "mbedtls/entropy.h"
48#include "mbedtls/ctr_drbg.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010049#include "mbedtls/x509.h"
50#include "mbedtls/ssl.h"
Andres AG788aa4a2016-09-14 14:32:09 +010051#include "mbedtls/net_sockets.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010052#include "mbedtls/error.h"
53#include "mbedtls/debug.h"
Mateusz Starzyk1aec6462021-02-08 15:34:42 +010054#include "test/certs.h"
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010055
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020056#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4b3e5ef2015-03-27 11:24:27 +010057#include "mbedtls/ssl_cache.h"
58#endif
59
60#define HTTP_RESPONSE \
61 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
62 "<h2>mbed TLS Test Server</h2>\r\n" \
63 "<p>Successful connection using: %s</p>\r\n"
64
65#define DEBUG_LEVEL 0
66
Simon Butcher63cb97e2018-12-06 17:43:31 +000067
Gilles Peskine449bd832023-01-11 14:50:10 +010068static void my_debug(void *ctx, int level,
69 const char *file, int line,
70 const char *str)
Paul Bakker9a97c5d2013-09-15 17:07:33 +020071{
Paul Bakkerc73079a2014-04-25 16:34:30 +020072 ((void) level);
73
Gilles Peskine449bd832023-01-11 14:50:10 +010074 mbedtls_fprintf((FILE *) ctx, "%s:%04d: %s", file, line, str);
75 fflush((FILE *) ctx);
Paul Bakker9a97c5d2013-09-15 17:07:33 +020076}
77
Gilles Peskine449bd832023-01-11 14:50:10 +010078int main(void)
Paul Bakker5121ce52009-01-03 21:22:43 +000079{
80 int ret, len;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +020081 mbedtls_net_context listen_fd, client_fd;
Paul Bakker5121ce52009-01-03 21:22:43 +000082 unsigned char buf[1024];
Paul Bakkeref3f8c72013-06-24 13:01:08 +020083 const char *pers = "ssl_server";
Paul Bakker5121ce52009-01-03 21:22:43 +000084
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020085 mbedtls_entropy_context entropy;
86 mbedtls_ctr_drbg_context ctr_drbg;
87 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +020088 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020089 mbedtls_x509_crt srvcert;
90 mbedtls_pk_context pkey;
91#if defined(MBEDTLS_SSL_CACHE_C)
92 mbedtls_ssl_cache_context cache;
Paul Bakkerd4324102012-09-26 08:29:38 +000093#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000094
Gilles Peskine449bd832023-01-11 14:50:10 +010095 mbedtls_net_init(&listen_fd);
96 mbedtls_net_init(&client_fd);
97 mbedtls_ssl_init(&ssl);
98 mbedtls_ssl_config_init(&conf);
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100100 mbedtls_ssl_cache_init(&cache);
Paul Bakker0a597072012-09-25 21:55:46 +0000101#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100102 mbedtls_x509_crt_init(&srvcert);
103 mbedtls_pk_init(&pkey);
104 mbedtls_entropy_init(&entropy);
105 mbedtls_ctr_drbg_init(&ctr_drbg);
Paul Bakkerfab5c822012-02-06 16:45:10 +0000106
Przemek Stekiela0a1c1e2023-04-17 11:10:05 +0200107#if defined(MBEDTLS_USE_PSA_CRYPTO)
108 psa_status_t status = psa_crypto_init();
109 if (status != PSA_SUCCESS) {
110 mbedtls_fprintf(stderr, "Failed to initialize PSA Crypto implementation: %d\n",
111 (int) status);
112 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
113 goto exit;
114 }
115#endif /* MBEDTLS_USE_PSA_CRYPTO */
116
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200117#if defined(MBEDTLS_DEBUG_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100118 mbedtls_debug_set_threshold(DEBUG_LEVEL);
Paul Bakkerc73079a2014-04-25 16:34:30 +0200119#endif
120
Paul Bakker5121ce52009-01-03 21:22:43 +0000121 /*
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200122 * 1. Seed the RNG
123 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100124 mbedtls_printf(" . Seeding the random number generator...");
125 fflush(stdout);
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200126
Gilles Peskine449bd832023-01-11 14:50:10 +0100127 if ((ret = mbedtls_ctr_drbg_seed(&ctr_drbg, mbedtls_entropy_func, &entropy,
128 (const unsigned char *) pers,
129 strlen(pers))) != 0) {
130 mbedtls_printf(" failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret);
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200131 goto exit;
132 }
133
Gilles Peskine449bd832023-01-11 14:50:10 +0100134 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200135
136 /*
137 * 2. Load the certificates and private RSA key
Paul Bakker5121ce52009-01-03 21:22:43 +0000138 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100139 mbedtls_printf("\n . Loading the server cert. and key...");
140 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000141
Paul Bakker5121ce52009-01-03 21:22:43 +0000142 /*
143 * This demonstration program uses embedded test certificates.
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144 * Instead, you may want to use mbedtls_x509_crt_parse_file() to read the
145 * server and CA certificates, as well as mbedtls_pk_parse_keyfile().
Paul Bakker5121ce52009-01-03 21:22:43 +0000146 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100147 ret = mbedtls_x509_crt_parse(&srvcert, (const unsigned char *) mbedtls_test_srv_crt,
148 mbedtls_test_srv_crt_len);
149 if (ret != 0) {
150 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000151 goto exit;
152 }
153
Gilles Peskine449bd832023-01-11 14:50:10 +0100154 ret = mbedtls_x509_crt_parse(&srvcert, (const unsigned char *) mbedtls_test_cas_pem,
155 mbedtls_test_cas_pem_len);
156 if (ret != 0) {
157 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000158 goto exit;
159 }
160
Gilles Peskine449bd832023-01-11 14:50:10 +0100161 ret = mbedtls_pk_parse_key(&pkey, (const unsigned char *) mbedtls_test_srv_key,
162 mbedtls_test_srv_key_len, NULL, 0,
163 mbedtls_ctr_drbg_random, &ctr_drbg);
164 if (ret != 0) {
165 mbedtls_printf(" failed\n ! mbedtls_pk_parse_key returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000166 goto exit;
167 }
168
Gilles Peskine449bd832023-01-11 14:50:10 +0100169 mbedtls_printf(" ok\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000170
171 /*
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +0200172 * 3. Setup the listening TCP socket
Paul Bakker5121ce52009-01-03 21:22:43 +0000173 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100174 mbedtls_printf(" . Bind on https://localhost:4433/ ...");
175 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000176
Gilles Peskine449bd832023-01-11 14:50:10 +0100177 if ((ret = mbedtls_net_bind(&listen_fd, NULL, "4433", MBEDTLS_NET_PROTO_TCP)) != 0) {
178 mbedtls_printf(" failed\n ! mbedtls_net_bind returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000179 goto exit;
180 }
181
Gilles Peskine449bd832023-01-11 14:50:10 +0100182 mbedtls_printf(" ok\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000183
184 /*
Paul Bakker508ad5a2011-12-04 17:09:26 +0000185 * 4. Setup stuff
186 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100187 mbedtls_printf(" . Setting up the SSL data....");
188 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000189
Gilles Peskine449bd832023-01-11 14:50:10 +0100190 if ((ret = mbedtls_ssl_config_defaults(&conf,
191 MBEDTLS_SSL_IS_SERVER,
192 MBEDTLS_SSL_TRANSPORT_STREAM,
193 MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
194 mbedtls_printf(" failed\n ! mbedtls_ssl_config_defaults returned %d\n\n", ret);
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200195 goto exit;
196 }
197
Gilles Peskine449bd832023-01-11 14:50:10 +0100198 mbedtls_ssl_conf_rng(&conf, mbedtls_ctr_drbg_random, &ctr_drbg);
199 mbedtls_ssl_conf_dbg(&conf, my_debug, stdout);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000200
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200201#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100202 mbedtls_ssl_conf_session_cache(&conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +0100203 mbedtls_ssl_cache_get,
Gilles Peskine449bd832023-01-11 14:50:10 +0100204 mbedtls_ssl_cache_set);
Paul Bakker0a597072012-09-25 21:55:46 +0000205#endif
Paul Bakker5121ce52009-01-03 21:22:43 +0000206
Gilles Peskine449bd832023-01-11 14:50:10 +0100207 mbedtls_ssl_conf_ca_chain(&conf, srvcert.next, NULL);
208 if ((ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, &pkey)) != 0) {
209 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +0200210 goto exit;
211 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000212
Gilles Peskine449bd832023-01-11 14:50:10 +0100213 if ((ret = mbedtls_ssl_setup(&ssl, &conf)) != 0) {
214 mbedtls_printf(" failed\n ! mbedtls_ssl_setup returned %d\n\n", ret);
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +0200215 goto exit;
216 }
217
Gilles Peskine449bd832023-01-11 14:50:10 +0100218 mbedtls_printf(" ok\n");
Paul Bakker7eb013f2011-10-06 12:37:39 +0000219
220reset:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200221#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +0100222 if (ret != 0) {
Paul Bakkera3d195c2011-11-27 21:07:34 +0000223 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +0100224 mbedtls_strerror(ret, error_buf, 100);
225 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf);
Paul Bakkera3d195c2011-11-27 21:07:34 +0000226 }
227#endif
228
Gilles Peskine449bd832023-01-11 14:50:10 +0100229 mbedtls_net_free(&client_fd);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000230
Gilles Peskine449bd832023-01-11 14:50:10 +0100231 mbedtls_ssl_session_reset(&ssl);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000232
233 /*
234 * 3. Wait until a client connects
235 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100236 mbedtls_printf(" . Waiting for a remote connection ...");
237 fflush(stdout);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000238
Gilles Peskine449bd832023-01-11 14:50:10 +0100239 if ((ret = mbedtls_net_accept(&listen_fd, &client_fd,
240 NULL, 0, NULL)) != 0) {
241 mbedtls_printf(" failed\n ! mbedtls_net_accept returned %d\n\n", ret);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000242 goto exit;
243 }
244
Gilles Peskine449bd832023-01-11 14:50:10 +0100245 mbedtls_ssl_set_bio(&ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv, NULL);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000246
Gilles Peskine449bd832023-01-11 14:50:10 +0100247 mbedtls_printf(" ok\n");
Paul Bakker7eb013f2011-10-06 12:37:39 +0000248
Paul Bakker5121ce52009-01-03 21:22:43 +0000249 /*
250 * 5. Handshake
251 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100252 mbedtls_printf(" . Performing the SSL/TLS handshake...");
253 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000254
Gilles Peskine449bd832023-01-11 14:50:10 +0100255 while ((ret = mbedtls_ssl_handshake(&ssl)) != 0) {
256 if (ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE) {
257 mbedtls_printf(" failed\n ! mbedtls_ssl_handshake returned %d\n\n", ret);
Paul Bakker7eb013f2011-10-06 12:37:39 +0000258 goto reset;
Paul Bakker5121ce52009-01-03 21:22:43 +0000259 }
260 }
261
Gilles Peskine449bd832023-01-11 14:50:10 +0100262 mbedtls_printf(" ok\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000263
264 /*
265 * 6. Read the HTTP Request
266 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100267 mbedtls_printf(" < Read from client:");
268 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000269
Gilles Peskine449bd832023-01-11 14:50:10 +0100270 do {
271 len = sizeof(buf) - 1;
272 memset(buf, 0, sizeof(buf));
273 ret = mbedtls_ssl_read(&ssl, buf, len);
Paul Bakker5121ce52009-01-03 21:22:43 +0000274
Gilles Peskine449bd832023-01-11 14:50:10 +0100275 if (ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE) {
Paul Bakker5121ce52009-01-03 21:22:43 +0000276 continue;
Gilles Peskine449bd832023-01-11 14:50:10 +0100277 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000278
Gilles Peskine449bd832023-01-11 14:50:10 +0100279 if (ret <= 0) {
280 switch (ret) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200281 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Gilles Peskine449bd832023-01-11 14:50:10 +0100282 mbedtls_printf(" connection was closed gracefully\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000283 break;
284
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200285 case MBEDTLS_ERR_NET_CONN_RESET:
Gilles Peskine449bd832023-01-11 14:50:10 +0100286 mbedtls_printf(" connection was reset by peer\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000287 break;
288
289 default:
Gilles Peskine449bd832023-01-11 14:50:10 +0100290 mbedtls_printf(" mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000291 break;
292 }
293
294 break;
295 }
296
297 len = ret;
Gilles Peskine449bd832023-01-11 14:50:10 +0100298 mbedtls_printf(" %d bytes read\n\n%s", len, (char *) buf);
Paul Bakker48916f92012-09-16 19:57:18 +0000299
Gilles Peskine449bd832023-01-11 14:50:10 +0100300 if (ret > 0) {
Paul Bakker48916f92012-09-16 19:57:18 +0000301 break;
Gilles Peskine449bd832023-01-11 14:50:10 +0100302 }
303 } while (1);
Paul Bakker5121ce52009-01-03 21:22:43 +0000304
305 /*
306 * 7. Write the 200 Response
307 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100308 mbedtls_printf(" > Write to client:");
309 fflush(stdout);
Paul Bakker5121ce52009-01-03 21:22:43 +0000310
Gilles Peskine449bd832023-01-11 14:50:10 +0100311 len = sprintf((char *) buf, HTTP_RESPONSE,
312 mbedtls_ssl_get_ciphersuite(&ssl));
Paul Bakker5121ce52009-01-03 21:22:43 +0000313
Gilles Peskine449bd832023-01-11 14:50:10 +0100314 while ((ret = mbedtls_ssl_write(&ssl, buf, len)) <= 0) {
315 if (ret == MBEDTLS_ERR_NET_CONN_RESET) {
316 mbedtls_printf(" failed\n ! peer closed the connection\n\n");
Paul Bakker7eb013f2011-10-06 12:37:39 +0000317 goto reset;
Paul Bakker5121ce52009-01-03 21:22:43 +0000318 }
319
Gilles Peskine449bd832023-01-11 14:50:10 +0100320 if (ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE) {
321 mbedtls_printf(" failed\n ! mbedtls_ssl_write returned %d\n\n", ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000322 goto exit;
323 }
324 }
325
326 len = ret;
Gilles Peskine449bd832023-01-11 14:50:10 +0100327 mbedtls_printf(" %d bytes written\n\n%s\n", len, (char *) buf);
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100328
Gilles Peskine449bd832023-01-11 14:50:10 +0100329 mbedtls_printf(" . Closing the connection...");
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100330
Gilles Peskine449bd832023-01-11 14:50:10 +0100331 while ((ret = mbedtls_ssl_close_notify(&ssl)) < 0) {
332 if (ret != MBEDTLS_ERR_SSL_WANT_READ &&
333 ret != MBEDTLS_ERR_SSL_WANT_WRITE) {
334 mbedtls_printf(" failed\n ! mbedtls_ssl_close_notify returned %d\n\n", ret);
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100335 goto reset;
336 }
337 }
338
Gilles Peskine449bd832023-01-11 14:50:10 +0100339 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +0100340
Paul Bakkera3d195c2011-11-27 21:07:34 +0000341 ret = 0;
Paul Bakker7eb013f2011-10-06 12:37:39 +0000342 goto reset;
Paul Bakker5121ce52009-01-03 21:22:43 +0000343
344exit:
345
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200346#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +0100347 if (ret != 0) {
Paul Bakkera3d195c2011-11-27 21:07:34 +0000348 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +0100349 mbedtls_strerror(ret, error_buf, 100);
350 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf);
Paul Bakkera3d195c2011-11-27 21:07:34 +0000351 }
352#endif
353
Gilles Peskine449bd832023-01-11 14:50:10 +0100354 mbedtls_net_free(&client_fd);
355 mbedtls_net_free(&listen_fd);
Paul Bakker0c226102014-04-17 16:02:36 +0200356
Gilles Peskine449bd832023-01-11 14:50:10 +0100357 mbedtls_x509_crt_free(&srvcert);
358 mbedtls_pk_free(&pkey);
359 mbedtls_ssl_free(&ssl);
360 mbedtls_ssl_config_free(&conf);
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200361#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100362 mbedtls_ssl_cache_free(&cache);
Paul Bakker0a597072012-09-25 21:55:46 +0000363#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100364 mbedtls_ctr_drbg_free(&ctr_drbg);
365 mbedtls_entropy_free(&entropy);
Paul Bakker5121ce52009-01-03 21:22:43 +0000366
Gilles Peskine449bd832023-01-11 14:50:10 +0100367 mbedtls_exit(ret);
Paul Bakker5121ce52009-01-03 21:22:43 +0000368}
Mateusz Starzyk1aec6462021-02-08 15:34:42 +0100369#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C &&
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200370 MBEDTLS_SSL_TLS_C && MBEDTLS_SSL_SRV_C && MBEDTLS_NET_C &&
371 MBEDTLS_RSA_C && MBEDTLS_CTR_DRBG_C && MBEDTLS_X509_CRT_PARSE_C
372 && MBEDTLS_FS_IO && MBEDTLS_PEM_PARSE_C */