blob: e80996cc39c101f050153ea95ae8373f8f3a686e [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +00005 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Paul Bakkerb60b95f2012-09-25 09:05:17 +00006 */
7
Mateusz Starzyk6c2e9b62021-05-19 17:54:54 +02008#define MBEDTLS_ALLOW_PRIVATE_ACCESS
9
Gilles Peskineab7ce962021-01-05 21:27:53 +010010#include "ssl_test_lib.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000011
Gilles Peskineab7ce962021-01-05 21:27:53 +010012#if defined(MBEDTLS_SSL_TEST_IMPOSSIBLE)
Gilles Peskine449bd832023-01-11 14:50:10 +010013int main(void)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020014{
Gilles Peskine449bd832023-01-11 14:50:10 +010015 mbedtls_printf(MBEDTLS_SSL_TEST_IMPOSSIBLE);
16 mbedtls_exit(0);
Gilles Peskineab7ce962021-01-05 21:27:53 +010017}
18#elif !defined(MBEDTLS_SSL_SRV_C)
Gilles Peskine449bd832023-01-11 14:50:10 +010019int main(void)
Gilles Peskineab7ce962021-01-05 21:27:53 +010020{
Gilles Peskine449bd832023-01-11 14:50:10 +010021 mbedtls_printf("MBEDTLS_SSL_SRV_C not defined.\n");
22 mbedtls_exit(0);
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020023}
Gilles Peskineb4df7542021-01-08 21:20:09 +010024#else /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_SRV_C */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +010025
Andres AG692ad842017-01-19 16:30:57 +000026#include <stdint.h>
Andres AG0b736db2017-02-08 14:05:57 +000027
28#if !defined(_MSC_VER)
Andres AG692ad842017-01-19 16:30:57 +000029#include <inttypes.h>
Andres AG0b736db2017-02-08 14:05:57 +000030#endif
Rich Evans18b78c72015-02-11 14:06:19 +000031
32#if !defined(_WIN32)
33#include <signal.h>
34#endif
35
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020036#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000037#include "mbedtls/ssl_cache.h"
Paul Bakker0a597072012-09-25 21:55:46 +000038#endif
39
Przemek Stekiel68a01a62022-10-10 11:31:58 +020040#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +020041#include "mbedtls/ssl_ticket.h"
42#endif
43
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020044#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000045#include "mbedtls/ssl_cookie.h"
Manuel Pégourié-Gonnard232edd42014-07-23 16:56:27 +020046#endif
47
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020048#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && defined(MBEDTLS_FS_IO)
49#define SNI_OPTION
50#endif
51
52#if defined(_WIN32)
53#include <windows.h>
54#endif
55
XiaokangQian318dc762022-04-20 09:43:51 +000056#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +020057#include "test/psa_crypto_helpers.h"
58#endif
59
Valerio Setti5ba1d5e2023-02-22 12:38:54 +010060#include "mbedtls/pk.h"
Przemek Stekiel6d7da5e2023-05-18 16:02:43 +020061#include "mbedtls/dhm.h"
Valerio Setti5ba1d5e2023-02-22 12:38:54 +010062
Simon Butchercce68be2018-07-23 14:26:09 +010063/* Size of memory to be allocated for the heap, when using the library's memory
64 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
toth92g27f9e782021-02-22 13:17:32 +010065#define MEMORY_HEAP_SIZE 180000
Simon Butchercce68be2018-07-23 14:26:09 +010066
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +010067#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020068#define DFL_SERVER_PORT "4433"
Andrzej Kurek30e731d2017-10-12 13:50:29 +020069#define DFL_RESPONSE_SIZE -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +000070#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010071#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010072#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020073#define DFL_READ_TIMEOUT 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +000074#define DFL_CA_FILE ""
75#define DFL_CA_PATH ""
76#define DFL_CRT_FILE ""
77#define DFL_KEY_FILE ""
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +020078#define DFL_KEY_OPAQUE 0
Hanno Beckere58a6302018-11-07 16:20:16 +000079#define DFL_KEY_PWD ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +020080#define DFL_CRT_FILE2 ""
81#define DFL_KEY_FILE2 ""
Hanno Beckere58a6302018-11-07 16:20:16 +000082#define DFL_KEY_PWD2 ""
Gilles Peskinefcca9d82018-01-12 13:47:48 +010083#define DFL_ASYNC_OPERATIONS "-"
Gilles Peskine449bd832023-01-11 14:50:10 +010084#define DFL_ASYNC_PRIVATE_DELAY1 (-1)
85#define DFL_ASYNC_PRIVATE_DELAY2 (-1)
86#define DFL_ASYNC_PRIVATE_ERROR (0)
Paul Bakkerfbb17802013-04-17 19:10:21 +020087#define DFL_PSK ""
Hanno Becker1d911cd2018-11-15 13:06:09 +000088#define DFL_PSK_OPAQUE 0
89#define DFL_PSK_LIST_OPAQUE 0
Paul Bakkerfbb17802013-04-17 19:10:21 +020090#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020091#define DFL_ECJPAKE_PW NULL
Valerio Settid572a822022-11-28 18:27:51 +010092#define DFL_ECJPAKE_PW_OPAQUE 0
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +020093#define DFL_PSK_LIST NULL
Paul Bakkerb60b95f2012-09-25 09:05:17 +000094#define DFL_FORCE_CIPHER 0
Xiaofei Bai746f9482021-11-12 08:53:56 +000095#define DFL_TLS1_3_KEX_MODES MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020096#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010097#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010098#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +020099#define DFL_RENEGO_DELAY -2
Gilles Peskine449bd832023-01-11 14:50:10 +0100100#define DFL_RENEGO_PERIOD ((uint64_t) -1)
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200101#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200102#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +0200103#define DFL_MAX_VERSION -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200104#define DFL_SHA1 -1
Hanno Beckera7d25422019-04-09 17:28:10 +0100105#define DFL_CID_ENABLED 0
106#define DFL_CID_VALUE ""
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100107#define DFL_CID_ENABLED_RENEGO -1
108#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100109#define DFL_AUTH_MODE -1
Janos Follath4817e272017-04-10 13:44:33 +0100110#define DFL_CERT_REQ_CA_LIST MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED
Glenn Straussbd10c4e2022-06-25 03:15:48 -0400111#define DFL_CERT_REQ_DN_HINT 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200112#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100113#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Jerry Yu25ab6542022-09-15 18:32:34 +0800115#define DFL_DUMMY_TICKET 0
Glenn Strausse3282452022-02-03 17:23:24 -0500116#define DFL_TICKET_ROTATE 0
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200117#define DFL_TICKET_TIMEOUT 86400
Gabor Mezeid4bea1e2022-01-12 16:21:15 +0100118#define DFL_TICKET_AEAD MBEDTLS_CIPHER_AES_256_GCM
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100119#define DFL_CACHE_MAX -1
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100120#define DFL_CACHE_TIMEOUT -1
Pengyu Lv753d02f2023-03-07 14:51:09 +0800121#define DFL_CACHE_REMOVE 0
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100122#define DFL_SNI NULL
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200123#define DFL_ALPN_STRING NULL
Przemek Stekiel45255e42023-06-29 13:56:36 +0200124#define DFL_GROUPS NULL
Jerry Yu7854a4e2022-11-05 23:14:47 +0800125#define DFL_MAX_EARLY_DATA_SIZE 0
Hanno Becker11ceadd2021-08-10 13:36:41 +0100126#define DFL_SIG_ALGS NULL
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200127#define DFL_DHM_FILE NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200128#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200129#define DFL_COOKIES 1
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200130#define DFL_ANTI_REPLAY -1
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200131#define DFL_HS_TO_MIN 0
132#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200133#define DFL_DTLS_MTU -1
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200134#define DFL_BADMAC_LIMIT -1
Hanno Beckere7675d02018-08-14 13:28:56 +0100135#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200136#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100137#define DFL_ETM -1
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300138#define DFL_SERIALIZE 0
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200139#define DFL_CONTEXT_FILE ""
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300140#define DFL_EXTENDED_MS_ENFORCE -1
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200141#define DFL_CA_CALLBACK 0
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300142#define DFL_EAP_TLS 0
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200143#define DFL_REPRODUCIBLE 0
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100144#define DFL_NSS_KEYLOG 0
145#define DFL_NSS_KEYLOG_FILE NULL
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200146#define DFL_QUERY_CONFIG_MODE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300147#define DFL_USE_SRTP 0
Ron Eldor311b95a2018-07-08 08:50:31 +0300148#define DFL_SRTP_FORCE_PROFILE 0
Ron Eldor12c6ead2018-07-03 15:08:32 +0300149#define DFL_SRTP_SUPPORT_MKI 0
Przemek Stekiel4ca0d722022-04-25 12:46:22 +0200150#define DFL_KEY_OPAQUE_ALG "none"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000151
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200152#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100153 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
154 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
155 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
156 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
157 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
158 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200159
Paul Bakker8e714d72013-07-18 11:05:13 +0200160/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
161 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000162#define HTTP_RESPONSE \
163 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Gilles Peskinee820c0a2023-08-03 17:45:20 +0200164 "<h2>Mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200165 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000166
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200167/*
168 * Size of the basic I/O buffer. Able to hold our default response.
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200169 */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200170#define DFL_IO_BUF_LEN 200
Manuel Pégourié-Gonnarde7a3b102014-06-11 18:21:20 +0200171
Ronald Crone68ab4f2022-10-05 12:46:29 +0200172#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200173#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000174#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100175 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
176 " default: \"\" (pre-loaded)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100177 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100178 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
179 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100180 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100181 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200182 " default: see note after key_file2\n" \
183 " key_file=%%s default: see note after key_file2\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100184 " key_pwd=%%s Password for key specified by key_file argument\n" \
Hanno Beckere58a6302018-11-07 16:20:16 +0000185 " default: none\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200186 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200187 " default: see note after key_file2\n" \
188 " key_file2=%%s default: see note below\n" \
189 " note: if neither crt_file/key_file nor crt_file2/key_file2 are used,\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200190 " preloaded certificate(s) and key(s) are used if available\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100191 " key_pwd2=%%s Password for key specified by key_file2 argument\n" \
Hanno Beckere58a6302018-11-07 16:20:16 +0000192 " default: none\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200193 " dhm_file=%%s File containing Diffie-Hellman parameters\n" \
194 " default: preloaded parameters\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000195#else
196#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200197 "\n" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200198 " No file operations available (MBEDTLS_FS_IO not defined)\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200199 "\n"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200200#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200201#else
202#define USAGE_IO ""
Ronald Crone68ab4f2022-10-05 12:46:29 +0200203#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
204#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200205#define USAGE_KEY_OPAQUE \
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +0200206 " key_opaque=%%d Handle your private keys as if they were opaque\n" \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200207 " default: 0 (disabled)\n"
208#else
209#define USAGE_KEY_OPAQUE ""
210#endif
Paul Bakkered27a042013-04-18 22:46:23 +0200211
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200212#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100213#define USAGE_SSL_ASYNC \
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100214 " async_operations=%%c... d=decrypt, s=sign (default: -=off)\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100215 " async_private_delay1=%%d Asynchronous delay for key_file or preloaded key\n" \
Gilles Peskine166ce742018-04-30 10:30:49 +0200216 " async_private_delay2=%%d Asynchronous delay for key_file2 and sni\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100217 " default: -1 (not asynchronous)\n" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +0100218 " async_private_error=%%d Async callback error injection (default=0=none,\n" \
Gilles Peskinec9125722018-04-26 07:15:40 +0200219 " 1=start, 2=cancel, 3=resume, negative=first time only)"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100220#else
221#define USAGE_SSL_ASYNC ""
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200222#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100223
Hanno Beckera0e20d02019-05-15 14:03:01 +0100224#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +0100225#define USAGE_CID \
226 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
227 " default: 0 (disabled)\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100228 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100229 " default: same as 'cid' parameter\n" \
Hanno Beckera7d25422019-04-09 17:28:10 +0100230 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100231 " default: \"\"\n" \
232 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100233 " default: same as 'cid_val' parameter\n"
Hanno Beckera0e20d02019-05-15 14:03:01 +0100234#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +0100235#define USAGE_CID ""
Hanno Beckera0e20d02019-05-15 14:03:01 +0100236#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +0100237
Ronald Cron73fe8df2022-10-05 14:31:43 +0200238#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100239#define USAGE_PSK_RAW \
Piotr Nowicki9926eaf2019-11-20 14:54:36 +0100240 " psk=%%s default: \"\" (disabled)\n" \
241 " The PSK values are in hex, without 0x.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100242 " psk_list=%%s default: \"\"\n" \
Andrzej Kurekb274f272019-02-05 05:06:35 -0500243 " A list of (PSK identity, PSK value) pairs.\n" \
244 " The PSK values are in hex, without 0x.\n" \
245 " id1,psk1[,id2,psk2[,...]]\n" \
246 " psk_identity=%%s default: \"Client_identity\"\n"
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100247#if defined(MBEDTLS_USE_PSA_CRYPTO)
248#define USAGE_PSK_SLOT \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000249 " psk_opaque=%%d default: 0 (don't use opaque static PSK)\n" \
250 " Enable this to store the PSK configured through command line\n" \
251 " parameter `psk` in a PSA-based key slot.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100252 " Note: Currently only supported in conjunction with\n" \
253 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
254 " to force a particular PSK-only ciphersuite.\n" \
255 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
256 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
257 " with prepopulated key slots instead of importing raw key material.\n" \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000258 " psk_list_opaque=%%d default: 0 (don't use opaque dynamic PSKs)\n" \
259 " Enable this to store the list of dynamically chosen PSKs configured\n" \
260 " through the command line parameter `psk_list` in PSA-based key slots.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100261 " Note: Currently only supported in conjunction with\n" \
262 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
263 " to force a particular PSK-only ciphersuite.\n" \
264 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
265 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
266 " with prepopulated key slots instead of importing raw key material.\n"
267#else
268#define USAGE_PSK_SLOT ""
269#endif /* MBEDTLS_USE_PSA_CRYPTO */
270#define USAGE_PSK USAGE_PSK_RAW USAGE_PSK_SLOT
Paul Bakkered27a042013-04-18 22:46:23 +0200271#else
272#define USAGE_PSK ""
Ronald Cron73fe8df2022-10-05 14:31:43 +0200273#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Valerio Settibdf04e82023-10-27 12:02:45 +0200274
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200275#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
276#define USAGE_CA_CALLBACK \
277 " ca_callback=%%d default: 0 (disabled)\n" \
278 " Enable this to use the trusted certificate callback function\n"
279#else
280#define USAGE_CA_CALLBACK ""
281#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Valerio Settibdf04e82023-10-27 12:02:45 +0200282
Przemek Stekield61a4d32022-10-11 09:40:40 +0200283#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Valerio Settibdf04e82023-10-27 12:02:45 +0200284#if defined(MBEDTLS_CIPHER_C)
Paul Bakkera503a632013-08-14 13:48:06 +0200285#define USAGE_TICKETS \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +0100286 " tickets=%%d default: 1 (enabled)\n" \
Glenn Strausse3282452022-02-03 17:23:24 -0500287 " ticket_rotate=%%d default: 0 (disabled)\n" \
Gabor Mezeid4bea1e2022-01-12 16:21:15 +0100288 " ticket_timeout=%%d default: 86400 (one day)\n" \
289 " ticket_aead=%%s default: \"AES-256-GCM\"\n"
Valerio Settibdf04e82023-10-27 12:02:45 +0200290#else /* MBEDTLS_CIPHER_C */
291#define USAGE_TICKETS \
292 " tickets=%%d default: 1 (enabled)\n" \
293 " ticket_rotate=%%d default: 0 (disabled)\n" \
294 " ticket_timeout=%%d default: 86400 (one day)\n"
295#endif /* MBEDTLS_CIPHER_C */
296#else /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_TICKET_C */
Paul Bakkera503a632013-08-14 13:48:06 +0200297#define USAGE_TICKETS ""
Przemek Stekield61a4d32022-10-11 09:40:40 +0200298#endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_TICKET_C */
Paul Bakkera503a632013-08-14 13:48:06 +0200299
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300300#define USAGE_EAP_TLS \
301 " eap_tls=%%d default: 0 (disabled)\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100302#define USAGE_NSS_KEYLOG \
Hanno Beckerbc5308c2019-09-09 11:38:51 +0100303 " nss_keylog=%%d default: 0 (disabled)\n" \
304 " This cannot be used with eap_tls=1\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100305#define USAGE_NSS_KEYLOG_FILE \
306 " nss_keylog_file=%%s\n"
Ron Eldor65b56ef2019-09-26 16:40:48 +0300307#if defined(MBEDTLS_SSL_DTLS_SRTP)
308#define USAGE_SRTP \
309 " use_srtp=%%d default: 0 (disabled)\n" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200310 " srtp_force_profile=%%d default: 0 (all enabled)\n" \
Ron Eldor65b56ef2019-09-26 16:40:48 +0300311 " available profiles:\n" \
312 " 1 - SRTP_AES128_CM_HMAC_SHA1_80\n" \
313 " 2 - SRTP_AES128_CM_HMAC_SHA1_32\n" \
314 " 3 - SRTP_NULL_HMAC_SHA1_80\n" \
315 " 4 - SRTP_NULL_HMAC_SHA1_32\n" \
316 " support_mki=%%d default: 0 (not supported)\n"
317#else /* MBEDTLS_SSL_DTLS_SRTP */
318#define USAGE_SRTP ""
319#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300320
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200321#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100322#define USAGE_CACHE \
Pengyu Lvf30488f2023-03-15 09:53:45 +0800323 " cache_max=%%d default: cache default (50)\n" \
324 " cache_remove=%%d default: 0 (don't remove)\n"
Andrzej Kurek554b8202022-03-02 12:33:24 -0500325#if defined(MBEDTLS_HAVE_TIME)
326#define USAGE_CACHE_TIME \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100327 " cache_timeout=%%d default: cache default (1d)\n"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100328#else
Andrzej Kurek554b8202022-03-02 12:33:24 -0500329#define USAGE_CACHE_TIME ""
330#endif
331#else
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100332#define USAGE_CACHE ""
Andrzej Kurek554b8202022-03-02 12:33:24 -0500333#define USAGE_CACHE_TIME ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200334#endif /* MBEDTLS_SSL_CACHE_C */
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100335
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200336#if defined(SNI_OPTION)
Ron Eldor80d04192019-04-04 15:02:01 +0300337#if defined(MBEDTLS_X509_CRL_PARSE_C)
338#define SNI_CRL ",crl"
339#else
340#define SNI_CRL ""
341#endif
342
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100343#define USAGE_SNI \
Gilles Peskine449bd832023-01-11 14:50:10 +0100344 " sni=%%s name1,cert1,key1,ca1"SNI_CRL ",auth1[,...]\n" \
345 " default: disabled\n"
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100346#else
347#define USAGE_SNI ""
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200348#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100349
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200350#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200351#define USAGE_MAX_FRAG_LEN \
352 " max_frag_len=%%d default: 16384 (tls default)\n" \
353 " options: 512, 1024, 2048, 4096\n"
354#else
355#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200356#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200357
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200358#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200359#define USAGE_ALPN \
360 " alpn=%%s default: \"\" (disabled)\n" \
361 " example: spdy/1,http/1.1\n"
362#else
363#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200364#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200367#define USAGE_COOKIES \
368 " cookies=0/1/-1 default: 1 (enabled)\n" \
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200369 " 0: disabled, -1: library default (broken)\n"
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200370#else
371#define USAGE_COOKIES ""
372#endif
373
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200374#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200375#define USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200376 " anti_replay=0/1 default: (library default: enabled)\n"
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200377#else
378#define USAGE_ANTI_REPLAY ""
379#endif
380
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200381#define USAGE_BADMAC_LIMIT \
382 " badmac_limit=%%d default: (library default: disabled)\n"
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200383
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200384#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200385#define USAGE_DTLS \
386 " dtls=%%d default: 0 (TLS)\n" \
387 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200388 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Beckere7675d02018-08-14 13:28:56 +0100389 " mtu=%%d default: (library default: unlimited)\n" \
390 " dgram_packing=%%d default: 1 (allowed)\n" \
391 " allow or forbid packing of multiple\n" \
392 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200393#else
394#define USAGE_DTLS ""
395#endif
396
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200397#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200398#define USAGE_EMS \
399 " extended_ms=0/1 default: (library default: on)\n"
400#else
401#define USAGE_EMS ""
402#endif
403
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200404#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100405#define USAGE_ETM \
406 " etm=0/1 default: (library default: on)\n"
407#else
408#define USAGE_ETM ""
409#endif
410
Philippe Antoine738153a2019-06-18 20:16:43 +0200411#define USAGE_REPRODUCIBLE \
412 " reproducible=0/1 default: 0 (disabled)\n"
413
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200414#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100415#define USAGE_RENEGO \
416 " renegotiation=%%d default: 0 (disabled)\n" \
417 " renegotiate=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +0100418 " renego_delay=%%d default: -2 (library default)\n" \
Andres AG692ad842017-01-19 16:30:57 +0000419 " renego_period=%%d default: (2^64 - 1 for TLS, 2^48 - 1 for DTLS)\n"
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100420#else
421#define USAGE_RENEGO ""
422#endif
423
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200424#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
Valerio Settid6feb202022-12-02 14:28:49 +0100425#if defined(MBEDTLS_USE_PSA_CRYPTO)
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200426#define USAGE_ECJPAKE \
Valerio Settid572a822022-11-28 18:27:51 +0100427 " ecjpake_pw=%%s default: none (disabled)\n" \
428 " ecjpake_pw_opaque=%%d default: 0 (disabled)\n"
Valerio Settid6feb202022-12-02 14:28:49 +0100429#else /* MBEDTLS_USE_PSA_CRYPTO */
430#define USAGE_ECJPAKE \
431 " ecjpake_pw=%%s default: none (disabled)\n"
432#endif /* MBEDTLS_USE_PSA_CRYPTO */
433#else /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200434#define USAGE_ECJPAKE ""
Valerio Settid6feb202022-12-02 14:28:49 +0100435#endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200436
Jerry Yu7854a4e2022-11-05 23:14:47 +0800437#if defined(MBEDTLS_SSL_EARLY_DATA)
438#define USAGE_EARLY_DATA \
Jerry Yud146a372022-12-06 12:33:48 +0800439 " max_early_data_size=%%d default: -1 (disabled)\n" \
440 " options: -1 (disabled), " \
441 " >= 0 (enabled, max amount of early data )\n"
Jerry Yu7854a4e2022-11-05 23:14:47 +0800442#else
443#define USAGE_EARLY_DATA ""
444#endif /* MBEDTLS_SSL_EARLY_DATA */
445
Valerio Settiacd32c02023-06-29 18:06:29 +0200446#if defined(MBEDTLS_PK_HAVE_ECC_KEYS) || \
Przemek Stekielff9fcbc2023-06-05 12:32:55 +0200447 (defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_SOME_EPHEMERAL_ENABLED) && \
448 defined(PSA_WANT_ALG_FFDH))
Przemek Stekiel45255e42023-06-29 13:56:36 +0200449#define USAGE_GROUPS \
450 " groups=a,b,c,d default: \"default\" (library default)\n" \
Hanno Beckere6706e62017-05-15 16:05:15 +0100451 " example: \"secp521r1,brainpoolP512r1\"\n" \
452 " - use \"none\" for empty list\n" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200453 " - see mbedtls_ecp_curve_list()\n" \
454 " for acceptable EC group names\n" \
455 " - the following ffdh groups are supported:\n" \
456 " ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144,\n" \
457 " ffdhe8192\n"
Hanno Beckere6706e62017-05-15 16:05:15 +0100458#else
Przemek Stekiel45255e42023-06-29 13:56:36 +0200459#define USAGE_GROUPS ""
Hanno Beckere6706e62017-05-15 16:05:15 +0100460#endif
461
Ronald Crone68ab4f2022-10-05 12:46:29 +0200462#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +0100463#define USAGE_SIG_ALGS \
464 " sig_algs=a,b,c,d default: \"default\" (library default)\n" \
465 " example: \"ecdsa_secp256r1_sha256,ecdsa_secp384r1_sha384\"\n"
466#else
467#define USAGE_SIG_ALGS ""
468#endif
469
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300470#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
471#define USAGE_SERIALIZATION \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200472 " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
473 " options: 1 (serialize)\n" \
474 " 2 (serialize with re-initialization)\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100475 " context_file=%%s The file path to write a serialized connection\n" \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200476 " in the form of base64 code (serialize option\n" \
477 " must be set)\n" \
478 " default: \"\" (do nothing)\n" \
479 " option: a file path\n"
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300480#else
481#define USAGE_SERIALIZATION ""
482#endif
483
Przemek Stekiel4ca0d722022-04-25 12:46:22 +0200484#define USAGE_KEY_OPAQUE_ALGS \
Ronald Cron50969e32022-09-16 15:54:33 +0200485 " key_opaque_algs=%%s Allowed opaque key 1 algorithms.\n" \
486 " comma-separated pair of values among the following:\n" \
487 " rsa-sign-pkcs1, rsa-sign-pss, rsa-sign-pss-sha256,\n" \
488 " rsa-sign-pss-sha384, rsa-sign-pss-sha512, rsa-decrypt,\n" \
489 " ecdsa-sign, ecdh, none (only acceptable for\n" \
490 " the second value).\n" \
491 " key_opaque_algs2=%%s Allowed opaque key 2 algorithms.\n" \
492 " comma-separated pair of values among the following:\n" \
493 " rsa-sign-pkcs1, rsa-sign-pss, rsa-sign-pss-sha256,\n" \
494 " rsa-sign-pss-sha384, rsa-sign-pss-sha512, rsa-decrypt,\n" \
495 " ecdsa-sign, ecdh, none (only acceptable for\n" \
Przemek Stekiel296bfba2022-05-05 11:08:34 +0200496 " the second value).\n"
Ronald Cron6f135e12021-12-08 16:57:54 +0100497#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +0000498#define USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100499 " tls13_kex_modes=%%s default: all\n" \
Jerry Yu2b7a51b2022-08-01 10:19:13 +0800500 " options: psk, psk_ephemeral, psk_all, ephemeral,\n" \
501 " ephemeral_all, all, psk_or_ephemeral\n"
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100502#else
Xiaofei Bai746f9482021-11-12 08:53:56 +0000503#define USAGE_TLS1_3_KEY_EXCHANGE_MODES ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100504#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100505
506
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200507/* USAGE is arbitrarily split to stay under the portable string literal
508 * length limit: 4095 bytes in C99. */
509#define USAGE1 \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000510 "\n usage: ssl_server2 param=<>...\n" \
511 "\n acceptable parameters:\n" \
Ron Eldor71f68c42017-09-26 11:29:11 +0300512 " server_addr=%%s default: (all interfaces)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000513 " server_port=%%d default: 4433\n" \
514 " debug_level=%%d default: 0 (disabled)\n" \
Yanray Wangeaf46d12022-10-28 10:38:37 +0800515 " build_version=%%d default: none (disabled)\n" \
516 " option: 1 (print build version only and stop)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200517 " buffer_size=%%d default: 200 \n" \
David Horstmannfba138a2021-05-11 15:23:56 +0100518 " (minimum: 1)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200519 " response_size=%%d default: about 152 (basic response)\n" \
520 " (minimum: 0, max: 16384)\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100521 " increases buffer_size if bigger\n" \
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100522 " nbio=%%d default: 0 (blocking I/O)\n" \
523 " options: 1 (non-blocking), 2 (added delays)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100524 " event=%%d default: 0 (loop)\n" \
525 " options: 1 (level-triggered, implies nbio=1),\n" \
Manuel Pégourié-Gonnard22311ae2015-09-09 11:22:58 +0200526 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100527 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200528 USAGE_DTLS \
Ron Eldor6ea64512018-07-02 10:08:07 +0300529 USAGE_SRTP \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200530 USAGE_COOKIES \
531 USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200532 USAGE_BADMAC_LIMIT \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200533 "\n"
534#define USAGE2 \
Manuel Pégourié-Gonnardee6139c2015-05-07 10:18:26 +0100535 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100536 " options: none, optional, required\n" \
Janos Follath4817e272017-04-10 13:44:33 +0100537 " cert_req_ca_list=%%d default: 1 (send ca list)\n" \
538 " options: 1 (send ca list), 0 (don't send)\n" \
Glenn Straussbd10c4e2022-06-25 03:15:48 -0400539 " 2 (send conf dn hint), 3 (send hs dn hint)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000540 USAGE_IO \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200541 USAGE_KEY_OPAQUE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100542 "\n" \
543 USAGE_PSK \
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200544 USAGE_CA_CALLBACK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200545 USAGE_ECJPAKE \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200546 "\n"
547#define USAGE3 \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100548 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100549 USAGE_RENEGO \
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200550 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200551 "\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100552 USAGE_TICKETS \
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300553 USAGE_EAP_TLS \
Philippe Antoine738153a2019-06-18 20:16:43 +0200554 USAGE_REPRODUCIBLE \
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100555 USAGE_NSS_KEYLOG \
556 USAGE_NSS_KEYLOG_FILE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100557 USAGE_CACHE \
Andrzej Kurek554b8202022-03-02 12:33:24 -0500558 USAGE_CACHE_TIME \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100559 USAGE_MAX_FRAG_LEN \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200560 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200561 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100562 USAGE_ETM \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200563 USAGE_GROUPS \
Hanno Becker11ceadd2021-08-10 13:36:41 +0100564 USAGE_SIG_ALGS \
Przemek Stekiel4ca0d722022-04-25 12:46:22 +0200565 USAGE_KEY_OPAQUE_ALGS \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200566 "\n"
Jerry Yub1dc59a2021-08-05 15:58:09 +0800567
Ronald Cron6f135e12021-12-08 16:57:54 +0100568#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +0000569#define TLS1_3_VERSION_OPTIONS ", tls13"
Ronald Cron6f135e12021-12-08 16:57:54 +0100570#else /* MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800571#define TLS1_3_VERSION_OPTIONS ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100572#endif /* !MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800573
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200574#define USAGE4 \
Hanno Becker34ce81f2020-08-17 09:40:54 +0100575 USAGE_SSL_ASYNC \
576 USAGE_SNI \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100577 " allow_sha1=%%d default: 0\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000578 " min_version=%%s default: (library default: tls12)\n" \
579 " max_version=%%s default: (library default: tls12)\n" \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100580 " force_version=%%s default: \"\" (none)\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000581 " options: tls12, dtls12" TLS1_3_VERSION_OPTIONS \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100582 "\n\n" \
583 " force_ciphersuite=<name> default: all enabled\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000584 USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100585 " query_config=<name> return 0 if the specified\n" \
Andres Amaya Garciabc818842018-10-16 21:08:38 +0100586 " configuration macro is defined and 1\n" \
587 " otherwise. The expansion of the macro\n" \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100588 " is printed if it is defined\n" \
589 USAGE_SERIALIZATION \
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +0200590 "\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000591
Gilles Peskine449bd832023-01-11 14:50:10 +0100592#define PUT_UINT64_BE(out_be, in_le, i) \
593 { \
594 (out_be)[(i) + 0] = (unsigned char) (((in_le) >> 56) & 0xFF); \
595 (out_be)[(i) + 1] = (unsigned char) (((in_le) >> 48) & 0xFF); \
596 (out_be)[(i) + 2] = (unsigned char) (((in_le) >> 40) & 0xFF); \
597 (out_be)[(i) + 3] = (unsigned char) (((in_le) >> 32) & 0xFF); \
598 (out_be)[(i) + 4] = (unsigned char) (((in_le) >> 24) & 0xFF); \
599 (out_be)[(i) + 5] = (unsigned char) (((in_le) >> 16) & 0xFF); \
600 (out_be)[(i) + 6] = (unsigned char) (((in_le) >> 8) & 0xFF); \
601 (out_be)[(i) + 7] = (unsigned char) (((in_le) >> 0) & 0xFF); \
602 }
Andres AG692ad842017-01-19 16:30:57 +0000603
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +0200604/* This is global so it can be easily accessed by callback functions */
605rng_context_t rng;
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500606
Rich Evans85b05ec2015-02-12 11:37:29 +0000607/*
608 * global options
609 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100610struct options {
Rich Evans85b05ec2015-02-12 11:37:29 +0000611 const char *server_addr; /* address on which the ssl service runs */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200612 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000613 int debug_level; /* level of debugging */
614 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100615 int event; /* loop or event-driven IO? level or edge triggered? */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200616 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200617 int response_size; /* pad response with header to requested size */
618 uint16_t buffer_size; /* IO buffer size */
Rich Evans85b05ec2015-02-12 11:37:29 +0000619 const char *ca_file; /* the file with the CA certificate(s) */
620 const char *ca_path; /* the path with the CA certificate(s) reside */
621 const char *crt_file; /* the file with the server certificate */
622 const char *key_file; /* the file with the server key */
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200623 int key_opaque; /* handle private key as if it were opaque */
Hanno Beckere58a6302018-11-07 16:20:16 +0000624 const char *key_pwd; /* the password for the server key */
Rich Evans85b05ec2015-02-12 11:37:29 +0000625 const char *crt_file2; /* the file with the 2nd server certificate */
626 const char *key_file2; /* the file with the 2nd server key */
Hanno Beckere58a6302018-11-07 16:20:16 +0000627 const char *key_pwd2; /* the password for the 2nd server key */
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100628 const char *async_operations; /* supported SSL asynchronous operations */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100629 int async_private_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
630 int async_private_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
631 int async_private_error; /* inject error in async private callback */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100632#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000633 int psk_opaque;
634 int psk_list_opaque;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100635#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200636#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Beckercbb59032019-03-28 14:14:22 +0000637 int ca_callback; /* Use callback for trusted certificate list */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200638#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000639 const char *psk; /* the pre-shared key */
640 const char *psk_identity; /* the pre-shared key identity */
641 char *psk_list; /* list of PSK id/key pairs for callback */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200642 const char *ecjpake_pw; /* the EC J-PAKE password */
Valerio Settid6feb202022-12-02 14:28:49 +0100643#if defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settid572a822022-11-28 18:27:51 +0100644 int ecjpake_pw_opaque; /* set to 1 to use the opaque method for setting the password */
Valerio Settid6feb202022-12-02 14:28:49 +0100645#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000646 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
Ronald Cron6f135e12021-12-08 16:57:54 +0100647#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +0100648 int tls13_kex_modes; /* supported TLS 1.3 key exchange modes */
Ronald Cron6f135e12021-12-08 16:57:54 +0100649#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000650 int renegotiation; /* enable / disable renegotiation */
651 int allow_legacy; /* allow legacy renegotiation */
652 int renegotiate; /* attempt renegotiation? */
653 int renego_delay; /* delay before enforcing renegotiation */
Andres AG692ad842017-01-19 16:30:57 +0000654 uint64_t renego_period; /* period for automatic renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000655 int exchanges; /* number of data exchanges */
656 int min_version; /* minimum protocol version accepted */
657 int max_version; /* maximum protocol version accepted */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200658 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000659 int auth_mode; /* verify mode for connection */
Janos Follath4817e272017-04-10 13:44:33 +0100660 int cert_req_ca_list; /* should we send the CA list? */
Glenn Straussbd10c4e2022-06-25 03:15:48 -0400661 int cert_req_dn_hint; /* mode to set DN hints for CA list to send */
Rich Evans85b05ec2015-02-12 11:37:29 +0000662 unsigned char mfl_code; /* code for maximum fragment length */
663 int trunc_hmac; /* accept truncated hmac? */
664 int tickets; /* enable / disable session tickets */
Jerry Yu25ab6542022-09-15 18:32:34 +0800665 int dummy_ticket; /* enable / disable dummy ticket generator */
Glenn Strausse3282452022-02-03 17:23:24 -0500666 int ticket_rotate; /* session ticket rotate (code coverage) */
Rich Evans85b05ec2015-02-12 11:37:29 +0000667 int ticket_timeout; /* session ticket lifetime */
Gabor Mezeid4bea1e2022-01-12 16:21:15 +0100668 int ticket_aead; /* session ticket protection */
Rich Evans85b05ec2015-02-12 11:37:29 +0000669 int cache_max; /* max number of session cache entries */
Andrzej Kurek554b8202022-03-02 12:33:24 -0500670#if defined(MBEDTLS_HAVE_TIME)
671 int cache_timeout; /* expiration delay of session cache entries*/
672#endif
Pengyu Lvb1895892023-03-16 11:38:43 +0800673 int cache_remove; /* enable / disable cache entry removal */
Rich Evans85b05ec2015-02-12 11:37:29 +0000674 char *sni; /* string describing sni information */
Przemek Stekiel45255e42023-06-29 13:56:36 +0200675 const char *groups; /* list of supported groups */
Hanno Becker11ceadd2021-08-10 13:36:41 +0100676 const char *sig_algs; /* supported TLS 1.3 signature algorithms */
Rich Evans85b05ec2015-02-12 11:37:29 +0000677 const char *alpn_string; /* ALPN supported protocols */
678 const char *dhm_file; /* the file with the DH parameters */
679 int extended_ms; /* allow negotiation of extended MS? */
680 int etm; /* allow negotiation of encrypt-then-MAC? */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000681 int transport; /* TLS or DTLS? */
682 int cookies; /* Use cookies for DTLS? -1 to break them */
683 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
684 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
685 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800686 int dtls_mtu; /* UDP Maximum transport unit for DTLS */
Hanno Beckere7675d02018-08-14 13:28:56 +0100687 int dgram_packing; /* allow/forbid datagram packing */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000688 int badmac_limit; /* Limit of records with bad MAC */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300689 int eap_tls; /* derive EAP-TLS keying material? */
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100690 int nss_keylog; /* export NSS key log material */
691 const char *nss_keylog_file; /* NSS key log file */
Hanno Beckera7d25422019-04-09 17:28:10 +0100692 int cid_enabled; /* whether to use the CID extension or not */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100693 int cid_enabled_renego; /* whether to use the CID extension or not
694 * during renegotiation */
Hanno Beckera7d25422019-04-09 17:28:10 +0100695 const char *cid_val; /* the CID to use for incoming messages */
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300696 int serialize; /* serialize/deserialize connection */
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200697 const char *context_file; /* the file to write a serialized connection
698 * in the form of base64 code (serialize
699 * option must be set) */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100700 const char *cid_val_renego; /* the CID to use for incoming messages
701 * after renegotiation */
Philippe Antoine154feb22019-06-11 17:50:23 +0200702 int reproducible; /* make communication reproducible */
Jerry Yu54dfcb72022-12-05 15:43:09 +0800703 uint32_t max_early_data_size; /* max amount of early data */
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200704 int query_config_mode; /* whether to read config */
Ron Eldor6ea64512018-07-02 10:08:07 +0300705 int use_srtp; /* Support SRTP */
706 int force_srtp_profile; /* SRTP protection profile to use or all */
Ron Eldor12c6ead2018-07-03 15:08:32 +0300707 int support_mki; /* The dtls mki mki support */
Przemek Stekiel344c5612022-05-02 14:17:35 +0200708 const char *key1_opaque_alg1; /* Allowed opaque key 1 alg 1 */
Jan Bruckner25fdc2a2022-07-26 10:45:07 +0200709 const char *key1_opaque_alg2; /* Allowed opaque key 1 alg 2 */
Przemek Stekiel344c5612022-05-02 14:17:35 +0200710 const char *key2_opaque_alg1; /* Allowed opaque key 2 alg 1 */
Jan Bruckner25fdc2a2022-07-26 10:45:07 +0200711 const char *key2_opaque_alg2; /* Allowed opaque key 2 alg 2 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000712} opt;
713
Gilles Peskine0d980b82021-01-05 23:34:27 +0100714#include "ssl_test_common_source.c"
Hanno Beckerdcc94e62019-07-03 17:05:43 +0100715
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200716/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200717 * Return authmode from string, or -1 on error
718 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100719static int get_auth_mode(const char *s)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200720{
Gilles Peskine449bd832023-01-11 14:50:10 +0100721 if (strcmp(s, "none") == 0) {
722 return MBEDTLS_SSL_VERIFY_NONE;
723 }
724 if (strcmp(s, "optional") == 0) {
725 return MBEDTLS_SSL_VERIFY_OPTIONAL;
726 }
727 if (strcmp(s, "required") == 0) {
728 return MBEDTLS_SSL_VERIFY_REQUIRED;
729 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200730
Gilles Peskine449bd832023-01-11 14:50:10 +0100731 return -1;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200732}
733
734/*
Przemek Stekiel77fc9ab2022-04-29 09:51:54 +0200735 * Used by sni_parse and psk_parse to handle comma-separated lists
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200736 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100737#define GET_ITEM(dst) \
Hanno Becker1eeca412018-10-15 12:01:35 +0100738 do \
739 { \
740 (dst) = p; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100741 while (*p != ',') \
742 if (++p > end) \
743 goto error; \
Hanno Becker1eeca412018-10-15 12:01:35 +0100744 *p++ = '\0'; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100745 } while (0)
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200746
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200747#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100748typedef struct _sni_entry sni_entry;
749
750struct _sni_entry {
751 const char *name;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200752 mbedtls_x509_crt *cert;
753 mbedtls_pk_context *key;
Gilles Peskine449bd832023-01-11 14:50:10 +0100754 mbedtls_x509_crt *ca;
755 mbedtls_x509_crl *crl;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200756 int authmode;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100757 sni_entry *next;
758};
759
Gilles Peskine449bd832023-01-11 14:50:10 +0100760void sni_free(sni_entry *head)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100761{
762 sni_entry *cur = head, *next;
763
Gilles Peskine449bd832023-01-11 14:50:10 +0100764 while (cur != NULL) {
765 mbedtls_x509_crt_free(cur->cert);
766 mbedtls_free(cur->cert);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100767
Gilles Peskine449bd832023-01-11 14:50:10 +0100768 mbedtls_pk_free(cur->key);
769 mbedtls_free(cur->key);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100770
Gilles Peskine449bd832023-01-11 14:50:10 +0100771 mbedtls_x509_crt_free(cur->ca);
772 mbedtls_free(cur->ca);
Ron Eldor80d04192019-04-04 15:02:01 +0300773#if defined(MBEDTLS_X509_CRL_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100774 mbedtls_x509_crl_free(cur->crl);
775 mbedtls_free(cur->crl);
Ron Eldor80d04192019-04-04 15:02:01 +0300776#endif
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100777 next = cur->next;
Gilles Peskine449bd832023-01-11 14:50:10 +0100778 mbedtls_free(cur);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100779 cur = next;
780 }
781}
782
783/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200784 * Parse a string of sextuples name1,crt1,key1,ca1,crl1,auth1[,...]
785 * into a usable sni_entry list. For ca1, crl1, auth1, the special value
786 * '-' means unset. If ca1 is unset, then crl1 is ignored too.
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000787 *
788 * Modifies the input string! This is not production quality!
789 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100790sni_entry *sni_parse(char *sni_string)
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000791{
792 sni_entry *cur = NULL, *new = NULL;
793 char *p = sni_string;
794 char *end = p;
Ron Eldor80d04192019-04-04 15:02:01 +0300795 char *crt_file, *key_file, *ca_file, *auth_str;
796#if defined(MBEDTLS_X509_CRL_PARSE_C)
797 char *crl_file;
798#endif
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000799
Gilles Peskine449bd832023-01-11 14:50:10 +0100800 while (*end != '\0') {
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000801 ++end;
Gilles Peskine449bd832023-01-11 14:50:10 +0100802 }
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000803 *end = ',';
804
Gilles Peskine449bd832023-01-11 14:50:10 +0100805 while (p <= end) {
806 if ((new = mbedtls_calloc(1, sizeof(sni_entry))) == NULL) {
807 sni_free(cur);
808 return NULL;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000809 }
810
Gilles Peskine449bd832023-01-11 14:50:10 +0100811 GET_ITEM(new->name);
812 GET_ITEM(crt_file);
813 GET_ITEM(key_file);
814 GET_ITEM(ca_file);
Ron Eldor80d04192019-04-04 15:02:01 +0300815#if defined(MBEDTLS_X509_CRL_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100816 GET_ITEM(crl_file);
Ron Eldor80d04192019-04-04 15:02:01 +0300817#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100818 GET_ITEM(auth_str);
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000819
Gilles Peskine449bd832023-01-11 14:50:10 +0100820 if ((new->cert = mbedtls_calloc(1, sizeof(mbedtls_x509_crt))) == NULL ||
821 (new->key = mbedtls_calloc(1, sizeof(mbedtls_pk_context))) == NULL) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200822 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100823 }
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000824
Gilles Peskine449bd832023-01-11 14:50:10 +0100825 mbedtls_x509_crt_init(new->cert);
826 mbedtls_pk_init(new->key);
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000827
Gilles Peskine449bd832023-01-11 14:50:10 +0100828 if (mbedtls_x509_crt_parse_file(new->cert, crt_file) != 0 ||
829 mbedtls_pk_parse_keyfile(new->key, key_file, "", rng_get, &rng) != 0) {
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000830 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100831 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200832
Gilles Peskine449bd832023-01-11 14:50:10 +0100833 if (strcmp(ca_file, "-") != 0) {
834 if ((new->ca = mbedtls_calloc(1, sizeof(mbedtls_x509_crt))) == NULL) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200835 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100836 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200837
Gilles Peskine449bd832023-01-11 14:50:10 +0100838 mbedtls_x509_crt_init(new->ca);
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200839
Gilles Peskine449bd832023-01-11 14:50:10 +0100840 if (mbedtls_x509_crt_parse_file(new->ca, ca_file) != 0) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200841 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100842 }
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000843 }
844
Ron Eldor80d04192019-04-04 15:02:01 +0300845#if defined(MBEDTLS_X509_CRL_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100846 if (strcmp(crl_file, "-") != 0) {
847 if ((new->crl = mbedtls_calloc(1, sizeof(mbedtls_x509_crl))) == NULL) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200848 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100849 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200850
Gilles Peskine449bd832023-01-11 14:50:10 +0100851 mbedtls_x509_crl_init(new->crl);
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200852
Gilles Peskine449bd832023-01-11 14:50:10 +0100853 if (mbedtls_x509_crl_parse_file(new->crl, crl_file) != 0) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200854 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100855 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200856 }
Ron Eldor80d04192019-04-04 15:02:01 +0300857#endif
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200858
Gilles Peskine449bd832023-01-11 14:50:10 +0100859 if (strcmp(auth_str, "-") != 0) {
860 if ((new->authmode = get_auth_mode(auth_str)) < 0) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200861 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100862 }
863 } else {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200864 new->authmode = DFL_AUTH_MODE;
Gilles Peskine449bd832023-01-11 14:50:10 +0100865 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200866
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000867 new->next = cur;
868 cur = new;
869 }
870
Gilles Peskine449bd832023-01-11 14:50:10 +0100871 return cur;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000872
873error:
Gilles Peskine449bd832023-01-11 14:50:10 +0100874 sni_free(new);
875 sni_free(cur);
876 return NULL;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000877}
878
879/*
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100880 * SNI callback.
881 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100882int sni_callback(void *p_info, mbedtls_ssl_context *ssl,
883 const unsigned char *name, size_t name_len)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100884{
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200885 const sni_entry *cur = (const sni_entry *) p_info;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100886
Glenn Strauss48a37f02022-01-24 16:40:20 -0500887 /* preserve behavior which checks for SNI match in sni_callback() for
888 * the benefits of tests using sni_callback(), even though the actual
889 * certificate assignment has moved to certificate selection callback
890 * in this application. This exercises sni_callback and cert_callback
891 * even though real applications might choose to do this differently.
892 * Application might choose to save name and name_len in user_data for
893 * later use in certificate selection callback.
894 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100895 while (cur != NULL) {
896 if (name_len == strlen(cur->name) &&
897 memcmp(name, cur->name, name_len) == 0) {
Glenn Strauss48a37f02022-01-24 16:40:20 -0500898 void *p;
899 *(const void **)&p = cur;
Gilles Peskine449bd832023-01-11 14:50:10 +0100900 mbedtls_ssl_set_user_data_p(ssl, p);
901 return 0;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100902 }
903
Mateusz Starzyk55768f22021-05-27 14:57:03 +0200904 cur = cur->next;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100905 }
906
Gilles Peskine449bd832023-01-11 14:50:10 +0100907 return -1;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100908}
909
Glenn Strauss48a37f02022-01-24 16:40:20 -0500910/*
911 * server certificate selection callback.
912 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100913int cert_callback(mbedtls_ssl_context *ssl)
Glenn Strauss48a37f02022-01-24 16:40:20 -0500914{
Gilles Peskine449bd832023-01-11 14:50:10 +0100915 const sni_entry *cur = (sni_entry *) mbedtls_ssl_get_user_data_p(ssl);
916 if (cur != NULL) {
Glenn Strauss48a37f02022-01-24 16:40:20 -0500917 /*(exercise mbedtls_ssl_get_hs_sni(); not otherwise used here)*/
918 size_t name_len;
Gilles Peskine449bd832023-01-11 14:50:10 +0100919 const unsigned char *name = mbedtls_ssl_get_hs_sni(ssl, &name_len);
920 if (strlen(cur->name) != name_len ||
921 memcmp(cur->name, name, name_len) != 0) {
922 return MBEDTLS_ERR_SSL_DECODE_ERROR;
923 }
Glenn Strauss48a37f02022-01-24 16:40:20 -0500924
Gilles Peskine449bd832023-01-11 14:50:10 +0100925 if (cur->ca != NULL) {
926 mbedtls_ssl_set_hs_ca_chain(ssl, cur->ca, cur->crl);
927 }
Glenn Strauss48a37f02022-01-24 16:40:20 -0500928
Gilles Peskine449bd832023-01-11 14:50:10 +0100929 if (cur->authmode != DFL_AUTH_MODE) {
930 mbedtls_ssl_set_hs_authmode(ssl, cur->authmode);
931 }
Glenn Strauss48a37f02022-01-24 16:40:20 -0500932
Gilles Peskine449bd832023-01-11 14:50:10 +0100933 return mbedtls_ssl_set_hs_own_cert(ssl, cur->cert, cur->key);
Glenn Strauss48a37f02022-01-24 16:40:20 -0500934 }
935
Gilles Peskine449bd832023-01-11 14:50:10 +0100936 return 0;
Glenn Strauss48a37f02022-01-24 16:40:20 -0500937}
938
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200939#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100940
Ronald Cron73fe8df2022-10-05 14:31:43 +0200941#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Becker554b6ea2019-04-30 14:18:06 +0100942
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200943typedef struct _psk_entry psk_entry;
944
Gilles Peskine449bd832023-01-11 14:50:10 +0100945struct _psk_entry {
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200946 const char *name;
947 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200948 unsigned char key[MBEDTLS_PSK_MAX_LEN];
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100949#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek03e01462022-01-03 12:53:24 +0100950 mbedtls_svc_key_id_t slot;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100951#endif /* MBEDTLS_USE_PSA_CRYPTO */
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200952 psk_entry *next;
953};
954
955/*
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000956 * Free a list of psk_entry's
957 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100958int psk_free(psk_entry *head)
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000959{
960 psk_entry *next;
961
Gilles Peskine449bd832023-01-11 14:50:10 +0100962 while (head != NULL) {
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000963#if defined(MBEDTLS_USE_PSA_CRYPTO)
964 psa_status_t status;
Andrzej Kurek03e01462022-01-03 12:53:24 +0100965 mbedtls_svc_key_id_t const slot = head->slot;
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000966
Gilles Peskine449bd832023-01-11 14:50:10 +0100967 if (MBEDTLS_SVC_KEY_ID_GET_KEY_ID(slot) != 0) {
968 status = psa_destroy_key(slot);
969 if (status != PSA_SUCCESS) {
970 return status;
971 }
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000972 }
973#endif /* MBEDTLS_USE_PSA_CRYPTO */
974
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000975 next = head->next;
Gilles Peskine449bd832023-01-11 14:50:10 +0100976 mbedtls_free(head);
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000977 head = next;
978 }
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000979
Gilles Peskine449bd832023-01-11 14:50:10 +0100980 return 0;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000981}
982
983/*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200984 * Parse a string of pairs name1,key1[,name2,key2[,...]]
985 * into a usable psk_entry list.
986 *
987 * Modifies the input string! This is not production quality!
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200988 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100989psk_entry *psk_parse(char *psk_string)
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200990{
991 psk_entry *cur = NULL, *new = NULL;
992 char *p = psk_string;
993 char *end = p;
994 char *key_hex;
995
Gilles Peskine449bd832023-01-11 14:50:10 +0100996 while (*end != '\0') {
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200997 ++end;
Gilles Peskine449bd832023-01-11 14:50:10 +0100998 }
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200999 *end = ',';
1000
Gilles Peskine449bd832023-01-11 14:50:10 +01001001 while (p <= end) {
1002 if ((new = mbedtls_calloc(1, sizeof(psk_entry))) == NULL) {
Manuel Pégourié-Gonnardb1990952015-02-18 09:32:06 +00001003 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +01001004 }
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001005
Gilles Peskine449bd832023-01-11 14:50:10 +01001006 memset(new, 0, sizeof(psk_entry));
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001007
Gilles Peskine449bd832023-01-11 14:50:10 +01001008 GET_ITEM(new->name);
1009 GET_ITEM(key_hex);
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001010
Gilles Peskine449bd832023-01-11 14:50:10 +01001011 if (mbedtls_test_unhexify(new->key, MBEDTLS_PSK_MAX_LEN,
1012 key_hex, &new->key_len) != 0) {
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +00001013 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +01001014 }
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001015
1016 new->next = cur;
1017 cur = new;
1018 }
1019
Gilles Peskine449bd832023-01-11 14:50:10 +01001020 return cur;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001021
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +00001022error:
Gilles Peskine449bd832023-01-11 14:50:10 +01001023 psk_free(new);
1024 psk_free(cur);
1025 return 0;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001026}
1027
1028/*
1029 * PSK callback
1030 */
Gilles Peskine449bd832023-01-11 14:50:10 +01001031int psk_callback(void *p_info, mbedtls_ssl_context *ssl,
1032 const unsigned char *name, size_t name_len)
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001033{
1034 psk_entry *cur = (psk_entry *) p_info;
1035
Gilles Peskine449bd832023-01-11 14:50:10 +01001036 while (cur != NULL) {
1037 if (name_len == strlen(cur->name) &&
1038 memcmp(name, cur->name, name_len) == 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001039#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001040 if (MBEDTLS_SVC_KEY_ID_GET_KEY_ID(cur->slot) != 0) {
1041 return mbedtls_ssl_set_hs_psk_opaque(ssl, cur->slot);
1042 } else
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001043#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001044 return mbedtls_ssl_set_hs_psk(ssl, cur->key, cur->key_len);
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001045 }
1046
Mateusz Starzyk55768f22021-05-27 14:57:03 +02001047 cur = cur->next;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001048 }
1049
Gilles Peskine449bd832023-01-11 14:50:10 +01001050 return -1;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001051}
Ronald Cron73fe8df2022-10-05 14:31:43 +02001052#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +02001053
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001054static mbedtls_net_context listen_fd, client_fd;
Paul Bakkerbc3e54c2014-08-18 14:36:17 +02001055
1056/* Interruption handler to ensure clean exit (for valgrind testing) */
1057#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001058static int received_sigterm = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01001059void term_handler(int sig)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001060{
1061 ((void) sig);
1062 received_sigterm = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01001063 mbedtls_net_free(&listen_fd); /* causes mbedtls_net_accept() to abort */
1064 mbedtls_net_free(&client_fd); /* causes net_read() to abort */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001065}
Paul Bakkerc1283d32014-08-18 11:05:51 +02001066#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001067
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02001068/** Return true if \p ret is a status code indicating that there is an
1069 * operation in progress on an SSL connection, and false if it indicates
1070 * success or a fatal error.
1071 *
1072 * The possible operations in progress are:
1073 *
1074 * - A read, when the SSL input buffer does not contain a full message.
1075 * - A write, when the SSL output buffer contains some data that has not
1076 * been sent over the network yet.
1077 * - An asynchronous callback that has not completed yet. */
Gilles Peskine449bd832023-01-11 14:50:10 +01001078static int mbedtls_status_is_ssl_in_progress(int ret)
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02001079{
Gilles Peskine449bd832023-01-11 14:50:10 +01001080 return ret == MBEDTLS_ERR_SSL_WANT_READ ||
1081 ret == MBEDTLS_ERR_SSL_WANT_WRITE ||
1082 ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS;
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02001083}
1084
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001085#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01001086typedef struct {
Gilles Peskine44817442018-06-13 18:09:28 +02001087 mbedtls_x509_crt *cert; /*!< Certificate corresponding to the key */
1088 mbedtls_pk_context *pk; /*!< Private key */
1089 unsigned delay; /*!< Number of resume steps to go through */
1090 unsigned pk_owned : 1; /*!< Whether to free the pk object on exit */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001091} ssl_async_key_slot_t;
1092
1093typedef enum {
Gilles Peskinead28bf02018-04-26 00:19:16 +02001094 SSL_ASYNC_INJECT_ERROR_NONE = 0, /*!< Let the callbacks succeed */
1095 SSL_ASYNC_INJECT_ERROR_START, /*!< Inject error during start */
1096 SSL_ASYNC_INJECT_ERROR_CANCEL, /*!< Close the connection after async start */
1097 SSL_ASYNC_INJECT_ERROR_RESUME, /*!< Inject error during resume */
Gilles Peskinec9125722018-04-26 07:15:40 +02001098#define SSL_ASYNC_INJECT_ERROR_MAX SSL_ASYNC_INJECT_ERROR_RESUME
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001099} ssl_async_inject_error_t;
1100
Gilles Peskine449bd832023-01-11 14:50:10 +01001101typedef struct {
Gilles Peskinee2479892018-06-13 18:06:51 +02001102 ssl_async_key_slot_t slots[4]; /* key, key2, sni1, sni2 */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001103 size_t slots_used;
1104 ssl_async_inject_error_t inject_error;
1105 int (*f_rng)(void *, unsigned char *, size_t);
1106 void *p_rng;
1107} ssl_async_key_context_t;
1108
Gilles Peskine449bd832023-01-11 14:50:10 +01001109int ssl_async_set_key(ssl_async_key_context_t *ctx,
1110 mbedtls_x509_crt *cert,
1111 mbedtls_pk_context *pk,
1112 int pk_take_ownership,
1113 unsigned delay)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001114{
Gilles Peskine449bd832023-01-11 14:50:10 +01001115 if (ctx->slots_used >= sizeof(ctx->slots) / sizeof(*ctx->slots)) {
1116 return -1;
1117 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001118 ctx->slots[ctx->slots_used].cert = cert;
1119 ctx->slots[ctx->slots_used].pk = pk;
1120 ctx->slots[ctx->slots_used].delay = delay;
Gilles Peskine44817442018-06-13 18:09:28 +02001121 ctx->slots[ctx->slots_used].pk_owned = pk_take_ownership;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001122 ++ctx->slots_used;
Gilles Peskine449bd832023-01-11 14:50:10 +01001123 return 0;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001124}
1125
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001126#define SSL_ASYNC_INPUT_MAX_SIZE 512
Gilles Peskined3268832018-04-26 06:23:59 +02001127
Gilles Peskine449bd832023-01-11 14:50:10 +01001128typedef enum {
Gilles Peskined3268832018-04-26 06:23:59 +02001129 ASYNC_OP_SIGN,
1130 ASYNC_OP_DECRYPT,
1131} ssl_async_operation_type_t;
Gilles Peskined3268832018-04-26 06:23:59 +02001132
Gilles Peskine449bd832023-01-11 14:50:10 +01001133typedef struct {
Gilles Peskine6331d782018-04-26 13:27:43 +02001134 unsigned slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001135 ssl_async_operation_type_t operation_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001136 mbedtls_md_type_t md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001137 unsigned char input[SSL_ASYNC_INPUT_MAX_SIZE];
1138 size_t input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001139 unsigned remaining_delay;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001140} ssl_async_operation_context_t;
1141
Ronald Crone68ab4f2022-10-05 12:46:29 +02001142#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Andrzej Kurekb50754a2022-10-13 14:19:01 -04001143
1144/* Note that ssl_async_operation_type_t and the array below need to be kept in sync!
1145 * `ssl_async_operation_names[op]` is the name of op for each value `op`
1146 * of type `ssl_async_operation_type_t`. */
1147static const char *const ssl_async_operation_names[] =
1148{
1149 "sign",
1150 "decrypt",
1151};
1152
Gilles Peskine449bd832023-01-11 14:50:10 +01001153static int ssl_async_start(mbedtls_ssl_context *ssl,
1154 mbedtls_x509_crt *cert,
1155 ssl_async_operation_type_t op_type,
1156 mbedtls_md_type_t md_alg,
1157 const unsigned char *input,
1158 size_t input_len)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001159{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001160 ssl_async_key_context_t *config_data =
Gilles Peskine449bd832023-01-11 14:50:10 +01001161 mbedtls_ssl_conf_get_async_config_data(ssl->conf);
Gilles Peskine6331d782018-04-26 13:27:43 +02001162 unsigned slot;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001163 ssl_async_operation_context_t *ctx = NULL;
Gilles Peskined3268832018-04-26 06:23:59 +02001164 const char *op_name = ssl_async_operation_names[op_type];
Gilles Peskinef1127252018-04-24 13:05:39 +02001165
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001166 {
1167 char dn[100];
Gilles Peskine449bd832023-01-11 14:50:10 +01001168 if (mbedtls_x509_dn_gets(dn, sizeof(dn), &cert->subject) > 0) {
1169 mbedtls_printf("Async %s callback: looking for DN=%s\n",
1170 op_name, dn);
1171 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001172 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001173
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001174 /* Look for a private key that matches the public key in cert.
1175 * Since this test code has the private key inside Mbed TLS,
1176 * we call mbedtls_pk_check_pair to match a private key with the
1177 * public key. */
Gilles Peskine449bd832023-01-11 14:50:10 +01001178 for (slot = 0; slot < config_data->slots_used; slot++) {
1179 if (mbedtls_pk_check_pair(&cert->pk,
1180 config_data->slots[slot].pk,
1181 rng_get, &rng) == 0) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001182 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01001183 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001184 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001185 if (slot == config_data->slots_used) {
1186 mbedtls_printf("Async %s callback: no key matches this certificate.\n",
1187 op_name);
1188 return MBEDTLS_ERR_SSL_HW_ACCEL_FALLTHROUGH;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001189 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001190 mbedtls_printf("Async %s callback: using key slot %u, delay=%u.\n",
1191 op_name, slot, config_data->slots[slot].delay);
Gilles Peskinef1127252018-04-24 13:05:39 +02001192
Gilles Peskine449bd832023-01-11 14:50:10 +01001193 if (config_data->inject_error == SSL_ASYNC_INJECT_ERROR_START) {
1194 mbedtls_printf("Async %s callback: injected error\n", op_name);
1195 return MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001196 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001197
Gilles Peskine449bd832023-01-11 14:50:10 +01001198 if (input_len > SSL_ASYNC_INPUT_MAX_SIZE) {
1199 return MBEDTLS_ERR_SSL_BAD_INPUT_DATA;
1200 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001201
Gilles Peskine449bd832023-01-11 14:50:10 +01001202 ctx = mbedtls_calloc(1, sizeof(*ctx));
1203 if (ctx == NULL) {
1204 return MBEDTLS_ERR_SSL_ALLOC_FAILED;
1205 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001206 ctx->slot = slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001207 ctx->operation_type = op_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001208 ctx->md_alg = md_alg;
Gilles Peskine449bd832023-01-11 14:50:10 +01001209 memcpy(ctx->input, input, input_len);
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001210 ctx->input_len = input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001211 ctx->remaining_delay = config_data->slots[slot].delay;
Gilles Peskine449bd832023-01-11 14:50:10 +01001212 mbedtls_ssl_set_async_operation_data(ssl, ctx);
Gilles Peskinef1127252018-04-24 13:05:39 +02001213
Gilles Peskine449bd832023-01-11 14:50:10 +01001214 if (ctx->remaining_delay == 0) {
1215 return 0;
1216 } else {
1217 return MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS;
1218 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001219}
1220
Gilles Peskine449bd832023-01-11 14:50:10 +01001221static int ssl_async_sign(mbedtls_ssl_context *ssl,
1222 mbedtls_x509_crt *cert,
1223 mbedtls_md_type_t md_alg,
1224 const unsigned char *hash,
1225 size_t hash_len)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001226{
Gilles Peskine449bd832023-01-11 14:50:10 +01001227 return ssl_async_start(ssl, cert,
1228 ASYNC_OP_SIGN, md_alg,
1229 hash, hash_len);
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001230}
1231
Gilles Peskine449bd832023-01-11 14:50:10 +01001232static int ssl_async_decrypt(mbedtls_ssl_context *ssl,
1233 mbedtls_x509_crt *cert,
1234 const unsigned char *input,
1235 size_t input_len)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001236{
Gilles Peskine449bd832023-01-11 14:50:10 +01001237 return ssl_async_start(ssl, cert,
1238 ASYNC_OP_DECRYPT, MBEDTLS_MD_NONE,
1239 input, input_len);
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001240}
1241
Gilles Peskine449bd832023-01-11 14:50:10 +01001242static int ssl_async_resume(mbedtls_ssl_context *ssl,
1243 unsigned char *output,
1244 size_t *output_len,
1245 size_t output_size)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001246{
Gilles Peskine449bd832023-01-11 14:50:10 +01001247 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data(ssl);
Gilles Peskine8f97af72018-04-26 11:46:10 +02001248 ssl_async_key_context_t *config_data =
Gilles Peskine449bd832023-01-11 14:50:10 +01001249 mbedtls_ssl_conf_get_async_config_data(ssl->conf);
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001250 ssl_async_key_slot_t *key_slot = &config_data->slots[ctx->slot];
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001251 int ret;
Gilles Peskinef5a99962018-04-30 16:37:23 +02001252 const char *op_name;
Gilles Peskinef1127252018-04-24 13:05:39 +02001253
Gilles Peskine449bd832023-01-11 14:50:10 +01001254 if (ctx->remaining_delay > 0) {
Gilles Peskineceb541b2018-04-26 06:30:45 +02001255 --ctx->remaining_delay;
Gilles Peskine449bd832023-01-11 14:50:10 +01001256 mbedtls_printf("Async resume (slot %u): call %u more times.\n",
1257 ctx->slot, ctx->remaining_delay);
1258 return MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001259 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001260
Gilles Peskine449bd832023-01-11 14:50:10 +01001261 switch (ctx->operation_type) {
Gilles Peskined3268832018-04-26 06:23:59 +02001262 case ASYNC_OP_DECRYPT:
Gilles Peskine449bd832023-01-11 14:50:10 +01001263 ret = mbedtls_pk_decrypt(key_slot->pk,
1264 ctx->input, ctx->input_len,
1265 output, output_len, output_size,
1266 config_data->f_rng, config_data->p_rng);
Gilles Peskined3268832018-04-26 06:23:59 +02001267 break;
1268 case ASYNC_OP_SIGN:
Gilles Peskine449bd832023-01-11 14:50:10 +01001269 ret = mbedtls_pk_sign(key_slot->pk,
1270 ctx->md_alg,
1271 ctx->input, ctx->input_len,
1272 output, output_size, output_len,
1273 config_data->f_rng, config_data->p_rng);
Gilles Peskined3268832018-04-26 06:23:59 +02001274 break;
1275 default:
Gilles Peskine449bd832023-01-11 14:50:10 +01001276 mbedtls_printf(
1277 "Async resume (slot %u): unknown operation type %ld. This shouldn't happen.\n",
1278 ctx->slot,
1279 (long) ctx->operation_type);
1280 mbedtls_free(ctx);
1281 return MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE;
Gilles Peskined3268832018-04-26 06:23:59 +02001282 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001283 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001284
Gilles Peskinef5a99962018-04-30 16:37:23 +02001285 op_name = ssl_async_operation_names[ctx->operation_type];
1286
Gilles Peskine449bd832023-01-11 14:50:10 +01001287 if (config_data->inject_error == SSL_ASYNC_INJECT_ERROR_RESUME) {
1288 mbedtls_printf("Async resume callback: %s done but injected error\n",
1289 op_name);
1290 mbedtls_free(ctx);
1291 return MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001292 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001293
Gilles Peskine449bd832023-01-11 14:50:10 +01001294 mbedtls_printf("Async resume (slot %u): %s done, status=%d.\n",
1295 ctx->slot, op_name, ret);
1296 mbedtls_free(ctx);
1297 return ret;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001298}
1299
Gilles Peskine449bd832023-01-11 14:50:10 +01001300static void ssl_async_cancel(mbedtls_ssl_context *ssl)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001301{
Gilles Peskine449bd832023-01-11 14:50:10 +01001302 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data(ssl);
1303 mbedtls_printf("Async cancel callback.\n");
1304 mbedtls_free(ctx);
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001305}
Ronald Crone68ab4f2022-10-05 12:46:29 +02001306#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001307#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001308
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001309#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cron73fe8df2022-10-05 14:31:43 +02001310#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001311static psa_status_t psa_setup_psk_key_slot(mbedtls_svc_key_id_t *slot,
1312 psa_algorithm_t alg,
1313 unsigned char *psk,
1314 size_t psk_len)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001315{
1316 psa_status_t status;
Janos Follathbe4efc22019-08-08 11:38:18 +01001317 psa_key_attributes_t key_attributes;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001318
Janos Follathbe4efc22019-08-08 11:38:18 +01001319 key_attributes = psa_key_attributes_init();
Gilles Peskine449bd832023-01-11 14:50:10 +01001320 psa_set_key_usage_flags(&key_attributes, PSA_KEY_USAGE_DERIVE);
1321 psa_set_key_algorithm(&key_attributes, alg);
1322 psa_set_key_type(&key_attributes, PSA_KEY_TYPE_DERIVE);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001323
Gilles Peskine449bd832023-01-11 14:50:10 +01001324 status = psa_import_key(&key_attributes, psk, psk_len, slot);
1325 if (status != PSA_SUCCESS) {
1326 fprintf(stderr, "IMPORT\n");
1327 return status;
Hanno Becker1d911cd2018-11-15 13:06:09 +00001328 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001329
Gilles Peskine449bd832023-01-11 14:50:10 +01001330 return PSA_SUCCESS;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001331}
Ronald Cron73fe8df2022-10-05 14:31:43 +02001332#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001333#endif /* MBEDTLS_USE_PSA_CRYPTO */
1334
Hanno Beckera0e20d02019-05-15 14:03:01 +01001335#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01001336int report_cid_usage(mbedtls_ssl_context *ssl,
1337 const char *additional_description)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001338{
1339 int ret;
Gilles Peskine449bd832023-01-11 14:50:10 +01001340 unsigned char peer_cid[MBEDTLS_SSL_CID_OUT_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001341 size_t peer_cid_len;
1342 int cid_negotiated;
1343
Gilles Peskine449bd832023-01-11 14:50:10 +01001344 if (opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
1345 return 0;
1346 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001347
1348 /* Check if the use of a CID has been negotiated */
Gilles Peskine449bd832023-01-11 14:50:10 +01001349 ret = mbedtls_ssl_get_peer_cid(ssl, &cid_negotiated,
1350 peer_cid, &peer_cid_len);
1351 if (ret != 0) {
1352 mbedtls_printf(" failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
1353 (unsigned int) -ret);
1354 return ret;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001355 }
1356
Gilles Peskine449bd832023-01-11 14:50:10 +01001357 if (cid_negotiated == MBEDTLS_SSL_CID_DISABLED) {
1358 if (opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED) {
1359 mbedtls_printf("(%s) Use of Connection ID was not offered by client.\n",
1360 additional_description);
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001361 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001362 } else {
1363 size_t idx = 0;
1364 mbedtls_printf("(%s) Use of Connection ID has been negotiated.\n",
1365 additional_description);
1366 mbedtls_printf("(%s) Peer CID (length %u Bytes): ",
1367 additional_description,
1368 (unsigned) peer_cid_len);
1369 while (idx < peer_cid_len) {
1370 mbedtls_printf("%02x ", peer_cid[idx]);
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001371 idx++;
1372 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001373 mbedtls_printf("\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001374 }
1375
Gilles Peskine449bd832023-01-11 14:50:10 +01001376 return 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001377}
Hanno Beckera0e20d02019-05-15 14:03:01 +01001378#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001379
Jerry Yu6916e702022-10-10 21:33:51 +08001380#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_HAVE_TIME)
Tom Cosgrovede857252023-02-02 06:41:21 +00001381static inline void put_unaligned_uint32(void *p, uint32_t x)
1382{
1383 memcpy(p, &x, sizeof(x));
1384}
1385
Jerry Yu03b8f9d2022-10-08 12:40:33 +08001386/* Functions for session ticket tests */
Gilles Peskine449bd832023-01-11 14:50:10 +01001387int dummy_ticket_write(void *p_ticket, const mbedtls_ssl_session *session,
1388 unsigned char *start, const unsigned char *end,
1389 size_t *tlen, uint32_t *ticket_lifetime)
Jerry Yu25ab6542022-09-15 18:32:34 +08001390{
1391 int ret;
1392 unsigned char *p = start;
1393 size_t clear_len;
1394 ((void) p_ticket);
1395
Gilles Peskine449bd832023-01-11 14:50:10 +01001396 if (end - p < 4) {
1397 return MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL;
Jerry Yu25ab6542022-09-15 18:32:34 +08001398 }
Tom Cosgrovede857252023-02-02 06:41:21 +00001399 put_unaligned_uint32(p, 7 * 24 * 3600);
Jerry Yu25ab6542022-09-15 18:32:34 +08001400 *ticket_lifetime = 7 * 24 * 3600;
1401 p += 4;
1402
1403 /* Dump session state */
Gilles Peskine449bd832023-01-11 14:50:10 +01001404 if ((ret = mbedtls_ssl_session_save(session, p, end - p,
1405 &clear_len)) != 0) {
1406 return ret;
Jerry Yu25ab6542022-09-15 18:32:34 +08001407 }
1408
1409 *tlen = 4 + clear_len;
1410
Gilles Peskine449bd832023-01-11 14:50:10 +01001411 return 0;
Jerry Yu25ab6542022-09-15 18:32:34 +08001412}
1413
Gilles Peskine449bd832023-01-11 14:50:10 +01001414int dummy_ticket_parse(void *p_ticket, mbedtls_ssl_session *session,
1415 unsigned char *buf, size_t len)
Jerry Yu25ab6542022-09-15 18:32:34 +08001416{
1417 int ret;
1418 ((void) p_ticket);
1419
Gilles Peskine449bd832023-01-11 14:50:10 +01001420 if ((ret = mbedtls_ssl_session_load(session, buf + 4, len - 4)) != 0) {
1421 return ret;
1422 }
Jerry Yu25ab6542022-09-15 18:32:34 +08001423
Pengyu Lv302feb32022-12-09 14:27:08 +08001424 switch (opt.dummy_ticket % 11) {
Jerry Yu25ab6542022-09-15 18:32:34 +08001425 case 1:
Gilles Peskine449bd832023-01-11 14:50:10 +01001426 return MBEDTLS_ERR_SSL_INVALID_MAC;
Jerry Yu25ab6542022-09-15 18:32:34 +08001427 case 2:
Gilles Peskine449bd832023-01-11 14:50:10 +01001428 return MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED;
Jerry Yu25ab6542022-09-15 18:32:34 +08001429 case 3:
Gilles Peskine449bd832023-01-11 14:50:10 +01001430 session->start = mbedtls_time(NULL) + 10;
Jerry Yu25ab6542022-09-15 18:32:34 +08001431 break;
1432 case 4:
Gilles Peskine449bd832023-01-11 14:50:10 +01001433 session->start = mbedtls_time(NULL) - 10 - 7 * 24 * 3600;
Jerry Yu25ab6542022-09-15 18:32:34 +08001434 break;
1435 case 5:
Gilles Peskine449bd832023-01-11 14:50:10 +01001436 session->start = mbedtls_time(NULL) - 10;
Jerry Yu25ab6542022-09-15 18:32:34 +08001437 break;
1438 case 6:
Gilles Peskine449bd832023-01-11 14:50:10 +01001439 session->start = mbedtls_time(NULL);
Jerry Yu03b8f9d2022-10-08 12:40:33 +08001440#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Jerry Yu25ab6542022-09-15 18:32:34 +08001441 session->ticket_age_add -= 1000;
Jerry Yu03b8f9d2022-10-08 12:40:33 +08001442#endif
Jerry Yu25ab6542022-09-15 18:32:34 +08001443 break;
Pengyu Lv302feb32022-12-09 14:27:08 +08001444#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
1445 case 7:
1446 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_NONE;
1447 break;
1448 case 8:
1449 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK;
1450 break;
1451 case 9:
1452 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL;
1453 break;
1454 case 10:
1455 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ALL;
1456 break;
1457#endif
Jerry Yu25ab6542022-09-15 18:32:34 +08001458 default:
1459 break;
1460 }
1461
Gilles Peskine449bd832023-01-11 14:50:10 +01001462 return ret;
Jerry Yu25ab6542022-09-15 18:32:34 +08001463}
Jerry Yu6916e702022-10-10 21:33:51 +08001464#endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_HAVE_TIME */
Jerry Yu25ab6542022-09-15 18:32:34 +08001465
Gilles Peskine449bd832023-01-11 14:50:10 +01001466int main(int argc, char *argv[])
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001467{
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00001468 int ret = 0, len, written, frags, exchanges_left;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001469 int query_config_ret = 0;
Hanno Beckerdcc94e62019-07-03 17:05:43 +01001470 io_ctx_t io_ctx;
Gilles Peskine449bd832023-01-11 14:50:10 +01001471 unsigned char *buf = 0;
Ronald Cron73fe8df2022-10-05 14:31:43 +02001472#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001473#if defined(MBEDTLS_USE_PSA_CRYPTO)
1474 psa_algorithm_t alg = 0;
Andrzej Kurek03e01462022-01-03 12:53:24 +01001475 mbedtls_svc_key_id_t psk_slot = MBEDTLS_SVC_KEY_ID_INIT;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001476#endif /* MBEDTLS_USE_PSA_CRYPTO */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001477 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerfbb17802013-04-17 19:10:21 +02001478 size_t psk_len = 0;
Paul Bakker9b7fb6f2014-06-12 23:01:43 +02001479 psk_entry *psk_info = NULL;
Paul Bakkered27a042013-04-18 22:46:23 +02001480#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +02001481 const char *pers = "ssl_server2";
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02001482 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02001483 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001484#if defined(MBEDTLS_SSL_COOKIE_C)
1485 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001486#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001487
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001488 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001489 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001490#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001491 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001492#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001493#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001494 unsigned char renego_period[8] = { 0 };
1495#endif
Ronald Crone68ab4f2022-10-05 12:46:29 +02001496#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +02001497 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001498 mbedtls_x509_crt cacert;
1499 mbedtls_x509_crt srvcert;
1500 mbedtls_pk_context pkey;
1501 mbedtls_x509_crt srvcert2;
1502 mbedtls_pk_context pkey2;
Andrzej Kurek6ee1e202022-10-12 10:17:25 -04001503 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02001504#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek03e01462022-01-03 12:53:24 +01001505 mbedtls_svc_key_id_t key_slot = MBEDTLS_SVC_KEY_ID_INIT; /* invalid key slot */
1506 mbedtls_svc_key_id_t key_slot2 = MBEDTLS_SVC_KEY_ID_INIT; /* invalid key slot */
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02001507#endif
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02001508 int key_cert_init = 0, key_cert_init2 = 0;
Ronald Crone68ab4f2022-10-05 12:46:29 +02001509#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001510#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001511 ssl_async_key_context_t ssl_async_keys;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001512#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001513#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1514 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001515#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001516#if defined(MBEDTLS_SSL_CACHE_C)
1517 mbedtls_ssl_cache_context cache;
Paul Bakker0a597072012-09-25 21:55:46 +00001518#endif
Przemek Stekiel68a01a62022-10-10 11:31:58 +02001519#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001520 mbedtls_ssl_ticket_context ticket_ctx;
Przemek Stekield61a4d32022-10-11 09:40:40 +02001521#endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_TICKET_C */
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02001522#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001523 sni_entry *sni_info = NULL;
1524#endif
Przemek Stekiel45255e42023-06-29 13:56:36 +02001525 uint16_t group_list[GROUP_LIST_SIZE];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001526#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +01001527 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001528#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001529#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Simon Butchercce68be2018-07-23 14:26:09 +01001530 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
Paul Bakker82024bf2013-07-04 11:52:32 +02001531#endif
Hanno Beckera0e20d02019-05-15 14:03:01 +01001532#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +01001533 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001534 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckera7d25422019-04-09 17:28:10 +01001535 size_t cid_len = 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001536 size_t cid_renego_len = 0;
Hanno Beckera7d25422019-04-09 17:28:10 +01001537#endif
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02001538#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
1539 unsigned char *context_buf = NULL;
Gilles Peskine4e8b5942019-09-20 19:12:31 +02001540 size_t context_buf_len = 0;
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02001541#endif
Valerio Setti77e83152022-11-29 17:17:11 +01001542#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
1543 defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settid572a822022-11-28 18:27:51 +01001544 mbedtls_svc_key_id_t ecjpake_pw_slot = MBEDTLS_SVC_KEY_ID_INIT; /* ecjpake password key slot */
Valerio Setti77e83152022-11-29 17:17:11 +01001545#endif /* MBEDTLS_USE_PSA_CRYPTO && MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Hanno Beckera7d25422019-04-09 17:28:10 +01001546
Ronald Crone68ab4f2022-10-05 12:46:29 +02001547#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +01001548 uint16_t sig_alg_list[SIG_ALG_LIST_SIZE];
Ronald Cron81378b72022-10-05 09:18:01 +02001549#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01001550
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001551 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001552 char *p, *q;
1553 const int *list;
XiaokangQian318dc762022-04-20 09:43:51 +00001554#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker5a9942e2018-11-12 17:47:48 +00001555 psa_status_t status;
1556#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001557 unsigned char eap_tls_keymaterial[16];
1558 unsigned char eap_tls_iv[8];
Gilles Peskine449bd832023-01-11 14:50:10 +01001559 const char *eap_tls_label = "client EAP encryption";
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001560 eap_tls_keys eap_tls_keying;
Gilles Peskine449bd832023-01-11 14:50:10 +01001561#if defined(MBEDTLS_SSL_DTLS_SRTP)
Ron Eldor65b56ef2019-09-26 16:40:48 +03001562 /*! master keys and master salt for SRTP generated during handshake */
Gilles Peskine449bd832023-01-11 14:50:10 +01001563 unsigned char dtls_srtp_key_material[MBEDTLS_TLS_SRTP_MAX_KEY_MATERIAL_LENGTH];
1564 const char *dtls_srtp_label = "EXTRACTOR-dtls_srtp";
1565 dtls_srtp_keys dtls_srtp_keying;
1566 const mbedtls_ssl_srtp_profile default_profiles[] = {
1567 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80,
1568 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32,
1569 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80,
1570 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32,
1571 MBEDTLS_TLS_SRTP_UNSET
1572 };
Ron Eldor65b56ef2019-09-26 16:40:48 +03001573#endif /* MBEDTLS_SSL_DTLS_SRTP */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001574
Jerry Yud146a372022-12-06 12:33:48 +08001575#if defined(MBEDTLS_SSL_EARLY_DATA)
1576 int tls13_early_data_enabled = MBEDTLS_SSL_EARLY_DATA_DISABLED;
1577#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001578#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001579 mbedtls_memory_buffer_alloc_init(alloc_buf, sizeof(alloc_buf));
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001580#if defined(MBEDTLS_MEMORY_DEBUG)
1581 size_t current_heap_memory, peak_heap_memory, heap_blocks;
1582#endif /* MBEDTLS_MEMORY_DEBUG */
1583#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Paul Bakker82024bf2013-07-04 11:52:32 +02001584
Gilles Peskine60fe6602021-02-16 18:56:42 +01001585#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine449bd832023-01-11 14:50:10 +01001586 test_hooks_init();
Gilles Peskine60fe6602021-02-16 18:56:42 +01001587#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01001588
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001589 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +02001590 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001591 */
Gilles Peskine449bd832023-01-11 14:50:10 +01001592 mbedtls_net_init(&client_fd);
1593 mbedtls_net_init(&listen_fd);
1594 mbedtls_ssl_init(&ssl);
1595 mbedtls_ssl_config_init(&conf);
1596 rng_init(&rng);
Ronald Crone68ab4f2022-10-05 12:46:29 +02001597#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001598 mbedtls_x509_crt_init(&cacert);
1599 mbedtls_x509_crt_init(&srvcert);
1600 mbedtls_pk_init(&pkey);
1601 mbedtls_x509_crt_init(&srvcert2);
1602 mbedtls_pk_init(&pkey2);
Andrzej Kurekb50754a2022-10-13 14:19:01 -04001603#endif
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001604#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01001605 memset(&ssl_async_keys, 0, sizeof(ssl_async_keys));
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001606#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001607#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001608 mbedtls_dhm_init(&dhm);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001609#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001610#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001611 mbedtls_ssl_cache_init(&cache);
Paul Bakker0a597072012-09-25 21:55:46 +00001612#endif
Przemek Stekiel68a01a62022-10-10 11:31:58 +02001613#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001614 mbedtls_ssl_ticket_init(&ticket_ctx);
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001615#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001616#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01001617 memset((void *) alpn_list, 0, sizeof(alpn_list));
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001618#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001619#if defined(MBEDTLS_SSL_COOKIE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001620 mbedtls_ssl_cookie_init(&cookie_ctx);
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001621#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001622
XiaokangQian318dc762022-04-20 09:43:51 +00001623#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker5a9942e2018-11-12 17:47:48 +00001624 status = psa_crypto_init();
Gilles Peskine449bd832023-01-11 14:50:10 +01001625 if (status != PSA_SUCCESS) {
1626 mbedtls_fprintf(stderr, "Failed to initialize PSA Crypto implementation: %d\n",
1627 (int) status);
Hanno Becker5a9942e2018-11-12 17:47:48 +00001628 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
1629 goto exit;
1630 }
Gilles Peskine48113eb2021-02-09 10:25:20 +01001631#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine21462112021-01-13 23:53:09 +01001632#if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
Gilles Peskine449bd832023-01-11 14:50:10 +01001633 mbedtls_test_enable_insecure_external_rng();
Gilles Peskine94ad8312021-01-25 13:42:28 +01001634#endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
Hanno Becker5a9942e2018-11-12 17:47:48 +00001635
Paul Bakkerc1283d32014-08-18 11:05:51 +02001636#if !defined(_WIN32)
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001637 /* Abort cleanly on SIGTERM and SIGINT */
Gilles Peskine449bd832023-01-11 14:50:10 +01001638 signal(SIGTERM, term_handler);
1639 signal(SIGINT, term_handler);
Paul Bakkerc1283d32014-08-18 11:05:51 +02001640#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001641
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001642 opt.buffer_size = DFL_IO_BUF_LEN;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001643 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001644 opt.server_port = DFL_SERVER_PORT;
1645 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker16970d22017-10-10 15:56:37 +01001646 opt.event = DFL_EVENT;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001647 opt.response_size = DFL_RESPONSE_SIZE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001648 opt.nbio = DFL_NBIO;
Hanno Beckera7d25422019-04-09 17:28:10 +01001649 opt.cid_enabled = DFL_CID_ENABLED;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001650 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
Hanno Beckera7d25422019-04-09 17:28:10 +01001651 opt.cid_val = DFL_CID_VALUE;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001652 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001653 opt.read_timeout = DFL_READ_TIMEOUT;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001654 opt.ca_file = DFL_CA_FILE;
1655 opt.ca_path = DFL_CA_PATH;
1656 opt.crt_file = DFL_CRT_FILE;
1657 opt.key_file = DFL_KEY_FILE;
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02001658 opt.key_opaque = DFL_KEY_OPAQUE;
Hanno Beckere58a6302018-11-07 16:20:16 +00001659 opt.key_pwd = DFL_KEY_PWD;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001660 opt.crt_file2 = DFL_CRT_FILE2;
1661 opt.key_file2 = DFL_KEY_FILE2;
Hanno Beckere58a6302018-11-07 16:20:16 +00001662 opt.key_pwd2 = DFL_KEY_PWD2;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001663 opt.async_operations = DFL_ASYNC_OPERATIONS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001664 opt.async_private_delay1 = DFL_ASYNC_PRIVATE_DELAY1;
1665 opt.async_private_delay2 = DFL_ASYNC_PRIVATE_DELAY2;
1666 opt.async_private_error = DFL_ASYNC_PRIVATE_ERROR;
Paul Bakkerfbb17802013-04-17 19:10:21 +02001667 opt.psk = DFL_PSK;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001668#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001669 opt.psk_opaque = DFL_PSK_OPAQUE;
1670 opt.psk_list_opaque = DFL_PSK_LIST_OPAQUE;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001671#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001672#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1673 opt.ca_callback = DFL_CA_CALLBACK;
1674#endif
Paul Bakkerfbb17802013-04-17 19:10:21 +02001675 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001676 opt.psk_list = DFL_PSK_LIST;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001677 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Valerio Settid6feb202022-12-02 14:28:49 +01001678#if defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settid572a822022-11-28 18:27:51 +01001679 opt.ecjpake_pw_opaque = DFL_ECJPAKE_PW_OPAQUE;
Valerio Settid6feb202022-12-02 14:28:49 +01001680#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001681 opt.force_ciphersuite[0] = DFL_FORCE_CIPHER;
Ronald Cron6f135e12021-12-08 16:57:54 +01001682#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +00001683 opt.tls13_kex_modes = DFL_TLS1_3_KEX_MODES;
Ronald Cron6f135e12021-12-08 16:57:54 +01001684#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001685 opt.renegotiation = DFL_RENEGOTIATION;
1686 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001687 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001688 opt.renego_delay = DFL_RENEGO_DELAY;
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001689 opt.renego_period = DFL_RENEGO_PERIOD;
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001690 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001691 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001692 opt.max_version = DFL_MAX_VERSION;
Gilles Peskinebc70a182017-05-09 15:59:24 +02001693 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001694 opt.auth_mode = DFL_AUTH_MODE;
Janos Follath4817e272017-04-10 13:44:33 +01001695 opt.cert_req_ca_list = DFL_CERT_REQ_CA_LIST;
Glenn Straussbd10c4e2022-06-25 03:15:48 -04001696 opt.cert_req_dn_hint = DFL_CERT_REQ_DN_HINT;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001697 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001698 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001699 opt.tickets = DFL_TICKETS;
Jerry Yu25ab6542022-09-15 18:32:34 +08001700 opt.dummy_ticket = DFL_DUMMY_TICKET;
Glenn Strausse3282452022-02-03 17:23:24 -05001701 opt.ticket_rotate = DFL_TICKET_ROTATE;
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001702 opt.ticket_timeout = DFL_TICKET_TIMEOUT;
Gabor Mezeid4bea1e2022-01-12 16:21:15 +01001703 opt.ticket_aead = DFL_TICKET_AEAD;
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001704 opt.cache_max = DFL_CACHE_MAX;
Andrzej Kurek554b8202022-03-02 12:33:24 -05001705#if defined(MBEDTLS_HAVE_TIME)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001706 opt.cache_timeout = DFL_CACHE_TIMEOUT;
Andrzej Kurek554b8202022-03-02 12:33:24 -05001707#endif
Pengyu Lv753d02f2023-03-07 14:51:09 +08001708 opt.cache_remove = DFL_CACHE_REMOVE;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001709 opt.sni = DFL_SNI;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001710 opt.alpn_string = DFL_ALPN_STRING;
Przemek Stekiel45255e42023-06-29 13:56:36 +02001711 opt.groups = DFL_GROUPS;
Jerry Yu7854a4e2022-11-05 23:14:47 +08001712 opt.max_early_data_size = DFL_MAX_EARLY_DATA_SIZE;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001713 opt.sig_algs = DFL_SIG_ALGS;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001714 opt.dhm_file = DFL_DHM_FILE;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001715 opt.transport = DFL_TRANSPORT;
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001716 opt.cookies = DFL_COOKIES;
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001717 opt.anti_replay = DFL_ANTI_REPLAY;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001718 opt.hs_to_min = DFL_HS_TO_MIN;
1719 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001720 opt.dtls_mtu = DFL_DTLS_MTU;
Hanno Beckere7675d02018-08-14 13:28:56 +01001721 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001722 opt.badmac_limit = DFL_BADMAC_LIMIT;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001723 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001724 opt.etm = DFL_ETM;
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001725 opt.serialize = DFL_SERIALIZE;
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001726 opt.context_file = DFL_CONTEXT_FILE;
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001727 opt.eap_tls = DFL_EAP_TLS;
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001728 opt.reproducible = DFL_REPRODUCIBLE;
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001729 opt.nss_keylog = DFL_NSS_KEYLOG;
1730 opt.nss_keylog_file = DFL_NSS_KEYLOG_FILE;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001731 opt.query_config_mode = DFL_QUERY_CONFIG_MODE;
Ron Eldor6ea64512018-07-02 10:08:07 +03001732 opt.use_srtp = DFL_USE_SRTP;
1733 opt.force_srtp_profile = DFL_SRTP_FORCE_PROFILE;
Ron Eldor12c6ead2018-07-03 15:08:32 +03001734 opt.support_mki = DFL_SRTP_SUPPORT_MKI;
Przemek Stekiel344c5612022-05-02 14:17:35 +02001735 opt.key1_opaque_alg1 = DFL_KEY_OPAQUE_ALG;
1736 opt.key1_opaque_alg2 = DFL_KEY_OPAQUE_ALG;
1737 opt.key2_opaque_alg1 = DFL_KEY_OPAQUE_ALG;
1738 opt.key2_opaque_alg2 = DFL_KEY_OPAQUE_ALG;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001739
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +02001740 p = q = NULL;
Manuel Pégourié-Gonnard3eea9a42023-06-26 11:29:35 +02001741 if (argc < 1) {
Manuel Pégourié-Gonnard0b744342023-06-26 11:28:00 +02001742usage:
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +02001743 if (p != NULL && q != NULL) {
1744 printf("unrecognized value for '%s': '%s'\n", p, q);
1745 } else if (p != NULL && q == NULL) {
1746 printf("unrecognized param: '%s'\n", p);
1747 }
1748
1749 mbedtls_printf("usage: ssl_client2 [param=value] [...]\n");
1750 mbedtls_printf(" ssl_client2 help[_theme]\n");
1751 mbedtls_printf("'help' lists acceptable 'param' and 'value'\n");
1752 mbedtls_printf("'help_ciphersuites' lists available ciphersuites\n");
1753 mbedtls_printf("\n");
1754
Manuel Pégourié-Gonnard0b744342023-06-26 11:28:00 +02001755 if (ret == 0) {
1756 ret = 1;
1757 }
Manuel Pégourié-Gonnard0b744342023-06-26 11:28:00 +02001758 goto exit;
1759 }
1760
Gilles Peskine449bd832023-01-11 14:50:10 +01001761 for (i = 1; i < argc; i++) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001762 p = argv[i];
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +02001763
1764 if (strcmp(p, "help") == 0) {
1765 mbedtls_printf(USAGE1);
1766 mbedtls_printf(USAGE2);
1767 mbedtls_printf(USAGE3);
1768 mbedtls_printf(USAGE4);
1769
1770 ret = 0;
1771 goto exit;
1772 }
1773 if (strcmp(p, "help_ciphersuites") == 0) {
1774 mbedtls_printf(" acceptable ciphersuite names:\n");
1775 for (list = mbedtls_ssl_list_ciphersuites();
1776 *list != 0;
1777 list++) {
1778 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name(*list));
1779 }
1780
1781 ret = 0;
1782 goto exit;
1783 }
1784
Gilles Peskine449bd832023-01-11 14:50:10 +01001785 if ((q = strchr(p, '=')) == NULL) {
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +02001786 mbedtls_printf("param requires a value: '%s'\n", p);
1787 p = NULL; // avoid "unrecnognized param" message
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001788 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001789 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001790 *q++ = '\0';
1791
Gilles Peskine449bd832023-01-11 14:50:10 +01001792 if (strcmp(p, "server_port") == 0) {
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001793 opt.server_port = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001794 } else if (strcmp(p, "server_addr") == 0) {
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001795 opt.server_addr = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001796 } else if (strcmp(p, "dtls") == 0) {
1797 int t = atoi(q);
1798 if (t == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001799 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Gilles Peskine449bd832023-01-11 14:50:10 +01001800 } else if (t == 1) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001801 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Gilles Peskine449bd832023-01-11 14:50:10 +01001802 } else {
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001803 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001804 }
1805 } else if (strcmp(p, "debug_level") == 0) {
1806 opt.debug_level = atoi(q);
1807 if (opt.debug_level < 0 || opt.debug_level > 65535) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001808 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001809 }
1810 } else if (strcmp(p, "build_version") == 0) {
1811 if (strcmp(q, "1") == 0) {
1812 mbedtls_printf("build version: %s (build %d)\n",
1813 MBEDTLS_VERSION_STRING_FULL,
1814 MBEDTLS_VERSION_NUMBER);
Yanray Wangeaf46d12022-10-28 10:38:37 +08001815 goto exit;
1816 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001817 } else if (strcmp(p, "nbio") == 0) {
1818 opt.nbio = atoi(q);
1819 if (opt.nbio < 0 || opt.nbio > 2) {
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001820 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001821 }
1822 } else if (strcmp(p, "event") == 0) {
1823 opt.event = atoi(q);
1824 if (opt.event < 0 || opt.event > 2) {
Hanno Becker16970d22017-10-10 15:56:37 +01001825 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001826 }
1827 } else if (strcmp(p, "read_timeout") == 0) {
1828 opt.read_timeout = atoi(q);
1829 } else if (strcmp(p, "buffer_size") == 0) {
1830 opt.buffer_size = atoi(q);
1831 if (opt.buffer_size < 1) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001832 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001833 }
1834 } else if (strcmp(p, "response_size") == 0) {
1835 opt.response_size = atoi(q);
1836 if (opt.response_size < 0 || opt.response_size > MBEDTLS_SSL_OUT_CONTENT_LEN) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001837 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001838 }
1839 if (opt.buffer_size < opt.response_size) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001840 opt.buffer_size = opt.response_size;
Gilles Peskine449bd832023-01-11 14:50:10 +01001841 }
1842 } else if (strcmp(p, "ca_file") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001843 opt.ca_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001844 } else if (strcmp(p, "ca_path") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001845 opt.ca_path = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001846 } else if (strcmp(p, "crt_file") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001847 opt.crt_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001848 } else if (strcmp(p, "key_file") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001849 opt.key_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001850 } else if (strcmp(p, "key_pwd") == 0) {
Hanno Beckere58a6302018-11-07 16:20:16 +00001851 opt.key_pwd = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001852 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02001853#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001854 else if (strcmp(p, "key_opaque") == 0) {
1855 opt.key_opaque = atoi(q);
1856 }
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02001857#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001858 else if (strcmp(p, "crt_file2") == 0) {
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001859 opt.crt_file2 = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001860 } else if (strcmp(p, "key_file2") == 0) {
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001861 opt.key_file2 = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001862 } else if (strcmp(p, "key_pwd2") == 0) {
Hanno Beckere58a6302018-11-07 16:20:16 +00001863 opt.key_pwd2 = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001864 } else if (strcmp(p, "dhm_file") == 0) {
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001865 opt.dhm_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001866 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001867#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01001868 else if (strcmp(p, "async_operations") == 0) {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001869 opt.async_operations = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001870 } else if (strcmp(p, "async_private_delay1") == 0) {
1871 opt.async_private_delay1 = atoi(q);
1872 } else if (strcmp(p, "async_private_delay2") == 0) {
1873 opt.async_private_delay2 = atoi(q);
1874 } else if (strcmp(p, "async_private_error") == 0) {
1875 int n = atoi(q);
1876 if (n < -SSL_ASYNC_INJECT_ERROR_MAX ||
1877 n > SSL_ASYNC_INJECT_ERROR_MAX) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001878 ret = 2;
1879 goto usage;
1880 }
1881 opt.async_private_error = n;
1882 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001883#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Hanno Beckera0e20d02019-05-15 14:03:01 +01001884#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01001885 else if (strcmp(p, "cid") == 0) {
1886 opt.cid_enabled = atoi(q);
1887 if (opt.cid_enabled != 0 && opt.cid_enabled != 1) {
Hanno Beckera7d25422019-04-09 17:28:10 +01001888 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001889 }
1890 } else if (strcmp(p, "cid_renego") == 0) {
1891 opt.cid_enabled_renego = atoi(q);
1892 if (opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001893 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001894 }
1895 } else if (strcmp(p, "cid_val") == 0) {
Hanno Beckera7d25422019-04-09 17:28:10 +01001896 opt.cid_val = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001897 } else if (strcmp(p, "cid_val_renego") == 0) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001898 opt.cid_val_renego = q;
1899 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001900#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Gilles Peskine449bd832023-01-11 14:50:10 +01001901 else if (strcmp(p, "psk") == 0) {
Paul Bakkerfbb17802013-04-17 19:10:21 +02001902 opt.psk = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001903 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001904#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001905 else if (strcmp(p, "psk_opaque") == 0) {
1906 opt.psk_opaque = atoi(q);
1907 } else if (strcmp(p, "psk_list_opaque") == 0) {
1908 opt.psk_list_opaque = atoi(q);
1909 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001910#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001911#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Gilles Peskine449bd832023-01-11 14:50:10 +01001912 else if (strcmp(p, "ca_callback") == 0) {
1913 opt.ca_callback = atoi(q);
1914 }
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001915#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001916 else if (strcmp(p, "psk_identity") == 0) {
Paul Bakkerfbb17802013-04-17 19:10:21 +02001917 opt.psk_identity = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001918 } else if (strcmp(p, "psk_list") == 0) {
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001919 opt.psk_list = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001920 } else if (strcmp(p, "ecjpake_pw") == 0) {
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001921 opt.ecjpake_pw = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001922 }
Valerio Settid6feb202022-12-02 14:28:49 +01001923#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001924 else if (strcmp(p, "ecjpake_pw_opaque") == 0) {
1925 opt.ecjpake_pw_opaque = atoi(q);
1926 }
Valerio Settid6feb202022-12-02 14:28:49 +01001927#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001928 else if (strcmp(p, "force_ciphersuite") == 0) {
1929 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id(q);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001930
Gilles Peskine449bd832023-01-11 14:50:10 +01001931 if (opt.force_ciphersuite[0] == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001932 ret = 2;
1933 goto usage;
1934 }
1935 opt.force_ciphersuite[1] = 0;
Przemek Stekiel45255e42023-06-29 13:56:36 +02001936 } else if (strcmp(p, "groups") == 0) {
1937 opt.groups = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001938 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02001939#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001940 else if (strcmp(p, "sig_algs") == 0) {
Hanno Becker11ceadd2021-08-10 13:36:41 +01001941 opt.sig_algs = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001942 }
Ronald Cron81378b72022-10-05 09:18:01 +02001943#endif
Jerry Yu7854a4e2022-11-05 23:14:47 +08001944#if defined(MBEDTLS_SSL_EARLY_DATA)
Gilles Peskine449bd832023-01-11 14:50:10 +01001945 else if (strcmp(p, "max_early_data_size") == 0) {
1946 long long value = atoll(q);
Jerry Yud146a372022-12-06 12:33:48 +08001947 tls13_early_data_enabled =
1948 value >= 0 ? MBEDTLS_SSL_EARLY_DATA_ENABLED :
Gilles Peskine449bd832023-01-11 14:50:10 +01001949 MBEDTLS_SSL_EARLY_DATA_DISABLED;
1950 if (tls13_early_data_enabled) {
1951 opt.max_early_data_size = atoi(q);
Jerry Yud146a372022-12-06 12:33:48 +08001952 }
Jerry Yu7854a4e2022-11-05 23:14:47 +08001953 }
1954#endif /* MBEDTLS_SSL_EARLY_DATA */
Gilles Peskine449bd832023-01-11 14:50:10 +01001955 else if (strcmp(p, "renegotiation") == 0) {
1956 opt.renegotiation = (atoi(q)) ?
1957 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1958 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
1959 } else if (strcmp(p, "allow_legacy") == 0) {
1960 switch (atoi(q)) {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001961 case -1:
1962 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1963 break;
1964 case 0:
1965 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1966 break;
1967 case 1:
1968 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1969 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001970 default: goto usage;
1971 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001972 } else if (strcmp(p, "renegotiate") == 0) {
1973 opt.renegotiate = atoi(q);
1974 if (opt.renegotiate < 0 || opt.renegotiate > 1) {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001975 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001976 }
1977 } else if (strcmp(p, "renego_delay") == 0) {
1978 opt.renego_delay = atoi(q);
1979 } else if (strcmp(p, "renego_period") == 0) {
Andres AG0b736db2017-02-08 14:05:57 +00001980#if defined(_MSC_VER)
Gilles Peskine449bd832023-01-11 14:50:10 +01001981 opt.renego_period = _strtoui64(q, NULL, 10);
Andres AG0b736db2017-02-08 14:05:57 +00001982#else
Gilles Peskine449bd832023-01-11 14:50:10 +01001983 if (sscanf(q, "%" SCNu64, &opt.renego_period) != 1) {
Andres AG0b736db2017-02-08 14:05:57 +00001984 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001985 }
Andres AG0b736db2017-02-08 14:05:57 +00001986#endif /* _MSC_VER */
Gilles Peskine449bd832023-01-11 14:50:10 +01001987 if (opt.renego_period < 2) {
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001988 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001989 }
1990 } else if (strcmp(p, "exchanges") == 0) {
1991 opt.exchanges = atoi(q);
1992 if (opt.exchanges < 0) {
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001993 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001994 }
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001995 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001996#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01001997 else if (strcmp(p, "tls13_kex_modes") == 0) {
1998 if (strcmp(q, "psk") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001999 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK;
Gilles Peskine449bd832023-01-11 14:50:10 +01002000 } else if (strcmp(q, "psk_ephemeral") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002001 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL;
Gilles Peskine449bd832023-01-11 14:50:10 +01002002 } else if (strcmp(q, "ephemeral") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002003 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL;
Gilles Peskine449bd832023-01-11 14:50:10 +01002004 } else if (strcmp(q, "ephemeral_all") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002005 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ALL;
Gilles Peskine449bd832023-01-11 14:50:10 +01002006 } else if (strcmp(q, "psk_all") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002007 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ALL;
Gilles Peskine449bd832023-01-11 14:50:10 +01002008 } else if (strcmp(q, "all") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002009 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL;
Gilles Peskine449bd832023-01-11 14:50:10 +01002010 }
Jerry Yuc5a23a02022-08-25 10:51:44 +08002011 /* The purpose of `psk_or_ephemeral` is to improve test coverage. That
2012 * is not recommended in practice.
2013 * `psk_or_ephemeral` exists in theory, we need this mode to test if
2014 * this setting work correctly. With this key exchange setting, server
Tom Cosgrove1797b052022-12-04 17:19:59 +00002015 * should always perform `ephemeral` handshake. `psk` or `psk_ephemeral`
Jerry Yuc5a23a02022-08-25 10:51:44 +08002016 * is not expected.
Jerry Yu2b7a51b2022-08-01 10:19:13 +08002017 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002018 else if (strcmp(q, "psk_or_ephemeral") == 0) {
Jerry Yu2b7a51b2022-08-01 10:19:13 +08002019 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK |
Gilles Peskine449bd832023-01-11 14:50:10 +01002020 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL;
2021 } else {
2022 goto usage;
2023 }
Hanno Becker2c0f6972021-07-24 06:27:16 +01002024 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002025#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +01002026
Gilles Peskine449bd832023-01-11 14:50:10 +01002027 else if (strcmp(p, "min_version") == 0) {
2028 if (strcmp(q, "tls12") == 0 ||
2029 strcmp(q, "dtls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002030 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
Gilles Peskine449bd832023-01-11 14:50:10 +01002031 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002032#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002033 else if (strcmp(q, "tls13") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002034 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_3;
Gilles Peskine449bd832023-01-11 14:50:10 +01002035 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002036#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002037 else {
Paul Bakker1d29fb52012-09-28 13:28:45 +00002038 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002039 }
2040 } else if (strcmp(p, "max_version") == 0) {
2041 if (strcmp(q, "tls12") == 0 ||
2042 strcmp(q, "dtls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002043 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Gilles Peskine449bd832023-01-11 14:50:10 +01002044 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002045#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002046 else if (strcmp(q, "tls13") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002047 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_3;
Gilles Peskine449bd832023-01-11 14:50:10 +01002048 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002049#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002050 else {
Paul Bakkerc1516be2013-06-29 16:01:32 +02002051 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002052 }
2053 } else if (strcmp(p, "allow_sha1") == 0) {
2054 switch (atoi(q)) {
Gilles Peskinebc70a182017-05-09 15:59:24 +02002055 case 0: opt.allow_sha1 = 0; break;
2056 case 1: opt.allow_sha1 = 1; break;
2057 default: goto usage;
2058 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002059 } else if (strcmp(p, "force_version") == 0) {
2060 if (strcmp(q, "tls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002061 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
2062 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Gilles Peskine449bd832023-01-11 14:50:10 +01002063 } else if (strcmp(q, "dtls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002064 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
2065 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002066 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01002067 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002068#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002069 else if (strcmp(q, "tls13") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002070 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_3;
2071 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_3;
Jerry Yub1dc59a2021-08-05 15:58:09 +08002072 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002073#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002074 else {
Paul Bakkerc1516be2013-06-29 16:01:32 +02002075 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002076 }
2077 } else if (strcmp(p, "auth_mode") == 0) {
2078 if ((opt.auth_mode = get_auth_mode(q)) < 0) {
Paul Bakker91ebfb52012-11-23 14:04:08 +01002079 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002080 }
2081 } else if (strcmp(p, "cert_req_ca_list") == 0) {
2082 opt.cert_req_ca_list = atoi(q);
2083 if (opt.cert_req_ca_list < 0 || opt.cert_req_ca_list > 3) {
Janos Follath4817e272017-04-10 13:44:33 +01002084 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002085 }
2086 if (opt.cert_req_ca_list > 1) {
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002087 opt.cert_req_dn_hint = opt.cert_req_ca_list;
2088 opt.cert_req_ca_list = MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED;
2089 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002090 } else if (strcmp(p, "max_frag_len") == 0) {
2091 if (strcmp(q, "512") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002092 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002093 } else if (strcmp(q, "1024") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002094 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Gilles Peskine449bd832023-01-11 14:50:10 +01002095 } else if (strcmp(q, "2048") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002096 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Gilles Peskine449bd832023-01-11 14:50:10 +01002097 } else if (strcmp(q, "4096") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002098 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Gilles Peskine449bd832023-01-11 14:50:10 +01002099 } else {
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002100 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002101 }
2102 } else if (strcmp(p, "alpn") == 0) {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002103 opt.alpn_string = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002104 } else if (strcmp(p, "trunc_hmac") == 0) {
2105 switch (atoi(q)) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002106 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
2107 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002108 default: goto usage;
2109 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002110 } else if (strcmp(p, "extended_ms") == 0) {
2111 switch (atoi(q)) {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002112 case 0:
2113 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
2114 break;
2115 case 1:
2116 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
2117 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002118 default: goto usage;
2119 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002120 } else if (strcmp(p, "etm") == 0) {
2121 switch (atoi(q)) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002122 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
2123 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002124 default: goto usage;
2125 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002126 } else if (strcmp(p, "tickets") == 0) {
2127 opt.tickets = atoi(q);
2128 if (opt.tickets < 0) {
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002129 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002130 }
2131 } else if (strcmp(p, "dummy_ticket") == 0) {
2132 opt.dummy_ticket = atoi(q);
2133 if (opt.dummy_ticket < 0) {
Jerry Yu25ab6542022-09-15 18:32:34 +08002134 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002135 }
2136 } else if (strcmp(p, "ticket_rotate") == 0) {
2137 opt.ticket_rotate = atoi(q);
2138 if (opt.ticket_rotate < 0 || opt.ticket_rotate > 1) {
Glenn Strausse3282452022-02-03 17:23:24 -05002139 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002140 }
2141 } else if (strcmp(p, "ticket_timeout") == 0) {
2142 opt.ticket_timeout = atoi(q);
2143 if (opt.ticket_timeout < 0) {
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002144 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002145 }
Valerio Setti74d48c82023-11-02 16:43:55 +01002146 }
Valerio Settibdf04e82023-10-27 12:02:45 +02002147#if defined(MBEDTLS_CIPHER_C)
Valerio Setti74d48c82023-11-02 16:43:55 +01002148 else if (strcmp(p, "ticket_aead") == 0) {
Gilles Peskine449bd832023-01-11 14:50:10 +01002149 const mbedtls_cipher_info_t *ci = mbedtls_cipher_info_from_string(q);
Gabor Mezeid4bea1e2022-01-12 16:21:15 +01002150
Gilles Peskine449bd832023-01-11 14:50:10 +01002151 if (ci == NULL) {
Gabor Mezeid4bea1e2022-01-12 16:21:15 +01002152 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002153 }
2154 opt.ticket_aead = mbedtls_cipher_info_get_type(ci);
Valerio Setti74d48c82023-11-02 16:43:55 +01002155 }
Valerio Settibdf04e82023-10-27 12:02:45 +02002156#endif
Valerio Setti74d48c82023-11-02 16:43:55 +01002157 else if (strcmp(p, "cache_max") == 0) {
Gilles Peskine449bd832023-01-11 14:50:10 +01002158 opt.cache_max = atoi(q);
2159 if (opt.cache_max < 0) {
Hanno Beckere7675d02018-08-14 13:28:56 +01002160 goto usage;
2161 }
2162 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002163#if defined(MBEDTLS_HAVE_TIME)
2164 else if (strcmp(p, "cache_timeout") == 0) {
2165 opt.cache_timeout = atoi(q);
2166 if (opt.cache_timeout < 0) {
2167 goto usage;
2168 }
2169 }
2170#endif
Pengyu Lv753d02f2023-03-07 14:51:09 +08002171 else if (strcmp(p, "cache_remove") == 0) {
2172 opt.cache_remove = atoi(q);
2173 if (opt.cache_remove < 0 || opt.cache_remove > 1) {
2174 goto usage;
2175 }
2176 } else if (strcmp(p, "cookies") == 0) {
Gilles Peskine449bd832023-01-11 14:50:10 +01002177 opt.cookies = atoi(q);
2178 if (opt.cookies < -1 || opt.cookies > 1) {
2179 goto usage;
2180 }
2181 } else if (strcmp(p, "anti_replay") == 0) {
2182 opt.anti_replay = atoi(q);
2183 if (opt.anti_replay < 0 || opt.anti_replay > 1) {
2184 goto usage;
2185 }
2186 } else if (strcmp(p, "badmac_limit") == 0) {
2187 opt.badmac_limit = atoi(q);
2188 if (opt.badmac_limit < 0) {
2189 goto usage;
2190 }
2191 } else if (strcmp(p, "hs_timeout") == 0) {
2192 if ((p = strchr(q, '-')) == NULL) {
2193 goto usage;
2194 }
2195 *p++ = '\0';
2196 opt.hs_to_min = atoi(q);
2197 opt.hs_to_max = atoi(p);
2198 if (opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min) {
2199 goto usage;
2200 }
2201 } else if (strcmp(p, "mtu") == 0) {
2202 opt.dtls_mtu = atoi(q);
2203 if (opt.dtls_mtu < 0) {
2204 goto usage;
2205 }
2206 } else if (strcmp(p, "dgram_packing") == 0) {
2207 opt.dgram_packing = atoi(q);
2208 if (opt.dgram_packing != 0 &&
2209 opt.dgram_packing != 1) {
2210 goto usage;
2211 }
2212 } else if (strcmp(p, "sni") == 0) {
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002213 opt.sni = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002214 } else if (strcmp(p, "query_config") == 0) {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02002215 opt.query_config_mode = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002216 query_config_ret = query_config(q);
gabor-mezei-arm78595852020-04-28 10:40:30 +02002217 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01002218 } else if (strcmp(p, "serialize") == 0) {
2219 opt.serialize = atoi(q);
2220 if (opt.serialize < 0 || opt.serialize > 2) {
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03002221 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002222 }
2223 } else if (strcmp(p, "context_file") == 0) {
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002224 opt.context_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002225 } else if (strcmp(p, "eap_tls") == 0) {
2226 opt.eap_tls = atoi(q);
2227 if (opt.eap_tls < 0 || opt.eap_tls > 1) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002228 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002229 }
2230 } else if (strcmp(p, "reproducible") == 0) {
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002231 opt.reproducible = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002232 } else if (strcmp(p, "nss_keylog") == 0) {
2233 opt.nss_keylog = atoi(q);
2234 if (opt.nss_keylog < 0 || opt.nss_keylog > 1) {
Hanno Becker48f3a3d2019-08-29 06:31:22 +01002235 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002236 }
2237 } else if (strcmp(p, "nss_keylog_file") == 0) {
Hanno Becker48f3a3d2019-08-29 06:31:22 +01002238 opt.nss_keylog_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002239 } else if (strcmp(p, "use_srtp") == 0) {
2240 opt.use_srtp = atoi(q);
2241 } else if (strcmp(p, "srtp_force_profile") == 0) {
2242 opt.force_srtp_profile = atoi(q);
2243 } else if (strcmp(p, "support_mki") == 0) {
2244 opt.support_mki = atoi(q);
2245 } else if (strcmp(p, "key_opaque_algs") == 0) {
2246 if (key_opaque_alg_parse(q, &opt.key1_opaque_alg1,
2247 &opt.key1_opaque_alg2) != 0) {
Przemek Stekiel344c5612022-05-02 14:17:35 +02002248 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002249 }
2250 } else if (strcmp(p, "key_opaque_algs2") == 0) {
2251 if (key_opaque_alg_parse(q, &opt.key2_opaque_alg1,
2252 &opt.key2_opaque_alg2) != 0) {
Przemek Stekiel4ca0d722022-04-25 12:46:22 +02002253 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002254 }
2255 } else {
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +02002256 /* This signals that the problem is with p not q */
2257 q = NULL;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002258 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002259 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002260 }
Manuel Pégourié-Gonnard39a0a762023-06-27 09:28:24 +02002261 /* This signals that any further erorrs are not with a single option */
2262 p = q = NULL;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002263
Gilles Peskine449bd832023-01-11 14:50:10 +01002264 if (opt.nss_keylog != 0 && opt.eap_tls != 0) {
2265 mbedtls_printf("Error: eap_tls and nss_keylog options cannot be used together.\n");
Hanno Beckerbc5308c2019-09-09 11:38:51 +01002266 goto usage;
2267 }
2268
Hanno Becker16970d22017-10-10 15:56:37 +01002269 /* Event-driven IO is incompatible with the above custom
2270 * receive and send functions, as the polling builds on
2271 * refers to the underlying net_context. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002272 if (opt.event == 1 && opt.nbio != 1) {
2273 mbedtls_printf("Warning: event-driven IO mandates nbio=1 - overwrite\n");
Hanno Becker16970d22017-10-10 15:56:37 +01002274 opt.nbio = 1;
2275 }
2276
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002277#if defined(MBEDTLS_DEBUG_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002278 mbedtls_debug_set_threshold(opt.debug_level);
Paul Bakkerc73079a2014-04-25 16:34:30 +02002279#endif
Gilles Peskine8bb96d92022-04-06 23:31:05 +02002280
2281 /* buf will alternatively contain the input read from the client and the
2282 * response that's about to be sent, plus a null byte in each case. */
2283 size_t buf_content_size = opt.buffer_size;
2284 /* The default response contains the ciphersuite name. Leave enough
2285 * room for that plus some margin. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002286 if (buf_content_size < strlen(HTTP_RESPONSE) + 80) {
2287 buf_content_size = strlen(HTTP_RESPONSE) + 80;
Gilles Peskine8bb96d92022-04-06 23:31:05 +02002288 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002289 if (opt.response_size != DFL_RESPONSE_SIZE &&
2290 buf_content_size < (size_t) opt.response_size) {
Gilles Peskine8bb96d92022-04-06 23:31:05 +02002291 buf_content_size = opt.response_size;
2292 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002293 buf = mbedtls_calloc(1, buf_content_size + 1);
2294 if (buf == NULL) {
2295 mbedtls_printf("Could not allocate %lu bytes\n",
2296 (unsigned long) buf_content_size + 1);
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002297 ret = 3;
2298 goto exit;
2299 }
Paul Bakkerc73079a2014-04-25 16:34:30 +02002300
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002301#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002302 if (opt.psk_opaque != 0) {
2303 if (strlen(opt.psk) == 0) {
2304 mbedtls_printf("psk_opaque set but no psk to be imported specified.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002305 ret = 2;
2306 goto usage;
2307 }
2308
Gilles Peskine449bd832023-01-11 14:50:10 +01002309 if (opt.force_ciphersuite[0] <= 0) {
2310 mbedtls_printf(
2311 "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002312 ret = 2;
2313 goto usage;
2314 }
2315 }
2316
Gilles Peskine449bd832023-01-11 14:50:10 +01002317 if (opt.psk_list_opaque != 0) {
2318 if (opt.psk_list == NULL) {
2319 mbedtls_printf("psk_slot set but no psk to be imported specified.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002320 ret = 2;
2321 goto usage;
2322 }
2323
Gilles Peskine449bd832023-01-11 14:50:10 +01002324 if (opt.force_ciphersuite[0] <= 0) {
2325 mbedtls_printf(
2326 "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002327 ret = 2;
2328 goto usage;
2329 }
2330 }
2331#endif /* MBEDTLS_USE_PSA_CRYPTO */
2332
Gilles Peskine449bd832023-01-11 14:50:10 +01002333 if (opt.force_ciphersuite[0] > 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002334 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002335 ciphersuite_info =
Gilles Peskine449bd832023-01-11 14:50:10 +01002336 mbedtls_ssl_ciphersuite_from_id(opt.force_ciphersuite[0]);
Paul Bakkerc1516be2013-06-29 16:01:32 +02002337
Gilles Peskine449bd832023-01-11 14:50:10 +01002338 if (opt.max_version != -1 &&
2339 ciphersuite_info->min_tls_version > opt.max_version) {
2340 mbedtls_printf("forced ciphersuite not allowed with this protocol version\n");
Paul Bakker5b55b792013-07-19 13:43:43 +02002341 ret = 2;
2342 goto usage;
2343 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002344 if (opt.min_version != -1 &&
2345 ciphersuite_info->max_tls_version < opt.min_version) {
2346 mbedtls_printf("forced ciphersuite not allowed with this protocol version\n");
Paul Bakkerc1516be2013-06-29 16:01:32 +02002347 ret = 2;
2348 goto usage;
2349 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002350
2351 /* If we select a version that's not supported by
2352 * this suite, then there will be no common ciphersuite... */
Gilles Peskine449bd832023-01-11 14:50:10 +01002353 if (opt.max_version == -1 ||
2354 opt.max_version > ciphersuite_info->max_tls_version) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002355 opt.max_version = ciphersuite_info->max_tls_version;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002356 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002357 if (opt.min_version < ciphersuite_info->min_tls_version) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002358 opt.min_version = ciphersuite_info->min_tls_version;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002359 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002360
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002361#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cron73fe8df2022-10-05 14:31:43 +02002362#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01002363 if (opt.psk_opaque != 0 || opt.psk_list_opaque != 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002364 /* Determine KDF algorithm the opaque PSK will be used in. */
Manuel Pégourié-Gonnardbef824d2023-03-17 12:50:01 +01002365#if defined(MBEDTLS_MD_CAN_SHA384)
Gilles Peskine449bd832023-01-11 14:50:10 +01002366 if (ciphersuite_info->mac == MBEDTLS_MD_SHA384) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002367 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_384);
Gilles Peskine449bd832023-01-11 14:50:10 +01002368 } else
Manuel Pégourié-Gonnardbef824d2023-03-17 12:50:01 +01002369#endif /* MBEDTLS_MD_CAN_SHA384 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002370 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_256);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002371 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02002372#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002373#endif /* MBEDTLS_USE_PSA_CRYPTO */
Paul Bakkerc1516be2013-06-29 16:01:32 +02002374 }
2375
Hanno Beckera0e20d02019-05-15 14:03:01 +01002376#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01002377 if (mbedtls_test_unhexify(cid, sizeof(cid),
2378 opt.cid_val, &cid_len) != 0) {
2379 mbedtls_printf("CID not valid hex\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002380 goto exit;
2381 }
2382
2383 /* Keep CID settings for renegotiation unless
2384 * specified otherwise. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002385 if (opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002386 opt.cid_enabled_renego = opt.cid_enabled;
Gilles Peskine449bd832023-01-11 14:50:10 +01002387 }
2388 if (opt.cid_val_renego == DFL_CID_VALUE_RENEGO) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002389 opt.cid_val_renego = opt.cid_val;
Gilles Peskine449bd832023-01-11 14:50:10 +01002390 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002391
Gilles Peskine449bd832023-01-11 14:50:10 +01002392 if (mbedtls_test_unhexify(cid_renego, sizeof(cid_renego),
2393 opt.cid_val_renego, &cid_renego_len) != 0) {
2394 mbedtls_printf("CID not valid hex\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002395 goto exit;
2396 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002397#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01002398
Ronald Cron73fe8df2022-10-05 14:31:43 +02002399#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002400 /*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002401 * Unhexify the pre-shared key and parse the list if any given
Paul Bakkerfbb17802013-04-17 19:10:21 +02002402 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002403 if (mbedtls_test_unhexify(psk, sizeof(psk),
2404 opt.psk, &psk_len) != 0) {
2405 mbedtls_printf("pre-shared key not valid hex\n");
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002406 goto exit;
2407 }
2408
Gilles Peskine449bd832023-01-11 14:50:10 +01002409 if (opt.psk_list != NULL) {
2410 if ((psk_info = psk_parse(opt.psk_list)) == NULL) {
2411 mbedtls_printf("psk_list invalid");
Paul Bakkerfbb17802013-04-17 19:10:21 +02002412 goto exit;
2413 }
Paul Bakkerfbb17802013-04-17 19:10:21 +02002414 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02002415#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +02002416
Przemek Stekiel45255e42023-06-29 13:56:36 +02002417 if (opt.groups != NULL) {
2418 if (parse_groups(opt.groups, group_list, GROUP_LIST_SIZE) != 0) {
Przemek Stekielff9fcbc2023-06-05 12:32:55 +02002419 goto exit;
Hanno Beckere6706e62017-05-15 16:05:15 +01002420 }
2421 }
Hanno Beckere6706e62017-05-15 16:05:15 +01002422
Ronald Crone68ab4f2022-10-05 12:46:29 +02002423#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01002424 if (opt.sig_algs != NULL) {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002425 p = (char *) opt.sig_algs;
2426 i = 0;
2427
Xiaofei Bai746f9482021-11-12 08:53:56 +00002428 /* Leave room for a final MBEDTLS_TLS1_3_SIG_NONE in signature algorithm list (sig_alg_list). */
Gilles Peskine449bd832023-01-11 14:50:10 +01002429 while (i < SIG_ALG_LIST_SIZE - 1 && *p != '\0') {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002430 q = p;
2431
2432 /* Terminate the current string */
Gilles Peskine449bd832023-01-11 14:50:10 +01002433 while (*p != ',' && *p != '\0') {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002434 p++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002435 }
2436 if (*p == ',') {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002437 *p++ = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01002438 }
Hanno Becker11ceadd2021-08-10 13:36:41 +01002439
Gilles Peskine449bd832023-01-11 14:50:10 +01002440 if (strcmp(q, "rsa_pkcs1_sha256") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002441 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002442 } else if (strcmp(q, "rsa_pkcs1_sha384") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002443 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002444 } else if (strcmp(q, "rsa_pkcs1_sha512") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002445 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002446 } else if (strcmp(q, "ecdsa_secp256r1_sha256") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002447 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP256R1_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002448 } else if (strcmp(q, "ecdsa_secp384r1_sha384") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002449 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP384R1_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002450 } else if (strcmp(q, "ecdsa_secp521r1_sha512") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002451 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP521R1_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002452 } else if (strcmp(q, "rsa_pss_rsae_sha256") == 0) {
XiaokangQiand5d5b602022-05-23 09:16:20 +00002453 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002454 } else if (strcmp(q, "rsa_pss_rsae_sha384") == 0) {
XiaokangQiand5d5b602022-05-23 09:16:20 +00002455 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002456 } else if (strcmp(q, "rsa_pss_rsae_sha512") == 0) {
XiaokangQiand5d5b602022-05-23 09:16:20 +00002457 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002458 } else if (strcmp(q, "ed25519") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002459 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ED25519;
Gilles Peskine449bd832023-01-11 14:50:10 +01002460 } else if (strcmp(q, "ed448") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002461 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ED448;
Gilles Peskine449bd832023-01-11 14:50:10 +01002462 } else if (strcmp(q, "rsa_pss_pss_sha256") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002463 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002464 } else if (strcmp(q, "rsa_pss_pss_sha384") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002465 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002466 } else if (strcmp(q, "rsa_pss_pss_sha512") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002467 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002468 } else if (strcmp(q, "rsa_pkcs1_sha1") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002469 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002470 } else if (strcmp(q, "ecdsa_sha1") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002471 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SHA1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002472 } else {
Jerry Yu64f410c2022-06-24 13:09:27 +08002473 ret = -1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002474 mbedtls_printf("unknown signature algorithm \"%s\"\n", q);
Jerry Yu202919c2022-06-27 16:21:00 +08002475 mbedtls_print_supported_sig_algs();
Hanno Becker11ceadd2021-08-10 13:36:41 +01002476 goto exit;
2477 }
2478 }
2479
Gilles Peskine449bd832023-01-11 14:50:10 +01002480 if (i == (SIG_ALG_LIST_SIZE - 1) && *p != '\0') {
2481 mbedtls_printf("signature algorithm list too long, maximum %d",
2482 SIG_ALG_LIST_SIZE - 1);
Hanno Becker11ceadd2021-08-10 13:36:41 +01002483 goto exit;
2484 }
2485
Xiaofei Bai746f9482021-11-12 08:53:56 +00002486 sig_alg_list[i] = MBEDTLS_TLS1_3_SIG_NONE;
Hanno Becker11ceadd2021-08-10 13:36:41 +01002487 }
Ronald Cron81378b72022-10-05 09:18:01 +02002488#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01002489
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002490#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01002491 if (opt.alpn_string != NULL) {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002492 p = (char *) opt.alpn_string;
2493 i = 0;
2494
2495 /* Leave room for a final NULL in alpn_list */
Gilles Peskine449bd832023-01-11 14:50:10 +01002496 while (i < ALPN_LIST_SIZE - 1 && *p != '\0') {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002497 alpn_list[i++] = p;
2498
2499 /* Terminate the current string and move on to next one */
Gilles Peskine449bd832023-01-11 14:50:10 +01002500 while (*p != ',' && *p != '\0') {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002501 p++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002502 }
2503 if (*p == ',') {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002504 *p++ = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01002505 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002506 }
2507 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002508#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002509
Gilles Peskine449bd832023-01-11 14:50:10 +01002510 mbedtls_printf("build version: %s (build %d)\n",
2511 MBEDTLS_VERSION_STRING_FULL, MBEDTLS_VERSION_NUMBER);
Yanray Wangeaf46d12022-10-28 10:38:37 +08002512
Paul Bakkerfbb17802013-04-17 19:10:21 +02002513 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002514 * 0. Initialize the RNG and the session data
2515 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002516 mbedtls_printf("\n . Seeding the random number generator...");
2517 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002518
Gilles Peskine449bd832023-01-11 14:50:10 +01002519 ret = rng_seed(&rng, opt.reproducible, pers);
2520 if (ret != 0) {
Gilles Peskinedaa94c42021-01-13 18:38:27 +01002521 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01002522 }
2523 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002524
Ronald Crone68ab4f2022-10-05 12:46:29 +02002525#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002526 /*
2527 * 1.1. Load the trusted CA
2528 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002529 mbedtls_printf(" . Loading the CA root certificate ...");
2530 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002531
Gilles Peskine449bd832023-01-11 14:50:10 +01002532 if (strcmp(opt.ca_path, "none") == 0 ||
2533 strcmp(opt.ca_file, "none") == 0) {
Hanno Becker8174bdf2019-03-05 16:22:07 +00002534 ret = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01002535 } else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002536#if defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002537 if (strlen(opt.ca_path)) {
2538 ret = mbedtls_x509_crt_parse_path(&cacert, opt.ca_path);
2539 } else if (strlen(opt.ca_file)) {
2540 ret = mbedtls_x509_crt_parse_file(&cacert, opt.ca_file);
2541 } else
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002542#endif
Hanno Becker09b8cae2019-02-01 08:13:19 +00002543 {
2544#if defined(MBEDTLS_PEM_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002545 for (i = 0; mbedtls_test_cas[i] != NULL; i++) {
2546 ret = mbedtls_x509_crt_parse(&cacert,
2547 (const unsigned char *) mbedtls_test_cas[i],
2548 mbedtls_test_cas_len[i]);
2549 if (ret != 0) {
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002550 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01002551 }
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002552 }
Hanno Becker09b8cae2019-02-01 08:13:19 +00002553#endif /* MBEDTLS_PEM_PARSE_C */
Gilles Peskine449bd832023-01-11 14:50:10 +01002554 if (ret == 0) {
2555 for (i = 0; mbedtls_test_cas_der[i] != NULL; i++) {
2556 ret = mbedtls_x509_crt_parse_der(&cacert,
2557 (const unsigned char *) mbedtls_test_cas_der[i],
2558 mbedtls_test_cas_der_len[i]);
2559 if (ret != 0) {
David Horstmann3f44e5b2022-10-24 13:12:19 +01002560 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01002561 }
David Horstmann3f44e5b2022-10-24 13:12:19 +01002562 }
Hanno Becker09b8cae2019-02-01 08:13:19 +00002563 }
2564 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002565 if (ret < 0) {
2566 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2567 (unsigned int) -ret);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002568 goto exit;
2569 }
2570
Gilles Peskine449bd832023-01-11 14:50:10 +01002571 mbedtls_printf(" ok (%d skipped)\n", ret);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002572
2573 /*
2574 * 1.2. Load own certificate and private key
2575 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002576 mbedtls_printf(" . Loading the server cert. and key...");
2577 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002578
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002579#if defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002580 if (strlen(opt.crt_file) && strcmp(opt.crt_file, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002581 key_cert_init++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002582 if ((ret = mbedtls_x509_crt_parse_file(&srvcert, opt.crt_file)) != 0) {
2583 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse_file returned -0x%x\n\n",
2584 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002585 goto exit;
2586 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002587 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002588 if (strlen(opt.key_file) && strcmp(opt.key_file, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002589 key_cert_init++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002590 if ((ret = mbedtls_pk_parse_keyfile(&pkey, opt.key_file,
2591 opt.key_pwd, rng_get, &rng)) != 0) {
2592 mbedtls_printf(" failed\n ! mbedtls_pk_parse_keyfile returned -0x%x\n\n",
2593 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002594 goto exit;
2595 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002596 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002597 if (key_cert_init == 1) {
2598 mbedtls_printf(" failed\n ! crt_file without key_file or vice-versa\n\n");
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002599 goto exit;
2600 }
2601
Gilles Peskine449bd832023-01-11 14:50:10 +01002602 if (strlen(opt.crt_file2) && strcmp(opt.crt_file2, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002603 key_cert_init2++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002604 if ((ret = mbedtls_x509_crt_parse_file(&srvcert2, opt.crt_file2)) != 0) {
2605 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse_file(2) returned -0x%x\n\n",
2606 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002607 goto exit;
2608 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002609 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002610 if (strlen(opt.key_file2) && strcmp(opt.key_file2, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002611 key_cert_init2++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002612 if ((ret = mbedtls_pk_parse_keyfile(&pkey2, opt.key_file2,
2613 opt.key_pwd2, rng_get, &rng)) != 0) {
2614 mbedtls_printf(" failed\n ! mbedtls_pk_parse_keyfile(2) returned -0x%x\n\n",
2615 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002616 goto exit;
2617 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002618 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002619 if (key_cert_init2 == 1) {
2620 mbedtls_printf(" failed\n ! crt_file2 without key_file2 or vice-versa\n\n");
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002621 goto exit;
2622 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002623#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01002624 if (key_cert_init == 0 &&
2625 strcmp(opt.crt_file, "none") != 0 &&
2626 strcmp(opt.key_file, "none") != 0 &&
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002627 key_cert_init2 == 0 &&
Gilles Peskine449bd832023-01-11 14:50:10 +01002628 strcmp(opt.crt_file2, "none") != 0 &&
2629 strcmp(opt.key_file2, "none") != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002630#if defined(MBEDTLS_RSA_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002631 if ((ret = mbedtls_x509_crt_parse(&srvcert,
2632 (const unsigned char *) mbedtls_test_srv_crt_rsa,
2633 mbedtls_test_srv_crt_rsa_len)) != 0) {
2634 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2635 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002636 goto exit;
2637 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002638 if ((ret = mbedtls_pk_parse_key(&pkey,
2639 (const unsigned char *) mbedtls_test_srv_key_rsa,
2640 mbedtls_test_srv_key_rsa_len, NULL, 0,
2641 rng_get, &rng)) != 0) {
2642 mbedtls_printf(" failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
2643 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002644 goto exit;
2645 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002646 key_cert_init = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002647#endif /* MBEDTLS_RSA_C */
Valerio Setti5ba1d5e2023-02-22 12:38:54 +01002648#if defined(MBEDTLS_PK_CAN_ECDSA_SOME)
Gilles Peskine449bd832023-01-11 14:50:10 +01002649 if ((ret = mbedtls_x509_crt_parse(&srvcert2,
2650 (const unsigned char *) mbedtls_test_srv_crt_ec,
2651 mbedtls_test_srv_crt_ec_len)) != 0) {
2652 mbedtls_printf(" failed\n ! x509_crt_parse2 returned -0x%x\n\n",
2653 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002654 goto exit;
2655 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002656 if ((ret = mbedtls_pk_parse_key(&pkey2,
2657 (const unsigned char *) mbedtls_test_srv_key_ec,
2658 mbedtls_test_srv_key_ec_len, NULL, 0,
2659 rng_get, &rng)) != 0) {
2660 mbedtls_printf(" failed\n ! pk_parse_key2 returned -0x%x\n\n",
2661 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002662 goto exit;
2663 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002664 key_cert_init2 = 2;
Valerio Setti5ba1d5e2023-02-22 12:38:54 +01002665#endif /* MBEDTLS_PK_CAN_ECDSA_SOME */
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002666 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002667
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02002668#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002669 if (opt.key_opaque != 0) {
Przemek Stekielcb20d202022-05-06 08:42:34 +02002670 psa_algorithm_t psa_alg, psa_alg2 = PSA_ALG_NONE;
Przemek Stekiel488efa02022-05-05 09:31:08 +02002671 psa_key_usage_t psa_usage = 0;
Neil Armstrong94e371a2022-04-22 13:58:05 +02002672
Gilles Peskine449bd832023-01-11 14:50:10 +01002673 if (key_opaque_set_alg_usage(opt.key1_opaque_alg1,
2674 opt.key1_opaque_alg2,
2675 &psa_alg, &psa_alg2,
2676 &psa_usage,
2677 mbedtls_pk_get_type(&pkey)) == 0) {
2678 ret = mbedtls_pk_wrap_as_opaque(&pkey, &key_slot,
2679 psa_alg, psa_usage, psa_alg2);
Przemek Stekiel09212832022-05-04 15:11:24 +02002680
Gilles Peskine449bd832023-01-11 14:50:10 +01002681 if (ret != 0) {
2682 mbedtls_printf(" failed\n ! "
2683 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n",
2684 (unsigned int) -ret);
Przemek Stekiele5e9ba92022-05-04 11:23:13 +02002685 goto exit;
2686 }
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02002687 }
Przemek Stekiele5e9ba92022-05-04 11:23:13 +02002688
Przemek Stekielcb20d202022-05-06 08:42:34 +02002689 psa_alg = PSA_ALG_NONE; psa_alg2 = PSA_ALG_NONE;
2690 psa_usage = 0;
Neil Armstrong94e371a2022-04-22 13:58:05 +02002691
Gilles Peskine449bd832023-01-11 14:50:10 +01002692 if (key_opaque_set_alg_usage(opt.key2_opaque_alg1,
2693 opt.key2_opaque_alg2,
2694 &psa_alg, &psa_alg2,
2695 &psa_usage,
2696 mbedtls_pk_get_type(&pkey2)) == 0) {
2697 ret = mbedtls_pk_wrap_as_opaque(&pkey2, &key_slot2,
2698 psa_alg, psa_usage, psa_alg2);
Przemek Stekielcb20d202022-05-06 08:42:34 +02002699
Gilles Peskine449bd832023-01-11 14:50:10 +01002700 if (ret != 0) {
2701 mbedtls_printf(" failed\n ! "
2702 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n",
2703 (unsigned int) -ret);
Przemek Stekiele5e9ba92022-05-04 11:23:13 +02002704 goto exit;
2705 }
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02002706 }
2707 }
2708#endif /* MBEDTLS_USE_PSA_CRYPTO */
2709
Gilles Peskine449bd832023-01-11 14:50:10 +01002710 mbedtls_printf(" ok (key types: %s, %s)\n",
2711 key_cert_init ? mbedtls_pk_get_name(&pkey) : "none",
2712 key_cert_init2 ? mbedtls_pk_get_name(&pkey2) : "none");
Ronald Crone68ab4f2022-10-05 12:46:29 +02002713#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002714
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002715#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002716 if (opt.dhm_file != NULL) {
2717 mbedtls_printf(" . Loading DHM parameters...");
2718 fflush(stdout);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002719
Gilles Peskine449bd832023-01-11 14:50:10 +01002720 if ((ret = mbedtls_dhm_parse_dhmfile(&dhm, opt.dhm_file)) != 0) {
2721 mbedtls_printf(" failed\n ! mbedtls_dhm_parse_dhmfile returned -0x%04X\n\n",
2722 (unsigned int) -ret);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002723 goto exit;
2724 }
2725
Gilles Peskine449bd832023-01-11 14:50:10 +01002726 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002727 }
2728#endif
2729
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002730#if defined(SNI_OPTION)
Gilles Peskine449bd832023-01-11 14:50:10 +01002731 if (opt.sni != NULL) {
2732 mbedtls_printf(" . Setting up SNI information...");
2733 fflush(stdout);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002734
Gilles Peskine449bd832023-01-11 14:50:10 +01002735 if ((sni_info = sni_parse(opt.sni)) == NULL) {
2736 mbedtls_printf(" failed\n");
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002737 goto exit;
2738 }
2739
Gilles Peskine449bd832023-01-11 14:50:10 +01002740 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002741 }
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002742#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002743
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002744 /*
Jerry Yu2a572cf2021-08-06 11:21:08 +08002745 * 2. Setup stuff
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002746 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002747 mbedtls_printf(" . Setting up the SSL/TLS structure...");
2748 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002749
Gilles Peskine449bd832023-01-11 14:50:10 +01002750 if ((ret = mbedtls_ssl_config_defaults(&conf,
2751 MBEDTLS_SSL_IS_SERVER,
2752 opt.transport,
2753 MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
2754 mbedtls_printf(" failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
2755 (unsigned int) -ret);
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002756 goto exit;
2757 }
2758
Ronald Crone68ab4f2022-10-05 12:46:29 +02002759#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskineef86ab22017-05-05 18:59:02 +02002760 /* The default algorithms profile disables SHA-1, but our tests still
2761 rely on it heavily. Hence we allow it here. A real-world server
2762 should use the default profile unless there is a good reason not to. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002763 if (opt.allow_sha1 > 0) {
2764 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG(MBEDTLS_MD_SHA1);
2765 mbedtls_ssl_conf_cert_profile(&conf, &crt_profile_for_test);
2766 mbedtls_ssl_conf_sig_algs(&conf, ssl_sig_algs_for_test);
Gilles Peskinebc70a182017-05-09 15:59:24 +02002767 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02002768#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskineef86ab22017-05-05 18:59:02 +02002769
Gilles Peskine449bd832023-01-11 14:50:10 +01002770 if (opt.auth_mode != DFL_AUTH_MODE) {
2771 mbedtls_ssl_conf_authmode(&conf, opt.auth_mode);
2772 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002773
Gilles Peskine449bd832023-01-11 14:50:10 +01002774 if (opt.cert_req_ca_list != DFL_CERT_REQ_CA_LIST) {
2775 mbedtls_ssl_conf_cert_req_ca_list(&conf, opt.cert_req_ca_list);
2776 }
Janos Follath4817e272017-04-10 13:44:33 +01002777
Jerry Yu7854a4e2022-11-05 23:14:47 +08002778#if defined(MBEDTLS_SSL_EARLY_DATA)
Yanray Wangd5ed36f2023-11-07 11:40:43 +08002779 mbedtls_ssl_conf_early_data(&conf, tls13_early_data_enabled);
Gilles Peskine449bd832023-01-11 14:50:10 +01002780 if (tls13_early_data_enabled == MBEDTLS_SSL_EARLY_DATA_ENABLED) {
Jerry Yud146a372022-12-06 12:33:48 +08002781 mbedtls_ssl_tls13_conf_max_early_data_size(
Gilles Peskine449bd832023-01-11 14:50:10 +01002782 &conf, opt.max_early_data_size);
Jerry Yud146a372022-12-06 12:33:48 +08002783 }
Jerry Yu7854a4e2022-11-05 23:14:47 +08002784#endif /* MBEDTLS_SSL_EARLY_DATA */
2785
Andrzej Kurekd0786f52022-10-13 09:06:48 -04002786#if defined(MBEDTLS_KEY_EXCHANGE_CERT_REQ_ALLOWED_ENABLED)
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002787 /* exercise setting DN hints for server certificate request
2788 * (Intended for use where the client cert expected has been signed by
2789 * a specific CA which is an intermediate in a CA chain, not the root) */
Gilles Peskine449bd832023-01-11 14:50:10 +01002790 if (opt.cert_req_dn_hint == 2 && key_cert_init2) {
2791 mbedtls_ssl_conf_dn_hints(&conf, &srvcert2);
2792 }
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002793#endif
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002794
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002795#if defined(MBEDTLS_SSL_PROTO_DTLS)
Gilles Peskine449bd832023-01-11 14:50:10 +01002796 if (opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX) {
2797 mbedtls_ssl_conf_handshake_timeout(&conf, opt.hs_to_min, opt.hs_to_max);
2798 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02002799
Gilles Peskine449bd832023-01-11 14:50:10 +01002800 if (opt.dgram_packing != DFL_DGRAM_PACKING) {
2801 mbedtls_ssl_set_datagram_packing(&ssl, opt.dgram_packing);
2802 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002803#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002804
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002805#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Gilles Peskine449bd832023-01-11 14:50:10 +01002806 if ((ret = mbedtls_ssl_conf_max_frag_len(&conf, opt.mfl_code)) != 0) {
2807 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002808 goto exit;
Ron Eldor6ea64512018-07-02 10:08:07 +03002809 }
Paul Bakker05decb22013-08-15 13:33:48 +02002810#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002811
Hanno Beckera0e20d02019-05-15 14:03:01 +01002812#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01002813 if (opt.cid_enabled == 1 || opt.cid_enabled_renego == 1) {
2814 if (opt.cid_enabled == 1 &&
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002815 opt.cid_enabled_renego == 1 &&
Gilles Peskine449bd832023-01-11 14:50:10 +01002816 cid_len != cid_renego_len) {
2817 mbedtls_printf("CID length must not change during renegotiation\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002818 goto usage;
2819 }
2820
Gilles Peskine449bd832023-01-11 14:50:10 +01002821 if (opt.cid_enabled == 1) {
2822 ret = mbedtls_ssl_conf_cid(&conf, cid_len,
2823 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE);
2824 } else {
2825 ret = mbedtls_ssl_conf_cid(&conf, cid_renego_len,
2826 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE);
2827 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002828
Gilles Peskine449bd832023-01-11 14:50:10 +01002829 if (ret != 0) {
2830 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
2831 (unsigned int) -ret);
Hanno Beckerad4a1372019-05-03 13:06:44 +01002832 goto exit;
2833 }
2834 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002835#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerad4a1372019-05-03 13:06:44 +01002836
Ron Eldor6ea64512018-07-02 10:08:07 +03002837#if defined(MBEDTLS_SSL_DTLS_SRTP)
Gilles Peskine449bd832023-01-11 14:50:10 +01002838 const mbedtls_ssl_srtp_profile forced_profile[] =
2839 { opt.force_srtp_profile, MBEDTLS_TLS_SRTP_UNSET };
2840 if (opt.use_srtp == 1) {
2841 if (opt.force_srtp_profile != 0) {
2842 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles(&conf, forced_profile);
2843 } else {
2844 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles(&conf, default_profiles);
Ron Eldor6ea64512018-07-02 10:08:07 +03002845 }
2846
Gilles Peskine449bd832023-01-11 14:50:10 +01002847 if (ret != 0) {
2848 mbedtls_printf(
2849 " failed\n ! mbedtls_ssl_conf_dtls_srtp_protection_profiles returned %d\n\n",
2850 ret);
Ron Eldor6ea64512018-07-02 10:08:07 +03002851 goto exit;
2852 }
2853
Gilles Peskine449bd832023-01-11 14:50:10 +01002854 mbedtls_ssl_conf_srtp_mki_value_supported(&conf,
2855 opt.support_mki ?
2856 MBEDTLS_SSL_DTLS_SRTP_MKI_SUPPORTED :
2857 MBEDTLS_SSL_DTLS_SRTP_MKI_UNSUPPORTED);
Ron Eldor12c6ead2018-07-03 15:08:32 +03002858
Gilles Peskine449bd832023-01-11 14:50:10 +01002859 } else if (opt.force_srtp_profile != 0) {
2860 mbedtls_printf(" failed\n ! must enable use_srtp to force srtp profile\n\n");
Ron Eldor6ea64512018-07-02 10:08:07 +03002861 goto exit;
2862 }
2863#endif /* MBEDTLS_SSL_DTLS_SRTP */
2864
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002865#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Gilles Peskine449bd832023-01-11 14:50:10 +01002866 if (opt.extended_ms != DFL_EXTENDED_MS) {
2867 mbedtls_ssl_conf_extended_master_secret(&conf, opt.extended_ms);
2868 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002869#endif
2870
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002871#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Gilles Peskine449bd832023-01-11 14:50:10 +01002872 if (opt.etm != DFL_ETM) {
2873 mbedtls_ssl_conf_encrypt_then_mac(&conf, opt.etm);
2874 }
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002875#endif
2876
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002877#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01002878 if (opt.alpn_string != NULL) {
2879 if ((ret = mbedtls_ssl_conf_alpn_protocols(&conf, alpn_list)) != 0) {
2880 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002881 goto exit;
2882 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002883 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002884#endif
2885
Gilles Peskine449bd832023-01-11 14:50:10 +01002886 if (opt.reproducible) {
Philippe Antoinef91b3722019-06-11 16:02:43 +02002887#if defined(MBEDTLS_HAVE_TIME)
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002888#if defined(MBEDTLS_PLATFORM_TIME_ALT)
Gilles Peskine449bd832023-01-11 14:50:10 +01002889 mbedtls_platform_set_time(dummy_constant_time);
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002890#else
Gilles Peskine449bd832023-01-11 14:50:10 +01002891 fprintf(stderr, "Warning: reproducible option used without constant time\n");
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002892#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01002893#endif /* MBEDTLS_HAVE_TIME */
Philippe Antoine986b6f22019-06-07 15:04:32 +02002894 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002895 mbedtls_ssl_conf_rng(&conf, rng_get, &rng);
2896 mbedtls_ssl_conf_dbg(&conf, my_debug, stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002897
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002898#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002899 if (opt.cache_max != -1) {
2900 mbedtls_ssl_cache_set_max_entries(&cache, opt.cache_max);
2901 }
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002902
Raoul Strackx9ed9bc92020-06-22 14:08:57 +02002903#if defined(MBEDTLS_HAVE_TIME)
Gilles Peskine449bd832023-01-11 14:50:10 +01002904 if (opt.cache_timeout != -1) {
2905 mbedtls_ssl_cache_set_timeout(&cache, opt.cache_timeout);
2906 }
Raoul Strackx9ed9bc92020-06-22 14:08:57 +02002907#endif
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002908
Gilles Peskine449bd832023-01-11 14:50:10 +01002909 mbedtls_ssl_conf_session_cache(&conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +01002910 mbedtls_ssl_cache_get,
Gilles Peskine449bd832023-01-11 14:50:10 +01002911 mbedtls_ssl_cache_set);
Paul Bakker0a597072012-09-25 21:55:46 +00002912#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002913
Przemek Stekiel68a01a62022-10-10 11:31:58 +02002914#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002915 if (opt.tickets != MBEDTLS_SSL_SESSION_TICKETS_DISABLED) {
Jerry Yu03b8f9d2022-10-08 12:40:33 +08002916#if defined(MBEDTLS_HAVE_TIME)
Gilles Peskine449bd832023-01-11 14:50:10 +01002917 if (opt.dummy_ticket) {
2918 mbedtls_ssl_conf_session_tickets_cb(&conf,
2919 dummy_ticket_write,
2920 dummy_ticket_parse,
2921 NULL);
2922 } else
Jerry Yu03b8f9d2022-10-08 12:40:33 +08002923#endif /* MBEDTLS_HAVE_TIME */
Jerry Yu25ab6542022-09-15 18:32:34 +08002924 {
Gilles Peskine449bd832023-01-11 14:50:10 +01002925 if ((ret = mbedtls_ssl_ticket_setup(&ticket_ctx,
2926 rng_get, &rng,
2927 opt.ticket_aead,
2928 opt.ticket_timeout)) != 0) {
Jerry Yuc7974232022-10-11 21:22:33 +08002929 mbedtls_printf(
2930 " failed\n ! mbedtls_ssl_ticket_setup returned %d\n\n",
Gilles Peskine449bd832023-01-11 14:50:10 +01002931 ret);
Jerry Yu25ab6542022-09-15 18:32:34 +08002932 goto exit;
2933 }
2934
Gilles Peskine449bd832023-01-11 14:50:10 +01002935 mbedtls_ssl_conf_session_tickets_cb(&conf,
2936 mbedtls_ssl_ticket_write,
2937 mbedtls_ssl_ticket_parse,
2938 &ticket_ctx);
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002939 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002940
Jerry Yu7a513052022-08-09 13:34:21 +08002941#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002942 mbedtls_ssl_conf_new_session_tickets(&conf, opt.tickets);
Jerry Yu7a513052022-08-09 13:34:21 +08002943#endif
Glenn Strausse3282452022-02-03 17:23:24 -05002944 /* exercise manual ticket rotation (not required for typical use)
2945 * (used for external synchronization of session ticket encryption keys)
2946 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002947 if (opt.ticket_rotate) {
Glenn Straussa941b622022-02-09 15:24:56 -05002948 unsigned char kbuf[MBEDTLS_SSL_TICKET_MAX_KEY_BYTES];
2949 unsigned char name[MBEDTLS_SSL_TICKET_KEY_NAME_BYTES];
Gilles Peskine449bd832023-01-11 14:50:10 +01002950 if ((ret = rng_get(&rng, name, sizeof(name))) != 0 ||
2951 (ret = rng_get(&rng, kbuf, sizeof(kbuf))) != 0 ||
2952 (ret = mbedtls_ssl_ticket_rotate(&ticket_ctx,
2953 name, sizeof(name), kbuf, sizeof(kbuf),
2954 opt.ticket_timeout)) != 0) {
2955 mbedtls_printf(" failed\n ! mbedtls_ssl_ticket_rotate returned %d\n\n", ret);
Glenn Strausse3282452022-02-03 17:23:24 -05002956 goto exit;
2957 }
2958 }
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002959 }
Paul Bakkera503a632013-08-14 13:48:06 +02002960#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002961
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002962#if defined(MBEDTLS_SSL_PROTO_DTLS)
Gilles Peskine449bd832023-01-11 14:50:10 +01002963 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002964#if defined(MBEDTLS_SSL_COOKIE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002965 if (opt.cookies > 0) {
2966 if ((ret = mbedtls_ssl_cookie_setup(&cookie_ctx,
2967 rng_get, &rng)) != 0) {
2968 mbedtls_printf(" failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret);
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002969 goto exit;
2970 }
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002971
Gilles Peskine449bd832023-01-11 14:50:10 +01002972 mbedtls_ssl_conf_dtls_cookies(&conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
2973 &cookie_ctx);
2974 } else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002975#endif /* MBEDTLS_SSL_COOKIE_C */
2976#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Gilles Peskine449bd832023-01-11 14:50:10 +01002977 if (opt.cookies == 0) {
2978 mbedtls_ssl_conf_dtls_cookies(&conf, NULL, NULL, NULL);
2979 } else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002980#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002981 {
2982 ; /* Nothing to do */
2983 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002984
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002985#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Gilles Peskine449bd832023-01-11 14:50:10 +01002986 if (opt.anti_replay != DFL_ANTI_REPLAY) {
2987 mbedtls_ssl_conf_dtls_anti_replay(&conf, opt.anti_replay);
2988 }
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002989#endif
2990
Gilles Peskine449bd832023-01-11 14:50:10 +01002991 if (opt.badmac_limit != DFL_BADMAC_LIMIT) {
2992 mbedtls_ssl_conf_dtls_badmac_limit(&conf, opt.badmac_limit);
2993 }
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002994 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002995#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002996
Gilles Peskine449bd832023-01-11 14:50:10 +01002997 if (opt.force_ciphersuite[0] != DFL_FORCE_CIPHER) {
2998 mbedtls_ssl_conf_ciphersuites(&conf, opt.force_ciphersuite);
2999 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00003000
Ronald Cron6f135e12021-12-08 16:57:54 +01003001#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01003002 mbedtls_ssl_conf_tls13_key_exchange_modes(&conf, opt.tls13_kex_modes);
Ronald Cron6f135e12021-12-08 16:57:54 +01003003#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +01003004
Gilles Peskine449bd832023-01-11 14:50:10 +01003005 if (opt.allow_legacy != DFL_ALLOW_LEGACY) {
3006 mbedtls_ssl_conf_legacy_renegotiation(&conf, opt.allow_legacy);
3007 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003008#if defined(MBEDTLS_SSL_RENEGOTIATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003009 mbedtls_ssl_conf_renegotiation(&conf, opt.renegotiation);
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003010
Gilles Peskine449bd832023-01-11 14:50:10 +01003011 if (opt.renego_delay != DFL_RENEGO_DELAY) {
3012 mbedtls_ssl_conf_renegotiation_enforced(&conf, opt.renego_delay);
3013 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003014
Gilles Peskine449bd832023-01-11 14:50:10 +01003015 if (opt.renego_period != DFL_RENEGO_PERIOD) {
3016 PUT_UINT64_BE(renego_period, opt.renego_period, 0);
3017 mbedtls_ssl_conf_renegotiation_period(&conf, renego_period);
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003018 }
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01003019#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003020
Ronald Crone68ab4f2022-10-05 12:46:29 +02003021#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003022 if (strcmp(opt.ca_path, "none") != 0 &&
3023 strcmp(opt.ca_file, "none") != 0) {
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02003024#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Gilles Peskine449bd832023-01-11 14:50:10 +01003025 if (opt.ca_callback != 0) {
3026 mbedtls_ssl_conf_ca_cb(&conf, ca_callback, &cacert);
3027 } else
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02003028#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01003029 mbedtls_ssl_conf_ca_chain(&conf, &cacert, NULL);
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01003030 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003031 if (key_cert_init) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003032 mbedtls_pk_context *pk = &pkey;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003033#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003034 if (opt.async_private_delay1 >= 0) {
3035 ret = ssl_async_set_key(&ssl_async_keys, &srvcert, pk, 0,
3036 opt.async_private_delay1);
3037 if (ret < 0) {
3038 mbedtls_printf(" Test error: ssl_async_set_key failed (%d)\n",
3039 ret);
Gilles Peskined6fbfde2018-04-30 10:23:56 +02003040 goto exit;
3041 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003042 pk = NULL;
3043 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003044#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine449bd832023-01-11 14:50:10 +01003045 if ((ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, pk)) != 0) {
3046 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02003047 goto exit;
3048 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003049 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003050 if (key_cert_init2) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003051 mbedtls_pk_context *pk = &pkey2;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003052#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003053 if (opt.async_private_delay2 >= 0) {
3054 ret = ssl_async_set_key(&ssl_async_keys, &srvcert2, pk, 0,
3055 opt.async_private_delay2);
3056 if (ret < 0) {
3057 mbedtls_printf(" Test error: ssl_async_set_key failed (%d)\n",
3058 ret);
Gilles Peskined6fbfde2018-04-30 10:23:56 +02003059 goto exit;
3060 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003061 pk = NULL;
3062 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003063#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine449bd832023-01-11 14:50:10 +01003064 if ((ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert2, pk)) != 0) {
3065 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02003066 goto exit;
3067 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003068 }
3069
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003070#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003071 if (opt.async_operations[0] != '-') {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01003072 mbedtls_ssl_async_sign_t *sign = NULL;
3073 mbedtls_ssl_async_decrypt_t *decrypt = NULL;
Gilles Peskine12ab5d42018-04-24 12:32:04 +02003074 const char *r;
Gilles Peskine449bd832023-01-11 14:50:10 +01003075 for (r = opt.async_operations; *r; r++) {
3076 switch (*r) {
3077 case 'd':
3078 decrypt = ssl_async_decrypt;
3079 break;
3080 case 's':
3081 sign = ssl_async_sign;
3082 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01003083 }
3084 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003085 ssl_async_keys.inject_error = (opt.async_private_error < 0 ?
3086 -opt.async_private_error :
3087 opt.async_private_error);
Gilles Peskine535fb372021-01-13 18:59:46 +01003088 ssl_async_keys.f_rng = rng_get;
3089 ssl_async_keys.p_rng = &rng;
Gilles Peskine449bd832023-01-11 14:50:10 +01003090 mbedtls_ssl_conf_async_private_cb(&conf,
3091 sign,
3092 decrypt,
3093 ssl_async_resume,
3094 ssl_async_cancel,
3095 &ssl_async_keys);
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003096 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003097#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Ronald Crone68ab4f2022-10-05 12:46:29 +02003098#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +02003099
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02003100#if defined(SNI_OPTION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003101 if (opt.sni != NULL) {
3102 mbedtls_ssl_conf_sni(&conf, sni_callback, sni_info);
3103 mbedtls_ssl_conf_cert_cb(&conf, cert_callback);
Gilles Peskine166ce742018-04-30 10:30:49 +02003104#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003105 if (opt.async_private_delay2 >= 0) {
Gilles Peskinee2479892018-06-13 18:06:51 +02003106 sni_entry *cur;
Gilles Peskine449bd832023-01-11 14:50:10 +01003107 for (cur = sni_info; cur != NULL; cur = cur->next) {
3108 ret = ssl_async_set_key(&ssl_async_keys,
3109 cur->cert, cur->key, 1,
3110 opt.async_private_delay2);
3111 if (ret < 0) {
3112 mbedtls_printf(" Test error: ssl_async_set_key failed (%d)\n",
3113 ret);
Gilles Peskinee2479892018-06-13 18:06:51 +02003114 goto exit;
3115 }
3116 cur->key = NULL;
Gilles Peskine166ce742018-04-30 10:30:49 +02003117 }
Gilles Peskine166ce742018-04-30 10:30:49 +02003118 }
3119#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
3120 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01003121#endif
3122
Valerio Settiacd32c02023-06-29 18:06:29 +02003123#if defined(MBEDTLS_PK_HAVE_ECC_KEYS) || \
Przemek Stekielff9fcbc2023-06-05 12:32:55 +02003124 (defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_SOME_EPHEMERAL_ENABLED) && \
3125 defined(PSA_WANT_ALG_FFDH))
Przemek Stekiel45255e42023-06-29 13:56:36 +02003126 if (opt.groups != NULL &&
3127 strcmp(opt.groups, "default") != 0) {
Gilles Peskine449bd832023-01-11 14:50:10 +01003128 mbedtls_ssl_conf_groups(&conf, group_list);
Hanno Beckere6706e62017-05-15 16:05:15 +01003129 }
3130#endif
3131
Ronald Crone68ab4f2022-10-05 12:46:29 +02003132#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003133 if (opt.sig_algs != NULL) {
3134 mbedtls_ssl_conf_sig_algs(&conf, sig_alg_list);
3135 }
Ronald Cron20a8e632022-10-03 17:36:44 +02003136#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01003137
Ronald Cron73fe8df2022-10-05 14:31:43 +02003138#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003139
Gilles Peskine449bd832023-01-11 14:50:10 +01003140 if (strlen(opt.psk) != 0 && strlen(opt.psk_identity) != 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003141#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003142 if (opt.psk_opaque != 0) {
Hanno Becker1d911cd2018-11-15 13:06:09 +00003143 /* The algorithm has already been determined earlier. */
Gilles Peskine449bd832023-01-11 14:50:10 +01003144 status = psa_setup_psk_key_slot(&psk_slot, alg, psk, psk_len);
3145 if (status != PSA_SUCCESS) {
3146 fprintf(stderr, "SETUP FAIL\n");
Hanno Becker1d911cd2018-11-15 13:06:09 +00003147 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
3148 goto exit;
3149 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003150 if ((ret = mbedtls_ssl_conf_psk_opaque(&conf, psk_slot,
3151 (const unsigned char *) opt.psk_identity,
3152 strlen(opt.psk_identity))) != 0) {
3153 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_psk_opaque returned %d\n\n",
3154 ret);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003155 goto exit;
3156 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003157 } else
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003158#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine449bd832023-01-11 14:50:10 +01003159 if (psk_len > 0) {
3160 ret = mbedtls_ssl_conf_psk(&conf, psk, psk_len,
3161 (const unsigned char *) opt.psk_identity,
3162 strlen(opt.psk_identity));
3163 if (ret != 0) {
3164 mbedtls_printf(" failed\n mbedtls_ssl_conf_psk returned -0x%04X\n\n",
3165 (unsigned int) -ret);
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01003166 goto exit;
3167 }
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02003168 }
3169 }
3170
Gilles Peskine449bd832023-01-11 14:50:10 +01003171 if (opt.psk_list != NULL) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003172#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003173 if (opt.psk_list_opaque != 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003174 psk_entry *cur_psk;
Gilles Peskine449bd832023-01-11 14:50:10 +01003175 for (cur_psk = psk_info; cur_psk != NULL; cur_psk = cur_psk->next) {
Hanno Becker1d911cd2018-11-15 13:06:09 +00003176
Gilles Peskine449bd832023-01-11 14:50:10 +01003177 status = psa_setup_psk_key_slot(&cur_psk->slot, alg,
3178 cur_psk->key,
3179 cur_psk->key_len);
3180 if (status != PSA_SUCCESS) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003181 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
3182 goto exit;
3183 }
3184 }
3185 }
3186#endif /* MBEDTLS_USE_PSA_CRYPTO */
Hanno Becker1d911cd2018-11-15 13:06:09 +00003187
Gilles Peskine449bd832023-01-11 14:50:10 +01003188 mbedtls_ssl_conf_psk_cb(&conf, psk_callback, psk_info);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003189 }
Paul Bakkered27a042013-04-18 22:46:23 +02003190#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003191
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003192#if defined(MBEDTLS_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +00003193 /*
3194 * Use different group than default DHM group
3195 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003196#if defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003197 if (opt.dhm_file != NULL) {
3198 ret = mbedtls_ssl_conf_dh_param_ctx(&conf, &dhm);
3199 }
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02003200#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01003201 if (ret != 0) {
3202 mbedtls_printf(" failed\n mbedtls_ssl_conf_dh_param returned -0x%04X\n\n",
3203 (unsigned int) -ret);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02003204 goto exit;
3205 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003206#endif
3207
Gilles Peskine449bd832023-01-11 14:50:10 +01003208 if (opt.min_version != DFL_MIN_VERSION) {
3209 mbedtls_ssl_conf_min_tls_version(&conf, opt.min_version);
3210 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00003211
Gilles Peskine449bd832023-01-11 14:50:10 +01003212 if (opt.max_version != DFL_MIN_VERSION) {
3213 mbedtls_ssl_conf_max_tls_version(&conf, opt.max_version);
3214 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02003215
Gilles Peskine449bd832023-01-11 14:50:10 +01003216 if ((ret = mbedtls_ssl_setup(&ssl, &conf)) != 0) {
3217 mbedtls_printf(" failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", (unsigned int) -ret);
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02003218 goto exit;
3219 }
3220
Gilles Peskine449bd832023-01-11 14:50:10 +01003221 if (opt.eap_tls != 0) {
3222 mbedtls_ssl_set_export_keys_cb(&ssl, eap_tls_key_derivation,
3223 &eap_tls_keying);
3224 } else if (opt.nss_keylog != 0) {
3225 mbedtls_ssl_set_export_keys_cb(&ssl,
3226 nss_keylog_export,
3227 NULL);
Hanno Becker7e6c1782021-06-08 09:24:55 +01003228 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003229#if defined(MBEDTLS_SSL_DTLS_SRTP)
3230 else if (opt.use_srtp != 0) {
3231 mbedtls_ssl_set_export_keys_cb(&ssl, dtls_srtp_key_derivation,
3232 &dtls_srtp_keying);
Hanno Becker7e6c1782021-06-08 09:24:55 +01003233 }
3234#endif /* MBEDTLS_SSL_DTLS_SRTP */
Hanno Becker7e6c1782021-06-08 09:24:55 +01003235
Hanno Beckerdcc94e62019-07-03 17:05:43 +01003236 io_ctx.ssl = &ssl;
3237 io_ctx.net = &client_fd;
Gilles Peskine449bd832023-01-11 14:50:10 +01003238 mbedtls_ssl_set_bio(&ssl, &io_ctx, send_cb, recv_cb,
3239 opt.nbio == 0 ? recv_timeout_cb : NULL);
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02003240
Hanno Beckera0e20d02019-05-15 14:03:01 +01003241#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01003242 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
3243 if ((ret = mbedtls_ssl_set_cid(&ssl, opt.cid_enabled,
3244 cid, cid_len)) != 0) {
3245 mbedtls_printf(" failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
3246 ret);
Hanno Beckera7d25422019-04-09 17:28:10 +01003247 goto exit;
3248 }
3249 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003250#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01003251
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02003252#if defined(MBEDTLS_SSL_PROTO_DTLS)
Gilles Peskine449bd832023-01-11 14:50:10 +01003253 if (opt.dtls_mtu != DFL_DTLS_MTU) {
3254 mbedtls_ssl_set_mtu(&ssl, opt.dtls_mtu);
3255 }
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02003256#endif
3257
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003258#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003259 mbedtls_ssl_set_timer_cb(&ssl, &timer, mbedtls_timing_set_delay,
3260 mbedtls_timing_get_delay);
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003261#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02003262
Gilles Peskine449bd832023-01-11 14:50:10 +01003263 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003264
Jerry Yu2a572cf2021-08-06 11:21:08 +08003265 /*
3266 * 3. Setup the listening TCP socket
3267 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003268 mbedtls_printf(" . Bind on %s://%s:%s/ ...",
3269 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
3270 opt.server_addr ? opt.server_addr : "*",
3271 opt.server_port);
3272 fflush(stdout);
Jerry Yu2a572cf2021-08-06 11:21:08 +08003273
Gilles Peskine449bd832023-01-11 14:50:10 +01003274 if ((ret = mbedtls_net_bind(&listen_fd, opt.server_addr, opt.server_port,
3275 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
3276 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP)) != 0) {
3277 mbedtls_printf(" failed\n ! mbedtls_net_bind returned -0x%x\n\n", (unsigned int) -ret);
Jerry Yu2a572cf2021-08-06 11:21:08 +08003278 goto exit;
3279 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003280 mbedtls_printf(" ok\n");
Jerry Yu2a572cf2021-08-06 11:21:08 +08003281
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003282reset:
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02003283#if !defined(_WIN32)
Gilles Peskine449bd832023-01-11 14:50:10 +01003284 if (received_sigterm) {
3285 mbedtls_printf(" interrupted by SIGTERM (not in net_accept())\n");
3286 if (ret == MBEDTLS_ERR_NET_INVALID_CONTEXT) {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003287 ret = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01003288 }
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003289
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02003290 goto exit;
3291 }
3292#endif
3293
Gilles Peskine449bd832023-01-11 14:50:10 +01003294 if (ret == MBEDTLS_ERR_SSL_CLIENT_RECONNECT) {
3295 mbedtls_printf(" ! Client initiated reconnection from same port\n");
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02003296 goto handshake;
3297 }
3298
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003299#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +01003300 if (ret != 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003301 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +01003302 mbedtls_strerror(ret, error_buf, 100);
3303 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003304 }
3305#endif
3306
Gilles Peskine449bd832023-01-11 14:50:10 +01003307 mbedtls_net_free(&client_fd);
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01003308
Gilles Peskine449bd832023-01-11 14:50:10 +01003309 mbedtls_ssl_session_reset(&ssl);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003310
3311 /*
3312 * 3. Wait until a client connects
3313 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003314 mbedtls_printf(" . Waiting for a remote connection ...");
3315 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003316
Gilles Peskine449bd832023-01-11 14:50:10 +01003317 if ((ret = mbedtls_net_accept(&listen_fd, &client_fd,
3318 client_ip, sizeof(client_ip), &cliip_len)) != 0) {
Paul Bakkerc1283d32014-08-18 11:05:51 +02003319#if !defined(_WIN32)
Gilles Peskine449bd832023-01-11 14:50:10 +01003320 if (received_sigterm) {
3321 mbedtls_printf(" interrupted by SIGTERM (in net_accept())\n");
3322 if (ret == MBEDTLS_ERR_NET_ACCEPT_FAILED) {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003323 ret = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01003324 }
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003325
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02003326 goto exit;
3327 }
Paul Bakkerc1283d32014-08-18 11:05:51 +02003328#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02003329
Gilles Peskine449bd832023-01-11 14:50:10 +01003330 mbedtls_printf(" failed\n ! mbedtls_net_accept returned -0x%x\n\n", (unsigned int) -ret);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003331 goto exit;
3332 }
3333
Gilles Peskine449bd832023-01-11 14:50:10 +01003334 if (opt.nbio > 0) {
3335 ret = mbedtls_net_set_nonblock(&client_fd);
3336 } else {
3337 ret = mbedtls_net_set_block(&client_fd);
3338 }
3339 if (ret != 0) {
3340 mbedtls_printf(" failed\n ! net_set_(non)block() returned -0x%x\n\n", (unsigned int) -ret);
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01003341 goto exit;
3342 }
3343
Gilles Peskine449bd832023-01-11 14:50:10 +01003344 mbedtls_ssl_conf_read_timeout(&conf, opt.read_timeout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003345
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003346#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Gilles Peskine449bd832023-01-11 14:50:10 +01003347 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
3348 if ((ret = mbedtls_ssl_set_client_transport_id(&ssl,
3349 client_ip, cliip_len)) != 0) {
3350 mbedtls_printf(" failed\n ! mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n",
3351 (unsigned int) -ret);
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02003352 goto exit;
3353 }
3354 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003355#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02003356
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02003357#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003358 if (opt.ecjpake_pw != DFL_ECJPAKE_PW) {
Valerio Setti77e83152022-11-29 17:17:11 +01003359#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003360 if (opt.ecjpake_pw_opaque != DFL_ECJPAKE_PW_OPAQUE) {
Valerio Settid572a822022-11-28 18:27:51 +01003361 psa_key_attributes_t attributes = PSA_KEY_ATTRIBUTES_INIT;
3362
Gilles Peskine449bd832023-01-11 14:50:10 +01003363 psa_set_key_usage_flags(&attributes, PSA_KEY_USAGE_DERIVE);
3364 psa_set_key_algorithm(&attributes, PSA_ALG_JPAKE);
3365 psa_set_key_type(&attributes, PSA_KEY_TYPE_PASSWORD);
Valerio Settid572a822022-11-28 18:27:51 +01003366
Gilles Peskine449bd832023-01-11 14:50:10 +01003367 status = psa_import_key(&attributes,
3368 (const unsigned char *) opt.ecjpake_pw,
3369 strlen(opt.ecjpake_pw),
3370 &ecjpake_pw_slot);
3371 if (status != PSA_SUCCESS) {
3372 mbedtls_printf(" failed\n ! psa_import_key returned %d\n\n",
3373 status);
Valerio Settid572a822022-11-28 18:27:51 +01003374 goto exit;
3375 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003376 if ((ret = mbedtls_ssl_set_hs_ecjpake_password_opaque(&ssl,
3377 ecjpake_pw_slot)) != 0) {
3378 mbedtls_printf(
3379 " failed\n ! mbedtls_ssl_set_hs_ecjpake_password_opaque returned %d\n\n",
3380 ret);
Valerio Settid572a822022-11-28 18:27:51 +01003381 goto exit;
3382 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003383 mbedtls_printf("using opaque password\n");
3384 } else
Valerio Setti77e83152022-11-29 17:17:11 +01003385#endif /* MBEDTLS_USE_PSA_CRYPTO */
Valerio Settid572a822022-11-28 18:27:51 +01003386 {
Gilles Peskine449bd832023-01-11 14:50:10 +01003387 if ((ret = mbedtls_ssl_set_hs_ecjpake_password(&ssl,
3388 (const unsigned char *) opt.ecjpake_pw,
3389 strlen(opt.ecjpake_pw))) != 0) {
3390 mbedtls_printf(" failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
3391 ret);
Valerio Settid572a822022-11-28 18:27:51 +01003392 goto exit;
3393 }
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02003394 }
3395 }
Valerio Setti77e83152022-11-29 17:17:11 +01003396#endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02003397
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003398#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
Andrzej Kurekd0786f52022-10-13 09:06:48 -04003399#if defined(MBEDTLS_KEY_EXCHANGE_CERT_REQ_ALLOWED_ENABLED)
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003400 /* exercise setting DN hints for server certificate request
3401 * (Intended for use where the client cert expected has been signed by
3402 * a specific CA which is an intermediate in a CA chain, not the root)
3403 * (Additionally, the CA choice would typically be influenced by SNI
3404 * if being set per-handshake using mbedtls_ssl_set_hs_dn_hints()) */
Gilles Peskine449bd832023-01-11 14:50:10 +01003405 if (opt.cert_req_dn_hint == 3 && key_cert_init2) {
3406 mbedtls_ssl_set_hs_dn_hints(&ssl, &srvcert2);
3407 }
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003408#endif
3409#endif
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003410
Gilles Peskine449bd832023-01-11 14:50:10 +01003411 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003412
3413 /*
3414 * 4. Handshake
3415 */
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02003416handshake:
Gilles Peskine449bd832023-01-11 14:50:10 +01003417 mbedtls_printf(" . Performing the SSL/TLS handshake...");
3418 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003419
Gilles Peskine449bd832023-01-11 14:50:10 +01003420 while ((ret = mbedtls_ssl_handshake(&ssl)) != 0) {
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003421#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003422 if (ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS &&
3423 ssl_async_keys.inject_error == SSL_ASYNC_INJECT_ERROR_CANCEL) {
3424 mbedtls_printf(" cancelling on injected error\n");
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003425 break;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003426 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003427#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskineb44692f2018-04-24 12:18:19 +02003428
Gilles Peskine449bd832023-01-11 14:50:10 +01003429 if (!mbedtls_status_is_ssl_in_progress(ret)) {
Hanno Becker16970d22017-10-10 15:56:37 +01003430 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01003431 }
Hanno Becker16970d22017-10-10 15:56:37 +01003432
3433 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003434 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003435#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003436 ret = idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003437#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003438 ret = idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003439#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01003440 if (ret != 0) {
Hanno Beckeradfa64f2018-03-15 11:35:07 +00003441 goto reset;
Gilles Peskine449bd832023-01-11 14:50:10 +01003442 }
Hanno Becker16970d22017-10-10 15:56:37 +01003443 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003444 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003445
Gilles Peskine449bd832023-01-11 14:50:10 +01003446 if (ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED) {
3447 mbedtls_printf(" hello verification requested\n");
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003448 ret = 0;
3449 goto reset;
Gilles Peskine449bd832023-01-11 14:50:10 +01003450 } else if (ret != 0) {
3451 mbedtls_printf(" failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
3452 (unsigned int) -ret);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003453
Ronald Crone68ab4f2022-10-05 12:46:29 +02003454#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003455 if (ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED) {
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003456 char vrfy_buf[512];
Gilles Peskine449bd832023-01-11 14:50:10 +01003457 flags = mbedtls_ssl_get_verify_result(&ssl);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003458
Gilles Peskine449bd832023-01-11 14:50:10 +01003459 x509_crt_verify_info(vrfy_buf, sizeof(vrfy_buf), " ! ", flags);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003460
Gilles Peskine449bd832023-01-11 14:50:10 +01003461 mbedtls_printf("%s\n", vrfy_buf);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003462 }
3463#endif
3464
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003465#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003466 if (opt.async_private_error < 0) {
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003467 /* Injected error only the first time round, to test reset */
3468 ssl_async_keys.inject_error = SSL_ASYNC_INJECT_ERROR_NONE;
Gilles Peskine449bd832023-01-11 14:50:10 +01003469 }
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003470#endif
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003471 goto reset;
Gilles Peskine449bd832023-01-11 14:50:10 +01003472 } else { /* ret == 0 */
3473 int suite_id = mbedtls_ssl_get_ciphersuite_id_from_ssl(&ssl);
Glenn Strauss6eef5632022-01-23 08:37:02 -05003474 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Gilles Peskine449bd832023-01-11 14:50:10 +01003475 ciphersuite_info = mbedtls_ssl_ciphersuite_from_id(suite_id);
Glenn Strauss6eef5632022-01-23 08:37:02 -05003476
Gilles Peskine449bd832023-01-11 14:50:10 +01003477 mbedtls_printf(" ok\n [ Protocol is %s ]\n"
3478 " [ Ciphersuite is %s ]\n"
3479 " [ Key size is %u ]\n",
3480 mbedtls_ssl_get_version(&ssl),
3481 mbedtls_ssl_ciphersuite_get_name(ciphersuite_info),
3482 (unsigned int)
3483 mbedtls_ssl_ciphersuite_get_cipher_key_bitlen(ciphersuite_info));
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003484 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003485
Gilles Peskine449bd832023-01-11 14:50:10 +01003486 if ((ret = mbedtls_ssl_get_record_expansion(&ssl)) >= 0) {
3487 mbedtls_printf(" [ Record expansion is %d ]\n", ret);
3488 } else {
3489 mbedtls_printf(" [ Record expansion is unknown ]\n");
3490 }
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02003491
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02003492#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Gilles Peskine449bd832023-01-11 14:50:10 +01003493 mbedtls_printf(" [ Maximum incoming record payload length is %u ]\n",
3494 (unsigned int) mbedtls_ssl_get_max_in_record_payload(&ssl));
3495 mbedtls_printf(" [ Maximum outgoing record payload length is %u ]\n",
3496 (unsigned int) mbedtls_ssl_get_max_out_record_payload(&ssl));
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02003497#endif
3498
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003499#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01003500 if (opt.alpn_string != NULL) {
3501 const char *alp = mbedtls_ssl_get_alpn_protocol(&ssl);
3502 mbedtls_printf(" [ Application Layer Protocol is %s ]\n",
3503 alp ? alp : "(none)");
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02003504 }
3505#endif
3506
Ronald Crone68ab4f2022-10-05 12:46:29 +02003507#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003508 /*
Ron Eldor2a47be52017-06-20 15:23:23 +03003509 * 5. Verify the client certificate
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003510 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003511 mbedtls_printf(" . Verifying peer X.509 certificate...");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003512
Gilles Peskine449bd832023-01-11 14:50:10 +01003513 if ((flags = mbedtls_ssl_get_verify_result(&ssl)) != 0) {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003514 char vrfy_buf[512];
3515
Gilles Peskine449bd832023-01-11 14:50:10 +01003516 mbedtls_printf(" failed\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003517
Gilles Peskine449bd832023-01-11 14:50:10 +01003518 x509_crt_verify_info(vrfy_buf, sizeof(vrfy_buf), " ! ", flags);
3519 mbedtls_printf("%s\n", vrfy_buf);
3520 } else {
3521 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003522 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003523
Hanno Becker612a2f12020-10-09 09:19:39 +01003524#if !defined(MBEDTLS_X509_REMOVE_INFO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003525 if (mbedtls_ssl_get_peer_cert(&ssl) != NULL) {
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02003526 char crt_buf[512];
3527
Gilles Peskine449bd832023-01-11 14:50:10 +01003528 mbedtls_printf(" . Peer certificate information ...\n");
3529 mbedtls_x509_crt_info(crt_buf, sizeof(crt_buf), " ",
3530 mbedtls_ssl_get_peer_cert(&ssl));
3531 mbedtls_printf("%s\n", crt_buf);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003532 }
Hanno Becker612a2f12020-10-09 09:19:39 +01003533#endif /* MBEDTLS_X509_REMOVE_INFO */
Ronald Crone68ab4f2022-10-05 12:46:29 +02003534#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003535
Gilles Peskine449bd832023-01-11 14:50:10 +01003536 if (opt.eap_tls != 0) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003537 size_t j = 0;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003538
Gilles Peskine449bd832023-01-11 14:50:10 +01003539 if ((ret = mbedtls_ssl_tls_prf(eap_tls_keying.tls_prf_type,
3540 eap_tls_keying.master_secret,
3541 sizeof(eap_tls_keying.master_secret),
3542 eap_tls_label,
3543 eap_tls_keying.randbytes,
3544 sizeof(eap_tls_keying.randbytes),
3545 eap_tls_keymaterial,
3546 sizeof(eap_tls_keymaterial)))
3547 != 0) {
3548 mbedtls_printf(" failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3549 (unsigned int) -ret);
Ron Eldor65d8c262019-06-04 13:05:36 +03003550 goto reset;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003551 }
3552
Gilles Peskine449bd832023-01-11 14:50:10 +01003553 mbedtls_printf(" EAP-TLS key material is:");
3554 for (j = 0; j < sizeof(eap_tls_keymaterial); j++) {
3555 if (j % 8 == 0) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003556 mbedtls_printf("\n ");
Gilles Peskine449bd832023-01-11 14:50:10 +01003557 }
3558 mbedtls_printf("%02x ", eap_tls_keymaterial[j]);
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003559 }
3560 mbedtls_printf("\n");
3561
Gilles Peskine449bd832023-01-11 14:50:10 +01003562 if ((ret = mbedtls_ssl_tls_prf(eap_tls_keying.tls_prf_type, NULL, 0,
3563 eap_tls_label,
3564 eap_tls_keying.randbytes,
3565 sizeof(eap_tls_keying.randbytes),
3566 eap_tls_iv,
3567 sizeof(eap_tls_iv))) != 0) {
3568 mbedtls_printf(" failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3569 (unsigned int) -ret);
3570 goto reset;
3571 }
Ron Eldor51d3ab52019-05-12 14:54:30 +03003572
Gilles Peskine449bd832023-01-11 14:50:10 +01003573 mbedtls_printf(" EAP-TLS IV is:");
3574 for (j = 0; j < sizeof(eap_tls_iv); j++) {
3575 if (j % 8 == 0) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003576 mbedtls_printf("\n ");
Gilles Peskine449bd832023-01-11 14:50:10 +01003577 }
3578 mbedtls_printf("%02x ", eap_tls_iv[j]);
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003579 }
3580 mbedtls_printf("\n");
3581 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003582
Gilles Peskine449bd832023-01-11 14:50:10 +01003583#if defined(MBEDTLS_SSL_DTLS_SRTP)
3584 else if (opt.use_srtp != 0) {
Ron Eldor65b56ef2019-09-26 16:40:48 +03003585 size_t j = 0;
Johan Pascal2258a4f2020-10-28 13:53:09 +01003586 mbedtls_dtls_srtp_info dtls_srtp_negotiation_result;
Gilles Peskine449bd832023-01-11 14:50:10 +01003587 mbedtls_ssl_get_dtls_srtp_negotiation_result(&ssl, &dtls_srtp_negotiation_result);
Ron Eldor65b56ef2019-09-26 16:40:48 +03003588
Gilles Peskine449bd832023-01-11 14:50:10 +01003589 if (dtls_srtp_negotiation_result.chosen_dtls_srtp_profile
3590 == MBEDTLS_TLS_SRTP_UNSET) {
3591 mbedtls_printf(" Unable to negotiate "
3592 "the use of DTLS-SRTP\n");
3593 } else {
3594 if ((ret = mbedtls_ssl_tls_prf(dtls_srtp_keying.tls_prf_type,
3595 dtls_srtp_keying.master_secret,
3596 sizeof(dtls_srtp_keying.master_secret),
3597 dtls_srtp_label,
3598 dtls_srtp_keying.randbytes,
3599 sizeof(dtls_srtp_keying.randbytes),
3600 dtls_srtp_key_material,
3601 sizeof(dtls_srtp_key_material)))
3602 != 0) {
3603 mbedtls_printf(" failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3604 (unsigned int) -ret);
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003605 goto exit;
3606 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003607
Gilles Peskine449bd832023-01-11 14:50:10 +01003608 mbedtls_printf(" DTLS-SRTP key material is:");
3609 for (j = 0; j < sizeof(dtls_srtp_key_material); j++) {
3610 if (j % 8 == 0) {
3611 mbedtls_printf("\n ");
3612 }
3613 mbedtls_printf("%02x ", dtls_srtp_key_material[j]);
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003614 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003615 mbedtls_printf("\n");
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003616
Johan Pascal9bc50b02020-09-24 12:01:13 +02003617 /* produce a less readable output used to perform automatic checks
3618 * - compare client and server output
3619 * - interop test with openssl which client produces this kind of output
3620 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003621 mbedtls_printf(" Keying material: ");
3622 for (j = 0; j < sizeof(dtls_srtp_key_material); j++) {
3623 mbedtls_printf("%02X", dtls_srtp_key_material[j]);
Johan Pascal9bc50b02020-09-24 12:01:13 +02003624 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003625 mbedtls_printf("\n");
Johan Pascal20c7db32020-10-26 22:45:58 +01003626
Gilles Peskine449bd832023-01-11 14:50:10 +01003627 if (dtls_srtp_negotiation_result.mki_len > 0) {
3628 mbedtls_printf(" DTLS-SRTP mki value: ");
3629 for (j = 0; j < dtls_srtp_negotiation_result.mki_len; j++) {
3630 mbedtls_printf("%02X", dtls_srtp_negotiation_result.mki_value[j]);
Johan Pascal20c7db32020-10-26 22:45:58 +01003631 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003632 } else {
3633 mbedtls_printf(" DTLS-SRTP no mki value negotiated");
Johan Pascal20c7db32020-10-26 22:45:58 +01003634 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003635 mbedtls_printf("\n");
Johan Pascal20c7db32020-10-26 22:45:58 +01003636
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003637 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003638 }
3639#endif /* MBEDTLS_SSL_DTLS_SRTP */
Hanno Beckera7d25422019-04-09 17:28:10 +01003640
Hanno Beckera0e20d02019-05-15 14:03:01 +01003641#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01003642 ret = report_cid_usage(&ssl, "initial handshake");
3643 if (ret != 0) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003644 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01003645 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003646
Gilles Peskine449bd832023-01-11 14:50:10 +01003647 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
3648 if ((ret = mbedtls_ssl_set_cid(&ssl, opt.cid_enabled_renego,
3649 cid_renego, cid_renego_len)) != 0) {
3650 mbedtls_printf(" failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
3651 ret);
Hanno Beckera7d25422019-04-09 17:28:10 +01003652 goto exit;
3653 }
Hanno Beckera7d25422019-04-09 17:28:10 +01003654 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003655#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01003656
Piotr Nowicki0937ed22019-11-26 16:32:40 +01003657#if defined(MBEDTLS_MEMORY_DEBUG)
Gilles Peskine449bd832023-01-11 14:50:10 +01003658 mbedtls_memory_buffer_alloc_cur_get(&current_heap_memory, &heap_blocks);
3659 mbedtls_memory_buffer_alloc_max_get(&peak_heap_memory, &heap_blocks);
3660 mbedtls_printf("Heap memory usage after handshake: %lu bytes. Peak memory usage was %lu\n",
3661 (unsigned long) current_heap_memory, (unsigned long) peak_heap_memory);
Piotr Nowicki0937ed22019-11-26 16:32:40 +01003662#endif /* MBEDTLS_MEMORY_DEBUG */
3663
Gilles Peskine449bd832023-01-11 14:50:10 +01003664 if (opt.exchanges == 0) {
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02003665 goto close_notify;
Gilles Peskine449bd832023-01-11 14:50:10 +01003666 }
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02003667
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003668 exchanges_left = opt.exchanges;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003669data_exchange:
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003670 /*
3671 * 6. Read the HTTP Request
3672 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003673 mbedtls_printf(" < Read from client:");
3674 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003675
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003676 /*
3677 * TLS and DTLS need different reading styles (stream vs datagram)
3678 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003679 if (opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM) {
3680 do {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003681 int terminated = 0;
Gilles Peskine99a732b2022-04-06 23:34:36 +02003682 len = opt.buffer_size;
Gilles Peskine449bd832023-01-11 14:50:10 +01003683 memset(buf, 0, opt.buffer_size);
3684 ret = mbedtls_ssl_read(&ssl, buf, len);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003685
Gilles Peskine449bd832023-01-11 14:50:10 +01003686 if (mbedtls_status_is_ssl_in_progress(ret)) {
3687 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003688#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003689 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003690#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003691 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003692#endif
3693 }
3694
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003695 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01003696 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003697
Gilles Peskine449bd832023-01-11 14:50:10 +01003698 if (ret <= 0) {
3699 switch (ret) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003700 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Gilles Peskine449bd832023-01-11 14:50:10 +01003701 mbedtls_printf(" connection was closed gracefully\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003702 goto close_notify;
3703
3704 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003705 case MBEDTLS_ERR_NET_CONN_RESET:
Gilles Peskine449bd832023-01-11 14:50:10 +01003706 mbedtls_printf(" connection was reset by peer\n");
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003707 ret = MBEDTLS_ERR_NET_CONN_RESET;
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003708 goto reset;
3709
3710 default:
Gilles Peskine449bd832023-01-11 14:50:10 +01003711 mbedtls_printf(" mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003712 goto reset;
3713 }
3714 }
3715
Gilles Peskine449bd832023-01-11 14:50:10 +01003716 if (mbedtls_ssl_get_bytes_avail(&ssl) == 0) {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003717 len = ret;
3718 buf[len] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003719 mbedtls_printf(" %d bytes read\n\n%s\n", len, (char *) buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003720
3721 /* End of message should be detected according to the syntax of the
3722 * application protocol (eg HTTP), just use a dummy test here. */
Gilles Peskine449bd832023-01-11 14:50:10 +01003723 if (buf[len - 1] == '\n') {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003724 terminated = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01003725 }
3726 } else {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003727 int extra_len, ori_len;
3728 unsigned char *larger_buf;
3729
3730 ori_len = ret;
Gilles Peskine449bd832023-01-11 14:50:10 +01003731 extra_len = (int) mbedtls_ssl_get_bytes_avail(&ssl);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003732
Gilles Peskine449bd832023-01-11 14:50:10 +01003733 larger_buf = mbedtls_calloc(1, ori_len + extra_len + 1);
3734 if (larger_buf == NULL) {
3735 mbedtls_printf(" ! memory allocation failed\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003736 ret = 1;
3737 goto reset;
3738 }
3739
Gilles Peskine449bd832023-01-11 14:50:10 +01003740 memset(larger_buf, 0, ori_len + extra_len);
3741 memcpy(larger_buf, buf, ori_len);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003742
3743 /* This read should never fail and get the whole cached data */
Gilles Peskine449bd832023-01-11 14:50:10 +01003744 ret = mbedtls_ssl_read(&ssl, larger_buf + ori_len, extra_len);
3745 if (ret != extra_len ||
3746 mbedtls_ssl_get_bytes_avail(&ssl) != 0) {
3747 mbedtls_printf(" ! mbedtls_ssl_read failed on cached data\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003748 ret = 1;
3749 goto reset;
3750 }
3751
3752 larger_buf[ori_len + extra_len] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003753 mbedtls_printf(" %d bytes read (%d + %d)\n\n%s\n",
3754 ori_len + extra_len, ori_len, extra_len,
3755 (char *) larger_buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003756
3757 /* End of message should be detected according to the syntax of the
3758 * application protocol (eg HTTP), just use a dummy test here. */
Gilles Peskine449bd832023-01-11 14:50:10 +01003759 if (larger_buf[ori_len + extra_len - 1] == '\n') {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003760 terminated = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01003761 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003762
Gilles Peskine449bd832023-01-11 14:50:10 +01003763 mbedtls_free(larger_buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003764 }
3765
Gilles Peskine449bd832023-01-11 14:50:10 +01003766 if (terminated) {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003767 ret = 0;
3768 break;
3769 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003770 } while (1);
3771 } else { /* Not stream, so datagram */
Gilles Peskine99a732b2022-04-06 23:34:36 +02003772 len = opt.buffer_size;
Gilles Peskine449bd832023-01-11 14:50:10 +01003773 memset(buf, 0, opt.buffer_size);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003774
Gilles Peskine449bd832023-01-11 14:50:10 +01003775 do {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003776 /* Without the call to `mbedtls_ssl_check_pending`, it might
3777 * happen that the client sends application data in the same
3778 * datagram as the Finished message concluding the handshake.
3779 * In this case, the application data would be ready to be
3780 * processed while the underlying transport wouldn't signal
3781 * any further incoming data.
3782 *
3783 * See the test 'Event-driven I/O: session-id resume, UDP packing'
3784 * in tests/ssl-opt.sh.
3785 */
3786
3787 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003788 if (mbedtls_ssl_check_pending(&ssl) == 0 &&
3789 opt.event == 1 /* level triggered IO */) {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003790#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003791 idle(&client_fd, &timer, MBEDTLS_ERR_SSL_WANT_READ);
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003792#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003793 idle(&client_fd, MBEDTLS_ERR_SSL_WANT_READ);
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003794#endif
3795 }
3796
Gilles Peskine449bd832023-01-11 14:50:10 +01003797 ret = mbedtls_ssl_read(&ssl, buf, len);
Hanno Becker16970d22017-10-10 15:56:37 +01003798
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003799 /* Note that even if `mbedtls_ssl_check_pending` returns true,
3800 * it can happen that the subsequent call to `mbedtls_ssl_read`
3801 * returns `MBEDTLS_ERR_SSL_WANT_READ`, because the pending messages
3802 * might be discarded (e.g. because they are retransmissions). */
Gilles Peskine449bd832023-01-11 14:50:10 +01003803 } while (mbedtls_status_is_ssl_in_progress(ret));
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003804
Gilles Peskine449bd832023-01-11 14:50:10 +01003805 if (ret <= 0) {
3806 switch (ret) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003807 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Gilles Peskine449bd832023-01-11 14:50:10 +01003808 mbedtls_printf(" connection was closed gracefully\n");
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003809 goto close_notify;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003810
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003811 default:
Gilles Peskine449bd832023-01-11 14:50:10 +01003812 mbedtls_printf(" mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret);
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003813 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003814 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003815 }
3816
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003817 len = ret;
3818 buf[len] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003819 mbedtls_printf(" %d bytes read\n\n%s", len, (char *) buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003820 ret = 0;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003821 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003822
3823 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003824 * 7a. Request renegotiation while client is waiting for input from us.
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02003825 * (only on the first exchange, to be able to test retransmission)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003826 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003827#if defined(MBEDTLS_SSL_RENEGOTIATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003828 if (opt.renegotiate && exchanges_left == opt.exchanges) {
3829 mbedtls_printf(" . Requestion renegotiation...");
3830 fflush(stdout);
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003831
Gilles Peskine449bd832023-01-11 14:50:10 +01003832 while ((ret = mbedtls_ssl_renegotiate(&ssl)) != 0) {
3833 if (!mbedtls_status_is_ssl_in_progress(ret)) {
3834 mbedtls_printf(" failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret);
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003835 goto reset;
3836 }
Hanno Becker16970d22017-10-10 15:56:37 +01003837
3838 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003839 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003840#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003841 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003842#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003843 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003844#endif
3845 }
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003846 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003847
Gilles Peskine449bd832023-01-11 14:50:10 +01003848 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003849 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003850#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003851
Hanno Beckera0e20d02019-05-15 14:03:01 +01003852#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01003853 ret = report_cid_usage(&ssl, "after renegotiation");
3854 if (ret != 0) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003855 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01003856 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003857#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003858
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003859 /*
3860 * 7. Write the 200 Response
3861 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003862 mbedtls_printf(" > Write to client:");
3863 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003864
Gilles Peskine8bb96d92022-04-06 23:31:05 +02003865 /* If the format of the response changes, make sure there is enough
3866 * room in buf (buf_content_size calculation above). */
Gilles Peskine449bd832023-01-11 14:50:10 +01003867 len = sprintf((char *) buf, HTTP_RESPONSE,
3868 mbedtls_ssl_get_ciphersuite(&ssl));
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003869
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003870 /* Add padding to the response to reach opt.response_size in length */
Gilles Peskine449bd832023-01-11 14:50:10 +01003871 if (opt.response_size != DFL_RESPONSE_SIZE &&
3872 len < opt.response_size) {
3873 memset(buf + len, 'B', opt.response_size - len);
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003874 len += opt.response_size - len;
3875 }
3876
3877 /* Truncate if response size is smaller than the "natural" size */
Gilles Peskine449bd832023-01-11 14:50:10 +01003878 if (opt.response_size != DFL_RESPONSE_SIZE &&
3879 len > opt.response_size) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003880 len = opt.response_size;
3881
3882 /* Still end with \r\n unless that's really not possible */
Gilles Peskine449bd832023-01-11 14:50:10 +01003883 if (len >= 2) {
3884 buf[len - 2] = '\r';
3885 }
3886 if (len >= 1) {
3887 buf[len - 1] = '\n';
3888 }
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003889 }
3890
Gilles Peskine449bd832023-01-11 14:50:10 +01003891 if (opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM) {
3892 for (written = 0, frags = 0; written < len; written += ret, frags++) {
3893 while ((ret = mbedtls_ssl_write(&ssl, buf + written, len - written))
3894 <= 0) {
3895 if (ret == MBEDTLS_ERR_NET_CONN_RESET) {
3896 mbedtls_printf(" failed\n ! peer closed the connection\n\n");
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003897 goto reset;
3898 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003899
Gilles Peskine449bd832023-01-11 14:50:10 +01003900 if (!mbedtls_status_is_ssl_in_progress(ret)) {
3901 mbedtls_printf(" failed\n ! mbedtls_ssl_write returned %d\n\n", ret);
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003902 goto reset;
3903 }
Hanno Becker16970d22017-10-10 15:56:37 +01003904
3905 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003906 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003907#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003908 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003909#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003910 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003911#endif
3912 }
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003913 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003914 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003915 } else { /* Not stream, so datagram */
3916 while (1) {
3917 ret = mbedtls_ssl_write(&ssl, buf, len);
Hanno Becker16970d22017-10-10 15:56:37 +01003918
Gilles Peskine449bd832023-01-11 14:50:10 +01003919 if (!mbedtls_status_is_ssl_in_progress(ret)) {
Hanno Becker16970d22017-10-10 15:56:37 +01003920 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01003921 }
Hanno Becker16970d22017-10-10 15:56:37 +01003922
3923 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003924 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003925#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003926 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003927#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003928 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003929#endif
3930 }
3931 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003932
Gilles Peskine449bd832023-01-11 14:50:10 +01003933 if (ret < 0) {
3934 mbedtls_printf(" failed\n ! mbedtls_ssl_write returned %d\n\n", ret);
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003935 goto reset;
3936 }
3937
3938 frags = 1;
3939 written = ret;
3940 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003941
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003942 buf[written] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003943 mbedtls_printf(" %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf);
Manuel Pégourié-Gonnarda92ed482015-01-14 10:46:08 +01003944 ret = 0;
Manuel Pégourié-Gonnardf3dc2f62013-10-29 18:17:41 +01003945
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003946 /*
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003947 * 7b. Simulate serialize/deserialize and go back to data exchange
3948 */
Jarno Lamsabbc7b412019-06-04 11:06:31 +03003949#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003950 if (opt.serialize != 0) {
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03003951 size_t buf_len;
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003952
Gilles Peskine449bd832023-01-11 14:50:10 +01003953 mbedtls_printf(" . Serializing live connection...");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003954
Gilles Peskine449bd832023-01-11 14:50:10 +01003955 ret = mbedtls_ssl_context_save(&ssl, NULL, 0, &buf_len);
3956 if (ret != MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL) {
3957 mbedtls_printf(" failed\n ! mbedtls_ssl_context_save returned "
3958 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003959
3960 goto exit;
3961 }
3962
Gilles Peskine449bd832023-01-11 14:50:10 +01003963 if ((context_buf = mbedtls_calloc(1, buf_len)) == NULL) {
3964 mbedtls_printf(" failed\n ! Couldn't allocate buffer for "
3965 "serialized context");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003966
3967 goto exit;
3968 }
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02003969 context_buf_len = buf_len;
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003970
Gilles Peskine449bd832023-01-11 14:50:10 +01003971 if ((ret = mbedtls_ssl_context_save(&ssl, context_buf,
3972 buf_len, &buf_len)) != 0) {
3973 mbedtls_printf(" failed\n ! mbedtls_ssl_context_save returned "
3974 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003975
3976 goto exit;
3977 }
3978
Gilles Peskine449bd832023-01-11 14:50:10 +01003979 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003980
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003981 /* Save serialized context to the 'opt.context_file' as a base64 code */
Gilles Peskine449bd832023-01-11 14:50:10 +01003982 if (0 < strlen(opt.context_file)) {
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003983 FILE *b64_file;
3984 uint8_t *b64_buf;
3985 size_t b64_len;
3986
Gilles Peskine449bd832023-01-11 14:50:10 +01003987 mbedtls_printf(" . Save serialized context to a file... ");
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003988
Gilles Peskine449bd832023-01-11 14:50:10 +01003989 mbedtls_base64_encode(NULL, 0, &b64_len, context_buf, buf_len);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003990
Gilles Peskine449bd832023-01-11 14:50:10 +01003991 if ((b64_buf = mbedtls_calloc(1, b64_len)) == NULL) {
3992 mbedtls_printf("failed\n ! Couldn't allocate buffer for "
3993 "the base64 code\n");
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003994 goto exit;
3995 }
3996
Gilles Peskine449bd832023-01-11 14:50:10 +01003997 if ((ret = mbedtls_base64_encode(b64_buf, b64_len, &b64_len,
3998 context_buf, buf_len)) != 0) {
3999 mbedtls_printf("failed\n ! mbedtls_base64_encode returned "
4000 "-0x%x\n", (unsigned int) -ret);
4001 mbedtls_free(b64_buf);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004002 goto exit;
4003 }
4004
Gilles Peskine449bd832023-01-11 14:50:10 +01004005 if ((b64_file = fopen(opt.context_file, "w")) == NULL) {
4006 mbedtls_printf("failed\n ! Cannot open '%s' for writing.\n",
4007 opt.context_file);
4008 mbedtls_free(b64_buf);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004009 goto exit;
4010 }
4011
Gilles Peskine449bd832023-01-11 14:50:10 +01004012 if (b64_len != fwrite(b64_buf, 1, b64_len, b64_file)) {
4013 mbedtls_printf("failed\n ! fwrite(%ld bytes) failed\n",
4014 (long) b64_len);
4015 mbedtls_free(b64_buf);
4016 fclose(b64_file);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004017 goto exit;
4018 }
4019
Gilles Peskine449bd832023-01-11 14:50:10 +01004020 mbedtls_free(b64_buf);
4021 fclose(b64_file);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004022
Gilles Peskine449bd832023-01-11 14:50:10 +01004023 mbedtls_printf("ok\n");
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004024 }
4025
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004026 /*
4027 * This simulates a workflow where you have a long-lived server
4028 * instance, potentially with a pool of ssl_context objects, and you
4029 * just want to re-use one while the connection is inactive: in that
4030 * case you can just reset() it, and then it's ready to receive
4031 * serialized data from another connection (or the same here).
4032 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004033 if (opt.serialize == 1) {
Manuel Pégourié-Gonnard9df5a822019-07-23 14:51:09 +02004034 /* nothing to do here, done by context_save() already */
Gilles Peskine449bd832023-01-11 14:50:10 +01004035 mbedtls_printf(" . Context has been reset... ok\n");
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004036 }
4037
4038 /*
4039 * This simulates a workflow where you have one server instance per
4040 * connection, and want to release it entire when the connection is
4041 * inactive, and spawn it again when needed again - this would happen
4042 * between ssl_free() and ssl_init() below, together with any other
4043 * teardown/startup code needed - for example, preparing the
4044 * ssl_config again (see section 3 "setup stuff" in this file).
4045 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004046 if (opt.serialize == 2) {
4047 mbedtls_printf(" . Freeing and reinitializing context...");
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004048
Gilles Peskine449bd832023-01-11 14:50:10 +01004049 mbedtls_ssl_free(&ssl);
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004050
Gilles Peskine449bd832023-01-11 14:50:10 +01004051 mbedtls_ssl_init(&ssl);
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004052
Gilles Peskine449bd832023-01-11 14:50:10 +01004053 if ((ret = mbedtls_ssl_setup(&ssl, &conf)) != 0) {
4054 mbedtls_printf(" failed\n ! mbedtls_ssl_setup returned "
4055 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004056 goto exit;
4057 }
4058
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004059 /*
4060 * This illustrates the minimum amount of things you need to set
4061 * up, however you could set up much more if desired, for example
4062 * if you want to share your set up code between the case of
4063 * establishing a new connection and this case.
4064 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004065 if (opt.nbio == 2) {
4066 mbedtls_ssl_set_bio(&ssl, &client_fd, delayed_send,
4067 delayed_recv, NULL);
4068 } else {
4069 mbedtls_ssl_set_bio(&ssl, &client_fd, mbedtls_net_send,
4070 mbedtls_net_recv,
4071 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL);
4072 }
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004073
Jarno Lamsa8e253212019-06-13 11:45:06 +03004074#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004075 mbedtls_ssl_set_timer_cb(&ssl, &timer,
4076 mbedtls_timing_set_delay,
4077 mbedtls_timing_get_delay);
Jarno Lamsa8e253212019-06-13 11:45:06 +03004078#endif /* MBEDTLS_TIMING_C */
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004079
Gilles Peskine449bd832023-01-11 14:50:10 +01004080 mbedtls_printf(" ok\n");
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004081 }
4082
Gilles Peskine449bd832023-01-11 14:50:10 +01004083 mbedtls_printf(" . Deserializing connection...");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004084
Gilles Peskine449bd832023-01-11 14:50:10 +01004085 if ((ret = mbedtls_ssl_context_load(&ssl, context_buf,
4086 buf_len)) != 0) {
4087 mbedtls_printf("failed\n ! mbedtls_ssl_context_load returned "
4088 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004089
4090 goto exit;
4091 }
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004092
Gilles Peskine449bd832023-01-11 14:50:10 +01004093 mbedtls_free(context_buf);
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02004094 context_buf = NULL;
4095 context_buf_len = 0;
4096
Gilles Peskine449bd832023-01-11 14:50:10 +01004097 mbedtls_printf(" ok\n");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004098 }
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03004099#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004100
4101 /*
4102 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004103 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004104 if (--exchanges_left > 0) {
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004105 goto data_exchange;
Gilles Peskine449bd832023-01-11 14:50:10 +01004106 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004107
4108 /*
4109 * 8. Done, cleanly close the connection
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02004110 */
4111close_notify:
Gilles Peskine449bd832023-01-11 14:50:10 +01004112 mbedtls_printf(" . Closing the connection...");
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01004113
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02004114 /* No error checking, the connection might be closed already */
Gilles Peskine449bd832023-01-11 14:50:10 +01004115 do {
4116 ret = mbedtls_ssl_close_notify(&ssl);
4117 } while (ret == MBEDTLS_ERR_SSL_WANT_WRITE);
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02004118 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02004119
Gilles Peskine449bd832023-01-11 14:50:10 +01004120 mbedtls_printf(" done\n");
Rich Evansf90016a2015-01-19 14:26:37 +00004121
Pengyu Lv753d02f2023-03-07 14:51:09 +08004122#if defined(MBEDTLS_SSL_CACHE_C)
4123 if (opt.cache_remove > 0) {
4124 mbedtls_ssl_cache_remove(&cache, ssl.session->id, ssl.session->id_len);
4125 }
4126#endif
4127
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004128 goto reset;
4129
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02004130 /*
4131 * Cleanup and exit
4132 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004133exit:
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02004134#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +01004135 if (ret != 0) {
gabor-mezei-armde472172020-09-04 14:44:25 +02004136 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +01004137 mbedtls_strerror(ret, error_buf, 100);
4138 mbedtls_printf("Last error was: -0x%X - %s\n\n", (unsigned int) -ret, error_buf);
gabor-mezei-armde472172020-09-04 14:44:25 +02004139 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004140#endif
4141
Gilles Peskine449bd832023-01-11 14:50:10 +01004142 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4143 mbedtls_printf(" . Cleaning up...");
4144 fflush(stdout);
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02004145 }
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01004146
Gilles Peskine449bd832023-01-11 14:50:10 +01004147 mbedtls_net_free(&client_fd);
4148 mbedtls_net_free(&listen_fd);
Paul Bakker0c226102014-04-17 16:02:36 +02004149
Gilles Peskine449bd832023-01-11 14:50:10 +01004150 mbedtls_ssl_free(&ssl);
4151 mbedtls_ssl_config_free(&conf);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004152
4153#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004154 mbedtls_ssl_cache_free(&cache);
Paul Bakkera317a982014-06-18 16:44:11 +02004155#endif
Przemek Stekiel68a01a62022-10-10 11:31:58 +02004156#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004157 mbedtls_ssl_ticket_free(&ticket_ctx);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004158#endif
4159#if defined(MBEDTLS_SSL_COOKIE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004160 mbedtls_ssl_cookie_free(&cookie_ctx);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004161#endif
4162
4163#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01004164 if (context_buf != NULL) {
4165 mbedtls_platform_zeroize(context_buf, context_buf_len);
4166 }
4167 mbedtls_free(context_buf);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004168#endif
4169
4170#if defined(SNI_OPTION)
Gilles Peskine449bd832023-01-11 14:50:10 +01004171 sni_free(sni_info);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004172#endif
4173
Ronald Cron73fe8df2022-10-05 14:31:43 +02004174#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01004175 ret = psk_free(psk_info);
4176 if ((ret != 0) && (opt.query_config_mode == DFL_QUERY_CONFIG_MODE)) {
4177 mbedtls_printf("Failed to list of opaque PSKs - error was %d\n", ret);
4178 }
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004179#endif
4180
Ronald Crone68ab4f2022-10-05 12:46:29 +02004181#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01004182 mbedtls_x509_crt_free(&cacert);
4183 mbedtls_x509_crt_free(&srvcert);
4184 mbedtls_pk_free(&pkey);
4185 mbedtls_x509_crt_free(&srvcert2);
4186 mbedtls_pk_free(&pkey2);
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02004187#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01004188 psa_destroy_key(key_slot);
4189 psa_destroy_key(key_slot2);
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02004190#endif
Paul Bakkered27a042013-04-18 22:46:23 +02004191#endif
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004192
4193#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01004194 mbedtls_dhm_free(&dhm);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004195#endif
4196
Gilles Peskine44817442018-06-13 18:09:28 +02004197#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01004198 for (i = 0; (size_t) i < ssl_async_keys.slots_used; i++) {
4199 if (ssl_async_keys.slots[i].pk_owned) {
4200 mbedtls_pk_free(ssl_async_keys.slots[i].pk);
4201 mbedtls_free(ssl_async_keys.slots[i].pk);
Gilles Peskine44817442018-06-13 18:09:28 +02004202 ssl_async_keys.slots[i].pk = NULL;
4203 }
4204 }
4205#endif
Paul Bakkered27a042013-04-18 22:46:23 +02004206
Ronald Cron73fe8df2022-10-05 14:31:43 +02004207#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED) && \
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004208 defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01004209 if (opt.psk_opaque != 0) {
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004210 /* This is ok even if the slot hasn't been
4211 * initialized (we might have jumed here
4212 * immediately because of bad cmd line params,
4213 * for example). */
Gilles Peskine449bd832023-01-11 14:50:10 +01004214 status = psa_destroy_key(psk_slot);
4215 if ((status != PSA_SUCCESS) &&
4216 (opt.query_config_mode == DFL_QUERY_CONFIG_MODE)) {
4217 mbedtls_printf("Failed to destroy key slot %u - error was %d",
4218 (unsigned) MBEDTLS_SVC_KEY_ID_GET_KEY_ID(psk_slot),
4219 (int) status);
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004220 }
4221 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02004222#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED &&
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004223 MBEDTLS_USE_PSA_CRYPTO */
4224
Valerio Setti77e83152022-11-29 17:17:11 +01004225#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
4226 defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settieb3f7882022-12-08 18:42:58 +01004227 /*
4228 * In case opaque keys it's the user responsibility to keep the key valid
4229 * for the duration of the handshake and destroy it at the end
4230 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004231 if ((opt.ecjpake_pw_opaque != DFL_ECJPAKE_PW_OPAQUE)) {
Valerio Setti785116a2022-12-12 11:59:25 +01004232 psa_key_attributes_t check_attributes = PSA_KEY_ATTRIBUTES_INIT;
4233
4234 /* Verify that the key is still valid before destroying it */
Gilles Peskine449bd832023-01-11 14:50:10 +01004235 if (psa_get_key_attributes(ecjpake_pw_slot, &check_attributes) !=
4236 PSA_SUCCESS) {
4237 if (ret == 0) {
Valerio Settid75c5c42022-12-13 11:51:32 +01004238 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004239 }
4240 mbedtls_printf("The EC J-PAKE password key has unexpectedly been already destroyed\n");
4241 } else {
4242 psa_destroy_key(ecjpake_pw_slot);
Valerio Setti785116a2022-12-12 11:59:25 +01004243 }
Valerio Settid572a822022-11-28 18:27:51 +01004244 }
Valerio Setti77e83152022-11-29 17:17:11 +01004245#endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED && MBEDTLS_USE_PSA_CRYPTO */
Valerio Settid572a822022-11-28 18:27:51 +01004246
XiaokangQian318dc762022-04-20 09:43:51 +00004247#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01004248 const char *message = mbedtls_test_helper_is_psa_leaking();
4249 if (message) {
4250 if (ret == 0) {
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +02004251 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004252 }
4253 mbedtls_printf("PSA memory leak detected: %s\n", message);
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +02004254 }
Gilles Peskine414e7172021-02-03 00:04:08 +01004255#endif
4256
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01004257 /* For builds with MBEDTLS_TEST_USE_PSA_CRYPTO_RNG psa crypto
4258 * resources are freed by rng_free(). */
Gilles Peskine449bd832023-01-11 14:50:10 +01004259#if (defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)) \
XiaokangQian318dc762022-04-20 09:43:51 +00004260 && !defined(MBEDTLS_TEST_USE_PSA_CRYPTO_RNG)
Gilles Peskine449bd832023-01-11 14:50:10 +01004261 mbedtls_psa_crypto_free();
Gilles Peskined0a46e52021-02-03 00:03:03 +01004262#endif
4263
Gilles Peskine449bd832023-01-11 14:50:10 +01004264 rng_free(&rng);
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01004265
Gilles Peskine449bd832023-01-11 14:50:10 +01004266 mbedtls_free(buf);
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01004267
Gilles Peskine60fe6602021-02-16 18:56:42 +01004268#if defined(MBEDTLS_TEST_HOOKS)
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02004269 /* Let test hooks detect errors such as resource leaks.
4270 * Don't do it in query_config mode, because some test code prints
4271 * information to stdout and this gets mixed with the regular output. */
Gilles Peskine449bd832023-01-11 14:50:10 +01004272 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4273 if (test_hooks_failure_detected()) {
4274 if (ret == 0) {
Gilles Peskined0a46e52021-02-03 00:03:03 +01004275 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004276 }
4277 mbedtls_printf("Test hooks detected errors.\n");
Gilles Peskined0a46e52021-02-03 00:03:03 +01004278 }
Gilles Peskine53dea742021-02-02 22:55:06 +01004279 }
Gilles Peskine449bd832023-01-11 14:50:10 +01004280 test_hooks_free();
Gilles Peskine60fe6602021-02-16 18:56:42 +01004281#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01004282
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004283#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
4284#if defined(MBEDTLS_MEMORY_DEBUG)
4285 mbedtls_memory_buffer_alloc_status();
Paul Bakker82024bf2013-07-04 11:52:32 +02004286#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004287 mbedtls_memory_buffer_alloc_free();
Gilles Peskine34babfc2021-02-16 15:44:37 +01004288#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Paul Bakker82024bf2013-07-04 11:52:32 +02004289
Gilles Peskine449bd832023-01-11 14:50:10 +01004290 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4291 mbedtls_printf(" done.\n");
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02004292 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004293
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02004294 // Shell can not handle large exit numbers -> 1 for errors
Gilles Peskine449bd832023-01-11 14:50:10 +01004295 if (ret < 0) {
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02004296 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004297 }
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02004298
Gilles Peskine449bd832023-01-11 14:50:10 +01004299 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4300 mbedtls_exit(ret);
4301 } else {
4302 mbedtls_exit(query_config_ret);
4303 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004304}
Gilles Peskineb4df7542021-01-08 21:20:09 +01004305#endif /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_SRV_C */