blob: 9919e08f95be188aaeda0e5fa5b90ee6918ed1a4 [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb60b95f2012-09-25 09:05:17 +000018 */
19
Mateusz Starzyk6c2e9b62021-05-19 17:54:54 +020020#define MBEDTLS_ALLOW_PRIVATE_ACCESS
21
Gilles Peskineab7ce962021-01-05 21:27:53 +010022#include "ssl_test_lib.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000023
Gilles Peskineab7ce962021-01-05 21:27:53 +010024#if defined(MBEDTLS_SSL_TEST_IMPOSSIBLE)
Gilles Peskine449bd832023-01-11 14:50:10 +010025int main(void)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020026{
Gilles Peskine449bd832023-01-11 14:50:10 +010027 mbedtls_printf(MBEDTLS_SSL_TEST_IMPOSSIBLE);
28 mbedtls_exit(0);
Gilles Peskineab7ce962021-01-05 21:27:53 +010029}
30#elif !defined(MBEDTLS_SSL_SRV_C)
Gilles Peskine449bd832023-01-11 14:50:10 +010031int main(void)
Gilles Peskineab7ce962021-01-05 21:27:53 +010032{
Gilles Peskine449bd832023-01-11 14:50:10 +010033 mbedtls_printf("MBEDTLS_SSL_SRV_C not defined.\n");
34 mbedtls_exit(0);
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020035}
Gilles Peskineb4df7542021-01-08 21:20:09 +010036#else /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_SRV_C */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +010037
Andres AG692ad842017-01-19 16:30:57 +000038#include <stdint.h>
Andres AG0b736db2017-02-08 14:05:57 +000039
40#if !defined(_MSC_VER)
Andres AG692ad842017-01-19 16:30:57 +000041#include <inttypes.h>
Andres AG0b736db2017-02-08 14:05:57 +000042#endif
Rich Evans18b78c72015-02-11 14:06:19 +000043
44#if !defined(_WIN32)
45#include <signal.h>
46#endif
47
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020048#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000049#include "mbedtls/ssl_cache.h"
Paul Bakker0a597072012-09-25 21:55:46 +000050#endif
51
Przemek Stekiel68a01a62022-10-10 11:31:58 +020052#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +020053#include "mbedtls/ssl_ticket.h"
54#endif
55
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020056#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000057#include "mbedtls/ssl_cookie.h"
Manuel Pégourié-Gonnard232edd42014-07-23 16:56:27 +020058#endif
59
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020060#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && defined(MBEDTLS_FS_IO)
61#define SNI_OPTION
62#endif
63
64#if defined(_WIN32)
65#include <windows.h>
66#endif
67
XiaokangQian318dc762022-04-20 09:43:51 +000068#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +020069#include "test/psa_crypto_helpers.h"
70#endif
71
Valerio Setti5ba1d5e2023-02-22 12:38:54 +010072#include "mbedtls/pk.h"
Przemek Stekiel6d7da5e2023-05-18 16:02:43 +020073#include "mbedtls/dhm.h"
Valerio Setti5ba1d5e2023-02-22 12:38:54 +010074
Simon Butchercce68be2018-07-23 14:26:09 +010075/* Size of memory to be allocated for the heap, when using the library's memory
76 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
toth92g27f9e782021-02-22 13:17:32 +010077#define MEMORY_HEAP_SIZE 180000
Simon Butchercce68be2018-07-23 14:26:09 +010078
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +010079#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020080#define DFL_SERVER_PORT "4433"
Andrzej Kurek30e731d2017-10-12 13:50:29 +020081#define DFL_RESPONSE_SIZE -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +000082#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010083#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010084#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020085#define DFL_READ_TIMEOUT 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +000086#define DFL_CA_FILE ""
87#define DFL_CA_PATH ""
88#define DFL_CRT_FILE ""
89#define DFL_KEY_FILE ""
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +020090#define DFL_KEY_OPAQUE 0
Hanno Beckere58a6302018-11-07 16:20:16 +000091#define DFL_KEY_PWD ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +020092#define DFL_CRT_FILE2 ""
93#define DFL_KEY_FILE2 ""
Hanno Beckere58a6302018-11-07 16:20:16 +000094#define DFL_KEY_PWD2 ""
Gilles Peskinefcca9d82018-01-12 13:47:48 +010095#define DFL_ASYNC_OPERATIONS "-"
Gilles Peskine449bd832023-01-11 14:50:10 +010096#define DFL_ASYNC_PRIVATE_DELAY1 (-1)
97#define DFL_ASYNC_PRIVATE_DELAY2 (-1)
98#define DFL_ASYNC_PRIVATE_ERROR (0)
Paul Bakkerfbb17802013-04-17 19:10:21 +020099#define DFL_PSK ""
Hanno Becker1d911cd2018-11-15 13:06:09 +0000100#define DFL_PSK_OPAQUE 0
101#define DFL_PSK_LIST_OPAQUE 0
Paul Bakkerfbb17802013-04-17 19:10:21 +0200102#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200103#define DFL_ECJPAKE_PW NULL
Valerio Settid572a822022-11-28 18:27:51 +0100104#define DFL_ECJPAKE_PW_OPAQUE 0
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200105#define DFL_PSK_LIST NULL
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000106#define DFL_FORCE_CIPHER 0
Xiaofei Bai746f9482021-11-12 08:53:56 +0000107#define DFL_TLS1_3_KEX_MODES MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200108#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100109#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100110#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +0200111#define DFL_RENEGO_DELAY -2
Gilles Peskine449bd832023-01-11 14:50:10 +0100112#define DFL_RENEGO_PERIOD ((uint64_t) -1)
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200113#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200114#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +0200115#define DFL_MAX_VERSION -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200116#define DFL_SHA1 -1
Hanno Beckera7d25422019-04-09 17:28:10 +0100117#define DFL_CID_ENABLED 0
118#define DFL_CID_VALUE ""
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100119#define DFL_CID_ENABLED_RENEGO -1
120#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100121#define DFL_AUTH_MODE -1
Janos Follath4817e272017-04-10 13:44:33 +0100122#define DFL_CERT_REQ_CA_LIST MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED
Glenn Straussbd10c4e2022-06-25 03:15:48 -0400123#define DFL_CERT_REQ_DN_HINT 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200124#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100125#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200126#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Jerry Yu25ab6542022-09-15 18:32:34 +0800127#define DFL_DUMMY_TICKET 0
Glenn Strausse3282452022-02-03 17:23:24 -0500128#define DFL_TICKET_ROTATE 0
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200129#define DFL_TICKET_TIMEOUT 86400
Gabor Mezeid4bea1e2022-01-12 16:21:15 +0100130#define DFL_TICKET_AEAD MBEDTLS_CIPHER_AES_256_GCM
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100131#define DFL_CACHE_MAX -1
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100132#define DFL_CACHE_TIMEOUT -1
Pengyu Lv753d02f2023-03-07 14:51:09 +0800133#define DFL_CACHE_REMOVE 0
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100134#define DFL_SNI NULL
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200135#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100136#define DFL_CURVES NULL
Jerry Yu7854a4e2022-11-05 23:14:47 +0800137#define DFL_MAX_EARLY_DATA_SIZE 0
Hanno Becker11ceadd2021-08-10 13:36:41 +0100138#define DFL_SIG_ALGS NULL
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200139#define DFL_DHM_FILE NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200141#define DFL_COOKIES 1
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200142#define DFL_ANTI_REPLAY -1
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200143#define DFL_HS_TO_MIN 0
144#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200145#define DFL_DTLS_MTU -1
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200146#define DFL_BADMAC_LIMIT -1
Hanno Beckere7675d02018-08-14 13:28:56 +0100147#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200148#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100149#define DFL_ETM -1
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300150#define DFL_SERIALIZE 0
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200151#define DFL_CONTEXT_FILE ""
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300152#define DFL_EXTENDED_MS_ENFORCE -1
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200153#define DFL_CA_CALLBACK 0
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300154#define DFL_EAP_TLS 0
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200155#define DFL_REPRODUCIBLE 0
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100156#define DFL_NSS_KEYLOG 0
157#define DFL_NSS_KEYLOG_FILE NULL
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200158#define DFL_QUERY_CONFIG_MODE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300159#define DFL_USE_SRTP 0
Ron Eldor311b95a2018-07-08 08:50:31 +0300160#define DFL_SRTP_FORCE_PROFILE 0
Ron Eldor12c6ead2018-07-03 15:08:32 +0300161#define DFL_SRTP_SUPPORT_MKI 0
Przemek Stekiel4ca0d722022-04-25 12:46:22 +0200162#define DFL_KEY_OPAQUE_ALG "none"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000163
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200164#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100165 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
166 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
167 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
168 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
169 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
170 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200171
Paul Bakker8e714d72013-07-18 11:05:13 +0200172/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
173 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000174#define HTTP_RESPONSE \
175 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Manuel Pégourié-Gonnard91699212015-01-22 16:26:39 +0000176 "<h2>mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200177 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000178
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200179/*
180 * Size of the basic I/O buffer. Able to hold our default response.
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200181 */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200182#define DFL_IO_BUF_LEN 200
Manuel Pégourié-Gonnarde7a3b102014-06-11 18:21:20 +0200183
Ronald Crone68ab4f2022-10-05 12:46:29 +0200184#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200185#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000186#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100187 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
188 " default: \"\" (pre-loaded)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100189 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100190 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
191 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100192 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100193 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200194 " default: see note after key_file2\n" \
195 " key_file=%%s default: see note after key_file2\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100196 " key_pwd=%%s Password for key specified by key_file argument\n" \
Hanno Beckere58a6302018-11-07 16:20:16 +0000197 " default: none\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200198 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200199 " default: see note after key_file2\n" \
200 " key_file2=%%s default: see note below\n" \
201 " note: if neither crt_file/key_file nor crt_file2/key_file2 are used,\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200202 " preloaded certificate(s) and key(s) are used if available\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100203 " key_pwd2=%%s Password for key specified by key_file2 argument\n" \
Hanno Beckere58a6302018-11-07 16:20:16 +0000204 " default: none\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200205 " dhm_file=%%s File containing Diffie-Hellman parameters\n" \
206 " default: preloaded parameters\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000207#else
208#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200209 "\n" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200210 " No file operations available (MBEDTLS_FS_IO not defined)\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200211 "\n"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200212#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200213#else
214#define USAGE_IO ""
Ronald Crone68ab4f2022-10-05 12:46:29 +0200215#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
216#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200217#define USAGE_KEY_OPAQUE \
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +0200218 " key_opaque=%%d Handle your private keys as if they were opaque\n" \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200219 " default: 0 (disabled)\n"
220#else
221#define USAGE_KEY_OPAQUE ""
222#endif
Paul Bakkered27a042013-04-18 22:46:23 +0200223
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200224#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100225#define USAGE_SSL_ASYNC \
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100226 " async_operations=%%c... d=decrypt, s=sign (default: -=off)\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100227 " async_private_delay1=%%d Asynchronous delay for key_file or preloaded key\n" \
Gilles Peskine166ce742018-04-30 10:30:49 +0200228 " async_private_delay2=%%d Asynchronous delay for key_file2 and sni\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100229 " default: -1 (not asynchronous)\n" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +0100230 " async_private_error=%%d Async callback error injection (default=0=none,\n" \
Gilles Peskinec9125722018-04-26 07:15:40 +0200231 " 1=start, 2=cancel, 3=resume, negative=first time only)"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100232#else
233#define USAGE_SSL_ASYNC ""
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200234#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100235
Hanno Beckera0e20d02019-05-15 14:03:01 +0100236#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +0100237#define USAGE_CID \
238 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
239 " default: 0 (disabled)\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100240 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100241 " default: same as 'cid' parameter\n" \
Hanno Beckera7d25422019-04-09 17:28:10 +0100242 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100243 " default: \"\"\n" \
244 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100245 " default: same as 'cid_val' parameter\n"
Hanno Beckera0e20d02019-05-15 14:03:01 +0100246#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +0100247#define USAGE_CID ""
Hanno Beckera0e20d02019-05-15 14:03:01 +0100248#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +0100249
Ronald Cron73fe8df2022-10-05 14:31:43 +0200250#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100251#define USAGE_PSK_RAW \
Piotr Nowicki9926eaf2019-11-20 14:54:36 +0100252 " psk=%%s default: \"\" (disabled)\n" \
253 " The PSK values are in hex, without 0x.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100254 " psk_list=%%s default: \"\"\n" \
Andrzej Kurekb274f272019-02-05 05:06:35 -0500255 " A list of (PSK identity, PSK value) pairs.\n" \
256 " The PSK values are in hex, without 0x.\n" \
257 " id1,psk1[,id2,psk2[,...]]\n" \
258 " psk_identity=%%s default: \"Client_identity\"\n"
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100259#if defined(MBEDTLS_USE_PSA_CRYPTO)
260#define USAGE_PSK_SLOT \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000261 " psk_opaque=%%d default: 0 (don't use opaque static PSK)\n" \
262 " Enable this to store the PSK configured through command line\n" \
263 " parameter `psk` in a PSA-based key slot.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100264 " Note: Currently only supported in conjunction with\n" \
265 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
266 " to force a particular PSK-only ciphersuite.\n" \
267 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
268 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
269 " with prepopulated key slots instead of importing raw key material.\n" \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000270 " psk_list_opaque=%%d default: 0 (don't use opaque dynamic PSKs)\n" \
271 " Enable this to store the list of dynamically chosen PSKs configured\n" \
272 " through the command line parameter `psk_list` in PSA-based key slots.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100273 " Note: Currently only supported in conjunction with\n" \
274 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
275 " to force a particular PSK-only ciphersuite.\n" \
276 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
277 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
278 " with prepopulated key slots instead of importing raw key material.\n"
279#else
280#define USAGE_PSK_SLOT ""
281#endif /* MBEDTLS_USE_PSA_CRYPTO */
282#define USAGE_PSK USAGE_PSK_RAW USAGE_PSK_SLOT
Paul Bakkered27a042013-04-18 22:46:23 +0200283#else
284#define USAGE_PSK ""
Ronald Cron73fe8df2022-10-05 14:31:43 +0200285#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200286#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
287#define USAGE_CA_CALLBACK \
288 " ca_callback=%%d default: 0 (disabled)\n" \
289 " Enable this to use the trusted certificate callback function\n"
290#else
291#define USAGE_CA_CALLBACK ""
292#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Przemek Stekield61a4d32022-10-11 09:40:40 +0200293#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Paul Bakkera503a632013-08-14 13:48:06 +0200294#define USAGE_TICKETS \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +0100295 " tickets=%%d default: 1 (enabled)\n" \
Glenn Strausse3282452022-02-03 17:23:24 -0500296 " ticket_rotate=%%d default: 0 (disabled)\n" \
Gabor Mezeid4bea1e2022-01-12 16:21:15 +0100297 " ticket_timeout=%%d default: 86400 (one day)\n" \
298 " ticket_aead=%%s default: \"AES-256-GCM\"\n"
Paul Bakkera503a632013-08-14 13:48:06 +0200299#else
300#define USAGE_TICKETS ""
Przemek Stekield61a4d32022-10-11 09:40:40 +0200301#endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_TICKET_C */
Paul Bakkera503a632013-08-14 13:48:06 +0200302
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300303#define USAGE_EAP_TLS \
304 " eap_tls=%%d default: 0 (disabled)\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100305#define USAGE_NSS_KEYLOG \
Hanno Beckerbc5308c2019-09-09 11:38:51 +0100306 " nss_keylog=%%d default: 0 (disabled)\n" \
307 " This cannot be used with eap_tls=1\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100308#define USAGE_NSS_KEYLOG_FILE \
309 " nss_keylog_file=%%s\n"
Ron Eldor65b56ef2019-09-26 16:40:48 +0300310#if defined(MBEDTLS_SSL_DTLS_SRTP)
311#define USAGE_SRTP \
312 " use_srtp=%%d default: 0 (disabled)\n" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200313 " srtp_force_profile=%%d default: 0 (all enabled)\n" \
Ron Eldor65b56ef2019-09-26 16:40:48 +0300314 " available profiles:\n" \
315 " 1 - SRTP_AES128_CM_HMAC_SHA1_80\n" \
316 " 2 - SRTP_AES128_CM_HMAC_SHA1_32\n" \
317 " 3 - SRTP_NULL_HMAC_SHA1_80\n" \
318 " 4 - SRTP_NULL_HMAC_SHA1_32\n" \
319 " support_mki=%%d default: 0 (not supported)\n"
320#else /* MBEDTLS_SSL_DTLS_SRTP */
321#define USAGE_SRTP ""
322#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300323
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200324#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100325#define USAGE_CACHE \
Pengyu Lvf30488f2023-03-15 09:53:45 +0800326 " cache_max=%%d default: cache default (50)\n" \
327 " cache_remove=%%d default: 0 (don't remove)\n"
Andrzej Kurek554b8202022-03-02 12:33:24 -0500328#if defined(MBEDTLS_HAVE_TIME)
329#define USAGE_CACHE_TIME \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100330 " cache_timeout=%%d default: cache default (1d)\n"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100331#else
Andrzej Kurek554b8202022-03-02 12:33:24 -0500332#define USAGE_CACHE_TIME ""
333#endif
334#else
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100335#define USAGE_CACHE ""
Andrzej Kurek554b8202022-03-02 12:33:24 -0500336#define USAGE_CACHE_TIME ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337#endif /* MBEDTLS_SSL_CACHE_C */
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100338
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200339#if defined(SNI_OPTION)
Ron Eldor80d04192019-04-04 15:02:01 +0300340#if defined(MBEDTLS_X509_CRL_PARSE_C)
341#define SNI_CRL ",crl"
342#else
343#define SNI_CRL ""
344#endif
345
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100346#define USAGE_SNI \
Gilles Peskine449bd832023-01-11 14:50:10 +0100347 " sni=%%s name1,cert1,key1,ca1"SNI_CRL ",auth1[,...]\n" \
348 " default: disabled\n"
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100349#else
350#define USAGE_SNI ""
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200351#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100352
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200353#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200354#define USAGE_MAX_FRAG_LEN \
355 " max_frag_len=%%d default: 16384 (tls default)\n" \
356 " options: 512, 1024, 2048, 4096\n"
357#else
358#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200359#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200360
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200361#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200362#define USAGE_ALPN \
363 " alpn=%%s default: \"\" (disabled)\n" \
364 " example: spdy/1,http/1.1\n"
365#else
366#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200367#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200368
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200369#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200370#define USAGE_COOKIES \
371 " cookies=0/1/-1 default: 1 (enabled)\n" \
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200372 " 0: disabled, -1: library default (broken)\n"
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200373#else
374#define USAGE_COOKIES ""
375#endif
376
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200377#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200378#define USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200379 " anti_replay=0/1 default: (library default: enabled)\n"
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200380#else
381#define USAGE_ANTI_REPLAY ""
382#endif
383
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200384#define USAGE_BADMAC_LIMIT \
385 " badmac_limit=%%d default: (library default: disabled)\n"
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200386
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200387#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200388#define USAGE_DTLS \
389 " dtls=%%d default: 0 (TLS)\n" \
390 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200391 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Beckere7675d02018-08-14 13:28:56 +0100392 " mtu=%%d default: (library default: unlimited)\n" \
393 " dgram_packing=%%d default: 1 (allowed)\n" \
394 " allow or forbid packing of multiple\n" \
395 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200396#else
397#define USAGE_DTLS ""
398#endif
399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200401#define USAGE_EMS \
402 " extended_ms=0/1 default: (library default: on)\n"
403#else
404#define USAGE_EMS ""
405#endif
406
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200407#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100408#define USAGE_ETM \
409 " etm=0/1 default: (library default: on)\n"
410#else
411#define USAGE_ETM ""
412#endif
413
Philippe Antoine738153a2019-06-18 20:16:43 +0200414#define USAGE_REPRODUCIBLE \
415 " reproducible=0/1 default: 0 (disabled)\n"
416
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200417#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100418#define USAGE_RENEGO \
419 " renegotiation=%%d default: 0 (disabled)\n" \
420 " renegotiate=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +0100421 " renego_delay=%%d default: -2 (library default)\n" \
Andres AG692ad842017-01-19 16:30:57 +0000422 " renego_period=%%d default: (2^64 - 1 for TLS, 2^48 - 1 for DTLS)\n"
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100423#else
424#define USAGE_RENEGO ""
425#endif
426
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200427#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
Valerio Settid6feb202022-12-02 14:28:49 +0100428#if defined(MBEDTLS_USE_PSA_CRYPTO)
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200429#define USAGE_ECJPAKE \
Valerio Settid572a822022-11-28 18:27:51 +0100430 " ecjpake_pw=%%s default: none (disabled)\n" \
431 " ecjpake_pw_opaque=%%d default: 0 (disabled)\n"
Valerio Settid6feb202022-12-02 14:28:49 +0100432#else /* MBEDTLS_USE_PSA_CRYPTO */
433#define USAGE_ECJPAKE \
434 " ecjpake_pw=%%s default: none (disabled)\n"
435#endif /* MBEDTLS_USE_PSA_CRYPTO */
436#else /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200437#define USAGE_ECJPAKE ""
Valerio Settid6feb202022-12-02 14:28:49 +0100438#endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200439
Jerry Yu7854a4e2022-11-05 23:14:47 +0800440#if defined(MBEDTLS_SSL_EARLY_DATA)
441#define USAGE_EARLY_DATA \
Jerry Yud146a372022-12-06 12:33:48 +0800442 " max_early_data_size=%%d default: -1 (disabled)\n" \
443 " options: -1 (disabled), " \
444 " >= 0 (enabled, max amount of early data )\n"
Jerry Yu7854a4e2022-11-05 23:14:47 +0800445#else
446#define USAGE_EARLY_DATA ""
447#endif /* MBEDTLS_SSL_EARLY_DATA */
448
Valerio Settid49cbc12023-04-05 18:21:48 +0200449#if defined(MBEDTLS_ECP_LIGHT)
Hanno Beckere6706e62017-05-15 16:05:15 +0100450#define USAGE_CURVES \
451 " curves=a,b,c,d default: \"default\" (library default)\n" \
452 " example: \"secp521r1,brainpoolP512r1\"\n" \
453 " - use \"none\" for empty list\n" \
454 " - see mbedtls_ecp_curve_list()\n" \
455 " for acceptable curve names\n"
456#else
457#define USAGE_CURVES ""
458#endif
459
Ronald Crone68ab4f2022-10-05 12:46:29 +0200460#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +0100461#define USAGE_SIG_ALGS \
462 " sig_algs=a,b,c,d default: \"default\" (library default)\n" \
463 " example: \"ecdsa_secp256r1_sha256,ecdsa_secp384r1_sha384\"\n"
464#else
465#define USAGE_SIG_ALGS ""
466#endif
467
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300468#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
469#define USAGE_SERIALIZATION \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200470 " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
471 " options: 1 (serialize)\n" \
472 " 2 (serialize with re-initialization)\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100473 " context_file=%%s The file path to write a serialized connection\n" \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200474 " in the form of base64 code (serialize option\n" \
475 " must be set)\n" \
476 " default: \"\" (do nothing)\n" \
477 " option: a file path\n"
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300478#else
479#define USAGE_SERIALIZATION ""
480#endif
481
Przemek Stekiel4ca0d722022-04-25 12:46:22 +0200482#define USAGE_KEY_OPAQUE_ALGS \
Ronald Cron50969e32022-09-16 15:54:33 +0200483 " key_opaque_algs=%%s Allowed opaque key 1 algorithms.\n" \
484 " comma-separated pair of values among the following:\n" \
485 " rsa-sign-pkcs1, rsa-sign-pss, rsa-sign-pss-sha256,\n" \
486 " rsa-sign-pss-sha384, rsa-sign-pss-sha512, rsa-decrypt,\n" \
487 " ecdsa-sign, ecdh, none (only acceptable for\n" \
488 " the second value).\n" \
489 " key_opaque_algs2=%%s Allowed opaque key 2 algorithms.\n" \
490 " comma-separated pair of values among the following:\n" \
491 " rsa-sign-pkcs1, rsa-sign-pss, rsa-sign-pss-sha256,\n" \
492 " rsa-sign-pss-sha384, rsa-sign-pss-sha512, rsa-decrypt,\n" \
493 " ecdsa-sign, ecdh, none (only acceptable for\n" \
Przemek Stekiel296bfba2022-05-05 11:08:34 +0200494 " the second value).\n"
Ronald Cron6f135e12021-12-08 16:57:54 +0100495#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +0000496#define USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100497 " tls13_kex_modes=%%s default: all\n" \
Jerry Yu2b7a51b2022-08-01 10:19:13 +0800498 " options: psk, psk_ephemeral, psk_all, ephemeral,\n" \
499 " ephemeral_all, all, psk_or_ephemeral\n"
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100500#else
Xiaofei Bai746f9482021-11-12 08:53:56 +0000501#define USAGE_TLS1_3_KEY_EXCHANGE_MODES ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100502#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100503
504
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200505/* USAGE is arbitrarily split to stay under the portable string literal
506 * length limit: 4095 bytes in C99. */
507#define USAGE1 \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000508 "\n usage: ssl_server2 param=<>...\n" \
509 "\n acceptable parameters:\n" \
Ron Eldor71f68c42017-09-26 11:29:11 +0300510 " server_addr=%%s default: (all interfaces)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000511 " server_port=%%d default: 4433\n" \
512 " debug_level=%%d default: 0 (disabled)\n" \
Yanray Wangeaf46d12022-10-28 10:38:37 +0800513 " build_version=%%d default: none (disabled)\n" \
514 " option: 1 (print build version only and stop)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200515 " buffer_size=%%d default: 200 \n" \
David Horstmannfba138a2021-05-11 15:23:56 +0100516 " (minimum: 1)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200517 " response_size=%%d default: about 152 (basic response)\n" \
518 " (minimum: 0, max: 16384)\n" \
Gilles Peskine449bd832023-01-11 14:50:10 +0100519 " increases buffer_size if bigger\n" \
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100520 " nbio=%%d default: 0 (blocking I/O)\n" \
521 " options: 1 (non-blocking), 2 (added delays)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100522 " event=%%d default: 0 (loop)\n" \
523 " options: 1 (level-triggered, implies nbio=1),\n" \
Manuel Pégourié-Gonnard22311ae2015-09-09 11:22:58 +0200524 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100525 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200526 USAGE_DTLS \
Ron Eldor6ea64512018-07-02 10:08:07 +0300527 USAGE_SRTP \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200528 USAGE_COOKIES \
529 USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200530 USAGE_BADMAC_LIMIT \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200531 "\n"
532#define USAGE2 \
Manuel Pégourié-Gonnardee6139c2015-05-07 10:18:26 +0100533 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100534 " options: none, optional, required\n" \
Janos Follath4817e272017-04-10 13:44:33 +0100535 " cert_req_ca_list=%%d default: 1 (send ca list)\n" \
536 " options: 1 (send ca list), 0 (don't send)\n" \
Glenn Straussbd10c4e2022-06-25 03:15:48 -0400537 " 2 (send conf dn hint), 3 (send hs dn hint)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000538 USAGE_IO \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200539 USAGE_KEY_OPAQUE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100540 "\n" \
541 USAGE_PSK \
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200542 USAGE_CA_CALLBACK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200543 USAGE_ECJPAKE \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200544 "\n"
545#define USAGE3 \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100546 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100547 USAGE_RENEGO \
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200548 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200549 "\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100550 USAGE_TICKETS \
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300551 USAGE_EAP_TLS \
Philippe Antoine738153a2019-06-18 20:16:43 +0200552 USAGE_REPRODUCIBLE \
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100553 USAGE_NSS_KEYLOG \
554 USAGE_NSS_KEYLOG_FILE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100555 USAGE_CACHE \
Andrzej Kurek554b8202022-03-02 12:33:24 -0500556 USAGE_CACHE_TIME \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100557 USAGE_MAX_FRAG_LEN \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200558 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200559 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100560 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100561 USAGE_CURVES \
Hanno Becker11ceadd2021-08-10 13:36:41 +0100562 USAGE_SIG_ALGS \
Przemek Stekiel4ca0d722022-04-25 12:46:22 +0200563 USAGE_KEY_OPAQUE_ALGS \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200564 "\n"
Jerry Yub1dc59a2021-08-05 15:58:09 +0800565
Ronald Cron6f135e12021-12-08 16:57:54 +0100566#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +0000567#define TLS1_3_VERSION_OPTIONS ", tls13"
Ronald Cron6f135e12021-12-08 16:57:54 +0100568#else /* MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800569#define TLS1_3_VERSION_OPTIONS ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100570#endif /* !MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800571
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200572#define USAGE4 \
Hanno Becker34ce81f2020-08-17 09:40:54 +0100573 USAGE_SSL_ASYNC \
574 USAGE_SNI \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100575 " allow_sha1=%%d default: 0\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000576 " min_version=%%s default: (library default: tls12)\n" \
577 " max_version=%%s default: (library default: tls12)\n" \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100578 " force_version=%%s default: \"\" (none)\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000579 " options: tls12, dtls12" TLS1_3_VERSION_OPTIONS \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100580 "\n\n" \
581 " force_ciphersuite=<name> default: all enabled\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000582 USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100583 " query_config=<name> return 0 if the specified\n" \
Andres Amaya Garciabc818842018-10-16 21:08:38 +0100584 " configuration macro is defined and 1\n" \
585 " otherwise. The expansion of the macro\n" \
Hanno Beckera9e4e6f2021-08-02 21:22:28 +0100586 " is printed if it is defined\n" \
587 USAGE_SERIALIZATION \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000588 " acceptable ciphersuite names:\n"
589
Hanno Becker11ceadd2021-08-10 13:36:41 +0100590#define ALPN_LIST_SIZE 10
Przemek Stekiel6d7da5e2023-05-18 16:02:43 +0200591#define CURVE_LIST_SIZE 25
Hanno Becker11ceadd2021-08-10 13:36:41 +0100592#define SIG_ALG_LIST_SIZE 5
Hanno Becker8651a432017-06-09 16:13:22 +0100593
Gilles Peskine449bd832023-01-11 14:50:10 +0100594#define PUT_UINT64_BE(out_be, in_le, i) \
595 { \
596 (out_be)[(i) + 0] = (unsigned char) (((in_le) >> 56) & 0xFF); \
597 (out_be)[(i) + 1] = (unsigned char) (((in_le) >> 48) & 0xFF); \
598 (out_be)[(i) + 2] = (unsigned char) (((in_le) >> 40) & 0xFF); \
599 (out_be)[(i) + 3] = (unsigned char) (((in_le) >> 32) & 0xFF); \
600 (out_be)[(i) + 4] = (unsigned char) (((in_le) >> 24) & 0xFF); \
601 (out_be)[(i) + 5] = (unsigned char) (((in_le) >> 16) & 0xFF); \
602 (out_be)[(i) + 6] = (unsigned char) (((in_le) >> 8) & 0xFF); \
603 (out_be)[(i) + 7] = (unsigned char) (((in_le) >> 0) & 0xFF); \
604 }
Andres AG692ad842017-01-19 16:30:57 +0000605
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +0200606/* This is global so it can be easily accessed by callback functions */
607rng_context_t rng;
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500608
Rich Evans85b05ec2015-02-12 11:37:29 +0000609/*
610 * global options
611 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100612struct options {
Rich Evans85b05ec2015-02-12 11:37:29 +0000613 const char *server_addr; /* address on which the ssl service runs */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200614 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000615 int debug_level; /* level of debugging */
616 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100617 int event; /* loop or event-driven IO? level or edge triggered? */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200618 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200619 int response_size; /* pad response with header to requested size */
620 uint16_t buffer_size; /* IO buffer size */
Rich Evans85b05ec2015-02-12 11:37:29 +0000621 const char *ca_file; /* the file with the CA certificate(s) */
622 const char *ca_path; /* the path with the CA certificate(s) reside */
623 const char *crt_file; /* the file with the server certificate */
624 const char *key_file; /* the file with the server key */
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +0200625 int key_opaque; /* handle private key as if it were opaque */
Hanno Beckere58a6302018-11-07 16:20:16 +0000626 const char *key_pwd; /* the password for the server key */
Rich Evans85b05ec2015-02-12 11:37:29 +0000627 const char *crt_file2; /* the file with the 2nd server certificate */
628 const char *key_file2; /* the file with the 2nd server key */
Hanno Beckere58a6302018-11-07 16:20:16 +0000629 const char *key_pwd2; /* the password for the 2nd server key */
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100630 const char *async_operations; /* supported SSL asynchronous operations */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100631 int async_private_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
632 int async_private_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
633 int async_private_error; /* inject error in async private callback */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100634#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000635 int psk_opaque;
636 int psk_list_opaque;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100637#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200638#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Beckercbb59032019-03-28 14:14:22 +0000639 int ca_callback; /* Use callback for trusted certificate list */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200640#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000641 const char *psk; /* the pre-shared key */
642 const char *psk_identity; /* the pre-shared key identity */
643 char *psk_list; /* list of PSK id/key pairs for callback */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200644 const char *ecjpake_pw; /* the EC J-PAKE password */
Valerio Settid6feb202022-12-02 14:28:49 +0100645#if defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settid572a822022-11-28 18:27:51 +0100646 int ecjpake_pw_opaque; /* set to 1 to use the opaque method for setting the password */
Valerio Settid6feb202022-12-02 14:28:49 +0100647#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000648 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
Ronald Cron6f135e12021-12-08 16:57:54 +0100649#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +0100650 int tls13_kex_modes; /* supported TLS 1.3 key exchange modes */
Ronald Cron6f135e12021-12-08 16:57:54 +0100651#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000652 int renegotiation; /* enable / disable renegotiation */
653 int allow_legacy; /* allow legacy renegotiation */
654 int renegotiate; /* attempt renegotiation? */
655 int renego_delay; /* delay before enforcing renegotiation */
Andres AG692ad842017-01-19 16:30:57 +0000656 uint64_t renego_period; /* period for automatic renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000657 int exchanges; /* number of data exchanges */
658 int min_version; /* minimum protocol version accepted */
659 int max_version; /* maximum protocol version accepted */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200660 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000661 int auth_mode; /* verify mode for connection */
Janos Follath4817e272017-04-10 13:44:33 +0100662 int cert_req_ca_list; /* should we send the CA list? */
Glenn Straussbd10c4e2022-06-25 03:15:48 -0400663 int cert_req_dn_hint; /* mode to set DN hints for CA list to send */
Rich Evans85b05ec2015-02-12 11:37:29 +0000664 unsigned char mfl_code; /* code for maximum fragment length */
665 int trunc_hmac; /* accept truncated hmac? */
666 int tickets; /* enable / disable session tickets */
Jerry Yu25ab6542022-09-15 18:32:34 +0800667 int dummy_ticket; /* enable / disable dummy ticket generator */
Glenn Strausse3282452022-02-03 17:23:24 -0500668 int ticket_rotate; /* session ticket rotate (code coverage) */
Rich Evans85b05ec2015-02-12 11:37:29 +0000669 int ticket_timeout; /* session ticket lifetime */
Gabor Mezeid4bea1e2022-01-12 16:21:15 +0100670 int ticket_aead; /* session ticket protection */
Rich Evans85b05ec2015-02-12 11:37:29 +0000671 int cache_max; /* max number of session cache entries */
Andrzej Kurek554b8202022-03-02 12:33:24 -0500672#if defined(MBEDTLS_HAVE_TIME)
673 int cache_timeout; /* expiration delay of session cache entries*/
674#endif
Pengyu Lvb1895892023-03-16 11:38:43 +0800675 int cache_remove; /* enable / disable cache entry removal */
Rich Evans85b05ec2015-02-12 11:37:29 +0000676 char *sni; /* string describing sni information */
Hanno Beckere6706e62017-05-15 16:05:15 +0100677 const char *curves; /* list of supported elliptic curves */
Hanno Becker11ceadd2021-08-10 13:36:41 +0100678 const char *sig_algs; /* supported TLS 1.3 signature algorithms */
Rich Evans85b05ec2015-02-12 11:37:29 +0000679 const char *alpn_string; /* ALPN supported protocols */
680 const char *dhm_file; /* the file with the DH parameters */
681 int extended_ms; /* allow negotiation of extended MS? */
682 int etm; /* allow negotiation of encrypt-then-MAC? */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000683 int transport; /* TLS or DTLS? */
684 int cookies; /* Use cookies for DTLS? -1 to break them */
685 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
686 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
687 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800688 int dtls_mtu; /* UDP Maximum transport unit for DTLS */
Hanno Beckere7675d02018-08-14 13:28:56 +0100689 int dgram_packing; /* allow/forbid datagram packing */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000690 int badmac_limit; /* Limit of records with bad MAC */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300691 int eap_tls; /* derive EAP-TLS keying material? */
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100692 int nss_keylog; /* export NSS key log material */
693 const char *nss_keylog_file; /* NSS key log file */
Hanno Beckera7d25422019-04-09 17:28:10 +0100694 int cid_enabled; /* whether to use the CID extension or not */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100695 int cid_enabled_renego; /* whether to use the CID extension or not
696 * during renegotiation */
Hanno Beckera7d25422019-04-09 17:28:10 +0100697 const char *cid_val; /* the CID to use for incoming messages */
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300698 int serialize; /* serialize/deserialize connection */
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200699 const char *context_file; /* the file to write a serialized connection
700 * in the form of base64 code (serialize
701 * option must be set) */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100702 const char *cid_val_renego; /* the CID to use for incoming messages
703 * after renegotiation */
Philippe Antoine154feb22019-06-11 17:50:23 +0200704 int reproducible; /* make communication reproducible */
Jerry Yu54dfcb72022-12-05 15:43:09 +0800705 uint32_t max_early_data_size; /* max amount of early data */
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200706 int query_config_mode; /* whether to read config */
Ron Eldor6ea64512018-07-02 10:08:07 +0300707 int use_srtp; /* Support SRTP */
708 int force_srtp_profile; /* SRTP protection profile to use or all */
Ron Eldor12c6ead2018-07-03 15:08:32 +0300709 int support_mki; /* The dtls mki mki support */
Przemek Stekiel344c5612022-05-02 14:17:35 +0200710 const char *key1_opaque_alg1; /* Allowed opaque key 1 alg 1 */
Jan Bruckner25fdc2a2022-07-26 10:45:07 +0200711 const char *key1_opaque_alg2; /* Allowed opaque key 1 alg 2 */
Przemek Stekiel344c5612022-05-02 14:17:35 +0200712 const char *key2_opaque_alg1; /* Allowed opaque key 2 alg 1 */
Jan Bruckner25fdc2a2022-07-26 10:45:07 +0200713 const char *key2_opaque_alg2; /* Allowed opaque key 2 alg 2 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000714} opt;
715
Gilles Peskine0d980b82021-01-05 23:34:27 +0100716#include "ssl_test_common_source.c"
Hanno Beckerdcc94e62019-07-03 17:05:43 +0100717
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200718/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200719 * Return authmode from string, or -1 on error
720 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100721static int get_auth_mode(const char *s)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200722{
Gilles Peskine449bd832023-01-11 14:50:10 +0100723 if (strcmp(s, "none") == 0) {
724 return MBEDTLS_SSL_VERIFY_NONE;
725 }
726 if (strcmp(s, "optional") == 0) {
727 return MBEDTLS_SSL_VERIFY_OPTIONAL;
728 }
729 if (strcmp(s, "required") == 0) {
730 return MBEDTLS_SSL_VERIFY_REQUIRED;
731 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200732
Gilles Peskine449bd832023-01-11 14:50:10 +0100733 return -1;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200734}
735
736/*
Przemek Stekiel77fc9ab2022-04-29 09:51:54 +0200737 * Used by sni_parse and psk_parse to handle comma-separated lists
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200738 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100739#define GET_ITEM(dst) \
Hanno Becker1eeca412018-10-15 12:01:35 +0100740 do \
741 { \
742 (dst) = p; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100743 while (*p != ',') \
744 if (++p > end) \
745 goto error; \
Hanno Becker1eeca412018-10-15 12:01:35 +0100746 *p++ = '\0'; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100747 } while (0)
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200748
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200749#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100750typedef struct _sni_entry sni_entry;
751
752struct _sni_entry {
753 const char *name;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200754 mbedtls_x509_crt *cert;
755 mbedtls_pk_context *key;
Gilles Peskine449bd832023-01-11 14:50:10 +0100756 mbedtls_x509_crt *ca;
757 mbedtls_x509_crl *crl;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200758 int authmode;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100759 sni_entry *next;
760};
761
Gilles Peskine449bd832023-01-11 14:50:10 +0100762void sni_free(sni_entry *head)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100763{
764 sni_entry *cur = head, *next;
765
Gilles Peskine449bd832023-01-11 14:50:10 +0100766 while (cur != NULL) {
767 mbedtls_x509_crt_free(cur->cert);
768 mbedtls_free(cur->cert);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100769
Gilles Peskine449bd832023-01-11 14:50:10 +0100770 mbedtls_pk_free(cur->key);
771 mbedtls_free(cur->key);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100772
Gilles Peskine449bd832023-01-11 14:50:10 +0100773 mbedtls_x509_crt_free(cur->ca);
774 mbedtls_free(cur->ca);
Ron Eldor80d04192019-04-04 15:02:01 +0300775#if defined(MBEDTLS_X509_CRL_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100776 mbedtls_x509_crl_free(cur->crl);
777 mbedtls_free(cur->crl);
Ron Eldor80d04192019-04-04 15:02:01 +0300778#endif
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100779 next = cur->next;
Gilles Peskine449bd832023-01-11 14:50:10 +0100780 mbedtls_free(cur);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100781 cur = next;
782 }
783}
784
785/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200786 * Parse a string of sextuples name1,crt1,key1,ca1,crl1,auth1[,...]
787 * into a usable sni_entry list. For ca1, crl1, auth1, the special value
788 * '-' means unset. If ca1 is unset, then crl1 is ignored too.
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000789 *
790 * Modifies the input string! This is not production quality!
791 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100792sni_entry *sni_parse(char *sni_string)
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000793{
794 sni_entry *cur = NULL, *new = NULL;
795 char *p = sni_string;
796 char *end = p;
Ron Eldor80d04192019-04-04 15:02:01 +0300797 char *crt_file, *key_file, *ca_file, *auth_str;
798#if defined(MBEDTLS_X509_CRL_PARSE_C)
799 char *crl_file;
800#endif
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000801
Gilles Peskine449bd832023-01-11 14:50:10 +0100802 while (*end != '\0') {
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000803 ++end;
Gilles Peskine449bd832023-01-11 14:50:10 +0100804 }
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000805 *end = ',';
806
Gilles Peskine449bd832023-01-11 14:50:10 +0100807 while (p <= end) {
808 if ((new = mbedtls_calloc(1, sizeof(sni_entry))) == NULL) {
809 sni_free(cur);
810 return NULL;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000811 }
812
Gilles Peskine449bd832023-01-11 14:50:10 +0100813 GET_ITEM(new->name);
814 GET_ITEM(crt_file);
815 GET_ITEM(key_file);
816 GET_ITEM(ca_file);
Ron Eldor80d04192019-04-04 15:02:01 +0300817#if defined(MBEDTLS_X509_CRL_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100818 GET_ITEM(crl_file);
Ron Eldor80d04192019-04-04 15:02:01 +0300819#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100820 GET_ITEM(auth_str);
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000821
Gilles Peskine449bd832023-01-11 14:50:10 +0100822 if ((new->cert = mbedtls_calloc(1, sizeof(mbedtls_x509_crt))) == NULL ||
823 (new->key = mbedtls_calloc(1, sizeof(mbedtls_pk_context))) == NULL) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200824 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100825 }
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000826
Gilles Peskine449bd832023-01-11 14:50:10 +0100827 mbedtls_x509_crt_init(new->cert);
828 mbedtls_pk_init(new->key);
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000829
Gilles Peskine449bd832023-01-11 14:50:10 +0100830 if (mbedtls_x509_crt_parse_file(new->cert, crt_file) != 0 ||
831 mbedtls_pk_parse_keyfile(new->key, key_file, "", rng_get, &rng) != 0) {
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000832 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100833 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200834
Gilles Peskine449bd832023-01-11 14:50:10 +0100835 if (strcmp(ca_file, "-") != 0) {
836 if ((new->ca = mbedtls_calloc(1, sizeof(mbedtls_x509_crt))) == NULL) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200837 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100838 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200839
Gilles Peskine449bd832023-01-11 14:50:10 +0100840 mbedtls_x509_crt_init(new->ca);
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200841
Gilles Peskine449bd832023-01-11 14:50:10 +0100842 if (mbedtls_x509_crt_parse_file(new->ca, ca_file) != 0) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200843 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100844 }
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000845 }
846
Ron Eldor80d04192019-04-04 15:02:01 +0300847#if defined(MBEDTLS_X509_CRL_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100848 if (strcmp(crl_file, "-") != 0) {
849 if ((new->crl = mbedtls_calloc(1, sizeof(mbedtls_x509_crl))) == NULL) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200850 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100851 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200852
Gilles Peskine449bd832023-01-11 14:50:10 +0100853 mbedtls_x509_crl_init(new->crl);
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200854
Gilles Peskine449bd832023-01-11 14:50:10 +0100855 if (mbedtls_x509_crl_parse_file(new->crl, crl_file) != 0) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200856 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100857 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200858 }
Ron Eldor80d04192019-04-04 15:02:01 +0300859#endif
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200860
Gilles Peskine449bd832023-01-11 14:50:10 +0100861 if (strcmp(auth_str, "-") != 0) {
862 if ((new->authmode = get_auth_mode(auth_str)) < 0) {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200863 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +0100864 }
865 } else {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200866 new->authmode = DFL_AUTH_MODE;
Gilles Peskine449bd832023-01-11 14:50:10 +0100867 }
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200868
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000869 new->next = cur;
870 cur = new;
871 }
872
Gilles Peskine449bd832023-01-11 14:50:10 +0100873 return cur;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000874
875error:
Gilles Peskine449bd832023-01-11 14:50:10 +0100876 sni_free(new);
877 sni_free(cur);
878 return NULL;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000879}
880
881/*
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100882 * SNI callback.
883 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100884int sni_callback(void *p_info, mbedtls_ssl_context *ssl,
885 const unsigned char *name, size_t name_len)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100886{
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200887 const sni_entry *cur = (const sni_entry *) p_info;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100888
Glenn Strauss48a37f02022-01-24 16:40:20 -0500889 /* preserve behavior which checks for SNI match in sni_callback() for
890 * the benefits of tests using sni_callback(), even though the actual
891 * certificate assignment has moved to certificate selection callback
892 * in this application. This exercises sni_callback and cert_callback
893 * even though real applications might choose to do this differently.
894 * Application might choose to save name and name_len in user_data for
895 * later use in certificate selection callback.
896 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100897 while (cur != NULL) {
898 if (name_len == strlen(cur->name) &&
899 memcmp(name, cur->name, name_len) == 0) {
Glenn Strauss48a37f02022-01-24 16:40:20 -0500900 void *p;
901 *(const void **)&p = cur;
Gilles Peskine449bd832023-01-11 14:50:10 +0100902 mbedtls_ssl_set_user_data_p(ssl, p);
903 return 0;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100904 }
905
Mateusz Starzyk55768f22021-05-27 14:57:03 +0200906 cur = cur->next;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100907 }
908
Gilles Peskine449bd832023-01-11 14:50:10 +0100909 return -1;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100910}
911
Glenn Strauss48a37f02022-01-24 16:40:20 -0500912/*
913 * server certificate selection callback.
914 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100915int cert_callback(mbedtls_ssl_context *ssl)
Glenn Strauss48a37f02022-01-24 16:40:20 -0500916{
Gilles Peskine449bd832023-01-11 14:50:10 +0100917 const sni_entry *cur = (sni_entry *) mbedtls_ssl_get_user_data_p(ssl);
918 if (cur != NULL) {
Glenn Strauss48a37f02022-01-24 16:40:20 -0500919 /*(exercise mbedtls_ssl_get_hs_sni(); not otherwise used here)*/
920 size_t name_len;
Gilles Peskine449bd832023-01-11 14:50:10 +0100921 const unsigned char *name = mbedtls_ssl_get_hs_sni(ssl, &name_len);
922 if (strlen(cur->name) != name_len ||
923 memcmp(cur->name, name, name_len) != 0) {
924 return MBEDTLS_ERR_SSL_DECODE_ERROR;
925 }
Glenn Strauss48a37f02022-01-24 16:40:20 -0500926
Gilles Peskine449bd832023-01-11 14:50:10 +0100927 if (cur->ca != NULL) {
928 mbedtls_ssl_set_hs_ca_chain(ssl, cur->ca, cur->crl);
929 }
Glenn Strauss48a37f02022-01-24 16:40:20 -0500930
Gilles Peskine449bd832023-01-11 14:50:10 +0100931 if (cur->authmode != DFL_AUTH_MODE) {
932 mbedtls_ssl_set_hs_authmode(ssl, cur->authmode);
933 }
Glenn Strauss48a37f02022-01-24 16:40:20 -0500934
Gilles Peskine449bd832023-01-11 14:50:10 +0100935 return mbedtls_ssl_set_hs_own_cert(ssl, cur->cert, cur->key);
Glenn Strauss48a37f02022-01-24 16:40:20 -0500936 }
937
Gilles Peskine449bd832023-01-11 14:50:10 +0100938 return 0;
Glenn Strauss48a37f02022-01-24 16:40:20 -0500939}
940
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200941#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100942
Ronald Cron73fe8df2022-10-05 14:31:43 +0200943#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Becker554b6ea2019-04-30 14:18:06 +0100944
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200945typedef struct _psk_entry psk_entry;
946
Gilles Peskine449bd832023-01-11 14:50:10 +0100947struct _psk_entry {
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200948 const char *name;
949 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200950 unsigned char key[MBEDTLS_PSK_MAX_LEN];
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100951#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek03e01462022-01-03 12:53:24 +0100952 mbedtls_svc_key_id_t slot;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100953#endif /* MBEDTLS_USE_PSA_CRYPTO */
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200954 psk_entry *next;
955};
956
957/*
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000958 * Free a list of psk_entry's
959 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100960int psk_free(psk_entry *head)
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000961{
962 psk_entry *next;
963
Gilles Peskine449bd832023-01-11 14:50:10 +0100964 while (head != NULL) {
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000965#if defined(MBEDTLS_USE_PSA_CRYPTO)
966 psa_status_t status;
Andrzej Kurek03e01462022-01-03 12:53:24 +0100967 mbedtls_svc_key_id_t const slot = head->slot;
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000968
Gilles Peskine449bd832023-01-11 14:50:10 +0100969 if (MBEDTLS_SVC_KEY_ID_GET_KEY_ID(slot) != 0) {
970 status = psa_destroy_key(slot);
971 if (status != PSA_SUCCESS) {
972 return status;
973 }
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000974 }
975#endif /* MBEDTLS_USE_PSA_CRYPTO */
976
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000977 next = head->next;
Gilles Peskine449bd832023-01-11 14:50:10 +0100978 mbedtls_free(head);
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000979 head = next;
980 }
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000981
Gilles Peskine449bd832023-01-11 14:50:10 +0100982 return 0;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000983}
984
985/*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200986 * Parse a string of pairs name1,key1[,name2,key2[,...]]
987 * into a usable psk_entry list.
988 *
989 * Modifies the input string! This is not production quality!
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200990 */
Gilles Peskine449bd832023-01-11 14:50:10 +0100991psk_entry *psk_parse(char *psk_string)
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200992{
993 psk_entry *cur = NULL, *new = NULL;
994 char *p = psk_string;
995 char *end = p;
996 char *key_hex;
997
Gilles Peskine449bd832023-01-11 14:50:10 +0100998 while (*end != '\0') {
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200999 ++end;
Gilles Peskine449bd832023-01-11 14:50:10 +01001000 }
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001001 *end = ',';
1002
Gilles Peskine449bd832023-01-11 14:50:10 +01001003 while (p <= end) {
1004 if ((new = mbedtls_calloc(1, sizeof(psk_entry))) == NULL) {
Manuel Pégourié-Gonnardb1990952015-02-18 09:32:06 +00001005 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +01001006 }
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001007
Gilles Peskine449bd832023-01-11 14:50:10 +01001008 memset(new, 0, sizeof(psk_entry));
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001009
Gilles Peskine449bd832023-01-11 14:50:10 +01001010 GET_ITEM(new->name);
1011 GET_ITEM(key_hex);
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001012
Gilles Peskine449bd832023-01-11 14:50:10 +01001013 if (mbedtls_test_unhexify(new->key, MBEDTLS_PSK_MAX_LEN,
1014 key_hex, &new->key_len) != 0) {
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +00001015 goto error;
Gilles Peskine449bd832023-01-11 14:50:10 +01001016 }
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001017
1018 new->next = cur;
1019 cur = new;
1020 }
1021
Gilles Peskine449bd832023-01-11 14:50:10 +01001022 return cur;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001023
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +00001024error:
Gilles Peskine449bd832023-01-11 14:50:10 +01001025 psk_free(new);
1026 psk_free(cur);
1027 return 0;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001028}
1029
1030/*
1031 * PSK callback
1032 */
Gilles Peskine449bd832023-01-11 14:50:10 +01001033int psk_callback(void *p_info, mbedtls_ssl_context *ssl,
1034 const unsigned char *name, size_t name_len)
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001035{
1036 psk_entry *cur = (psk_entry *) p_info;
1037
Gilles Peskine449bd832023-01-11 14:50:10 +01001038 while (cur != NULL) {
1039 if (name_len == strlen(cur->name) &&
1040 memcmp(name, cur->name, name_len) == 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001041#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001042 if (MBEDTLS_SVC_KEY_ID_GET_KEY_ID(cur->slot) != 0) {
1043 return mbedtls_ssl_set_hs_psk_opaque(ssl, cur->slot);
1044 } else
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001045#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001046 return mbedtls_ssl_set_hs_psk(ssl, cur->key, cur->key_len);
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001047 }
1048
Mateusz Starzyk55768f22021-05-27 14:57:03 +02001049 cur = cur->next;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001050 }
1051
Gilles Peskine449bd832023-01-11 14:50:10 +01001052 return -1;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001053}
Ronald Cron73fe8df2022-10-05 14:31:43 +02001054#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +02001055
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001056static mbedtls_net_context listen_fd, client_fd;
Paul Bakkerbc3e54c2014-08-18 14:36:17 +02001057
1058/* Interruption handler to ensure clean exit (for valgrind testing) */
1059#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001060static int received_sigterm = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01001061void term_handler(int sig)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001062{
1063 ((void) sig);
1064 received_sigterm = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01001065 mbedtls_net_free(&listen_fd); /* causes mbedtls_net_accept() to abort */
1066 mbedtls_net_free(&client_fd); /* causes net_read() to abort */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001067}
Paul Bakkerc1283d32014-08-18 11:05:51 +02001068#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001069
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02001070/** Return true if \p ret is a status code indicating that there is an
1071 * operation in progress on an SSL connection, and false if it indicates
1072 * success or a fatal error.
1073 *
1074 * The possible operations in progress are:
1075 *
1076 * - A read, when the SSL input buffer does not contain a full message.
1077 * - A write, when the SSL output buffer contains some data that has not
1078 * been sent over the network yet.
1079 * - An asynchronous callback that has not completed yet. */
Gilles Peskine449bd832023-01-11 14:50:10 +01001080static int mbedtls_status_is_ssl_in_progress(int ret)
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02001081{
Gilles Peskine449bd832023-01-11 14:50:10 +01001082 return ret == MBEDTLS_ERR_SSL_WANT_READ ||
1083 ret == MBEDTLS_ERR_SSL_WANT_WRITE ||
1084 ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS;
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02001085}
1086
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001087#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01001088typedef struct {
Gilles Peskine44817442018-06-13 18:09:28 +02001089 mbedtls_x509_crt *cert; /*!< Certificate corresponding to the key */
1090 mbedtls_pk_context *pk; /*!< Private key */
1091 unsigned delay; /*!< Number of resume steps to go through */
1092 unsigned pk_owned : 1; /*!< Whether to free the pk object on exit */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001093} ssl_async_key_slot_t;
1094
1095typedef enum {
Gilles Peskinead28bf02018-04-26 00:19:16 +02001096 SSL_ASYNC_INJECT_ERROR_NONE = 0, /*!< Let the callbacks succeed */
1097 SSL_ASYNC_INJECT_ERROR_START, /*!< Inject error during start */
1098 SSL_ASYNC_INJECT_ERROR_CANCEL, /*!< Close the connection after async start */
1099 SSL_ASYNC_INJECT_ERROR_RESUME, /*!< Inject error during resume */
Gilles Peskinec9125722018-04-26 07:15:40 +02001100#define SSL_ASYNC_INJECT_ERROR_MAX SSL_ASYNC_INJECT_ERROR_RESUME
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001101} ssl_async_inject_error_t;
1102
Gilles Peskine449bd832023-01-11 14:50:10 +01001103typedef struct {
Gilles Peskinee2479892018-06-13 18:06:51 +02001104 ssl_async_key_slot_t slots[4]; /* key, key2, sni1, sni2 */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001105 size_t slots_used;
1106 ssl_async_inject_error_t inject_error;
1107 int (*f_rng)(void *, unsigned char *, size_t);
1108 void *p_rng;
1109} ssl_async_key_context_t;
1110
Gilles Peskine449bd832023-01-11 14:50:10 +01001111int ssl_async_set_key(ssl_async_key_context_t *ctx,
1112 mbedtls_x509_crt *cert,
1113 mbedtls_pk_context *pk,
1114 int pk_take_ownership,
1115 unsigned delay)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001116{
Gilles Peskine449bd832023-01-11 14:50:10 +01001117 if (ctx->slots_used >= sizeof(ctx->slots) / sizeof(*ctx->slots)) {
1118 return -1;
1119 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001120 ctx->slots[ctx->slots_used].cert = cert;
1121 ctx->slots[ctx->slots_used].pk = pk;
1122 ctx->slots[ctx->slots_used].delay = delay;
Gilles Peskine44817442018-06-13 18:09:28 +02001123 ctx->slots[ctx->slots_used].pk_owned = pk_take_ownership;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001124 ++ctx->slots_used;
Gilles Peskine449bd832023-01-11 14:50:10 +01001125 return 0;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001126}
1127
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001128#define SSL_ASYNC_INPUT_MAX_SIZE 512
Gilles Peskined3268832018-04-26 06:23:59 +02001129
Gilles Peskine449bd832023-01-11 14:50:10 +01001130typedef enum {
Gilles Peskined3268832018-04-26 06:23:59 +02001131 ASYNC_OP_SIGN,
1132 ASYNC_OP_DECRYPT,
1133} ssl_async_operation_type_t;
Gilles Peskined3268832018-04-26 06:23:59 +02001134
Gilles Peskine449bd832023-01-11 14:50:10 +01001135typedef struct {
Gilles Peskine6331d782018-04-26 13:27:43 +02001136 unsigned slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001137 ssl_async_operation_type_t operation_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001138 mbedtls_md_type_t md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001139 unsigned char input[SSL_ASYNC_INPUT_MAX_SIZE];
1140 size_t input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001141 unsigned remaining_delay;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001142} ssl_async_operation_context_t;
1143
Ronald Crone68ab4f2022-10-05 12:46:29 +02001144#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Andrzej Kurekb50754a2022-10-13 14:19:01 -04001145
1146/* Note that ssl_async_operation_type_t and the array below need to be kept in sync!
1147 * `ssl_async_operation_names[op]` is the name of op for each value `op`
1148 * of type `ssl_async_operation_type_t`. */
1149static const char *const ssl_async_operation_names[] =
1150{
1151 "sign",
1152 "decrypt",
1153};
1154
Gilles Peskine449bd832023-01-11 14:50:10 +01001155static int ssl_async_start(mbedtls_ssl_context *ssl,
1156 mbedtls_x509_crt *cert,
1157 ssl_async_operation_type_t op_type,
1158 mbedtls_md_type_t md_alg,
1159 const unsigned char *input,
1160 size_t input_len)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001161{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001162 ssl_async_key_context_t *config_data =
Gilles Peskine449bd832023-01-11 14:50:10 +01001163 mbedtls_ssl_conf_get_async_config_data(ssl->conf);
Gilles Peskine6331d782018-04-26 13:27:43 +02001164 unsigned slot;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001165 ssl_async_operation_context_t *ctx = NULL;
Gilles Peskined3268832018-04-26 06:23:59 +02001166 const char *op_name = ssl_async_operation_names[op_type];
Gilles Peskinef1127252018-04-24 13:05:39 +02001167
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001168 {
1169 char dn[100];
Gilles Peskine449bd832023-01-11 14:50:10 +01001170 if (mbedtls_x509_dn_gets(dn, sizeof(dn), &cert->subject) > 0) {
1171 mbedtls_printf("Async %s callback: looking for DN=%s\n",
1172 op_name, dn);
1173 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001174 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001175
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001176 /* Look for a private key that matches the public key in cert.
1177 * Since this test code has the private key inside Mbed TLS,
1178 * we call mbedtls_pk_check_pair to match a private key with the
1179 * public key. */
Gilles Peskine449bd832023-01-11 14:50:10 +01001180 for (slot = 0; slot < config_data->slots_used; slot++) {
1181 if (mbedtls_pk_check_pair(&cert->pk,
1182 config_data->slots[slot].pk,
1183 rng_get, &rng) == 0) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001184 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01001185 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001186 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001187 if (slot == config_data->slots_used) {
1188 mbedtls_printf("Async %s callback: no key matches this certificate.\n",
1189 op_name);
1190 return MBEDTLS_ERR_SSL_HW_ACCEL_FALLTHROUGH;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001191 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001192 mbedtls_printf("Async %s callback: using key slot %u, delay=%u.\n",
1193 op_name, slot, config_data->slots[slot].delay);
Gilles Peskinef1127252018-04-24 13:05:39 +02001194
Gilles Peskine449bd832023-01-11 14:50:10 +01001195 if (config_data->inject_error == SSL_ASYNC_INJECT_ERROR_START) {
1196 mbedtls_printf("Async %s callback: injected error\n", op_name);
1197 return MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001198 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001199
Gilles Peskine449bd832023-01-11 14:50:10 +01001200 if (input_len > SSL_ASYNC_INPUT_MAX_SIZE) {
1201 return MBEDTLS_ERR_SSL_BAD_INPUT_DATA;
1202 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001203
Gilles Peskine449bd832023-01-11 14:50:10 +01001204 ctx = mbedtls_calloc(1, sizeof(*ctx));
1205 if (ctx == NULL) {
1206 return MBEDTLS_ERR_SSL_ALLOC_FAILED;
1207 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001208 ctx->slot = slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001209 ctx->operation_type = op_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001210 ctx->md_alg = md_alg;
Gilles Peskine449bd832023-01-11 14:50:10 +01001211 memcpy(ctx->input, input, input_len);
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001212 ctx->input_len = input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001213 ctx->remaining_delay = config_data->slots[slot].delay;
Gilles Peskine449bd832023-01-11 14:50:10 +01001214 mbedtls_ssl_set_async_operation_data(ssl, ctx);
Gilles Peskinef1127252018-04-24 13:05:39 +02001215
Gilles Peskine449bd832023-01-11 14:50:10 +01001216 if (ctx->remaining_delay == 0) {
1217 return 0;
1218 } else {
1219 return MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS;
1220 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001221}
1222
Gilles Peskine449bd832023-01-11 14:50:10 +01001223static int ssl_async_sign(mbedtls_ssl_context *ssl,
1224 mbedtls_x509_crt *cert,
1225 mbedtls_md_type_t md_alg,
1226 const unsigned char *hash,
1227 size_t hash_len)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001228{
Gilles Peskine449bd832023-01-11 14:50:10 +01001229 return ssl_async_start(ssl, cert,
1230 ASYNC_OP_SIGN, md_alg,
1231 hash, hash_len);
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001232}
1233
Gilles Peskine449bd832023-01-11 14:50:10 +01001234static int ssl_async_decrypt(mbedtls_ssl_context *ssl,
1235 mbedtls_x509_crt *cert,
1236 const unsigned char *input,
1237 size_t input_len)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001238{
Gilles Peskine449bd832023-01-11 14:50:10 +01001239 return ssl_async_start(ssl, cert,
1240 ASYNC_OP_DECRYPT, MBEDTLS_MD_NONE,
1241 input, input_len);
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001242}
1243
Gilles Peskine449bd832023-01-11 14:50:10 +01001244static int ssl_async_resume(mbedtls_ssl_context *ssl,
1245 unsigned char *output,
1246 size_t *output_len,
1247 size_t output_size)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001248{
Gilles Peskine449bd832023-01-11 14:50:10 +01001249 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data(ssl);
Gilles Peskine8f97af72018-04-26 11:46:10 +02001250 ssl_async_key_context_t *config_data =
Gilles Peskine449bd832023-01-11 14:50:10 +01001251 mbedtls_ssl_conf_get_async_config_data(ssl->conf);
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001252 ssl_async_key_slot_t *key_slot = &config_data->slots[ctx->slot];
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001253 int ret;
Gilles Peskinef5a99962018-04-30 16:37:23 +02001254 const char *op_name;
Gilles Peskinef1127252018-04-24 13:05:39 +02001255
Gilles Peskine449bd832023-01-11 14:50:10 +01001256 if (ctx->remaining_delay > 0) {
Gilles Peskineceb541b2018-04-26 06:30:45 +02001257 --ctx->remaining_delay;
Gilles Peskine449bd832023-01-11 14:50:10 +01001258 mbedtls_printf("Async resume (slot %u): call %u more times.\n",
1259 ctx->slot, ctx->remaining_delay);
1260 return MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001261 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001262
Gilles Peskine449bd832023-01-11 14:50:10 +01001263 switch (ctx->operation_type) {
Gilles Peskined3268832018-04-26 06:23:59 +02001264 case ASYNC_OP_DECRYPT:
Gilles Peskine449bd832023-01-11 14:50:10 +01001265 ret = mbedtls_pk_decrypt(key_slot->pk,
1266 ctx->input, ctx->input_len,
1267 output, output_len, output_size,
1268 config_data->f_rng, config_data->p_rng);
Gilles Peskined3268832018-04-26 06:23:59 +02001269 break;
1270 case ASYNC_OP_SIGN:
Gilles Peskine449bd832023-01-11 14:50:10 +01001271 ret = mbedtls_pk_sign(key_slot->pk,
1272 ctx->md_alg,
1273 ctx->input, ctx->input_len,
1274 output, output_size, output_len,
1275 config_data->f_rng, config_data->p_rng);
Gilles Peskined3268832018-04-26 06:23:59 +02001276 break;
1277 default:
Gilles Peskine449bd832023-01-11 14:50:10 +01001278 mbedtls_printf(
1279 "Async resume (slot %u): unknown operation type %ld. This shouldn't happen.\n",
1280 ctx->slot,
1281 (long) ctx->operation_type);
1282 mbedtls_free(ctx);
1283 return MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE;
Gilles Peskined3268832018-04-26 06:23:59 +02001284 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001285 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001286
Gilles Peskinef5a99962018-04-30 16:37:23 +02001287 op_name = ssl_async_operation_names[ctx->operation_type];
1288
Gilles Peskine449bd832023-01-11 14:50:10 +01001289 if (config_data->inject_error == SSL_ASYNC_INJECT_ERROR_RESUME) {
1290 mbedtls_printf("Async resume callback: %s done but injected error\n",
1291 op_name);
1292 mbedtls_free(ctx);
1293 return MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001294 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001295
Gilles Peskine449bd832023-01-11 14:50:10 +01001296 mbedtls_printf("Async resume (slot %u): %s done, status=%d.\n",
1297 ctx->slot, op_name, ret);
1298 mbedtls_free(ctx);
1299 return ret;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001300}
1301
Gilles Peskine449bd832023-01-11 14:50:10 +01001302static void ssl_async_cancel(mbedtls_ssl_context *ssl)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001303{
Gilles Peskine449bd832023-01-11 14:50:10 +01001304 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data(ssl);
1305 mbedtls_printf("Async cancel callback.\n");
1306 mbedtls_free(ctx);
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001307}
Ronald Crone68ab4f2022-10-05 12:46:29 +02001308#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001309#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001310
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001311#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cron73fe8df2022-10-05 14:31:43 +02001312#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001313static psa_status_t psa_setup_psk_key_slot(mbedtls_svc_key_id_t *slot,
1314 psa_algorithm_t alg,
1315 unsigned char *psk,
1316 size_t psk_len)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001317{
1318 psa_status_t status;
Janos Follathbe4efc22019-08-08 11:38:18 +01001319 psa_key_attributes_t key_attributes;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001320
Janos Follathbe4efc22019-08-08 11:38:18 +01001321 key_attributes = psa_key_attributes_init();
Gilles Peskine449bd832023-01-11 14:50:10 +01001322 psa_set_key_usage_flags(&key_attributes, PSA_KEY_USAGE_DERIVE);
1323 psa_set_key_algorithm(&key_attributes, alg);
1324 psa_set_key_type(&key_attributes, PSA_KEY_TYPE_DERIVE);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001325
Gilles Peskine449bd832023-01-11 14:50:10 +01001326 status = psa_import_key(&key_attributes, psk, psk_len, slot);
1327 if (status != PSA_SUCCESS) {
1328 fprintf(stderr, "IMPORT\n");
1329 return status;
Hanno Becker1d911cd2018-11-15 13:06:09 +00001330 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001331
Gilles Peskine449bd832023-01-11 14:50:10 +01001332 return PSA_SUCCESS;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001333}
Ronald Cron73fe8df2022-10-05 14:31:43 +02001334#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001335#endif /* MBEDTLS_USE_PSA_CRYPTO */
1336
Hanno Beckera0e20d02019-05-15 14:03:01 +01001337#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01001338int report_cid_usage(mbedtls_ssl_context *ssl,
1339 const char *additional_description)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001340{
1341 int ret;
Gilles Peskine449bd832023-01-11 14:50:10 +01001342 unsigned char peer_cid[MBEDTLS_SSL_CID_OUT_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001343 size_t peer_cid_len;
1344 int cid_negotiated;
1345
Gilles Peskine449bd832023-01-11 14:50:10 +01001346 if (opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
1347 return 0;
1348 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001349
1350 /* Check if the use of a CID has been negotiated */
Gilles Peskine449bd832023-01-11 14:50:10 +01001351 ret = mbedtls_ssl_get_peer_cid(ssl, &cid_negotiated,
1352 peer_cid, &peer_cid_len);
1353 if (ret != 0) {
1354 mbedtls_printf(" failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
1355 (unsigned int) -ret);
1356 return ret;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001357 }
1358
Gilles Peskine449bd832023-01-11 14:50:10 +01001359 if (cid_negotiated == MBEDTLS_SSL_CID_DISABLED) {
1360 if (opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED) {
1361 mbedtls_printf("(%s) Use of Connection ID was not offered by client.\n",
1362 additional_description);
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001363 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001364 } else {
1365 size_t idx = 0;
1366 mbedtls_printf("(%s) Use of Connection ID has been negotiated.\n",
1367 additional_description);
1368 mbedtls_printf("(%s) Peer CID (length %u Bytes): ",
1369 additional_description,
1370 (unsigned) peer_cid_len);
1371 while (idx < peer_cid_len) {
1372 mbedtls_printf("%02x ", peer_cid[idx]);
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001373 idx++;
1374 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001375 mbedtls_printf("\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001376 }
1377
Gilles Peskine449bd832023-01-11 14:50:10 +01001378 return 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001379}
Hanno Beckera0e20d02019-05-15 14:03:01 +01001380#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001381
Jerry Yu6916e702022-10-10 21:33:51 +08001382#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_HAVE_TIME)
Tom Cosgrovede857252023-02-02 06:41:21 +00001383static inline void put_unaligned_uint32(void *p, uint32_t x)
1384{
1385 memcpy(p, &x, sizeof(x));
1386}
1387
Jerry Yu03b8f9d2022-10-08 12:40:33 +08001388/* Functions for session ticket tests */
Gilles Peskine449bd832023-01-11 14:50:10 +01001389int dummy_ticket_write(void *p_ticket, const mbedtls_ssl_session *session,
1390 unsigned char *start, const unsigned char *end,
1391 size_t *tlen, uint32_t *ticket_lifetime)
Jerry Yu25ab6542022-09-15 18:32:34 +08001392{
1393 int ret;
1394 unsigned char *p = start;
1395 size_t clear_len;
1396 ((void) p_ticket);
1397
Gilles Peskine449bd832023-01-11 14:50:10 +01001398 if (end - p < 4) {
1399 return MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL;
Jerry Yu25ab6542022-09-15 18:32:34 +08001400 }
Tom Cosgrovede857252023-02-02 06:41:21 +00001401 put_unaligned_uint32(p, 7 * 24 * 3600);
Jerry Yu25ab6542022-09-15 18:32:34 +08001402 *ticket_lifetime = 7 * 24 * 3600;
1403 p += 4;
1404
1405 /* Dump session state */
Gilles Peskine449bd832023-01-11 14:50:10 +01001406 if ((ret = mbedtls_ssl_session_save(session, p, end - p,
1407 &clear_len)) != 0) {
1408 return ret;
Jerry Yu25ab6542022-09-15 18:32:34 +08001409 }
1410
1411 *tlen = 4 + clear_len;
1412
Gilles Peskine449bd832023-01-11 14:50:10 +01001413 return 0;
Jerry Yu25ab6542022-09-15 18:32:34 +08001414}
1415
Gilles Peskine449bd832023-01-11 14:50:10 +01001416int dummy_ticket_parse(void *p_ticket, mbedtls_ssl_session *session,
1417 unsigned char *buf, size_t len)
Jerry Yu25ab6542022-09-15 18:32:34 +08001418{
1419 int ret;
1420 ((void) p_ticket);
1421
Gilles Peskine449bd832023-01-11 14:50:10 +01001422 if ((ret = mbedtls_ssl_session_load(session, buf + 4, len - 4)) != 0) {
1423 return ret;
1424 }
Jerry Yu25ab6542022-09-15 18:32:34 +08001425
Pengyu Lv302feb32022-12-09 14:27:08 +08001426 switch (opt.dummy_ticket % 11) {
Jerry Yu25ab6542022-09-15 18:32:34 +08001427 case 1:
Gilles Peskine449bd832023-01-11 14:50:10 +01001428 return MBEDTLS_ERR_SSL_INVALID_MAC;
Jerry Yu25ab6542022-09-15 18:32:34 +08001429 case 2:
Gilles Peskine449bd832023-01-11 14:50:10 +01001430 return MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED;
Jerry Yu25ab6542022-09-15 18:32:34 +08001431 case 3:
Gilles Peskine449bd832023-01-11 14:50:10 +01001432 session->start = mbedtls_time(NULL) + 10;
Jerry Yu25ab6542022-09-15 18:32:34 +08001433 break;
1434 case 4:
Gilles Peskine449bd832023-01-11 14:50:10 +01001435 session->start = mbedtls_time(NULL) - 10 - 7 * 24 * 3600;
Jerry Yu25ab6542022-09-15 18:32:34 +08001436 break;
1437 case 5:
Gilles Peskine449bd832023-01-11 14:50:10 +01001438 session->start = mbedtls_time(NULL) - 10;
Jerry Yu25ab6542022-09-15 18:32:34 +08001439 break;
1440 case 6:
Gilles Peskine449bd832023-01-11 14:50:10 +01001441 session->start = mbedtls_time(NULL);
Jerry Yu03b8f9d2022-10-08 12:40:33 +08001442#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Jerry Yu25ab6542022-09-15 18:32:34 +08001443 session->ticket_age_add -= 1000;
Jerry Yu03b8f9d2022-10-08 12:40:33 +08001444#endif
Jerry Yu25ab6542022-09-15 18:32:34 +08001445 break;
Pengyu Lv302feb32022-12-09 14:27:08 +08001446#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
1447 case 7:
1448 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_NONE;
1449 break;
1450 case 8:
1451 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK;
1452 break;
1453 case 9:
1454 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL;
1455 break;
1456 case 10:
1457 session->ticket_flags = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ALL;
1458 break;
1459#endif
Jerry Yu25ab6542022-09-15 18:32:34 +08001460 default:
1461 break;
1462 }
1463
Gilles Peskine449bd832023-01-11 14:50:10 +01001464 return ret;
Jerry Yu25ab6542022-09-15 18:32:34 +08001465}
Jerry Yu6916e702022-10-10 21:33:51 +08001466#endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_HAVE_TIME */
Jerry Yu25ab6542022-09-15 18:32:34 +08001467
Gilles Peskine449bd832023-01-11 14:50:10 +01001468int main(int argc, char *argv[])
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001469{
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00001470 int ret = 0, len, written, frags, exchanges_left;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001471 int query_config_ret = 0;
Hanno Beckerdcc94e62019-07-03 17:05:43 +01001472 io_ctx_t io_ctx;
Gilles Peskine449bd832023-01-11 14:50:10 +01001473 unsigned char *buf = 0;
Ronald Cron73fe8df2022-10-05 14:31:43 +02001474#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001475#if defined(MBEDTLS_USE_PSA_CRYPTO)
1476 psa_algorithm_t alg = 0;
Andrzej Kurek03e01462022-01-03 12:53:24 +01001477 mbedtls_svc_key_id_t psk_slot = MBEDTLS_SVC_KEY_ID_INIT;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001478#endif /* MBEDTLS_USE_PSA_CRYPTO */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001479 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerfbb17802013-04-17 19:10:21 +02001480 size_t psk_len = 0;
Paul Bakker9b7fb6f2014-06-12 23:01:43 +02001481 psk_entry *psk_info = NULL;
Paul Bakkered27a042013-04-18 22:46:23 +02001482#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +02001483 const char *pers = "ssl_server2";
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02001484 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02001485 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001486#if defined(MBEDTLS_SSL_COOKIE_C)
1487 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001488#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001489
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001490 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001491 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001492#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001493 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001494#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001495#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001496 unsigned char renego_period[8] = { 0 };
1497#endif
Ronald Crone68ab4f2022-10-05 12:46:29 +02001498#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +02001499 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001500 mbedtls_x509_crt cacert;
1501 mbedtls_x509_crt srvcert;
1502 mbedtls_pk_context pkey;
1503 mbedtls_x509_crt srvcert2;
1504 mbedtls_pk_context pkey2;
Andrzej Kurek6ee1e202022-10-12 10:17:25 -04001505 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02001506#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek03e01462022-01-03 12:53:24 +01001507 mbedtls_svc_key_id_t key_slot = MBEDTLS_SVC_KEY_ID_INIT; /* invalid key slot */
1508 mbedtls_svc_key_id_t key_slot2 = MBEDTLS_SVC_KEY_ID_INIT; /* invalid key slot */
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02001509#endif
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02001510 int key_cert_init = 0, key_cert_init2 = 0;
Ronald Crone68ab4f2022-10-05 12:46:29 +02001511#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001512#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001513 ssl_async_key_context_t ssl_async_keys;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001514#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001515#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1516 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001517#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001518#if defined(MBEDTLS_SSL_CACHE_C)
1519 mbedtls_ssl_cache_context cache;
Paul Bakker0a597072012-09-25 21:55:46 +00001520#endif
Przemek Stekiel68a01a62022-10-10 11:31:58 +02001521#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001522 mbedtls_ssl_ticket_context ticket_ctx;
Przemek Stekield61a4d32022-10-11 09:40:40 +02001523#endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_TICKET_C */
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02001524#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001525 sni_entry *sni_info = NULL;
1526#endif
Valerio Settid49cbc12023-04-05 18:21:48 +02001527#if defined(MBEDTLS_ECP_LIGHT)
Brett Warren25386b72021-08-17 09:32:04 +01001528 uint16_t group_list[CURVE_LIST_SIZE];
Gilles Peskine449bd832023-01-11 14:50:10 +01001529 const mbedtls_ecp_curve_info *curve_cur;
Hanno Beckere6706e62017-05-15 16:05:15 +01001530#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001531#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +01001532 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001533#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001534#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Simon Butchercce68be2018-07-23 14:26:09 +01001535 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
Paul Bakker82024bf2013-07-04 11:52:32 +02001536#endif
Hanno Beckera0e20d02019-05-15 14:03:01 +01001537#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +01001538 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001539 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckera7d25422019-04-09 17:28:10 +01001540 size_t cid_len = 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001541 size_t cid_renego_len = 0;
Hanno Beckera7d25422019-04-09 17:28:10 +01001542#endif
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02001543#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
1544 unsigned char *context_buf = NULL;
Gilles Peskine4e8b5942019-09-20 19:12:31 +02001545 size_t context_buf_len = 0;
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02001546#endif
Valerio Setti77e83152022-11-29 17:17:11 +01001547#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
1548 defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settid572a822022-11-28 18:27:51 +01001549 mbedtls_svc_key_id_t ecjpake_pw_slot = MBEDTLS_SVC_KEY_ID_INIT; /* ecjpake password key slot */
Valerio Setti77e83152022-11-29 17:17:11 +01001550#endif /* MBEDTLS_USE_PSA_CRYPTO && MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Hanno Beckera7d25422019-04-09 17:28:10 +01001551
Ronald Crone68ab4f2022-10-05 12:46:29 +02001552#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Hanno Becker11ceadd2021-08-10 13:36:41 +01001553 uint16_t sig_alg_list[SIG_ALG_LIST_SIZE];
Ronald Cron81378b72022-10-05 09:18:01 +02001554#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01001555
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001556 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001557 char *p, *q;
1558 const int *list;
XiaokangQian318dc762022-04-20 09:43:51 +00001559#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker5a9942e2018-11-12 17:47:48 +00001560 psa_status_t status;
1561#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001562 unsigned char eap_tls_keymaterial[16];
1563 unsigned char eap_tls_iv[8];
Gilles Peskine449bd832023-01-11 14:50:10 +01001564 const char *eap_tls_label = "client EAP encryption";
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001565 eap_tls_keys eap_tls_keying;
Gilles Peskine449bd832023-01-11 14:50:10 +01001566#if defined(MBEDTLS_SSL_DTLS_SRTP)
Ron Eldor65b56ef2019-09-26 16:40:48 +03001567 /*! master keys and master salt for SRTP generated during handshake */
Gilles Peskine449bd832023-01-11 14:50:10 +01001568 unsigned char dtls_srtp_key_material[MBEDTLS_TLS_SRTP_MAX_KEY_MATERIAL_LENGTH];
1569 const char *dtls_srtp_label = "EXTRACTOR-dtls_srtp";
1570 dtls_srtp_keys dtls_srtp_keying;
1571 const mbedtls_ssl_srtp_profile default_profiles[] = {
1572 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80,
1573 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32,
1574 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80,
1575 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32,
1576 MBEDTLS_TLS_SRTP_UNSET
1577 };
Ron Eldor65b56ef2019-09-26 16:40:48 +03001578#endif /* MBEDTLS_SSL_DTLS_SRTP */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001579
Jerry Yud146a372022-12-06 12:33:48 +08001580#if defined(MBEDTLS_SSL_EARLY_DATA)
1581 int tls13_early_data_enabled = MBEDTLS_SSL_EARLY_DATA_DISABLED;
1582#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001583#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001584 mbedtls_memory_buffer_alloc_init(alloc_buf, sizeof(alloc_buf));
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001585#if defined(MBEDTLS_MEMORY_DEBUG)
1586 size_t current_heap_memory, peak_heap_memory, heap_blocks;
1587#endif /* MBEDTLS_MEMORY_DEBUG */
1588#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Paul Bakker82024bf2013-07-04 11:52:32 +02001589
Gilles Peskine60fe6602021-02-16 18:56:42 +01001590#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine449bd832023-01-11 14:50:10 +01001591 test_hooks_init();
Gilles Peskine60fe6602021-02-16 18:56:42 +01001592#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01001593
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001594 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +02001595 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001596 */
Gilles Peskine449bd832023-01-11 14:50:10 +01001597 mbedtls_net_init(&client_fd);
1598 mbedtls_net_init(&listen_fd);
1599 mbedtls_ssl_init(&ssl);
1600 mbedtls_ssl_config_init(&conf);
1601 rng_init(&rng);
Ronald Crone68ab4f2022-10-05 12:46:29 +02001602#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001603 mbedtls_x509_crt_init(&cacert);
1604 mbedtls_x509_crt_init(&srvcert);
1605 mbedtls_pk_init(&pkey);
1606 mbedtls_x509_crt_init(&srvcert2);
1607 mbedtls_pk_init(&pkey2);
Andrzej Kurekb50754a2022-10-13 14:19:01 -04001608#endif
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001609#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01001610 memset(&ssl_async_keys, 0, sizeof(ssl_async_keys));
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001611#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001612#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001613 mbedtls_dhm_init(&dhm);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001614#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001615#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001616 mbedtls_ssl_cache_init(&cache);
Paul Bakker0a597072012-09-25 21:55:46 +00001617#endif
Przemek Stekiel68a01a62022-10-10 11:31:58 +02001618#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001619 mbedtls_ssl_ticket_init(&ticket_ctx);
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001620#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001621#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01001622 memset((void *) alpn_list, 0, sizeof(alpn_list));
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001623#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001624#if defined(MBEDTLS_SSL_COOKIE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001625 mbedtls_ssl_cookie_init(&cookie_ctx);
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001626#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001627
XiaokangQian318dc762022-04-20 09:43:51 +00001628#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker5a9942e2018-11-12 17:47:48 +00001629 status = psa_crypto_init();
Gilles Peskine449bd832023-01-11 14:50:10 +01001630 if (status != PSA_SUCCESS) {
1631 mbedtls_fprintf(stderr, "Failed to initialize PSA Crypto implementation: %d\n",
1632 (int) status);
Hanno Becker5a9942e2018-11-12 17:47:48 +00001633 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
1634 goto exit;
1635 }
Gilles Peskine48113eb2021-02-09 10:25:20 +01001636#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine21462112021-01-13 23:53:09 +01001637#if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
Gilles Peskine449bd832023-01-11 14:50:10 +01001638 mbedtls_test_enable_insecure_external_rng();
Gilles Peskine94ad8312021-01-25 13:42:28 +01001639#endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
Hanno Becker5a9942e2018-11-12 17:47:48 +00001640
Paul Bakkerc1283d32014-08-18 11:05:51 +02001641#if !defined(_WIN32)
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001642 /* Abort cleanly on SIGTERM and SIGINT */
Gilles Peskine449bd832023-01-11 14:50:10 +01001643 signal(SIGTERM, term_handler);
1644 signal(SIGINT, term_handler);
Paul Bakkerc1283d32014-08-18 11:05:51 +02001645#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001646
Aditya Deshpande644a5c02023-01-30 15:58:50 +00001647 if (argc < 2) {
Gilles Peskine449bd832023-01-11 14:50:10 +01001648usage:
1649 if (ret == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001650 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01001651 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001652
Gilles Peskine449bd832023-01-11 14:50:10 +01001653 mbedtls_printf(USAGE1);
1654 mbedtls_printf(USAGE2);
1655 mbedtls_printf(USAGE3);
1656 mbedtls_printf(USAGE4);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001657
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001658 list = mbedtls_ssl_list_ciphersuites();
Gilles Peskine449bd832023-01-11 14:50:10 +01001659 while (*list) {
1660 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name(*list));
Paul Bakkered27a042013-04-18 22:46:23 +02001661 list++;
Gilles Peskine449bd832023-01-11 14:50:10 +01001662 if (!*list) {
Paul Bakkered27a042013-04-18 22:46:23 +02001663 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01001664 }
1665 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name(*list));
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001666 list++;
1667 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001668 mbedtls_printf("\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001669 goto exit;
1670 }
1671
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001672 opt.buffer_size = DFL_IO_BUF_LEN;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001673 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001674 opt.server_port = DFL_SERVER_PORT;
1675 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker16970d22017-10-10 15:56:37 +01001676 opt.event = DFL_EVENT;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001677 opt.response_size = DFL_RESPONSE_SIZE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001678 opt.nbio = DFL_NBIO;
Hanno Beckera7d25422019-04-09 17:28:10 +01001679 opt.cid_enabled = DFL_CID_ENABLED;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001680 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
Hanno Beckera7d25422019-04-09 17:28:10 +01001681 opt.cid_val = DFL_CID_VALUE;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001682 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001683 opt.read_timeout = DFL_READ_TIMEOUT;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001684 opt.ca_file = DFL_CA_FILE;
1685 opt.ca_path = DFL_CA_PATH;
1686 opt.crt_file = DFL_CRT_FILE;
1687 opt.key_file = DFL_KEY_FILE;
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02001688 opt.key_opaque = DFL_KEY_OPAQUE;
Hanno Beckere58a6302018-11-07 16:20:16 +00001689 opt.key_pwd = DFL_KEY_PWD;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001690 opt.crt_file2 = DFL_CRT_FILE2;
1691 opt.key_file2 = DFL_KEY_FILE2;
Hanno Beckere58a6302018-11-07 16:20:16 +00001692 opt.key_pwd2 = DFL_KEY_PWD2;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001693 opt.async_operations = DFL_ASYNC_OPERATIONS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001694 opt.async_private_delay1 = DFL_ASYNC_PRIVATE_DELAY1;
1695 opt.async_private_delay2 = DFL_ASYNC_PRIVATE_DELAY2;
1696 opt.async_private_error = DFL_ASYNC_PRIVATE_ERROR;
Paul Bakkerfbb17802013-04-17 19:10:21 +02001697 opt.psk = DFL_PSK;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001698#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001699 opt.psk_opaque = DFL_PSK_OPAQUE;
1700 opt.psk_list_opaque = DFL_PSK_LIST_OPAQUE;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001701#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001702#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1703 opt.ca_callback = DFL_CA_CALLBACK;
1704#endif
Paul Bakkerfbb17802013-04-17 19:10:21 +02001705 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001706 opt.psk_list = DFL_PSK_LIST;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001707 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Valerio Settid6feb202022-12-02 14:28:49 +01001708#if defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settid572a822022-11-28 18:27:51 +01001709 opt.ecjpake_pw_opaque = DFL_ECJPAKE_PW_OPAQUE;
Valerio Settid6feb202022-12-02 14:28:49 +01001710#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001711 opt.force_ciphersuite[0] = DFL_FORCE_CIPHER;
Ronald Cron6f135e12021-12-08 16:57:54 +01001712#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +00001713 opt.tls13_kex_modes = DFL_TLS1_3_KEX_MODES;
Ronald Cron6f135e12021-12-08 16:57:54 +01001714#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001715 opt.renegotiation = DFL_RENEGOTIATION;
1716 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001717 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001718 opt.renego_delay = DFL_RENEGO_DELAY;
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001719 opt.renego_period = DFL_RENEGO_PERIOD;
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001720 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001721 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001722 opt.max_version = DFL_MAX_VERSION;
Gilles Peskinebc70a182017-05-09 15:59:24 +02001723 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001724 opt.auth_mode = DFL_AUTH_MODE;
Janos Follath4817e272017-04-10 13:44:33 +01001725 opt.cert_req_ca_list = DFL_CERT_REQ_CA_LIST;
Glenn Straussbd10c4e2022-06-25 03:15:48 -04001726 opt.cert_req_dn_hint = DFL_CERT_REQ_DN_HINT;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001727 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001728 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001729 opt.tickets = DFL_TICKETS;
Jerry Yu25ab6542022-09-15 18:32:34 +08001730 opt.dummy_ticket = DFL_DUMMY_TICKET;
Glenn Strausse3282452022-02-03 17:23:24 -05001731 opt.ticket_rotate = DFL_TICKET_ROTATE;
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001732 opt.ticket_timeout = DFL_TICKET_TIMEOUT;
Gabor Mezeid4bea1e2022-01-12 16:21:15 +01001733 opt.ticket_aead = DFL_TICKET_AEAD;
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001734 opt.cache_max = DFL_CACHE_MAX;
Andrzej Kurek554b8202022-03-02 12:33:24 -05001735#if defined(MBEDTLS_HAVE_TIME)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001736 opt.cache_timeout = DFL_CACHE_TIMEOUT;
Andrzej Kurek554b8202022-03-02 12:33:24 -05001737#endif
Pengyu Lv753d02f2023-03-07 14:51:09 +08001738 opt.cache_remove = DFL_CACHE_REMOVE;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001739 opt.sni = DFL_SNI;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001740 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +01001741 opt.curves = DFL_CURVES;
Jerry Yu7854a4e2022-11-05 23:14:47 +08001742 opt.max_early_data_size = DFL_MAX_EARLY_DATA_SIZE;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001743 opt.sig_algs = DFL_SIG_ALGS;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001744 opt.dhm_file = DFL_DHM_FILE;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001745 opt.transport = DFL_TRANSPORT;
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001746 opt.cookies = DFL_COOKIES;
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001747 opt.anti_replay = DFL_ANTI_REPLAY;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001748 opt.hs_to_min = DFL_HS_TO_MIN;
1749 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001750 opt.dtls_mtu = DFL_DTLS_MTU;
Hanno Beckere7675d02018-08-14 13:28:56 +01001751 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001752 opt.badmac_limit = DFL_BADMAC_LIMIT;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001753 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001754 opt.etm = DFL_ETM;
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001755 opt.serialize = DFL_SERIALIZE;
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001756 opt.context_file = DFL_CONTEXT_FILE;
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001757 opt.eap_tls = DFL_EAP_TLS;
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001758 opt.reproducible = DFL_REPRODUCIBLE;
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001759 opt.nss_keylog = DFL_NSS_KEYLOG;
1760 opt.nss_keylog_file = DFL_NSS_KEYLOG_FILE;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001761 opt.query_config_mode = DFL_QUERY_CONFIG_MODE;
Ron Eldor6ea64512018-07-02 10:08:07 +03001762 opt.use_srtp = DFL_USE_SRTP;
1763 opt.force_srtp_profile = DFL_SRTP_FORCE_PROFILE;
Ron Eldor12c6ead2018-07-03 15:08:32 +03001764 opt.support_mki = DFL_SRTP_SUPPORT_MKI;
Przemek Stekiel344c5612022-05-02 14:17:35 +02001765 opt.key1_opaque_alg1 = DFL_KEY_OPAQUE_ALG;
1766 opt.key1_opaque_alg2 = DFL_KEY_OPAQUE_ALG;
1767 opt.key2_opaque_alg1 = DFL_KEY_OPAQUE_ALG;
1768 opt.key2_opaque_alg2 = DFL_KEY_OPAQUE_ALG;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001769
Gilles Peskine449bd832023-01-11 14:50:10 +01001770 for (i = 1; i < argc; i++) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001771 p = argv[i];
Gilles Peskine449bd832023-01-11 14:50:10 +01001772 if ((q = strchr(p, '=')) == NULL) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001773 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001774 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001775 *q++ = '\0';
1776
Gilles Peskine449bd832023-01-11 14:50:10 +01001777 if (strcmp(p, "server_port") == 0) {
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001778 opt.server_port = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001779 } else if (strcmp(p, "server_addr") == 0) {
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001780 opt.server_addr = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001781 } else if (strcmp(p, "dtls") == 0) {
1782 int t = atoi(q);
1783 if (t == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001784 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Gilles Peskine449bd832023-01-11 14:50:10 +01001785 } else if (t == 1) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001786 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Gilles Peskine449bd832023-01-11 14:50:10 +01001787 } else {
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001788 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001789 }
1790 } else if (strcmp(p, "debug_level") == 0) {
1791 opt.debug_level = atoi(q);
1792 if (opt.debug_level < 0 || opt.debug_level > 65535) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001793 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001794 }
1795 } else if (strcmp(p, "build_version") == 0) {
1796 if (strcmp(q, "1") == 0) {
1797 mbedtls_printf("build version: %s (build %d)\n",
1798 MBEDTLS_VERSION_STRING_FULL,
1799 MBEDTLS_VERSION_NUMBER);
Yanray Wangeaf46d12022-10-28 10:38:37 +08001800 goto exit;
1801 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001802 } else if (strcmp(p, "nbio") == 0) {
1803 opt.nbio = atoi(q);
1804 if (opt.nbio < 0 || opt.nbio > 2) {
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001805 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001806 }
1807 } else if (strcmp(p, "event") == 0) {
1808 opt.event = atoi(q);
1809 if (opt.event < 0 || opt.event > 2) {
Hanno Becker16970d22017-10-10 15:56:37 +01001810 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001811 }
1812 } else if (strcmp(p, "read_timeout") == 0) {
1813 opt.read_timeout = atoi(q);
1814 } else if (strcmp(p, "buffer_size") == 0) {
1815 opt.buffer_size = atoi(q);
1816 if (opt.buffer_size < 1) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001817 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001818 }
1819 } else if (strcmp(p, "response_size") == 0) {
1820 opt.response_size = atoi(q);
1821 if (opt.response_size < 0 || opt.response_size > MBEDTLS_SSL_OUT_CONTENT_LEN) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001822 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001823 }
1824 if (opt.buffer_size < opt.response_size) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001825 opt.buffer_size = opt.response_size;
Gilles Peskine449bd832023-01-11 14:50:10 +01001826 }
1827 } else if (strcmp(p, "ca_file") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001828 opt.ca_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001829 } else if (strcmp(p, "ca_path") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001830 opt.ca_path = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001831 } else if (strcmp(p, "crt_file") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001832 opt.crt_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001833 } else if (strcmp(p, "key_file") == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001834 opt.key_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001835 } else if (strcmp(p, "key_pwd") == 0) {
Hanno Beckere58a6302018-11-07 16:20:16 +00001836 opt.key_pwd = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001837 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02001838#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001839 else if (strcmp(p, "key_opaque") == 0) {
1840 opt.key_opaque = atoi(q);
1841 }
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02001842#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001843 else if (strcmp(p, "crt_file2") == 0) {
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001844 opt.crt_file2 = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001845 } else if (strcmp(p, "key_file2") == 0) {
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001846 opt.key_file2 = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001847 } else if (strcmp(p, "key_pwd2") == 0) {
Hanno Beckere58a6302018-11-07 16:20:16 +00001848 opt.key_pwd2 = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001849 } else if (strcmp(p, "dhm_file") == 0) {
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001850 opt.dhm_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001851 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001852#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01001853 else if (strcmp(p, "async_operations") == 0) {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001854 opt.async_operations = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001855 } else if (strcmp(p, "async_private_delay1") == 0) {
1856 opt.async_private_delay1 = atoi(q);
1857 } else if (strcmp(p, "async_private_delay2") == 0) {
1858 opt.async_private_delay2 = atoi(q);
1859 } else if (strcmp(p, "async_private_error") == 0) {
1860 int n = atoi(q);
1861 if (n < -SSL_ASYNC_INJECT_ERROR_MAX ||
1862 n > SSL_ASYNC_INJECT_ERROR_MAX) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001863 ret = 2;
1864 goto usage;
1865 }
1866 opt.async_private_error = n;
1867 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001868#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Hanno Beckera0e20d02019-05-15 14:03:01 +01001869#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01001870 else if (strcmp(p, "cid") == 0) {
1871 opt.cid_enabled = atoi(q);
1872 if (opt.cid_enabled != 0 && opt.cid_enabled != 1) {
Hanno Beckera7d25422019-04-09 17:28:10 +01001873 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001874 }
1875 } else if (strcmp(p, "cid_renego") == 0) {
1876 opt.cid_enabled_renego = atoi(q);
1877 if (opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001878 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001879 }
1880 } else if (strcmp(p, "cid_val") == 0) {
Hanno Beckera7d25422019-04-09 17:28:10 +01001881 opt.cid_val = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001882 } else if (strcmp(p, "cid_val_renego") == 0) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001883 opt.cid_val_renego = q;
1884 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001885#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Gilles Peskine449bd832023-01-11 14:50:10 +01001886 else if (strcmp(p, "psk") == 0) {
Paul Bakkerfbb17802013-04-17 19:10:21 +02001887 opt.psk = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001888 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001889#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001890 else if (strcmp(p, "psk_opaque") == 0) {
1891 opt.psk_opaque = atoi(q);
1892 } else if (strcmp(p, "psk_list_opaque") == 0) {
1893 opt.psk_list_opaque = atoi(q);
1894 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001895#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001896#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Gilles Peskine449bd832023-01-11 14:50:10 +01001897 else if (strcmp(p, "ca_callback") == 0) {
1898 opt.ca_callback = atoi(q);
1899 }
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001900#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001901 else if (strcmp(p, "psk_identity") == 0) {
Paul Bakkerfbb17802013-04-17 19:10:21 +02001902 opt.psk_identity = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001903 } else if (strcmp(p, "psk_list") == 0) {
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001904 opt.psk_list = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001905 } else if (strcmp(p, "ecjpake_pw") == 0) {
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001906 opt.ecjpake_pw = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001907 }
Valerio Settid6feb202022-12-02 14:28:49 +01001908#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01001909 else if (strcmp(p, "ecjpake_pw_opaque") == 0) {
1910 opt.ecjpake_pw_opaque = atoi(q);
1911 }
Valerio Settid6feb202022-12-02 14:28:49 +01001912#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01001913 else if (strcmp(p, "force_ciphersuite") == 0) {
1914 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id(q);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001915
Gilles Peskine449bd832023-01-11 14:50:10 +01001916 if (opt.force_ciphersuite[0] == 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001917 ret = 2;
1918 goto usage;
1919 }
1920 opt.force_ciphersuite[1] = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01001921 } else if (strcmp(p, "curves") == 0) {
Hanno Beckere6706e62017-05-15 16:05:15 +01001922 opt.curves = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001923 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02001924#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01001925 else if (strcmp(p, "sig_algs") == 0) {
Hanno Becker11ceadd2021-08-10 13:36:41 +01001926 opt.sig_algs = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01001927 }
Ronald Cron81378b72022-10-05 09:18:01 +02001928#endif
Jerry Yu7854a4e2022-11-05 23:14:47 +08001929#if defined(MBEDTLS_SSL_EARLY_DATA)
Gilles Peskine449bd832023-01-11 14:50:10 +01001930 else if (strcmp(p, "max_early_data_size") == 0) {
1931 long long value = atoll(q);
Jerry Yud146a372022-12-06 12:33:48 +08001932 tls13_early_data_enabled =
1933 value >= 0 ? MBEDTLS_SSL_EARLY_DATA_ENABLED :
Gilles Peskine449bd832023-01-11 14:50:10 +01001934 MBEDTLS_SSL_EARLY_DATA_DISABLED;
1935 if (tls13_early_data_enabled) {
1936 opt.max_early_data_size = atoi(q);
Jerry Yud146a372022-12-06 12:33:48 +08001937 }
Jerry Yu7854a4e2022-11-05 23:14:47 +08001938 }
1939#endif /* MBEDTLS_SSL_EARLY_DATA */
Gilles Peskine449bd832023-01-11 14:50:10 +01001940 else if (strcmp(p, "renegotiation") == 0) {
1941 opt.renegotiation = (atoi(q)) ?
1942 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1943 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
1944 } else if (strcmp(p, "allow_legacy") == 0) {
1945 switch (atoi(q)) {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001946 case -1:
1947 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1948 break;
1949 case 0:
1950 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1951 break;
1952 case 1:
1953 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1954 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001955 default: goto usage;
1956 }
Gilles Peskine449bd832023-01-11 14:50:10 +01001957 } else if (strcmp(p, "renegotiate") == 0) {
1958 opt.renegotiate = atoi(q);
1959 if (opt.renegotiate < 0 || opt.renegotiate > 1) {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001960 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001961 }
1962 } else if (strcmp(p, "renego_delay") == 0) {
1963 opt.renego_delay = atoi(q);
1964 } else if (strcmp(p, "renego_period") == 0) {
Andres AG0b736db2017-02-08 14:05:57 +00001965#if defined(_MSC_VER)
Gilles Peskine449bd832023-01-11 14:50:10 +01001966 opt.renego_period = _strtoui64(q, NULL, 10);
Andres AG0b736db2017-02-08 14:05:57 +00001967#else
Gilles Peskine449bd832023-01-11 14:50:10 +01001968 if (sscanf(q, "%" SCNu64, &opt.renego_period) != 1) {
Andres AG0b736db2017-02-08 14:05:57 +00001969 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001970 }
Andres AG0b736db2017-02-08 14:05:57 +00001971#endif /* _MSC_VER */
Gilles Peskine449bd832023-01-11 14:50:10 +01001972 if (opt.renego_period < 2) {
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001973 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001974 }
1975 } else if (strcmp(p, "exchanges") == 0) {
1976 opt.exchanges = atoi(q);
1977 if (opt.exchanges < 0) {
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001978 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01001979 }
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001980 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001981#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01001982 else if (strcmp(p, "tls13_kex_modes") == 0) {
1983 if (strcmp(q, "psk") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001984 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK;
Gilles Peskine449bd832023-01-11 14:50:10 +01001985 } else if (strcmp(q, "psk_ephemeral") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001986 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL;
Gilles Peskine449bd832023-01-11 14:50:10 +01001987 } else if (strcmp(q, "ephemeral") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001988 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL;
Gilles Peskine449bd832023-01-11 14:50:10 +01001989 } else if (strcmp(q, "ephemeral_all") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001990 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ALL;
Gilles Peskine449bd832023-01-11 14:50:10 +01001991 } else if (strcmp(q, "psk_all") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001992 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ALL;
Gilles Peskine449bd832023-01-11 14:50:10 +01001993 } else if (strcmp(q, "all") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001994 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL;
Gilles Peskine449bd832023-01-11 14:50:10 +01001995 }
Jerry Yuc5a23a02022-08-25 10:51:44 +08001996 /* The purpose of `psk_or_ephemeral` is to improve test coverage. That
1997 * is not recommended in practice.
1998 * `psk_or_ephemeral` exists in theory, we need this mode to test if
1999 * this setting work correctly. With this key exchange setting, server
Tom Cosgrove1797b052022-12-04 17:19:59 +00002000 * should always perform `ephemeral` handshake. `psk` or `psk_ephemeral`
Jerry Yuc5a23a02022-08-25 10:51:44 +08002001 * is not expected.
Jerry Yu2b7a51b2022-08-01 10:19:13 +08002002 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002003 else if (strcmp(q, "psk_or_ephemeral") == 0) {
Jerry Yu2b7a51b2022-08-01 10:19:13 +08002004 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK |
Gilles Peskine449bd832023-01-11 14:50:10 +01002005 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL;
2006 } else {
2007 goto usage;
2008 }
Hanno Becker2c0f6972021-07-24 06:27:16 +01002009 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002010#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +01002011
Gilles Peskine449bd832023-01-11 14:50:10 +01002012 else if (strcmp(p, "min_version") == 0) {
2013 if (strcmp(q, "tls12") == 0 ||
2014 strcmp(q, "dtls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002015 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
Gilles Peskine449bd832023-01-11 14:50:10 +01002016 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002017#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002018 else if (strcmp(q, "tls13") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002019 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_3;
Gilles Peskine449bd832023-01-11 14:50:10 +01002020 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002021#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002022 else {
Paul Bakker1d29fb52012-09-28 13:28:45 +00002023 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002024 }
2025 } else if (strcmp(p, "max_version") == 0) {
2026 if (strcmp(q, "tls12") == 0 ||
2027 strcmp(q, "dtls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002028 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Gilles Peskine449bd832023-01-11 14:50:10 +01002029 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002030#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002031 else if (strcmp(q, "tls13") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002032 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_3;
Gilles Peskine449bd832023-01-11 14:50:10 +01002033 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002034#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002035 else {
Paul Bakkerc1516be2013-06-29 16:01:32 +02002036 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002037 }
2038 } else if (strcmp(p, "allow_sha1") == 0) {
2039 switch (atoi(q)) {
Gilles Peskinebc70a182017-05-09 15:59:24 +02002040 case 0: opt.allow_sha1 = 0; break;
2041 case 1: opt.allow_sha1 = 1; break;
2042 default: goto usage;
2043 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002044 } else if (strcmp(p, "force_version") == 0) {
2045 if (strcmp(q, "tls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002046 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
2047 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Gilles Peskine449bd832023-01-11 14:50:10 +01002048 } else if (strcmp(q, "dtls12") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002049 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_2;
2050 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002051 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01002052 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002053#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002054 else if (strcmp(q, "tls13") == 0) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002055 opt.min_version = MBEDTLS_SSL_VERSION_TLS1_3;
2056 opt.max_version = MBEDTLS_SSL_VERSION_TLS1_3;
Jerry Yub1dc59a2021-08-05 15:58:09 +08002057 }
Ronald Cron6f135e12021-12-08 16:57:54 +01002058#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002059 else {
Paul Bakkerc1516be2013-06-29 16:01:32 +02002060 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002061 }
2062 } else if (strcmp(p, "auth_mode") == 0) {
2063 if ((opt.auth_mode = get_auth_mode(q)) < 0) {
Paul Bakker91ebfb52012-11-23 14:04:08 +01002064 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002065 }
2066 } else if (strcmp(p, "cert_req_ca_list") == 0) {
2067 opt.cert_req_ca_list = atoi(q);
2068 if (opt.cert_req_ca_list < 0 || opt.cert_req_ca_list > 3) {
Janos Follath4817e272017-04-10 13:44:33 +01002069 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002070 }
2071 if (opt.cert_req_ca_list > 1) {
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002072 opt.cert_req_dn_hint = opt.cert_req_ca_list;
2073 opt.cert_req_ca_list = MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED;
2074 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002075 } else if (strcmp(p, "max_frag_len") == 0) {
2076 if (strcmp(q, "512") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002077 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002078 } else if (strcmp(q, "1024") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002079 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Gilles Peskine449bd832023-01-11 14:50:10 +01002080 } else if (strcmp(q, "2048") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002081 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Gilles Peskine449bd832023-01-11 14:50:10 +01002082 } else if (strcmp(q, "4096") == 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002083 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Gilles Peskine449bd832023-01-11 14:50:10 +01002084 } else {
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002085 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002086 }
2087 } else if (strcmp(p, "alpn") == 0) {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002088 opt.alpn_string = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002089 } else if (strcmp(p, "trunc_hmac") == 0) {
2090 switch (atoi(q)) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002091 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
2092 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002093 default: goto usage;
2094 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002095 } else if (strcmp(p, "extended_ms") == 0) {
2096 switch (atoi(q)) {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002097 case 0:
2098 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
2099 break;
2100 case 1:
2101 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
2102 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002103 default: goto usage;
2104 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002105 } else if (strcmp(p, "etm") == 0) {
2106 switch (atoi(q)) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002107 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
2108 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002109 default: goto usage;
2110 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002111 } else if (strcmp(p, "tickets") == 0) {
2112 opt.tickets = atoi(q);
2113 if (opt.tickets < 0) {
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002114 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002115 }
2116 } else if (strcmp(p, "dummy_ticket") == 0) {
2117 opt.dummy_ticket = atoi(q);
2118 if (opt.dummy_ticket < 0) {
Jerry Yu25ab6542022-09-15 18:32:34 +08002119 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002120 }
2121 } else if (strcmp(p, "ticket_rotate") == 0) {
2122 opt.ticket_rotate = atoi(q);
2123 if (opt.ticket_rotate < 0 || opt.ticket_rotate > 1) {
Glenn Strausse3282452022-02-03 17:23:24 -05002124 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002125 }
2126 } else if (strcmp(p, "ticket_timeout") == 0) {
2127 opt.ticket_timeout = atoi(q);
2128 if (opt.ticket_timeout < 0) {
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002129 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002130 }
2131 } else if (strcmp(p, "ticket_aead") == 0) {
2132 const mbedtls_cipher_info_t *ci = mbedtls_cipher_info_from_string(q);
Gabor Mezeid4bea1e2022-01-12 16:21:15 +01002133
Gilles Peskine449bd832023-01-11 14:50:10 +01002134 if (ci == NULL) {
Gabor Mezeid4bea1e2022-01-12 16:21:15 +01002135 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002136 }
2137 opt.ticket_aead = mbedtls_cipher_info_get_type(ci);
2138 } else if (strcmp(p, "cache_max") == 0) {
2139 opt.cache_max = atoi(q);
2140 if (opt.cache_max < 0) {
Hanno Beckere7675d02018-08-14 13:28:56 +01002141 goto usage;
2142 }
2143 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002144#if defined(MBEDTLS_HAVE_TIME)
2145 else if (strcmp(p, "cache_timeout") == 0) {
2146 opt.cache_timeout = atoi(q);
2147 if (opt.cache_timeout < 0) {
2148 goto usage;
2149 }
2150 }
2151#endif
Pengyu Lv753d02f2023-03-07 14:51:09 +08002152 else if (strcmp(p, "cache_remove") == 0) {
2153 opt.cache_remove = atoi(q);
2154 if (opt.cache_remove < 0 || opt.cache_remove > 1) {
2155 goto usage;
2156 }
2157 } else if (strcmp(p, "cookies") == 0) {
Gilles Peskine449bd832023-01-11 14:50:10 +01002158 opt.cookies = atoi(q);
2159 if (opt.cookies < -1 || opt.cookies > 1) {
2160 goto usage;
2161 }
2162 } else if (strcmp(p, "anti_replay") == 0) {
2163 opt.anti_replay = atoi(q);
2164 if (opt.anti_replay < 0 || opt.anti_replay > 1) {
2165 goto usage;
2166 }
2167 } else if (strcmp(p, "badmac_limit") == 0) {
2168 opt.badmac_limit = atoi(q);
2169 if (opt.badmac_limit < 0) {
2170 goto usage;
2171 }
2172 } else if (strcmp(p, "hs_timeout") == 0) {
2173 if ((p = strchr(q, '-')) == NULL) {
2174 goto usage;
2175 }
2176 *p++ = '\0';
2177 opt.hs_to_min = atoi(q);
2178 opt.hs_to_max = atoi(p);
2179 if (opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min) {
2180 goto usage;
2181 }
2182 } else if (strcmp(p, "mtu") == 0) {
2183 opt.dtls_mtu = atoi(q);
2184 if (opt.dtls_mtu < 0) {
2185 goto usage;
2186 }
2187 } else if (strcmp(p, "dgram_packing") == 0) {
2188 opt.dgram_packing = atoi(q);
2189 if (opt.dgram_packing != 0 &&
2190 opt.dgram_packing != 1) {
2191 goto usage;
2192 }
2193 } else if (strcmp(p, "sni") == 0) {
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002194 opt.sni = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002195 } else if (strcmp(p, "query_config") == 0) {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02002196 opt.query_config_mode = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002197 query_config_ret = query_config(q);
gabor-mezei-arm78595852020-04-28 10:40:30 +02002198 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01002199 } else if (strcmp(p, "serialize") == 0) {
2200 opt.serialize = atoi(q);
2201 if (opt.serialize < 0 || opt.serialize > 2) {
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03002202 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002203 }
2204 } else if (strcmp(p, "context_file") == 0) {
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002205 opt.context_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002206 } else if (strcmp(p, "eap_tls") == 0) {
2207 opt.eap_tls = atoi(q);
2208 if (opt.eap_tls < 0 || opt.eap_tls > 1) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002209 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002210 }
2211 } else if (strcmp(p, "reproducible") == 0) {
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002212 opt.reproducible = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002213 } else if (strcmp(p, "nss_keylog") == 0) {
2214 opt.nss_keylog = atoi(q);
2215 if (opt.nss_keylog < 0 || opt.nss_keylog > 1) {
Hanno Becker48f3a3d2019-08-29 06:31:22 +01002216 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002217 }
2218 } else if (strcmp(p, "nss_keylog_file") == 0) {
Hanno Becker48f3a3d2019-08-29 06:31:22 +01002219 opt.nss_keylog_file = q;
Gilles Peskine449bd832023-01-11 14:50:10 +01002220 } else if (strcmp(p, "use_srtp") == 0) {
2221 opt.use_srtp = atoi(q);
2222 } else if (strcmp(p, "srtp_force_profile") == 0) {
2223 opt.force_srtp_profile = atoi(q);
2224 } else if (strcmp(p, "support_mki") == 0) {
2225 opt.support_mki = atoi(q);
2226 } else if (strcmp(p, "key_opaque_algs") == 0) {
2227 if (key_opaque_alg_parse(q, &opt.key1_opaque_alg1,
2228 &opt.key1_opaque_alg2) != 0) {
Przemek Stekiel344c5612022-05-02 14:17:35 +02002229 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002230 }
2231 } else if (strcmp(p, "key_opaque_algs2") == 0) {
2232 if (key_opaque_alg_parse(q, &opt.key2_opaque_alg1,
2233 &opt.key2_opaque_alg2) != 0) {
Przemek Stekiel4ca0d722022-04-25 12:46:22 +02002234 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002235 }
2236 } else {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002237 goto usage;
Gilles Peskine449bd832023-01-11 14:50:10 +01002238 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002239 }
2240
Gilles Peskine449bd832023-01-11 14:50:10 +01002241 if (opt.nss_keylog != 0 && opt.eap_tls != 0) {
2242 mbedtls_printf("Error: eap_tls and nss_keylog options cannot be used together.\n");
Hanno Beckerbc5308c2019-09-09 11:38:51 +01002243 goto usage;
2244 }
2245
Hanno Becker16970d22017-10-10 15:56:37 +01002246 /* Event-driven IO is incompatible with the above custom
2247 * receive and send functions, as the polling builds on
2248 * refers to the underlying net_context. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002249 if (opt.event == 1 && opt.nbio != 1) {
2250 mbedtls_printf("Warning: event-driven IO mandates nbio=1 - overwrite\n");
Hanno Becker16970d22017-10-10 15:56:37 +01002251 opt.nbio = 1;
2252 }
2253
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002254#if defined(MBEDTLS_DEBUG_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002255 mbedtls_debug_set_threshold(opt.debug_level);
Paul Bakkerc73079a2014-04-25 16:34:30 +02002256#endif
Gilles Peskine8bb96d92022-04-06 23:31:05 +02002257
2258 /* buf will alternatively contain the input read from the client and the
2259 * response that's about to be sent, plus a null byte in each case. */
2260 size_t buf_content_size = opt.buffer_size;
2261 /* The default response contains the ciphersuite name. Leave enough
2262 * room for that plus some margin. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002263 if (buf_content_size < strlen(HTTP_RESPONSE) + 80) {
2264 buf_content_size = strlen(HTTP_RESPONSE) + 80;
Gilles Peskine8bb96d92022-04-06 23:31:05 +02002265 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002266 if (opt.response_size != DFL_RESPONSE_SIZE &&
2267 buf_content_size < (size_t) opt.response_size) {
Gilles Peskine8bb96d92022-04-06 23:31:05 +02002268 buf_content_size = opt.response_size;
2269 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002270 buf = mbedtls_calloc(1, buf_content_size + 1);
2271 if (buf == NULL) {
2272 mbedtls_printf("Could not allocate %lu bytes\n",
2273 (unsigned long) buf_content_size + 1);
Andrzej Kurek30e731d2017-10-12 13:50:29 +02002274 ret = 3;
2275 goto exit;
2276 }
Paul Bakkerc73079a2014-04-25 16:34:30 +02002277
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002278#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002279 if (opt.psk_opaque != 0) {
2280 if (strlen(opt.psk) == 0) {
2281 mbedtls_printf("psk_opaque set but no psk to be imported specified.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002282 ret = 2;
2283 goto usage;
2284 }
2285
Gilles Peskine449bd832023-01-11 14:50:10 +01002286 if (opt.force_ciphersuite[0] <= 0) {
2287 mbedtls_printf(
2288 "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002289 ret = 2;
2290 goto usage;
2291 }
2292 }
2293
Gilles Peskine449bd832023-01-11 14:50:10 +01002294 if (opt.psk_list_opaque != 0) {
2295 if (opt.psk_list == NULL) {
2296 mbedtls_printf("psk_slot set but no psk to be imported specified.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002297 ret = 2;
2298 goto usage;
2299 }
2300
Gilles Peskine449bd832023-01-11 14:50:10 +01002301 if (opt.force_ciphersuite[0] <= 0) {
2302 mbedtls_printf(
2303 "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n");
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002304 ret = 2;
2305 goto usage;
2306 }
2307 }
2308#endif /* MBEDTLS_USE_PSA_CRYPTO */
2309
Gilles Peskine449bd832023-01-11 14:50:10 +01002310 if (opt.force_ciphersuite[0] > 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002311 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002312 ciphersuite_info =
Gilles Peskine449bd832023-01-11 14:50:10 +01002313 mbedtls_ssl_ciphersuite_from_id(opt.force_ciphersuite[0]);
Paul Bakkerc1516be2013-06-29 16:01:32 +02002314
Gilles Peskine449bd832023-01-11 14:50:10 +01002315 if (opt.max_version != -1 &&
2316 ciphersuite_info->min_tls_version > opt.max_version) {
2317 mbedtls_printf("forced ciphersuite not allowed with this protocol version\n");
Paul Bakker5b55b792013-07-19 13:43:43 +02002318 ret = 2;
2319 goto usage;
2320 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002321 if (opt.min_version != -1 &&
2322 ciphersuite_info->max_tls_version < opt.min_version) {
2323 mbedtls_printf("forced ciphersuite not allowed with this protocol version\n");
Paul Bakkerc1516be2013-06-29 16:01:32 +02002324 ret = 2;
2325 goto usage;
2326 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002327
2328 /* If we select a version that's not supported by
2329 * this suite, then there will be no common ciphersuite... */
Gilles Peskine449bd832023-01-11 14:50:10 +01002330 if (opt.max_version == -1 ||
2331 opt.max_version > ciphersuite_info->max_tls_version) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002332 opt.max_version = ciphersuite_info->max_tls_version;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002333 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002334 if (opt.min_version < ciphersuite_info->min_tls_version) {
Glenn Strausse3af4cb2022-03-15 03:23:42 -04002335 opt.min_version = ciphersuite_info->min_tls_version;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002336 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002337
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002338#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cron73fe8df2022-10-05 14:31:43 +02002339#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01002340 if (opt.psk_opaque != 0 || opt.psk_list_opaque != 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002341 /* Determine KDF algorithm the opaque PSK will be used in. */
Manuel Pégourié-Gonnardbef824d2023-03-17 12:50:01 +01002342#if defined(MBEDTLS_MD_CAN_SHA384)
Gilles Peskine449bd832023-01-11 14:50:10 +01002343 if (ciphersuite_info->mac == MBEDTLS_MD_SHA384) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002344 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_384);
Gilles Peskine449bd832023-01-11 14:50:10 +01002345 } else
Manuel Pégourié-Gonnardbef824d2023-03-17 12:50:01 +01002346#endif /* MBEDTLS_MD_CAN_SHA384 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002347 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_256);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002348 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02002349#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002350#endif /* MBEDTLS_USE_PSA_CRYPTO */
Paul Bakkerc1516be2013-06-29 16:01:32 +02002351 }
2352
Hanno Beckera0e20d02019-05-15 14:03:01 +01002353#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01002354 if (mbedtls_test_unhexify(cid, sizeof(cid),
2355 opt.cid_val, &cid_len) != 0) {
2356 mbedtls_printf("CID not valid hex\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002357 goto exit;
2358 }
2359
2360 /* Keep CID settings for renegotiation unless
2361 * specified otherwise. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002362 if (opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002363 opt.cid_enabled_renego = opt.cid_enabled;
Gilles Peskine449bd832023-01-11 14:50:10 +01002364 }
2365 if (opt.cid_val_renego == DFL_CID_VALUE_RENEGO) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002366 opt.cid_val_renego = opt.cid_val;
Gilles Peskine449bd832023-01-11 14:50:10 +01002367 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002368
Gilles Peskine449bd832023-01-11 14:50:10 +01002369 if (mbedtls_test_unhexify(cid_renego, sizeof(cid_renego),
2370 opt.cid_val_renego, &cid_renego_len) != 0) {
2371 mbedtls_printf("CID not valid hex\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002372 goto exit;
2373 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002374#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01002375
Ronald Cron73fe8df2022-10-05 14:31:43 +02002376#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002377 /*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002378 * Unhexify the pre-shared key and parse the list if any given
Paul Bakkerfbb17802013-04-17 19:10:21 +02002379 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002380 if (mbedtls_test_unhexify(psk, sizeof(psk),
2381 opt.psk, &psk_len) != 0) {
2382 mbedtls_printf("pre-shared key not valid hex\n");
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002383 goto exit;
2384 }
2385
Gilles Peskine449bd832023-01-11 14:50:10 +01002386 if (opt.psk_list != NULL) {
2387 if ((psk_info = psk_parse(opt.psk_list)) == NULL) {
2388 mbedtls_printf("psk_list invalid");
Paul Bakkerfbb17802013-04-17 19:10:21 +02002389 goto exit;
2390 }
Paul Bakkerfbb17802013-04-17 19:10:21 +02002391 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02002392#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +02002393
Valerio Settid49cbc12023-04-05 18:21:48 +02002394#if defined(MBEDTLS_ECP_LIGHT)
Gilles Peskine449bd832023-01-11 14:50:10 +01002395 if (opt.curves != NULL) {
Hanno Beckere6706e62017-05-15 16:05:15 +01002396 p = (char *) opt.curves;
2397 i = 0;
2398
Gilles Peskine449bd832023-01-11 14:50:10 +01002399 if (strcmp(p, "none") == 0) {
Brett Warren25386b72021-08-17 09:32:04 +01002400 group_list[0] = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01002401 } else if (strcmp(p, "default") != 0) {
Hanno Beckere6706e62017-05-15 16:05:15 +01002402 /* Leave room for a final NULL in curve list */
Gilles Peskine449bd832023-01-11 14:50:10 +01002403 while (i < CURVE_LIST_SIZE - 1 && *p != '\0') {
Hanno Beckere6706e62017-05-15 16:05:15 +01002404 q = p;
Przemek Stekiel6d7da5e2023-05-18 16:02:43 +02002405 uint16_t ffdh_group = 0;
Hanno Beckere6706e62017-05-15 16:05:15 +01002406
2407 /* Terminate the current string */
Gilles Peskine449bd832023-01-11 14:50:10 +01002408 while (*p != ',' && *p != '\0') {
Hanno Beckere6706e62017-05-15 16:05:15 +01002409 p++;
Hanno Beckere6706e62017-05-15 16:05:15 +01002410 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002411 if (*p == ',') {
2412 *p++ = '\0';
2413 }
2414
2415 if ((curve_cur = mbedtls_ecp_curve_info_from_name(q)) != NULL) {
2416 group_list[i++] = curve_cur->tls_id;
Przemek Stekiel6d7da5e2023-05-18 16:02:43 +02002417 } else if ((ffdh_group = mbedtls_ssl_ffdh_group_from_name(q)) != 0) {
2418 group_list[i++] = ffdh_group;
Gilles Peskine449bd832023-01-11 14:50:10 +01002419 } else {
2420 mbedtls_printf("unknown curve %s\n", q);
2421 mbedtls_printf("supported curves: ");
2422 for (curve_cur = mbedtls_ecp_curve_list();
Hanno Beckere6706e62017-05-15 16:05:15 +01002423 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
Gilles Peskine449bd832023-01-11 14:50:10 +01002424 curve_cur++) {
2425 mbedtls_printf("%s ", curve_cur->name);
Przemek Stekiel6d7da5e2023-05-18 16:02:43 +02002426 uint16_t *supported_ffdh_group = mbedtls_ssl_ffdh_supported_groups();
2427 while (*supported_ffdh_group != 0) {
2428 mbedtls_printf("%s ",
2429 mbedtls_ssl_ffdh_name_from_group(*supported_ffdh_group));
2430 supported_ffdh_group++;
2431 }
Hanno Beckere6706e62017-05-15 16:05:15 +01002432 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002433 mbedtls_printf("\n");
Hanno Beckere6706e62017-05-15 16:05:15 +01002434 goto exit;
2435 }
2436 }
2437
Gilles Peskine449bd832023-01-11 14:50:10 +01002438 mbedtls_printf("Number of curves: %d\n", i);
Hanno Beckere6706e62017-05-15 16:05:15 +01002439
Gilles Peskine449bd832023-01-11 14:50:10 +01002440 if (i == CURVE_LIST_SIZE - 1 && *p != '\0') {
2441 mbedtls_printf("curves list too long, maximum %d",
2442 CURVE_LIST_SIZE - 1);
Hanno Beckere6706e62017-05-15 16:05:15 +01002443 goto exit;
2444 }
2445
Brett Warren25386b72021-08-17 09:32:04 +01002446 group_list[i] = 0;
Hanno Beckere6706e62017-05-15 16:05:15 +01002447 }
2448 }
Valerio Settid49cbc12023-04-05 18:21:48 +02002449#endif /* MBEDTLS_ECP_LIGHT */
Hanno Beckere6706e62017-05-15 16:05:15 +01002450
Ronald Crone68ab4f2022-10-05 12:46:29 +02002451#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01002452 if (opt.sig_algs != NULL) {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002453 p = (char *) opt.sig_algs;
2454 i = 0;
2455
Xiaofei Bai746f9482021-11-12 08:53:56 +00002456 /* Leave room for a final MBEDTLS_TLS1_3_SIG_NONE in signature algorithm list (sig_alg_list). */
Gilles Peskine449bd832023-01-11 14:50:10 +01002457 while (i < SIG_ALG_LIST_SIZE - 1 && *p != '\0') {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002458 q = p;
2459
2460 /* Terminate the current string */
Gilles Peskine449bd832023-01-11 14:50:10 +01002461 while (*p != ',' && *p != '\0') {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002462 p++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002463 }
2464 if (*p == ',') {
Hanno Becker11ceadd2021-08-10 13:36:41 +01002465 *p++ = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01002466 }
Hanno Becker11ceadd2021-08-10 13:36:41 +01002467
Gilles Peskine449bd832023-01-11 14:50:10 +01002468 if (strcmp(q, "rsa_pkcs1_sha256") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002469 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002470 } else if (strcmp(q, "rsa_pkcs1_sha384") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002471 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002472 } else if (strcmp(q, "rsa_pkcs1_sha512") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002473 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002474 } else if (strcmp(q, "ecdsa_secp256r1_sha256") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002475 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP256R1_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002476 } else if (strcmp(q, "ecdsa_secp384r1_sha384") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002477 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP384R1_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002478 } else if (strcmp(q, "ecdsa_secp521r1_sha512") == 0) {
Xiaofei Bai746f9482021-11-12 08:53:56 +00002479 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP521R1_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002480 } else if (strcmp(q, "rsa_pss_rsae_sha256") == 0) {
XiaokangQiand5d5b602022-05-23 09:16:20 +00002481 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002482 } else if (strcmp(q, "rsa_pss_rsae_sha384") == 0) {
XiaokangQiand5d5b602022-05-23 09:16:20 +00002483 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002484 } else if (strcmp(q, "rsa_pss_rsae_sha512") == 0) {
XiaokangQiand5d5b602022-05-23 09:16:20 +00002485 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002486 } else if (strcmp(q, "ed25519") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002487 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ED25519;
Gilles Peskine449bd832023-01-11 14:50:10 +01002488 } else if (strcmp(q, "ed448") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002489 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ED448;
Gilles Peskine449bd832023-01-11 14:50:10 +01002490 } else if (strcmp(q, "rsa_pss_pss_sha256") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002491 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA256;
Gilles Peskine449bd832023-01-11 14:50:10 +01002492 } else if (strcmp(q, "rsa_pss_pss_sha384") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002493 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA384;
Gilles Peskine449bd832023-01-11 14:50:10 +01002494 } else if (strcmp(q, "rsa_pss_pss_sha512") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002495 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_PSS_SHA512;
Gilles Peskine449bd832023-01-11 14:50:10 +01002496 } else if (strcmp(q, "rsa_pkcs1_sha1") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002497 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002498 } else if (strcmp(q, "ecdsa_sha1") == 0) {
Jerry Yu64f410c2022-06-24 13:09:27 +08002499 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SHA1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002500 } else {
Jerry Yu64f410c2022-06-24 13:09:27 +08002501 ret = -1;
Gilles Peskine449bd832023-01-11 14:50:10 +01002502 mbedtls_printf("unknown signature algorithm \"%s\"\n", q);
Jerry Yu202919c2022-06-27 16:21:00 +08002503 mbedtls_print_supported_sig_algs();
Hanno Becker11ceadd2021-08-10 13:36:41 +01002504 goto exit;
2505 }
2506 }
2507
Gilles Peskine449bd832023-01-11 14:50:10 +01002508 if (i == (SIG_ALG_LIST_SIZE - 1) && *p != '\0') {
2509 mbedtls_printf("signature algorithm list too long, maximum %d",
2510 SIG_ALG_LIST_SIZE - 1);
Hanno Becker11ceadd2021-08-10 13:36:41 +01002511 goto exit;
2512 }
2513
Xiaofei Bai746f9482021-11-12 08:53:56 +00002514 sig_alg_list[i] = MBEDTLS_TLS1_3_SIG_NONE;
Hanno Becker11ceadd2021-08-10 13:36:41 +01002515 }
Ronald Cron81378b72022-10-05 09:18:01 +02002516#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01002517
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002518#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01002519 if (opt.alpn_string != NULL) {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002520 p = (char *) opt.alpn_string;
2521 i = 0;
2522
2523 /* Leave room for a final NULL in alpn_list */
Gilles Peskine449bd832023-01-11 14:50:10 +01002524 while (i < ALPN_LIST_SIZE - 1 && *p != '\0') {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002525 alpn_list[i++] = p;
2526
2527 /* Terminate the current string and move on to next one */
Gilles Peskine449bd832023-01-11 14:50:10 +01002528 while (*p != ',' && *p != '\0') {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002529 p++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002530 }
2531 if (*p == ',') {
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002532 *p++ = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01002533 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002534 }
2535 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002536#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002537
Gilles Peskine449bd832023-01-11 14:50:10 +01002538 mbedtls_printf("build version: %s (build %d)\n",
2539 MBEDTLS_VERSION_STRING_FULL, MBEDTLS_VERSION_NUMBER);
Yanray Wangeaf46d12022-10-28 10:38:37 +08002540
Paul Bakkerfbb17802013-04-17 19:10:21 +02002541 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002542 * 0. Initialize the RNG and the session data
2543 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002544 mbedtls_printf("\n . Seeding the random number generator...");
2545 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002546
Gilles Peskine449bd832023-01-11 14:50:10 +01002547 ret = rng_seed(&rng, opt.reproducible, pers);
2548 if (ret != 0) {
Gilles Peskinedaa94c42021-01-13 18:38:27 +01002549 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01002550 }
2551 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002552
Ronald Crone68ab4f2022-10-05 12:46:29 +02002553#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002554 /*
2555 * 1.1. Load the trusted CA
2556 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002557 mbedtls_printf(" . Loading the CA root certificate ...");
2558 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002559
Gilles Peskine449bd832023-01-11 14:50:10 +01002560 if (strcmp(opt.ca_path, "none") == 0 ||
2561 strcmp(opt.ca_file, "none") == 0) {
Hanno Becker8174bdf2019-03-05 16:22:07 +00002562 ret = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01002563 } else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002564#if defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002565 if (strlen(opt.ca_path)) {
2566 ret = mbedtls_x509_crt_parse_path(&cacert, opt.ca_path);
2567 } else if (strlen(opt.ca_file)) {
2568 ret = mbedtls_x509_crt_parse_file(&cacert, opt.ca_file);
2569 } else
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002570#endif
Hanno Becker09b8cae2019-02-01 08:13:19 +00002571 {
2572#if defined(MBEDTLS_PEM_PARSE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002573 for (i = 0; mbedtls_test_cas[i] != NULL; i++) {
2574 ret = mbedtls_x509_crt_parse(&cacert,
2575 (const unsigned char *) mbedtls_test_cas[i],
2576 mbedtls_test_cas_len[i]);
2577 if (ret != 0) {
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002578 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01002579 }
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002580 }
Hanno Becker09b8cae2019-02-01 08:13:19 +00002581#endif /* MBEDTLS_PEM_PARSE_C */
Gilles Peskine449bd832023-01-11 14:50:10 +01002582 if (ret == 0) {
2583 for (i = 0; mbedtls_test_cas_der[i] != NULL; i++) {
2584 ret = mbedtls_x509_crt_parse_der(&cacert,
2585 (const unsigned char *) mbedtls_test_cas_der[i],
2586 mbedtls_test_cas_der_len[i]);
2587 if (ret != 0) {
David Horstmann3f44e5b2022-10-24 13:12:19 +01002588 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01002589 }
David Horstmann3f44e5b2022-10-24 13:12:19 +01002590 }
Hanno Becker09b8cae2019-02-01 08:13:19 +00002591 }
2592 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002593 if (ret < 0) {
2594 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2595 (unsigned int) -ret);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002596 goto exit;
2597 }
2598
Gilles Peskine449bd832023-01-11 14:50:10 +01002599 mbedtls_printf(" ok (%d skipped)\n", ret);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002600
2601 /*
2602 * 1.2. Load own certificate and private key
2603 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002604 mbedtls_printf(" . Loading the server cert. and key...");
2605 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002606
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002607#if defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002608 if (strlen(opt.crt_file) && strcmp(opt.crt_file, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002609 key_cert_init++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002610 if ((ret = mbedtls_x509_crt_parse_file(&srvcert, opt.crt_file)) != 0) {
2611 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse_file returned -0x%x\n\n",
2612 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002613 goto exit;
2614 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002615 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002616 if (strlen(opt.key_file) && strcmp(opt.key_file, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002617 key_cert_init++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002618 if ((ret = mbedtls_pk_parse_keyfile(&pkey, opt.key_file,
2619 opt.key_pwd, rng_get, &rng)) != 0) {
2620 mbedtls_printf(" failed\n ! mbedtls_pk_parse_keyfile returned -0x%x\n\n",
2621 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002622 goto exit;
2623 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002624 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002625 if (key_cert_init == 1) {
2626 mbedtls_printf(" failed\n ! crt_file without key_file or vice-versa\n\n");
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002627 goto exit;
2628 }
2629
Gilles Peskine449bd832023-01-11 14:50:10 +01002630 if (strlen(opt.crt_file2) && strcmp(opt.crt_file2, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002631 key_cert_init2++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002632 if ((ret = mbedtls_x509_crt_parse_file(&srvcert2, opt.crt_file2)) != 0) {
2633 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse_file(2) returned -0x%x\n\n",
2634 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002635 goto exit;
2636 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002637 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002638 if (strlen(opt.key_file2) && strcmp(opt.key_file2, "none") != 0) {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002639 key_cert_init2++;
Gilles Peskine449bd832023-01-11 14:50:10 +01002640 if ((ret = mbedtls_pk_parse_keyfile(&pkey2, opt.key_file2,
2641 opt.key_pwd2, rng_get, &rng)) != 0) {
2642 mbedtls_printf(" failed\n ! mbedtls_pk_parse_keyfile(2) returned -0x%x\n\n",
2643 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002644 goto exit;
2645 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002646 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002647 if (key_cert_init2 == 1) {
2648 mbedtls_printf(" failed\n ! crt_file2 without key_file2 or vice-versa\n\n");
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002649 goto exit;
2650 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002651#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01002652 if (key_cert_init == 0 &&
2653 strcmp(opt.crt_file, "none") != 0 &&
2654 strcmp(opt.key_file, "none") != 0 &&
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002655 key_cert_init2 == 0 &&
Gilles Peskine449bd832023-01-11 14:50:10 +01002656 strcmp(opt.crt_file2, "none") != 0 &&
2657 strcmp(opt.key_file2, "none") != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002658#if defined(MBEDTLS_RSA_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002659 if ((ret = mbedtls_x509_crt_parse(&srvcert,
2660 (const unsigned char *) mbedtls_test_srv_crt_rsa,
2661 mbedtls_test_srv_crt_rsa_len)) != 0) {
2662 mbedtls_printf(" failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
2663 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002664 goto exit;
2665 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002666 if ((ret = mbedtls_pk_parse_key(&pkey,
2667 (const unsigned char *) mbedtls_test_srv_key_rsa,
2668 mbedtls_test_srv_key_rsa_len, NULL, 0,
2669 rng_get, &rng)) != 0) {
2670 mbedtls_printf(" failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
2671 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002672 goto exit;
2673 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002674 key_cert_init = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002675#endif /* MBEDTLS_RSA_C */
Valerio Setti5ba1d5e2023-02-22 12:38:54 +01002676#if defined(MBEDTLS_PK_CAN_ECDSA_SOME)
Gilles Peskine449bd832023-01-11 14:50:10 +01002677 if ((ret = mbedtls_x509_crt_parse(&srvcert2,
2678 (const unsigned char *) mbedtls_test_srv_crt_ec,
2679 mbedtls_test_srv_crt_ec_len)) != 0) {
2680 mbedtls_printf(" failed\n ! x509_crt_parse2 returned -0x%x\n\n",
2681 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002682 goto exit;
2683 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002684 if ((ret = mbedtls_pk_parse_key(&pkey2,
2685 (const unsigned char *) mbedtls_test_srv_key_ec,
2686 mbedtls_test_srv_key_ec_len, NULL, 0,
2687 rng_get, &rng)) != 0) {
2688 mbedtls_printf(" failed\n ! pk_parse_key2 returned -0x%x\n\n",
2689 (unsigned int) -ret);
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002690 goto exit;
2691 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002692 key_cert_init2 = 2;
Valerio Setti5ba1d5e2023-02-22 12:38:54 +01002693#endif /* MBEDTLS_PK_CAN_ECDSA_SOME */
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002694 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002695
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02002696#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002697 if (opt.key_opaque != 0) {
Przemek Stekielcb20d202022-05-06 08:42:34 +02002698 psa_algorithm_t psa_alg, psa_alg2 = PSA_ALG_NONE;
Przemek Stekiel488efa02022-05-05 09:31:08 +02002699 psa_key_usage_t psa_usage = 0;
Neil Armstrong94e371a2022-04-22 13:58:05 +02002700
Gilles Peskine449bd832023-01-11 14:50:10 +01002701 if (key_opaque_set_alg_usage(opt.key1_opaque_alg1,
2702 opt.key1_opaque_alg2,
2703 &psa_alg, &psa_alg2,
2704 &psa_usage,
2705 mbedtls_pk_get_type(&pkey)) == 0) {
2706 ret = mbedtls_pk_wrap_as_opaque(&pkey, &key_slot,
2707 psa_alg, psa_usage, psa_alg2);
Przemek Stekiel09212832022-05-04 15:11:24 +02002708
Gilles Peskine449bd832023-01-11 14:50:10 +01002709 if (ret != 0) {
2710 mbedtls_printf(" failed\n ! "
2711 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n",
2712 (unsigned int) -ret);
Przemek Stekiele5e9ba92022-05-04 11:23:13 +02002713 goto exit;
2714 }
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02002715 }
Przemek Stekiele5e9ba92022-05-04 11:23:13 +02002716
Przemek Stekielcb20d202022-05-06 08:42:34 +02002717 psa_alg = PSA_ALG_NONE; psa_alg2 = PSA_ALG_NONE;
2718 psa_usage = 0;
Neil Armstrong94e371a2022-04-22 13:58:05 +02002719
Gilles Peskine449bd832023-01-11 14:50:10 +01002720 if (key_opaque_set_alg_usage(opt.key2_opaque_alg1,
2721 opt.key2_opaque_alg2,
2722 &psa_alg, &psa_alg2,
2723 &psa_usage,
2724 mbedtls_pk_get_type(&pkey2)) == 0) {
2725 ret = mbedtls_pk_wrap_as_opaque(&pkey2, &key_slot2,
2726 psa_alg, psa_usage, psa_alg2);
Przemek Stekielcb20d202022-05-06 08:42:34 +02002727
Gilles Peskine449bd832023-01-11 14:50:10 +01002728 if (ret != 0) {
2729 mbedtls_printf(" failed\n ! "
2730 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n",
2731 (unsigned int) -ret);
Przemek Stekiele5e9ba92022-05-04 11:23:13 +02002732 goto exit;
2733 }
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02002734 }
2735 }
2736#endif /* MBEDTLS_USE_PSA_CRYPTO */
2737
Gilles Peskine449bd832023-01-11 14:50:10 +01002738 mbedtls_printf(" ok (key types: %s, %s)\n",
2739 key_cert_init ? mbedtls_pk_get_name(&pkey) : "none",
2740 key_cert_init2 ? mbedtls_pk_get_name(&pkey2) : "none");
Ronald Crone68ab4f2022-10-05 12:46:29 +02002741#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002742
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002743#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01002744 if (opt.dhm_file != NULL) {
2745 mbedtls_printf(" . Loading DHM parameters...");
2746 fflush(stdout);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002747
Gilles Peskine449bd832023-01-11 14:50:10 +01002748 if ((ret = mbedtls_dhm_parse_dhmfile(&dhm, opt.dhm_file)) != 0) {
2749 mbedtls_printf(" failed\n ! mbedtls_dhm_parse_dhmfile returned -0x%04X\n\n",
2750 (unsigned int) -ret);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002751 goto exit;
2752 }
2753
Gilles Peskine449bd832023-01-11 14:50:10 +01002754 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002755 }
2756#endif
2757
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002758#if defined(SNI_OPTION)
Gilles Peskine449bd832023-01-11 14:50:10 +01002759 if (opt.sni != NULL) {
2760 mbedtls_printf(" . Setting up SNI information...");
2761 fflush(stdout);
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002762
Gilles Peskine449bd832023-01-11 14:50:10 +01002763 if ((sni_info = sni_parse(opt.sni)) == NULL) {
2764 mbedtls_printf(" failed\n");
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002765 goto exit;
2766 }
2767
Gilles Peskine449bd832023-01-11 14:50:10 +01002768 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002769 }
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002770#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002771
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002772 /*
Jerry Yu2a572cf2021-08-06 11:21:08 +08002773 * 2. Setup stuff
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002774 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002775 mbedtls_printf(" . Setting up the SSL/TLS structure...");
2776 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002777
Gilles Peskine449bd832023-01-11 14:50:10 +01002778 if ((ret = mbedtls_ssl_config_defaults(&conf,
2779 MBEDTLS_SSL_IS_SERVER,
2780 opt.transport,
2781 MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
2782 mbedtls_printf(" failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
2783 (unsigned int) -ret);
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002784 goto exit;
2785 }
2786
Ronald Crone68ab4f2022-10-05 12:46:29 +02002787#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskineef86ab22017-05-05 18:59:02 +02002788 /* The default algorithms profile disables SHA-1, but our tests still
2789 rely on it heavily. Hence we allow it here. A real-world server
2790 should use the default profile unless there is a good reason not to. */
Gilles Peskine449bd832023-01-11 14:50:10 +01002791 if (opt.allow_sha1 > 0) {
2792 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG(MBEDTLS_MD_SHA1);
2793 mbedtls_ssl_conf_cert_profile(&conf, &crt_profile_for_test);
2794 mbedtls_ssl_conf_sig_algs(&conf, ssl_sig_algs_for_test);
Gilles Peskinebc70a182017-05-09 15:59:24 +02002795 }
Ronald Crone68ab4f2022-10-05 12:46:29 +02002796#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Gilles Peskineef86ab22017-05-05 18:59:02 +02002797
Gilles Peskine449bd832023-01-11 14:50:10 +01002798 if (opt.auth_mode != DFL_AUTH_MODE) {
2799 mbedtls_ssl_conf_authmode(&conf, opt.auth_mode);
2800 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002801
Gilles Peskine449bd832023-01-11 14:50:10 +01002802 if (opt.cert_req_ca_list != DFL_CERT_REQ_CA_LIST) {
2803 mbedtls_ssl_conf_cert_req_ca_list(&conf, opt.cert_req_ca_list);
2804 }
Janos Follath4817e272017-04-10 13:44:33 +01002805
Jerry Yu7854a4e2022-11-05 23:14:47 +08002806#if defined(MBEDTLS_SSL_EARLY_DATA)
Gilles Peskine449bd832023-01-11 14:50:10 +01002807 mbedtls_ssl_tls13_conf_early_data(&conf, tls13_early_data_enabled);
2808 if (tls13_early_data_enabled == MBEDTLS_SSL_EARLY_DATA_ENABLED) {
Jerry Yud146a372022-12-06 12:33:48 +08002809 mbedtls_ssl_tls13_conf_max_early_data_size(
Gilles Peskine449bd832023-01-11 14:50:10 +01002810 &conf, opt.max_early_data_size);
Jerry Yud146a372022-12-06 12:33:48 +08002811 }
Jerry Yu7854a4e2022-11-05 23:14:47 +08002812#endif /* MBEDTLS_SSL_EARLY_DATA */
2813
Andrzej Kurekd0786f52022-10-13 09:06:48 -04002814#if defined(MBEDTLS_KEY_EXCHANGE_CERT_REQ_ALLOWED_ENABLED)
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002815 /* exercise setting DN hints for server certificate request
2816 * (Intended for use where the client cert expected has been signed by
2817 * a specific CA which is an intermediate in a CA chain, not the root) */
Gilles Peskine449bd832023-01-11 14:50:10 +01002818 if (opt.cert_req_dn_hint == 2 && key_cert_init2) {
2819 mbedtls_ssl_conf_dn_hints(&conf, &srvcert2);
2820 }
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002821#endif
Glenn Straussbd10c4e2022-06-25 03:15:48 -04002822
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002823#if defined(MBEDTLS_SSL_PROTO_DTLS)
Gilles Peskine449bd832023-01-11 14:50:10 +01002824 if (opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX) {
2825 mbedtls_ssl_conf_handshake_timeout(&conf, opt.hs_to_min, opt.hs_to_max);
2826 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02002827
Gilles Peskine449bd832023-01-11 14:50:10 +01002828 if (opt.dgram_packing != DFL_DGRAM_PACKING) {
2829 mbedtls_ssl_set_datagram_packing(&ssl, opt.dgram_packing);
2830 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002831#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002832
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002833#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Gilles Peskine449bd832023-01-11 14:50:10 +01002834 if ((ret = mbedtls_ssl_conf_max_frag_len(&conf, opt.mfl_code)) != 0) {
2835 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002836 goto exit;
Ron Eldor6ea64512018-07-02 10:08:07 +03002837 }
Paul Bakker05decb22013-08-15 13:33:48 +02002838#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002839
Hanno Beckera0e20d02019-05-15 14:03:01 +01002840#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01002841 if (opt.cid_enabled == 1 || opt.cid_enabled_renego == 1) {
2842 if (opt.cid_enabled == 1 &&
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002843 opt.cid_enabled_renego == 1 &&
Gilles Peskine449bd832023-01-11 14:50:10 +01002844 cid_len != cid_renego_len) {
2845 mbedtls_printf("CID length must not change during renegotiation\n");
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002846 goto usage;
2847 }
2848
Gilles Peskine449bd832023-01-11 14:50:10 +01002849 if (opt.cid_enabled == 1) {
2850 ret = mbedtls_ssl_conf_cid(&conf, cid_len,
2851 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE);
2852 } else {
2853 ret = mbedtls_ssl_conf_cid(&conf, cid_renego_len,
2854 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE);
2855 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002856
Gilles Peskine449bd832023-01-11 14:50:10 +01002857 if (ret != 0) {
2858 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
2859 (unsigned int) -ret);
Hanno Beckerad4a1372019-05-03 13:06:44 +01002860 goto exit;
2861 }
2862 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002863#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerad4a1372019-05-03 13:06:44 +01002864
Ron Eldor6ea64512018-07-02 10:08:07 +03002865#if defined(MBEDTLS_SSL_DTLS_SRTP)
Gilles Peskine449bd832023-01-11 14:50:10 +01002866 const mbedtls_ssl_srtp_profile forced_profile[] =
2867 { opt.force_srtp_profile, MBEDTLS_TLS_SRTP_UNSET };
2868 if (opt.use_srtp == 1) {
2869 if (opt.force_srtp_profile != 0) {
2870 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles(&conf, forced_profile);
2871 } else {
2872 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles(&conf, default_profiles);
Ron Eldor6ea64512018-07-02 10:08:07 +03002873 }
2874
Gilles Peskine449bd832023-01-11 14:50:10 +01002875 if (ret != 0) {
2876 mbedtls_printf(
2877 " failed\n ! mbedtls_ssl_conf_dtls_srtp_protection_profiles returned %d\n\n",
2878 ret);
Ron Eldor6ea64512018-07-02 10:08:07 +03002879 goto exit;
2880 }
2881
Gilles Peskine449bd832023-01-11 14:50:10 +01002882 mbedtls_ssl_conf_srtp_mki_value_supported(&conf,
2883 opt.support_mki ?
2884 MBEDTLS_SSL_DTLS_SRTP_MKI_SUPPORTED :
2885 MBEDTLS_SSL_DTLS_SRTP_MKI_UNSUPPORTED);
Ron Eldor12c6ead2018-07-03 15:08:32 +03002886
Gilles Peskine449bd832023-01-11 14:50:10 +01002887 } else if (opt.force_srtp_profile != 0) {
2888 mbedtls_printf(" failed\n ! must enable use_srtp to force srtp profile\n\n");
Ron Eldor6ea64512018-07-02 10:08:07 +03002889 goto exit;
2890 }
2891#endif /* MBEDTLS_SSL_DTLS_SRTP */
2892
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002893#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Gilles Peskine449bd832023-01-11 14:50:10 +01002894 if (opt.extended_ms != DFL_EXTENDED_MS) {
2895 mbedtls_ssl_conf_extended_master_secret(&conf, opt.extended_ms);
2896 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002897#endif
2898
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002899#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Gilles Peskine449bd832023-01-11 14:50:10 +01002900 if (opt.etm != DFL_ETM) {
2901 mbedtls_ssl_conf_encrypt_then_mac(&conf, opt.etm);
2902 }
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002903#endif
2904
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002905#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01002906 if (opt.alpn_string != NULL) {
2907 if ((ret = mbedtls_ssl_conf_alpn_protocols(&conf, alpn_list)) != 0) {
2908 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002909 goto exit;
2910 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002911 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002912#endif
2913
Gilles Peskine449bd832023-01-11 14:50:10 +01002914 if (opt.reproducible) {
Philippe Antoinef91b3722019-06-11 16:02:43 +02002915#if defined(MBEDTLS_HAVE_TIME)
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002916#if defined(MBEDTLS_PLATFORM_TIME_ALT)
Gilles Peskine449bd832023-01-11 14:50:10 +01002917 mbedtls_platform_set_time(dummy_constant_time);
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002918#else
Gilles Peskine449bd832023-01-11 14:50:10 +01002919 fprintf(stderr, "Warning: reproducible option used without constant time\n");
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002920#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01002921#endif /* MBEDTLS_HAVE_TIME */
Philippe Antoine986b6f22019-06-07 15:04:32 +02002922 }
Gilles Peskine449bd832023-01-11 14:50:10 +01002923 mbedtls_ssl_conf_rng(&conf, rng_get, &rng);
2924 mbedtls_ssl_conf_dbg(&conf, my_debug, stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002925
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002926#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002927 if (opt.cache_max != -1) {
2928 mbedtls_ssl_cache_set_max_entries(&cache, opt.cache_max);
2929 }
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002930
Raoul Strackx9ed9bc92020-06-22 14:08:57 +02002931#if defined(MBEDTLS_HAVE_TIME)
Gilles Peskine449bd832023-01-11 14:50:10 +01002932 if (opt.cache_timeout != -1) {
2933 mbedtls_ssl_cache_set_timeout(&cache, opt.cache_timeout);
2934 }
Raoul Strackx9ed9bc92020-06-22 14:08:57 +02002935#endif
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002936
Gilles Peskine449bd832023-01-11 14:50:10 +01002937 mbedtls_ssl_conf_session_cache(&conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +01002938 mbedtls_ssl_cache_get,
Gilles Peskine449bd832023-01-11 14:50:10 +01002939 mbedtls_ssl_cache_set);
Paul Bakker0a597072012-09-25 21:55:46 +00002940#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002941
Przemek Stekiel68a01a62022-10-10 11:31:58 +02002942#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002943 if (opt.tickets != MBEDTLS_SSL_SESSION_TICKETS_DISABLED) {
Jerry Yu03b8f9d2022-10-08 12:40:33 +08002944#if defined(MBEDTLS_HAVE_TIME)
Gilles Peskine449bd832023-01-11 14:50:10 +01002945 if (opt.dummy_ticket) {
2946 mbedtls_ssl_conf_session_tickets_cb(&conf,
2947 dummy_ticket_write,
2948 dummy_ticket_parse,
2949 NULL);
2950 } else
Jerry Yu03b8f9d2022-10-08 12:40:33 +08002951#endif /* MBEDTLS_HAVE_TIME */
Jerry Yu25ab6542022-09-15 18:32:34 +08002952 {
Gilles Peskine449bd832023-01-11 14:50:10 +01002953 if ((ret = mbedtls_ssl_ticket_setup(&ticket_ctx,
2954 rng_get, &rng,
2955 opt.ticket_aead,
2956 opt.ticket_timeout)) != 0) {
Jerry Yuc7974232022-10-11 21:22:33 +08002957 mbedtls_printf(
2958 " failed\n ! mbedtls_ssl_ticket_setup returned %d\n\n",
Gilles Peskine449bd832023-01-11 14:50:10 +01002959 ret);
Jerry Yu25ab6542022-09-15 18:32:34 +08002960 goto exit;
2961 }
2962
Gilles Peskine449bd832023-01-11 14:50:10 +01002963 mbedtls_ssl_conf_session_tickets_cb(&conf,
2964 mbedtls_ssl_ticket_write,
2965 mbedtls_ssl_ticket_parse,
2966 &ticket_ctx);
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002967 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002968
Jerry Yu7a513052022-08-09 13:34:21 +08002969#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01002970 mbedtls_ssl_conf_new_session_tickets(&conf, opt.tickets);
Jerry Yu7a513052022-08-09 13:34:21 +08002971#endif
Glenn Strausse3282452022-02-03 17:23:24 -05002972 /* exercise manual ticket rotation (not required for typical use)
2973 * (used for external synchronization of session ticket encryption keys)
2974 */
Gilles Peskine449bd832023-01-11 14:50:10 +01002975 if (opt.ticket_rotate) {
Glenn Straussa941b622022-02-09 15:24:56 -05002976 unsigned char kbuf[MBEDTLS_SSL_TICKET_MAX_KEY_BYTES];
2977 unsigned char name[MBEDTLS_SSL_TICKET_KEY_NAME_BYTES];
Gilles Peskine449bd832023-01-11 14:50:10 +01002978 if ((ret = rng_get(&rng, name, sizeof(name))) != 0 ||
2979 (ret = rng_get(&rng, kbuf, sizeof(kbuf))) != 0 ||
2980 (ret = mbedtls_ssl_ticket_rotate(&ticket_ctx,
2981 name, sizeof(name), kbuf, sizeof(kbuf),
2982 opt.ticket_timeout)) != 0) {
2983 mbedtls_printf(" failed\n ! mbedtls_ssl_ticket_rotate returned %d\n\n", ret);
Glenn Strausse3282452022-02-03 17:23:24 -05002984 goto exit;
2985 }
2986 }
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002987 }
Paul Bakkera503a632013-08-14 13:48:06 +02002988#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002989
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002990#if defined(MBEDTLS_SSL_PROTO_DTLS)
Gilles Peskine449bd832023-01-11 14:50:10 +01002991 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002992#if defined(MBEDTLS_SSL_COOKIE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01002993 if (opt.cookies > 0) {
2994 if ((ret = mbedtls_ssl_cookie_setup(&cookie_ctx,
2995 rng_get, &rng)) != 0) {
2996 mbedtls_printf(" failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret);
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002997 goto exit;
2998 }
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002999
Gilles Peskine449bd832023-01-11 14:50:10 +01003000 mbedtls_ssl_conf_dtls_cookies(&conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
3001 &cookie_ctx);
3002 } else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003003#endif /* MBEDTLS_SSL_COOKIE_C */
3004#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Gilles Peskine449bd832023-01-11 14:50:10 +01003005 if (opt.cookies == 0) {
3006 mbedtls_ssl_conf_dtls_cookies(&conf, NULL, NULL, NULL);
3007 } else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003008#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02003009 {
3010 ; /* Nothing to do */
3011 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02003012
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003013#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Gilles Peskine449bd832023-01-11 14:50:10 +01003014 if (opt.anti_replay != DFL_ANTI_REPLAY) {
3015 mbedtls_ssl_conf_dtls_anti_replay(&conf, opt.anti_replay);
3016 }
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02003017#endif
3018
Gilles Peskine449bd832023-01-11 14:50:10 +01003019 if (opt.badmac_limit != DFL_BADMAC_LIMIT) {
3020 mbedtls_ssl_conf_dtls_badmac_limit(&conf, opt.badmac_limit);
3021 }
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02003022 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003023#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02003024
Gilles Peskine449bd832023-01-11 14:50:10 +01003025 if (opt.force_ciphersuite[0] != DFL_FORCE_CIPHER) {
3026 mbedtls_ssl_conf_ciphersuites(&conf, opt.force_ciphersuite);
3027 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00003028
Ronald Cron6f135e12021-12-08 16:57:54 +01003029#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01003030 mbedtls_ssl_conf_tls13_key_exchange_modes(&conf, opt.tls13_kex_modes);
Ronald Cron6f135e12021-12-08 16:57:54 +01003031#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +01003032
Gilles Peskine449bd832023-01-11 14:50:10 +01003033 if (opt.allow_legacy != DFL_ALLOW_LEGACY) {
3034 mbedtls_ssl_conf_legacy_renegotiation(&conf, opt.allow_legacy);
3035 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003036#if defined(MBEDTLS_SSL_RENEGOTIATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003037 mbedtls_ssl_conf_renegotiation(&conf, opt.renegotiation);
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003038
Gilles Peskine449bd832023-01-11 14:50:10 +01003039 if (opt.renego_delay != DFL_RENEGO_DELAY) {
3040 mbedtls_ssl_conf_renegotiation_enforced(&conf, opt.renego_delay);
3041 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003042
Gilles Peskine449bd832023-01-11 14:50:10 +01003043 if (opt.renego_period != DFL_RENEGO_PERIOD) {
3044 PUT_UINT64_BE(renego_period, opt.renego_period, 0);
3045 mbedtls_ssl_conf_renegotiation_period(&conf, renego_period);
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003046 }
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01003047#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003048
Ronald Crone68ab4f2022-10-05 12:46:29 +02003049#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003050 if (strcmp(opt.ca_path, "none") != 0 &&
3051 strcmp(opt.ca_file, "none") != 0) {
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02003052#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Gilles Peskine449bd832023-01-11 14:50:10 +01003053 if (opt.ca_callback != 0) {
3054 mbedtls_ssl_conf_ca_cb(&conf, ca_callback, &cacert);
3055 } else
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02003056#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01003057 mbedtls_ssl_conf_ca_chain(&conf, &cacert, NULL);
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01003058 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003059 if (key_cert_init) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003060 mbedtls_pk_context *pk = &pkey;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003061#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003062 if (opt.async_private_delay1 >= 0) {
3063 ret = ssl_async_set_key(&ssl_async_keys, &srvcert, pk, 0,
3064 opt.async_private_delay1);
3065 if (ret < 0) {
3066 mbedtls_printf(" Test error: ssl_async_set_key failed (%d)\n",
3067 ret);
Gilles Peskined6fbfde2018-04-30 10:23:56 +02003068 goto exit;
3069 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003070 pk = NULL;
3071 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003072#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine449bd832023-01-11 14:50:10 +01003073 if ((ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, pk)) != 0) {
3074 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02003075 goto exit;
3076 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003077 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003078 if (key_cert_init2) {
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003079 mbedtls_pk_context *pk = &pkey2;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003080#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003081 if (opt.async_private_delay2 >= 0) {
3082 ret = ssl_async_set_key(&ssl_async_keys, &srvcert2, pk, 0,
3083 opt.async_private_delay2);
3084 if (ret < 0) {
3085 mbedtls_printf(" Test error: ssl_async_set_key failed (%d)\n",
3086 ret);
Gilles Peskined6fbfde2018-04-30 10:23:56 +02003087 goto exit;
3088 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003089 pk = NULL;
3090 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003091#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine449bd832023-01-11 14:50:10 +01003092 if ((ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert2, pk)) != 0) {
3093 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret);
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02003094 goto exit;
3095 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003096 }
3097
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003098#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003099 if (opt.async_operations[0] != '-') {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01003100 mbedtls_ssl_async_sign_t *sign = NULL;
3101 mbedtls_ssl_async_decrypt_t *decrypt = NULL;
Gilles Peskine12ab5d42018-04-24 12:32:04 +02003102 const char *r;
Gilles Peskine449bd832023-01-11 14:50:10 +01003103 for (r = opt.async_operations; *r; r++) {
3104 switch (*r) {
3105 case 'd':
3106 decrypt = ssl_async_decrypt;
3107 break;
3108 case 's':
3109 sign = ssl_async_sign;
3110 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01003111 }
3112 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003113 ssl_async_keys.inject_error = (opt.async_private_error < 0 ?
3114 -opt.async_private_error :
3115 opt.async_private_error);
Gilles Peskine535fb372021-01-13 18:59:46 +01003116 ssl_async_keys.f_rng = rng_get;
3117 ssl_async_keys.p_rng = &rng;
Gilles Peskine449bd832023-01-11 14:50:10 +01003118 mbedtls_ssl_conf_async_private_cb(&conf,
3119 sign,
3120 decrypt,
3121 ssl_async_resume,
3122 ssl_async_cancel,
3123 &ssl_async_keys);
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003124 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003125#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Ronald Crone68ab4f2022-10-05 12:46:29 +02003126#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +02003127
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02003128#if defined(SNI_OPTION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003129 if (opt.sni != NULL) {
3130 mbedtls_ssl_conf_sni(&conf, sni_callback, sni_info);
3131 mbedtls_ssl_conf_cert_cb(&conf, cert_callback);
Gilles Peskine166ce742018-04-30 10:30:49 +02003132#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003133 if (opt.async_private_delay2 >= 0) {
Gilles Peskinee2479892018-06-13 18:06:51 +02003134 sni_entry *cur;
Gilles Peskine449bd832023-01-11 14:50:10 +01003135 for (cur = sni_info; cur != NULL; cur = cur->next) {
3136 ret = ssl_async_set_key(&ssl_async_keys,
3137 cur->cert, cur->key, 1,
3138 opt.async_private_delay2);
3139 if (ret < 0) {
3140 mbedtls_printf(" Test error: ssl_async_set_key failed (%d)\n",
3141 ret);
Gilles Peskinee2479892018-06-13 18:06:51 +02003142 goto exit;
3143 }
3144 cur->key = NULL;
Gilles Peskine166ce742018-04-30 10:30:49 +02003145 }
Gilles Peskine166ce742018-04-30 10:30:49 +02003146 }
3147#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
3148 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01003149#endif
3150
Valerio Settid49cbc12023-04-05 18:21:48 +02003151#if defined(MBEDTLS_ECP_LIGHT)
Gilles Peskine449bd832023-01-11 14:50:10 +01003152 if (opt.curves != NULL &&
3153 strcmp(opt.curves, "default") != 0) {
3154 mbedtls_ssl_conf_groups(&conf, group_list);
Hanno Beckere6706e62017-05-15 16:05:15 +01003155 }
3156#endif
3157
Ronald Crone68ab4f2022-10-05 12:46:29 +02003158#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003159 if (opt.sig_algs != NULL) {
3160 mbedtls_ssl_conf_sig_algs(&conf, sig_alg_list);
3161 }
Ronald Cron20a8e632022-10-03 17:36:44 +02003162#endif
Hanno Becker11ceadd2021-08-10 13:36:41 +01003163
Ronald Cron73fe8df2022-10-05 14:31:43 +02003164#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003165
Gilles Peskine449bd832023-01-11 14:50:10 +01003166 if (strlen(opt.psk) != 0 && strlen(opt.psk_identity) != 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003167#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003168 if (opt.psk_opaque != 0) {
Hanno Becker1d911cd2018-11-15 13:06:09 +00003169 /* The algorithm has already been determined earlier. */
Gilles Peskine449bd832023-01-11 14:50:10 +01003170 status = psa_setup_psk_key_slot(&psk_slot, alg, psk, psk_len);
3171 if (status != PSA_SUCCESS) {
3172 fprintf(stderr, "SETUP FAIL\n");
Hanno Becker1d911cd2018-11-15 13:06:09 +00003173 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
3174 goto exit;
3175 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003176 if ((ret = mbedtls_ssl_conf_psk_opaque(&conf, psk_slot,
3177 (const unsigned char *) opt.psk_identity,
3178 strlen(opt.psk_identity))) != 0) {
3179 mbedtls_printf(" failed\n ! mbedtls_ssl_conf_psk_opaque returned %d\n\n",
3180 ret);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003181 goto exit;
3182 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003183 } else
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003184#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine449bd832023-01-11 14:50:10 +01003185 if (psk_len > 0) {
3186 ret = mbedtls_ssl_conf_psk(&conf, psk, psk_len,
3187 (const unsigned char *) opt.psk_identity,
3188 strlen(opt.psk_identity));
3189 if (ret != 0) {
3190 mbedtls_printf(" failed\n mbedtls_ssl_conf_psk returned -0x%04X\n\n",
3191 (unsigned int) -ret);
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01003192 goto exit;
3193 }
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02003194 }
3195 }
3196
Gilles Peskine449bd832023-01-11 14:50:10 +01003197 if (opt.psk_list != NULL) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003198#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003199 if (opt.psk_list_opaque != 0) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003200 psk_entry *cur_psk;
Gilles Peskine449bd832023-01-11 14:50:10 +01003201 for (cur_psk = psk_info; cur_psk != NULL; cur_psk = cur_psk->next) {
Hanno Becker1d911cd2018-11-15 13:06:09 +00003202
Gilles Peskine449bd832023-01-11 14:50:10 +01003203 status = psa_setup_psk_key_slot(&cur_psk->slot, alg,
3204 cur_psk->key,
3205 cur_psk->key_len);
3206 if (status != PSA_SUCCESS) {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003207 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
3208 goto exit;
3209 }
3210 }
3211 }
3212#endif /* MBEDTLS_USE_PSA_CRYPTO */
Hanno Becker1d911cd2018-11-15 13:06:09 +00003213
Gilles Peskine449bd832023-01-11 14:50:10 +01003214 mbedtls_ssl_conf_psk_cb(&conf, psk_callback, psk_info);
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01003215 }
Paul Bakkered27a042013-04-18 22:46:23 +02003216#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003217
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003218#if defined(MBEDTLS_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +00003219 /*
3220 * Use different group than default DHM group
3221 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003222#if defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003223 if (opt.dhm_file != NULL) {
3224 ret = mbedtls_ssl_conf_dh_param_ctx(&conf, &dhm);
3225 }
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02003226#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01003227 if (ret != 0) {
3228 mbedtls_printf(" failed\n mbedtls_ssl_conf_dh_param returned -0x%04X\n\n",
3229 (unsigned int) -ret);
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02003230 goto exit;
3231 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003232#endif
3233
Gilles Peskine449bd832023-01-11 14:50:10 +01003234 if (opt.min_version != DFL_MIN_VERSION) {
3235 mbedtls_ssl_conf_min_tls_version(&conf, opt.min_version);
3236 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00003237
Gilles Peskine449bd832023-01-11 14:50:10 +01003238 if (opt.max_version != DFL_MIN_VERSION) {
3239 mbedtls_ssl_conf_max_tls_version(&conf, opt.max_version);
3240 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02003241
Gilles Peskine449bd832023-01-11 14:50:10 +01003242 if ((ret = mbedtls_ssl_setup(&ssl, &conf)) != 0) {
3243 mbedtls_printf(" failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", (unsigned int) -ret);
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02003244 goto exit;
3245 }
3246
Gilles Peskine449bd832023-01-11 14:50:10 +01003247 if (opt.eap_tls != 0) {
3248 mbedtls_ssl_set_export_keys_cb(&ssl, eap_tls_key_derivation,
3249 &eap_tls_keying);
3250 } else if (opt.nss_keylog != 0) {
3251 mbedtls_ssl_set_export_keys_cb(&ssl,
3252 nss_keylog_export,
3253 NULL);
Hanno Becker7e6c1782021-06-08 09:24:55 +01003254 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003255#if defined(MBEDTLS_SSL_DTLS_SRTP)
3256 else if (opt.use_srtp != 0) {
3257 mbedtls_ssl_set_export_keys_cb(&ssl, dtls_srtp_key_derivation,
3258 &dtls_srtp_keying);
Hanno Becker7e6c1782021-06-08 09:24:55 +01003259 }
3260#endif /* MBEDTLS_SSL_DTLS_SRTP */
Hanno Becker7e6c1782021-06-08 09:24:55 +01003261
Hanno Beckerdcc94e62019-07-03 17:05:43 +01003262 io_ctx.ssl = &ssl;
3263 io_ctx.net = &client_fd;
Gilles Peskine449bd832023-01-11 14:50:10 +01003264 mbedtls_ssl_set_bio(&ssl, &io_ctx, send_cb, recv_cb,
3265 opt.nbio == 0 ? recv_timeout_cb : NULL);
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02003266
Hanno Beckera0e20d02019-05-15 14:03:01 +01003267#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01003268 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
3269 if ((ret = mbedtls_ssl_set_cid(&ssl, opt.cid_enabled,
3270 cid, cid_len)) != 0) {
3271 mbedtls_printf(" failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
3272 ret);
Hanno Beckera7d25422019-04-09 17:28:10 +01003273 goto exit;
3274 }
3275 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003276#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01003277
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02003278#if defined(MBEDTLS_SSL_PROTO_DTLS)
Gilles Peskine449bd832023-01-11 14:50:10 +01003279 if (opt.dtls_mtu != DFL_DTLS_MTU) {
3280 mbedtls_ssl_set_mtu(&ssl, opt.dtls_mtu);
3281 }
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02003282#endif
3283
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003284#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003285 mbedtls_ssl_set_timer_cb(&ssl, &timer, mbedtls_timing_set_delay,
3286 mbedtls_timing_get_delay);
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02003287#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02003288
Gilles Peskine449bd832023-01-11 14:50:10 +01003289 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003290
Jerry Yu2a572cf2021-08-06 11:21:08 +08003291 /*
3292 * 3. Setup the listening TCP socket
3293 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003294 mbedtls_printf(" . Bind on %s://%s:%s/ ...",
3295 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
3296 opt.server_addr ? opt.server_addr : "*",
3297 opt.server_port);
3298 fflush(stdout);
Jerry Yu2a572cf2021-08-06 11:21:08 +08003299
Gilles Peskine449bd832023-01-11 14:50:10 +01003300 if ((ret = mbedtls_net_bind(&listen_fd, opt.server_addr, opt.server_port,
3301 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
3302 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP)) != 0) {
3303 mbedtls_printf(" failed\n ! mbedtls_net_bind returned -0x%x\n\n", (unsigned int) -ret);
Jerry Yu2a572cf2021-08-06 11:21:08 +08003304 goto exit;
3305 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003306 mbedtls_printf(" ok\n");
Jerry Yu2a572cf2021-08-06 11:21:08 +08003307
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003308reset:
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02003309#if !defined(_WIN32)
Gilles Peskine449bd832023-01-11 14:50:10 +01003310 if (received_sigterm) {
3311 mbedtls_printf(" interrupted by SIGTERM (not in net_accept())\n");
3312 if (ret == MBEDTLS_ERR_NET_INVALID_CONTEXT) {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003313 ret = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01003314 }
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003315
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02003316 goto exit;
3317 }
3318#endif
3319
Gilles Peskine449bd832023-01-11 14:50:10 +01003320 if (ret == MBEDTLS_ERR_SSL_CLIENT_RECONNECT) {
3321 mbedtls_printf(" ! Client initiated reconnection from same port\n");
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02003322 goto handshake;
3323 }
3324
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003325#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +01003326 if (ret != 0) {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003327 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +01003328 mbedtls_strerror(ret, error_buf, 100);
3329 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003330 }
3331#endif
3332
Gilles Peskine449bd832023-01-11 14:50:10 +01003333 mbedtls_net_free(&client_fd);
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01003334
Gilles Peskine449bd832023-01-11 14:50:10 +01003335 mbedtls_ssl_session_reset(&ssl);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003336
3337 /*
3338 * 3. Wait until a client connects
3339 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003340 mbedtls_printf(" . Waiting for a remote connection ...");
3341 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003342
Gilles Peskine449bd832023-01-11 14:50:10 +01003343 if ((ret = mbedtls_net_accept(&listen_fd, &client_fd,
3344 client_ip, sizeof(client_ip), &cliip_len)) != 0) {
Paul Bakkerc1283d32014-08-18 11:05:51 +02003345#if !defined(_WIN32)
Gilles Peskine449bd832023-01-11 14:50:10 +01003346 if (received_sigterm) {
3347 mbedtls_printf(" interrupted by SIGTERM (in net_accept())\n");
3348 if (ret == MBEDTLS_ERR_NET_ACCEPT_FAILED) {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003349 ret = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +01003350 }
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01003351
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02003352 goto exit;
3353 }
Paul Bakkerc1283d32014-08-18 11:05:51 +02003354#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02003355
Gilles Peskine449bd832023-01-11 14:50:10 +01003356 mbedtls_printf(" failed\n ! mbedtls_net_accept returned -0x%x\n\n", (unsigned int) -ret);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003357 goto exit;
3358 }
3359
Gilles Peskine449bd832023-01-11 14:50:10 +01003360 if (opt.nbio > 0) {
3361 ret = mbedtls_net_set_nonblock(&client_fd);
3362 } else {
3363 ret = mbedtls_net_set_block(&client_fd);
3364 }
3365 if (ret != 0) {
3366 mbedtls_printf(" failed\n ! net_set_(non)block() returned -0x%x\n\n", (unsigned int) -ret);
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01003367 goto exit;
3368 }
3369
Gilles Peskine449bd832023-01-11 14:50:10 +01003370 mbedtls_ssl_conf_read_timeout(&conf, opt.read_timeout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003371
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003372#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Gilles Peskine449bd832023-01-11 14:50:10 +01003373 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
3374 if ((ret = mbedtls_ssl_set_client_transport_id(&ssl,
3375 client_ip, cliip_len)) != 0) {
3376 mbedtls_printf(" failed\n ! mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n",
3377 (unsigned int) -ret);
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02003378 goto exit;
3379 }
3380 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003381#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02003382
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02003383#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003384 if (opt.ecjpake_pw != DFL_ECJPAKE_PW) {
Valerio Setti77e83152022-11-29 17:17:11 +01003385#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003386 if (opt.ecjpake_pw_opaque != DFL_ECJPAKE_PW_OPAQUE) {
Valerio Settid572a822022-11-28 18:27:51 +01003387 psa_key_attributes_t attributes = PSA_KEY_ATTRIBUTES_INIT;
3388
Gilles Peskine449bd832023-01-11 14:50:10 +01003389 psa_set_key_usage_flags(&attributes, PSA_KEY_USAGE_DERIVE);
3390 psa_set_key_algorithm(&attributes, PSA_ALG_JPAKE);
3391 psa_set_key_type(&attributes, PSA_KEY_TYPE_PASSWORD);
Valerio Settid572a822022-11-28 18:27:51 +01003392
Gilles Peskine449bd832023-01-11 14:50:10 +01003393 status = psa_import_key(&attributes,
3394 (const unsigned char *) opt.ecjpake_pw,
3395 strlen(opt.ecjpake_pw),
3396 &ecjpake_pw_slot);
3397 if (status != PSA_SUCCESS) {
3398 mbedtls_printf(" failed\n ! psa_import_key returned %d\n\n",
3399 status);
Valerio Settid572a822022-11-28 18:27:51 +01003400 goto exit;
3401 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003402 if ((ret = mbedtls_ssl_set_hs_ecjpake_password_opaque(&ssl,
3403 ecjpake_pw_slot)) != 0) {
3404 mbedtls_printf(
3405 " failed\n ! mbedtls_ssl_set_hs_ecjpake_password_opaque returned %d\n\n",
3406 ret);
Valerio Settid572a822022-11-28 18:27:51 +01003407 goto exit;
3408 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003409 mbedtls_printf("using opaque password\n");
3410 } else
Valerio Setti77e83152022-11-29 17:17:11 +01003411#endif /* MBEDTLS_USE_PSA_CRYPTO */
Valerio Settid572a822022-11-28 18:27:51 +01003412 {
Gilles Peskine449bd832023-01-11 14:50:10 +01003413 if ((ret = mbedtls_ssl_set_hs_ecjpake_password(&ssl,
3414 (const unsigned char *) opt.ecjpake_pw,
3415 strlen(opt.ecjpake_pw))) != 0) {
3416 mbedtls_printf(" failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
3417 ret);
Valerio Settid572a822022-11-28 18:27:51 +01003418 goto exit;
3419 }
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02003420 }
3421 }
Valerio Setti77e83152022-11-29 17:17:11 +01003422#endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02003423
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003424#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
Andrzej Kurekd0786f52022-10-13 09:06:48 -04003425#if defined(MBEDTLS_KEY_EXCHANGE_CERT_REQ_ALLOWED_ENABLED)
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003426 /* exercise setting DN hints for server certificate request
3427 * (Intended for use where the client cert expected has been signed by
3428 * a specific CA which is an intermediate in a CA chain, not the root)
3429 * (Additionally, the CA choice would typically be influenced by SNI
3430 * if being set per-handshake using mbedtls_ssl_set_hs_dn_hints()) */
Gilles Peskine449bd832023-01-11 14:50:10 +01003431 if (opt.cert_req_dn_hint == 3 && key_cert_init2) {
3432 mbedtls_ssl_set_hs_dn_hints(&ssl, &srvcert2);
3433 }
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003434#endif
3435#endif
Glenn Straussbd10c4e2022-06-25 03:15:48 -04003436
Gilles Peskine449bd832023-01-11 14:50:10 +01003437 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003438
3439 /*
3440 * 4. Handshake
3441 */
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02003442handshake:
Gilles Peskine449bd832023-01-11 14:50:10 +01003443 mbedtls_printf(" . Performing the SSL/TLS handshake...");
3444 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003445
Gilles Peskine449bd832023-01-11 14:50:10 +01003446 while ((ret = mbedtls_ssl_handshake(&ssl)) != 0) {
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003447#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003448 if (ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS &&
3449 ssl_async_keys.inject_error == SSL_ASYNC_INJECT_ERROR_CANCEL) {
3450 mbedtls_printf(" cancelling on injected error\n");
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003451 break;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003452 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003453#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskineb44692f2018-04-24 12:18:19 +02003454
Gilles Peskine449bd832023-01-11 14:50:10 +01003455 if (!mbedtls_status_is_ssl_in_progress(ret)) {
Hanno Becker16970d22017-10-10 15:56:37 +01003456 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01003457 }
Hanno Becker16970d22017-10-10 15:56:37 +01003458
3459 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003460 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003461#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003462 ret = idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003463#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003464 ret = idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003465#endif
Gilles Peskine449bd832023-01-11 14:50:10 +01003466 if (ret != 0) {
Hanno Beckeradfa64f2018-03-15 11:35:07 +00003467 goto reset;
Gilles Peskine449bd832023-01-11 14:50:10 +01003468 }
Hanno Becker16970d22017-10-10 15:56:37 +01003469 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003470 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003471
Gilles Peskine449bd832023-01-11 14:50:10 +01003472 if (ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED) {
3473 mbedtls_printf(" hello verification requested\n");
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003474 ret = 0;
3475 goto reset;
Gilles Peskine449bd832023-01-11 14:50:10 +01003476 } else if (ret != 0) {
3477 mbedtls_printf(" failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
3478 (unsigned int) -ret);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003479
Ronald Crone68ab4f2022-10-05 12:46:29 +02003480#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01003481 if (ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED) {
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003482 char vrfy_buf[512];
Gilles Peskine449bd832023-01-11 14:50:10 +01003483 flags = mbedtls_ssl_get_verify_result(&ssl);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003484
Gilles Peskine449bd832023-01-11 14:50:10 +01003485 x509_crt_verify_info(vrfy_buf, sizeof(vrfy_buf), " ! ", flags);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003486
Gilles Peskine449bd832023-01-11 14:50:10 +01003487 mbedtls_printf("%s\n", vrfy_buf);
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003488 }
3489#endif
3490
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003491#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01003492 if (opt.async_private_error < 0) {
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003493 /* Injected error only the first time round, to test reset */
3494 ssl_async_keys.inject_error = SSL_ASYNC_INJECT_ERROR_NONE;
Gilles Peskine449bd832023-01-11 14:50:10 +01003495 }
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003496#endif
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003497 goto reset;
Gilles Peskine449bd832023-01-11 14:50:10 +01003498 } else { /* ret == 0 */
3499 int suite_id = mbedtls_ssl_get_ciphersuite_id_from_ssl(&ssl);
Glenn Strauss6eef5632022-01-23 08:37:02 -05003500 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Gilles Peskine449bd832023-01-11 14:50:10 +01003501 ciphersuite_info = mbedtls_ssl_ciphersuite_from_id(suite_id);
Glenn Strauss6eef5632022-01-23 08:37:02 -05003502
Gilles Peskine449bd832023-01-11 14:50:10 +01003503 mbedtls_printf(" ok\n [ Protocol is %s ]\n"
3504 " [ Ciphersuite is %s ]\n"
3505 " [ Key size is %u ]\n",
3506 mbedtls_ssl_get_version(&ssl),
3507 mbedtls_ssl_ciphersuite_get_name(ciphersuite_info),
3508 (unsigned int)
3509 mbedtls_ssl_ciphersuite_get_cipher_key_bitlen(ciphersuite_info));
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003510 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003511
Gilles Peskine449bd832023-01-11 14:50:10 +01003512 if ((ret = mbedtls_ssl_get_record_expansion(&ssl)) >= 0) {
3513 mbedtls_printf(" [ Record expansion is %d ]\n", ret);
3514 } else {
3515 mbedtls_printf(" [ Record expansion is unknown ]\n");
3516 }
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02003517
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02003518#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Gilles Peskine449bd832023-01-11 14:50:10 +01003519 mbedtls_printf(" [ Maximum incoming record payload length is %u ]\n",
3520 (unsigned int) mbedtls_ssl_get_max_in_record_payload(&ssl));
3521 mbedtls_printf(" [ Maximum outgoing record payload length is %u ]\n",
3522 (unsigned int) mbedtls_ssl_get_max_out_record_payload(&ssl));
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02003523#endif
3524
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003525#if defined(MBEDTLS_SSL_ALPN)
Gilles Peskine449bd832023-01-11 14:50:10 +01003526 if (opt.alpn_string != NULL) {
3527 const char *alp = mbedtls_ssl_get_alpn_protocol(&ssl);
3528 mbedtls_printf(" [ Application Layer Protocol is %s ]\n",
3529 alp ? alp : "(none)");
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02003530 }
3531#endif
3532
Ronald Crone68ab4f2022-10-05 12:46:29 +02003533#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003534 /*
Ron Eldor2a47be52017-06-20 15:23:23 +03003535 * 5. Verify the client certificate
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003536 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003537 mbedtls_printf(" . Verifying peer X.509 certificate...");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003538
Gilles Peskine449bd832023-01-11 14:50:10 +01003539 if ((flags = mbedtls_ssl_get_verify_result(&ssl)) != 0) {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003540 char vrfy_buf[512];
3541
Gilles Peskine449bd832023-01-11 14:50:10 +01003542 mbedtls_printf(" failed\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003543
Gilles Peskine449bd832023-01-11 14:50:10 +01003544 x509_crt_verify_info(vrfy_buf, sizeof(vrfy_buf), " ! ", flags);
3545 mbedtls_printf("%s\n", vrfy_buf);
3546 } else {
3547 mbedtls_printf(" ok\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003548 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003549
Hanno Becker612a2f12020-10-09 09:19:39 +01003550#if !defined(MBEDTLS_X509_REMOVE_INFO)
Gilles Peskine449bd832023-01-11 14:50:10 +01003551 if (mbedtls_ssl_get_peer_cert(&ssl) != NULL) {
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02003552 char crt_buf[512];
3553
Gilles Peskine449bd832023-01-11 14:50:10 +01003554 mbedtls_printf(" . Peer certificate information ...\n");
3555 mbedtls_x509_crt_info(crt_buf, sizeof(crt_buf), " ",
3556 mbedtls_ssl_get_peer_cert(&ssl));
3557 mbedtls_printf("%s\n", crt_buf);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003558 }
Hanno Becker612a2f12020-10-09 09:19:39 +01003559#endif /* MBEDTLS_X509_REMOVE_INFO */
Ronald Crone68ab4f2022-10-05 12:46:29 +02003560#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003561
Gilles Peskine449bd832023-01-11 14:50:10 +01003562 if (opt.eap_tls != 0) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003563 size_t j = 0;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003564
Gilles Peskine449bd832023-01-11 14:50:10 +01003565 if ((ret = mbedtls_ssl_tls_prf(eap_tls_keying.tls_prf_type,
3566 eap_tls_keying.master_secret,
3567 sizeof(eap_tls_keying.master_secret),
3568 eap_tls_label,
3569 eap_tls_keying.randbytes,
3570 sizeof(eap_tls_keying.randbytes),
3571 eap_tls_keymaterial,
3572 sizeof(eap_tls_keymaterial)))
3573 != 0) {
3574 mbedtls_printf(" failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3575 (unsigned int) -ret);
Ron Eldor65d8c262019-06-04 13:05:36 +03003576 goto reset;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003577 }
3578
Gilles Peskine449bd832023-01-11 14:50:10 +01003579 mbedtls_printf(" EAP-TLS key material is:");
3580 for (j = 0; j < sizeof(eap_tls_keymaterial); j++) {
3581 if (j % 8 == 0) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003582 mbedtls_printf("\n ");
Gilles Peskine449bd832023-01-11 14:50:10 +01003583 }
3584 mbedtls_printf("%02x ", eap_tls_keymaterial[j]);
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003585 }
3586 mbedtls_printf("\n");
3587
Gilles Peskine449bd832023-01-11 14:50:10 +01003588 if ((ret = mbedtls_ssl_tls_prf(eap_tls_keying.tls_prf_type, NULL, 0,
3589 eap_tls_label,
3590 eap_tls_keying.randbytes,
3591 sizeof(eap_tls_keying.randbytes),
3592 eap_tls_iv,
3593 sizeof(eap_tls_iv))) != 0) {
3594 mbedtls_printf(" failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3595 (unsigned int) -ret);
3596 goto reset;
3597 }
Ron Eldor51d3ab52019-05-12 14:54:30 +03003598
Gilles Peskine449bd832023-01-11 14:50:10 +01003599 mbedtls_printf(" EAP-TLS IV is:");
3600 for (j = 0; j < sizeof(eap_tls_iv); j++) {
3601 if (j % 8 == 0) {
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003602 mbedtls_printf("\n ");
Gilles Peskine449bd832023-01-11 14:50:10 +01003603 }
3604 mbedtls_printf("%02x ", eap_tls_iv[j]);
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003605 }
3606 mbedtls_printf("\n");
3607 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003608
Gilles Peskine449bd832023-01-11 14:50:10 +01003609#if defined(MBEDTLS_SSL_DTLS_SRTP)
3610 else if (opt.use_srtp != 0) {
Ron Eldor65b56ef2019-09-26 16:40:48 +03003611 size_t j = 0;
Johan Pascal2258a4f2020-10-28 13:53:09 +01003612 mbedtls_dtls_srtp_info dtls_srtp_negotiation_result;
Gilles Peskine449bd832023-01-11 14:50:10 +01003613 mbedtls_ssl_get_dtls_srtp_negotiation_result(&ssl, &dtls_srtp_negotiation_result);
Ron Eldor65b56ef2019-09-26 16:40:48 +03003614
Gilles Peskine449bd832023-01-11 14:50:10 +01003615 if (dtls_srtp_negotiation_result.chosen_dtls_srtp_profile
3616 == MBEDTLS_TLS_SRTP_UNSET) {
3617 mbedtls_printf(" Unable to negotiate "
3618 "the use of DTLS-SRTP\n");
3619 } else {
3620 if ((ret = mbedtls_ssl_tls_prf(dtls_srtp_keying.tls_prf_type,
3621 dtls_srtp_keying.master_secret,
3622 sizeof(dtls_srtp_keying.master_secret),
3623 dtls_srtp_label,
3624 dtls_srtp_keying.randbytes,
3625 sizeof(dtls_srtp_keying.randbytes),
3626 dtls_srtp_key_material,
3627 sizeof(dtls_srtp_key_material)))
3628 != 0) {
3629 mbedtls_printf(" failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3630 (unsigned int) -ret);
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003631 goto exit;
3632 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003633
Gilles Peskine449bd832023-01-11 14:50:10 +01003634 mbedtls_printf(" DTLS-SRTP key material is:");
3635 for (j = 0; j < sizeof(dtls_srtp_key_material); j++) {
3636 if (j % 8 == 0) {
3637 mbedtls_printf("\n ");
3638 }
3639 mbedtls_printf("%02x ", dtls_srtp_key_material[j]);
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003640 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003641 mbedtls_printf("\n");
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003642
Johan Pascal9bc50b02020-09-24 12:01:13 +02003643 /* produce a less readable output used to perform automatic checks
3644 * - compare client and server output
3645 * - interop test with openssl which client produces this kind of output
3646 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003647 mbedtls_printf(" Keying material: ");
3648 for (j = 0; j < sizeof(dtls_srtp_key_material); j++) {
3649 mbedtls_printf("%02X", dtls_srtp_key_material[j]);
Johan Pascal9bc50b02020-09-24 12:01:13 +02003650 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003651 mbedtls_printf("\n");
Johan Pascal20c7db32020-10-26 22:45:58 +01003652
Gilles Peskine449bd832023-01-11 14:50:10 +01003653 if (dtls_srtp_negotiation_result.mki_len > 0) {
3654 mbedtls_printf(" DTLS-SRTP mki value: ");
3655 for (j = 0; j < dtls_srtp_negotiation_result.mki_len; j++) {
3656 mbedtls_printf("%02X", dtls_srtp_negotiation_result.mki_value[j]);
Johan Pascal20c7db32020-10-26 22:45:58 +01003657 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003658 } else {
3659 mbedtls_printf(" DTLS-SRTP no mki value negotiated");
Johan Pascal20c7db32020-10-26 22:45:58 +01003660 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003661 mbedtls_printf("\n");
Johan Pascal20c7db32020-10-26 22:45:58 +01003662
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003663 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003664 }
3665#endif /* MBEDTLS_SSL_DTLS_SRTP */
Hanno Beckera7d25422019-04-09 17:28:10 +01003666
Hanno Beckera0e20d02019-05-15 14:03:01 +01003667#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01003668 ret = report_cid_usage(&ssl, "initial handshake");
3669 if (ret != 0) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003670 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01003671 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003672
Gilles Peskine449bd832023-01-11 14:50:10 +01003673 if (opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM) {
3674 if ((ret = mbedtls_ssl_set_cid(&ssl, opt.cid_enabled_renego,
3675 cid_renego, cid_renego_len)) != 0) {
3676 mbedtls_printf(" failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
3677 ret);
Hanno Beckera7d25422019-04-09 17:28:10 +01003678 goto exit;
3679 }
Hanno Beckera7d25422019-04-09 17:28:10 +01003680 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003681#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01003682
Piotr Nowicki0937ed22019-11-26 16:32:40 +01003683#if defined(MBEDTLS_MEMORY_DEBUG)
Gilles Peskine449bd832023-01-11 14:50:10 +01003684 mbedtls_memory_buffer_alloc_cur_get(&current_heap_memory, &heap_blocks);
3685 mbedtls_memory_buffer_alloc_max_get(&peak_heap_memory, &heap_blocks);
3686 mbedtls_printf("Heap memory usage after handshake: %lu bytes. Peak memory usage was %lu\n",
3687 (unsigned long) current_heap_memory, (unsigned long) peak_heap_memory);
Piotr Nowicki0937ed22019-11-26 16:32:40 +01003688#endif /* MBEDTLS_MEMORY_DEBUG */
3689
Gilles Peskine449bd832023-01-11 14:50:10 +01003690 if (opt.exchanges == 0) {
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02003691 goto close_notify;
Gilles Peskine449bd832023-01-11 14:50:10 +01003692 }
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02003693
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003694 exchanges_left = opt.exchanges;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003695data_exchange:
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003696 /*
3697 * 6. Read the HTTP Request
3698 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003699 mbedtls_printf(" < Read from client:");
3700 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003701
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003702 /*
3703 * TLS and DTLS need different reading styles (stream vs datagram)
3704 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003705 if (opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM) {
3706 do {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003707 int terminated = 0;
Gilles Peskine99a732b2022-04-06 23:34:36 +02003708 len = opt.buffer_size;
Gilles Peskine449bd832023-01-11 14:50:10 +01003709 memset(buf, 0, opt.buffer_size);
3710 ret = mbedtls_ssl_read(&ssl, buf, len);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003711
Gilles Peskine449bd832023-01-11 14:50:10 +01003712 if (mbedtls_status_is_ssl_in_progress(ret)) {
3713 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003714#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003715 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003716#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003717 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003718#endif
3719 }
3720
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003721 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01003722 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003723
Gilles Peskine449bd832023-01-11 14:50:10 +01003724 if (ret <= 0) {
3725 switch (ret) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003726 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Gilles Peskine449bd832023-01-11 14:50:10 +01003727 mbedtls_printf(" connection was closed gracefully\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003728 goto close_notify;
3729
3730 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003731 case MBEDTLS_ERR_NET_CONN_RESET:
Gilles Peskine449bd832023-01-11 14:50:10 +01003732 mbedtls_printf(" connection was reset by peer\n");
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003733 ret = MBEDTLS_ERR_NET_CONN_RESET;
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003734 goto reset;
3735
3736 default:
Gilles Peskine449bd832023-01-11 14:50:10 +01003737 mbedtls_printf(" mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003738 goto reset;
3739 }
3740 }
3741
Gilles Peskine449bd832023-01-11 14:50:10 +01003742 if (mbedtls_ssl_get_bytes_avail(&ssl) == 0) {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003743 len = ret;
3744 buf[len] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003745 mbedtls_printf(" %d bytes read\n\n%s\n", len, (char *) buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003746
3747 /* End of message should be detected according to the syntax of the
3748 * application protocol (eg HTTP), just use a dummy test here. */
Gilles Peskine449bd832023-01-11 14:50:10 +01003749 if (buf[len - 1] == '\n') {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003750 terminated = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01003751 }
3752 } else {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003753 int extra_len, ori_len;
3754 unsigned char *larger_buf;
3755
3756 ori_len = ret;
Gilles Peskine449bd832023-01-11 14:50:10 +01003757 extra_len = (int) mbedtls_ssl_get_bytes_avail(&ssl);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003758
Gilles Peskine449bd832023-01-11 14:50:10 +01003759 larger_buf = mbedtls_calloc(1, ori_len + extra_len + 1);
3760 if (larger_buf == NULL) {
3761 mbedtls_printf(" ! memory allocation failed\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003762 ret = 1;
3763 goto reset;
3764 }
3765
Gilles Peskine449bd832023-01-11 14:50:10 +01003766 memset(larger_buf, 0, ori_len + extra_len);
3767 memcpy(larger_buf, buf, ori_len);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003768
3769 /* This read should never fail and get the whole cached data */
Gilles Peskine449bd832023-01-11 14:50:10 +01003770 ret = mbedtls_ssl_read(&ssl, larger_buf + ori_len, extra_len);
3771 if (ret != extra_len ||
3772 mbedtls_ssl_get_bytes_avail(&ssl) != 0) {
3773 mbedtls_printf(" ! mbedtls_ssl_read failed on cached data\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003774 ret = 1;
3775 goto reset;
3776 }
3777
3778 larger_buf[ori_len + extra_len] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003779 mbedtls_printf(" %d bytes read (%d + %d)\n\n%s\n",
3780 ori_len + extra_len, ori_len, extra_len,
3781 (char *) larger_buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003782
3783 /* End of message should be detected according to the syntax of the
3784 * application protocol (eg HTTP), just use a dummy test here. */
Gilles Peskine449bd832023-01-11 14:50:10 +01003785 if (larger_buf[ori_len + extra_len - 1] == '\n') {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003786 terminated = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01003787 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003788
Gilles Peskine449bd832023-01-11 14:50:10 +01003789 mbedtls_free(larger_buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003790 }
3791
Gilles Peskine449bd832023-01-11 14:50:10 +01003792 if (terminated) {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003793 ret = 0;
3794 break;
3795 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003796 } while (1);
3797 } else { /* Not stream, so datagram */
Gilles Peskine99a732b2022-04-06 23:34:36 +02003798 len = opt.buffer_size;
Gilles Peskine449bd832023-01-11 14:50:10 +01003799 memset(buf, 0, opt.buffer_size);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003800
Gilles Peskine449bd832023-01-11 14:50:10 +01003801 do {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003802 /* Without the call to `mbedtls_ssl_check_pending`, it might
3803 * happen that the client sends application data in the same
3804 * datagram as the Finished message concluding the handshake.
3805 * In this case, the application data would be ready to be
3806 * processed while the underlying transport wouldn't signal
3807 * any further incoming data.
3808 *
3809 * See the test 'Event-driven I/O: session-id resume, UDP packing'
3810 * in tests/ssl-opt.sh.
3811 */
3812
3813 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003814 if (mbedtls_ssl_check_pending(&ssl) == 0 &&
3815 opt.event == 1 /* level triggered IO */) {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003816#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003817 idle(&client_fd, &timer, MBEDTLS_ERR_SSL_WANT_READ);
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003818#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003819 idle(&client_fd, MBEDTLS_ERR_SSL_WANT_READ);
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003820#endif
3821 }
3822
Gilles Peskine449bd832023-01-11 14:50:10 +01003823 ret = mbedtls_ssl_read(&ssl, buf, len);
Hanno Becker16970d22017-10-10 15:56:37 +01003824
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003825 /* Note that even if `mbedtls_ssl_check_pending` returns true,
3826 * it can happen that the subsequent call to `mbedtls_ssl_read`
3827 * returns `MBEDTLS_ERR_SSL_WANT_READ`, because the pending messages
3828 * might be discarded (e.g. because they are retransmissions). */
Gilles Peskine449bd832023-01-11 14:50:10 +01003829 } while (mbedtls_status_is_ssl_in_progress(ret));
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003830
Gilles Peskine449bd832023-01-11 14:50:10 +01003831 if (ret <= 0) {
3832 switch (ret) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003833 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
Gilles Peskine449bd832023-01-11 14:50:10 +01003834 mbedtls_printf(" connection was closed gracefully\n");
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003835 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003836 goto close_notify;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003837
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003838 default:
Gilles Peskine449bd832023-01-11 14:50:10 +01003839 mbedtls_printf(" mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret);
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003840 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003841 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003842 }
3843
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003844 len = ret;
3845 buf[len] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003846 mbedtls_printf(" %d bytes read\n\n%s", len, (char *) buf);
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003847 ret = 0;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003848 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003849
3850 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003851 * 7a. Request renegotiation while client is waiting for input from us.
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02003852 * (only on the first exchange, to be able to test retransmission)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003853 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003854#if defined(MBEDTLS_SSL_RENEGOTIATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003855 if (opt.renegotiate && exchanges_left == opt.exchanges) {
3856 mbedtls_printf(" . Requestion renegotiation...");
3857 fflush(stdout);
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003858
Gilles Peskine449bd832023-01-11 14:50:10 +01003859 while ((ret = mbedtls_ssl_renegotiate(&ssl)) != 0) {
3860 if (!mbedtls_status_is_ssl_in_progress(ret)) {
3861 mbedtls_printf(" failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret);
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003862 goto reset;
3863 }
Hanno Becker16970d22017-10-10 15:56:37 +01003864
3865 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003866 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003867#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003868 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003869#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003870 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003871#endif
3872 }
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003873 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003874
Gilles Peskine449bd832023-01-11 14:50:10 +01003875 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003876 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003877#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003878
Hanno Beckera0e20d02019-05-15 14:03:01 +01003879#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Gilles Peskine449bd832023-01-11 14:50:10 +01003880 ret = report_cid_usage(&ssl, "after renegotiation");
3881 if (ret != 0) {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003882 goto exit;
Gilles Peskine449bd832023-01-11 14:50:10 +01003883 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003884#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003885
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003886 /*
3887 * 7. Write the 200 Response
3888 */
Gilles Peskine449bd832023-01-11 14:50:10 +01003889 mbedtls_printf(" > Write to client:");
3890 fflush(stdout);
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003891
Gilles Peskine8bb96d92022-04-06 23:31:05 +02003892 /* If the format of the response changes, make sure there is enough
3893 * room in buf (buf_content_size calculation above). */
Gilles Peskine449bd832023-01-11 14:50:10 +01003894 len = sprintf((char *) buf, HTTP_RESPONSE,
3895 mbedtls_ssl_get_ciphersuite(&ssl));
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003896
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003897 /* Add padding to the response to reach opt.response_size in length */
Gilles Peskine449bd832023-01-11 14:50:10 +01003898 if (opt.response_size != DFL_RESPONSE_SIZE &&
3899 len < opt.response_size) {
3900 memset(buf + len, 'B', opt.response_size - len);
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003901 len += opt.response_size - len;
3902 }
3903
3904 /* Truncate if response size is smaller than the "natural" size */
Gilles Peskine449bd832023-01-11 14:50:10 +01003905 if (opt.response_size != DFL_RESPONSE_SIZE &&
3906 len > opt.response_size) {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003907 len = opt.response_size;
3908
3909 /* Still end with \r\n unless that's really not possible */
Gilles Peskine449bd832023-01-11 14:50:10 +01003910 if (len >= 2) {
3911 buf[len - 2] = '\r';
3912 }
3913 if (len >= 1) {
3914 buf[len - 1] = '\n';
3915 }
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003916 }
3917
Gilles Peskine449bd832023-01-11 14:50:10 +01003918 if (opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM) {
3919 for (written = 0, frags = 0; written < len; written += ret, frags++) {
3920 while ((ret = mbedtls_ssl_write(&ssl, buf + written, len - written))
3921 <= 0) {
3922 if (ret == MBEDTLS_ERR_NET_CONN_RESET) {
3923 mbedtls_printf(" failed\n ! peer closed the connection\n\n");
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003924 goto reset;
3925 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003926
Gilles Peskine449bd832023-01-11 14:50:10 +01003927 if (!mbedtls_status_is_ssl_in_progress(ret)) {
3928 mbedtls_printf(" failed\n ! mbedtls_ssl_write returned %d\n\n", ret);
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003929 goto reset;
3930 }
Hanno Becker16970d22017-10-10 15:56:37 +01003931
3932 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003933 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003934#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003935 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003936#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003937 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003938#endif
3939 }
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003940 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003941 }
Gilles Peskine449bd832023-01-11 14:50:10 +01003942 } else { /* Not stream, so datagram */
3943 while (1) {
3944 ret = mbedtls_ssl_write(&ssl, buf, len);
Hanno Becker16970d22017-10-10 15:56:37 +01003945
Gilles Peskine449bd832023-01-11 14:50:10 +01003946 if (!mbedtls_status_is_ssl_in_progress(ret)) {
Hanno Becker16970d22017-10-10 15:56:37 +01003947 break;
Gilles Peskine449bd832023-01-11 14:50:10 +01003948 }
Hanno Becker16970d22017-10-10 15:56:37 +01003949
3950 /* For event-driven IO, wait for socket to become available */
Gilles Peskine449bd832023-01-11 14:50:10 +01003951 if (opt.event == 1 /* level triggered IO */) {
Hanno Becker16970d22017-10-10 15:56:37 +01003952#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01003953 idle(&client_fd, &timer, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003954#else
Gilles Peskine449bd832023-01-11 14:50:10 +01003955 idle(&client_fd, ret);
Hanno Becker16970d22017-10-10 15:56:37 +01003956#endif
3957 }
3958 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003959
Gilles Peskine449bd832023-01-11 14:50:10 +01003960 if (ret < 0) {
3961 mbedtls_printf(" failed\n ! mbedtls_ssl_write returned %d\n\n", ret);
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003962 goto reset;
3963 }
3964
3965 frags = 1;
3966 written = ret;
3967 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003968
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003969 buf[written] = '\0';
Gilles Peskine449bd832023-01-11 14:50:10 +01003970 mbedtls_printf(" %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf);
Manuel Pégourié-Gonnarda92ed482015-01-14 10:46:08 +01003971 ret = 0;
Manuel Pégourié-Gonnardf3dc2f62013-10-29 18:17:41 +01003972
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003973 /*
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003974 * 7b. Simulate serialize/deserialize and go back to data exchange
3975 */
Jarno Lamsabbc7b412019-06-04 11:06:31 +03003976#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01003977 if (opt.serialize != 0) {
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03003978 size_t buf_len;
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003979
Gilles Peskine449bd832023-01-11 14:50:10 +01003980 mbedtls_printf(" . Serializing live connection...");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003981
Gilles Peskine449bd832023-01-11 14:50:10 +01003982 ret = mbedtls_ssl_context_save(&ssl, NULL, 0, &buf_len);
3983 if (ret != MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL) {
3984 mbedtls_printf(" failed\n ! mbedtls_ssl_context_save returned "
3985 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003986
3987 goto exit;
3988 }
3989
Gilles Peskine449bd832023-01-11 14:50:10 +01003990 if ((context_buf = mbedtls_calloc(1, buf_len)) == NULL) {
3991 mbedtls_printf(" failed\n ! Couldn't allocate buffer for "
3992 "serialized context");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003993
3994 goto exit;
3995 }
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02003996 context_buf_len = buf_len;
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003997
Gilles Peskine449bd832023-01-11 14:50:10 +01003998 if ((ret = mbedtls_ssl_context_save(&ssl, context_buf,
3999 buf_len, &buf_len)) != 0) {
4000 mbedtls_printf(" failed\n ! mbedtls_ssl_context_save returned "
4001 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004002
4003 goto exit;
4004 }
4005
Gilles Peskine449bd832023-01-11 14:50:10 +01004006 mbedtls_printf(" ok\n");
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004007
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004008 /* Save serialized context to the 'opt.context_file' as a base64 code */
Gilles Peskine449bd832023-01-11 14:50:10 +01004009 if (0 < strlen(opt.context_file)) {
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004010 FILE *b64_file;
4011 uint8_t *b64_buf;
4012 size_t b64_len;
4013
Gilles Peskine449bd832023-01-11 14:50:10 +01004014 mbedtls_printf(" . Save serialized context to a file... ");
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004015
Gilles Peskine449bd832023-01-11 14:50:10 +01004016 mbedtls_base64_encode(NULL, 0, &b64_len, context_buf, buf_len);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004017
Gilles Peskine449bd832023-01-11 14:50:10 +01004018 if ((b64_buf = mbedtls_calloc(1, b64_len)) == NULL) {
4019 mbedtls_printf("failed\n ! Couldn't allocate buffer for "
4020 "the base64 code\n");
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004021 goto exit;
4022 }
4023
Gilles Peskine449bd832023-01-11 14:50:10 +01004024 if ((ret = mbedtls_base64_encode(b64_buf, b64_len, &b64_len,
4025 context_buf, buf_len)) != 0) {
4026 mbedtls_printf("failed\n ! mbedtls_base64_encode returned "
4027 "-0x%x\n", (unsigned int) -ret);
4028 mbedtls_free(b64_buf);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004029 goto exit;
4030 }
4031
Gilles Peskine449bd832023-01-11 14:50:10 +01004032 if ((b64_file = fopen(opt.context_file, "w")) == NULL) {
4033 mbedtls_printf("failed\n ! Cannot open '%s' for writing.\n",
4034 opt.context_file);
4035 mbedtls_free(b64_buf);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004036 goto exit;
4037 }
4038
Gilles Peskine449bd832023-01-11 14:50:10 +01004039 if (b64_len != fwrite(b64_buf, 1, b64_len, b64_file)) {
4040 mbedtls_printf("failed\n ! fwrite(%ld bytes) failed\n",
4041 (long) b64_len);
4042 mbedtls_free(b64_buf);
4043 fclose(b64_file);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004044 goto exit;
4045 }
4046
Gilles Peskine449bd832023-01-11 14:50:10 +01004047 mbedtls_free(b64_buf);
4048 fclose(b64_file);
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004049
Gilles Peskine449bd832023-01-11 14:50:10 +01004050 mbedtls_printf("ok\n");
Piotr Nowicki3de298f2020-04-16 14:35:19 +02004051 }
4052
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004053 /*
4054 * This simulates a workflow where you have a long-lived server
4055 * instance, potentially with a pool of ssl_context objects, and you
4056 * just want to re-use one while the connection is inactive: in that
4057 * case you can just reset() it, and then it's ready to receive
4058 * serialized data from another connection (or the same here).
4059 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004060 if (opt.serialize == 1) {
Manuel Pégourié-Gonnard9df5a822019-07-23 14:51:09 +02004061 /* nothing to do here, done by context_save() already */
Gilles Peskine449bd832023-01-11 14:50:10 +01004062 mbedtls_printf(" . Context has been reset... ok\n");
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004063 }
4064
4065 /*
4066 * This simulates a workflow where you have one server instance per
4067 * connection, and want to release it entire when the connection is
4068 * inactive, and spawn it again when needed again - this would happen
4069 * between ssl_free() and ssl_init() below, together with any other
4070 * teardown/startup code needed - for example, preparing the
4071 * ssl_config again (see section 3 "setup stuff" in this file).
4072 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004073 if (opt.serialize == 2) {
4074 mbedtls_printf(" . Freeing and reinitializing context...");
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004075
Gilles Peskine449bd832023-01-11 14:50:10 +01004076 mbedtls_ssl_free(&ssl);
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004077
Gilles Peskine449bd832023-01-11 14:50:10 +01004078 mbedtls_ssl_init(&ssl);
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004079
Gilles Peskine449bd832023-01-11 14:50:10 +01004080 if ((ret = mbedtls_ssl_setup(&ssl, &conf)) != 0) {
4081 mbedtls_printf(" failed\n ! mbedtls_ssl_setup returned "
4082 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004083 goto exit;
4084 }
4085
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004086 /*
4087 * This illustrates the minimum amount of things you need to set
4088 * up, however you could set up much more if desired, for example
4089 * if you want to share your set up code between the case of
4090 * establishing a new connection and this case.
4091 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004092 if (opt.nbio == 2) {
4093 mbedtls_ssl_set_bio(&ssl, &client_fd, delayed_send,
4094 delayed_recv, NULL);
4095 } else {
4096 mbedtls_ssl_set_bio(&ssl, &client_fd, mbedtls_net_send,
4097 mbedtls_net_recv,
4098 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL);
4099 }
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004100
Jarno Lamsa8e253212019-06-13 11:45:06 +03004101#if defined(MBEDTLS_TIMING_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004102 mbedtls_ssl_set_timer_cb(&ssl, &timer,
4103 mbedtls_timing_set_delay,
4104 mbedtls_timing_get_delay);
Jarno Lamsa8e253212019-06-13 11:45:06 +03004105#endif /* MBEDTLS_TIMING_C */
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004106
Gilles Peskine449bd832023-01-11 14:50:10 +01004107 mbedtls_printf(" ok\n");
Jarno Lamsa304d61c2019-06-06 10:40:52 +03004108 }
4109
Gilles Peskine449bd832023-01-11 14:50:10 +01004110 mbedtls_printf(" . Deserializing connection...");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004111
Gilles Peskine449bd832023-01-11 14:50:10 +01004112 if ((ret = mbedtls_ssl_context_load(&ssl, context_buf,
4113 buf_len)) != 0) {
4114 mbedtls_printf("failed\n ! mbedtls_ssl_context_load returned "
4115 "-0x%x\n\n", (unsigned int) -ret);
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004116
4117 goto exit;
4118 }
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02004119
Gilles Peskine449bd832023-01-11 14:50:10 +01004120 mbedtls_free(context_buf);
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02004121 context_buf = NULL;
4122 context_buf_len = 0;
4123
Gilles Peskine449bd832023-01-11 14:50:10 +01004124 mbedtls_printf(" ok\n");
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004125 }
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03004126#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03004127
4128 /*
4129 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004130 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004131 if (--exchanges_left > 0) {
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004132 goto data_exchange;
Gilles Peskine449bd832023-01-11 14:50:10 +01004133 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004134
4135 /*
4136 * 8. Done, cleanly close the connection
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02004137 */
4138close_notify:
Gilles Peskine449bd832023-01-11 14:50:10 +01004139 mbedtls_printf(" . Closing the connection...");
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01004140
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02004141 /* No error checking, the connection might be closed already */
Gilles Peskine449bd832023-01-11 14:50:10 +01004142 do {
4143 ret = mbedtls_ssl_close_notify(&ssl);
4144 } while (ret == MBEDTLS_ERR_SSL_WANT_WRITE);
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02004145 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02004146
Gilles Peskine449bd832023-01-11 14:50:10 +01004147 mbedtls_printf(" done\n");
Rich Evansf90016a2015-01-19 14:26:37 +00004148
Pengyu Lv753d02f2023-03-07 14:51:09 +08004149#if defined(MBEDTLS_SSL_CACHE_C)
4150 if (opt.cache_remove > 0) {
4151 mbedtls_ssl_cache_remove(&cache, ssl.session->id, ssl.session->id_len);
4152 }
4153#endif
4154
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004155 goto reset;
4156
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02004157 /*
4158 * Cleanup and exit
4159 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004160exit:
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02004161#ifdef MBEDTLS_ERROR_C
Gilles Peskine449bd832023-01-11 14:50:10 +01004162 if (ret != 0) {
gabor-mezei-armde472172020-09-04 14:44:25 +02004163 char error_buf[100];
Gilles Peskine449bd832023-01-11 14:50:10 +01004164 mbedtls_strerror(ret, error_buf, 100);
4165 mbedtls_printf("Last error was: -0x%X - %s\n\n", (unsigned int) -ret, error_buf);
gabor-mezei-armde472172020-09-04 14:44:25 +02004166 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004167#endif
4168
Gilles Peskine449bd832023-01-11 14:50:10 +01004169 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4170 mbedtls_printf(" . Cleaning up...");
4171 fflush(stdout);
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02004172 }
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01004173
Gilles Peskine449bd832023-01-11 14:50:10 +01004174 mbedtls_net_free(&client_fd);
4175 mbedtls_net_free(&listen_fd);
Paul Bakker0c226102014-04-17 16:02:36 +02004176
Gilles Peskine449bd832023-01-11 14:50:10 +01004177 mbedtls_ssl_free(&ssl);
4178 mbedtls_ssl_config_free(&conf);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004179
4180#if defined(MBEDTLS_SSL_CACHE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004181 mbedtls_ssl_cache_free(&cache);
Paul Bakkera317a982014-06-18 16:44:11 +02004182#endif
Przemek Stekiel68a01a62022-10-10 11:31:58 +02004183#if defined(MBEDTLS_SSL_SESSION_TICKETS) && defined(MBEDTLS_SSL_TICKET_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004184 mbedtls_ssl_ticket_free(&ticket_ctx);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004185#endif
4186#if defined(MBEDTLS_SSL_COOKIE_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01004187 mbedtls_ssl_cookie_free(&cookie_ctx);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004188#endif
4189
4190#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Gilles Peskine449bd832023-01-11 14:50:10 +01004191 if (context_buf != NULL) {
4192 mbedtls_platform_zeroize(context_buf, context_buf_len);
4193 }
4194 mbedtls_free(context_buf);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004195#endif
4196
4197#if defined(SNI_OPTION)
Gilles Peskine449bd832023-01-11 14:50:10 +01004198 sni_free(sni_info);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004199#endif
4200
Ronald Cron73fe8df2022-10-05 14:31:43 +02004201#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01004202 ret = psk_free(psk_info);
4203 if ((ret != 0) && (opt.query_config_mode == DFL_QUERY_CONFIG_MODE)) {
4204 mbedtls_printf("Failed to list of opaque PSKs - error was %d\n", ret);
4205 }
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004206#endif
4207
Ronald Crone68ab4f2022-10-05 12:46:29 +02004208#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
Gilles Peskine449bd832023-01-11 14:50:10 +01004209 mbedtls_x509_crt_free(&cacert);
4210 mbedtls_x509_crt_free(&srvcert);
4211 mbedtls_pk_free(&pkey);
4212 mbedtls_x509_crt_free(&srvcert2);
4213 mbedtls_pk_free(&pkey2);
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02004214#if defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01004215 psa_destroy_key(key_slot);
4216 psa_destroy_key(key_slot2);
Przemyslaw Stekiel8132c2f2021-10-21 12:26:58 +02004217#endif
Paul Bakkered27a042013-04-18 22:46:23 +02004218#endif
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004219
4220#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Gilles Peskine449bd832023-01-11 14:50:10 +01004221 mbedtls_dhm_free(&dhm);
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01004222#endif
4223
Gilles Peskine44817442018-06-13 18:09:28 +02004224#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine449bd832023-01-11 14:50:10 +01004225 for (i = 0; (size_t) i < ssl_async_keys.slots_used; i++) {
4226 if (ssl_async_keys.slots[i].pk_owned) {
4227 mbedtls_pk_free(ssl_async_keys.slots[i].pk);
4228 mbedtls_free(ssl_async_keys.slots[i].pk);
Gilles Peskine44817442018-06-13 18:09:28 +02004229 ssl_async_keys.slots[i].pk = NULL;
4230 }
4231 }
4232#endif
Paul Bakkered27a042013-04-18 22:46:23 +02004233
Ronald Cron73fe8df2022-10-05 14:31:43 +02004234#if defined(MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED) && \
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004235 defined(MBEDTLS_USE_PSA_CRYPTO)
Gilles Peskine449bd832023-01-11 14:50:10 +01004236 if (opt.psk_opaque != 0) {
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004237 /* This is ok even if the slot hasn't been
4238 * initialized (we might have jumed here
4239 * immediately because of bad cmd line params,
4240 * for example). */
Gilles Peskine449bd832023-01-11 14:50:10 +01004241 status = psa_destroy_key(psk_slot);
4242 if ((status != PSA_SUCCESS) &&
4243 (opt.query_config_mode == DFL_QUERY_CONFIG_MODE)) {
4244 mbedtls_printf("Failed to destroy key slot %u - error was %d",
4245 (unsigned) MBEDTLS_SVC_KEY_ID_GET_KEY_ID(psk_slot),
4246 (int) status);
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004247 }
4248 }
Ronald Cron73fe8df2022-10-05 14:31:43 +02004249#endif /* MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED &&
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00004250 MBEDTLS_USE_PSA_CRYPTO */
4251
Valerio Setti77e83152022-11-29 17:17:11 +01004252#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
4253 defined(MBEDTLS_USE_PSA_CRYPTO)
Valerio Settieb3f7882022-12-08 18:42:58 +01004254 /*
4255 * In case opaque keys it's the user responsibility to keep the key valid
4256 * for the duration of the handshake and destroy it at the end
4257 */
Gilles Peskine449bd832023-01-11 14:50:10 +01004258 if ((opt.ecjpake_pw_opaque != DFL_ECJPAKE_PW_OPAQUE)) {
Valerio Setti785116a2022-12-12 11:59:25 +01004259 psa_key_attributes_t check_attributes = PSA_KEY_ATTRIBUTES_INIT;
4260
4261 /* Verify that the key is still valid before destroying it */
Gilles Peskine449bd832023-01-11 14:50:10 +01004262 if (psa_get_key_attributes(ecjpake_pw_slot, &check_attributes) !=
4263 PSA_SUCCESS) {
4264 if (ret == 0) {
Valerio Settid75c5c42022-12-13 11:51:32 +01004265 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004266 }
4267 mbedtls_printf("The EC J-PAKE password key has unexpectedly been already destroyed\n");
4268 } else {
4269 psa_destroy_key(ecjpake_pw_slot);
Valerio Setti785116a2022-12-12 11:59:25 +01004270 }
Valerio Settid572a822022-11-28 18:27:51 +01004271 }
Valerio Setti77e83152022-11-29 17:17:11 +01004272#endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED && MBEDTLS_USE_PSA_CRYPTO */
Valerio Settid572a822022-11-28 18:27:51 +01004273
XiaokangQian318dc762022-04-20 09:43:51 +00004274#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Gilles Peskine449bd832023-01-11 14:50:10 +01004275 const char *message = mbedtls_test_helper_is_psa_leaking();
4276 if (message) {
4277 if (ret == 0) {
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +02004278 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004279 }
4280 mbedtls_printf("PSA memory leak detected: %s\n", message);
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +02004281 }
Gilles Peskine414e7172021-02-03 00:04:08 +01004282#endif
4283
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01004284 /* For builds with MBEDTLS_TEST_USE_PSA_CRYPTO_RNG psa crypto
4285 * resources are freed by rng_free(). */
Gilles Peskine449bd832023-01-11 14:50:10 +01004286#if (defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)) \
XiaokangQian318dc762022-04-20 09:43:51 +00004287 && !defined(MBEDTLS_TEST_USE_PSA_CRYPTO_RNG)
Gilles Peskine449bd832023-01-11 14:50:10 +01004288 mbedtls_psa_crypto_free();
Gilles Peskined0a46e52021-02-03 00:03:03 +01004289#endif
4290
Gilles Peskine449bd832023-01-11 14:50:10 +01004291 rng_free(&rng);
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01004292
Gilles Peskine449bd832023-01-11 14:50:10 +01004293 mbedtls_free(buf);
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01004294
Gilles Peskine60fe6602021-02-16 18:56:42 +01004295#if defined(MBEDTLS_TEST_HOOKS)
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02004296 /* Let test hooks detect errors such as resource leaks.
4297 * Don't do it in query_config mode, because some test code prints
4298 * information to stdout and this gets mixed with the regular output. */
Gilles Peskine449bd832023-01-11 14:50:10 +01004299 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4300 if (test_hooks_failure_detected()) {
4301 if (ret == 0) {
Gilles Peskined0a46e52021-02-03 00:03:03 +01004302 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004303 }
4304 mbedtls_printf("Test hooks detected errors.\n");
Gilles Peskined0a46e52021-02-03 00:03:03 +01004305 }
Gilles Peskine53dea742021-02-02 22:55:06 +01004306 }
Gilles Peskine449bd832023-01-11 14:50:10 +01004307 test_hooks_free();
Gilles Peskine60fe6602021-02-16 18:56:42 +01004308#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01004309
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004310#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
4311#if defined(MBEDTLS_MEMORY_DEBUG)
4312 mbedtls_memory_buffer_alloc_status();
Paul Bakker82024bf2013-07-04 11:52:32 +02004313#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004314 mbedtls_memory_buffer_alloc_free();
Gilles Peskine34babfc2021-02-16 15:44:37 +01004315#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Paul Bakker82024bf2013-07-04 11:52:32 +02004316
Gilles Peskine449bd832023-01-11 14:50:10 +01004317 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4318 mbedtls_printf(" done.\n");
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02004319 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004320
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02004321 // Shell can not handle large exit numbers -> 1 for errors
Gilles Peskine449bd832023-01-11 14:50:10 +01004322 if (ret < 0) {
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02004323 ret = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01004324 }
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02004325
Gilles Peskine449bd832023-01-11 14:50:10 +01004326 if (opt.query_config_mode == DFL_QUERY_CONFIG_MODE) {
4327 mbedtls_exit(ret);
4328 } else {
4329 mbedtls_exit(query_config_ret);
4330 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00004331}
Gilles Peskineb4df7542021-01-08 21:20:09 +01004332#endif /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_SRV_C */