blob: 987a7364ffd3899c6eb5869c425f89a8ff513287 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * SSL client with certificate authentication
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19
Mateusz Starzyk6c2e9b62021-05-19 17:54:54 +020020#define MBEDTLS_ALLOW_PRIVATE_ACCESS
21
Gilles Peskineab7ce962021-01-05 21:27:53 +010022#include "ssl_test_lib.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000023
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +010024#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Przemyslaw Stekielfed825a2021-10-26 14:32:10 +020025#include "test/psa_crypto_helpers.h"
26#endif
27
Gilles Peskineab7ce962021-01-05 21:27:53 +010028#if defined(MBEDTLS_SSL_TEST_IMPOSSIBLE)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020029int main( void )
30{
Gilles Peskineab7ce962021-01-05 21:27:53 +010031 mbedtls_printf( MBEDTLS_SSL_TEST_IMPOSSIBLE );
32 mbedtls_exit( 0 );
33}
34#elif !defined(MBEDTLS_SSL_CLI_C)
35int main( void )
36{
37 mbedtls_printf( "MBEDTLS_SSL_CLI_C not defined.\n" );
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +020038 mbedtls_exit( 0 );
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020039}
Gilles Peskineb4df7542021-01-08 21:20:09 +010040#else /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_CLI_C */
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020041
Piotr Nowicki7d01ef62019-11-20 15:00:17 +010042/* Size of memory to be allocated for the heap, when using the library's memory
43 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
44#define MEMORY_HEAP_SIZE 120000
45
Hanno Beckere4ad3e82017-09-18 15:05:46 +010046#define MAX_REQUEST_SIZE 20000
47#define MAX_REQUEST_SIZE_STR "20000"
48
Paul Bakker9caf2d22010-02-18 19:37:19 +000049#define DFL_SERVER_NAME "localhost"
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +010050#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020051#define DFL_SERVER_PORT "4433"
Paul Bakker9caf2d22010-02-18 19:37:19 +000052#define DFL_REQUEST_PAGE "/"
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +020053#define DFL_REQUEST_SIZE -1
Paul Bakker9caf2d22010-02-18 19:37:19 +000054#define DFL_DEBUG_LEVEL 0
Hanno Beckerbb425db2019-04-03 12:59:58 +010055#define DFL_CONTEXT_CRT_CB 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010056#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010057#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020058#define DFL_READ_TIMEOUT 0
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +020059#define DFL_MAX_RESEND 0
Paul Bakker5690efc2011-05-26 13:16:06 +000060#define DFL_CA_FILE ""
Paul Bakker8d914582012-06-04 12:46:42 +000061#define DFL_CA_PATH ""
Paul Bakker67968392010-07-18 08:28:20 +000062#define DFL_CRT_FILE ""
63#define DFL_KEY_FILE ""
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +010064#define DFL_KEY_OPAQUE 0
Hanno Beckerca04fdc2018-11-07 16:22:14 +000065#define DFL_KEY_PWD ""
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020066#define DFL_PSK ""
Hanno Becker1d911cd2018-11-15 13:06:09 +000067#define DFL_PSK_OPAQUE 0
Paul Bakkerd4a56ec2013-04-16 18:05:29 +020068#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020069#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +020070#define DFL_EC_MAX_OPS -1
Paul Bakker51936882011-02-20 16:05:58 +000071#define DFL_FORCE_CIPHER 0
Xiaofei Bai746f9482021-11-12 08:53:56 +000072#define DFL_TLS1_3_KEX_MODES MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020073#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010074#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +010075#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +020076#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +020077#define DFL_MIN_VERSION -1
Paul Bakker1d29fb52012-09-28 13:28:45 +000078#define DFL_MAX_VERSION -1
Gilles Peskinebc70a182017-05-09 15:59:24 +020079#define DFL_SHA1 -1
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +010080#define DFL_AUTH_MODE -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020081#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +010082#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +010083#define DFL_RECSPLIT -1
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +020084#define DFL_DHMLEN -1
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +020085#define DFL_RECONNECT 0
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +010086#define DFL_RECO_DELAY 0
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +020087#define DFL_RECO_MODE 1
Hanno Becker90cb3592019-04-09 17:24:19 +010088#define DFL_CID_ENABLED 0
89#define DFL_CID_VALUE ""
Hanno Beckerb42ec0d2019-05-03 17:30:59 +010090#define DFL_CID_ENABLED_RENEGO -1
91#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +020092#define DFL_RECONNECT_HARD 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +020094#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +010095#define DFL_CURVES NULL
Hanno Becker11ceadd2021-08-10 13:36:41 +010096#define DFL_SIG_ALGS NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020097#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +020098#define DFL_HS_TO_MIN 0
99#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200100#define DFL_DTLS_MTU -1
Hanno Becker4d615912018-08-14 13:33:30 +0100101#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200102#define DFL_FALLBACK -1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200103#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100104#define DFL_ETM -1
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300105#define DFL_SERIALIZE 0
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200106#define DFL_CONTEXT_FILE ""
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300107#define DFL_EXTENDED_MS_ENFORCE -1
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200108#define DFL_CA_CALLBACK 0
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300109#define DFL_EAP_TLS 0
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200110#define DFL_REPRODUCIBLE 0
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100111#define DFL_NSS_KEYLOG 0
112#define DFL_NSS_KEYLOG_FILE NULL
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100113#define DFL_SKIP_CLOSE_NOTIFY 0
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200114#define DFL_QUERY_CONFIG_MODE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300115#define DFL_USE_SRTP 0
Ron Eldor311b95a2018-07-08 08:50:31 +0300116#define DFL_SRTP_FORCE_PROFILE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300117#define DFL_SRTP_MKI ""
Paul Bakker0e6975b2009-02-10 22:19:10 +0000118
Paul Bakker93c32b22014-04-25 13:40:05 +0200119#define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: "
120#define GET_REQUEST_END "\r\n\r\n"
Paul Bakker5121ce52009-01-03 21:22:43 +0000121
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122#if defined(MBEDTLS_X509_CRT_PARSE_C)
Janos Follathae13beb2019-04-05 14:06:58 +0100123#define USAGE_CONTEXT_CRT_CB \
Hanno Beckerbb425db2019-04-03 12:59:58 +0100124 " context_crt_cb=%%d This determines whether the CRT verification callback is bound\n" \
125 " to the SSL configuration of the SSL context.\n" \
126 " Possible values:\n"\
127 " - 0 (default): Use CRT callback bound to configuration\n" \
128 " - 1: Use CRT callback bound to SSL context\n"
129#else
Janos Follathae13beb2019-04-05 14:06:58 +0100130#define USAGE_CONTEXT_CRT_CB ""
Hanno Beckerbb425db2019-04-03 12:59:58 +0100131#endif /* MBEDTLS_X509_CRT_PARSE_C */
132#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200133#if defined(MBEDTLS_FS_IO)
Paul Bakker5690efc2011-05-26 13:16:06 +0000134#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100135 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
136 " default: \"\" (pre-loaded)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100137 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100138 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
139 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100140 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100141 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
142 " default: \"\" (pre-loaded)\n" \
Hanno Beckerbffa54f2020-08-17 09:42:19 +0100143 " key_file=%%s default: \"\" (pre-loaded)\n"\
144 " key_pwd=%%s Password for key specified by key_file argument\n"\
145 " default: none\n"
Paul Bakker5690efc2011-05-26 13:16:06 +0000146#else
147#define USAGE_IO \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200148 " No file operations available (MBEDTLS_FS_IO not defined)\n"
149#endif /* MBEDTLS_FS_IO */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100150#else /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200151#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152#endif /* MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100153#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_X509_CRT_PARSE_C)
154#define USAGE_KEY_OPAQUE \
155 " key_opaque=%%d Handle your private key as if it were opaque\n" \
156 " default: 0 (disabled)\n"
157#else
158#define USAGE_KEY_OPAQUE ""
159#endif
Paul Bakkered27a042013-04-18 22:46:23 +0200160
Hanno Beckera0e20d02019-05-15 14:03:01 +0100161#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100162#define USAGE_CID \
163 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
164 " default: 0 (disabled)\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100165 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100166 " default: same as 'cid' parameter\n" \
Hanno Becker90cb3592019-04-09 17:24:19 +0100167 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100168 " default: \"\"\n" \
169 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100170 " default: same as 'cid_val' parameter\n"
Hanno Beckera0e20d02019-05-15 14:03:01 +0100171#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +0100172#define USAGE_CID ""
Hanno Beckera0e20d02019-05-15 14:03:01 +0100173#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +0100174
Gilles Peskineeccd8882020-03-10 12:19:08 +0100175#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckere86964c2018-10-23 11:37:50 +0100176#define USAGE_PSK_RAW \
Piotr Nowicki9926eaf2019-11-20 14:54:36 +0100177 " psk=%%s default: \"\" (disabled)\n" \
178 " The PSK values are in hex, without 0x.\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200179 " psk_identity=%%s default: \"Client_identity\"\n"
Hanno Beckere86964c2018-10-23 11:37:50 +0100180#if defined(MBEDTLS_USE_PSA_CRYPTO)
181#define USAGE_PSK_SLOT \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000182 " psk_opaque=%%d default: 0 (don't use opaque static PSK)\n" \
183 " Enable this to store the PSK configured through command line\n" \
184 " parameter `psk` in a PSA-based key slot.\n" \
Hanno Beckere86964c2018-10-23 11:37:50 +0100185 " Note: Currently only supported in conjunction with\n" \
186 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
187 " to force a particular PSK-only ciphersuite.\n" \
188 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
189 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
190 " with prepopulated key slots instead of importing raw key material.\n"
191#else
192#define USAGE_PSK_SLOT ""
193#endif /* MBEDTLS_USE_PSA_CRYPTO */
Hanno Becker1bac87c2019-03-29 12:02:26 +0000194#define USAGE_PSK USAGE_PSK_RAW USAGE_PSK_SLOT
195#else
196#define USAGE_PSK ""
Gilles Peskineeccd8882020-03-10 12:19:08 +0100197#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Hanno Becker1bac87c2019-03-29 12:02:26 +0000198
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200199#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
200#define USAGE_CA_CALLBACK \
201 " ca_callback=%%d default: 0 (disabled)\n" \
202 " Enable this to use the trusted certificate callback function\n"
203#else
204#define USAGE_CA_CALLBACK ""
205#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Paul Bakker5690efc2011-05-26 13:16:06 +0000206
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200207#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200208#define USAGE_TICKETS \
209 " tickets=%%d default: 1 (enabled)\n"
210#else
211#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200212#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200213
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300214#define USAGE_EAP_TLS \
215 " eap_tls=%%d default: 0 (disabled)\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100216#define USAGE_NSS_KEYLOG \
Hanno Beckerbc5308c2019-09-09 11:38:51 +0100217 " nss_keylog=%%d default: 0 (disabled)\n" \
218 " This cannot be used with eap_tls=1\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100219#define USAGE_NSS_KEYLOG_FILE \
220 " nss_keylog_file=%%s\n"
Ron Eldor65b56ef2019-09-26 16:40:48 +0300221#if defined(MBEDTLS_SSL_DTLS_SRTP)
222#define USAGE_SRTP \
223 " use_srtp=%%d default: 0 (disabled)\n" \
224 " This cannot be used with eap_tls=1 or "\
225 " nss_keylog=1\n" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200226 " srtp_force_profile=%%d default: 0 (all enabled)\n" \
Ron Eldor65b56ef2019-09-26 16:40:48 +0300227 " available profiles:\n" \
228 " 1 - SRTP_AES128_CM_HMAC_SHA1_80\n" \
229 " 2 - SRTP_AES128_CM_HMAC_SHA1_32\n" \
230 " 3 - SRTP_NULL_HMAC_SHA1_80\n" \
231 " 4 - SRTP_NULL_HMAC_SHA1_32\n" \
232 " mki=%%s default: \"\" (in hex, without 0x)\n"
233#else /* MBEDTLS_SSL_DTLS_SRTP */
234#define USAGE_SRTP ""
235#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300236
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200237#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200238#define USAGE_MAX_FRAG_LEN \
239 " max_frag_len=%%d default: 16384 (tls default)\n" \
240 " options: 512, 1024, 2048, 4096\n"
241#else
242#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200244
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200245#if defined(MBEDTLS_DHM_C)
246#define USAGE_DHMLEN \
247 " dhmlen=%%d default: (library default: 1024 bits)\n"
248#else
249#define USAGE_DHMLEN
250#endif
251
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200252#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200253#define USAGE_ALPN \
254 " alpn=%%s default: \"\" (disabled)\n" \
255 " example: spdy/1,http/1.1\n"
256#else
257#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200258#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200259
Hanno Beckere6706e62017-05-15 16:05:15 +0100260#if defined(MBEDTLS_ECP_C)
261#define USAGE_CURVES \
262 " curves=a,b,c,d default: \"default\" (library default)\n" \
263 " example: \"secp521r1,brainpoolP512r1\"\n" \
264 " - use \"none\" for empty list\n" \
265 " - see mbedtls_ecp_curve_list()\n" \
266 " for acceptable curve names\n"
267#else
268#define USAGE_CURVES ""
269#endif
270
Ronald Cron6f135e12021-12-08 16:57:54 +0100271#if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \
Hanno Becker11ceadd2021-08-10 13:36:41 +0100272 defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
273#define USAGE_SIG_ALGS \
274 " sig_algs=a,b,c,d default: \"default\" (library default)\n" \
275 " example: \"ecdsa_secp256r1_sha256,ecdsa_secp384r1_sha384\"\n"
276#else
277#define USAGE_SIG_ALGS ""
278#endif
279
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200280#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200281#define USAGE_DTLS \
282 " dtls=%%d default: 0 (TLS)\n" \
283 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200284 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Becker4d615912018-08-14 13:33:30 +0100285 " mtu=%%d default: (library default: unlimited)\n" \
286 " dgram_packing=%%d default: 1 (allowed)\n" \
287 " allow or forbid packing of multiple\n" \
288 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200289#else
290#define USAGE_DTLS ""
291#endif
292
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200293#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200294#define USAGE_EMS \
295 " extended_ms=0/1 default: (library default: on)\n"
296#else
297#define USAGE_EMS ""
298#endif
299
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200300#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100301#define USAGE_ETM \
302 " etm=0/1 default: (library default: on)\n"
303#else
304#define USAGE_ETM ""
305#endif
306
Philippe Antoine738153a2019-06-18 20:16:43 +0200307#define USAGE_REPRODUCIBLE \
308 " reproducible=0/1 default: 0 (disabled)\n"
309
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200310#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100311#define USAGE_RENEGO \
312 " renegotiation=%%d default: 0 (disabled)\n" \
313 " renegotiate=%%d default: 0 (disabled)\n"
314#else
315#define USAGE_RENEGO ""
316#endif
317
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200318#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
319#define USAGE_ECJPAKE \
320 " ecjpake_pw=%%s default: none (disabled)\n"
321#else
322#define USAGE_ECJPAKE ""
323#endif
324
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200325#if defined(MBEDTLS_ECP_RESTARTABLE)
326#define USAGE_ECRESTART \
327 " ec_max_ops=%%s default: library default (restart disabled)\n"
328#else
329#define USAGE_ECRESTART ""
330#endif
331
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300332#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
333#define USAGE_SERIALIZATION \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200334 " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
335 " options: 1 (serialize)\n" \
336 " 2 (serialize with re-initialization)\n" \
337 " context_file=%%s The file path to write a serialized connection\n"\
338 " in the form of base64 code (serialize option\n" \
339 " must be set)\n" \
340 " default: \"\" (do nothing)\n" \
341 " option: a file path\n"
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300342#else
343#define USAGE_SERIALIZATION ""
344#endif
345
Ronald Cron6f135e12021-12-08 16:57:54 +0100346#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +0000347#define USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100348 " tls13_kex_modes=%%s default: all\n" \
Jerry Yu31c01d32021-08-24 10:49:06 +0800349 " options: psk, psk_ephemeral, ephemeral, ephemeral_all, psk_all, all\n"
Hanno Becker2c0f6972021-07-24 06:27:16 +0100350#else
Xiaofei Bai746f9482021-11-12 08:53:56 +0000351#define USAGE_TLS1_3_KEY_EXCHANGE_MODES ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100352#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +0100353
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200354/* USAGE is arbitrarily split to stay under the portable string literal
355 * length limit: 4095 bytes in C99. */
356#define USAGE1 \
Paul Bakker67968392010-07-18 08:28:20 +0000357 "\n usage: ssl_client2 param=<>...\n" \
358 "\n acceptable parameters:\n" \
359 " server_name=%%s default: localhost\n" \
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100360 " server_addr=%%s default: given by name\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000361 " server_port=%%d default: 4433\n" \
Paul Bakker67968392010-07-18 08:28:20 +0000362 " request_page=%%s default: \".\"\n" \
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +0100363 " request_size=%%d default: about 34 (basic request)\n" \
364 " (minimum: 0, max: " MAX_REQUEST_SIZE_STR ")\n" \
365 " If 0, in the first exchange only an empty\n" \
366 " application data message is sent followed by\n" \
367 " a second non-empty message before attempting\n" \
368 " to read a response from the server\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100369 " debug_level=%%d default: 0 (disabled)\n" \
370 " nbio=%%d default: 0 (blocking I/O)\n" \
371 " options: 1 (non-blocking), 2 (added delays)\n" \
372 " event=%%d default: 0 (loop)\n" \
373 " options: 1 (level-triggered, implies nbio=1),\n" \
374 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200375 " max_resend=%%d default: 0 (no resend on timeout)\n" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100376 " skip_close_notify=%%d default: 0 (send close_notify)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100377 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200378 USAGE_DTLS \
Hanno Becker90cb3592019-04-09 17:24:19 +0100379 USAGE_CID \
Ron Eldor6ea64512018-07-02 10:08:07 +0300380 USAGE_SRTP \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200381 "\n"
382#define USAGE2 \
Hanno Becker16970d22017-10-10 15:56:37 +0100383 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100384 " options: none, optional, required\n" \
385 USAGE_IO \
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100386 USAGE_KEY_OPAQUE \
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200387 USAGE_CA_CALLBACK \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100388 "\n" \
389 USAGE_PSK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200390 USAGE_ECJPAKE \
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200391 USAGE_ECRESTART \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200392 "\n"
393#define USAGE3 \
Hanno Becker16970d22017-10-10 15:56:37 +0100394 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100395 USAGE_RENEGO \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200396 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200397 " reconnect=%%d number of reconnections using session resumption\n" \
398 " default: 0 (disabled)\n" \
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200399 " reco_delay=%%d default: 0 seconds\n" \
Manuel Pégourié-Gonnard686adb42019-06-03 09:55:16 +0200400 " reco_mode=%%d 0: copy session, 1: serialize session\n" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200401 " default: 1\n" \
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200402 " reconnect_hard=%%d default: 0 (disabled)\n" \
Paul Bakkera503a632013-08-14 13:48:06 +0200403 USAGE_TICKETS \
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300404 USAGE_EAP_TLS \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100405 USAGE_MAX_FRAG_LEN \
Janos Follathae13beb2019-04-05 14:06:58 +0100406 USAGE_CONTEXT_CRT_CB \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200407 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200408 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100409 USAGE_ETM \
Philippe Antoine738153a2019-06-18 20:16:43 +0200410 USAGE_REPRODUCIBLE \
Hanno Beckere6706e62017-05-15 16:05:15 +0100411 USAGE_CURVES \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000412 USAGE_SIG_ALGS \
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200413 USAGE_DHMLEN \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200414 "\n"
Jerry Yub1dc59a2021-08-05 15:58:09 +0800415
Ronald Cron6f135e12021-12-08 16:57:54 +0100416#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +0000417#define TLS1_3_VERSION_OPTIONS ", tls13"
Ronald Cron6f135e12021-12-08 16:57:54 +0100418#else /* MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800419#define TLS1_3_VERSION_OPTIONS ""
Ronald Cron6f135e12021-12-08 16:57:54 +0100420#endif /* !MBEDTLS_SSL_PROTO_TLS1_3 */
Jerry Yub1dc59a2021-08-05 15:58:09 +0800421
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200422#define USAGE4 \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100423 " allow_sha1=%%d default: 0\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000424 " min_version=%%s default: (library default: tls12)\n" \
425 " max_version=%%s default: (library default: tls12)\n" \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100426 " force_version=%%s default: \"\" (none)\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000427 " options: tls12, dtls12" TLS1_3_VERSION_OPTIONS \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100428 "\n\n" \
429 " force_ciphersuite=<name> default: all enabled\n" \
Xiaofei Baid25fab62021-12-02 06:36:27 +0000430 USAGE_TLS1_3_KEY_EXCHANGE_MODES \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100431 " query_config=<name> return 0 if the specified\n" \
Andres Amaya Garciabc818842018-10-16 21:08:38 +0100432 " configuration macro is defined and 1\n" \
433 " otherwise. The expansion of the macro\n" \
Hanno Becker2c0f6972021-07-24 06:27:16 +0100434 " is printed if it is defined\n" \
435 USAGE_SERIALIZATION \
Paul Bakker51936882011-02-20 16:05:58 +0000436 " acceptable ciphersuite names:\n"
Paul Bakker9caf2d22010-02-18 19:37:19 +0000437
Hanno Becker11ceadd2021-08-10 13:36:41 +0100438#define ALPN_LIST_SIZE 10
439#define CURVE_LIST_SIZE 20
440#define SIG_ALG_LIST_SIZE 5
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500441
Rich Evans85b05ec2015-02-12 11:37:29 +0000442/*
443 * global options
444 */
445struct options
446{
447 const char *server_name; /* hostname of the server (client only) */
448 const char *server_addr; /* address of the server (client only) */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200449 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000450 int debug_level; /* level of debugging */
451 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100452 int event; /* loop or event-driven IO? level or edge triggered? */
453 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000454 int max_resend; /* DTLS times to resend on read timeout */
Rich Evans85b05ec2015-02-12 11:37:29 +0000455 const char *request_page; /* page on server to request */
456 int request_size; /* pad request with header to requested size */
457 const char *ca_file; /* the file with the CA certificate(s) */
458 const char *ca_path; /* the path with the CA certificate(s) reside */
459 const char *crt_file; /* the file with the client certificate */
460 const char *key_file; /* the file with the client key */
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100461 int key_opaque; /* handle private key as if it were opaque */
Hanno Beckere86964c2018-10-23 11:37:50 +0100462#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000463 int psk_opaque;
Hanno Beckere86964c2018-10-23 11:37:50 +0100464#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200465#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Beckercbb59032019-03-28 14:14:22 +0000466 int ca_callback; /* Use callback for trusted certificate list */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200467#endif
Hanno Beckerca04fdc2018-11-07 16:22:14 +0000468 const char *key_pwd; /* the password for the client key */
Rich Evans85b05ec2015-02-12 11:37:29 +0000469 const char *psk; /* the pre-shared key */
470 const char *psk_identity; /* the pre-shared key identity */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200471 const char *ecjpake_pw; /* the EC J-PAKE password */
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200472 int ec_max_ops; /* EC consecutive operations limit */
Rich Evans85b05ec2015-02-12 11:37:29 +0000473 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
Ronald Cron6f135e12021-12-08 16:57:54 +0100474#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +0100475 int tls13_kex_modes; /* supported TLS 1.3 key exchange modes */
Ronald Cron6f135e12021-12-08 16:57:54 +0100476#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Rich Evans85b05ec2015-02-12 11:37:29 +0000477 int renegotiation; /* enable / disable renegotiation */
478 int allow_legacy; /* allow legacy renegotiation */
479 int renegotiate; /* attempt renegotiation? */
480 int renego_delay; /* delay before enforcing renegotiation */
481 int exchanges; /* number of data exchanges */
482 int min_version; /* minimum protocol version accepted */
483 int max_version; /* maximum protocol version accepted */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200484 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000485 int auth_mode; /* verify mode for connection */
486 unsigned char mfl_code; /* code for maximum fragment length */
487 int trunc_hmac; /* negotiate truncated hmac or not */
488 int recsplit; /* enable record splitting? */
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200489 int dhmlen; /* minimum DHM params len in bits */
Rich Evans85b05ec2015-02-12 11:37:29 +0000490 int reconnect; /* attempt to resume session */
491 int reco_delay; /* delay in seconds before resuming session */
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200492 int reco_mode; /* how to keep the session around */
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200493 int reconnect_hard; /* unexpectedly reconnect from the same port */
Rich Evans85b05ec2015-02-12 11:37:29 +0000494 int tickets; /* enable / disable session tickets */
Hanno Beckere6706e62017-05-15 16:05:15 +0100495 const char *curves; /* list of supported elliptic curves */
Hanno Becker11ceadd2021-08-10 13:36:41 +0100496 const char *sig_algs; /* supported TLS 1.3 signature algorithms */
Rich Evans85b05ec2015-02-12 11:37:29 +0000497 const char *alpn_string; /* ALPN supported protocols */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000498 int transport; /* TLS or DTLS? */
499 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
500 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200501 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Rich Evans85b05ec2015-02-12 11:37:29 +0000502 int fallback; /* is this a fallback connection? */
Hanno Becker4d615912018-08-14 13:33:30 +0100503 int dgram_packing; /* allow/forbid datagram packing */
Rich Evans85b05ec2015-02-12 11:37:29 +0000504 int extended_ms; /* negotiate extended master secret? */
505 int etm; /* negotiate encrypt then mac? */
Hanno Beckerbb425db2019-04-03 12:59:58 +0100506 int context_crt_cb; /* use context-specific CRT verify callback */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300507 int eap_tls; /* derive EAP-TLS keying material? */
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100508 int nss_keylog; /* export NSS key log material */
509 const char *nss_keylog_file; /* NSS key log file */
Hanno Becker90cb3592019-04-09 17:24:19 +0100510 int cid_enabled; /* whether to use the CID extension or not */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100511 int cid_enabled_renego; /* whether to use the CID extension or not
512 * during renegotiation */
Hanno Becker90cb3592019-04-09 17:24:19 +0100513 const char *cid_val; /* the CID to use for incoming messages */
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300514 int serialize; /* serialize/deserialize connection */
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200515 const char *context_file; /* the file to write a serialized connection
516 * in the form of base64 code (serialize
517 * option must be set) */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100518 const char *cid_val_renego; /* the CID to use for incoming messages
519 * after renegotiation */
Philippe Antoine154feb22019-06-11 17:50:23 +0200520 int reproducible; /* make communication reproducible */
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100521 int skip_close_notify; /* skip sending the close_notify alert */
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200522 int query_config_mode; /* whether to read config */
Ron Eldor6ea64512018-07-02 10:08:07 +0300523 int use_srtp; /* Support SRTP */
524 int force_srtp_profile; /* SRTP protection profile to use or all */
Ron Eldoref72faf2018-07-12 11:54:20 +0300525 const char *mki; /* The dtls mki value to use */
Rich Evans85b05ec2015-02-12 11:37:29 +0000526} opt;
527
Gilles Peskine0d980b82021-01-05 23:34:27 +0100528#include "ssl_test_common_source.c"
Hanno Becker8b1af2f2019-07-03 17:02:43 +0100529
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200530#if defined(MBEDTLS_X509_CRT_PARSE_C)
Hanno Beckera1051b42019-02-26 11:38:29 +0000531static unsigned char peer_crt_info[1024];
Hanno Beckera9766c2c2019-02-25 17:43:18 +0000532
Rich Evans85b05ec2015-02-12 11:37:29 +0000533/*
534 * Enabled if debug_level > 1 in code below
535 */
Hanno Becker4cb1f4d2017-10-10 15:59:57 +0100536static int my_verify( void *data, mbedtls_x509_crt *crt,
537 int depth, uint32_t *flags )
Rich Evans85b05ec2015-02-12 11:37:29 +0000538{
539 char buf[1024];
540 ((void) data);
541
Hanno Becker7ac83f92020-10-09 10:48:22 +0100542 mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth );
543
Hanno Becker612a2f12020-10-09 09:19:39 +0100544#if !defined(MBEDTLS_X509_REMOVE_INFO)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200545 mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt );
Hanno Beckera9766c2c2019-02-25 17:43:18 +0000546 if( depth == 0 )
547 memcpy( peer_crt_info, buf, sizeof( buf ) );
548
549 if( opt.debug_level == 0 )
550 return( 0 );
551
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200552 mbedtls_printf( "%s", buf );
Peter Kolbus9a969b62018-12-11 13:55:56 -0600553#else
554 ((void) crt);
555 ((void) depth);
556#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000557
Rich Evans85b05ec2015-02-12 11:37:29 +0000558 if ( ( *flags ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200559 mbedtls_printf( " This certificate has no flags\n" );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100560 else
561 {
Hanno Becker7ac83f92020-10-09 10:48:22 +0100562 x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +0100563 mbedtls_printf( "%s\n", buf );
564 }
Rich Evans85b05ec2015-02-12 11:37:29 +0000565
566 return( 0 );
567}
Gilles Peskinec11eb1f2021-01-05 22:23:14 +0100568#endif /* MBEDTLS_X509_CRT_PARSE_C */
Gilles Peskinecd3c8452017-05-09 14:57:45 +0200569
Hanno Beckera0e20d02019-05-15 14:03:01 +0100570#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100571int report_cid_usage( mbedtls_ssl_context *ssl,
572 const char *additional_description )
573{
574 int ret;
575 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
576 size_t peer_cid_len;
577 int cid_negotiated;
578
579 if( opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM )
580 return( 0 );
581
Hanno Becker6ae14c02019-05-22 16:59:25 +0100582 /* Check if the use of a CID has been negotiated,
583 * but don't ask for the CID value and length.
584 *
585 * Note: Here and below, we're demonstrating the various ways
586 * in which mbedtls_ssl_get_peer_cid() can be called,
587 * depending on whether or not the length/value of the
588 * peer's CID is needed.
589 *
590 * An actual application, however, should use
591 * just one call to mbedtls_ssl_get_peer_cid(). */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100592 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
Hanno Becker6ae14c02019-05-22 16:59:25 +0100593 NULL, NULL );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100594 if( ret != 0 )
595 {
596 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200597 (unsigned int) -ret );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100598 return( ret );
599 }
600
601 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
602 {
603 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
604 {
605 mbedtls_printf( "(%s) Use of Connection ID was rejected by the server.\n",
606 additional_description );
607 }
608 }
609 else
610 {
611 size_t idx=0;
612 mbedtls_printf( "(%s) Use of Connection ID has been negotiated.\n",
613 additional_description );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100614
615 /* Ask for just the length of the peer's CID. */
616 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
617 NULL, &peer_cid_len );
618 if( ret != 0 )
619 {
620 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200621 (unsigned int) -ret );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100622 return( ret );
623 }
624
625 /* Ask for just length + value of the peer's CID. */
626 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
627 peer_cid, &peer_cid_len );
628 if( ret != 0 )
629 {
630 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200631 (unsigned int) -ret );
Hanno Becker6ae14c02019-05-22 16:59:25 +0100632 return( ret );
633 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100634 mbedtls_printf( "(%s) Peer CID (length %u Bytes): ",
635 additional_description,
636 (unsigned) peer_cid_len );
637 while( idx < peer_cid_len )
638 {
639 mbedtls_printf( "%02x ", peer_cid[ idx ] );
640 idx++;
641 }
642 mbedtls_printf( "\n" );
643 }
644
645 return( 0 );
646}
Hanno Beckera0e20d02019-05-15 14:03:01 +0100647#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100648
Paul Bakker9caf2d22010-02-18 19:37:19 +0000649int main( int argc, char *argv[] )
Paul Bakker5121ce52009-01-03 21:22:43 +0000650{
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200651 int ret = 0, len, tail_len, i, written, frags, retry_left;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200652 int query_config_ret = 0;
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200653 mbedtls_net_context server_fd;
Hanno Becker8b1af2f2019-07-03 17:02:43 +0100654 io_ctx_t io_ctx;
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100655
Ronald Cron6f135e12021-12-08 16:57:54 +0100656#if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \
Hanno Becker11ceadd2021-08-10 13:36:41 +0100657 defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
658 uint16_t sig_alg_list[SIG_ALG_LIST_SIZE];
Ronald Cron6f135e12021-12-08 16:57:54 +0100659#endif /* MBEDTLS_SSL_PROTO_TLS1_3 && MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED */
Hanno Becker11ceadd2021-08-10 13:36:41 +0100660
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100661 unsigned char buf[MAX_REQUEST_SIZE + 1];
662
Gilles Peskineeccd8882020-03-10 12:19:08 +0100663#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200664 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200665 size_t psk_len = 0;
Paul Bakkered27a042013-04-18 22:46:23 +0200666#endif
Hanno Becker90cb3592019-04-09 17:24:19 +0100667
Hanno Beckera0e20d02019-05-15 14:03:01 +0100668#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100669 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100670 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Becker90cb3592019-04-09 17:24:19 +0100671 size_t cid_len = 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100672 size_t cid_renego_len = 0;
Hanno Becker90cb3592019-04-09 17:24:19 +0100673#endif
674
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200675#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +0100676 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200677#endif
Piotr Nowicki7d01ef62019-11-20 15:00:17 +0100678
679#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
680 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
681#endif
682
Hanno Beckere6706e62017-05-15 16:05:15 +0100683#if defined(MBEDTLS_ECP_C)
Brett Warren25386b72021-08-17 09:32:04 +0100684 uint16_t group_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +0100685 const mbedtls_ecp_curve_info *curve_cur;
686#endif
Ron Eldor6ea64512018-07-02 10:08:07 +0300687#if defined(MBEDTLS_SSL_DTLS_SRTP)
Johan Pascal85269572020-08-25 10:01:54 +0200688 unsigned char mki[MBEDTLS_TLS_SRTP_MAX_MKI_LENGTH];
Johan Pascal48f62e92020-08-22 22:04:20 +0200689 size_t mki_len=0;
Ron Eldor6ea64512018-07-02 10:08:07 +0300690#endif
Hanno Beckere6706e62017-05-15 16:05:15 +0100691
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200692 const char *pers = "ssl_client2";
Paul Bakker508ad5a2011-12-04 17:09:26 +0000693
Hanno Beckere86964c2018-10-23 11:37:50 +0100694#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek7a58d522022-01-19 12:34:02 -0500695#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Andrzej Kurek03e01462022-01-03 12:53:24 +0100696 mbedtls_svc_key_id_t slot = MBEDTLS_SVC_KEY_ID_INIT;
Hanno Beckere86964c2018-10-23 11:37:50 +0100697 psa_algorithm_t alg = 0;
Janos Follathbe4efc22019-08-08 11:38:18 +0100698 psa_key_attributes_t key_attributes;
Andrzej Kurek7a58d522022-01-19 12:34:02 -0500699#endif
Hanno Beckere86964c2018-10-23 11:37:50 +0100700 psa_status_t status;
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +0100701#elif defined(MBEDTLS_SSL_PROTO_TLS1_3)
702 psa_status_t status;
Hanno Beckere86964c2018-10-23 11:37:50 +0100703#endif
704
Gilles Peskineef86ab22017-05-05 18:59:02 +0200705#if defined(MBEDTLS_X509_CRT_PARSE_C)
706 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
707#endif
Gilles Peskinef1cb75f2021-01-13 18:46:01 +0100708 rng_context_t rng;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200709 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200710 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200711 mbedtls_ssl_session saved_session;
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +0200712 unsigned char *session_data = NULL;
713 size_t session_data_len = 0;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200714#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +0200715 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +0200716#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200717#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +0200718 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200719 mbedtls_x509_crt cacert;
720 mbedtls_x509_crt clicert;
721 mbedtls_pk_context pkey;
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100722#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek03e01462022-01-03 12:53:24 +0100723 mbedtls_svc_key_id_t key_slot = MBEDTLS_SVC_KEY_ID_INIT; /* invalid key slot */
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100724#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +0100725#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker9caf2d22010-02-18 19:37:19 +0000726 char *p, *q;
Paul Bakker51936882011-02-20 16:05:58 +0000727 const int *list;
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +0200728#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
729 unsigned char *context_buf = NULL;
730 size_t context_buf_len;
731#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300732 unsigned char eap_tls_keymaterial[16];
733 unsigned char eap_tls_iv[8];
734 const char* eap_tls_label = "client EAP encryption";
735 eap_tls_keys eap_tls_keying;
Ron Eldor65b56ef2019-09-26 16:40:48 +0300736#if defined( MBEDTLS_SSL_DTLS_SRTP )
737 /*! master keys and master salt for SRTP generated during handshake */
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200738 unsigned char dtls_srtp_key_material[MBEDTLS_TLS_SRTP_MAX_KEY_MATERIAL_LENGTH];
739 const char* dtls_srtp_label = "EXTRACTOR-dtls_srtp";
740 dtls_srtp_keys dtls_srtp_keying;
741 const mbedtls_ssl_srtp_profile default_profiles[] = {
Johan Pascal43f94902020-09-22 12:25:52 +0200742 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80,
743 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32,
744 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80,
Johan Pascal253d0262020-09-22 13:04:45 +0200745 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32,
746 MBEDTLS_TLS_SRTP_UNSET
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200747 };
Ron Eldor65b56ef2019-09-26 16:40:48 +0300748#endif /* MBEDTLS_SSL_DTLS_SRTP */
Paul Bakker9caf2d22010-02-18 19:37:19 +0000749
Piotr Nowicki7d01ef62019-11-20 15:00:17 +0100750#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
751 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
752#endif
753
Gilles Peskine60fe6602021-02-16 18:56:42 +0100754#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +0100755 test_hooks_init( );
Gilles Peskine60fe6602021-02-16 18:56:42 +0100756#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +0100757
Paul Bakker1a207ec2011-02-06 13:22:40 +0000758 /*
759 * Make sure memory references are valid.
760 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200761 mbedtls_net_init( &server_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +0200762 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +0200763 mbedtls_ssl_config_init( &conf );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200764 memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) );
Gilles Peskinef1cb75f2021-01-13 18:46:01 +0100765 rng_init( &rng );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200766#if defined(MBEDTLS_X509_CRT_PARSE_C)
767 mbedtls_x509_crt_init( &cacert );
768 mbedtls_x509_crt_init( &clicert );
769 mbedtls_pk_init( &pkey );
Paul Bakkered27a042013-04-18 22:46:23 +0200770#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200771#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +0200772 memset( (void * ) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200773#endif
Paul Bakker1a207ec2011-02-06 13:22:40 +0000774
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +0100775#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Beckerb2b468b2018-11-12 17:46:59 +0000776 status = psa_crypto_init();
777 if( status != PSA_SUCCESS )
778 {
779 mbedtls_fprintf( stderr, "Failed to initialize PSA Crypto implementation: %d\n",
780 (int) status );
781 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
782 goto exit;
783 }
Gilles Peskine48113eb2021-02-09 10:25:20 +0100784#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine21462112021-01-13 23:53:09 +0100785#if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
786 mbedtls_test_enable_insecure_external_rng( );
Gilles Peskine94ad8312021-01-25 13:42:28 +0100787#endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
Hanno Beckerb2b468b2018-11-12 17:46:59 +0000788
Paul Bakker9caf2d22010-02-18 19:37:19 +0000789 if( argc == 0 )
790 {
791 usage:
Paul Bakkerfab5c822012-02-06 16:45:10 +0000792 if( ret == 0 )
793 ret = 1;
794
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200795 mbedtls_printf( USAGE1 );
796 mbedtls_printf( USAGE2 );
797 mbedtls_printf( USAGE3 );
798 mbedtls_printf( USAGE4 );
Paul Bakker51936882011-02-20 16:05:58 +0000799
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200800 list = mbedtls_ssl_list_ciphersuites();
Paul Bakker51936882011-02-20 16:05:58 +0000801 while( *list )
802 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200803 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +0200804 list++;
805 if( !*list )
806 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200807 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakker51936882011-02-20 16:05:58 +0000808 list++;
809 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200810 mbedtls_printf("\n");
Paul Bakker9caf2d22010-02-18 19:37:19 +0000811 goto exit;
812 }
813
814 opt.server_name = DFL_SERVER_NAME;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100815 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000816 opt.server_port = DFL_SERVER_PORT;
817 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker90cb3592019-04-09 17:24:19 +0100818 opt.cid_enabled = DFL_CID_ENABLED;
819 opt.cid_val = DFL_CID_VALUE;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100820 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
821 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100822 opt.nbio = DFL_NBIO;
Hanno Becker16970d22017-10-10 15:56:37 +0100823 opt.event = DFL_EVENT;
Hanno Beckerbb425db2019-04-03 12:59:58 +0100824 opt.context_crt_cb = DFL_CONTEXT_CRT_CB;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200825 opt.read_timeout = DFL_READ_TIMEOUT;
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200826 opt.max_resend = DFL_MAX_RESEND;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000827 opt.request_page = DFL_REQUEST_PAGE;
Paul Bakker93c32b22014-04-25 13:40:05 +0200828 opt.request_size = DFL_REQUEST_SIZE;
Paul Bakker5690efc2011-05-26 13:16:06 +0000829 opt.ca_file = DFL_CA_FILE;
Paul Bakker8d914582012-06-04 12:46:42 +0000830 opt.ca_path = DFL_CA_PATH;
Paul Bakker67968392010-07-18 08:28:20 +0000831 opt.crt_file = DFL_CRT_FILE;
832 opt.key_file = DFL_KEY_FILE;
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100833 opt.key_opaque = DFL_KEY_OPAQUE;
Hanno Beckerca04fdc2018-11-07 16:22:14 +0000834 opt.key_pwd = DFL_KEY_PWD;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200835 opt.psk = DFL_PSK;
Hanno Beckere86964c2018-10-23 11:37:50 +0100836#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000837 opt.psk_opaque = DFL_PSK_OPAQUE;
Hanno Beckere86964c2018-10-23 11:37:50 +0100838#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200839#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
840 opt.ca_callback = DFL_CA_CALLBACK;
841#endif
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200842 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200843 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +0200844 opt.ec_max_ops = DFL_EC_MAX_OPS;
Paul Bakker51936882011-02-20 16:05:58 +0000845 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
Ronald Cron6f135e12021-12-08 16:57:54 +0100846#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Bai746f9482021-11-12 08:53:56 +0000847 opt.tls13_kex_modes = DFL_TLS1_3_KEX_MODES;
Ronald Cron6f135e12021-12-08 16:57:54 +0100848#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker48916f92012-09-16 19:57:18 +0000849 opt.renegotiation = DFL_RENEGOTIATION;
850 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100851 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +0200852 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +0000853 opt.min_version = DFL_MIN_VERSION;
854 opt.max_version = DFL_MAX_VERSION;
Gilles Peskinebc70a182017-05-09 15:59:24 +0200855 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +0100856 opt.auth_mode = DFL_AUTH_MODE;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +0200857 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +0200858 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +0100859 opt.recsplit = DFL_RECSPLIT;
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +0200860 opt.dhmlen = DFL_DHMLEN;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +0200861 opt.reconnect = DFL_RECONNECT;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100862 opt.reco_delay = DFL_RECO_DELAY;
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +0200863 opt.reco_mode = DFL_RECO_MODE;
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +0200864 opt.reconnect_hard = DFL_RECONNECT_HARD;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +0200865 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200866 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +0100867 opt.curves = DFL_CURVES;
Hanno Becker11ceadd2021-08-10 13:36:41 +0100868 opt.sig_algs = DFL_SIG_ALGS;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200869 opt.transport = DFL_TRANSPORT;
870 opt.hs_to_min = DFL_HS_TO_MIN;
871 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200872 opt.dtls_mtu = DFL_DTLS_MTU;
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200873 opt.fallback = DFL_FALLBACK;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200874 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100875 opt.etm = DFL_ETM;
Hanno Becker4d615912018-08-14 13:33:30 +0100876 opt.dgram_packing = DFL_DGRAM_PACKING;
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300877 opt.serialize = DFL_SERIALIZE;
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200878 opt.context_file = DFL_CONTEXT_FILE;
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300879 opt.eap_tls = DFL_EAP_TLS;
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200880 opt.reproducible = DFL_REPRODUCIBLE;
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100881 opt.nss_keylog = DFL_NSS_KEYLOG;
882 opt.nss_keylog_file = DFL_NSS_KEYLOG_FILE;
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +0100883 opt.skip_close_notify = DFL_SKIP_CLOSE_NOTIFY;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200884 opt.query_config_mode = DFL_QUERY_CONFIG_MODE;
Ron Eldor6ea64512018-07-02 10:08:07 +0300885 opt.use_srtp = DFL_USE_SRTP;
886 opt.force_srtp_profile = DFL_SRTP_FORCE_PROFILE;
887 opt.mki = DFL_SRTP_MKI;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000888
889 for( i = 1; i < argc; i++ )
890 {
Paul Bakker9caf2d22010-02-18 19:37:19 +0000891 p = argv[i];
892 if( ( q = strchr( p, '=' ) ) == NULL )
893 goto usage;
894 *q++ = '\0';
895
896 if( strcmp( p, "server_name" ) == 0 )
897 opt.server_name = q;
Manuel Pégourié-Gonnard0d8780b2014-02-25 11:11:26 +0100898 else if( strcmp( p, "server_addr" ) == 0 )
899 opt.server_addr = q;
Paul Bakker9caf2d22010-02-18 19:37:19 +0000900 else if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200901 opt.server_port = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100902 else if( strcmp( p, "dtls" ) == 0 )
903 {
904 int t = atoi( q );
905 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200906 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100907 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200908 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +0100909 else
910 goto usage;
911 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000912 else if( strcmp( p, "debug_level" ) == 0 )
913 {
914 opt.debug_level = atoi( q );
915 if( opt.debug_level < 0 || opt.debug_level > 65535 )
916 goto usage;
917 }
Hanno Beckerbb425db2019-04-03 12:59:58 +0100918 else if( strcmp( p, "context_crt_cb" ) == 0 )
919 {
920 opt.context_crt_cb = atoi( q );
921 if( opt.context_crt_cb != 0 && opt.context_crt_cb != 1 )
922 goto usage;
923 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100924 else if( strcmp( p, "nbio" ) == 0 )
925 {
926 opt.nbio = atoi( q );
927 if( opt.nbio < 0 || opt.nbio > 2 )
928 goto usage;
929 }
Hanno Becker16970d22017-10-10 15:56:37 +0100930 else if( strcmp( p, "event" ) == 0 )
931 {
932 opt.event = atoi( q );
933 if( opt.event < 0 || opt.event > 2 )
934 goto usage;
935 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +0200936 else if( strcmp( p, "read_timeout" ) == 0 )
937 opt.read_timeout = atoi( q );
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +0200938 else if( strcmp( p, "max_resend" ) == 0 )
939 {
940 opt.max_resend = atoi( q );
941 if( opt.max_resend < 0 )
942 goto usage;
943 }
Paul Bakker9caf2d22010-02-18 19:37:19 +0000944 else if( strcmp( p, "request_page" ) == 0 )
945 opt.request_page = q;
Paul Bakker93c32b22014-04-25 13:40:05 +0200946 else if( strcmp( p, "request_size" ) == 0 )
947 {
948 opt.request_size = atoi( q );
Hanno Beckere4ad3e82017-09-18 15:05:46 +0100949 if( opt.request_size < 0 ||
950 opt.request_size > MAX_REQUEST_SIZE )
Paul Bakker93c32b22014-04-25 13:40:05 +0200951 goto usage;
952 }
Paul Bakker5690efc2011-05-26 13:16:06 +0000953 else if( strcmp( p, "ca_file" ) == 0 )
954 opt.ca_file = q;
Paul Bakker8d914582012-06-04 12:46:42 +0000955 else if( strcmp( p, "ca_path" ) == 0 )
956 opt.ca_path = q;
Paul Bakker67968392010-07-18 08:28:20 +0000957 else if( strcmp( p, "crt_file" ) == 0 )
958 opt.crt_file = q;
959 else if( strcmp( p, "key_file" ) == 0 )
960 opt.key_file = q;
Hanno Becker2d3ac682020-08-17 09:42:37 +0100961 else if( strcmp( p, "key_pwd" ) == 0 )
962 opt.key_pwd = q;
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +0100963#if defined(MBEDTLS_USE_PSA_CRYPTO) && defined(MBEDTLS_X509_CRT_PARSE_C)
964 else if( strcmp( p, "key_opaque" ) == 0 )
965 opt.key_opaque = atoi( q );
966#endif
Hanno Beckera0e20d02019-05-15 14:03:01 +0100967#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +0100968 else if( strcmp( p, "cid" ) == 0 )
969 {
970 opt.cid_enabled = atoi( q );
971 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
972 goto usage;
973 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100974 else if( strcmp( p, "cid_renego" ) == 0 )
975 {
976 opt.cid_enabled_renego = atoi( q );
977 if( opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1 )
978 goto usage;
979 }
Hanno Becker90cb3592019-04-09 17:24:19 +0100980 else if( strcmp( p, "cid_val" ) == 0 )
981 {
982 opt.cid_val = q;
983 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100984 else if( strcmp( p, "cid_val_renego" ) == 0 )
985 {
986 opt.cid_val_renego = q;
987 }
Hanno Beckera0e20d02019-05-15 14:03:01 +0100988#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200989 else if( strcmp( p, "psk" ) == 0 )
990 opt.psk = q;
Hanno Beckere86964c2018-10-23 11:37:50 +0100991#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000992 else if( strcmp( p, "psk_opaque" ) == 0 )
993 opt.psk_opaque = atoi( q );
Hanno Beckere86964c2018-10-23 11:37:50 +0100994#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200995#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
996 else if( strcmp( p, "ca_callback" ) == 0)
997 opt.ca_callback = atoi( q );
998#endif
Paul Bakkerd4a56ec2013-04-16 18:05:29 +0200999 else if( strcmp( p, "psk_identity" ) == 0 )
1000 opt.psk_identity = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001001 else if( strcmp( p, "ecjpake_pw" ) == 0 )
1002 opt.ecjpake_pw = q;
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02001003 else if( strcmp( p, "ec_max_ops" ) == 0 )
1004 opt.ec_max_ops = atoi( q );
Paul Bakker51936882011-02-20 16:05:58 +00001005 else if( strcmp( p, "force_ciphersuite" ) == 0 )
1006 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001007 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakker51936882011-02-20 16:05:58 +00001008
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +02001009 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerfab5c822012-02-06 16:45:10 +00001010 {
1011 ret = 2;
Paul Bakker51936882011-02-20 16:05:58 +00001012 goto usage;
Paul Bakkerfab5c822012-02-06 16:45:10 +00001013 }
Paul Bakker51936882011-02-20 16:05:58 +00001014 opt.force_ciphersuite[1] = 0;
1015 }
Paul Bakker48916f92012-09-16 19:57:18 +00001016 else if( strcmp( p, "renegotiation" ) == 0 )
1017 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001018 opt.renegotiation = (atoi( q )) ?
1019 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1020 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakker48916f92012-09-16 19:57:18 +00001021 }
1022 else if( strcmp( p, "allow_legacy" ) == 0 )
1023 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001024 switch( atoi( q ) )
1025 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001026 case -1:
1027 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1028 break;
1029 case 0:
1030 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1031 break;
1032 case 1:
1033 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1034 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001035 default: goto usage;
1036 }
Paul Bakker48916f92012-09-16 19:57:18 +00001037 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001038 else if( strcmp( p, "renegotiate" ) == 0 )
1039 {
1040 opt.renegotiate = atoi( q );
1041 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1042 goto usage;
1043 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02001044 else if( strcmp( p, "exchanges" ) == 0 )
1045 {
1046 opt.exchanges = atoi( q );
1047 if( opt.exchanges < 1 )
1048 goto usage;
1049 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001050 else if( strcmp( p, "reconnect" ) == 0 )
1051 {
1052 opt.reconnect = atoi( q );
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02001053 if( opt.reconnect < 0 || opt.reconnect > 2 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02001054 goto usage;
1055 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001056 else if( strcmp( p, "reco_delay" ) == 0 )
1057 {
1058 opt.reco_delay = atoi( q );
1059 if( opt.reco_delay < 0 )
1060 goto usage;
1061 }
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02001062 else if( strcmp( p, "reco_mode" ) == 0 )
1063 {
1064 opt.reco_mode = atoi( q );
1065 if( opt.reco_mode < 0 )
1066 goto usage;
1067 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02001068 else if( strcmp( p, "reconnect_hard" ) == 0 )
1069 {
1070 opt.reconnect_hard = atoi( q );
1071 if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 )
1072 goto usage;
1073 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001074 else if( strcmp( p, "tickets" ) == 0 )
1075 {
1076 opt.tickets = atoi( q );
1077 if( opt.tickets < 0 || opt.tickets > 2 )
1078 goto usage;
1079 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001080 else if( strcmp( p, "alpn" ) == 0 )
1081 {
1082 opt.alpn_string = q;
1083 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001084 else if( strcmp( p, "extended_ms" ) == 0 )
1085 {
1086 switch( atoi( q ) )
1087 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001088 case 0:
1089 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1090 break;
1091 case 1:
1092 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1093 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001094 default: goto usage;
1095 }
1096 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001097 else if( strcmp( p, "curves" ) == 0 )
1098 opt.curves = q;
Ronald Cron6f135e12021-12-08 16:57:54 +01001099#if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \
Hanno Becker11ceadd2021-08-10 13:36:41 +01001100 defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
1101 else if( strcmp( p, "sig_algs" ) == 0 )
1102 opt.sig_algs = q;
Ronald Cron6f135e12021-12-08 16:57:54 +01001103#endif /* MBEDTLS_SSL_PROTO_TLS1_3 && MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED */
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001104 else if( strcmp( p, "etm" ) == 0 )
1105 {
1106 switch( atoi( q ) )
1107 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001108 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1109 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001110 default: goto usage;
1111 }
1112 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001113#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +01001114 else if( strcmp( p, "tls13_kex_modes" ) == 0 )
1115 {
Jerry Yu31c01d32021-08-24 10:49:06 +08001116 if( strcmp( q, "psk" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001117 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001118 else if( strcmp(q, "psk_ephemeral" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001119 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL;
Jerry Yu31c01d32021-08-24 10:49:06 +08001120 else if( strcmp(q, "ephemeral" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001121 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001122 else if( strcmp(q, "ephemeral_all" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001123 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ALL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001124 else if( strcmp( q, "psk_all" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001125 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ALL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001126 else if( strcmp( q, "all" ) == 0 )
Xiaofei Bai746f9482021-11-12 08:53:56 +00001127 opt.tls13_kex_modes = MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL;
Hanno Becker2c0f6972021-07-24 06:27:16 +01001128 else goto usage;
1129 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001130#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001131 else if( strcmp( p, "min_version" ) == 0 )
1132 {
Xiaofei Baid25fab62021-12-02 06:36:27 +00001133 if( strcmp( q, "tls12" ) == 0 ||
1134 strcmp( q, "dtls12" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001135 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Ronald Cron6f135e12021-12-08 16:57:54 +01001136#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +00001137 else if( strcmp( q, "tls13" ) == 0 )
Jerry Yub1dc59a2021-08-05 15:58:09 +08001138 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_4;
Ronald Cron6f135e12021-12-08 16:57:54 +01001139#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001140 else
1141 goto usage;
1142 }
1143 else if( strcmp( p, "max_version" ) == 0 )
1144 {
Xiaofei Baid25fab62021-12-02 06:36:27 +00001145 if( strcmp( q, "tls12" ) == 0 ||
1146 strcmp( q, "dtls12" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001147 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Ronald Cron6f135e12021-12-08 16:57:54 +01001148#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +00001149 else if( strcmp( q, "tls13" ) == 0 )
Jerry Yub1dc59a2021-08-05 15:58:09 +08001150 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_4;
Ronald Cron6f135e12021-12-08 16:57:54 +01001151#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001152 else
1153 goto usage;
1154 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001155 else if( strcmp( p, "allow_sha1" ) == 0 )
1156 {
1157 switch( atoi( q ) )
1158 {
1159 case 0: opt.allow_sha1 = 0; break;
1160 case 1: opt.allow_sha1 = 1; break;
1161 default: goto usage;
1162 }
1163 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001164 else if( strcmp( p, "force_version" ) == 0 )
1165 {
Xiaofei Baid25fab62021-12-02 06:36:27 +00001166 if( strcmp( q, "tls12" ) == 0 )
Paul Bakker1d29fb52012-09-28 13:28:45 +00001167 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001168 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1169 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001170 }
Xiaofei Baid25fab62021-12-02 06:36:27 +00001171 else if( strcmp( q, "dtls12" ) == 0 )
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001172 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001173 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1174 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1175 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001176 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001177#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Xiaofei Baid25fab62021-12-02 06:36:27 +00001178 else if( strcmp( q, "tls13" ) == 0 )
Jerry Yub1dc59a2021-08-05 15:58:09 +08001179 {
1180 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_4;
1181 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_4;
1182 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001183#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Paul Bakker1d29fb52012-09-28 13:28:45 +00001184 else
1185 goto usage;
1186 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001187 else if( strcmp( p, "auth_mode" ) == 0 )
1188 {
1189 if( strcmp( q, "none" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001190 opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001191 else if( strcmp( q, "optional" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001192 opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001193 else if( strcmp( q, "required" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001194 opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001195 else
1196 goto usage;
1197 }
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001198 else if( strcmp( p, "max_frag_len" ) == 0 )
1199 {
1200 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001201 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001202 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001203 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001204 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001205 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001206 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001207 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001208 else
1209 goto usage;
1210 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001211 else if( strcmp( p, "trunc_hmac" ) == 0 )
1212 {
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001213 switch( atoi( q ) )
1214 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001215 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1216 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnard265fe992015-01-09 12:43:35 +01001217 default: goto usage;
1218 }
Manuel Pégourié-Gonnarde980a992013-07-19 11:08:52 +02001219 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001220 else if( strcmp( p, "hs_timeout" ) == 0 )
1221 {
1222 if( ( p = strchr( q, '-' ) ) == NULL )
1223 goto usage;
1224 *p++ = '\0';
1225 opt.hs_to_min = atoi( q );
1226 opt.hs_to_max = atoi( p );
1227 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1228 goto usage;
1229 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001230 else if( strcmp( p, "mtu" ) == 0 )
1231 {
1232 opt.dtls_mtu = atoi( q );
1233 if( opt.dtls_mtu < 0 )
1234 goto usage;
1235 }
Hanno Becker4d615912018-08-14 13:33:30 +01001236 else if( strcmp( p, "dgram_packing" ) == 0 )
1237 {
1238 opt.dgram_packing = atoi( q );
1239 if( opt.dgram_packing != 0 &&
1240 opt.dgram_packing != 1 )
1241 {
1242 goto usage;
1243 }
1244 }
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01001245 else if( strcmp( p, "recsplit" ) == 0 )
1246 {
1247 opt.recsplit = atoi( q );
1248 if( opt.recsplit < 0 || opt.recsplit > 1 )
1249 goto usage;
1250 }
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001251 else if( strcmp( p, "dhmlen" ) == 0 )
1252 {
1253 opt.dhmlen = atoi( q );
1254 if( opt.dhmlen < 0 )
1255 goto usage;
1256 }
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001257 else if( strcmp( p, "query_config" ) == 0 )
1258 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001259 opt.query_config_mode = 1;
1260 query_config_ret = query_config( q );
gabor-mezei-arm78595852020-04-28 10:40:30 +02001261 goto exit;
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001262 }
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001263 else if( strcmp( p, "serialize") == 0 )
1264 {
1265 opt.serialize = atoi( q );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03001266 if( opt.serialize < 0 || opt.serialize > 2)
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001267 goto usage;
1268 }
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001269 else if( strcmp( p, "context_file") == 0 )
1270 {
1271 opt.context_file = q;
1272 }
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001273 else if( strcmp( p, "eap_tls" ) == 0 )
1274 {
1275 opt.eap_tls = atoi( q );
1276 if( opt.eap_tls < 0 || opt.eap_tls > 1 )
1277 goto usage;
1278 }
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001279 else if( strcmp( p, "reproducible" ) == 0 )
1280 {
1281 opt.reproducible = 1;
1282 }
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001283 else if( strcmp( p, "nss_keylog" ) == 0 )
1284 {
1285 opt.nss_keylog = atoi( q );
1286 if( opt.nss_keylog < 0 || opt.nss_keylog > 1 )
1287 goto usage;
1288 }
1289 else if( strcmp( p, "nss_keylog_file" ) == 0 )
1290 {
1291 opt.nss_keylog_file = q;
1292 }
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01001293 else if( strcmp( p, "skip_close_notify" ) == 0 )
1294 {
1295 opt.skip_close_notify = atoi( q );
1296 if( opt.skip_close_notify < 0 || opt.skip_close_notify > 1 )
1297 goto usage;
Johan Pascalb64eab72020-04-24 02:53:49 +07001298 }
Ron Eldor6ea64512018-07-02 10:08:07 +03001299 else if( strcmp( p, "use_srtp" ) == 0 )
1300 {
1301 opt.use_srtp = atoi ( q );
1302 }
1303 else if( strcmp( p, "srtp_force_profile" ) == 0 )
1304 {
1305 opt.force_srtp_profile = atoi( q );
1306 }
1307 else if( strcmp( p, "mki" ) == 0 )
1308 {
1309 opt.mki = q;
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01001310 }
Paul Bakker9caf2d22010-02-18 19:37:19 +00001311 else
1312 goto usage;
1313 }
Paul Bakker5121ce52009-01-03 21:22:43 +00001314
Hanno Beckerbc5308c2019-09-09 11:38:51 +01001315 if( opt.nss_keylog != 0 && opt.eap_tls != 0 )
1316 {
1317 mbedtls_printf( "Error: eap_tls and nss_keylog options cannot be used together.\n" );
1318 goto usage;
1319 }
1320
Hanno Becker16970d22017-10-10 15:56:37 +01001321 /* Event-driven IO is incompatible with the above custom
1322 * receive and send functions, as the polling builds on
1323 * refers to the underlying net_context. */
1324 if( opt.event == 1 && opt.nbio != 1 )
1325 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001326 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001327 opt.nbio = 1;
1328 }
1329
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001330#if defined(MBEDTLS_DEBUG_C)
1331 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001332#endif
1333
Gilles Peskineeccd8882020-03-10 12:19:08 +01001334#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Paul Bakker5121ce52009-01-03 21:22:43 +00001335 /*
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001336 * Unhexify the pre-shared key if any is given
1337 */
1338 if( strlen( opt.psk ) )
1339 {
Ronald Cron7d866162020-06-18 10:36:26 +02001340 if( mbedtls_test_unhexify( psk, sizeof( psk ),
1341 opt.psk, &psk_len ) != 0 )
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001342 {
Ronald Cron7d866162020-06-18 10:36:26 +02001343 mbedtls_printf( "pre-shared key not valid\n" );
Hanno Becker1f583ee2019-04-09 17:12:56 +01001344 goto exit;
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001345 }
1346 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01001347#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001348
Hanno Beckere86964c2018-10-23 11:37:50 +01001349#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001350 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001351 {
1352 if( opt.psk == NULL )
1353 {
Hanno Becker1d911cd2018-11-15 13:06:09 +00001354 mbedtls_printf( "psk_opaque set but no psk to be imported specified.\n" );
Hanno Beckere86964c2018-10-23 11:37:50 +01001355 ret = 2;
1356 goto usage;
1357 }
1358
1359 if( opt.force_ciphersuite[0] <= 0 )
1360 {
1361 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1362 ret = 2;
1363 goto usage;
1364 }
1365 }
1366#endif /* MBEDTLS_USE_PSA_CRYPTO */
1367
1368 if( opt.force_ciphersuite[0] > 0 )
1369 {
1370 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
1371 ciphersuite_info =
1372 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
1373
1374 if( opt.max_version != -1 &&
1375 ciphersuite_info->min_minor_ver > opt.max_version )
1376 {
1377 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
1378 ret = 2;
1379 goto usage;
1380 }
1381 if( opt.min_version != -1 &&
1382 ciphersuite_info->max_minor_ver < opt.min_version )
1383 {
1384 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
1385 ret = 2;
1386 goto usage;
1387 }
1388
1389 /* If the server selects a version that's not supported by
1390 * this suite, then there will be no common ciphersuite... */
1391 if( opt.max_version == -1 ||
1392 opt.max_version > ciphersuite_info->max_minor_ver )
1393 {
1394 opt.max_version = ciphersuite_info->max_minor_ver;
1395 }
1396 if( opt.min_version < ciphersuite_info->min_minor_ver )
1397 {
1398 opt.min_version = ciphersuite_info->min_minor_ver;
TRodziewicz4ca18aa2021-05-20 14:46:20 +02001399 /* DTLS starts with TLS 1.2 */
Hanno Beckere86964c2018-10-23 11:37:50 +01001400 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM &&
TRodziewicz0f82ec62021-05-12 17:49:18 +02001401 opt.min_version < MBEDTLS_SSL_MINOR_VERSION_3 )
1402 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Hanno Beckere86964c2018-10-23 11:37:50 +01001403 }
1404
Hanno Beckere86964c2018-10-23 11:37:50 +01001405#if defined(MBEDTLS_USE_PSA_CRYPTO)
Andrzej Kurek7a58d522022-01-19 12:34:02 -05001406#if defined (MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001407 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001408 {
1409 /* Ensure that the chosen ciphersuite is PSK-only; we must know
1410 * the ciphersuite in advance to set the correct policy for the
1411 * PSK key slot. This limitation might go away in the future. */
1412 if( ciphersuite_info->key_exchange != MBEDTLS_KEY_EXCHANGE_PSK ||
1413 opt.min_version != MBEDTLS_SSL_MINOR_VERSION_3 )
1414 {
1415 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1416 ret = 2;
1417 goto usage;
1418 }
1419
1420 /* Determine KDF algorithm the opaque PSK will be used in. */
Mateusz Starzyk3352a532021-04-06 14:28:22 +02001421#if defined(MBEDTLS_SHA384_C)
Hanno Beckere86964c2018-10-23 11:37:50 +01001422 if( ciphersuite_info->mac == MBEDTLS_MD_SHA384 )
1423 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_384);
1424 else
Mateusz Starzyk3352a532021-04-06 14:28:22 +02001425#endif /* MBEDTLS_SHA384_C */
Hanno Beckere86964c2018-10-23 11:37:50 +01001426 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_256);
1427 }
Andrzej Kurek7a58d522022-01-19 12:34:02 -05001428#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Hanno Beckere86964c2018-10-23 11:37:50 +01001429#endif /* MBEDTLS_USE_PSA_CRYPTO */
1430 }
1431
Hanno Beckera0e20d02019-05-15 14:03:01 +01001432#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Ronald Cron7d866162020-06-18 10:36:26 +02001433 if( mbedtls_test_unhexify( cid, sizeof( cid ),
1434 opt.cid_val, &cid_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001435 {
Ronald Cron7d866162020-06-18 10:36:26 +02001436 mbedtls_printf( "CID not valid\n" );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001437 goto exit;
1438 }
1439
1440 /* Keep CID settings for renegotiation unless
1441 * specified otherwise. */
1442 if( opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO )
1443 opt.cid_enabled_renego = opt.cid_enabled;
1444 if( opt.cid_val_renego == DFL_CID_VALUE_RENEGO )
1445 opt.cid_val_renego = opt.cid_val;
1446
Ronald Cron7d866162020-06-18 10:36:26 +02001447 if( mbedtls_test_unhexify( cid_renego, sizeof( cid_renego ),
1448 opt.cid_val_renego, &cid_renego_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001449 {
Ronald Cron7d866162020-06-18 10:36:26 +02001450 mbedtls_printf( "CID not valid\n" );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001451 goto exit;
1452 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001453#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01001454
Hanno Beckere6706e62017-05-15 16:05:15 +01001455#if defined(MBEDTLS_ECP_C)
1456 if( opt.curves != NULL )
1457 {
1458 p = (char *) opt.curves;
1459 i = 0;
1460
1461 if( strcmp( p, "none" ) == 0 )
1462 {
Brett Warren25386b72021-08-17 09:32:04 +01001463 group_list[0] = 0;
Hanno Beckere6706e62017-05-15 16:05:15 +01001464 }
1465 else if( strcmp( p, "default" ) != 0 )
1466 {
1467 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01001468 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001469 {
1470 q = p;
1471
1472 /* Terminate the current string */
1473 while( *p != ',' && *p != '\0' )
1474 p++;
1475 if( *p == ',' )
1476 *p++ = '\0';
1477
1478 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
1479 {
Brett Warren25386b72021-08-17 09:32:04 +01001480 group_list[i++] = curve_cur->tls_id;
Hanno Beckere6706e62017-05-15 16:05:15 +01001481 }
1482 else
1483 {
1484 mbedtls_printf( "unknown curve %s\n", q );
1485 mbedtls_printf( "supported curves: " );
1486 for( curve_cur = mbedtls_ecp_curve_list();
1487 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
1488 curve_cur++ )
1489 {
1490 mbedtls_printf( "%s ", curve_cur->name );
1491 }
1492 mbedtls_printf( "\n" );
1493 goto exit;
1494 }
1495 }
1496
1497 mbedtls_printf("Number of curves: %d\n", i );
1498
Hanno Becker8651a432017-06-09 16:13:22 +01001499 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01001500 {
Hanno Becker8651a432017-06-09 16:13:22 +01001501 mbedtls_printf( "curves list too long, maximum %d",
1502 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01001503 goto exit;
1504 }
1505
Brett Warren25386b72021-08-17 09:32:04 +01001506 group_list[i] = 0;
Hanno Beckere6706e62017-05-15 16:05:15 +01001507 }
1508 }
1509#endif /* MBEDTLS_ECP_C */
1510
Ronald Cron6f135e12021-12-08 16:57:54 +01001511#if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \
Hanno Becker11ceadd2021-08-10 13:36:41 +01001512 defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
1513 if( opt.sig_algs != NULL )
1514 {
1515 p = (char *) opt.sig_algs;
1516 i = 0;
1517
Xiaofei Bai746f9482021-11-12 08:53:56 +00001518 /* Leave room for a final MBEDTLS_TLS1_3_SIG_NONE in signature algorithm list (sig_alg_list). */
Hanno Becker11ceadd2021-08-10 13:36:41 +01001519 while( i < SIG_ALG_LIST_SIZE - 1 && *p != '\0' )
1520 {
1521 q = p;
1522
1523 /* Terminate the current string */
1524 while( *p != ',' && *p != '\0' )
1525 p++;
1526 if( *p == ',' )
1527 *p++ = '\0';
1528
1529 if( strcmp( q, "ecdsa_secp256r1_sha256" ) == 0 )
1530 {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001531 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP256R1_SHA256;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001532 }
1533 else if( strcmp( q, "ecdsa_secp384r1_sha384" ) == 0 )
1534 {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001535 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP384R1_SHA384;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001536 }
1537 else if( strcmp( q, "ecdsa_secp521r1_sha512" ) == 0 )
1538 {
Xiaofei Bai746f9482021-11-12 08:53:56 +00001539 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_ECDSA_SECP521R1_SHA512;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001540 }
XiaokangQianff5f6c82021-11-23 08:49:51 +00001541 else if( strcmp( q, "rsa_pss_rsae_sha256" ) == 0 )
XiaokangQianf977e9a2021-11-23 07:19:23 +00001542 {
Xiaofei Bai95395012021-11-25 08:51:30 +00001543 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PSS_RSAE_SHA256;
XiaokangQianf977e9a2021-11-23 07:19:23 +00001544 }
XiaokangQian4d2329f2021-11-24 02:27:38 +00001545 else if( strcmp( q, "rsa_pkcs1_sha256" ) == 0 )
1546 {
Xiaofei Bai6dc90da2021-11-26 08:11:40 +00001547 sig_alg_list[i++] = MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA256;
XiaokangQian4d2329f2021-11-24 02:27:38 +00001548 }
Hanno Becker11ceadd2021-08-10 13:36:41 +01001549 else
1550 {
1551 mbedtls_printf( "unknown signature algorithm %s\n", q );
1552 mbedtls_printf( "supported signature algorithms: " );
1553 mbedtls_printf( "ecdsa_secp256r1_sha256 " );
1554 mbedtls_printf( "ecdsa_secp384r1_sha384 " );
1555 mbedtls_printf( "ecdsa_secp521r1_sha512 " );
XiaokangQianff5f6c82021-11-23 08:49:51 +00001556 mbedtls_printf( "rsa_pss_rsae_sha256 " );
XiaokangQian4d2329f2021-11-24 02:27:38 +00001557 mbedtls_printf( "rsa_pkcs1_sha256 " );
Hanno Becker11ceadd2021-08-10 13:36:41 +01001558 mbedtls_printf( "\n" );
1559 goto exit;
1560 }
1561 }
1562
1563 if( i == ( SIG_ALG_LIST_SIZE - 1 ) && *p != '\0' )
1564 {
1565 mbedtls_printf( "signature algorithm list too long, maximum %d",
1566 SIG_ALG_LIST_SIZE - 1 );
1567 goto exit;
1568 }
1569
Xiaofei Bai746f9482021-11-12 08:53:56 +00001570 sig_alg_list[i] = MBEDTLS_TLS1_3_SIG_NONE;
Hanno Becker11ceadd2021-08-10 13:36:41 +01001571 }
Ronald Cron6f135e12021-12-08 16:57:54 +01001572#endif /* MBEDTLS_SSL_PROTO_TLS1_3 && MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED */
Hanno Becker11ceadd2021-08-10 13:36:41 +01001573
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001574#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001575 if( opt.alpn_string != NULL )
1576 {
1577 p = (char *) opt.alpn_string;
1578 i = 0;
1579
1580 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01001581 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001582 {
1583 alpn_list[i++] = p;
1584
1585 /* Terminate the current string and move on to next one */
1586 while( *p != ',' && *p != '\0' )
1587 p++;
1588 if( *p == ',' )
1589 *p++ = '\0';
1590 }
1591 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001592#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001593
Paul Bakkerd4a56ec2013-04-16 18:05:29 +02001594 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00001595 * 0. Initialize the RNG and the session data
1596 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001597 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +00001598 fflush( stdout );
1599
Gilles Peskine4a23c982021-02-03 13:54:41 +01001600 ret = rng_seed( &rng, opt.reproducible, pers );
1601 if( ret != 0 )
Gilles Peskinedaa94c42021-01-13 18:38:27 +01001602 goto exit;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001603 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001604
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001605#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00001606 /*
1607 * 1.1. Load the trusted CA
1608 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001609 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001610 fflush( stdout );
1611
Hanno Becker623e7b42019-03-05 16:02:15 +00001612 if( strcmp( opt.ca_path, "none" ) == 0 ||
1613 strcmp( opt.ca_file, "none" ) == 0 )
1614 {
1615 ret = 0;
1616 }
1617 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001618#if defined(MBEDTLS_FS_IO)
Paul Bakker8d914582012-06-04 12:46:42 +00001619 if( strlen( opt.ca_path ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001620 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakker8d914582012-06-04 12:46:42 +00001621 else if( strlen( opt.ca_file ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001622 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001623 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001624#endif
Hanno Becker2900b142019-02-01 08:15:06 +00001625 {
1626#if defined(MBEDTLS_PEM_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001627 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001628 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001629 ret = mbedtls_x509_crt_parse( &cacert,
1630 (const unsigned char *) mbedtls_test_cas[i],
1631 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01001632 if( ret != 0 )
1633 break;
1634 }
Hanno Becker2900b142019-02-01 08:15:06 +00001635 if( ret == 0 )
1636#endif /* MBEDTLS_PEM_PARSE_C */
1637 for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ )
1638 {
1639 ret = mbedtls_x509_crt_parse_der( &cacert,
1640 (const unsigned char *) mbedtls_test_cas_der[i],
1641 mbedtls_test_cas_der_len[i] );
1642 if( ret != 0 )
1643 break;
1644 }
1645 }
Paul Bakker42488232012-05-16 08:21:05 +00001646 if( ret < 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00001647 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001648 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001649 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001650 goto exit;
1651 }
1652
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001653 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001654
1655 /*
1656 * 1.2. Load own certificate and private key
1657 *
1658 * (can be skipped if client authentication is not required)
1659 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001660 mbedtls_printf( " . Loading the client cert. and key..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001661 fflush( stdout );
1662
Hanno Becker623e7b42019-03-05 16:02:15 +00001663 if( strcmp( opt.crt_file, "none" ) == 0 )
1664 ret = 0;
1665 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001666#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001667 if( strlen( opt.crt_file ) )
Hanno Becker623e7b42019-03-05 16:02:15 +00001668 ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file );
Paul Bakkered27a042013-04-18 22:46:23 +02001669 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001670#endif
Hanno Becker16970d22017-10-10 15:56:37 +01001671 ret = mbedtls_x509_crt_parse( &clicert,
1672 (const unsigned char *) mbedtls_test_cli_crt,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001673 mbedtls_test_cli_crt_len );
Paul Bakker5121ce52009-01-03 21:22:43 +00001674 if( ret != 0 )
1675 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001676 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001677 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001678 goto exit;
1679 }
1680
Hanno Becker623e7b42019-03-05 16:02:15 +00001681 if( strcmp( opt.key_file, "none" ) == 0 )
1682 ret = 0;
1683 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001684#if defined(MBEDTLS_FS_IO)
Paul Bakker67968392010-07-18 08:28:20 +00001685 if( strlen( opt.key_file ) )
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02001686 ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, opt.key_pwd, rng_get, &rng );
Paul Bakker67968392010-07-18 08:28:20 +00001687 else
Paul Bakker5690efc2011-05-26 13:16:06 +00001688#endif
Hanno Becker16970d22017-10-10 15:56:37 +01001689 ret = mbedtls_pk_parse_key( &pkey,
1690 (const unsigned char *) mbedtls_test_cli_key,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02001691 mbedtls_test_cli_key_len, NULL, 0, rng_get, &rng );
Paul Bakker5121ce52009-01-03 21:22:43 +00001692 if( ret != 0 )
1693 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001694 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001695 (unsigned int) -ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00001696 goto exit;
1697 }
1698
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001699#if defined(MBEDTLS_USE_PSA_CRYPTO)
1700 if( opt.key_opaque != 0 )
1701 {
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001702 if( ( ret = mbedtls_pk_wrap_as_opaque( &pkey, &key_slot,
Przemyslaw Stekielc2d2f212021-10-26 12:21:45 +02001703 PSA_ALG_ANY_HASH ) ) != 0 )
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001704 {
1705 mbedtls_printf( " failed\n ! "
Paul Elliott61d22092021-01-08 17:06:31 +00001706 "mbedtls_pk_wrap_as_opaque returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001707 goto exit;
1708 }
Manuel Pégourié-Gonnardef68be42018-11-07 09:42:35 +01001709 }
1710#endif /* MBEDTLS_USE_PSA_CRYPTO */
1711
Gilles Peskine05bf89d2022-01-25 17:50:25 +01001712 mbedtls_printf( " ok (key type: %s)\n",
1713 strlen( opt.key_file ) ? mbedtls_pk_get_name( &pkey ) : "none" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001714#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00001715
1716 /*
Jerry Yu2a572cf2021-08-06 11:21:08 +08001717 * 2. Setup stuff
Paul Bakker5121ce52009-01-03 21:22:43 +00001718 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001719 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00001720 fflush( stdout );
1721
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02001722 if( ( ret = mbedtls_ssl_config_defaults( &conf,
1723 MBEDTLS_SSL_IS_CLIENT,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02001724 opt.transport,
1725 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001726 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001727 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001728 (unsigned int) -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001729 goto exit;
1730 }
1731
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001732#if defined(MBEDTLS_X509_CRT_PARSE_C)
Gilles Peskineef86ab22017-05-05 18:59:02 +02001733 /* The default algorithms profile disables SHA-1, but our tests still
1734 rely on it heavily. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02001735 if( opt.allow_sha1 > 0 )
1736 {
1737 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
1738 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
Jerry Yu11f0a9c2022-01-12 18:43:08 +08001739 mbedtls_ssl_conf_sig_algs( &conf, ssl_sig_algs_for_test );
Gilles Peskinebc70a182017-05-09 15:59:24 +02001740 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02001741
Hanno Beckerbb425db2019-04-03 12:59:58 +01001742 if( opt.context_crt_cb == 0 )
1743 mbedtls_ssl_conf_verify( &conf, my_verify, NULL );
1744
Hanno Beckera1051b42019-02-26 11:38:29 +00001745 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Gilles Peskineef86ab22017-05-05 18:59:02 +02001746#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker915275b2012-09-28 07:10:55 +00001747
Hanno Beckera0e20d02019-05-15 14:03:01 +01001748#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001749 if( opt.cid_enabled == 1 || opt.cid_enabled_renego == 1 )
Hanno Beckerad4a1372019-05-03 13:06:44 +01001750 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001751 if( opt.cid_enabled == 1 &&
1752 opt.cid_enabled_renego == 1 &&
1753 cid_len != cid_renego_len )
1754 {
1755 mbedtls_printf( "CID length must not change during renegotiation\n" );
1756 goto usage;
1757 }
1758
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001759 if( opt.cid_enabled == 1 )
Hanno Becker8367ccc2019-05-14 11:30:10 +01001760 ret = mbedtls_ssl_conf_cid( &conf, cid_len,
1761 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001762 else
Hanno Becker8367ccc2019-05-14 11:30:10 +01001763 ret = mbedtls_ssl_conf_cid( &conf, cid_renego_len,
1764 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001765
Hanno Beckerad4a1372019-05-03 13:06:44 +01001766 if( ret != 0 )
1767 {
Hanno Beckerd5eed422019-05-23 16:58:22 +01001768 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001769 (unsigned int) -ret );
Hanno Beckerad4a1372019-05-03 13:06:44 +01001770 goto exit;
1771 }
1772 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001773#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerad4a1372019-05-03 13:06:44 +01001774
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01001775 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001776 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakker5121ce52009-01-03 21:22:43 +00001777
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001778#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001779 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Hanno Becker16970d22017-10-10 15:56:37 +01001780 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min,
1781 opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001782
Hanno Becker4d615912018-08-14 13:33:30 +01001783 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01001784 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001785#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001786
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001787#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001788 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001789 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001790 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n",
1791 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001792 goto exit;
1793 }
Paul Bakker05decb22013-08-15 13:33:48 +02001794#endif
Manuel Pégourié-Gonnard0df6b1f2013-07-16 13:39:57 +02001795
Ron Eldor6ea64512018-07-02 10:08:07 +03001796#if defined(MBEDTLS_SSL_DTLS_SRTP)
Bence Szépkúti880334c2020-12-14 14:42:13 +01001797 const mbedtls_ssl_srtp_profile forced_profile[] =
1798 { opt.force_srtp_profile, MBEDTLS_TLS_SRTP_UNSET };
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001799 if( opt.use_srtp == 1 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001800 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001801 if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001802 {
Johan Pascal253d0262020-09-22 13:04:45 +02001803 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles ( &conf, forced_profile );
Ron Eldor6ea64512018-07-02 10:08:07 +03001804 }
1805 else
1806 {
Johan Pascal253d0262020-09-22 13:04:45 +02001807 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles ( &conf, default_profiles );
Ron Eldor6ea64512018-07-02 10:08:07 +03001808 }
1809
1810 if( ret != 0 )
1811 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001812 mbedtls_printf( " failed\n ! "
1813 "mbedtls_ssl_conf_dtls_srtp_protection_profiles returned %d\n\n",
1814 ret );
Ron Eldor6ea64512018-07-02 10:08:07 +03001815 goto exit;
1816 }
1817
1818 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001819 else if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001820 {
1821 mbedtls_printf( " failed\n ! must enable use_srtp to force srtp profile\n\n" );
1822 goto exit;
1823 }
1824#endif /* MBEDTLS_SSL_DTLS_SRTP */
1825
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001826#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001827 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001828 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001829#endif
1830
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001831#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001832 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001833 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001834#endif
1835
Manuel Pégourié-Gonnard90966822015-06-11 17:02:29 +02001836#if defined(MBEDTLS_DHM_C)
1837 if( opt.dhmlen != DFL_DHMLEN )
1838 mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen );
1839#endif
1840
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001841#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001842 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001843 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001844 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001845 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n",
1846 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001847 goto exit;
1848 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001849#endif
1850
Philippe Antoine986b6f22019-06-07 15:04:32 +02001851 if (opt.reproducible)
1852 {
Philippe Antoinef91b3722019-06-11 16:02:43 +02001853#if defined(MBEDTLS_HAVE_TIME)
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001854#if defined(MBEDTLS_PLATFORM_TIME_ALT)
1855 mbedtls_platform_set_time( dummy_constant_time );
1856#else
Philippe Antoine7c9d7242019-06-11 12:11:36 +02001857 fprintf( stderr, "Warning: reproducible option used without constant time\n" );
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001858#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01001859#endif /* MBEDTLS_HAVE_TIME */
Philippe Antoine986b6f22019-06-07 15:04:32 +02001860 }
Gilles Peskine535fb372021-01-13 18:59:46 +01001861 mbedtls_ssl_conf_rng( &conf, rng_get, &rng );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001862 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001863
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001864 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakker5121ce52009-01-03 21:22:43 +00001865
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001866#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardb596abf2015-05-20 10:45:29 +02001867 mbedtls_ssl_conf_session_tickets( &conf, opt.tickets );
Paul Bakkera503a632013-08-14 13:48:06 +02001868#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001869
Paul Bakker645ce3a2012-10-31 12:32:41 +00001870 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001871 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00001872
Ronald Cron6f135e12021-12-08 16:57:54 +01001873#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker2c0f6972021-07-24 06:27:16 +01001874 mbedtls_ssl_conf_tls13_key_exchange_modes( &conf, opt.tls13_kex_modes );
Ronald Cron6f135e12021-12-08 16:57:54 +01001875#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker2c0f6972021-07-24 06:27:16 +01001876
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001877 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001878 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001879#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001880 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01001881#endif
Paul Bakker48916f92012-09-16 19:57:18 +00001882
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001883#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001884 if( strcmp( opt.ca_path, "none" ) != 0 &&
1885 strcmp( opt.ca_file, "none" ) != 0 )
1886 {
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001887#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1888 if( opt.ca_callback != 0 )
Hanno Beckercbb59032019-03-28 14:14:22 +00001889 mbedtls_ssl_conf_ca_cb( &conf, ca_callback, &cacert );
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001890 else
1891#endif
1892 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001893 }
1894 if( strcmp( opt.crt_file, "none" ) != 0 &&
1895 strcmp( opt.key_file, "none" ) != 0 )
1896 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02001897 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001898 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001899 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n",
1900 ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001901 goto exit;
1902 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01001903 }
Gilles Peskine34babfc2021-02-16 15:44:37 +01001904#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +02001905
Hanno Beckere6706e62017-05-15 16:05:15 +01001906#if defined(MBEDTLS_ECP_C)
1907 if( opt.curves != NULL &&
1908 strcmp( opt.curves, "default" ) != 0 )
1909 {
Brett Warren25386b72021-08-17 09:32:04 +01001910 mbedtls_ssl_conf_groups( &conf, group_list );
Hanno Beckere6706e62017-05-15 16:05:15 +01001911 }
1912#endif
1913
Ronald Cron6f135e12021-12-08 16:57:54 +01001914#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
Hanno Becker11ceadd2021-08-10 13:36:41 +01001915 if( opt.sig_algs != NULL )
1916 mbedtls_ssl_conf_sig_algs( &conf, sig_alg_list );
Ronald Cron6f135e12021-12-08 16:57:54 +01001917#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
Hanno Becker11ceadd2021-08-10 13:36:41 +01001918
Gilles Peskineeccd8882020-03-10 12:19:08 +01001919#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckere86964c2018-10-23 11:37:50 +01001920#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001921 if( opt.psk_opaque != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001922 {
Janos Follathbe4efc22019-08-08 11:38:18 +01001923 key_attributes = psa_key_attributes_init();
1924 psa_set_key_usage_flags( &key_attributes, PSA_KEY_USAGE_DERIVE );
1925 psa_set_key_algorithm( &key_attributes, alg );
1926 psa_set_key_type( &key_attributes, PSA_KEY_TYPE_DERIVE );
Hanno Beckere86964c2018-10-23 11:37:50 +01001927
Janos Follathbe4efc22019-08-08 11:38:18 +01001928 status = psa_import_key( &key_attributes, psk, psk_len, &slot );
Hanno Beckere86964c2018-10-23 11:37:50 +01001929 if( status != PSA_SUCCESS )
1930 {
1931 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
1932 goto exit;
1933 }
1934
1935 if( ( ret = mbedtls_ssl_conf_psk_opaque( &conf, slot,
1936 (const unsigned char *) opt.psk_identity,
Hanno Becker5cd607b2018-11-05 12:52:42 +00001937 strlen( opt.psk_identity ) ) ) != 0 )
Hanno Beckere86964c2018-10-23 11:37:50 +01001938 {
1939 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk_opaque returned %d\n\n",
1940 ret );
1941 goto exit;
1942 }
1943 }
1944 else
1945#endif /* MBEDTLS_USE_PSA_CRYPTO */
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01001946 if( psk_len > 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001947 {
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01001948 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
1949 (const unsigned char *) opt.psk_identity,
1950 strlen( opt.psk_identity ) );
1951 if( ret != 0 )
1952 {
1953 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n", ret );
1954 goto exit;
1955 }
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02001956 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01001957#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Paul Bakkered27a042013-04-18 22:46:23 +02001958
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001959 if( opt.min_version != DFL_MIN_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001960 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1961 opt.min_version );
Manuel Pégourié-Gonnard864a81f2014-02-10 14:25:10 +01001962
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02001963 if( opt.max_version != DFL_MAX_VERSION )
Hanno Becker16970d22017-10-10 15:56:37 +01001964 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3,
1965 opt.max_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00001966
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001967 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
1968 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001969 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001970 (unsigned int) -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001971 goto exit;
1972 }
1973
Hanno Becker7e6c1782021-06-08 09:24:55 +01001974 if( opt.eap_tls != 0 )
1975 {
1976 mbedtls_ssl_set_export_keys_cb( &ssl, eap_tls_key_derivation,
1977 &eap_tls_keying );
1978 }
1979 else if( opt.nss_keylog != 0 )
1980 {
1981 mbedtls_ssl_set_export_keys_cb( &ssl,
1982 nss_keylog_export,
1983 NULL );
1984 }
1985#if defined( MBEDTLS_SSL_DTLS_SRTP )
1986 else if( opt.use_srtp != 0 )
1987 {
1988 mbedtls_ssl_set_export_keys_cb( &ssl, dtls_srtp_key_derivation,
1989 &dtls_srtp_keying );
1990 }
1991#endif /* MBEDTLS_SSL_DTLS_SRTP */
Hanno Becker7e6c1782021-06-08 09:24:55 +01001992
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001993#if defined(MBEDTLS_X509_CRT_PARSE_C)
1994 if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 )
1995 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001996 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n",
1997 ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02001998 goto exit;
1999 }
2000#endif
2001
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002002#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
2003 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
2004 {
2005 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
2006 (const unsigned char *) opt.ecjpake_pw,
2007 strlen( opt.ecjpake_pw ) ) ) != 0 )
2008 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002009 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n",
2010 ret );
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002011 goto exit;
2012 }
2013 }
2014#endif
2015
Hanno Beckerbb425db2019-04-03 12:59:58 +01002016#if defined(MBEDTLS_X509_CRT_PARSE_C)
2017 if( opt.context_crt_cb == 1 )
2018 mbedtls_ssl_set_verify( &ssl, my_verify, NULL );
2019#endif /* MBEDTLS_X509_CRT_PARSE_C */
2020
Hanno Becker8b1af2f2019-07-03 17:02:43 +01002021 io_ctx.ssl = &ssl;
2022 io_ctx.net = &server_fd;
2023 mbedtls_ssl_set_bio( &ssl, &io_ctx, send_cb, recv_cb,
2024 opt.nbio == 0 ? recv_timeout_cb : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002025
Hanno Beckera0e20d02019-05-15 14:03:01 +01002026#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Becker90cb3592019-04-09 17:24:19 +01002027 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2028 {
2029 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
2030 cid, cid_len ) ) != 0 )
2031 {
2032 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2033 ret );
2034 goto exit;
2035 }
2036 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002037#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01002038
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02002039#if defined(MBEDTLS_SSL_PROTO_DTLS)
2040 if( opt.dtls_mtu != DFL_DTLS_MTU )
2041 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
2042#endif
2043
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002044#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002045 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2046 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002047#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002048
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002049#if defined(MBEDTLS_ECP_RESTARTABLE)
2050 if( opt.ec_max_ops != DFL_EC_MAX_OPS )
2051 mbedtls_ecp_set_max_ops( opt.ec_max_ops );
2052#endif
2053
Ron Eldor65b56ef2019-09-26 16:40:48 +03002054#if defined(MBEDTLS_SSL_DTLS_SRTP)
Johan Pascald576fdb2020-09-22 10:39:53 +02002055 if( opt.use_srtp != 0 && strlen( opt.mki ) != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002056 {
2057 if( mbedtls_test_unhexify( mki, sizeof( mki ),
2058 opt.mki,&mki_len ) != 0 )
2059 {
2060 mbedtls_printf( "mki value not valid hex\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002061 goto exit;
Ron Eldor6ea64512018-07-02 10:08:07 +03002062 }
2063
2064 mbedtls_ssl_conf_srtp_mki_value_supported( &conf, MBEDTLS_SSL_DTLS_SRTP_MKI_SUPPORTED );
Ron Eldoref72faf2018-07-12 11:54:20 +03002065 if( ( ret = mbedtls_ssl_dtls_srtp_set_mki_value( &ssl, mki,
Johan Pascald387aa02020-09-23 18:47:56 +02002066 (uint16_t) strlen( opt.mki ) / 2 ) ) != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002067 {
2068 mbedtls_printf( " failed\n ! mbedtls_ssl_dtls_srtp_set_mki_value returned %d\n\n", ret );
2069 goto exit;
2070 }
2071 }
2072#endif
2073
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002074 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002075
Paul Bakker5121ce52009-01-03 21:22:43 +00002076 /*
Jerry Yu2a572cf2021-08-06 11:21:08 +08002077 * 3. Start the connection
2078 */
2079 if( opt.server_addr == NULL)
2080 opt.server_addr = opt.server_name;
2081
2082 mbedtls_printf( " . Connecting to %s/%s/%s...",
2083 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
2084 opt.server_addr, opt.server_port );
2085 fflush( stdout );
2086
2087 if( ( ret = mbedtls_net_connect( &server_fd,
2088 opt.server_addr, opt.server_port,
2089 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2090 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
2091 {
2092 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
2093 (unsigned int) -ret );
2094 goto exit;
2095 }
2096
2097 if( opt.nbio > 0 )
2098 ret = mbedtls_net_set_nonblock( &server_fd );
2099 else
2100 ret = mbedtls_net_set_block( &server_fd );
2101 if( ret != 0 )
2102 {
2103 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
2104 (unsigned int) -ret );
2105 goto exit;
2106 }
2107
2108 mbedtls_printf( " ok\n" );
2109
2110 /*
Paul Bakker5121ce52009-01-03 21:22:43 +00002111 * 4. Handshake
2112 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002113 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00002114 fflush( stdout );
2115
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002116 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002117 {
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002118 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2119 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002120 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Paul Bakker5121ce52009-01-03 21:22:43 +00002121 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002122 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002123 (unsigned int) -ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002124 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
2125 mbedtls_printf(
Manuel Pégourié-Gonnardfcf2fc22014-03-11 11:10:27 +01002126 " Unable to verify the server's certificate. "
2127 "Either it is invalid,\n"
2128 " or you didn't set ca_file or ca_path "
2129 "to an appropriate value.\n"
2130 " Alternatively, you may want to use "
2131 "auth_mode=optional for testing purposes.\n" );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002132 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002133 goto exit;
2134 }
Hanno Becker16970d22017-10-10 15:56:37 +01002135
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002136#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002137 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2138 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002139#endif
2140
Hanno Becker16970d22017-10-10 15:56:37 +01002141 /* For event-driven IO, wait for socket to become available */
2142 if( opt.event == 1 /* level triggered IO */ )
2143 {
2144#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002145 ret = idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002146#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002147 ret = idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002148#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00002149 if( ret != 0 )
2150 goto exit;
Hanno Becker16970d22017-10-10 15:56:37 +01002151 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002152 }
2153
Glenn Strauss6eef5632022-01-23 08:37:02 -05002154 {
2155 int suite_id = mbedtls_ssl_get_ciphersuite_id_from_ssl( &ssl );
2156 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
2157 ciphersuite_info = mbedtls_ssl_ciphersuite_from_id( suite_id );
2158
2159 mbedtls_printf( " ok\n [ Protocol is %s ]\n"
2160 " [ Ciphersuite is %s ]\n"
2161 " [ Key size is %u ]\n",
2162 mbedtls_ssl_get_version( &ssl ),
2163 mbedtls_ssl_ciphersuite_get_name( ciphersuite_info ),
2164 (unsigned int)
2165 mbedtls_ssl_ciphersuite_get_cipher_key_bitlen( ciphersuite_info ) );
2166 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002167
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002168 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
2169 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002170 else
Mateusz Starzykf5c53512021-04-15 13:28:52 +02002171 mbedtls_printf( " [ Record expansion is unknown ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02002172
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002173#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Hanno Becker59d36702021-06-08 05:35:29 +01002174 mbedtls_printf( " [ Maximum incoming record payload length is %u ]\n",
2175 (unsigned int) mbedtls_ssl_get_max_in_record_payload( &ssl ) );
2176 mbedtls_printf( " [ Maximum outgoing record payload length is %u ]\n",
2177 (unsigned int) mbedtls_ssl_get_max_out_record_payload( &ssl ) );
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002178#endif
2179
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002180#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002181 if( opt.alpn_string != NULL )
2182 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002183 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
2184 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002185 alp ? alp : "(none)" );
2186 }
2187#endif
2188
Ron Eldor51d3ab52019-05-12 14:54:30 +03002189 if( opt.eap_tls != 0 )
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002190 {
2191 size_t j = 0;
Ron Eldor51d3ab52019-05-12 14:54:30 +03002192
2193 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type,
2194 eap_tls_keying.master_secret,
2195 sizeof( eap_tls_keying.master_secret ),
2196 eap_tls_label,
2197 eap_tls_keying.randbytes,
2198 sizeof( eap_tls_keying.randbytes ),
2199 eap_tls_keymaterial,
2200 sizeof( eap_tls_keymaterial ) ) )
2201 != 0 )
2202 {
2203 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002204 (unsigned int) -ret );
Ron Eldor51d3ab52019-05-12 14:54:30 +03002205 goto exit;
2206 }
2207
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002208 mbedtls_printf( " EAP-TLS key material is:" );
2209 for( j = 0; j < sizeof( eap_tls_keymaterial ); j++ )
2210 {
2211 if( j % 8 == 0 )
2212 mbedtls_printf("\n ");
2213 mbedtls_printf("%02x ", eap_tls_keymaterial[j] );
2214 }
2215 mbedtls_printf("\n");
2216
Ron Eldor51d3ab52019-05-12 14:54:30 +03002217 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type, NULL, 0,
Ron Eldor51c45072019-05-15 17:49:54 +03002218 eap_tls_label,
2219 eap_tls_keying.randbytes,
2220 sizeof( eap_tls_keying.randbytes ),
2221 eap_tls_iv,
2222 sizeof( eap_tls_iv ) ) ) != 0 )
Ron Eldor51d3ab52019-05-12 14:54:30 +03002223 {
2224 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002225 (unsigned int) -ret );
Ron Eldor51d3ab52019-05-12 14:54:30 +03002226 goto exit;
2227 }
2228
Ron Eldorb7fd64c2019-05-12 11:03:32 +03002229 mbedtls_printf( " EAP-TLS IV is:" );
2230 for( j = 0; j < sizeof( eap_tls_iv ); j++ )
2231 {
2232 if( j % 8 == 0 )
2233 mbedtls_printf("\n ");
2234 mbedtls_printf("%02x ", eap_tls_iv[j] );
2235 }
2236 mbedtls_printf("\n");
2237 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002238
2239#if defined( MBEDTLS_SSL_DTLS_SRTP )
2240 else if( opt.use_srtp != 0 )
2241 {
2242 size_t j = 0;
Johan Pascal2258a4f2020-10-28 13:53:09 +01002243 mbedtls_dtls_srtp_info dtls_srtp_negotiation_result;
2244 mbedtls_ssl_get_dtls_srtp_negotiation_result( &ssl, &dtls_srtp_negotiation_result );
Ron Eldor65b56ef2019-09-26 16:40:48 +03002245
Johan Pascal5fbe9e72020-10-29 10:49:21 +01002246 if( dtls_srtp_negotiation_result.chosen_dtls_srtp_profile
2247 == MBEDTLS_TLS_SRTP_UNSET )
Ron Eldor65b56ef2019-09-26 16:40:48 +03002248 {
Johan Pascald576fdb2020-09-22 10:39:53 +02002249 mbedtls_printf( " Unable to negotiate "
2250 "the use of DTLS-SRTP\n" );
Ron Eldor65b56ef2019-09-26 16:40:48 +03002251 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002252 else
Ron Eldor65b56ef2019-09-26 16:40:48 +03002253 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002254 if( ( ret = mbedtls_ssl_tls_prf( dtls_srtp_keying.tls_prf_type,
2255 dtls_srtp_keying.master_secret,
2256 sizeof( dtls_srtp_keying.master_secret ),
2257 dtls_srtp_label,
2258 dtls_srtp_keying.randbytes,
2259 sizeof( dtls_srtp_keying.randbytes ),
2260 dtls_srtp_key_material,
2261 sizeof( dtls_srtp_key_material ) ) )
2262 != 0 )
2263 {
2264 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
2265 (unsigned int) -ret );
2266 goto exit;
2267 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002268
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002269 mbedtls_printf( " DTLS-SRTP key material is:" );
2270 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
2271 {
2272 if( j % 8 == 0 )
Johan Pascald576fdb2020-09-22 10:39:53 +02002273 mbedtls_printf( "\n " );
2274 mbedtls_printf( "%02x ", dtls_srtp_key_material[j] );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002275 }
Johan Pascal9bc50b02020-09-24 12:01:13 +02002276 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002277
Johan Pascal9bc50b02020-09-24 12:01:13 +02002278 /* produce a less readable output used to perform automatic checks
2279 * - compare client and server output
2280 * - interop test with openssl which client produces this kind of output
2281 */
2282 mbedtls_printf( " Keying material: " );
2283 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
2284 {
2285 mbedtls_printf( "%02X", dtls_srtp_key_material[j] );
2286 }
Johan Pascald576fdb2020-09-22 10:39:53 +02002287 mbedtls_printf( "\n" );
Johan Pascal20c7db32020-10-26 22:45:58 +01002288
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002289 if ( dtls_srtp_negotiation_result.mki_len > 0 )
Johan Pascal20c7db32020-10-26 22:45:58 +01002290 {
2291 mbedtls_printf( " DTLS-SRTP mki value: " );
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002292 for( j = 0; j < dtls_srtp_negotiation_result.mki_len; j++ )
Johan Pascal20c7db32020-10-26 22:45:58 +01002293 {
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01002294 mbedtls_printf( "%02X", dtls_srtp_negotiation_result.mki_value[j] );
Johan Pascal20c7db32020-10-26 22:45:58 +01002295 }
2296 }
2297 else
2298 {
Johan Pascal5ef72d22020-10-28 17:05:47 +01002299 mbedtls_printf( " DTLS-SRTP no mki value negotiated" );
Johan Pascal20c7db32020-10-26 22:45:58 +01002300 }
2301 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002302 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03002303 }
2304#endif /* MBEDTLS_SSL_DTLS_SRTP */
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002305 if( opt.reconnect != 0 )
2306 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002307 mbedtls_printf(" . Saving session for reuse..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002308 fflush( stdout );
2309
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002310 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002311 {
Hanno Becker494dc712021-05-14 15:08:51 +01002312 mbedtls_ssl_session exported_session;
2313
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002314 /* free any previously saved data */
Manuel Pégourié-Gonnard4d591d62019-05-24 10:26:41 +02002315 if( session_data != NULL )
2316 {
2317 mbedtls_platform_zeroize( session_data, session_data_len );
2318 mbedtls_free( session_data );
2319 session_data = NULL;
2320 }
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002321
Hanno Becker494dc712021-05-14 15:08:51 +01002322 mbedtls_ssl_session_init( &exported_session );
2323 ret = mbedtls_ssl_get_session( &ssl, &exported_session );
2324 if( ret != 0 )
2325 {
2326 mbedtls_printf(
2327 "failed\n ! mbedtls_ssl_get_session() returned -%#02x\n",
2328 (unsigned) -ret );
2329 goto exit;
2330 }
2331
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002332 /* get size of the buffer needed */
Hanno Becker494dc712021-05-14 15:08:51 +01002333 mbedtls_ssl_session_save( &exported_session, NULL, 0, &session_data_len );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002334 session_data = mbedtls_calloc( 1, session_data_len );
2335 if( session_data == NULL )
2336 {
2337 mbedtls_printf( " failed\n ! alloc %u bytes for session data\n",
2338 (unsigned) session_data_len );
Hanno Becker494dc712021-05-14 15:08:51 +01002339 mbedtls_ssl_session_free( &exported_session );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002340 ret = MBEDTLS_ERR_SSL_ALLOC_FAILED;
2341 goto exit;
2342 }
2343
2344 /* actually save session data */
Hanno Becker494dc712021-05-14 15:08:51 +01002345 if( ( ret = mbedtls_ssl_session_save( &exported_session,
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002346 session_data, session_data_len,
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002347 &session_data_len ) ) != 0 )
2348 {
2349 mbedtls_printf( " failed\n ! mbedtls_ssl_session_saved returned -0x%04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002350 (unsigned int) -ret );
Hanno Becker494dc712021-05-14 15:08:51 +01002351 mbedtls_ssl_session_free( &exported_session );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002352 goto exit;
2353 }
Hanno Becker494dc712021-05-14 15:08:51 +01002354
2355 mbedtls_ssl_session_free( &exported_session );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002356 }
2357 else
2358 {
2359 if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 )
2360 {
2361 mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002362 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002363 goto exit;
2364 }
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002365 }
2366
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002367 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard26f982f2019-05-21 11:01:32 +02002368
2369 if( opt.reco_mode == 1 )
2370 {
2371 mbedtls_printf( " [ Saved %u bytes of session data]\n",
2372 (unsigned) session_data_len );
2373 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002374 }
2375
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002376#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakker5121ce52009-01-03 21:22:43 +00002377 /*
2378 * 5. Verify the server certificate
2379 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002380 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakker5121ce52009-01-03 21:22:43 +00002381
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02002382 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002383 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002384 char vrfy_buf[512];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002385 mbedtls_printf( " failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002386
Hanno Becker7ac83f92020-10-09 10:48:22 +01002387 x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ),
Hanno Becker16970d22017-10-10 15:56:37 +01002388 " ! ", flags );
Paul Bakker5121ce52009-01-03 21:22:43 +00002389
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002390 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002391 }
2392 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002393 mbedtls_printf( " ok\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002394
Hanno Becker5d4c4b12019-06-11 17:16:13 +01002395#if !defined(MBEDTLS_X509_REMOVE_INFO)
Hanno Beckera9766c2c2019-02-25 17:43:18 +00002396 mbedtls_printf( " . Peer certificate information ...\n" );
2397 mbedtls_printf( "%s\n", peer_crt_info );
Hanno Becker5d4c4b12019-06-11 17:16:13 +01002398#endif /* !MBEDTLS_X509_REMOVE_INFO */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002399#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00002400
Hanno Beckera0e20d02019-05-15 14:03:01 +01002401#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002402 ret = report_cid_usage( &ssl, "initial handshake" );
2403 if( ret != 0 )
2404 goto exit;
2405
Hanno Becker90cb3592019-04-09 17:24:19 +01002406 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2407 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002408 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled_renego,
2409 cid_renego,
2410 cid_renego_len ) ) != 0 )
Hanno Becker90cb3592019-04-09 17:24:19 +01002411 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002412 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2413 ret );
gabor-mezei-arm78595852020-04-28 10:40:30 +02002414 goto exit;
Hanno Becker90cb3592019-04-09 17:24:19 +01002415 }
2416 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002417#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Becker90cb3592019-04-09 17:24:19 +01002418
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002419#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002420 if( opt.renegotiate )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002421 {
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002422 /*
2423 * Perform renegotiation (this must be done when the server is waiting
2424 * for input from our side).
2425 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002426 mbedtls_printf( " . Performing renegotiation..." );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002427 fflush( stdout );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002428 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002429 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002430 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002431 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002432 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002433 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002434 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n",
2435 ret );
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002436 goto exit;
2437 }
Hanno Becker16970d22017-10-10 15:56:37 +01002438
Manuel Pégourié-Gonnard25781f92018-10-15 15:28:16 +02002439#if defined(MBEDTLS_ECP_RESTARTABLE)
2440 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
2441 continue;
2442#endif
2443
Hanno Becker16970d22017-10-10 15:56:37 +01002444 /* For event-driven IO, wait for socket to become available */
2445 if( opt.event == 1 /* level triggered IO */ )
2446 {
2447#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002448 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002449#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002450 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002451#endif
2452 }
2453
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002454 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002455 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002456 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002457#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard53b3e062013-10-29 18:16:38 +01002458
Hanno Beckera0e20d02019-05-15 14:03:01 +01002459#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002460 ret = report_cid_usage( &ssl, "after renegotiation" );
2461 if( ret != 0 )
2462 goto exit;
Hanno Beckera0e20d02019-05-15 14:03:01 +01002463#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002464
Paul Bakker5121ce52009-01-03 21:22:43 +00002465 /*
2466 * 6. Write the GET request
2467 */
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002468 retry_left = opt.max_resend;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002469send_request:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002470 mbedtls_printf( " > Write to server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002471 fflush( stdout );
2472
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002473 len = mbedtls_snprintf( (char *) buf, sizeof( buf ) - 1, GET_REQUEST,
2474 opt.request_page );
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02002475 tail_len = (int) strlen( GET_REQUEST_END );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002476
2477 /* Add padding to GET request to reach opt.request_size in length */
2478 if( opt.request_size != DFL_REQUEST_SIZE &&
2479 len + tail_len < opt.request_size )
Paul Bakker93c32b22014-04-25 13:40:05 +02002480 {
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002481 memset( buf + len, 'A', opt.request_size - len - tail_len );
2482 len += opt.request_size - len - tail_len;
Paul Bakker93c32b22014-04-25 13:40:05 +02002483 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002484
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002485 strncpy( (char *) buf + len, GET_REQUEST_END, sizeof( buf ) - len - 1 );
Manuel Pégourié-Gonnarddcab2932014-08-14 17:47:17 +02002486 len += tail_len;
2487
Manuel Pégourié-Gonnarddea29c52014-06-18 13:07:56 +02002488 /* Truncate if request size is smaller than the "natural" size */
2489 if( opt.request_size != DFL_REQUEST_SIZE &&
2490 len > opt.request_size )
2491 {
2492 len = opt.request_size;
2493
2494 /* Still end with \r\n unless that's really not possible */
2495 if( len >= 2 ) buf[len - 2] = '\r';
2496 if( len >= 1 ) buf[len - 1] = '\n';
2497 }
2498
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002499 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakker5121ce52009-01-03 21:22:43 +00002500 {
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002501 written = 0;
2502 frags = 0;
2503
2504 do
Paul Bakker5121ce52009-01-03 21:22:43 +00002505 {
Hanno Becker16970d22017-10-10 15:56:37 +01002506 while( ( ret = mbedtls_ssl_write( &ssl, buf + written,
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002507 len - written ) ) < 0 )
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002508 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002509 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002510 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002511 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002512 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002513 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002514 (unsigned int) -ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002515 goto exit;
2516 }
Hanno Becker16970d22017-10-10 15:56:37 +01002517
2518 /* For event-driven IO, wait for socket to become available */
2519 if( opt.event == 1 /* level triggered IO */ )
2520 {
2521#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002522 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002523#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002524 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002525#endif
2526 }
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002527 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002528
2529 frags++;
2530 written += ret;
Paul Bakker5121ce52009-01-03 21:22:43 +00002531 }
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002532 while( written < len );
Paul Bakker5121ce52009-01-03 21:22:43 +00002533 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002534 else /* Not stream, so datagram */
2535 {
Hanno Becker16970d22017-10-10 15:56:37 +01002536 while( 1 )
2537 {
2538 ret = mbedtls_ssl_write( &ssl, buf, len );
2539
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002540#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002541 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002542 continue;
2543#endif
2544
Hanno Becker16970d22017-10-10 15:56:37 +01002545 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2546 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2547 break;
2548
2549 /* For event-driven IO, wait for socket to become available */
2550 if( opt.event == 1 /* level triggered IO */ )
2551 {
2552#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002553 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002554#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002555 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002556#endif
2557 }
2558 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002559
2560 if( ret < 0 )
2561 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002562 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n",
2563 ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002564 goto exit;
2565 }
2566
2567 frags = 1;
2568 written = ret;
Hanno Beckere4ad3e82017-09-18 15:05:46 +01002569
2570 if( written < len )
2571 {
2572 mbedtls_printf( " warning\n ! request didn't fit into single datagram and "
2573 "was truncated to size %u", (unsigned) written );
2574 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02002575 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002576
Manuel Pégourié-Gonnard787b6582013-07-16 15:43:17 +02002577 buf[written] = '\0';
Hanno Becker16970d22017-10-10 15:56:37 +01002578 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n",
2579 written, frags, (char *) buf );
Paul Bakker5121ce52009-01-03 21:22:43 +00002580
Andres Amaya Garciace6fbac2018-07-04 09:29:34 +01002581 /* Send a non-empty request if request_size == 0 */
2582 if ( len == 0 )
2583 {
2584 opt.request_size = DFL_REQUEST_SIZE;
2585 goto send_request;
2586 }
2587
Paul Bakker5121ce52009-01-03 21:22:43 +00002588 /*
2589 * 7. Read the HTTP response
2590 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002591 mbedtls_printf( " < Read from server:" );
Paul Bakker5121ce52009-01-03 21:22:43 +00002592 fflush( stdout );
2593
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002594 /*
2595 * TLS and DTLS need different reading styles (stream vs datagram)
2596 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002597 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002598 {
2599 do
2600 {
2601 len = sizeof( buf ) - 1;
2602 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002603 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002604
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002605#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002606 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002607 continue;
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002608#endif
2609
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002610 if( ret == MBEDTLS_ERR_SSL_WANT_READ ||
2611 ret == MBEDTLS_ERR_SSL_WANT_WRITE )
Hanno Becker16970d22017-10-10 15:56:37 +01002612 {
2613 /* For event-driven IO, wait for socket to become available */
2614 if( opt.event == 1 /* level triggered IO */ )
2615 {
2616#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002617 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002618#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002619 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002620#endif
2621 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002622 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01002623 }
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002624
2625 if( ret <= 0 )
2626 {
2627 switch( ret )
2628 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002629 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2630 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002631 ret = 0;
2632 goto close_notify;
2633
2634 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002635 case MBEDTLS_ERR_NET_CONN_RESET:
2636 mbedtls_printf( " connection was reset by peer\n" );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002637 ret = 0;
2638 goto reconnect;
2639
2640 default:
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002641 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002642 (unsigned int) -ret );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002643 goto exit;
2644 }
2645 }
2646
2647 len = ret;
2648 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002649 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002650
2651 /* End of message should be detected according to the syntax of the
2652 * application protocol (eg HTTP), just use a dummy test here. */
2653 if( ret > 0 && buf[len-1] == '\n' )
2654 {
2655 ret = 0;
2656 break;
2657 }
2658 }
2659 while( 1 );
2660 }
2661 else /* Not stream, so datagram */
Paul Bakker5121ce52009-01-03 21:22:43 +00002662 {
2663 len = sizeof( buf ) - 1;
2664 memset( buf, 0, sizeof( buf ) );
Paul Bakker5121ce52009-01-03 21:22:43 +00002665
Hanno Becker16970d22017-10-10 15:56:37 +01002666 while( 1 )
2667 {
2668 ret = mbedtls_ssl_read( &ssl, buf, len );
2669
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002670#if defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002671 if( ret == MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardda19f4c2018-06-12 12:40:54 +02002672 continue;
2673#endif
2674
Hanno Becker16970d22017-10-10 15:56:37 +01002675 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
2676 ret != MBEDTLS_ERR_SSL_WANT_WRITE )
2677 break;
2678
2679 /* For event-driven IO, wait for socket to become available */
2680 if( opt.event == 1 /* level triggered IO */ )
2681 {
2682#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002683 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002684#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002685 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002686#endif
2687 }
2688 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002689
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002690 if( ret <= 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +00002691 {
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002692 switch( ret )
2693 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01002694 case MBEDTLS_ERR_SSL_TIMEOUT:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002695 mbedtls_printf( " timeout\n" );
Manuel Pégourié-Gonnarde63582a2014-10-14 11:47:21 +02002696 if( retry_left-- > 0 )
Manuel Pégourié-Gonnardf1e0df32014-10-02 14:02:32 +02002697 goto send_request;
2698 goto exit;
2699
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002700 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
2701 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002702 ret = 0;
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002703 goto close_notify;
Paul Bakker5121ce52009-01-03 21:22:43 +00002704
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002705 default:
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002706 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002707 goto exit;
2708 }
Paul Bakker5690efc2011-05-26 13:16:06 +00002709 }
2710
Paul Bakker5121ce52009-01-03 21:22:43 +00002711 len = ret;
Paul Bakker93c32b22014-04-25 13:40:05 +02002712 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002713 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardae5050c2014-07-11 14:14:15 +02002714 ret = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +00002715 }
Paul Bakker5121ce52009-01-03 21:22:43 +00002716
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002717 /*
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002718 * 7b. Simulate hard reset and reconnect from same port?
2719 */
2720 if( opt.reconnect_hard != 0 )
2721 {
2722 opt.reconnect_hard = 0;
2723
2724 mbedtls_printf( " . Restarting connection from same port..." );
2725 fflush( stdout );
2726
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002727#if defined(MBEDTLS_X509_CRT_PARSE_C)
Hanno Becker23699ef2019-02-26 12:36:53 +00002728 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002729#endif /* MBEDTLS_X509_CRT_PARSE_C */
Hanno Becker23699ef2019-02-26 12:36:53 +00002730
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002731 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
2732 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002733 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002734 (unsigned int) -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002735 goto exit;
2736 }
2737
2738 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
2739 {
2740 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02002741 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02002742 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002743 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002744 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002745 (unsigned int) -ret );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002746 goto exit;
2747 }
Hanno Becker16970d22017-10-10 15:56:37 +01002748
2749 /* For event-driven IO, wait for socket to become available */
2750 if( opt.event == 1 /* level triggered IO */ )
2751 {
2752#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00002753 idle( &server_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002754#else
Hanno Becker197a91c2017-10-31 10:58:53 +00002755 idle( &server_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01002756#endif
2757 }
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002758 }
2759
2760 mbedtls_printf( " ok\n" );
2761
2762 goto send_request;
2763 }
2764
2765 /*
Jarno Lamsa77e66652019-05-29 15:15:08 +03002766 * 7c. Simulate serialize/deserialize and go back to data exchange
2767 */
Jarno Lamsabbc7b412019-06-04 11:06:31 +03002768#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002769 if( opt.serialize != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002770 {
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002771 size_t buf_len;
Jarno Lamsa77e66652019-05-29 15:15:08 +03002772
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002773 mbedtls_printf( " . Serializing live connection..." );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002774
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002775 ret = mbedtls_ssl_context_save( &ssl, NULL, 0, &buf_len );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002776 if( ret != MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002777 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002778 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002779 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002780
2781 goto exit;
2782 }
2783
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03002784 if( ( context_buf = mbedtls_calloc( 1, buf_len ) ) == NULL )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002785 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002786 mbedtls_printf( " failed\n ! Couldn't allocate buffer for "
2787 "serialized context" );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002788
2789 goto exit;
2790 }
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02002791 context_buf_len = buf_len;
Jarno Lamsa77e66652019-05-29 15:15:08 +03002792
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002793 if( ( ret = mbedtls_ssl_context_save( &ssl, context_buf,
2794 buf_len, &buf_len ) ) != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002795 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002796 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002797 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002798
2799 goto exit;
2800 }
2801
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002802 mbedtls_printf( " ok\n" );
2803
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002804 /* Save serialized context to the 'opt.context_file' as a base64 code */
2805 if( 0 < strlen( opt.context_file ) )
2806 {
2807 FILE *b64_file;
2808 uint8_t *b64_buf;
2809 size_t b64_len;
2810
2811 mbedtls_printf( " . Save serialized context to a file... " );
2812
2813 mbedtls_base64_encode( NULL, 0, &b64_len, context_buf, buf_len );
2814
2815 if( ( b64_buf = mbedtls_calloc( 1, b64_len ) ) == NULL )
2816 {
2817 mbedtls_printf( "failed\n ! Couldn't allocate buffer for "
2818 "the base64 code\n" );
2819 goto exit;
2820 }
2821
2822 if( ( ret = mbedtls_base64_encode( b64_buf, b64_len, &b64_len,
2823 context_buf, buf_len ) ) != 0 )
2824 {
2825 mbedtls_printf( "failed\n ! mbedtls_base64_encode returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002826 "-0x%x\n", (unsigned int) -ret );
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002827 mbedtls_free( b64_buf );
2828 goto exit;
2829 }
2830
2831 if( ( b64_file = fopen( opt.context_file, "w" ) ) == NULL )
2832 {
2833 mbedtls_printf( "failed\n ! Cannot open '%s' for writing.\n",
2834 opt.context_file );
2835 mbedtls_free( b64_buf );
2836 goto exit;
2837 }
2838
2839 if( b64_len != fwrite( b64_buf, 1, b64_len, b64_file ) )
2840 {
2841 mbedtls_printf( "failed\n ! fwrite(%ld bytes) failed\n",
2842 (long) b64_len );
2843 mbedtls_free( b64_buf );
2844 fclose( b64_file );
2845 goto exit;
2846 }
2847
2848 mbedtls_free( b64_buf );
2849 fclose( b64_file );
2850
2851 mbedtls_printf( "ok\n" );
2852 }
2853
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002854 if( opt.serialize == 1 )
2855 {
Manuel Pégourié-Gonnard9df5a822019-07-23 14:51:09 +02002856 /* nothing to do here, done by context_save() already */
Piotr Nowicki136bebf2020-04-17 14:37:00 +02002857 mbedtls_printf( " . Context has been reset... ok\n" );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002858 }
2859
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002860 if( opt.serialize == 2 )
2861 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002862 mbedtls_printf( " . Freeing and reinitializing context..." );
2863
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002864 mbedtls_ssl_free( &ssl );
2865
2866 mbedtls_ssl_init( &ssl );
2867
2868 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2869 {
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002870 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002871 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002872 goto exit;
2873 }
2874
2875 if( opt.nbio == 2 )
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002876 mbedtls_ssl_set_bio( &ssl, &server_fd, delayed_send,
2877 delayed_recv, NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002878 else
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002879 mbedtls_ssl_set_bio( &ssl, &server_fd, mbedtls_net_send,
2880 mbedtls_net_recv,
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002881 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002882
Jarno Lamsa8e253212019-06-13 11:45:06 +03002883#if defined(MBEDTLS_TIMING_C)
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002884 mbedtls_ssl_set_timer_cb( &ssl, &timer,
2885 mbedtls_timing_set_delay,
2886 mbedtls_timing_get_delay );
Jarno Lamsa8e253212019-06-13 11:45:06 +03002887#endif /* MBEDTLS_TIMING_C */
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002888
2889 mbedtls_printf( " ok\n" );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03002890 }
2891
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002892 mbedtls_printf( " . Deserializing connection..." );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002893
Jarno Lamsaddf72a12019-06-13 12:22:50 +03002894 if( ( ret = mbedtls_ssl_context_load( &ssl, context_buf,
2895 buf_len ) ) != 0 )
Jarno Lamsa77e66652019-05-29 15:15:08 +03002896 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002897 mbedtls_printf( "failed\n ! mbedtls_ssl_context_load returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002898 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002899
2900 goto exit;
2901 }
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002902
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02002903 mbedtls_free( context_buf );
2904 context_buf = NULL;
2905 context_buf_len = 0;
2906
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02002907 mbedtls_printf( " ok\n" );
Jarno Lamsa77e66652019-05-29 15:15:08 +03002908 }
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03002909#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
Jarno Lamsa77e66652019-05-29 15:15:08 +03002910
2911 /*
2912 * 7d. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002913 */
2914 if( --opt.exchanges > 0 )
2915 goto send_request;
2916
2917 /*
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002918 * 8. Done, cleanly close the connection
2919 */
2920close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002921 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnarddbd23072015-09-04 10:20:17 +02002922 fflush( stdout );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002923
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01002924 /*
2925 * Most of the time sending a close_notify before closing is the right
2926 * thing to do. However, when the server already knows how many messages
2927 * are expected and closes the connection by itself, this alert becomes
2928 * redundant. Sometimes with DTLS this redundancy becomes a problem by
2929 * leading to a race condition where the server might close the connection
2930 * before seeing the alert, and since UDP is connection-less when the
2931 * alert arrives it will be seen as a new connection, which will fail as
2932 * the alert is clearly not a valid ClientHello. This may cause spurious
2933 * failures in tests that use DTLS and resumption with ssl_server2 in
2934 * ssl-opt.sh, avoided by enabling skip_close_notify client-side.
2935 */
2936 if( opt.skip_close_notify == 0 )
2937 {
2938 /* No error checking, the connection might be closed already */
2939 do ret = mbedtls_ssl_close_notify( &ssl );
2940 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
2941 ret = 0;
2942 }
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002943
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002944 mbedtls_printf( " done\n" );
Manuel Pégourié-Gonnardf1388742014-08-19 16:14:36 +02002945
2946 /*
2947 * 9. Reconnect?
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02002948 */
2949reconnect:
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002950 if( opt.reconnect != 0 )
2951 {
Manuel Pégourié-Gonnardcf2e97e2013-08-02 15:04:36 +02002952 --opt.reconnect;
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002953
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002954 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01002955
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002956#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002957 if( opt.reco_delay > 0 )
Manuel Pégourié-Gonnarda63bc942015-05-14 18:22:47 +02002958 mbedtls_net_usleep( 1000000 * opt.reco_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002959#endif
Manuel Pégourié-Gonnard38d1eba2013-08-23 10:44:29 +02002960
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002961 mbedtls_printf( " . Reconnecting with saved session..." );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002962
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002963#if defined(MBEDTLS_X509_CRT_PARSE_C)
Hanno Beckera1051b42019-02-26 11:38:29 +00002964 memset( peer_crt_info, 0, sizeof( peer_crt_info ) );
Hanno Beckerbdf75eb2019-02-27 08:34:31 +00002965#endif /* MBEDTLS_X509_CRT_PARSE_C */
Hanno Beckera1051b42019-02-26 11:38:29 +00002966
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002967 if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002968 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002969 mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002970 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002971 goto exit;
2972 }
2973
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002974 if( opt.reco_mode == 1 )
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002975 {
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002976 if( ( ret = mbedtls_ssl_session_load( &saved_session,
2977 session_data,
2978 session_data_len ) ) != 0 )
2979 {
2980 mbedtls_printf( " failed\n ! mbedtls_ssl_session_load returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002981 (unsigned int) -ret );
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002982 goto exit;
2983 }
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002984 }
2985
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002986 if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002987 {
Manuel Pégourié-Gonnard21548632019-05-16 11:39:42 +02002988 mbedtls_printf( " failed\n ! mbedtls_ssl_set_session returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002989 (unsigned int) -ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002990 goto exit;
2991 }
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002992
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002993 if( ( ret = mbedtls_net_connect( &server_fd,
2994 opt.server_addr, opt.server_port,
2995 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2996 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02002997 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002998 mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002999 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003000 goto exit;
3001 }
3002
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003003 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02003004 ret = mbedtls_net_set_nonblock( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003005 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02003006 ret = mbedtls_net_set_block( &server_fd );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003007 if( ret != 0 )
3008 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003009 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003010 (unsigned int) -ret );
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02003011 goto exit;
3012 }
3013
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003014 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003015 {
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01003016 if( ret != MBEDTLS_ERR_SSL_WANT_READ &&
Manuel Pégourié-Gonnardb3c83072017-05-16 08:50:24 +02003017 ret != MBEDTLS_ERR_SSL_WANT_WRITE &&
Manuel Pégourié-Gonnard558da9c2018-06-13 12:02:12 +02003018 ret != MBEDTLS_ERR_SSL_CRYPTO_IN_PROGRESS )
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003019 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01003020 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003021 (unsigned int) -ret );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003022 goto exit;
3023 }
3024 }
3025
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003026 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnardaaa1eab2013-07-30 13:43:43 +02003027
3028 goto send_request;
3029 }
3030
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003031 /*
3032 * Cleanup and exit
3033 */
Paul Bakker5121ce52009-01-03 21:22:43 +00003034exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003035#ifdef MBEDTLS_ERROR_C
gabor-mezei-armde472172020-09-04 14:44:25 +02003036 if( ret != 0 )
Paul Bakkera3d195c2011-11-27 21:07:34 +00003037 {
3038 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003039 mbedtls_strerror( ret, error_buf, 100 );
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003040 mbedtls_printf("Last error was: -0x%X - %s\n\n", (unsigned int) -ret, error_buf );
Paul Bakkera3d195c2011-11-27 21:07:34 +00003041 }
3042#endif
3043
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003044 mbedtls_net_free( &server_fd );
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003045
Przemyslaw Stekield6914e32021-11-10 10:46:11 +01003046 mbedtls_ssl_free( &ssl );
3047 mbedtls_ssl_config_free( &conf );
3048 mbedtls_ssl_session_free( &saved_session );
3049
3050 if( session_data != NULL )
3051 mbedtls_platform_zeroize( session_data, session_data_len );
3052 mbedtls_free( session_data );
3053#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
3054 if( context_buf != NULL )
3055 mbedtls_platform_zeroize( context_buf, context_buf_len );
3056 mbedtls_free( context_buf );
3057#endif
3058
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003059#if defined(MBEDTLS_X509_CRT_PARSE_C)
3060 mbedtls_x509_crt_free( &clicert );
3061 mbedtls_x509_crt_free( &cacert );
3062 mbedtls_pk_free( &pkey );
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01003063#if defined(MBEDTLS_USE_PSA_CRYPTO)
3064 psa_destroy_key( key_slot );
3065#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01003066#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakker5121ce52009-01-03 21:22:43 +00003067
Gilles Peskineeccd8882020-03-10 12:19:08 +01003068#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED) && \
Hanno Becker3f24ea92018-11-05 13:25:17 +00003069 defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00003070 if( opt.psk_opaque != 0 )
Hanno Becker3f24ea92018-11-05 13:25:17 +00003071 {
3072 /* This is ok even if the slot hasn't been
3073 * initialized (we might have jumed here
3074 * immediately because of bad cmd line params,
3075 * for example). */
Hanno Becker1d911cd2018-11-15 13:06:09 +00003076 status = psa_destroy_key( slot );
gabor-mezei-armde472172020-09-04 14:44:25 +02003077 if( ( status != PSA_SUCCESS ) &&
3078 ( opt.query_config_mode == DFL_QUERY_CONFIG_MODE ) )
Hanno Becker3f24ea92018-11-05 13:25:17 +00003079 {
Ronald Cronadc2ff22020-09-16 16:49:27 +02003080 mbedtls_printf( "Failed to destroy key slot %u - error was %d",
Andrzej Kurek03e01462022-01-03 12:53:24 +01003081 (unsigned) MBEDTLS_SVC_KEY_ID_GET_KEY_ID( slot ),
3082 (int) status );
Hanno Becker3f24ea92018-11-05 13:25:17 +00003083 if( ret == 0 )
3084 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
3085 }
3086 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01003087#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED &&
Hanno Becker3f24ea92018-11-05 13:25:17 +00003088 MBEDTLS_USE_PSA_CRYPTO */
3089
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +01003090#if defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01003091 const char* message = mbedtls_test_helper_is_psa_leaking();
3092 if( message )
3093 {
3094 if( ret == 0 )
3095 ret = 1;
3096 mbedtls_printf( "PSA memory leak detected: %s\n", message);
3097 }
3098#endif /* MBEDTLS_USE_PSA_CRYPTO */
3099
3100 /* For builds with MBEDTLS_TEST_USE_PSA_CRYPTO_RNG psa crypto
3101 * resources are freed by rng_free(). */
Przemyslaw Stekiel169f1152022-02-14 13:49:27 +01003102#if (defined(MBEDTLS_USE_PSA_CRYPTO) || defined(MBEDTLS_SSL_PROTO_TLS1_3)) && \
Przemyslaw Stekielbbb22bb2021-11-03 09:06:09 +01003103 !defined(MBEDTLS_TEST_USE_PSA_CRYPTO_RNG)
Gilles Peskine414e7172021-02-03 00:04:08 +01003104 mbedtls_psa_crypto_free( );
3105#endif
3106
Gilles Peskineb8c48402021-02-08 20:28:22 +01003107 rng_free( &rng );
Gilles Peskineb8c48402021-02-08 20:28:22 +01003108
Gilles Peskine60fe6602021-02-16 18:56:42 +01003109#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +01003110 if( test_hooks_failure_detected( ) )
3111 {
3112 if( ret == 0 )
3113 ret = 1;
3114 mbedtls_printf( "Test hooks detected errors.\n" );
3115 }
3116 test_hooks_free( );
Gilles Peskine60fe6602021-02-16 18:56:42 +01003117#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01003118
Piotr Nowicki7d01ef62019-11-20 15:00:17 +01003119#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3120#if defined(MBEDTLS_MEMORY_DEBUG)
3121 mbedtls_memory_buffer_alloc_status();
3122#endif
3123 mbedtls_memory_buffer_alloc_free();
Gilles Peskine34babfc2021-02-16 15:44:37 +01003124#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Piotr Nowicki7d01ef62019-11-20 15:00:17 +01003125
gabor-mezei-armde472172020-09-04 14:44:25 +02003126#if defined(_WIN32)
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003127 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3128 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003129 mbedtls_printf( " + Press Enter to exit this program.\n" );
3130 fflush( stdout ); getchar();
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003131 }
gabor-mezei-armde472172020-09-04 14:44:25 +02003132#endif
Paul Bakker5121ce52009-01-03 21:22:43 +00003133
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003134 // Shell can not handle large exit numbers -> 1 for errors
3135 if( ret < 0 )
3136 ret = 1;
3137
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003138 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3139 mbedtls_exit( ret );
3140 else
3141 mbedtls_exit( query_config_ret );
Paul Bakker5121ce52009-01-03 21:22:43 +00003142}
Gilles Peskineb4df7542021-01-08 21:20:09 +01003143#endif /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_CLI_C */