blob: d2aa48a059b4a99060dc3fa7405b5ab36e1eaf57 [file] [log] [blame]
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001/*
2 * SSL client with options
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb60b95f2012-09-25 09:05:17 +000018 */
19
Mateusz Starzyk6c2e9b62021-05-19 17:54:54 +020020#define MBEDTLS_ALLOW_PRIVATE_ACCESS
21
Gilles Peskineab7ce962021-01-05 21:27:53 +010022#include "ssl_test_lib.h"
Paul Bakkerb60b95f2012-09-25 09:05:17 +000023
Gilles Peskineab7ce962021-01-05 21:27:53 +010024#if defined(MBEDTLS_SSL_TEST_IMPOSSIBLE)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020025int main( void )
26{
Gilles Peskineab7ce962021-01-05 21:27:53 +010027 mbedtls_printf( MBEDTLS_SSL_TEST_IMPOSSIBLE );
28 mbedtls_exit( 0 );
29}
30#elif !defined(MBEDTLS_SSL_SRV_C)
31int main( void )
32{
33 mbedtls_printf( "MBEDTLS_SSL_SRV_C not defined.\n" );
Krzysztof Stachowiak5e1b1952019-04-24 14:24:46 +020034 mbedtls_exit( 0 );
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020035}
Gilles Peskineb4df7542021-01-08 21:20:09 +010036#else /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_SRV_C */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +010037
Andres AG692ad842017-01-19 16:30:57 +000038#include <stdint.h>
Andres AG0b736db2017-02-08 14:05:57 +000039
40#if !defined(_MSC_VER)
Andres AG692ad842017-01-19 16:30:57 +000041#include <inttypes.h>
Andres AG0b736db2017-02-08 14:05:57 +000042#endif
Rich Evans18b78c72015-02-11 14:06:19 +000043
44#if !defined(_WIN32)
45#include <signal.h>
46#endif
47
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020048#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000049#include "mbedtls/ssl_cache.h"
Paul Bakker0a597072012-09-25 21:55:46 +000050#endif
51
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +020052#if defined(MBEDTLS_SSL_TICKET_C)
53#include "mbedtls/ssl_ticket.h"
54#endif
55
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020056#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000057#include "mbedtls/ssl_cookie.h"
Manuel Pégourié-Gonnard232edd42014-07-23 16:56:27 +020058#endif
59
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +020060#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && defined(MBEDTLS_FS_IO)
61#define SNI_OPTION
62#endif
63
64#if defined(_WIN32)
65#include <windows.h>
66#endif
67
Simon Butchercce68be2018-07-23 14:26:09 +010068/* Size of memory to be allocated for the heap, when using the library's memory
69 * management and MBEDTLS_MEMORY_BUFFER_ALLOC_C is enabled. */
70#define MEMORY_HEAP_SIZE 120000
71
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +010072#define DFL_SERVER_ADDR NULL
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +020073#define DFL_SERVER_PORT "4433"
Andrzej Kurek30e731d2017-10-12 13:50:29 +020074#define DFL_RESPONSE_SIZE -1
Paul Bakkerb60b95f2012-09-25 09:05:17 +000075#define DFL_DEBUG_LEVEL 0
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +010076#define DFL_NBIO 0
Hanno Becker16970d22017-10-10 15:56:37 +010077#define DFL_EVENT 0
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +020078#define DFL_READ_TIMEOUT 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +000079#define DFL_CA_FILE ""
80#define DFL_CA_PATH ""
81#define DFL_CRT_FILE ""
82#define DFL_KEY_FILE ""
Hanno Beckere58a6302018-11-07 16:20:16 +000083#define DFL_KEY_PWD ""
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +020084#define DFL_CRT_FILE2 ""
85#define DFL_KEY_FILE2 ""
Hanno Beckere58a6302018-11-07 16:20:16 +000086#define DFL_KEY_PWD2 ""
Gilles Peskinefcca9d82018-01-12 13:47:48 +010087#define DFL_ASYNC_OPERATIONS "-"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +010088#define DFL_ASYNC_PRIVATE_DELAY1 ( -1 )
89#define DFL_ASYNC_PRIVATE_DELAY2 ( -1 )
Gilles Peskine3665f1d2018-01-05 21:22:12 +010090#define DFL_ASYNC_PRIVATE_ERROR ( 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +020091#define DFL_PSK ""
Hanno Becker1d911cd2018-11-15 13:06:09 +000092#define DFL_PSK_OPAQUE 0
93#define DFL_PSK_LIST_OPAQUE 0
Paul Bakkerfbb17802013-04-17 19:10:21 +020094#define DFL_PSK_IDENTITY "Client_identity"
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +020095#define DFL_ECJPAKE_PW NULL
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +020096#define DFL_PSK_LIST NULL
Paul Bakkerb60b95f2012-09-25 09:05:17 +000097#define DFL_FORCE_CIPHER 0
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020098#define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010099#define DFL_ALLOW_LEGACY -2
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100100#define DFL_RENEGOTIATE 0
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +0200101#define DFL_RENEGO_DELAY -2
Andres AG692ad842017-01-19 16:30:57 +0000102#define DFL_RENEGO_PERIOD ( (uint64_t)-1 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200103#define DFL_EXCHANGES 1
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200104#define DFL_MIN_VERSION -1
Paul Bakkerc1516be2013-06-29 16:01:32 +0200105#define DFL_MAX_VERSION -1
Gilles Peskinebc70a182017-05-09 15:59:24 +0200106#define DFL_SHA1 -1
Hanno Beckera7d25422019-04-09 17:28:10 +0100107#define DFL_CID_ENABLED 0
108#define DFL_CID_VALUE ""
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100109#define DFL_CID_ENABLED_RENEGO -1
110#define DFL_CID_VALUE_RENEGO NULL
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +0100111#define DFL_AUTH_MODE -1
Janos Follath4817e272017-04-10 13:44:33 +0100112#define DFL_CERT_REQ_CA_LIST MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113#define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +0100114#define DFL_TRUNC_HMAC -1
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200115#define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200116#define DFL_TICKET_TIMEOUT 86400
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100117#define DFL_CACHE_MAX -1
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100118#define DFL_CACHE_TIMEOUT -1
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100119#define DFL_SNI NULL
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200120#define DFL_ALPN_STRING NULL
Hanno Beckere6706e62017-05-15 16:05:15 +0100121#define DFL_CURVES NULL
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200122#define DFL_DHM_FILE NULL
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200123#define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200124#define DFL_COOKIES 1
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200125#define DFL_ANTI_REPLAY -1
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200126#define DFL_HS_TO_MIN 0
127#define DFL_HS_TO_MAX 0
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200128#define DFL_DTLS_MTU -1
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200129#define DFL_BADMAC_LIMIT -1
Hanno Beckere7675d02018-08-14 13:28:56 +0100130#define DFL_DGRAM_PACKING 1
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200131#define DFL_EXTENDED_MS -1
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100132#define DFL_ETM -1
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300133#define DFL_SERIALIZE 0
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200134#define DFL_CONTEXT_FILE ""
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300135#define DFL_EXTENDED_MS_ENFORCE -1
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200136#define DFL_CA_CALLBACK 0
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300137#define DFL_EAP_TLS 0
Philippe Antoineaa4d1522019-06-06 21:24:31 +0200138#define DFL_REPRODUCIBLE 0
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100139#define DFL_NSS_KEYLOG 0
140#define DFL_NSS_KEYLOG_FILE NULL
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200141#define DFL_QUERY_CONFIG_MODE 0
Ron Eldor6ea64512018-07-02 10:08:07 +0300142#define DFL_USE_SRTP 0
Ron Eldor311b95a2018-07-08 08:50:31 +0300143#define DFL_SRTP_FORCE_PROFILE 0
Ron Eldor12c6ead2018-07-03 15:08:32 +0300144#define DFL_SRTP_SUPPORT_MKI 0
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000145
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +0200146#define LONG_RESPONSE "<p>01-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
147 "02-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
148 "03-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
149 "04-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
150 "05-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
151 "06-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah\r\n" \
152 "07-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah-blah</p>\r\n"
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200153
Paul Bakker8e714d72013-07-18 11:05:13 +0200154/* Uncomment LONG_RESPONSE at the end of HTTP_RESPONSE to test sending longer
155 * packets (for fragmentation purposes) */
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000156#define HTTP_RESPONSE \
157 "HTTP/1.0 200 OK\r\nContent-Type: text/html\r\n\r\n" \
Manuel Pégourié-Gonnard91699212015-01-22 16:26:39 +0000158 "<h2>mbed TLS Test Server</h2>\r\n" \
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +0200159 "<p>Successful connection using: %s</p>\r\n" // LONG_RESPONSE
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000160
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200161/*
162 * Size of the basic I/O buffer. Able to hold our default response.
163 *
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 * You will need to adapt the mbedtls_ssl_get_bytes_avail() test in ssl-opt.sh
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +0200165 * if you change this value to something outside the range <= 100 or > 500
166 */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200167#define DFL_IO_BUF_LEN 200
Manuel Pégourié-Gonnarde7a3b102014-06-11 18:21:20 +0200168
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169#if defined(MBEDTLS_X509_CRT_PARSE_C)
170#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000171#define USAGE_IO \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100172 " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \
173 " default: \"\" (pre-loaded)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100174 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100175 " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \
176 " default: \"\" (pre-loaded) (overrides ca_file)\n" \
Hanno Becker422d1992019-05-01 11:16:28 +0100177 " use \"none\" to skip loading any top-level CAs.\n" \
Paul Bakker1f9d02d2012-11-20 10:30:55 +0100178 " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200179 " default: see note after key_file2\n" \
180 " key_file=%%s default: see note after key_file2\n" \
Hanno Beckere58a6302018-11-07 16:20:16 +0000181 " key_pwd=%%s Password for key specified by key_file argument\n"\
182 " default: none\n" \
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +0200183 " crt_file2=%%s Your second cert and chain (in bottom to top order, top may be omitted)\n" \
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +0200184 " default: see note after key_file2\n" \
185 " key_file2=%%s default: see note below\n" \
186 " note: if neither crt_file/key_file nor crt_file2/key_file2 are used,\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200187 " preloaded certificate(s) and key(s) are used if available\n" \
Hanno Beckere58a6302018-11-07 16:20:16 +0000188 " key_pwd2=%%s Password for key specified by key_file2 argument\n"\
189 " default: none\n" \
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +0200190 " dhm_file=%%s File containing Diffie-Hellman parameters\n" \
191 " default: preloaded parameters\n"
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000192#else
193#define USAGE_IO \
Paul Bakkered27a042013-04-18 22:46:23 +0200194 "\n" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200195 " No file operations available (MBEDTLS_FS_IO not defined)\n" \
Paul Bakkered27a042013-04-18 22:46:23 +0200196 "\n"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200197#endif /* MBEDTLS_FS_IO */
Paul Bakkered27a042013-04-18 22:46:23 +0200198#else
199#define USAGE_IO ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200200#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +0200201
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200202#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100203#define USAGE_SSL_ASYNC \
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100204 " async_operations=%%c... d=decrypt, s=sign (default: -=off)\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100205 " async_private_delay1=%%d Asynchronous delay for key_file or preloaded key\n" \
Gilles Peskine166ce742018-04-30 10:30:49 +0200206 " async_private_delay2=%%d Asynchronous delay for key_file2 and sni\n" \
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100207 " default: -1 (not asynchronous)\n" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +0100208 " async_private_error=%%d Async callback error injection (default=0=none,\n" \
Gilles Peskinec9125722018-04-26 07:15:40 +0200209 " 1=start, 2=cancel, 3=resume, negative=first time only)"
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100210#else
211#define USAGE_SSL_ASYNC ""
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200212#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100213
Hanno Beckera0e20d02019-05-15 14:03:01 +0100214#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +0100215#define USAGE_CID \
216 " cid=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension.\n" \
217 " default: 0 (disabled)\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100218 " cid_renego=%%d Disable (0) or enable (1) the use of the DTLS Connection ID extension during renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100219 " default: same as 'cid' parameter\n" \
Hanno Beckera7d25422019-04-09 17:28:10 +0100220 " cid_val=%%s The CID to use for incoming messages (in hex, without 0x).\n" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100221 " default: \"\"\n" \
222 " cid_val_renego=%%s The CID to use for incoming messages (in hex, without 0x) after renegotiation.\n" \
Hanno Becker32798222019-05-23 17:01:06 +0100223 " default: same as 'cid_val' parameter\n"
Hanno Beckera0e20d02019-05-15 14:03:01 +0100224#else /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +0100225#define USAGE_CID ""
Hanno Beckera0e20d02019-05-15 14:03:01 +0100226#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +0100227
Gilles Peskineeccd8882020-03-10 12:19:08 +0100228#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100229#define USAGE_PSK_RAW \
Piotr Nowicki9926eaf2019-11-20 14:54:36 +0100230 " psk=%%s default: \"\" (disabled)\n" \
231 " The PSK values are in hex, without 0x.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100232 " psk_list=%%s default: \"\"\n" \
Andrzej Kurekb274f272019-02-05 05:06:35 -0500233 " A list of (PSK identity, PSK value) pairs.\n" \
234 " The PSK values are in hex, without 0x.\n" \
235 " id1,psk1[,id2,psk2[,...]]\n" \
236 " psk_identity=%%s default: \"Client_identity\"\n"
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100237#if defined(MBEDTLS_USE_PSA_CRYPTO)
238#define USAGE_PSK_SLOT \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000239 " psk_opaque=%%d default: 0 (don't use opaque static PSK)\n" \
240 " Enable this to store the PSK configured through command line\n" \
241 " parameter `psk` in a PSA-based key slot.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100242 " Note: Currently only supported in conjunction with\n" \
243 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
244 " to force a particular PSK-only ciphersuite.\n" \
245 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
246 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
247 " with prepopulated key slots instead of importing raw key material.\n" \
Hanno Becker1d911cd2018-11-15 13:06:09 +0000248 " psk_list_opaque=%%d default: 0 (don't use opaque dynamic PSKs)\n" \
249 " Enable this to store the list of dynamically chosen PSKs configured\n" \
250 " through the command line parameter `psk_list` in PSA-based key slots.\n" \
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100251 " Note: Currently only supported in conjunction with\n" \
252 " the use of min_version to force TLS 1.2 and force_ciphersuite \n" \
253 " to force a particular PSK-only ciphersuite.\n" \
254 " Note: This is to test integration of PSA-based opaque PSKs with\n" \
255 " Mbed TLS only. Production systems are likely to configure Mbed TLS\n" \
256 " with prepopulated key slots instead of importing raw key material.\n"
257#else
258#define USAGE_PSK_SLOT ""
259#endif /* MBEDTLS_USE_PSA_CRYPTO */
260#define USAGE_PSK USAGE_PSK_RAW USAGE_PSK_SLOT
Paul Bakkered27a042013-04-18 22:46:23 +0200261#else
262#define USAGE_PSK ""
Gilles Peskineeccd8882020-03-10 12:19:08 +0100263#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200264#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
265#define USAGE_CA_CALLBACK \
266 " ca_callback=%%d default: 0 (disabled)\n" \
267 " Enable this to use the trusted certificate callback function\n"
268#else
269#define USAGE_CA_CALLBACK ""
270#endif /* MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200271#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Paul Bakkera503a632013-08-14 13:48:06 +0200272#define USAGE_TICKETS \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +0100273 " tickets=%%d default: 1 (enabled)\n" \
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +0200274 " ticket_timeout=%%d default: 86400 (one day)\n"
Paul Bakkera503a632013-08-14 13:48:06 +0200275#else
276#define USAGE_TICKETS ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200277#endif /* MBEDTLS_SSL_SESSION_TICKETS */
Paul Bakkera503a632013-08-14 13:48:06 +0200278
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300279#if defined(MBEDTLS_SSL_EXPORT_KEYS)
280#define USAGE_EAP_TLS \
281 " eap_tls=%%d default: 0 (disabled)\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100282#define USAGE_NSS_KEYLOG \
Hanno Beckerbc5308c2019-09-09 11:38:51 +0100283 " nss_keylog=%%d default: 0 (disabled)\n" \
284 " This cannot be used with eap_tls=1\n"
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100285#define USAGE_NSS_KEYLOG_FILE \
286 " nss_keylog_file=%%s\n"
Ron Eldor65b56ef2019-09-26 16:40:48 +0300287#if defined(MBEDTLS_SSL_DTLS_SRTP)
288#define USAGE_SRTP \
289 " use_srtp=%%d default: 0 (disabled)\n" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +0200290 " srtp_force_profile=%%d default: 0 (all enabled)\n" \
Ron Eldor65b56ef2019-09-26 16:40:48 +0300291 " available profiles:\n" \
292 " 1 - SRTP_AES128_CM_HMAC_SHA1_80\n" \
293 " 2 - SRTP_AES128_CM_HMAC_SHA1_32\n" \
294 " 3 - SRTP_NULL_HMAC_SHA1_80\n" \
295 " 4 - SRTP_NULL_HMAC_SHA1_32\n" \
296 " support_mki=%%d default: 0 (not supported)\n"
297#else /* MBEDTLS_SSL_DTLS_SRTP */
298#define USAGE_SRTP ""
299#endif
300#else /* MBEDTLS_SSL_EXPORT_KEYS */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300301#define USAGE_EAP_TLS ""
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100302#define USAGE_NSS_KEYLOG ""
303#define USAGE_NSS_KEYLOG_FILE ""
Ron Eldor65b56ef2019-09-26 16:40:48 +0300304#define USAGE_SRTP ""
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300305#endif /* MBEDTLS_SSL_EXPORT_KEYS */
306
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200307#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100308#define USAGE_CACHE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100309 " cache_max=%%d default: cache default (50)\n" \
310 " cache_timeout=%%d default: cache default (1d)\n"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100311#else
312#define USAGE_CACHE ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200313#endif /* MBEDTLS_SSL_CACHE_C */
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +0100314
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200315#if defined(SNI_OPTION)
Ron Eldor80d04192019-04-04 15:02:01 +0300316#if defined(MBEDTLS_X509_CRL_PARSE_C)
317#define SNI_CRL ",crl"
318#else
319#define SNI_CRL ""
320#endif
321
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100322#define USAGE_SNI \
Ron Eldor80d04192019-04-04 15:02:01 +0300323 " sni=%%s name1,cert1,key1,ca1"SNI_CRL",auth1[,...]\n" \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200324 " default: disabled\n"
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100325#else
326#define USAGE_SNI ""
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200327#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100328
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200329#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Paul Bakker05decb22013-08-15 13:33:48 +0200330#define USAGE_MAX_FRAG_LEN \
331 " max_frag_len=%%d default: 16384 (tls default)\n" \
332 " options: 512, 1024, 2048, 4096\n"
333#else
334#define USAGE_MAX_FRAG_LEN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335#endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */
Paul Bakker05decb22013-08-15 13:33:48 +0200336
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200338#define USAGE_ALPN \
339 " alpn=%%s default: \"\" (disabled)\n" \
340 " example: spdy/1,http/1.1\n"
341#else
342#define USAGE_ALPN ""
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200343#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200344
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200345#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200346#define USAGE_COOKIES \
347 " cookies=0/1/-1 default: 1 (enabled)\n" \
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200348 " 0: disabled, -1: library default (broken)\n"
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +0200349#else
350#define USAGE_COOKIES ""
351#endif
352
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200353#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200354#define USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200355 " anti_replay=0/1 default: (library default: enabled)\n"
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +0200356#else
357#define USAGE_ANTI_REPLAY ""
358#endif
359
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200360#define USAGE_BADMAC_LIMIT \
361 " badmac_limit=%%d default: (library default: disabled)\n"
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200362
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200363#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200364#define USAGE_DTLS \
365 " dtls=%%d default: 0 (TLS)\n" \
366 " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200367 " range of DTLS handshake timeouts in millisecs\n" \
Hanno Beckere7675d02018-08-14 13:28:56 +0100368 " mtu=%%d default: (library default: unlimited)\n" \
369 " dgram_packing=%%d default: 1 (allowed)\n" \
370 " allow or forbid packing of multiple\n" \
371 " records within a single datgram.\n"
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200372#else
373#define USAGE_DTLS ""
374#endif
375
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200376#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200377#define USAGE_EMS \
378 " extended_ms=0/1 default: (library default: on)\n"
379#else
380#define USAGE_EMS ""
381#endif
382
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200383#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100384#define USAGE_ETM \
385 " etm=0/1 default: (library default: on)\n"
386#else
387#define USAGE_ETM ""
388#endif
389
Philippe Antoine738153a2019-06-18 20:16:43 +0200390#define USAGE_REPRODUCIBLE \
391 " reproducible=0/1 default: 0 (disabled)\n"
392
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200393#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100394#define USAGE_RENEGO \
395 " renegotiation=%%d default: 0 (disabled)\n" \
396 " renegotiate=%%d default: 0 (disabled)\n" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +0100397 " renego_delay=%%d default: -2 (library default)\n" \
Andres AG692ad842017-01-19 16:30:57 +0000398 " renego_period=%%d default: (2^64 - 1 for TLS, 2^48 - 1 for DTLS)\n"
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100399#else
400#define USAGE_RENEGO ""
401#endif
402
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200403#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
404#define USAGE_ECJPAKE \
405 " ecjpake_pw=%%s default: none (disabled)\n"
406#else
407#define USAGE_ECJPAKE ""
408#endif
409
Hanno Beckere6706e62017-05-15 16:05:15 +0100410#if defined(MBEDTLS_ECP_C)
411#define USAGE_CURVES \
412 " curves=a,b,c,d default: \"default\" (library default)\n" \
413 " example: \"secp521r1,brainpoolP512r1\"\n" \
414 " - use \"none\" for empty list\n" \
415 " - see mbedtls_ecp_curve_list()\n" \
416 " for acceptable curve names\n"
417#else
418#define USAGE_CURVES ""
419#endif
420
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300421#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
422#define USAGE_SERIALIZATION \
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200423 " serialize=%%d default: 0 (do not serialize/deserialize)\n" \
424 " options: 1 (serialize)\n" \
425 " 2 (serialize with re-initialization)\n" \
426 " context_file=%%s The file path to write a serialized connection\n"\
427 " in the form of base64 code (serialize option\n" \
428 " must be set)\n" \
429 " default: \"\" (do nothing)\n" \
430 " option: a file path\n"
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300431#else
432#define USAGE_SERIALIZATION ""
433#endif
434
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200435/* USAGE is arbitrarily split to stay under the portable string literal
436 * length limit: 4095 bytes in C99. */
437#define USAGE1 \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000438 "\n usage: ssl_server2 param=<>...\n" \
439 "\n acceptable parameters:\n" \
Ron Eldor71f68c42017-09-26 11:29:11 +0300440 " server_addr=%%s default: (all interfaces)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000441 " server_port=%%d default: 4433\n" \
442 " debug_level=%%d default: 0 (disabled)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200443 " buffer_size=%%d default: 200 \n" \
David Horstmannfba138a2021-05-11 15:23:56 +0100444 " (minimum: 1)\n" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200445 " response_size=%%d default: about 152 (basic response)\n" \
446 " (minimum: 0, max: 16384)\n" \
447 " increases buffer_size if bigger\n"\
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +0100448 " nbio=%%d default: 0 (blocking I/O)\n" \
449 " options: 1 (non-blocking), 2 (added delays)\n" \
Hanno Becker16970d22017-10-10 15:56:37 +0100450 " event=%%d default: 0 (loop)\n" \
451 " options: 1 (level-triggered, implies nbio=1),\n" \
Manuel Pégourié-Gonnard22311ae2015-09-09 11:22:58 +0200452 " read_timeout=%%d default: 0 ms (no timeout)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100453 "\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200454 USAGE_DTLS \
Ron Eldor6ea64512018-07-02 10:08:07 +0300455 USAGE_SRTP \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200456 USAGE_COOKIES \
457 USAGE_ANTI_REPLAY \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +0200458 USAGE_BADMAC_LIMIT \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200459 "\n"
460#define USAGE2 \
Manuel Pégourié-Gonnardee6139c2015-05-07 10:18:26 +0100461 " auth_mode=%%s default: (library default: none)\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100462 " options: none, optional, required\n" \
Janos Follath4817e272017-04-10 13:44:33 +0100463 " cert_req_ca_list=%%d default: 1 (send ca list)\n" \
464 " options: 1 (send ca list), 0 (don't send)\n" \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000465 USAGE_IO \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100466 "\n" \
467 USAGE_PSK \
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200468 USAGE_CA_CALLBACK \
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200469 USAGE_ECJPAKE \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200470 "\n"
471#define USAGE3 \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +0100472 " allow_legacy=%%d default: (library default: no)\n" \
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +0100473 USAGE_RENEGO \
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +0200474 " exchanges=%%d default: 1\n" \
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +0200475 "\n" \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100476 USAGE_TICKETS \
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300477 USAGE_EAP_TLS \
Philippe Antoine738153a2019-06-18 20:16:43 +0200478 USAGE_REPRODUCIBLE \
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100479 USAGE_NSS_KEYLOG \
480 USAGE_NSS_KEYLOG_FILE \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +0100481 USAGE_CACHE \
Manuel Pégourié-Gonnard2fc243d2014-02-19 18:22:59 +0100482 USAGE_MAX_FRAG_LEN \
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +0200483 USAGE_ALPN \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +0200484 USAGE_EMS \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100485 USAGE_ETM \
Hanno Beckere6706e62017-05-15 16:05:15 +0100486 USAGE_CURVES \
Gilles Peskineb2971ff2020-04-14 19:41:01 +0200487 "\n"
488#define USAGE4 \
Hanno Becker34ce81f2020-08-17 09:40:54 +0100489 USAGE_SSL_ASYNC \
490 USAGE_SNI \
Gilles Peskinebc70a182017-05-09 15:59:24 +0200491 " allow_sha1=%%d default: 0\n" \
TRodziewicz55bd84b2021-05-13 11:40:46 +0200492 " min_version=%%s default: (library default: tls1_2)\n" \
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +0200493 " max_version=%%s default: (library default: tls1_2)\n" \
Paul Bakkerc1516be2013-06-29 16:01:32 +0200494 " force_version=%%s default: \"\" (none)\n" \
TRodziewicz55bd84b2021-05-13 11:40:46 +0200495 " options: tls1_2, dtls1_2\n" \
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200496 "\n" \
Manuel Pégourié-Gonnard6dc07812014-06-11 13:50:34 +0200497 " force_ciphersuite=<name> default: all enabled\n" \
Andres Amaya Garciabc818842018-10-16 21:08:38 +0100498 " query_config=<name> return 0 if the specified\n" \
499 " configuration macro is defined and 1\n" \
500 " otherwise. The expansion of the macro\n" \
501 " is printed if it is defined\n" \
Jarno Lamsabbc7b412019-06-04 11:06:31 +0300502 USAGE_SERIALIZATION \
Paul Bakkerb60b95f2012-09-25 09:05:17 +0000503 " acceptable ciphersuite names:\n"
504
Hanno Becker8651a432017-06-09 16:13:22 +0100505#define ALPN_LIST_SIZE 10
506#define CURVE_LIST_SIZE 20
507
Andres AG692ad842017-01-19 16:30:57 +0000508#define PUT_UINT64_BE(out_be,in_le,i) \
509{ \
510 (out_be)[(i) + 0] = (unsigned char)( ( (in_le) >> 56 ) & 0xFF ); \
511 (out_be)[(i) + 1] = (unsigned char)( ( (in_le) >> 48 ) & 0xFF ); \
512 (out_be)[(i) + 2] = (unsigned char)( ( (in_le) >> 40 ) & 0xFF ); \
513 (out_be)[(i) + 3] = (unsigned char)( ( (in_le) >> 32 ) & 0xFF ); \
514 (out_be)[(i) + 4] = (unsigned char)( ( (in_le) >> 24 ) & 0xFF ); \
515 (out_be)[(i) + 5] = (unsigned char)( ( (in_le) >> 16 ) & 0xFF ); \
516 (out_be)[(i) + 6] = (unsigned char)( ( (in_le) >> 8 ) & 0xFF ); \
517 (out_be)[(i) + 7] = (unsigned char)( ( (in_le) >> 0 ) & 0xFF ); \
518}
519
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +0200520/* This is global so it can be easily accessed by callback functions */
521rng_context_t rng;
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500522
Rich Evans85b05ec2015-02-12 11:37:29 +0000523/*
524 * global options
525 */
526struct options
527{
528 const char *server_addr; /* address on which the ssl service runs */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +0200529 const char *server_port; /* port on which the ssl service runs */
Rich Evans85b05ec2015-02-12 11:37:29 +0000530 int debug_level; /* level of debugging */
531 int nbio; /* should I/O be blocking? */
Hanno Becker16970d22017-10-10 15:56:37 +0100532 int event; /* loop or event-driven IO? level or edge triggered? */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200533 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
Andrzej Kurek30e731d2017-10-12 13:50:29 +0200534 int response_size; /* pad response with header to requested size */
535 uint16_t buffer_size; /* IO buffer size */
Rich Evans85b05ec2015-02-12 11:37:29 +0000536 const char *ca_file; /* the file with the CA certificate(s) */
537 const char *ca_path; /* the path with the CA certificate(s) reside */
538 const char *crt_file; /* the file with the server certificate */
539 const char *key_file; /* the file with the server key */
Hanno Beckere58a6302018-11-07 16:20:16 +0000540 const char *key_pwd; /* the password for the server key */
Rich Evans85b05ec2015-02-12 11:37:29 +0000541 const char *crt_file2; /* the file with the 2nd server certificate */
542 const char *key_file2; /* the file with the 2nd server key */
Hanno Beckere58a6302018-11-07 16:20:16 +0000543 const char *key_pwd2; /* the password for the 2nd server key */
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100544 const char *async_operations; /* supported SSL asynchronous operations */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100545 int async_private_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
546 int async_private_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
547 int async_private_error; /* inject error in async private callback */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100548#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +0000549 int psk_opaque;
550 int psk_list_opaque;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100551#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200552#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
Hanno Beckercbb59032019-03-28 14:14:22 +0000553 int ca_callback; /* Use callback for trusted certificate list */
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +0200554#endif
Rich Evans85b05ec2015-02-12 11:37:29 +0000555 const char *psk; /* the pre-shared key */
556 const char *psk_identity; /* the pre-shared key identity */
557 char *psk_list; /* list of PSK id/key pairs for callback */
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +0200558 const char *ecjpake_pw; /* the EC J-PAKE password */
Rich Evans85b05ec2015-02-12 11:37:29 +0000559 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
Rich Evans85b05ec2015-02-12 11:37:29 +0000560 int renegotiation; /* enable / disable renegotiation */
561 int allow_legacy; /* allow legacy renegotiation */
562 int renegotiate; /* attempt renegotiation? */
563 int renego_delay; /* delay before enforcing renegotiation */
Andres AG692ad842017-01-19 16:30:57 +0000564 uint64_t renego_period; /* period for automatic renegotiation */
Rich Evans85b05ec2015-02-12 11:37:29 +0000565 int exchanges; /* number of data exchanges */
566 int min_version; /* minimum protocol version accepted */
567 int max_version; /* maximum protocol version accepted */
Gilles Peskinebc70a182017-05-09 15:59:24 +0200568 int allow_sha1; /* flag for SHA-1 support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000569 int auth_mode; /* verify mode for connection */
Janos Follath4817e272017-04-10 13:44:33 +0100570 int cert_req_ca_list; /* should we send the CA list? */
Rich Evans85b05ec2015-02-12 11:37:29 +0000571 unsigned char mfl_code; /* code for maximum fragment length */
572 int trunc_hmac; /* accept truncated hmac? */
573 int tickets; /* enable / disable session tickets */
574 int ticket_timeout; /* session ticket lifetime */
575 int cache_max; /* max number of session cache entries */
576 int cache_timeout; /* expiration delay of session cache entries */
577 char *sni; /* string describing sni information */
Hanno Beckere6706e62017-05-15 16:05:15 +0100578 const char *curves; /* list of supported elliptic curves */
Rich Evans85b05ec2015-02-12 11:37:29 +0000579 const char *alpn_string; /* ALPN supported protocols */
580 const char *dhm_file; /* the file with the DH parameters */
581 int extended_ms; /* allow negotiation of extended MS? */
582 int etm; /* allow negotiation of encrypt-then-MAC? */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000583 int transport; /* TLS or DTLS? */
584 int cookies; /* Use cookies for DTLS? -1 to break them */
585 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
586 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
587 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +0200588 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
Hanno Beckere7675d02018-08-14 13:28:56 +0100589 int dgram_packing; /* allow/forbid datagram packing */
Manuel Pégourié-Gonnardd901d172015-02-16 18:37:53 +0000590 int badmac_limit; /* Limit of records with bad MAC */
Ron Eldorb7fd64c2019-05-12 11:03:32 +0300591 int eap_tls; /* derive EAP-TLS keying material? */
Hanno Becker48f3a3d2019-08-29 06:31:22 +0100592 int nss_keylog; /* export NSS key log material */
593 const char *nss_keylog_file; /* NSS key log file */
Hanno Beckera7d25422019-04-09 17:28:10 +0100594 int cid_enabled; /* whether to use the CID extension or not */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100595 int cid_enabled_renego; /* whether to use the CID extension or not
596 * during renegotiation */
Hanno Beckera7d25422019-04-09 17:28:10 +0100597 const char *cid_val; /* the CID to use for incoming messages */
Jarno Lamsa9831c8a2019-05-29 13:33:32 +0300598 int serialize; /* serialize/deserialize connection */
Piotr Nowicki3de298f2020-04-16 14:35:19 +0200599 const char *context_file; /* the file to write a serialized connection
600 * in the form of base64 code (serialize
601 * option must be set) */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +0100602 const char *cid_val_renego; /* the CID to use for incoming messages
603 * after renegotiation */
Philippe Antoine154feb22019-06-11 17:50:23 +0200604 int reproducible; /* make communication reproducible */
gabor-mezei-arma9eecf12020-07-07 11:11:02 +0200605 int query_config_mode; /* whether to read config */
Ron Eldor6ea64512018-07-02 10:08:07 +0300606 int use_srtp; /* Support SRTP */
607 int force_srtp_profile; /* SRTP protection profile to use or all */
Ron Eldor12c6ead2018-07-03 15:08:32 +0300608 int support_mki; /* The dtls mki mki support */
Rich Evans85b05ec2015-02-12 11:37:29 +0000609} opt;
610
Gilles Peskine0d980b82021-01-05 23:34:27 +0100611#include "ssl_test_common_source.c"
Hanno Beckerdcc94e62019-07-03 17:05:43 +0100612
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200613/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200614 * Return authmode from string, or -1 on error
615 */
616static int get_auth_mode( const char *s )
617{
618 if( strcmp( s, "none" ) == 0 )
619 return( MBEDTLS_SSL_VERIFY_NONE );
620 if( strcmp( s, "optional" ) == 0 )
621 return( MBEDTLS_SSL_VERIFY_OPTIONAL );
622 if( strcmp( s, "required" ) == 0 )
623 return( MBEDTLS_SSL_VERIFY_REQUIRED );
624
625 return( -1 );
626}
627
628/*
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200629 * Used by sni_parse and psk_parse to handle coma-separated lists
630 */
631#define GET_ITEM( dst ) \
Hanno Becker1eeca412018-10-15 12:01:35 +0100632 do \
633 { \
634 (dst) = p; \
635 while( *p != ',' ) \
636 if( ++p > end ) \
637 goto error; \
638 *p++ = '\0'; \
639 } while( 0 )
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200640
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200641#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100642typedef struct _sni_entry sni_entry;
643
644struct _sni_entry {
645 const char *name;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200646 mbedtls_x509_crt *cert;
647 mbedtls_pk_context *key;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200648 mbedtls_x509_crt* ca;
649 mbedtls_x509_crl* crl;
650 int authmode;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100651 sni_entry *next;
652};
653
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100654void sni_free( sni_entry *head )
655{
656 sni_entry *cur = head, *next;
657
658 while( cur != NULL )
659 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200660 mbedtls_x509_crt_free( cur->cert );
661 mbedtls_free( cur->cert );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100662
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200663 mbedtls_pk_free( cur->key );
664 mbedtls_free( cur->key );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100665
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200666 mbedtls_x509_crt_free( cur->ca );
667 mbedtls_free( cur->ca );
Ron Eldor80d04192019-04-04 15:02:01 +0300668#if defined(MBEDTLS_X509_CRL_PARSE_C)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200669 mbedtls_x509_crl_free( cur->crl );
670 mbedtls_free( cur->crl );
Ron Eldor80d04192019-04-04 15:02:01 +0300671#endif
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100672 next = cur->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200673 mbedtls_free( cur );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100674 cur = next;
675 }
676}
677
678/*
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200679 * Parse a string of sextuples name1,crt1,key1,ca1,crl1,auth1[,...]
680 * into a usable sni_entry list. For ca1, crl1, auth1, the special value
681 * '-' means unset. If ca1 is unset, then crl1 is ignored too.
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000682 *
683 * Modifies the input string! This is not production quality!
684 */
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +0200685sni_entry *sni_parse( char *sni_string )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000686{
687 sni_entry *cur = NULL, *new = NULL;
688 char *p = sni_string;
689 char *end = p;
Ron Eldor80d04192019-04-04 15:02:01 +0300690 char *crt_file, *key_file, *ca_file, *auth_str;
691#if defined(MBEDTLS_X509_CRL_PARSE_C)
692 char *crl_file;
693#endif
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000694
695 while( *end != '\0' )
696 ++end;
697 *end = ',';
698
699 while( p <= end )
700 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200701 if( ( new = mbedtls_calloc( 1, sizeof( sni_entry ) ) ) == NULL )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000702 {
703 sni_free( cur );
704 return( NULL );
705 }
706
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200707 GET_ITEM( new->name );
708 GET_ITEM( crt_file );
709 GET_ITEM( key_file );
710 GET_ITEM( ca_file );
Ron Eldor80d04192019-04-04 15:02:01 +0300711#if defined(MBEDTLS_X509_CRL_PARSE_C)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200712 GET_ITEM( crl_file );
Ron Eldor80d04192019-04-04 15:02:01 +0300713#endif
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200714 GET_ITEM( auth_str );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000715
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200716 if( ( new->cert = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL ||
717 ( new->key = mbedtls_calloc( 1, sizeof( mbedtls_pk_context ) ) ) == NULL )
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200718 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000719
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200720 mbedtls_x509_crt_init( new->cert );
721 mbedtls_pk_init( new->key );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000722
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200723 if( mbedtls_x509_crt_parse_file( new->cert, crt_file ) != 0 ||
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +0200724 mbedtls_pk_parse_keyfile( new->key, key_file, "", rng_get, &rng ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000725 goto error;
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200726
727 if( strcmp( ca_file, "-" ) != 0 )
728 {
729 if( ( new->ca = mbedtls_calloc( 1, sizeof( mbedtls_x509_crt ) ) ) == NULL )
730 goto error;
731
732 mbedtls_x509_crt_init( new->ca );
733
734 if( mbedtls_x509_crt_parse_file( new->ca, ca_file ) != 0 )
735 goto error;
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000736 }
737
Ron Eldor80d04192019-04-04 15:02:01 +0300738#if defined(MBEDTLS_X509_CRL_PARSE_C)
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200739 if( strcmp( crl_file, "-" ) != 0 )
740 {
741 if( ( new->crl = mbedtls_calloc( 1, sizeof( mbedtls_x509_crl ) ) ) == NULL )
742 goto error;
743
744 mbedtls_x509_crl_init( new->crl );
745
746 if( mbedtls_x509_crl_parse_file( new->crl, crl_file ) != 0 )
747 goto error;
748 }
Ron Eldor80d04192019-04-04 15:02:01 +0300749#endif
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200750
751 if( strcmp( auth_str, "-" ) != 0 )
752 {
753 if( ( new->authmode = get_auth_mode( auth_str ) ) < 0 )
754 goto error;
755 }
756 else
757 new->authmode = DFL_AUTH_MODE;
758
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000759 new->next = cur;
760 cur = new;
761 }
762
763 return( cur );
764
765error:
766 sni_free( new );
767 sni_free( cur );
768 return( NULL );
769}
770
771/*
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100772 * SNI callback.
773 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200774int sni_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100775 const unsigned char *name, size_t name_len )
776{
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200777 const sni_entry *cur = (const sni_entry *) p_info;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100778
779 while( cur != NULL )
780 {
781 if( name_len == strlen( cur->name ) &&
782 memcmp( name, cur->name, name_len ) == 0 )
783 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +0200784 if( cur->ca != NULL )
785 mbedtls_ssl_set_hs_ca_chain( ssl, cur->ca, cur->crl );
786
787 if( cur->authmode != DFL_AUTH_MODE )
788 mbedtls_ssl_set_hs_authmode( ssl, cur->authmode );
789
Manuel Pégourié-Gonnard1af6c852015-05-10 23:10:37 +0200790 return( mbedtls_ssl_set_hs_own_cert( ssl, cur->cert, cur->key ) );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100791 }
792
Mateusz Starzyk55768f22021-05-27 14:57:03 +0200793 cur = cur->next;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100794 }
795
796 return( -1 );
797}
798
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +0200799#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +0100800
Gilles Peskineeccd8882020-03-10 12:19:08 +0100801#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Becker554b6ea2019-04-30 14:18:06 +0100802
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200803typedef struct _psk_entry psk_entry;
804
805struct _psk_entry
806{
807 const char *name;
808 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200809 unsigned char key[MBEDTLS_PSK_MAX_LEN];
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100810#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cronadc2ff22020-09-16 16:49:27 +0200811 psa_key_id_t slot;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100812#endif /* MBEDTLS_USE_PSA_CRYPTO */
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200813 psk_entry *next;
814};
815
816/*
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000817 * Free a list of psk_entry's
818 */
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000819int psk_free( psk_entry *head )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000820{
821 psk_entry *next;
822
823 while( head != NULL )
824 {
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000825#if defined(MBEDTLS_USE_PSA_CRYPTO)
826 psa_status_t status;
Ronald Cronadc2ff22020-09-16 16:49:27 +0200827 psa_key_id_t const slot = head->slot;
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000828
Ronald Cronadc2ff22020-09-16 16:49:27 +0200829 if( slot != 0 )
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000830 {
831 status = psa_destroy_key( slot );
832 if( status != PSA_SUCCESS )
833 return( status );
834 }
835#endif /* MBEDTLS_USE_PSA_CRYPTO */
836
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000837 next = head->next;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200838 mbedtls_free( head );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000839 head = next;
840 }
Hanno Beckerc43b6ea2018-11-05 13:48:43 +0000841
842 return( 0 );
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000843}
844
845/*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200846 * Parse a string of pairs name1,key1[,name2,key2[,...]]
847 * into a usable psk_entry list.
848 *
849 * Modifies the input string! This is not production quality!
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200850 */
851psk_entry *psk_parse( char *psk_string )
852{
853 psk_entry *cur = NULL, *new = NULL;
854 char *p = psk_string;
855 char *end = p;
856 char *key_hex;
857
858 while( *end != '\0' )
859 ++end;
860 *end = ',';
861
862 while( p <= end )
863 {
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +0200864 if( ( new = mbedtls_calloc( 1, sizeof( psk_entry ) ) ) == NULL )
Manuel Pégourié-Gonnardb1990952015-02-18 09:32:06 +0000865 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200866
867 memset( new, 0, sizeof( psk_entry ) );
868
Manuel Pégourié-Gonnardfdee74b2014-06-10 15:15:06 +0200869 GET_ITEM( new->name );
870 GET_ITEM( key_hex );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200871
Ronald Cron7d866162020-06-18 10:36:26 +0200872 if( mbedtls_test_unhexify( new->key, MBEDTLS_PSK_MAX_LEN,
873 key_hex, &new->key_len ) != 0 )
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000874 goto error;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200875
876 new->next = cur;
877 cur = new;
878 }
879
880 return( cur );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200881
Manuel Pégourié-Gonnard5c078e12015-02-14 13:56:39 +0000882error:
883 psk_free( new );
884 psk_free( cur );
885 return( 0 );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200886}
887
888/*
889 * PSK callback
890 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200891int psk_callback( void *p_info, mbedtls_ssl_context *ssl,
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200892 const unsigned char *name, size_t name_len )
893{
894 psk_entry *cur = (psk_entry *) p_info;
895
896 while( cur != NULL )
897 {
898 if( name_len == strlen( cur->name ) &&
899 memcmp( name, cur->name, name_len ) == 0 )
900 {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100901#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cronadc2ff22020-09-16 16:49:27 +0200902 if( cur->slot != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +0100903 return( mbedtls_ssl_set_hs_psk_opaque( ssl, cur->slot ) );
904 else
905#endif
Manuel Pégourié-Gonnard4b682962015-05-07 15:59:54 +0100906 return( mbedtls_ssl_set_hs_psk( ssl, cur->key, cur->key_len ) );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200907 }
908
Mateusz Starzyk55768f22021-05-27 14:57:03 +0200909 cur = cur->next;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +0200910 }
911
912 return( -1 );
913}
Gilles Peskineeccd8882020-03-10 12:19:08 +0100914#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Manuel Pégourié-Gonnard9e271632014-06-09 19:06:00 +0200915
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +0200916static mbedtls_net_context listen_fd, client_fd;
Paul Bakkerbc3e54c2014-08-18 14:36:17 +0200917
918/* Interruption handler to ensure clean exit (for valgrind testing) */
919#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200920static int received_sigterm = 0;
921void term_handler( int sig )
922{
923 ((void) sig);
924 received_sigterm = 1;
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +0200925 mbedtls_net_free( &listen_fd ); /* causes mbedtls_net_accept() to abort */
926 mbedtls_net_free( &client_fd ); /* causes net_read() to abort */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200927}
Paul Bakkerc1283d32014-08-18 11:05:51 +0200928#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +0200929
Gilles Peskinea36ac4f2018-04-26 08:05:02 +0200930/** Return true if \p ret is a status code indicating that there is an
931 * operation in progress on an SSL connection, and false if it indicates
932 * success or a fatal error.
933 *
934 * The possible operations in progress are:
935 *
936 * - A read, when the SSL input buffer does not contain a full message.
937 * - A write, when the SSL output buffer contains some data that has not
938 * been sent over the network yet.
939 * - An asynchronous callback that has not completed yet. */
940static int mbedtls_status_is_ssl_in_progress( int ret )
941{
942 return( ret == MBEDTLS_ERR_SSL_WANT_READ ||
943 ret == MBEDTLS_ERR_SSL_WANT_WRITE ||
944 ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
945}
946
Gilles Peskineb74a1c72018-04-24 13:09:22 +0200947#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100948typedef struct
949{
Gilles Peskine44817442018-06-13 18:09:28 +0200950 mbedtls_x509_crt *cert; /*!< Certificate corresponding to the key */
951 mbedtls_pk_context *pk; /*!< Private key */
952 unsigned delay; /*!< Number of resume steps to go through */
953 unsigned pk_owned : 1; /*!< Whether to free the pk object on exit */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100954} ssl_async_key_slot_t;
955
956typedef enum {
Gilles Peskinead28bf02018-04-26 00:19:16 +0200957 SSL_ASYNC_INJECT_ERROR_NONE = 0, /*!< Let the callbacks succeed */
958 SSL_ASYNC_INJECT_ERROR_START, /*!< Inject error during start */
959 SSL_ASYNC_INJECT_ERROR_CANCEL, /*!< Close the connection after async start */
960 SSL_ASYNC_INJECT_ERROR_RESUME, /*!< Inject error during resume */
Gilles Peskinec9125722018-04-26 07:15:40 +0200961#define SSL_ASYNC_INJECT_ERROR_MAX SSL_ASYNC_INJECT_ERROR_RESUME
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100962} ssl_async_inject_error_t;
963
964typedef struct
965{
Gilles Peskinee2479892018-06-13 18:06:51 +0200966 ssl_async_key_slot_t slots[4]; /* key, key2, sni1, sni2 */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100967 size_t slots_used;
968 ssl_async_inject_error_t inject_error;
969 int (*f_rng)(void *, unsigned char *, size_t);
970 void *p_rng;
971} ssl_async_key_context_t;
972
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200973int ssl_async_set_key( ssl_async_key_context_t *ctx,
Gilles Peskine44817442018-06-13 18:09:28 +0200974 mbedtls_x509_crt *cert,
975 mbedtls_pk_context *pk,
976 int pk_take_ownership,
977 unsigned delay )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100978{
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200979 if( ctx->slots_used >= sizeof( ctx->slots ) / sizeof( *ctx->slots ) )
980 return( -1 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100981 ctx->slots[ctx->slots_used].cert = cert;
982 ctx->slots[ctx->slots_used].pk = pk;
983 ctx->slots[ctx->slots_used].delay = delay;
Gilles Peskine44817442018-06-13 18:09:28 +0200984 ctx->slots[ctx->slots_used].pk_owned = pk_take_ownership;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100985 ++ctx->slots_used;
Gilles Peskined6fbfde2018-04-30 10:23:56 +0200986 return( 0 );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +0100987}
988
Gilles Peskinefcca9d82018-01-12 13:47:48 +0100989#define SSL_ASYNC_INPUT_MAX_SIZE 512
Gilles Peskined3268832018-04-26 06:23:59 +0200990
991typedef enum
992{
993 ASYNC_OP_SIGN,
994 ASYNC_OP_DECRYPT,
995} ssl_async_operation_type_t;
996/* Note that the enum above and the array below need to be kept in sync!
997 * `ssl_async_operation_names[op]` is the name of op for each value `op`
998 * of type `ssl_async_operation_type_t`. */
999static const char *const ssl_async_operation_names[] =
1000{
1001 "sign",
1002 "decrypt",
1003};
1004
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001005typedef struct
1006{
Gilles Peskine6331d782018-04-26 13:27:43 +02001007 unsigned slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001008 ssl_async_operation_type_t operation_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001009 mbedtls_md_type_t md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001010 unsigned char input[SSL_ASYNC_INPUT_MAX_SIZE];
1011 size_t input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001012 unsigned remaining_delay;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001013} ssl_async_operation_context_t;
1014
Gilles Peskine8f97af72018-04-26 11:46:10 +02001015static int ssl_async_start( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001016 mbedtls_x509_crt *cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001017 ssl_async_operation_type_t op_type,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001018 mbedtls_md_type_t md_alg,
1019 const unsigned char *input,
1020 size_t input_len )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001021{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001022 ssl_async_key_context_t *config_data =
1023 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskine6331d782018-04-26 13:27:43 +02001024 unsigned slot;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001025 ssl_async_operation_context_t *ctx = NULL;
Gilles Peskined3268832018-04-26 06:23:59 +02001026 const char *op_name = ssl_async_operation_names[op_type];
Gilles Peskinef1127252018-04-24 13:05:39 +02001027
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001028 {
1029 char dn[100];
Gilles Peskined5d983e2018-06-15 14:05:10 +02001030 if( mbedtls_x509_dn_gets( dn, sizeof( dn ), &cert->subject ) > 0 )
1031 mbedtls_printf( "Async %s callback: looking for DN=%s\n",
1032 op_name, dn );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001033 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001034
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001035 /* Look for a private key that matches the public key in cert.
1036 * Since this test code has the private key inside Mbed TLS,
1037 * we call mbedtls_pk_check_pair to match a private key with the
1038 * public key. */
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001039 for( slot = 0; slot < config_data->slots_used; slot++ )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001040 {
Gilles Peskine3dae1cf2018-04-30 12:07:56 +02001041 if( mbedtls_pk_check_pair( &cert->pk,
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +02001042 config_data->slots[slot].pk,
1043 rng_get, &rng ) == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001044 break;
1045 }
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001046 if( slot == config_data->slots_used )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001047 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001048 mbedtls_printf( "Async %s callback: no key matches this certificate.\n",
1049 op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001050 return( MBEDTLS_ERR_SSL_HW_ACCEL_FALLTHROUGH );
1051 }
Gilles Peskine6331d782018-04-26 13:27:43 +02001052 mbedtls_printf( "Async %s callback: using key slot %u, delay=%u.\n",
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001053 op_name, slot, config_data->slots[slot].delay );
Gilles Peskinef1127252018-04-24 13:05:39 +02001054
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001055 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_START )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001056 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001057 mbedtls_printf( "Async %s callback: injected error\n", op_name );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001058 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1059 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001060
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001061 if( input_len > SSL_ASYNC_INPUT_MAX_SIZE )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001062 return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
Gilles Peskinef1127252018-04-24 13:05:39 +02001063
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001064 ctx = mbedtls_calloc( 1, sizeof( *ctx ) );
1065 if( ctx == NULL )
1066 return( MBEDTLS_ERR_SSL_ALLOC_FAILED );
1067 ctx->slot = slot;
Gilles Peskined3268832018-04-26 06:23:59 +02001068 ctx->operation_type = op_type;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001069 ctx->md_alg = md_alg;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001070 memcpy( ctx->input, input, input_len );
1071 ctx->input_len = input_len;
Gilles Peskineceb541b2018-04-26 06:30:45 +02001072 ctx->remaining_delay = config_data->slots[slot].delay;
Gilles Peskinea668c602018-04-30 11:54:39 +02001073 mbedtls_ssl_set_async_operation_data( ssl, ctx );
Gilles Peskinef1127252018-04-24 13:05:39 +02001074
Gilles Peskineceb541b2018-04-26 06:30:45 +02001075 if( ctx->remaining_delay == 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001076 return( 0 );
1077 else
1078 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1079}
1080
Gilles Peskine8f97af72018-04-26 11:46:10 +02001081static int ssl_async_sign( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001082 mbedtls_x509_crt *cert,
1083 mbedtls_md_type_t md_alg,
1084 const unsigned char *hash,
1085 size_t hash_len )
1086{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001087 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001088 ASYNC_OP_SIGN, md_alg,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001089 hash, hash_len ) );
1090}
1091
Gilles Peskine8f97af72018-04-26 11:46:10 +02001092static int ssl_async_decrypt( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001093 mbedtls_x509_crt *cert,
1094 const unsigned char *input,
1095 size_t input_len )
1096{
Gilles Peskine8f97af72018-04-26 11:46:10 +02001097 return( ssl_async_start( ssl, cert,
Gilles Peskined3268832018-04-26 06:23:59 +02001098 ASYNC_OP_DECRYPT, MBEDTLS_MD_NONE,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001099 input, input_len ) );
1100}
1101
Gilles Peskine8f97af72018-04-26 11:46:10 +02001102static int ssl_async_resume( mbedtls_ssl_context *ssl,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001103 unsigned char *output,
1104 size_t *output_len,
1105 size_t output_size )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001106{
Gilles Peskinea668c602018-04-30 11:54:39 +02001107 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine8f97af72018-04-26 11:46:10 +02001108 ssl_async_key_context_t *config_data =
1109 mbedtls_ssl_conf_get_async_config_data( ssl->conf );
Gilles Peskinedf13d5c2018-04-25 20:39:48 +02001110 ssl_async_key_slot_t *key_slot = &config_data->slots[ctx->slot];
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001111 int ret;
Gilles Peskinef5a99962018-04-30 16:37:23 +02001112 const char *op_name;
Gilles Peskinef1127252018-04-24 13:05:39 +02001113
Gilles Peskineceb541b2018-04-26 06:30:45 +02001114 if( ctx->remaining_delay > 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001115 {
Gilles Peskineceb541b2018-04-26 06:30:45 +02001116 --ctx->remaining_delay;
Gilles Peskine6331d782018-04-26 13:27:43 +02001117 mbedtls_printf( "Async resume (slot %u): call %u more times.\n",
Gilles Peskineceb541b2018-04-26 06:30:45 +02001118 ctx->slot, ctx->remaining_delay );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001119 return( MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS );
1120 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001121
Gilles Peskined3268832018-04-26 06:23:59 +02001122 switch( ctx->operation_type )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001123 {
Gilles Peskined3268832018-04-26 06:23:59 +02001124 case ASYNC_OP_DECRYPT:
Gilles Peskined3268832018-04-26 06:23:59 +02001125 ret = mbedtls_pk_decrypt( key_slot->pk,
1126 ctx->input, ctx->input_len,
1127 output, output_len, output_size,
1128 config_data->f_rng, config_data->p_rng );
1129 break;
1130 case ASYNC_OP_SIGN:
Gilles Peskined3268832018-04-26 06:23:59 +02001131 ret = mbedtls_pk_sign( key_slot->pk,
1132 ctx->md_alg,
1133 ctx->input, ctx->input_len,
Gilles Peskinef00f1522021-06-22 00:09:00 +02001134 output, output_size, output_len,
Gilles Peskined3268832018-04-26 06:23:59 +02001135 config_data->f_rng, config_data->p_rng );
1136 break;
1137 default:
Gilles Peskine6331d782018-04-26 13:27:43 +02001138 mbedtls_printf( "Async resume (slot %u): unknown operation type %ld. This shouldn't happen.\n",
Gilles Peskined3268832018-04-26 06:23:59 +02001139 ctx->slot, (long) ctx->operation_type );
Gilles Peskine44817442018-06-13 18:09:28 +02001140 mbedtls_free( ctx );
Gilles Peskined3268832018-04-26 06:23:59 +02001141 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1142 break;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001143 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001144
Gilles Peskinef5a99962018-04-30 16:37:23 +02001145 op_name = ssl_async_operation_names[ctx->operation_type];
1146
Gilles Peskinec9125722018-04-26 07:15:40 +02001147 if( config_data->inject_error == SSL_ASYNC_INJECT_ERROR_RESUME )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001148 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001149 mbedtls_printf( "Async resume callback: %s done but injected error\n",
1150 op_name );
Gilles Peskine2636fad2018-06-12 14:17:39 +02001151 mbedtls_free( ctx );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001152 return( MBEDTLS_ERR_PK_FEATURE_UNAVAILABLE );
1153 }
Gilles Peskinef1127252018-04-24 13:05:39 +02001154
Gilles Peskine6331d782018-04-26 13:27:43 +02001155 mbedtls_printf( "Async resume (slot %u): %s done, status=%d.\n",
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001156 ctx->slot, op_name, ret );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001157 mbedtls_free( ctx );
1158 return( ret );
1159}
1160
Gilles Peskine8f97af72018-04-26 11:46:10 +02001161static void ssl_async_cancel( mbedtls_ssl_context *ssl )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001162{
Gilles Peskinea668c602018-04-30 11:54:39 +02001163 ssl_async_operation_context_t *ctx = mbedtls_ssl_get_async_operation_data( ssl );
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001164 mbedtls_printf( "Async cancel callback.\n" );
1165 mbedtls_free( ctx );
1166}
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001167#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001168
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001169#if defined(MBEDTLS_USE_PSA_CRYPTO)
Ronald Cronadc2ff22020-09-16 16:49:27 +02001170static psa_status_t psa_setup_psk_key_slot( psa_key_id_t *slot,
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001171 psa_algorithm_t alg,
1172 unsigned char *psk,
1173 size_t psk_len )
1174{
1175 psa_status_t status;
Janos Follathbe4efc22019-08-08 11:38:18 +01001176 psa_key_attributes_t key_attributes;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001177
Janos Follathbe4efc22019-08-08 11:38:18 +01001178 key_attributes = psa_key_attributes_init();
1179 psa_set_key_usage_flags( &key_attributes, PSA_KEY_USAGE_DERIVE );
1180 psa_set_key_algorithm( &key_attributes, alg );
1181 psa_set_key_type( &key_attributes, PSA_KEY_TYPE_DERIVE );
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001182
Janos Follathbe4efc22019-08-08 11:38:18 +01001183 status = psa_import_key( &key_attributes, psk, psk_len, slot );
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001184 if( status != PSA_SUCCESS )
Hanno Becker1d911cd2018-11-15 13:06:09 +00001185 {
1186 fprintf( stderr, "IMPORT\n" );
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001187 return( status );
Hanno Becker1d911cd2018-11-15 13:06:09 +00001188 }
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001189
1190 return( PSA_SUCCESS );
1191}
1192#endif /* MBEDTLS_USE_PSA_CRYPTO */
1193
Hanno Beckera0e20d02019-05-15 14:03:01 +01001194#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001195int report_cid_usage( mbedtls_ssl_context *ssl,
1196 const char *additional_description )
1197{
1198 int ret;
1199 unsigned char peer_cid[ MBEDTLS_SSL_CID_OUT_LEN_MAX ];
1200 size_t peer_cid_len;
1201 int cid_negotiated;
1202
1203 if( opt.transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM )
1204 return( 0 );
1205
1206 /* Check if the use of a CID has been negotiated */
1207 ret = mbedtls_ssl_get_peer_cid( ssl, &cid_negotiated,
1208 peer_cid, &peer_cid_len );
1209 if( ret != 0 )
1210 {
1211 mbedtls_printf( " failed\n ! mbedtls_ssl_get_peer_cid returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02001212 (unsigned int) -ret );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001213 return( ret );
1214 }
1215
1216 if( cid_negotiated == MBEDTLS_SSL_CID_DISABLED )
1217 {
1218 if( opt.cid_enabled == MBEDTLS_SSL_CID_ENABLED )
1219 {
1220 mbedtls_printf( "(%s) Use of Connection ID was not offered by client.\n",
1221 additional_description );
1222 }
1223 }
1224 else
1225 {
1226 size_t idx=0;
1227 mbedtls_printf( "(%s) Use of Connection ID has been negotiated.\n",
1228 additional_description );
1229 mbedtls_printf( "(%s) Peer CID (length %u Bytes): ",
1230 additional_description,
1231 (unsigned) peer_cid_len );
1232 while( idx < peer_cid_len )
1233 {
1234 mbedtls_printf( "%02x ", peer_cid[ idx ] );
1235 idx++;
1236 }
1237 mbedtls_printf( "\n" );
1238 }
1239
1240 return( 0 );
1241}
Hanno Beckera0e20d02019-05-15 14:03:01 +01001242#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001243
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001244int main( int argc, char *argv[] )
1245{
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00001246 int ret = 0, len, written, frags, exchanges_left;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001247 int query_config_ret = 0;
Hanno Beckerdcc94e62019-07-03 17:05:43 +01001248 io_ctx_t io_ctx;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001249 unsigned char* buf = 0;
Gilles Peskineeccd8882020-03-10 12:19:08 +01001250#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001251#if defined(MBEDTLS_USE_PSA_CRYPTO)
1252 psa_algorithm_t alg = 0;
Ronald Cronadc2ff22020-09-16 16:49:27 +02001253 psa_key_id_t psk_slot = 0;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001254#endif /* MBEDTLS_USE_PSA_CRYPTO */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001255 unsigned char psk[MBEDTLS_PSK_MAX_LEN];
Paul Bakkerfbb17802013-04-17 19:10:21 +02001256 size_t psk_len = 0;
Paul Bakker9b7fb6f2014-06-12 23:01:43 +02001257 psk_entry *psk_info = NULL;
Paul Bakkered27a042013-04-18 22:46:23 +02001258#endif
Paul Bakkeref3f8c72013-06-24 13:01:08 +02001259 const char *pers = "ssl_server2";
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02001260 unsigned char client_ip[16] = { 0 };
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02001261 size_t cliip_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001262#if defined(MBEDTLS_SSL_COOKIE_C)
1263 mbedtls_ssl_cookie_ctx cookie_ctx;
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001264#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001265
Gilles Peskineef86ab22017-05-05 18:59:02 +02001266#if defined(MBEDTLS_X509_CRT_PARSE_C)
1267 mbedtls_x509_crt_profile crt_profile_for_test = mbedtls_x509_crt_profile_default;
1268#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001269 mbedtls_ssl_context ssl;
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001270 mbedtls_ssl_config conf;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001271#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02001272 mbedtls_timing_delay_context timer;
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02001273#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001274#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001275 unsigned char renego_period[8] = { 0 };
1276#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001277#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnarddb1cc762015-05-12 11:27:25 +02001278 uint32_t flags;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001279 mbedtls_x509_crt cacert;
1280 mbedtls_x509_crt srvcert;
1281 mbedtls_pk_context pkey;
1282 mbedtls_x509_crt srvcert2;
1283 mbedtls_pk_context pkey2;
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02001284 int key_cert_init = 0, key_cert_init2 = 0;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001285#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001286 ssl_async_key_context_t ssl_async_keys;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001287#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001288#endif /* MBEDTLS_X509_CRT_PARSE_C */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001289#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1290 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001291#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001292#if defined(MBEDTLS_SSL_CACHE_C)
1293 mbedtls_ssl_cache_context cache;
Paul Bakker0a597072012-09-25 21:55:46 +00001294#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001295#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1296 mbedtls_ssl_ticket_context ticket_ctx;
1297#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02001298#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001299 sni_entry *sni_info = NULL;
1300#endif
Hanno Beckere6706e62017-05-15 16:05:15 +01001301#if defined(MBEDTLS_ECP_C)
Hanno Becker8651a432017-06-09 16:13:22 +01001302 mbedtls_ecp_group_id curve_list[CURVE_LIST_SIZE];
Hanno Beckere6706e62017-05-15 16:05:15 +01001303 const mbedtls_ecp_curve_info * curve_cur;
1304#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001305#if defined(MBEDTLS_SSL_ALPN)
Hanno Becker8651a432017-06-09 16:13:22 +01001306 const char *alpn_list[ALPN_LIST_SIZE];
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001307#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001308#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Simon Butchercce68be2018-07-23 14:26:09 +01001309 unsigned char alloc_buf[MEMORY_HEAP_SIZE];
Paul Bakker82024bf2013-07-04 11:52:32 +02001310#endif
Hanno Beckera0e20d02019-05-15 14:03:01 +01001311#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +01001312 unsigned char cid[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001313 unsigned char cid_renego[MBEDTLS_SSL_CID_IN_LEN_MAX];
Hanno Beckera7d25422019-04-09 17:28:10 +01001314 size_t cid_len = 0;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001315 size_t cid_renego_len = 0;
Hanno Beckera7d25422019-04-09 17:28:10 +01001316#endif
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02001317#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
1318 unsigned char *context_buf = NULL;
Gilles Peskine4e8b5942019-09-20 19:12:31 +02001319 size_t context_buf_len = 0;
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02001320#endif
Hanno Beckera7d25422019-04-09 17:28:10 +01001321
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001322 int i;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001323 char *p, *q;
1324 const int *list;
Hanno Becker5a9942e2018-11-12 17:47:48 +00001325#if defined(MBEDTLS_USE_PSA_CRYPTO)
1326 psa_status_t status;
1327#endif
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001328#if defined(MBEDTLS_SSL_EXPORT_KEYS)
1329 unsigned char eap_tls_keymaterial[16];
1330 unsigned char eap_tls_iv[8];
1331 const char* eap_tls_label = "client EAP encryption";
1332 eap_tls_keys eap_tls_keying;
Ron Eldor65b56ef2019-09-26 16:40:48 +03001333#if defined( MBEDTLS_SSL_DTLS_SRTP )
1334 /*! master keys and master salt for SRTP generated during handshake */
Johan Pascal85269572020-08-25 10:01:54 +02001335 unsigned char dtls_srtp_key_material[MBEDTLS_TLS_SRTP_MAX_KEY_MATERIAL_LENGTH];
Ron Eldor65b56ef2019-09-26 16:40:48 +03001336 const char* dtls_srtp_label = "EXTRACTOR-dtls_srtp";
1337 dtls_srtp_keys dtls_srtp_keying;
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001338 const mbedtls_ssl_srtp_profile default_profiles[] = {
Johan Pascal43f94902020-09-22 12:25:52 +02001339 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80,
1340 MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32,
1341 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80,
Johan Pascal253d0262020-09-22 13:04:45 +02001342 MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32,
1343 MBEDTLS_TLS_SRTP_UNSET
Johan Pascal9bc97ca2020-09-21 23:44:45 +02001344 };
Ron Eldor65b56ef2019-09-26 16:40:48 +03001345#endif /* MBEDTLS_SSL_DTLS_SRTP */
1346#endif /* MBEDTLS_SSL_EXPORT_KEYS */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001347
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001348#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1349 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof(alloc_buf) );
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001350#if defined(MBEDTLS_MEMORY_DEBUG)
1351 size_t current_heap_memory, peak_heap_memory, heap_blocks;
1352#endif /* MBEDTLS_MEMORY_DEBUG */
1353#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Paul Bakker82024bf2013-07-04 11:52:32 +02001354
Gilles Peskine60fe6602021-02-16 18:56:42 +01001355#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskine53dea742021-02-02 22:55:06 +01001356 test_hooks_init( );
Gilles Peskine60fe6602021-02-16 18:56:42 +01001357#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01001358
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001359 /*
Manuel Pégourié-Gonnard3bd2aae2013-09-20 13:10:13 +02001360 * Make sure memory references are valid in case we exit early.
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001361 */
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02001362 mbedtls_net_init( &client_fd );
1363 mbedtls_net_init( &listen_fd );
Manuel Pégourié-Gonnard41d479e2015-04-29 00:48:22 +02001364 mbedtls_ssl_init( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02001365 mbedtls_ssl_config_init( &conf );
Gilles Peskinef1cb75f2021-01-13 18:46:01 +01001366 rng_init( &rng );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001367#if defined(MBEDTLS_X509_CRT_PARSE_C)
1368 mbedtls_x509_crt_init( &cacert );
1369 mbedtls_x509_crt_init( &srvcert );
1370 mbedtls_pk_init( &pkey );
1371 mbedtls_x509_crt_init( &srvcert2 );
1372 mbedtls_pk_init( &pkey2 );
Gilles Peskine4d9ec4d2018-04-26 14:33:43 +02001373#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
1374 memset( &ssl_async_keys, 0, sizeof( ssl_async_keys ) );
1375#endif
Paul Bakkered27a042013-04-18 22:46:23 +02001376#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001377#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
1378 mbedtls_dhm_init( &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001379#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001380#if defined(MBEDTLS_SSL_CACHE_C)
1381 mbedtls_ssl_cache_init( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00001382#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02001383#if defined(MBEDTLS_SSL_SESSION_TICKETS)
1384 mbedtls_ssl_ticket_init( &ticket_ctx );
1385#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001386#if defined(MBEDTLS_SSL_ALPN)
Paul Bakker525f8752014-05-01 10:58:57 +02001387 memset( (void *) alpn_list, 0, sizeof( alpn_list ) );
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001388#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001389#if defined(MBEDTLS_SSL_COOKIE_C)
1390 mbedtls_ssl_cookie_init( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02001391#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001392
Hanno Becker5a9942e2018-11-12 17:47:48 +00001393#if defined(MBEDTLS_USE_PSA_CRYPTO)
1394 status = psa_crypto_init();
1395 if( status != PSA_SUCCESS )
1396 {
1397 mbedtls_fprintf( stderr, "Failed to initialize PSA Crypto implementation: %d\n",
1398 (int) status );
1399 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
1400 goto exit;
1401 }
Gilles Peskine48113eb2021-02-09 10:25:20 +01001402#endif /* MBEDTLS_USE_PSA_CRYPTO */
Gilles Peskine21462112021-01-13 23:53:09 +01001403#if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
1404 mbedtls_test_enable_insecure_external_rng( );
Gilles Peskine94ad8312021-01-25 13:42:28 +01001405#endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
Hanno Becker5a9942e2018-11-12 17:47:48 +00001406
Paul Bakkerc1283d32014-08-18 11:05:51 +02001407#if !defined(_WIN32)
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001408 /* Abort cleanly on SIGTERM and SIGINT */
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001409 signal( SIGTERM, term_handler );
Manuel Pégourié-Gonnard403a86f2014-11-17 12:46:49 +01001410 signal( SIGINT, term_handler );
Paul Bakkerc1283d32014-08-18 11:05:51 +02001411#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02001412
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001413 if( argc == 0 )
1414 {
1415 usage:
1416 if( ret == 0 )
1417 ret = 1;
1418
Gilles Peskineb2971ff2020-04-14 19:41:01 +02001419 mbedtls_printf( USAGE1 );
1420 mbedtls_printf( USAGE2 );
1421 mbedtls_printf( USAGE3 );
1422 mbedtls_printf( USAGE4 );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001423
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001424 list = mbedtls_ssl_list_ciphersuites();
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001425 while( *list )
1426 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001427 mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkered27a042013-04-18 22:46:23 +02001428 list++;
1429 if( !*list )
1430 break;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001431 mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001432 list++;
1433 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001434 mbedtls_printf("\n");
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001435 goto exit;
1436 }
1437
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001438 opt.buffer_size = DFL_IO_BUF_LEN;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001439 opt.server_addr = DFL_SERVER_ADDR;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001440 opt.server_port = DFL_SERVER_PORT;
1441 opt.debug_level = DFL_DEBUG_LEVEL;
Hanno Becker16970d22017-10-10 15:56:37 +01001442 opt.event = DFL_EVENT;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001443 opt.response_size = DFL_RESPONSE_SIZE;
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001444 opt.nbio = DFL_NBIO;
Hanno Beckera7d25422019-04-09 17:28:10 +01001445 opt.cid_enabled = DFL_CID_ENABLED;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001446 opt.cid_enabled_renego = DFL_CID_ENABLED_RENEGO;
Hanno Beckera7d25422019-04-09 17:28:10 +01001447 opt.cid_val = DFL_CID_VALUE;
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001448 opt.cid_val_renego = DFL_CID_VALUE_RENEGO;
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001449 opt.read_timeout = DFL_READ_TIMEOUT;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001450 opt.ca_file = DFL_CA_FILE;
1451 opt.ca_path = DFL_CA_PATH;
1452 opt.crt_file = DFL_CRT_FILE;
1453 opt.key_file = DFL_KEY_FILE;
Hanno Beckere58a6302018-11-07 16:20:16 +00001454 opt.key_pwd = DFL_KEY_PWD;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001455 opt.crt_file2 = DFL_CRT_FILE2;
1456 opt.key_file2 = DFL_KEY_FILE2;
Hanno Beckere58a6302018-11-07 16:20:16 +00001457 opt.key_pwd2 = DFL_KEY_PWD2;
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001458 opt.async_operations = DFL_ASYNC_OPERATIONS;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001459 opt.async_private_delay1 = DFL_ASYNC_PRIVATE_DELAY1;
1460 opt.async_private_delay2 = DFL_ASYNC_PRIVATE_DELAY2;
1461 opt.async_private_error = DFL_ASYNC_PRIVATE_ERROR;
Paul Bakkerfbb17802013-04-17 19:10:21 +02001462 opt.psk = DFL_PSK;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001463#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001464 opt.psk_opaque = DFL_PSK_OPAQUE;
1465 opt.psk_list_opaque = DFL_PSK_LIST_OPAQUE;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001466#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001467#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1468 opt.ca_callback = DFL_CA_CALLBACK;
1469#endif
Paul Bakkerfbb17802013-04-17 19:10:21 +02001470 opt.psk_identity = DFL_PSK_IDENTITY;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001471 opt.psk_list = DFL_PSK_LIST;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001472 opt.ecjpake_pw = DFL_ECJPAKE_PW;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001473 opt.force_ciphersuite[0]= DFL_FORCE_CIPHER;
1474 opt.renegotiation = DFL_RENEGOTIATION;
1475 opt.allow_legacy = DFL_ALLOW_LEGACY;
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001476 opt.renegotiate = DFL_RENEGOTIATE;
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001477 opt.renego_delay = DFL_RENEGO_DELAY;
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001478 opt.renego_period = DFL_RENEGO_PERIOD;
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001479 opt.exchanges = DFL_EXCHANGES;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001480 opt.min_version = DFL_MIN_VERSION;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001481 opt.max_version = DFL_MAX_VERSION;
Gilles Peskinebc70a182017-05-09 15:59:24 +02001482 opt.allow_sha1 = DFL_SHA1;
Paul Bakker91ebfb52012-11-23 14:04:08 +01001483 opt.auth_mode = DFL_AUTH_MODE;
Janos Follath4817e272017-04-10 13:44:33 +01001484 opt.cert_req_ca_list = DFL_CERT_REQ_CA_LIST;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001485 opt.mfl_code = DFL_MFL_CODE;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001486 opt.trunc_hmac = DFL_TRUNC_HMAC;
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001487 opt.tickets = DFL_TICKETS;
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001488 opt.ticket_timeout = DFL_TICKET_TIMEOUT;
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001489 opt.cache_max = DFL_CACHE_MAX;
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001490 opt.cache_timeout = DFL_CACHE_TIMEOUT;
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001491 opt.sni = DFL_SNI;
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001492 opt.alpn_string = DFL_ALPN_STRING;
Hanno Beckere6706e62017-05-15 16:05:15 +01001493 opt.curves = DFL_CURVES;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001494 opt.dhm_file = DFL_DHM_FILE;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001495 opt.transport = DFL_TRANSPORT;
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001496 opt.cookies = DFL_COOKIES;
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001497 opt.anti_replay = DFL_ANTI_REPLAY;
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001498 opt.hs_to_min = DFL_HS_TO_MIN;
1499 opt.hs_to_max = DFL_HS_TO_MAX;
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001500 opt.dtls_mtu = DFL_DTLS_MTU;
Hanno Beckere7675d02018-08-14 13:28:56 +01001501 opt.dgram_packing = DFL_DGRAM_PACKING;
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001502 opt.badmac_limit = DFL_BADMAC_LIMIT;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001503 opt.extended_ms = DFL_EXTENDED_MS;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001504 opt.etm = DFL_ETM;
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001505 opt.serialize = DFL_SERIALIZE;
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001506 opt.context_file = DFL_CONTEXT_FILE;
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001507 opt.eap_tls = DFL_EAP_TLS;
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001508 opt.reproducible = DFL_REPRODUCIBLE;
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001509 opt.nss_keylog = DFL_NSS_KEYLOG;
1510 opt.nss_keylog_file = DFL_NSS_KEYLOG_FILE;
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001511 opt.query_config_mode = DFL_QUERY_CONFIG_MODE;
Ron Eldor6ea64512018-07-02 10:08:07 +03001512 opt.use_srtp = DFL_USE_SRTP;
1513 opt.force_srtp_profile = DFL_SRTP_FORCE_PROFILE;
Ron Eldor12c6ead2018-07-03 15:08:32 +03001514 opt.support_mki = DFL_SRTP_SUPPORT_MKI;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001515
1516 for( i = 1; i < argc; i++ )
1517 {
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001518 p = argv[i];
1519 if( ( q = strchr( p, '=' ) ) == NULL )
1520 goto usage;
1521 *q++ = '\0';
1522
1523 if( strcmp( p, "server_port" ) == 0 )
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02001524 opt.server_port = q;
Manuel Pégourié-Gonnard18d31f82013-12-13 16:21:41 +01001525 else if( strcmp( p, "server_addr" ) == 0 )
1526 opt.server_addr = q;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001527 else if( strcmp( p, "dtls" ) == 0 )
1528 {
1529 int t = atoi( q );
1530 if( t == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001531 opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001532 else if( t == 1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001533 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnarde29fd4b2014-02-06 14:02:55 +01001534 else
1535 goto usage;
1536 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001537 else if( strcmp( p, "debug_level" ) == 0 )
1538 {
1539 opt.debug_level = atoi( q );
1540 if( opt.debug_level < 0 || opt.debug_level > 65535 )
1541 goto usage;
1542 }
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01001543 else if( strcmp( p, "nbio" ) == 0 )
1544 {
1545 opt.nbio = atoi( q );
1546 if( opt.nbio < 0 || opt.nbio > 2 )
1547 goto usage;
1548 }
Hanno Becker16970d22017-10-10 15:56:37 +01001549 else if( strcmp( p, "event" ) == 0 )
1550 {
1551 opt.event = atoi( q );
1552 if( opt.event < 0 || opt.event > 2 )
1553 goto usage;
1554 }
Manuel Pégourié-Gonnard6b651412014-10-01 18:29:03 +02001555 else if( strcmp( p, "read_timeout" ) == 0 )
1556 opt.read_timeout = atoi( q );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001557 else if( strcmp( p, "buffer_size" ) == 0 )
1558 {
1559 opt.buffer_size = atoi( q );
David Horstmannfba138a2021-05-11 15:23:56 +01001560 if( opt.buffer_size < 1 )
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001561 goto usage;
1562 }
1563 else if( strcmp( p, "response_size" ) == 0 )
1564 {
1565 opt.response_size = atoi( q );
David Horstmann95d516f2021-05-04 18:36:56 +01001566 if( opt.response_size < 0 || opt.response_size > MBEDTLS_SSL_OUT_CONTENT_LEN )
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001567 goto usage;
1568 if( opt.buffer_size < opt.response_size )
1569 opt.buffer_size = opt.response_size;
1570 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001571 else if( strcmp( p, "ca_file" ) == 0 )
1572 opt.ca_file = q;
1573 else if( strcmp( p, "ca_path" ) == 0 )
1574 opt.ca_path = q;
1575 else if( strcmp( p, "crt_file" ) == 0 )
1576 opt.crt_file = q;
1577 else if( strcmp( p, "key_file" ) == 0 )
1578 opt.key_file = q;
Hanno Beckere58a6302018-11-07 16:20:16 +00001579 else if( strcmp( p, "key_pwd" ) == 0 )
1580 opt.key_pwd = q;
Manuel Pégourié-Gonnard3ebb2cd2013-09-23 17:00:18 +02001581 else if( strcmp( p, "crt_file2" ) == 0 )
1582 opt.crt_file2 = q;
1583 else if( strcmp( p, "key_file2" ) == 0 )
1584 opt.key_file2 = q;
Hanno Beckere58a6302018-11-07 16:20:16 +00001585 else if( strcmp( p, "key_pwd2" ) == 0 )
1586 opt.key_pwd2 = q;
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02001587 else if( strcmp( p, "dhm_file" ) == 0 )
1588 opt.dhm_file = q;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001589#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01001590 else if( strcmp( p, "async_operations" ) == 0 )
1591 opt.async_operations = q;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001592 else if( strcmp( p, "async_private_delay1" ) == 0 )
1593 opt.async_private_delay1 = atoi( q );
1594 else if( strcmp( p, "async_private_delay2" ) == 0 )
1595 opt.async_private_delay2 = atoi( q );
1596 else if( strcmp( p, "async_private_error" ) == 0 )
1597 {
1598 int n = atoi( q );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01001599 if( n < -SSL_ASYNC_INJECT_ERROR_MAX ||
1600 n > SSL_ASYNC_INJECT_ERROR_MAX )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01001601 {
1602 ret = 2;
1603 goto usage;
1604 }
1605 opt.async_private_error = n;
1606 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02001607#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Hanno Beckera0e20d02019-05-15 14:03:01 +01001608#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +01001609 else if( strcmp( p, "cid" ) == 0 )
1610 {
1611 opt.cid_enabled = atoi( q );
1612 if( opt.cid_enabled != 0 && opt.cid_enabled != 1 )
1613 goto usage;
1614 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001615 else if( strcmp( p, "cid_renego" ) == 0 )
1616 {
1617 opt.cid_enabled_renego = atoi( q );
1618 if( opt.cid_enabled_renego != 0 && opt.cid_enabled_renego != 1 )
1619 goto usage;
1620 }
Hanno Beckera7d25422019-04-09 17:28:10 +01001621 else if( strcmp( p, "cid_val" ) == 0 )
1622 {
1623 opt.cid_val = q;
1624 }
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001625 else if( strcmp( p, "cid_val_renego" ) == 0 )
1626 {
1627 opt.cid_val_renego = q;
1628 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01001629#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Paul Bakkerfbb17802013-04-17 19:10:21 +02001630 else if( strcmp( p, "psk" ) == 0 )
1631 opt.psk = q;
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001632#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001633 else if( strcmp( p, "psk_opaque" ) == 0 )
1634 opt.psk_opaque = atoi( q );
1635 else if( strcmp( p, "psk_list_opaque" ) == 0 )
1636 opt.psk_list_opaque = atoi( q );
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001637#endif
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02001638#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
1639 else if( strcmp( p, "ca_callback" ) == 0)
1640 opt.ca_callback = atoi( q );
1641#endif
Paul Bakkerfbb17802013-04-17 19:10:21 +02001642 else if( strcmp( p, "psk_identity" ) == 0 )
1643 opt.psk_identity = q;
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02001644 else if( strcmp( p, "psk_list" ) == 0 )
1645 opt.psk_list = q;
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02001646 else if( strcmp( p, "ecjpake_pw" ) == 0 )
1647 opt.ecjpake_pw = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001648 else if( strcmp( p, "force_ciphersuite" ) == 0 )
1649 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001650 opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001651
Manuel Pégourié-Gonnard8de259b2014-06-11 14:19:06 +02001652 if( opt.force_ciphersuite[0] == 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001653 {
1654 ret = 2;
1655 goto usage;
1656 }
1657 opt.force_ciphersuite[1] = 0;
1658 }
Hanno Beckere6706e62017-05-15 16:05:15 +01001659 else if( strcmp( p, "curves" ) == 0 )
1660 opt.curves = q;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001661 else if( strcmp( p, "renegotiation" ) == 0 )
1662 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001663 opt.renegotiation = (atoi( q )) ?
1664 MBEDTLS_SSL_RENEGOTIATION_ENABLED :
1665 MBEDTLS_SSL_RENEGOTIATION_DISABLED;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001666 }
1667 else if( strcmp( p, "allow_legacy" ) == 0 )
1668 {
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001669 switch( atoi( q ) )
1670 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001671 case -1:
1672 opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE;
1673 break;
1674 case 0:
1675 opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION;
1676 break;
1677 case 1:
1678 opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION;
1679 break;
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01001680 default: goto usage;
1681 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001682 }
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001683 else if( strcmp( p, "renegotiate" ) == 0 )
1684 {
1685 opt.renegotiate = atoi( q );
1686 if( opt.renegotiate < 0 || opt.renegotiate > 1 )
1687 goto usage;
1688 }
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02001689 else if( strcmp( p, "renego_delay" ) == 0 )
1690 {
1691 opt.renego_delay = atoi( q );
1692 }
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001693 else if( strcmp( p, "renego_period" ) == 0 )
1694 {
Andres AG0b736db2017-02-08 14:05:57 +00001695#if defined(_MSC_VER)
1696 opt.renego_period = _strtoui64( q, NULL, 10 );
1697#else
1698 if( sscanf( q, "%" SCNu64, &opt.renego_period ) != 1 )
1699 goto usage;
1700#endif /* _MSC_VER */
1701 if( opt.renego_period < 2 )
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01001702 goto usage;
1703 }
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001704 else if( strcmp( p, "exchanges" ) == 0 )
1705 {
1706 opt.exchanges = atoi( q );
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02001707 if( opt.exchanges < 0 )
Manuel Pégourié-Gonnard67686c42014-08-15 11:17:27 +02001708 goto usage;
1709 }
Paul Bakker1d29fb52012-09-28 13:28:45 +00001710 else if( strcmp( p, "min_version" ) == 0 )
1711 {
TRodziewicz0f82ec62021-05-12 17:49:18 +02001712 if( strcmp( q, "tls1_2" ) == 0 ||
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001713 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001714 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakker1d29fb52012-09-28 13:28:45 +00001715 else
1716 goto usage;
1717 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001718 else if( strcmp( p, "max_version" ) == 0 )
1719 {
TRodziewicz0f82ec62021-05-12 17:49:18 +02001720 if( strcmp( q, "tls1_2" ) == 0 ||
Manuel Pégourié-Gonnard83218f12014-02-12 11:11:12 +01001721 strcmp( q, "dtls1_2" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001722 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001723 else
1724 goto usage;
1725 }
Gilles Peskinebc70a182017-05-09 15:59:24 +02001726 else if( strcmp( p, "allow_sha1" ) == 0 )
1727 {
1728 switch( atoi( q ) )
1729 {
1730 case 0: opt.allow_sha1 = 0; break;
1731 case 1: opt.allow_sha1 = 1; break;
1732 default: goto usage;
1733 }
1734 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001735 else if( strcmp( p, "force_version" ) == 0 )
1736 {
TRodziewicz0f82ec62021-05-12 17:49:18 +02001737 if( strcmp( q, "tls1_2" ) == 0 )
Paul Bakkerc1516be2013-06-29 16:01:32 +02001738 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001739 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1740 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
Paul Bakkerc1516be2013-06-29 16:01:32 +02001741 }
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001742 else if( strcmp( q, "dtls1_2" ) == 0 )
1743 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001744 opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3;
1745 opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3;
1746 opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM;
Manuel Pégourié-Gonnardfe3f73b2014-03-26 12:16:44 +01001747 }
Paul Bakkerc1516be2013-06-29 16:01:32 +02001748 else
1749 goto usage;
1750 }
Paul Bakker91ebfb52012-11-23 14:04:08 +01001751 else if( strcmp( p, "auth_mode" ) == 0 )
1752 {
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02001753 if( ( opt.auth_mode = get_auth_mode( q ) ) < 0 )
Paul Bakker91ebfb52012-11-23 14:04:08 +01001754 goto usage;
1755 }
Janos Follath4817e272017-04-10 13:44:33 +01001756 else if( strcmp( p, "cert_req_ca_list" ) == 0 )
1757 {
1758 opt.cert_req_ca_list = atoi( q );
1759 if( opt.cert_req_ca_list < 0 || opt.cert_req_ca_list > 1 )
1760 goto usage;
1761 }
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001762 else if( strcmp( p, "max_frag_len" ) == 0 )
1763 {
1764 if( strcmp( q, "512" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001765 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001766 else if( strcmp( q, "1024" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001767 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001768 else if( strcmp( q, "2048" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001769 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001770 else if( strcmp( q, "4096" ) == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001771 opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096;
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02001772 else
1773 goto usage;
1774 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02001775 else if( strcmp( p, "alpn" ) == 0 )
1776 {
1777 opt.alpn_string = q;
1778 }
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001779 else if( strcmp( p, "trunc_hmac" ) == 0 )
1780 {
1781 switch( atoi( q ) )
1782 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001783 case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break;
1784 case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break;
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001785 default: goto usage;
1786 }
1787 }
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001788 else if( strcmp( p, "extended_ms" ) == 0 )
1789 {
1790 switch( atoi( q ) )
1791 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001792 case 0:
1793 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED;
1794 break;
1795 case 1:
1796 opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED;
1797 break;
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001798 default: goto usage;
1799 }
1800 }
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001801 else if( strcmp( p, "etm" ) == 0 )
1802 {
1803 switch( atoi( q ) )
1804 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001805 case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break;
1806 case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break;
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001807 default: goto usage;
1808 }
1809 }
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02001810 else if( strcmp( p, "tickets" ) == 0 )
1811 {
1812 opt.tickets = atoi( q );
1813 if( opt.tickets < 0 || opt.tickets > 1 )
1814 goto usage;
1815 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001816 else if( strcmp( p, "ticket_timeout" ) == 0 )
1817 {
1818 opt.ticket_timeout = atoi( q );
1819 if( opt.ticket_timeout < 0 )
1820 goto usage;
1821 }
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01001822 else if( strcmp( p, "cache_max" ) == 0 )
1823 {
1824 opt.cache_max = atoi( q );
1825 if( opt.cache_max < 0 )
1826 goto usage;
1827 }
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001828 else if( strcmp( p, "cache_timeout" ) == 0 )
1829 {
1830 opt.cache_timeout = atoi( q );
1831 if( opt.cache_timeout < 0 )
1832 goto usage;
1833 }
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02001834 else if( strcmp( p, "cookies" ) == 0 )
1835 {
1836 opt.cookies = atoi( q );
1837 if( opt.cookies < -1 || opt.cookies > 1)
1838 goto usage;
1839 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02001840 else if( strcmp( p, "anti_replay" ) == 0 )
1841 {
1842 opt.anti_replay = atoi( q );
1843 if( opt.anti_replay < 0 || opt.anti_replay > 1)
1844 goto usage;
1845 }
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02001846 else if( strcmp( p, "badmac_limit" ) == 0 )
1847 {
1848 opt.badmac_limit = atoi( q );
1849 if( opt.badmac_limit < 0 )
1850 goto usage;
1851 }
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02001852 else if( strcmp( p, "hs_timeout" ) == 0 )
1853 {
1854 if( ( p = strchr( q, '-' ) ) == NULL )
1855 goto usage;
1856 *p++ = '\0';
1857 opt.hs_to_min = atoi( q );
1858 opt.hs_to_max = atoi( p );
1859 if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min )
1860 goto usage;
1861 }
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02001862 else if( strcmp( p, "mtu" ) == 0 )
1863 {
1864 opt.dtls_mtu = atoi( q );
1865 if( opt.dtls_mtu < 0 )
1866 goto usage;
1867 }
Hanno Beckere7675d02018-08-14 13:28:56 +01001868 else if( strcmp( p, "dgram_packing" ) == 0 )
1869 {
1870 opt.dgram_packing = atoi( q );
1871 if( opt.dgram_packing != 0 &&
1872 opt.dgram_packing != 1 )
1873 {
1874 goto usage;
1875 }
1876 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01001877 else if( strcmp( p, "sni" ) == 0 )
1878 {
1879 opt.sni = q;
1880 }
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001881 else if( strcmp( p, "query_config" ) == 0 )
1882 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02001883 opt.query_config_mode = 1;
1884 query_config_ret = query_config( q );
gabor-mezei-arm78595852020-04-28 10:40:30 +02001885 goto exit;
Andres Amaya Garciabc818842018-10-16 21:08:38 +01001886 }
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001887 else if( strcmp( p, "serialize") == 0 )
1888 {
1889 opt.serialize = atoi( q );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03001890 if( opt.serialize < 0 || opt.serialize > 2)
Jarno Lamsa9831c8a2019-05-29 13:33:32 +03001891 goto usage;
1892 }
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001893 else if( strcmp( p, "context_file") == 0 )
1894 {
1895 opt.context_file = q;
1896 }
Ron Eldorb7fd64c2019-05-12 11:03:32 +03001897 else if( strcmp( p, "eap_tls" ) == 0 )
1898 {
1899 opt.eap_tls = atoi( q );
1900 if( opt.eap_tls < 0 || opt.eap_tls > 1 )
1901 goto usage;
1902 }
Philippe Antoineaa4d1522019-06-06 21:24:31 +02001903 else if( strcmp( p, "reproducible" ) == 0 )
1904 {
1905 opt.reproducible = 1;
1906 }
Hanno Becker48f3a3d2019-08-29 06:31:22 +01001907 else if( strcmp( p, "nss_keylog" ) == 0 )
1908 {
1909 opt.nss_keylog = atoi( q );
1910 if( opt.nss_keylog < 0 || opt.nss_keylog > 1 )
1911 goto usage;
1912 }
1913 else if( strcmp( p, "nss_keylog_file" ) == 0 )
1914 {
1915 opt.nss_keylog_file = q;
1916 }
Ron Eldor6ea64512018-07-02 10:08:07 +03001917 else if( strcmp( p, "use_srtp" ) == 0 )
1918 {
1919 opt.use_srtp = atoi ( q );
1920 }
1921 else if( strcmp( p, "srtp_force_profile" ) == 0 )
1922 {
1923 opt.force_srtp_profile = atoi( q );
1924 }
Ron Eldor12c6ead2018-07-03 15:08:32 +03001925 else if( strcmp( p, "support_mki" ) == 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03001926 {
Ron Eldor12c6ead2018-07-03 15:08:32 +03001927 opt.support_mki = atoi( q );
Ron Eldor6ea64512018-07-02 10:08:07 +03001928 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00001929 else
1930 goto usage;
1931 }
1932
Hanno Beckerbc5308c2019-09-09 11:38:51 +01001933 if( opt.nss_keylog != 0 && opt.eap_tls != 0 )
1934 {
1935 mbedtls_printf( "Error: eap_tls and nss_keylog options cannot be used together.\n" );
1936 goto usage;
1937 }
1938
Hanno Becker16970d22017-10-10 15:56:37 +01001939 /* Event-driven IO is incompatible with the above custom
1940 * receive and send functions, as the polling builds on
1941 * refers to the underlying net_context. */
1942 if( opt.event == 1 && opt.nbio != 1 )
1943 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01001944 mbedtls_printf( "Warning: event-driven IO mandates nbio=1 - overwrite\n" );
Hanno Becker16970d22017-10-10 15:56:37 +01001945 opt.nbio = 1;
1946 }
1947
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001948#if defined(MBEDTLS_DEBUG_C)
1949 mbedtls_debug_set_threshold( opt.debug_level );
Paul Bakkerc73079a2014-04-25 16:34:30 +02001950#endif
Andrzej Kurekda4029d2018-06-20 07:07:55 -04001951 buf = mbedtls_calloc( 1, opt.buffer_size + 1 );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001952 if( buf == NULL )
1953 {
Andrzej Kurek755890f2018-06-20 08:17:04 -04001954 mbedtls_printf( "Could not allocate %u bytes\n", opt.buffer_size );
Andrzej Kurek30e731d2017-10-12 13:50:29 +02001955 ret = 3;
1956 goto exit;
1957 }
Paul Bakkerc73079a2014-04-25 16:34:30 +02001958
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001959#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00001960 if( opt.psk_opaque != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001961 {
1962 if( strlen( opt.psk ) == 0 )
1963 {
Hanno Becker1d911cd2018-11-15 13:06:09 +00001964 mbedtls_printf( "psk_opaque set but no psk to be imported specified.\n" );
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001965 ret = 2;
1966 goto usage;
1967 }
1968
1969 if( opt.force_ciphersuite[0] <= 0 )
1970 {
1971 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1972 ret = 2;
1973 goto usage;
1974 }
1975 }
1976
Hanno Becker1d911cd2018-11-15 13:06:09 +00001977 if( opt.psk_list_opaque != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01001978 {
1979 if( opt.psk_list == NULL )
1980 {
1981 mbedtls_printf( "psk_slot set but no psk to be imported specified.\n" );
1982 ret = 2;
1983 goto usage;
1984 }
1985
1986 if( opt.force_ciphersuite[0] <= 0 )
1987 {
1988 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
1989 ret = 2;
1990 goto usage;
1991 }
1992 }
1993#endif /* MBEDTLS_USE_PSA_CRYPTO */
1994
Paul Bakkerc1516be2013-06-29 16:01:32 +02001995 if( opt.force_ciphersuite[0] > 0 )
1996 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001997 const mbedtls_ssl_ciphersuite_t *ciphersuite_info;
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01001998 ciphersuite_info =
1999 mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] );
Paul Bakkerc1516be2013-06-29 16:01:32 +02002000
Paul Bakker5b55b792013-07-19 13:43:43 +02002001 if( opt.max_version != -1 &&
2002 ciphersuite_info->min_minor_ver > opt.max_version )
2003 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002004 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakker5b55b792013-07-19 13:43:43 +02002005 ret = 2;
2006 goto usage;
2007 }
2008 if( opt.min_version != -1 &&
Paul Bakkerc1516be2013-06-29 16:01:32 +02002009 ciphersuite_info->max_minor_ver < opt.min_version )
2010 {
Hanno Becker4cb1f4d2017-10-10 15:59:57 +01002011 mbedtls_printf( "forced ciphersuite not allowed with this protocol version\n" );
Paul Bakkerc1516be2013-06-29 16:01:32 +02002012 ret = 2;
2013 goto usage;
2014 }
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002015
2016 /* If we select a version that's not supported by
2017 * this suite, then there will be no common ciphersuite... */
2018 if( opt.max_version == -1 ||
2019 opt.max_version > ciphersuite_info->max_minor_ver )
2020 {
Paul Bakker5b55b792013-07-19 13:43:43 +02002021 opt.max_version = ciphersuite_info->max_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002022 }
Paul Bakker5b55b792013-07-19 13:43:43 +02002023 if( opt.min_version < ciphersuite_info->min_minor_ver )
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002024 {
Paul Bakker5b55b792013-07-19 13:43:43 +02002025 opt.min_version = ciphersuite_info->min_minor_ver;
Manuel Pégourié-Gonnard798f15a2014-03-26 18:12:04 +01002026 }
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002027
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002028#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00002029 if( opt.psk_opaque != 0 || opt.psk_list_opaque != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002030 {
2031 /* Ensure that the chosen ciphersuite is PSK-only; we must know
2032 * the ciphersuite in advance to set the correct policy for the
2033 * PSK key slot. This limitation might go away in the future. */
2034 if( ciphersuite_info->key_exchange != MBEDTLS_KEY_EXCHANGE_PSK ||
2035 opt.min_version != MBEDTLS_SSL_MINOR_VERSION_3 )
2036 {
2037 mbedtls_printf( "opaque PSKs are only supported in conjunction with forcing TLS 1.2 and a PSK-only ciphersuite through the 'force_ciphersuite' option.\n" );
2038 ret = 2;
2039 goto usage;
2040 }
2041
2042 /* Determine KDF algorithm the opaque PSK will be used in. */
Mateusz Starzyk3352a532021-04-06 14:28:22 +02002043#if defined(MBEDTLS_SHA384_C)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002044 if( ciphersuite_info->mac == MBEDTLS_MD_SHA384 )
2045 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_384);
2046 else
Mateusz Starzyk3352a532021-04-06 14:28:22 +02002047#endif /* MBEDTLS_SHA384_C */
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002048 alg = PSA_ALG_TLS12_PSK_TO_MS(PSA_ALG_SHA_256);
2049 }
2050#endif /* MBEDTLS_USE_PSA_CRYPTO */
Paul Bakkerc1516be2013-06-29 16:01:32 +02002051 }
2052
Hanno Beckera0e20d02019-05-15 14:03:01 +01002053#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Ronald Cron7d866162020-06-18 10:36:26 +02002054 if( mbedtls_test_unhexify( cid, sizeof( cid ),
2055 opt.cid_val, &cid_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002056 {
2057 mbedtls_printf( "CID not valid hex\n" );
2058 goto exit;
2059 }
2060
2061 /* Keep CID settings for renegotiation unless
2062 * specified otherwise. */
2063 if( opt.cid_enabled_renego == DFL_CID_ENABLED_RENEGO )
2064 opt.cid_enabled_renego = opt.cid_enabled;
2065 if( opt.cid_val_renego == DFL_CID_VALUE_RENEGO )
2066 opt.cid_val_renego = opt.cid_val;
2067
Ronald Cron7d866162020-06-18 10:36:26 +02002068 if( mbedtls_test_unhexify( cid_renego, sizeof( cid_renego ),
2069 opt.cid_val_renego, &cid_renego_len ) != 0 )
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002070 {
2071 mbedtls_printf( "CID not valid hex\n" );
2072 goto exit;
2073 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002074#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01002075
Gilles Peskineeccd8882020-03-10 12:19:08 +01002076#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002077 /*
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002078 * Unhexify the pre-shared key and parse the list if any given
Paul Bakkerfbb17802013-04-17 19:10:21 +02002079 */
Ronald Cron7d866162020-06-18 10:36:26 +02002080 if( mbedtls_test_unhexify( psk, sizeof( psk ),
2081 opt.psk, &psk_len ) != 0 )
Paul Bakkerfbb17802013-04-17 19:10:21 +02002082 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002083 mbedtls_printf( "pre-shared key not valid hex\n" );
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002084 goto exit;
2085 }
2086
2087 if( opt.psk_list != NULL )
2088 {
2089 if( ( psk_info = psk_parse( opt.psk_list ) ) == NULL )
Paul Bakkerfbb17802013-04-17 19:10:21 +02002090 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002091 mbedtls_printf( "psk_list invalid" );
Paul Bakkerfbb17802013-04-17 19:10:21 +02002092 goto exit;
2093 }
Paul Bakkerfbb17802013-04-17 19:10:21 +02002094 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01002095#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED */
Paul Bakkerfbb17802013-04-17 19:10:21 +02002096
Hanno Beckere6706e62017-05-15 16:05:15 +01002097#if defined(MBEDTLS_ECP_C)
2098 if( opt.curves != NULL )
2099 {
2100 p = (char *) opt.curves;
2101 i = 0;
2102
2103 if( strcmp( p, "none" ) == 0 )
2104 {
2105 curve_list[0] = MBEDTLS_ECP_DP_NONE;
2106 }
2107 else if( strcmp( p, "default" ) != 0 )
2108 {
2109 /* Leave room for a final NULL in curve list */
Hanno Becker8651a432017-06-09 16:13:22 +01002110 while( i < CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01002111 {
2112 q = p;
2113
2114 /* Terminate the current string */
2115 while( *p != ',' && *p != '\0' )
2116 p++;
2117 if( *p == ',' )
2118 *p++ = '\0';
2119
2120 if( ( curve_cur = mbedtls_ecp_curve_info_from_name( q ) ) != NULL )
2121 {
2122 curve_list[i++] = curve_cur->grp_id;
2123 }
2124 else
2125 {
2126 mbedtls_printf( "unknown curve %s\n", q );
2127 mbedtls_printf( "supported curves: " );
2128 for( curve_cur = mbedtls_ecp_curve_list();
2129 curve_cur->grp_id != MBEDTLS_ECP_DP_NONE;
2130 curve_cur++ )
2131 {
2132 mbedtls_printf( "%s ", curve_cur->name );
2133 }
2134 mbedtls_printf( "\n" );
2135 goto exit;
2136 }
2137 }
2138
2139 mbedtls_printf("Number of curves: %d\n", i );
2140
Hanno Becker8651a432017-06-09 16:13:22 +01002141 if( i == CURVE_LIST_SIZE - 1 && *p != '\0' )
Hanno Beckere6706e62017-05-15 16:05:15 +01002142 {
Hanno Becker8651a432017-06-09 16:13:22 +01002143 mbedtls_printf( "curves list too long, maximum %d",
2144 CURVE_LIST_SIZE - 1 );
Hanno Beckere6706e62017-05-15 16:05:15 +01002145 goto exit;
2146 }
2147
2148 curve_list[i] = MBEDTLS_ECP_DP_NONE;
2149 }
2150 }
2151#endif /* MBEDTLS_ECP_C */
2152
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002153#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002154 if( opt.alpn_string != NULL )
2155 {
2156 p = (char *) opt.alpn_string;
2157 i = 0;
2158
2159 /* Leave room for a final NULL in alpn_list */
Hanno Becker8651a432017-06-09 16:13:22 +01002160 while( i < ALPN_LIST_SIZE - 1 && *p != '\0' )
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002161 {
2162 alpn_list[i++] = p;
2163
2164 /* Terminate the current string and move on to next one */
2165 while( *p != ',' && *p != '\0' )
2166 p++;
2167 if( *p == ',' )
2168 *p++ = '\0';
2169 }
2170 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002171#endif /* MBEDTLS_SSL_ALPN */
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002172
Paul Bakkerfbb17802013-04-17 19:10:21 +02002173 /*
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002174 * 0. Initialize the RNG and the session data
2175 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002176 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002177 fflush( stdout );
2178
Gilles Peskine4a23c982021-02-03 13:54:41 +01002179 ret = rng_seed( &rng, opt.reproducible, pers );
2180 if( ret != 0 )
Gilles Peskinedaa94c42021-01-13 18:38:27 +01002181 goto exit;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002182 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002183
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002184#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002185 /*
2186 * 1.1. Load the trusted CA
2187 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002188 mbedtls_printf( " . Loading the CA root certificate ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002189 fflush( stdout );
2190
Hanno Becker8174bdf2019-03-05 16:22:07 +00002191 if( strcmp( opt.ca_path, "none" ) == 0 ||
2192 strcmp( opt.ca_file, "none" ) == 0 )
2193 {
2194 ret = 0;
2195 }
2196 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002197#if defined(MBEDTLS_FS_IO)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002198 if( strlen( opt.ca_path ) )
Hanno Becker8174bdf2019-03-05 16:22:07 +00002199 ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002200 else if( strlen( opt.ca_file ) )
Hanno Becker8174bdf2019-03-05 16:22:07 +00002201 ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file );
Paul Bakkerddf26b42013-09-18 13:46:23 +02002202 else
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002203#endif
Hanno Becker09b8cae2019-02-01 08:13:19 +00002204 {
2205#if defined(MBEDTLS_PEM_PARSE_C)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002206 for( i = 0; mbedtls_test_cas[i] != NULL; i++ )
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002207 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002208 ret = mbedtls_x509_crt_parse( &cacert,
2209 (const unsigned char *) mbedtls_test_cas[i],
2210 mbedtls_test_cas_len[i] );
Manuel Pégourié-Gonnard2f165062015-03-27 10:20:26 +01002211 if( ret != 0 )
2212 break;
2213 }
Hanno Becker09b8cae2019-02-01 08:13:19 +00002214 if( ret == 0 )
2215#endif /* MBEDTLS_PEM_PARSE_C */
2216 for( i = 0; mbedtls_test_cas_der[i] != NULL; i++ )
2217 {
2218 ret = mbedtls_x509_crt_parse_der( &cacert,
2219 (const unsigned char *) mbedtls_test_cas_der[i],
2220 mbedtls_test_cas_der_len[i] );
2221 if( ret != 0 )
2222 break;
2223 }
2224 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002225 if( ret < 0 )
2226 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002227 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", (unsigned int) -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002228 goto exit;
2229 }
2230
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002231 mbedtls_printf( " ok (%d skipped)\n", ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002232
2233 /*
2234 * 1.2. Load own certificate and private key
2235 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002236 mbedtls_printf( " . Loading the server cert. and key..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002237 fflush( stdout );
2238
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002239#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002240 if( strlen( opt.crt_file ) && strcmp( opt.crt_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002241 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002242 key_cert_init++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002243 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert, opt.crt_file ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002244 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002245 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002246 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002247 goto exit;
2248 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002249 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002250 if( strlen( opt.key_file ) && strcmp( opt.key_file, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002251 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002252 key_cert_init++;
Hanno Beckere58a6302018-11-07 16:20:16 +00002253 if( ( ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02002254 opt.key_pwd, rng_get, &rng ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002255 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002256 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002257 goto exit;
2258 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002259 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002260 if( key_cert_init == 1 )
2261 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002262 mbedtls_printf( " failed\n ! crt_file without key_file or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002263 goto exit;
2264 }
2265
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002266 if( strlen( opt.crt_file2 ) && strcmp( opt.crt_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002267 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002268 key_cert_init2++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002269 if( ( ret = mbedtls_x509_crt_parse_file( &srvcert2, opt.crt_file2 ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002270 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002271 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse_file(2) returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002272 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002273 goto exit;
2274 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002275 }
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002276 if( strlen( opt.key_file2 ) && strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002277 {
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002278 key_cert_init2++;
Hanno Beckere58a6302018-11-07 16:20:16 +00002279 if( ( ret = mbedtls_pk_parse_keyfile( &pkey2, opt.key_file2,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02002280 opt.key_pwd2, rng_get, &rng ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002281 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002282 mbedtls_printf( " failed\n ! mbedtls_pk_parse_keyfile(2) returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002283 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002284 goto exit;
2285 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002286 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002287 if( key_cert_init2 == 1 )
2288 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002289 mbedtls_printf( " failed\n ! crt_file2 without key_file2 or vice-versa\n\n" );
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002290 goto exit;
2291 }
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002292#endif
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002293 if( key_cert_init == 0 &&
2294 strcmp( opt.crt_file, "none" ) != 0 &&
2295 strcmp( opt.key_file, "none" ) != 0 &&
2296 key_cert_init2 == 0 &&
2297 strcmp( opt.crt_file2, "none" ) != 0 &&
2298 strcmp( opt.key_file2, "none" ) != 0 )
Manuel Pégourié-Gonnardb095a7b2013-09-24 21:14:51 +02002299 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002300#if defined(MBEDTLS_RSA_C)
2301 if( ( ret = mbedtls_x509_crt_parse( &srvcert,
2302 (const unsigned char *) mbedtls_test_srv_crt_rsa,
2303 mbedtls_test_srv_crt_rsa_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002304 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002305 mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002306 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002307 goto exit;
2308 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002309 if( ( ret = mbedtls_pk_parse_key( &pkey,
2310 (const unsigned char *) mbedtls_test_srv_key_rsa,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02002311 mbedtls_test_srv_key_rsa_len, NULL, 0,
2312 rng_get, &rng ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002313 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002314 mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002315 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002316 goto exit;
2317 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002318 key_cert_init = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002319#endif /* MBEDTLS_RSA_C */
2320#if defined(MBEDTLS_ECDSA_C)
2321 if( ( ret = mbedtls_x509_crt_parse( &srvcert2,
2322 (const unsigned char *) mbedtls_test_srv_crt_ec,
2323 mbedtls_test_srv_crt_ec_len ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002324 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002325 mbedtls_printf( " failed\n ! x509_crt_parse2 returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002326 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002327 goto exit;
2328 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002329 if( ( ret = mbedtls_pk_parse_key( &pkey2,
2330 (const unsigned char *) mbedtls_test_srv_key_ec,
Manuel Pégourié-Gonnard84dea012021-06-15 11:29:26 +02002331 mbedtls_test_srv_key_ec_len, NULL, 0,
2332 rng_get, &rng ) ) != 0 )
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002333 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002334 mbedtls_printf( " failed\n ! pk_parse_key2 returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002335 (unsigned int) -ret );
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002336 goto exit;
2337 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002338 key_cert_init2 = 2;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002339#endif /* MBEDTLS_ECDSA_C */
Manuel Pégourié-Gonnardac8474f2013-09-25 11:35:15 +02002340 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002341
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002342 mbedtls_printf( " ok\n" );
2343#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002344
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002345#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002346 if( opt.dhm_file != NULL )
2347 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002348 mbedtls_printf( " . Loading DHM parameters..." );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002349 fflush( stdout );
2350
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002351 if( ( ret = mbedtls_dhm_parse_dhmfile( &dhm, opt.dhm_file ) ) != 0 )
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002352 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002353 mbedtls_printf( " failed\n ! mbedtls_dhm_parse_dhmfile returned -0x%04X\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002354 (unsigned int) -ret );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002355 goto exit;
2356 }
2357
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002358 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002359 }
2360#endif
2361
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002362#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002363 if( opt.sni != NULL )
2364 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002365 mbedtls_printf( " . Setting up SNI information..." );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002366 fflush( stdout );
2367
Manuel Pégourié-Gonnard6f19ce32021-06-16 12:08:34 +02002368 if( ( sni_info = sni_parse( opt.sni ) ) == NULL )
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002369 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002370 mbedtls_printf( " failed\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002371 goto exit;
2372 }
2373
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002374 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002375 }
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002376#endif /* SNI_OPTION */
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002377
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002378 /*
2379 * 2. Setup the listening TCP socket
2380 */
Manuel Pégourié-Gonnardc0d74942015-06-23 12:30:57 +02002381 mbedtls_printf( " . Bind on %s://%s:%s/ ...",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002382 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp",
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002383 opt.server_addr ? opt.server_addr : "*",
2384 opt.server_port );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002385 fflush( stdout );
2386
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002387 if( ( ret = mbedtls_net_bind( &listen_fd, opt.server_addr, opt.server_port,
2388 opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ?
2389 MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002390 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002391 mbedtls_printf( " failed\n ! mbedtls_net_bind returned -0x%x\n\n", (unsigned int) -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002392 goto exit;
2393 }
2394
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002395 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002396
2397 /*
2398 * 3. Setup stuff
2399 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002400 mbedtls_printf( " . Setting up the SSL/TLS structure..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002401 fflush( stdout );
2402
Manuel Pégourié-Gonnard419d5ae2015-05-04 19:32:36 +02002403 if( ( ret = mbedtls_ssl_config_defaults( &conf,
2404 MBEDTLS_SSL_IS_SERVER,
Manuel Pégourié-Gonnardb31c5f62015-06-17 13:53:47 +02002405 opt.transport,
2406 MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 )
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002407 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002408 mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02002409 goto exit;
2410 }
2411
Gilles Peskineef86ab22017-05-05 18:59:02 +02002412#if defined(MBEDTLS_X509_CRT_PARSE_C)
2413 /* The default algorithms profile disables SHA-1, but our tests still
2414 rely on it heavily. Hence we allow it here. A real-world server
2415 should use the default profile unless there is a good reason not to. */
Gilles Peskinebc70a182017-05-09 15:59:24 +02002416 if( opt.allow_sha1 > 0 )
2417 {
2418 crt_profile_for_test.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 );
2419 mbedtls_ssl_conf_cert_profile( &conf, &crt_profile_for_test );
Gilles Peskine682df092017-05-11 19:01:11 +02002420 mbedtls_ssl_conf_sig_hashes( &conf, ssl_sig_hashes_for_test );
Gilles Peskinebc70a182017-05-09 15:59:24 +02002421 }
Gilles Peskineef86ab22017-05-05 18:59:02 +02002422#endif /* MBEDTLS_X509_CRT_PARSE_C */
2423
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002424 if( opt.auth_mode != DFL_AUTH_MODE )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002425 mbedtls_ssl_conf_authmode( &conf, opt.auth_mode );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002426
Janos Follath4817e272017-04-10 13:44:33 +01002427 if( opt.cert_req_ca_list != DFL_CERT_REQ_CA_LIST )
2428 mbedtls_ssl_conf_cert_req_ca_list( &conf, opt.cert_req_ca_list );
2429
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002430#if defined(MBEDTLS_SSL_PROTO_DTLS)
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002431 if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002432 mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min, opt.hs_to_max );
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02002433
Hanno Beckere7675d02018-08-14 13:28:56 +01002434 if( opt.dgram_packing != DFL_DGRAM_PACKING )
Hanno Becker1841b0a2018-08-24 11:13:57 +01002435 mbedtls_ssl_set_datagram_packing( &ssl, opt.dgram_packing );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002436#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnardd823bd02014-10-01 14:40:56 +02002437
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002438#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002439 if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002440 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002441 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002442 goto exit;
Ron Eldor6ea64512018-07-02 10:08:07 +03002443 }
Paul Bakker05decb22013-08-15 13:33:48 +02002444#endif
Manuel Pégourié-Gonnard0c017a52013-07-18 14:07:36 +02002445
Hanno Beckera0e20d02019-05-15 14:03:01 +01002446#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002447 if( opt.cid_enabled == 1 || opt.cid_enabled_renego == 1 )
Hanno Beckerad4a1372019-05-03 13:06:44 +01002448 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002449 if( opt.cid_enabled == 1 &&
2450 opt.cid_enabled_renego == 1 &&
2451 cid_len != cid_renego_len )
2452 {
2453 mbedtls_printf( "CID length must not change during renegotiation\n" );
2454 goto usage;
2455 }
2456
2457 if( opt.cid_enabled == 1 )
Hanno Becker8367ccc2019-05-14 11:30:10 +01002458 ret = mbedtls_ssl_conf_cid( &conf, cid_len,
2459 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002460 else
Hanno Becker8367ccc2019-05-14 11:30:10 +01002461 ret = mbedtls_ssl_conf_cid( &conf, cid_renego_len,
2462 MBEDTLS_SSL_UNEXPECTED_CID_IGNORE );
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002463
Hanno Beckerad4a1372019-05-03 13:06:44 +01002464 if( ret != 0 )
2465 {
Hanno Beckerd5eed422019-05-23 16:58:22 +01002466 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_cid_len returned -%#04x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002467 (unsigned int) -ret );
Hanno Beckerad4a1372019-05-03 13:06:44 +01002468 goto exit;
2469 }
2470 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002471#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerad4a1372019-05-03 13:06:44 +01002472
Ron Eldor6ea64512018-07-02 10:08:07 +03002473#if defined(MBEDTLS_SSL_DTLS_SRTP)
Bence Szépkúti880334c2020-12-14 14:42:13 +01002474 const mbedtls_ssl_srtp_profile forced_profile[] = { opt.force_srtp_profile, MBEDTLS_TLS_SRTP_UNSET };
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002475 if( opt.use_srtp == 1 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002476 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002477 if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002478 {
Johan Pascal253d0262020-09-22 13:04:45 +02002479 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles( &conf, forced_profile );
Ron Eldor6ea64512018-07-02 10:08:07 +03002480 }
2481 else
2482 {
Johan Pascal253d0262020-09-22 13:04:45 +02002483 ret = mbedtls_ssl_conf_dtls_srtp_protection_profiles( &conf, default_profiles );
Ron Eldor6ea64512018-07-02 10:08:07 +03002484 }
2485
2486 if( ret != 0 )
2487 {
2488 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_dtls_srtp_protection_profiles returned %d\n\n", ret );
2489 goto exit;
2490 }
2491
Ron Eldor12c6ead2018-07-03 15:08:32 +03002492 mbedtls_ssl_conf_srtp_mki_value_supported( &conf,
2493 opt.support_mki ?
2494 MBEDTLS_SSL_DTLS_SRTP_MKI_SUPPORTED :
2495 MBEDTLS_SSL_DTLS_SRTP_MKI_UNSUPPORTED );
2496
Ron Eldor6ea64512018-07-02 10:08:07 +03002497 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02002498 else if( opt.force_srtp_profile != 0 )
Ron Eldor6ea64512018-07-02 10:08:07 +03002499 {
2500 mbedtls_printf( " failed\n ! must enable use_srtp to force srtp profile\n\n" );
2501 goto exit;
2502 }
2503#endif /* MBEDTLS_SSL_DTLS_SRTP */
2504
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002505#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002506 if( opt.extended_ms != DFL_EXTENDED_MS )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002507 mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms );
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002508#endif
2509
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002510#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002511 if( opt.etm != DFL_ETM )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002512 mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm );
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002513#endif
2514
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002515#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002516 if( opt.alpn_string != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002517 if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002518 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002519 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002520 goto exit;
2521 }
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02002522#endif
2523
Philippe Antoine986b6f22019-06-07 15:04:32 +02002524 if (opt.reproducible)
2525 {
Philippe Antoinef91b3722019-06-11 16:02:43 +02002526#if defined(MBEDTLS_HAVE_TIME)
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002527#if defined(MBEDTLS_PLATFORM_TIME_ALT)
2528 mbedtls_platform_set_time( dummy_constant_time );
2529#else
Philippe Antoine7c9d7242019-06-11 12:11:36 +02002530 fprintf( stderr, "Warning: reproducible option used without constant time\n" );
Philippe Antoineaa4d1522019-06-06 21:24:31 +02002531#endif
Gilles Peskine34babfc2021-02-16 15:44:37 +01002532#endif /* MBEDTLS_HAVE_TIME */
Philippe Antoine986b6f22019-06-07 15:04:32 +02002533 }
Gilles Peskine535fb372021-01-13 18:59:46 +01002534 mbedtls_ssl_conf_rng( &conf, rng_get, &rng );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002535 mbedtls_ssl_conf_dbg( &conf, my_debug, stdout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002536
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002537#if defined(MBEDTLS_SSL_CACHE_C)
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002538 if( opt.cache_max != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002539 mbedtls_ssl_cache_set_max_entries( &cache, opt.cache_max );
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002540
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002541 if( opt.cache_timeout != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002542 mbedtls_ssl_cache_set_timeout( &cache, opt.cache_timeout );
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002543
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002544 mbedtls_ssl_conf_session_cache( &conf, &cache,
Manuel Pégourié-Gonnard5cb33082015-05-06 18:06:26 +01002545 mbedtls_ssl_cache_get,
2546 mbedtls_ssl_cache_set );
Paul Bakker0a597072012-09-25 21:55:46 +00002547#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002548
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002549#if defined(MBEDTLS_SSL_SESSION_TICKETS)
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002550 if( opt.tickets == MBEDTLS_SSL_SESSION_TICKETS_ENABLED )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002551 {
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002552 if( ( ret = mbedtls_ssl_ticket_setup( &ticket_ctx,
Gilles Peskine535fb372021-01-13 18:59:46 +01002553 rng_get, &rng,
Manuel Pégourié-Gonnarda0adc1b2015-05-25 10:35:16 +02002554 MBEDTLS_CIPHER_AES_256_GCM,
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002555 opt.ticket_timeout ) ) != 0 )
2556 {
2557 mbedtls_printf( " failed\n ! mbedtls_ssl_ticket_setup returned %d\n\n", ret );
2558 goto exit;
2559 }
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002560
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02002561 mbedtls_ssl_conf_session_tickets_cb( &conf,
2562 mbedtls_ssl_ticket_write,
2563 mbedtls_ssl_ticket_parse,
2564 &ticket_ctx );
2565 }
Paul Bakkera503a632013-08-14 13:48:06 +02002566#endif
Manuel Pégourié-Gonnardaa0d4d12013-08-03 13:02:31 +02002567
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002568#if defined(MBEDTLS_SSL_PROTO_DTLS)
2569 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002570 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002571#if defined(MBEDTLS_SSL_COOKIE_C)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002572 if( opt.cookies > 0 )
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002573 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002574 if( ( ret = mbedtls_ssl_cookie_setup( &cookie_ctx,
Gilles Peskine535fb372021-01-13 18:59:46 +01002575 rng_get, &rng ) ) != 0 )
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002576 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002577 mbedtls_printf( " failed\n ! mbedtls_ssl_cookie_setup returned %d\n\n", ret );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002578 goto exit;
2579 }
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02002580
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002581 mbedtls_ssl_conf_dtls_cookies( &conf, mbedtls_ssl_cookie_write, mbedtls_ssl_cookie_check,
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002582 &cookie_ctx );
2583 }
2584 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002585#endif /* MBEDTLS_SSL_COOKIE_C */
2586#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002587 if( opt.cookies == 0 )
2588 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002589 mbedtls_ssl_conf_dtls_cookies( &conf, NULL, NULL, NULL );
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002590 }
2591 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002592#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard26820e32014-07-23 19:34:59 +02002593 {
2594 ; /* Nothing to do */
2595 }
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002596
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002597#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
Manuel Pégourié-Gonnard27393132014-09-24 14:41:11 +02002598 if( opt.anti_replay != DFL_ANTI_REPLAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002599 mbedtls_ssl_conf_dtls_anti_replay( &conf, opt.anti_replay );
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002600#endif
2601
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02002602 if( opt.badmac_limit != DFL_BADMAC_LIMIT )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002603 mbedtls_ssl_conf_dtls_badmac_limit( &conf, opt.badmac_limit );
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002604 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002605#endif /* MBEDTLS_SSL_PROTO_DTLS */
Manuel Pégourié-Gonnard98545f12014-07-22 22:10:43 +02002606
Paul Bakker41c83d32013-03-20 14:39:14 +01002607 if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002608 mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite );
Manuel Pégourié-Gonnardd42b7c82015-03-20 19:44:04 +00002609
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002610 if( opt.allow_legacy != DFL_ALLOW_LEGACY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002611 mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002612#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002613 mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002614
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002615 if( opt.renego_delay != DFL_RENEGO_DELAY )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002616 mbedtls_ssl_conf_renegotiation_enforced( &conf, opt.renego_delay );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002617
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002618 if( opt.renego_period != DFL_RENEGO_PERIOD )
2619 {
Andres AG692ad842017-01-19 16:30:57 +00002620 PUT_UINT64_BE( renego_period, opt.renego_period, 0 );
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002621 mbedtls_ssl_conf_renegotiation_period( &conf, renego_period );
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002622 }
Manuel Pégourié-Gonnard615e6772014-11-03 08:23:14 +01002623#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002624
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002625#if defined(MBEDTLS_X509_CRT_PARSE_C)
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002626 if( strcmp( opt.ca_path, "none" ) != 0 &&
2627 strcmp( opt.ca_file, "none" ) != 0 )
2628 {
Jarno Lamsa1b4a2ba2019-03-27 17:55:27 +02002629#if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK)
2630 if( opt.ca_callback != 0 )
2631 mbedtls_ssl_conf_ca_cb( &conf, ca_callback, &cacert);
2632 else
2633#endif
2634 mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL );
Manuel Pégourié-Gonnard3e1b1782014-02-27 13:35:00 +01002635 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002636 if( key_cert_init )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002637 {
2638 mbedtls_pk_context *pk = &pkey;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002639#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002640 if( opt.async_private_delay1 >= 0 )
2641 {
Gilles Peskine44817442018-06-13 18:09:28 +02002642 ret = ssl_async_set_key( &ssl_async_keys, &srvcert, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002643 opt.async_private_delay1 );
2644 if( ret < 0 )
2645 {
2646 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2647 ret );
2648 goto exit;
2649 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002650 pk = NULL;
2651 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002652#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002653 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002654 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002655 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002656 goto exit;
2657 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002658 }
Manuel Pégourié-Gonnarda0fdf8b2013-09-25 14:05:49 +02002659 if( key_cert_init2 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002660 {
2661 mbedtls_pk_context *pk = &pkey2;
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002662#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002663 if( opt.async_private_delay2 >= 0 )
2664 {
Gilles Peskine44817442018-06-13 18:09:28 +02002665 ret = ssl_async_set_key( &ssl_async_keys, &srvcert2, pk, 0,
Gilles Peskined6fbfde2018-04-30 10:23:56 +02002666 opt.async_private_delay2 );
2667 if( ret < 0 )
2668 {
2669 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2670 ret );
2671 goto exit;
2672 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002673 pk = NULL;
2674 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002675#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002676 if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &srvcert2, pk ) ) != 0 )
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002677 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002678 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret );
Manuel Pégourié-Gonnardc5fd3912014-07-08 14:05:52 +02002679 goto exit;
2680 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002681 }
2682
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002683#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002684 if( opt.async_operations[0] != '-' )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002685 {
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002686 mbedtls_ssl_async_sign_t *sign = NULL;
2687 mbedtls_ssl_async_decrypt_t *decrypt = NULL;
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002688 const char *r;
2689 for( r = opt.async_operations; *r; r++ )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002690 {
Gilles Peskine12ab5d42018-04-24 12:32:04 +02002691 switch( *r )
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002692 {
2693 case 'd':
2694 decrypt = ssl_async_decrypt;
2695 break;
2696 case 's':
2697 sign = ssl_async_sign;
2698 break;
2699 }
2700 }
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002701 ssl_async_keys.inject_error = ( opt.async_private_error < 0 ?
2702 - opt.async_private_error :
2703 opt.async_private_error );
Gilles Peskine535fb372021-01-13 18:59:46 +01002704 ssl_async_keys.f_rng = rng_get;
2705 ssl_async_keys.p_rng = &rng;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002706 mbedtls_ssl_conf_async_private_cb( &conf,
Gilles Peskinefcca9d82018-01-12 13:47:48 +01002707 sign,
2708 decrypt,
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002709 ssl_async_resume,
2710 ssl_async_cancel,
2711 &ssl_async_keys );
2712 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002713#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002714#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkered27a042013-04-18 22:46:23 +02002715
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02002716#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002717 if( opt.sni != NULL )
Gilles Peskine166ce742018-04-30 10:30:49 +02002718 {
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002719 mbedtls_ssl_conf_sni( &conf, sni_callback, sni_info );
Gilles Peskine166ce742018-04-30 10:30:49 +02002720#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
2721 if( opt.async_private_delay2 >= 0 )
2722 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002723 sni_entry *cur;
2724 for( cur = sni_info; cur != NULL; cur = cur->next )
Gilles Peskine166ce742018-04-30 10:30:49 +02002725 {
Gilles Peskinee2479892018-06-13 18:06:51 +02002726 ret = ssl_async_set_key( &ssl_async_keys,
Gilles Peskine44817442018-06-13 18:09:28 +02002727 cur->cert, cur->key, 1,
Gilles Peskinee2479892018-06-13 18:06:51 +02002728 opt.async_private_delay2 );
2729 if( ret < 0 )
2730 {
2731 mbedtls_printf( " Test error: ssl_async_set_key failed (%d)\n",
2732 ret );
2733 goto exit;
2734 }
2735 cur->key = NULL;
Gilles Peskine166ce742018-04-30 10:30:49 +02002736 }
Gilles Peskine166ce742018-04-30 10:30:49 +02002737 }
2738#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
2739 }
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01002740#endif
2741
Hanno Beckere6706e62017-05-15 16:05:15 +01002742#if defined(MBEDTLS_ECP_C)
2743 if( opt.curves != NULL &&
2744 strcmp( opt.curves, "default" ) != 0 )
2745 {
2746 mbedtls_ssl_conf_curves( &conf, curve_list );
2747 }
2748#endif
2749
Gilles Peskineeccd8882020-03-10 12:19:08 +01002750#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002751
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002752 if( strlen( opt.psk ) != 0 && strlen( opt.psk_identity ) != 0 )
2753 {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002754#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00002755 if( opt.psk_opaque != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002756 {
Hanno Becker1d911cd2018-11-15 13:06:09 +00002757 /* The algorithm has already been determined earlier. */
Janos Follathbe4efc22019-08-08 11:38:18 +01002758 status = psa_setup_psk_key_slot( &psk_slot, alg, psk, psk_len );
Hanno Becker1d911cd2018-11-15 13:06:09 +00002759 if( status != PSA_SUCCESS )
2760 {
2761 fprintf( stderr, "SETUP FAIL\n" );
2762 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
2763 goto exit;
2764 }
2765 if( ( ret = mbedtls_ssl_conf_psk_opaque( &conf, psk_slot,
2766 (const unsigned char *) opt.psk_identity,
2767 strlen( opt.psk_identity ) ) ) != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002768 {
2769 mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk_opaque returned %d\n\n",
2770 ret );
2771 goto exit;
2772 }
2773 }
2774 else
2775#endif /* MBEDTLS_USE_PSA_CRYPTO */
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01002776 if( psk_len > 0 )
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002777 {
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01002778 ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len,
2779 (const unsigned char *) opt.psk_identity,
2780 strlen( opt.psk_identity ) );
2781 if( ret != 0 )
2782 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002783 mbedtls_printf( " failed\n mbedtls_ssl_conf_psk returned -0x%04X\n\n", (unsigned int) -ret );
Piotr Nowicki9926eaf2019-11-20 14:54:36 +01002784 goto exit;
2785 }
Manuel Pégourié-Gonnarddc019b92014-06-10 15:24:51 +02002786 }
2787 }
2788
Manuel Pégourié-Gonnard80c85532014-06-10 14:01:52 +02002789 if( opt.psk_list != NULL )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002790 {
2791#if defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00002792 if( opt.psk_list_opaque != 0 )
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002793 {
2794 psk_entry *cur_psk;
2795 for( cur_psk = psk_info; cur_psk != NULL; cur_psk = cur_psk->next )
2796 {
Hanno Becker1d911cd2018-11-15 13:06:09 +00002797
Janos Follathbe4efc22019-08-08 11:38:18 +01002798 status = psa_setup_psk_key_slot( &cur_psk->slot, alg,
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002799 cur_psk->key,
2800 cur_psk->key_len );
2801 if( status != PSA_SUCCESS )
2802 {
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002803 ret = MBEDTLS_ERR_SSL_HW_ACCEL_FAILED;
2804 goto exit;
2805 }
2806 }
2807 }
2808#endif /* MBEDTLS_USE_PSA_CRYPTO */
Hanno Becker1d911cd2018-11-15 13:06:09 +00002809
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002810 mbedtls_ssl_conf_psk_cb( &conf, psk_callback, psk_info );
Hanno Beckerb64ba5f2018-10-26 11:28:08 +01002811 }
Paul Bakkered27a042013-04-18 22:46:23 +02002812#endif
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002813
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002814#if defined(MBEDTLS_DHM_C)
Paul Bakker5d19f862012-09-28 07:33:00 +00002815 /*
2816 * Use different group than default DHM group
2817 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002818#if defined(MBEDTLS_FS_IO)
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002819 if( opt.dhm_file != NULL )
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002820 ret = mbedtls_ssl_conf_dh_param_ctx( &conf, &dhm );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002821#endif
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002822 if( ret != 0 )
2823 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002824 mbedtls_printf( " failed\n mbedtls_ssl_conf_dh_param returned -0x%04X\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnard736699c2014-06-09 11:29:50 +02002825 goto exit;
2826 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002827#endif
2828
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002829 if( opt.min_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002830 mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.min_version );
Paul Bakker1d29fb52012-09-28 13:28:45 +00002831
Manuel Pégourié-Gonnard8c8be1e2015-03-31 14:21:11 +02002832 if( opt.max_version != DFL_MIN_VERSION )
Manuel Pégourié-Gonnard01e5e8c2015-05-11 10:11:56 +02002833 mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.max_version );
Paul Bakkerc1516be2013-06-29 16:01:32 +02002834
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002835 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
2836 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002837 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002838 goto exit;
2839 }
2840
Hanno Becker7e6c1782021-06-08 09:24:55 +01002841#if defined(MBEDTLS_SSL_EXPORT_KEYS)
2842 if( opt.eap_tls != 0 )
2843 {
2844 mbedtls_ssl_set_export_keys_cb( &ssl, eap_tls_key_derivation,
2845 &eap_tls_keying );
2846 }
2847 else if( opt.nss_keylog != 0 )
2848 {
2849 mbedtls_ssl_set_export_keys_cb( &ssl,
2850 nss_keylog_export,
2851 NULL );
2852 }
2853#if defined( MBEDTLS_SSL_DTLS_SRTP )
2854 else if( opt.use_srtp != 0 )
2855 {
2856 mbedtls_ssl_set_export_keys_cb( &ssl, dtls_srtp_key_derivation,
2857 &dtls_srtp_keying );
2858 }
2859#endif /* MBEDTLS_SSL_DTLS_SRTP */
2860#endif /* MBEDTLS_SSL_EXPORT_KEYS */
2861
Hanno Beckerdcc94e62019-07-03 17:05:43 +01002862 io_ctx.ssl = &ssl;
2863 io_ctx.net = &client_fd;
2864 mbedtls_ssl_set_bio( &ssl, &io_ctx, send_cb, recv_cb,
2865 opt.nbio == 0 ? recv_timeout_cb : NULL );
Manuel Pégourié-Gonnard06939ce2015-05-11 11:25:46 +02002866
Hanno Beckera0e20d02019-05-15 14:03:01 +01002867#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckera7d25422019-04-09 17:28:10 +01002868 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
2869 {
2870 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled,
2871 cid, cid_len ) ) != 0 )
2872 {
2873 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
2874 ret );
2875 goto exit;
2876 }
2877 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01002878#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01002879
Manuel Pégourié-Gonnard6e7aaca2018-08-20 10:37:23 +02002880#if defined(MBEDTLS_SSL_PROTO_DTLS)
2881 if( opt.dtls_mtu != DFL_DTLS_MTU )
2882 mbedtls_ssl_set_mtu( &ssl, opt.dtls_mtu );
2883#endif
2884
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002885#if defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002886 mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay,
2887 mbedtls_timing_get_delay );
Manuel Pégourié-Gonnardd2377e72015-05-13 13:58:56 +02002888#endif
Manuel Pégourié-Gonnarde3c41ad2015-05-13 10:04:32 +02002889
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002890 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002891
2892reset:
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002893#if !defined(_WIN32)
2894 if( received_sigterm )
2895 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002896 mbedtls_printf( " interrupted by SIGTERM (not in net_accept())\n" );
2897 if( ret == MBEDTLS_ERR_NET_INVALID_CONTEXT )
2898 ret = 0;
2899
Manuel Pégourié-Gonnardb6440a42014-09-20 12:03:00 +02002900 goto exit;
2901 }
2902#endif
2903
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002904 if( ret == MBEDTLS_ERR_SSL_CLIENT_RECONNECT )
2905 {
2906 mbedtls_printf( " ! Client initiated reconnection from same port\n" );
2907 goto handshake;
2908 }
2909
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002910#ifdef MBEDTLS_ERROR_C
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002911 if( ret != 0 )
2912 {
2913 char error_buf[100];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002914 mbedtls_strerror( ret, error_buf, 100 );
2915 mbedtls_printf("Last error was: %d - %s\n\n", ret, error_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002916 }
2917#endif
2918
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02002919 mbedtls_net_free( &client_fd );
Manuel Pégourié-Gonnard8a06d9c2014-03-23 18:23:41 +01002920
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002921 mbedtls_ssl_session_reset( &ssl );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002922
2923 /*
2924 * 3. Wait until a client connects
2925 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002926 mbedtls_printf( " . Waiting for a remote connection ..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002927 fflush( stdout );
2928
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002929 if( ( ret = mbedtls_net_accept( &listen_fd, &client_fd,
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002930 client_ip, sizeof( client_ip ), &cliip_len ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002931 {
Paul Bakkerc1283d32014-08-18 11:05:51 +02002932#if !defined(_WIN32)
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002933 if( received_sigterm )
2934 {
Manuel Pégourié-Gonnard4fa619f2018-01-22 10:55:10 +01002935 mbedtls_printf( " interrupted by SIGTERM (in net_accept())\n" );
2936 if( ret == MBEDTLS_ERR_NET_ACCEPT_FAILED )
2937 ret = 0;
2938
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002939 goto exit;
2940 }
Paul Bakkerc1283d32014-08-18 11:05:51 +02002941#endif
Manuel Pégourié-Gonnarddb493302014-08-14 15:36:12 +02002942
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002943 mbedtls_printf( " failed\n ! mbedtls_net_accept returned -0x%x\n\n", (unsigned int) -ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002944 goto exit;
2945 }
2946
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002947 if( opt.nbio > 0 )
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002948 ret = mbedtls_net_set_nonblock( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002949 else
Manuel Pégourié-Gonnard5db64322015-06-30 15:40:39 +02002950 ret = mbedtls_net_set_block( &client_fd );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002951 if( ret != 0 )
2952 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002953 mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnard55753162014-02-26 13:47:08 +01002954 goto exit;
2955 }
2956
Manuel Pégourié-Gonnard6729e792015-05-11 09:50:24 +02002957 mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002958
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002959#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
2960 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002961 {
Manuel Pégourié-Gonnard0b104b02015-05-14 21:52:40 +02002962 if( ( ret = mbedtls_ssl_set_client_transport_id( &ssl,
2963 client_ip, cliip_len ) ) != 0 )
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002964 {
Hanno Beckerdf4180a2017-10-27 13:43:58 +01002965 mbedtls_printf( " failed\n ! mbedtls_ssl_set_client_transport_id() returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02002966 (unsigned int) -ret );
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002967 goto exit;
2968 }
2969 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002970#endif /* MBEDTLS_SSL_DTLS_HELLO_VERIFY */
Manuel Pégourié-Gonnard336b8242014-07-22 17:57:43 +02002971
Manuel Pégourié-Gonnard70905a72015-09-16 11:08:34 +02002972#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
2973 if( opt.ecjpake_pw != DFL_ECJPAKE_PW )
2974 {
2975 if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl,
2976 (const unsigned char *) opt.ecjpake_pw,
2977 strlen( opt.ecjpake_pw ) ) ) != 0 )
2978 {
2979 mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n", ret );
2980 goto exit;
2981 }
2982 }
2983#endif
2984
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002985 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002986
2987 /*
2988 * 4. Handshake
2989 */
Manuel Pégourié-Gonnard3f09b6d2015-09-08 11:58:14 +02002990handshake:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002991 mbedtls_printf( " . Performing the SSL/TLS handshake..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00002992 fflush( stdout );
2993
Hanno Becker16970d22017-10-10 15:56:37 +01002994 while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002995 {
Gilles Peskineb74a1c72018-04-24 13:09:22 +02002996#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002997 if( ret == MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS &&
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01002998 ssl_async_keys.inject_error == SSL_ASYNC_INJECT_ERROR_CANCEL )
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01002999 {
3000 mbedtls_printf( " cancelling on injected error\n" );
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003001 break;
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003002 }
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003003#endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
Gilles Peskineb44692f2018-04-24 12:18:19 +02003004
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003005 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01003006 break;
3007
3008 /* For event-driven IO, wait for socket to become available */
3009 if( opt.event == 1 /* level triggered IO */ )
3010 {
3011#if defined(MBEDTLS_TIMING_C)
Hanno Beckeradfa64f2018-03-15 11:35:07 +00003012 ret = idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003013#else
Hanno Beckeradfa64f2018-03-15 11:35:07 +00003014 ret = idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003015#endif
Hanno Beckeradfa64f2018-03-15 11:35:07 +00003016 if( ret != 0 )
3017 goto reset;
Hanno Becker16970d22017-10-10 15:56:37 +01003018 }
Gilles Peskine9eb5e9a2018-01-05 21:15:57 +01003019 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003020
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003021 if( ret == MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED )
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003022 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003023 mbedtls_printf( " hello verification requested\n" );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003024 ret = 0;
3025 goto reset;
3026 }
3027 else if( ret != 0 )
3028 {
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003029 mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", (unsigned int) -ret );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003030
3031#if defined(MBEDTLS_X509_CRT_PARSE_C)
3032 if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
3033 {
3034 char vrfy_buf[512];
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +02003035 flags = mbedtls_ssl_get_verify_result( &ssl );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003036
Hanno Becker7ac83f92020-10-09 10:48:22 +01003037 x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003038
3039 mbedtls_printf( "%s\n", vrfy_buf );
3040 }
3041#endif
3042
Gilles Peskineb74a1c72018-04-24 13:09:22 +02003043#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01003044 if( opt.async_private_error < 0 )
3045 /* Injected error only the first time round, to test reset */
3046 ssl_async_keys.inject_error = SSL_ASYNC_INJECT_ERROR_NONE;
3047#endif
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003048 goto reset;
3049 }
3050 else /* ret == 0 */
3051 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003052 mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n",
3053 mbedtls_ssl_get_version( &ssl ), mbedtls_ssl_get_ciphersuite( &ssl ) );
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02003054 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003055
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003056 if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 )
3057 mbedtls_printf( " [ Record expansion is %d ]\n", ret );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02003058 else
Mateusz Starzykf5c53512021-04-15 13:28:52 +02003059 mbedtls_printf( " [ Record expansion is unknown ]\n" );
Manuel Pégourié-Gonnard9b35f182014-10-14 17:47:31 +02003060
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02003061#if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH)
Hanno Becker59d36702021-06-08 05:35:29 +01003062 mbedtls_printf( " [ Maximum incoming record payload length is %u ]\n",
3063 (unsigned int) mbedtls_ssl_get_max_in_record_payload( &ssl ) );
3064 mbedtls_printf( " [ Maximum outgoing record payload length is %u ]\n",
3065 (unsigned int) mbedtls_ssl_get_max_out_record_payload( &ssl ) );
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02003066#endif
3067
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003068#if defined(MBEDTLS_SSL_ALPN)
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02003069 if( opt.alpn_string != NULL )
3070 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003071 const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl );
3072 mbedtls_printf( " [ Application Layer Protocol is %s ]\n",
Manuel Pégourié-Gonnard1bd22812014-04-05 14:34:07 +02003073 alp ? alp : "(none)" );
3074 }
3075#endif
3076
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003077#if defined(MBEDTLS_X509_CRT_PARSE_C)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003078 /*
Ron Eldor2a47be52017-06-20 15:23:23 +03003079 * 5. Verify the client certificate
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003080 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003081 mbedtls_printf( " . Verifying peer X.509 certificate..." );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003082
Manuel Pégourié-Gonnarde6ef16f2015-05-11 19:54:43 +02003083 if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003084 {
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003085 char vrfy_buf[512];
3086
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003087 mbedtls_printf( " failed\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003088
Hanno Becker7ac83f92020-10-09 10:48:22 +01003089 x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags );
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003090 mbedtls_printf( "%s\n", vrfy_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003091 }
3092 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003093 mbedtls_printf( " ok\n" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003094
Hanno Becker612a2f12020-10-09 09:19:39 +01003095#if !defined(MBEDTLS_X509_REMOVE_INFO)
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02003096 if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003097 {
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02003098 char crt_buf[512];
3099
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003100 mbedtls_printf( " . Peer certificate information ...\n" );
Manuel Pégourié-Gonnard1c5b9fc2015-06-27 14:38:51 +02003101 mbedtls_x509_crt_info( crt_buf, sizeof( crt_buf ), " ",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003102 mbedtls_ssl_get_peer_cert( &ssl ) );
Manuel Pégourié-Gonnard67557172015-07-02 11:15:48 +02003103 mbedtls_printf( "%s\n", crt_buf );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003104 }
Hanno Becker612a2f12020-10-09 09:19:39 +01003105#endif /* MBEDTLS_X509_REMOVE_INFO */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003106#endif /* MBEDTLS_X509_CRT_PARSE_C */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003107
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003108#if defined(MBEDTLS_SSL_EXPORT_KEYS)
Ron Eldor51d3ab52019-05-12 14:54:30 +03003109 if( opt.eap_tls != 0 )
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003110 {
3111 size_t j = 0;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003112
3113 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type,
3114 eap_tls_keying.master_secret,
3115 sizeof( eap_tls_keying.master_secret ),
3116 eap_tls_label,
3117 eap_tls_keying.randbytes,
3118 sizeof( eap_tls_keying.randbytes ),
3119 eap_tls_keymaterial,
3120 sizeof( eap_tls_keymaterial ) ) )
3121 != 0 )
3122 {
3123 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003124 (unsigned int) -ret );
Ron Eldor65d8c262019-06-04 13:05:36 +03003125 goto reset;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003126 }
3127
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003128 mbedtls_printf( " EAP-TLS key material is:" );
3129 for( j = 0; j < sizeof( eap_tls_keymaterial ); j++ )
3130 {
3131 if( j % 8 == 0 )
3132 mbedtls_printf("\n ");
3133 mbedtls_printf("%02x ", eap_tls_keymaterial[j] );
3134 }
3135 mbedtls_printf("\n");
3136
Ron Eldor51d3ab52019-05-12 14:54:30 +03003137 if( ( ret = mbedtls_ssl_tls_prf( eap_tls_keying.tls_prf_type, NULL, 0,
Ron Eldor51c45072019-05-15 17:49:54 +03003138 eap_tls_label,
3139 eap_tls_keying.randbytes,
3140 sizeof( eap_tls_keying.randbytes ),
3141 eap_tls_iv,
3142 sizeof( eap_tls_iv ) ) ) != 0 )
Ron Eldor51d3ab52019-05-12 14:54:30 +03003143 {
3144 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003145 (unsigned int) -ret );
Ron Eldor65d8c262019-06-04 13:05:36 +03003146 goto reset;
Ron Eldor51d3ab52019-05-12 14:54:30 +03003147 }
3148
Ron Eldorb7fd64c2019-05-12 11:03:32 +03003149 mbedtls_printf( " EAP-TLS IV is:" );
3150 for( j = 0; j < sizeof( eap_tls_iv ); j++ )
3151 {
3152 if( j % 8 == 0 )
3153 mbedtls_printf("\n ");
3154 mbedtls_printf("%02x ", eap_tls_iv[j] );
3155 }
3156 mbedtls_printf("\n");
3157 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003158
3159#if defined( MBEDTLS_SSL_DTLS_SRTP )
3160 else if( opt.use_srtp != 0 )
3161 {
3162 size_t j = 0;
Johan Pascal2258a4f2020-10-28 13:53:09 +01003163 mbedtls_dtls_srtp_info dtls_srtp_negotiation_result;
3164 mbedtls_ssl_get_dtls_srtp_negotiation_result( &ssl, &dtls_srtp_negotiation_result );
Ron Eldor65b56ef2019-09-26 16:40:48 +03003165
Johan Pascal5fbe9e72020-10-29 10:49:21 +01003166 if( dtls_srtp_negotiation_result.chosen_dtls_srtp_profile
3167 == MBEDTLS_TLS_SRTP_UNSET )
Ron Eldor65b56ef2019-09-26 16:40:48 +03003168 {
Johan Pascald576fdb2020-09-22 10:39:53 +02003169 mbedtls_printf( " Unable to negotiate "
3170 "the use of DTLS-SRTP\n" );
Ron Eldor65b56ef2019-09-26 16:40:48 +03003171 }
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003172 else
Ron Eldor65b56ef2019-09-26 16:40:48 +03003173 {
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003174 if( ( ret = mbedtls_ssl_tls_prf( dtls_srtp_keying.tls_prf_type,
3175 dtls_srtp_keying.master_secret,
3176 sizeof( dtls_srtp_keying.master_secret ),
3177 dtls_srtp_label,
3178 dtls_srtp_keying.randbytes,
3179 sizeof( dtls_srtp_keying.randbytes ),
3180 dtls_srtp_key_material,
3181 sizeof( dtls_srtp_key_material ) ) )
3182 != 0 )
3183 {
3184 mbedtls_printf( " failed\n ! mbedtls_ssl_tls_prf returned -0x%x\n\n",
3185 (unsigned int) -ret );
3186 goto exit;
3187 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003188
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003189 mbedtls_printf( " DTLS-SRTP key material is:" );
3190 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
3191 {
3192 if( j % 8 == 0 )
Johan Pascald576fdb2020-09-22 10:39:53 +02003193 mbedtls_printf( "\n " );
3194 mbedtls_printf( "%02x ", dtls_srtp_key_material[j] );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003195 }
Johan Pascal9bc50b02020-09-24 12:01:13 +02003196 mbedtls_printf( "\n" );
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003197
Johan Pascal9bc50b02020-09-24 12:01:13 +02003198 /* produce a less readable output used to perform automatic checks
3199 * - compare client and server output
3200 * - interop test with openssl which client produces this kind of output
3201 */
3202 mbedtls_printf( " Keying material: " );
3203 for( j = 0; j < sizeof( dtls_srtp_key_material ); j++ )
3204 {
3205 mbedtls_printf( "%02X", dtls_srtp_key_material[j] );
3206 }
Johan Pascald576fdb2020-09-22 10:39:53 +02003207 mbedtls_printf( "\n" );
Johan Pascal20c7db32020-10-26 22:45:58 +01003208
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01003209 if ( dtls_srtp_negotiation_result.mki_len > 0 )
Johan Pascal20c7db32020-10-26 22:45:58 +01003210 {
3211 mbedtls_printf( " DTLS-SRTP mki value: " );
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01003212 for( j = 0; j < dtls_srtp_negotiation_result.mki_len; j++ )
Johan Pascal20c7db32020-10-26 22:45:58 +01003213 {
Johan Pascal0dbcd1d2020-10-28 11:03:07 +01003214 mbedtls_printf( "%02X", dtls_srtp_negotiation_result.mki_value[j] );
Johan Pascal20c7db32020-10-26 22:45:58 +01003215 }
3216 }
3217 else
3218 {
Johan Pascal5ef72d22020-10-28 17:05:47 +01003219 mbedtls_printf( " DTLS-SRTP no mki value negotiated" );
Johan Pascal20c7db32020-10-26 22:45:58 +01003220 }
3221 mbedtls_printf( "\n" );
3222
Johan Pascal9bc97ca2020-09-21 23:44:45 +02003223 }
Ron Eldor65b56ef2019-09-26 16:40:48 +03003224 }
3225#endif /* MBEDTLS_SSL_DTLS_SRTP */
3226#endif /* MBEDTLS_SSL_EXPORT_KEYS */
Hanno Beckera7d25422019-04-09 17:28:10 +01003227
Hanno Beckera0e20d02019-05-15 14:03:01 +01003228#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003229 ret = report_cid_usage( &ssl, "initial handshake" );
3230 if( ret != 0 )
3231 goto exit;
3232
Hanno Beckera7d25422019-04-09 17:28:10 +01003233 if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM )
3234 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003235 if( ( ret = mbedtls_ssl_set_cid( &ssl, opt.cid_enabled_renego,
3236 cid_renego, cid_renego_len ) ) != 0 )
Hanno Beckera7d25422019-04-09 17:28:10 +01003237 {
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003238 mbedtls_printf( " failed\n ! mbedtls_ssl_set_cid returned %d\n\n",
3239 ret );
Hanno Beckera7d25422019-04-09 17:28:10 +01003240 goto exit;
3241 }
Hanno Beckera7d25422019-04-09 17:28:10 +01003242 }
Hanno Beckera0e20d02019-05-15 14:03:01 +01003243#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckera7d25422019-04-09 17:28:10 +01003244
Piotr Nowicki0937ed22019-11-26 16:32:40 +01003245#if defined(MBEDTLS_MEMORY_DEBUG)
3246 mbedtls_memory_buffer_alloc_cur_get( &current_heap_memory, &heap_blocks );
3247 mbedtls_memory_buffer_alloc_max_get( &peak_heap_memory, &heap_blocks );
3248 mbedtls_printf( "Heap memory usage after handshake: %lu bytes. Peak memory usage was %lu\n",
3249 (unsigned long) current_heap_memory, (unsigned long) peak_heap_memory );
3250#endif /* MBEDTLS_MEMORY_DEBUG */
3251
Manuel Pégourié-Gonnard6a2bc232014-10-09 15:33:13 +02003252 if( opt.exchanges == 0 )
3253 goto close_notify;
3254
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003255 exchanges_left = opt.exchanges;
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003256data_exchange:
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003257 /*
3258 * 6. Read the HTTP Request
3259 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003260 mbedtls_printf( " < Read from client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003261 fflush( stdout );
3262
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003263 /*
3264 * TLS and DTLS need different reading styles (stream vs datagram)
3265 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003266 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003267 {
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003268 do
3269 {
3270 int terminated = 0;
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003271 len = opt.buffer_size - 1;
3272 memset( buf, 0, opt.buffer_size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003273 ret = mbedtls_ssl_read( &ssl, buf, len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003274
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003275 if( mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01003276 {
3277 if( opt.event == 1 /* level triggered IO */ )
3278 {
3279#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003280 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003281#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003282 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003283#endif
3284 }
3285
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003286 continue;
Hanno Becker16970d22017-10-10 15:56:37 +01003287 }
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003288
3289 if( ret <= 0 )
3290 {
3291 switch( ret )
3292 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003293 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
3294 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003295 goto close_notify;
3296
3297 case 0:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003298 case MBEDTLS_ERR_NET_CONN_RESET:
3299 mbedtls_printf( " connection was reset by peer\n" );
3300 ret = MBEDTLS_ERR_NET_CONN_RESET;
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003301 goto reset;
3302
3303 default:
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003304 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003305 goto reset;
3306 }
3307 }
3308
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003309 if( mbedtls_ssl_get_bytes_avail( &ssl ) == 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003310 {
3311 len = ret;
3312 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003313 mbedtls_printf( " %d bytes read\n\n%s\n", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003314
3315 /* End of message should be detected according to the syntax of the
3316 * application protocol (eg HTTP), just use a dummy test here. */
3317 if( buf[len - 1] == '\n' )
3318 terminated = 1;
3319 }
3320 else
3321 {
3322 int extra_len, ori_len;
3323 unsigned char *larger_buf;
3324
3325 ori_len = ret;
Manuel Pégourié-Gonnard9de64f52015-07-01 15:51:43 +02003326 extra_len = (int) mbedtls_ssl_get_bytes_avail( &ssl );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003327
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +02003328 larger_buf = mbedtls_calloc( 1, ori_len + extra_len + 1 );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003329 if( larger_buf == NULL )
3330 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003331 mbedtls_printf( " ! memory allocation failed\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003332 ret = 1;
3333 goto reset;
3334 }
3335
3336 memset( larger_buf, 0, ori_len + extra_len );
3337 memcpy( larger_buf, buf, ori_len );
3338
3339 /* This read should never fail and get the whole cached data */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003340 ret = mbedtls_ssl_read( &ssl, larger_buf + ori_len, extra_len );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003341 if( ret != extra_len ||
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003342 mbedtls_ssl_get_bytes_avail( &ssl ) != 0 )
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003343 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003344 mbedtls_printf( " ! mbedtls_ssl_read failed on cached data\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003345 ret = 1;
3346 goto reset;
3347 }
3348
3349 larger_buf[ori_len + extra_len] = '\0';
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003350 mbedtls_printf( " %d bytes read (%d + %d)\n\n%s\n",
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003351 ori_len + extra_len, ori_len, extra_len,
3352 (char *) larger_buf );
3353
3354 /* End of message should be detected according to the syntax of the
3355 * application protocol (eg HTTP), just use a dummy test here. */
3356 if( larger_buf[ori_len + extra_len - 1] == '\n' )
3357 terminated = 1;
3358
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003359 mbedtls_free( larger_buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003360 }
3361
3362 if( terminated )
3363 {
3364 ret = 0;
3365 break;
3366 }
3367 }
3368 while( 1 );
3369 }
3370 else /* Not stream, so datagram */
3371 {
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003372 len = opt.buffer_size - 1;
3373 memset( buf, 0, opt.buffer_size );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003374
Gilles Peskineb44692f2018-04-24 12:18:19 +02003375 do
Hanno Becker16970d22017-10-10 15:56:37 +01003376 {
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003377 /* Without the call to `mbedtls_ssl_check_pending`, it might
3378 * happen that the client sends application data in the same
3379 * datagram as the Finished message concluding the handshake.
3380 * In this case, the application data would be ready to be
3381 * processed while the underlying transport wouldn't signal
3382 * any further incoming data.
3383 *
3384 * See the test 'Event-driven I/O: session-id resume, UDP packing'
3385 * in tests/ssl-opt.sh.
3386 */
3387
3388 /* For event-driven IO, wait for socket to become available */
3389 if( mbedtls_ssl_check_pending( &ssl ) == 0 &&
3390 opt.event == 1 /* level triggered IO */ )
3391 {
3392#if defined(MBEDTLS_TIMING_C)
3393 idle( &client_fd, &timer, MBEDTLS_ERR_SSL_WANT_READ );
3394#else
3395 idle( &client_fd, MBEDTLS_ERR_SSL_WANT_READ );
3396#endif
3397 }
3398
Hanno Becker16970d22017-10-10 15:56:37 +01003399 ret = mbedtls_ssl_read( &ssl, buf, len );
3400
Hanno Beckerddc3ebb2018-03-13 11:39:09 +00003401 /* Note that even if `mbedtls_ssl_check_pending` returns true,
3402 * it can happen that the subsequent call to `mbedtls_ssl_read`
3403 * returns `MBEDTLS_ERR_SSL_WANT_READ`, because the pending messages
3404 * might be discarded (e.g. because they are retransmissions). */
Hanno Becker16970d22017-10-10 15:56:37 +01003405 }
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003406 while( mbedtls_status_is_ssl_in_progress( ret ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003407
3408 if( ret <= 0 )
3409 {
3410 switch( ret )
3411 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003412 case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
3413 mbedtls_printf( " connection was closed gracefully\n" );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003414 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003415 goto close_notify;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003416
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003417 default:
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003418 mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", (unsigned int) -ret );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003419 goto reset;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003420 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003421 }
3422
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003423 len = ret;
3424 buf[len] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003425 mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf );
Manuel Pégourié-Gonnardcce220d2014-10-06 18:11:43 +02003426 ret = 0;
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003427 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003428
3429 /*
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003430 * 7a. Request renegotiation while client is waiting for input from us.
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02003431 * (only on the first exchange, to be able to test retransmission)
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003432 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003433#if defined(MBEDTLS_SSL_RENEGOTIATION)
Manuel Pégourié-Gonnard3a173f42015-01-22 13:30:33 +00003434 if( opt.renegotiate && exchanges_left == opt.exchanges )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003435 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003436 mbedtls_printf( " . Requestion renegotiation..." );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003437 fflush( stdout );
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003438
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003439 while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003440 {
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003441 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003442 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003443 mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003444 goto reset;
3445 }
Hanno Becker16970d22017-10-10 15:56:37 +01003446
3447 /* For event-driven IO, wait for socket to become available */
3448 if( opt.event == 1 /* level triggered IO */ )
3449 {
3450#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003451 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003452#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003453 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003454#endif
3455 }
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003456 }
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003457
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003458 mbedtls_printf( " ok\n" );
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003459 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003460#endif /* MBEDTLS_SSL_RENEGOTIATION */
Manuel Pégourié-Gonnard296e3b12014-08-19 12:59:03 +02003461
Hanno Beckera0e20d02019-05-15 14:03:01 +01003462#if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003463 ret = report_cid_usage( &ssl, "after renegotiation" );
3464 if( ret != 0 )
3465 goto exit;
Hanno Beckera0e20d02019-05-15 14:03:01 +01003466#endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID */
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003467
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003468 /*
3469 * 7. Write the 200 Response
3470 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003471 mbedtls_printf( " > Write to client:" );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003472 fflush( stdout );
3473
3474 len = sprintf( (char *) buf, HTTP_RESPONSE,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003475 mbedtls_ssl_get_ciphersuite( &ssl ) );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003476
Andrzej Kurek30e731d2017-10-12 13:50:29 +02003477 /* Add padding to the response to reach opt.response_size in length */
3478 if( opt.response_size != DFL_RESPONSE_SIZE &&
3479 len < opt.response_size )
3480 {
3481 memset( buf + len, 'B', opt.response_size - len );
3482 len += opt.response_size - len;
3483 }
3484
3485 /* Truncate if response size is smaller than the "natural" size */
3486 if( opt.response_size != DFL_RESPONSE_SIZE &&
3487 len > opt.response_size )
3488 {
3489 len = opt.response_size;
3490
3491 /* Still end with \r\n unless that's really not possible */
3492 if( len >= 2 ) buf[len - 2] = '\r';
3493 if( len >= 1 ) buf[len - 1] = '\n';
3494 }
3495
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003496 if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003497 {
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003498 for( written = 0, frags = 0; written < len; written += ret, frags++ )
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003499 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003500 while( ( ret = mbedtls_ssl_write( &ssl, buf + written, len - written ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003501 <= 0 )
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003502 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003503 if( ret == MBEDTLS_ERR_NET_CONN_RESET )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003504 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003505 mbedtls_printf( " failed\n ! peer closed the connection\n\n" );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003506 goto reset;
3507 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003508
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003509 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003510 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003511 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003512 goto reset;
3513 }
Hanno Becker16970d22017-10-10 15:56:37 +01003514
3515 /* For event-driven IO, wait for socket to become available */
3516 if( opt.event == 1 /* level triggered IO */ )
3517 {
3518#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003519 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003520#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003521 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003522#endif
3523 }
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003524 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003525 }
3526 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003527 else /* Not stream, so datagram */
3528 {
Hanno Becker16970d22017-10-10 15:56:37 +01003529 while( 1 )
3530 {
3531 ret = mbedtls_ssl_write( &ssl, buf, len );
3532
Gilles Peskinea36ac4f2018-04-26 08:05:02 +02003533 if( ! mbedtls_status_is_ssl_in_progress( ret ) )
Hanno Becker16970d22017-10-10 15:56:37 +01003534 break;
3535
3536 /* For event-driven IO, wait for socket to become available */
3537 if( opt.event == 1 /* level triggered IO */ )
3538 {
3539#if defined(MBEDTLS_TIMING_C)
Hanno Becker197a91c2017-10-31 10:58:53 +00003540 idle( &client_fd, &timer, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003541#else
Hanno Becker197a91c2017-10-31 10:58:53 +00003542 idle( &client_fd, ret );
Hanno Becker16970d22017-10-10 15:56:37 +01003543#endif
3544 }
3545 }
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003546
3547 if( ret < 0 )
3548 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003549 mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret );
Manuel Pégourié-Gonnard2d87e412014-10-13 18:38:36 +02003550 goto reset;
3551 }
3552
3553 frags = 1;
3554 written = ret;
3555 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003556
Manuel Pégourié-Gonnardbd7ce632013-07-17 15:34:17 +02003557 buf[written] = '\0';
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003558 mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf );
Manuel Pégourié-Gonnarda92ed482015-01-14 10:46:08 +01003559 ret = 0;
Manuel Pégourié-Gonnardf3dc2f62013-10-29 18:17:41 +01003560
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003561 /*
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003562 * 7b. Simulate serialize/deserialize and go back to data exchange
3563 */
Jarno Lamsabbc7b412019-06-04 11:06:31 +03003564#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003565 if( opt.serialize != 0 )
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003566 {
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03003567 size_t buf_len;
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003568
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003569 mbedtls_printf( " . Serializing live connection..." );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003570
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03003571 ret = mbedtls_ssl_context_save( &ssl, NULL, 0, &buf_len );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003572 if( ret != MBEDTLS_ERR_SSL_BUFFER_TOO_SMALL )
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003573 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03003574 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003575 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003576
3577 goto exit;
3578 }
3579
Jarno Lamsa15b3a7a2019-06-06 15:10:07 +03003580 if( ( context_buf = mbedtls_calloc( 1, buf_len ) ) == NULL )
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003581 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03003582 mbedtls_printf( " failed\n ! Couldn't allocate buffer for "
3583 "serialized context" );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003584
3585 goto exit;
3586 }
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02003587 context_buf_len = buf_len;
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003588
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003589 if( ( ret = mbedtls_ssl_context_save( &ssl, context_buf,
3590 buf_len, &buf_len ) ) != 0 )
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003591 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003592 mbedtls_printf( " failed\n ! mbedtls_ssl_context_save returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003593 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003594
3595 goto exit;
3596 }
3597
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003598 mbedtls_printf( " ok\n" );
3599
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003600 /* Save serialized context to the 'opt.context_file' as a base64 code */
3601 if( 0 < strlen( opt.context_file ) )
3602 {
3603 FILE *b64_file;
3604 uint8_t *b64_buf;
3605 size_t b64_len;
3606
3607 mbedtls_printf( " . Save serialized context to a file... " );
3608
3609 mbedtls_base64_encode( NULL, 0, &b64_len, context_buf, buf_len );
3610
3611 if( ( b64_buf = mbedtls_calloc( 1, b64_len ) ) == NULL )
3612 {
3613 mbedtls_printf( "failed\n ! Couldn't allocate buffer for "
3614 "the base64 code\n" );
3615 goto exit;
3616 }
3617
3618 if( ( ret = mbedtls_base64_encode( b64_buf, b64_len, &b64_len,
3619 context_buf, buf_len ) ) != 0 )
3620 {
3621 mbedtls_printf( "failed\n ! mbedtls_base64_encode returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003622 "-0x%x\n", (unsigned int) -ret );
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003623 mbedtls_free( b64_buf );
3624 goto exit;
3625 }
3626
3627 if( ( b64_file = fopen( opt.context_file, "w" ) ) == NULL )
3628 {
3629 mbedtls_printf( "failed\n ! Cannot open '%s' for writing.\n",
3630 opt.context_file );
3631 mbedtls_free( b64_buf );
3632 goto exit;
3633 }
3634
3635 if( b64_len != fwrite( b64_buf, 1, b64_len, b64_file ) )
3636 {
3637 mbedtls_printf( "failed\n ! fwrite(%ld bytes) failed\n",
3638 (long) b64_len );
3639 mbedtls_free( b64_buf );
3640 fclose( b64_file );
3641 goto exit;
3642 }
3643
3644 mbedtls_free( b64_buf );
3645 fclose( b64_file );
3646
3647 mbedtls_printf( "ok\n" );
3648 }
3649
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003650 /*
3651 * This simulates a workflow where you have a long-lived server
3652 * instance, potentially with a pool of ssl_context objects, and you
3653 * just want to re-use one while the connection is inactive: in that
3654 * case you can just reset() it, and then it's ready to receive
3655 * serialized data from another connection (or the same here).
3656 */
3657 if( opt.serialize == 1 )
3658 {
Manuel Pégourié-Gonnard9df5a822019-07-23 14:51:09 +02003659 /* nothing to do here, done by context_save() already */
Piotr Nowicki136bebf2020-04-17 14:37:00 +02003660 mbedtls_printf( " . Context has been reset... ok\n" );
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003661 }
3662
3663 /*
3664 * This simulates a workflow where you have one server instance per
3665 * connection, and want to release it entire when the connection is
3666 * inactive, and spawn it again when needed again - this would happen
3667 * between ssl_free() and ssl_init() below, together with any other
3668 * teardown/startup code needed - for example, preparing the
3669 * ssl_config again (see section 3 "setup stuff" in this file).
3670 */
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003671 if( opt.serialize == 2 )
3672 {
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003673 mbedtls_printf( " . Freeing and reinitializing context..." );
3674
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003675 mbedtls_ssl_free( &ssl );
3676
3677 mbedtls_ssl_init( &ssl );
3678
3679 if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 )
3680 {
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003681 mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003682 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003683 goto exit;
3684 }
3685
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003686 /*
3687 * This illustrates the minimum amount of things you need to set
3688 * up, however you could set up much more if desired, for example
3689 * if you want to share your set up code between the case of
3690 * establishing a new connection and this case.
3691 */
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003692 if( opt.nbio == 2 )
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003693 mbedtls_ssl_set_bio( &ssl, &client_fd, delayed_send,
3694 delayed_recv, NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003695 else
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003696 mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send,
3697 mbedtls_net_recv,
3698 opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003699
Jarno Lamsa8e253212019-06-13 11:45:06 +03003700#if defined(MBEDTLS_TIMING_C)
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003701 mbedtls_ssl_set_timer_cb( &ssl, &timer,
3702 mbedtls_timing_set_delay,
3703 mbedtls_timing_get_delay );
Jarno Lamsa8e253212019-06-13 11:45:06 +03003704#endif /* MBEDTLS_TIMING_C */
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003705
3706 mbedtls_printf( " ok\n" );
Jarno Lamsa304d61c2019-06-06 10:40:52 +03003707 }
3708
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003709 mbedtls_printf( " . Deserializing connection..." );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003710
Jarno Lamsaddf72a12019-06-13 12:22:50 +03003711 if( ( ret = mbedtls_ssl_context_load( &ssl, context_buf,
3712 buf_len ) ) != 0 )
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003713 {
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03003714 mbedtls_printf( "failed\n ! mbedtls_ssl_context_load returned "
Kenneth Soerensen518d4352020-04-01 17:22:45 +02003715 "-0x%x\n\n", (unsigned int) -ret );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003716
3717 goto exit;
3718 }
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003719
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02003720 mbedtls_free( context_buf );
3721 context_buf = NULL;
3722 context_buf_len = 0;
3723
Manuel Pégourié-Gonnarda88399c2019-07-12 10:41:55 +02003724 mbedtls_printf( " ok\n" );
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003725 }
Jarno Lamsa93c6ff22019-06-04 15:36:18 +03003726#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
Jarno Lamsa5a3a16c2019-05-29 15:41:21 +03003727
3728 /*
3729 * 7c. Continue doing data exchanges?
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003730 */
Manuel Pégourié-Gonnard6a0017b2015-01-22 10:33:29 +00003731 if( --exchanges_left > 0 )
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02003732 goto data_exchange;
3733
3734 /*
3735 * 8. Done, cleanly close the connection
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003736 */
3737close_notify:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003738 mbedtls_printf( " . Closing the connection..." );
Manuel Pégourié-Gonnard6b0d2682014-03-25 11:24:43 +01003739
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003740 /* No error checking, the connection might be closed already */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003741 do ret = mbedtls_ssl_close_notify( &ssl );
Manuel Pégourié-Gonnard88369942015-05-06 16:19:31 +01003742 while( ret == MBEDTLS_ERR_SSL_WANT_WRITE );
Manuel Pégourié-Gonnard994f8b52014-10-09 19:56:44 +02003743 ret = 0;
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003744
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003745 mbedtls_printf( " done\n" );
Rich Evansf90016a2015-01-19 14:26:37 +00003746
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003747 goto reset;
3748
Manuel Pégourié-Gonnarde08660e2014-08-16 11:28:40 +02003749 /*
3750 * Cleanup and exit
3751 */
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003752exit:
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003753#ifdef MBEDTLS_ERROR_C
gabor-mezei-armde472172020-09-04 14:44:25 +02003754 if( ret != 0 )
3755 {
3756 char error_buf[100];
3757 mbedtls_strerror( ret, error_buf, 100 );
3758 mbedtls_printf("Last error was: -0x%X - %s\n\n", (unsigned int) -ret, error_buf );
3759 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003760#endif
3761
gabor-mezei-armde472172020-09-04 14:44:25 +02003762 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3763 {
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003764 mbedtls_printf( " . Cleaning up..." );
3765 fflush( stdout );
3766 }
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003767
Manuel Pégourié-Gonnard3d7d00a2015-06-30 15:55:03 +02003768 mbedtls_net_free( &client_fd );
3769 mbedtls_net_free( &listen_fd );
Paul Bakker0c226102014-04-17 16:02:36 +02003770
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003771#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3772 mbedtls_dhm_free( &dhm );
Paul Bakkera317a982014-06-18 16:44:11 +02003773#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003774#if defined(MBEDTLS_X509_CRT_PARSE_C)
3775 mbedtls_x509_crt_free( &cacert );
3776 mbedtls_x509_crt_free( &srvcert );
3777 mbedtls_pk_free( &pkey );
3778 mbedtls_x509_crt_free( &srvcert2 );
3779 mbedtls_pk_free( &pkey2 );
Paul Bakkered27a042013-04-18 22:46:23 +02003780#endif
Gilles Peskine44817442018-06-13 18:09:28 +02003781#if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
3782 for( i = 0; (size_t) i < ssl_async_keys.slots_used; i++ )
3783 {
3784 if( ssl_async_keys.slots[i].pk_owned )
3785 {
3786 mbedtls_pk_free( ssl_async_keys.slots[i].pk );
3787 mbedtls_free( ssl_async_keys.slots[i].pk );
3788 ssl_async_keys.slots[i].pk = NULL;
3789 }
3790 }
3791#endif
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02003792#if defined(SNI_OPTION)
Manuel Pégourié-Gonnard5d917ff2014-02-21 16:52:06 +01003793 sni_free( sni_info );
3794#endif
Gilles Peskineeccd8882020-03-10 12:19:08 +01003795#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED)
gabor-mezei-armde472172020-09-04 14:44:25 +02003796 ret = psk_free( psk_info );
3797 if( ( ret != 0 ) && ( opt.query_config_mode == DFL_QUERY_CONFIG_MODE ) )
3798 mbedtls_printf( "Failed to list of opaque PSKs - error was %d\n", ret );
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003799#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003800#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_FS_IO)
3801 mbedtls_dhm_free( &dhm );
Manuel Pégourié-Gonnard4505ed32014-06-19 20:56:52 +02003802#endif
Paul Bakkered27a042013-04-18 22:46:23 +02003803
Gilles Peskineeccd8882020-03-10 12:19:08 +01003804#if defined(MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED) && \
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00003805 defined(MBEDTLS_USE_PSA_CRYPTO)
Hanno Becker1d911cd2018-11-15 13:06:09 +00003806 if( opt.psk_opaque != 0 )
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00003807 {
3808 /* This is ok even if the slot hasn't been
3809 * initialized (we might have jumed here
3810 * immediately because of bad cmd line params,
3811 * for example). */
Hanno Becker1d911cd2018-11-15 13:06:09 +00003812 status = psa_destroy_key( psk_slot );
gabor-mezei-armde472172020-09-04 14:44:25 +02003813 if( ( status != PSA_SUCCESS ) &&
3814 ( opt.query_config_mode == DFL_QUERY_CONFIG_MODE ) )
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00003815 {
Ronald Cronadc2ff22020-09-16 16:49:27 +02003816 mbedtls_printf( "Failed to destroy key slot %u - error was %d",
Ronald Cronc9851142020-11-13 10:08:52 +01003817 (unsigned) psk_slot, (int) status );
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00003818 }
3819 }
Gilles Peskineeccd8882020-03-10 12:19:08 +01003820#endif /* MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED &&
Hanno Beckerc43b6ea2018-11-05 13:48:43 +00003821 MBEDTLS_USE_PSA_CRYPTO */
3822
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003823 mbedtls_ssl_free( &ssl );
Manuel Pégourié-Gonnarddef0bbe2015-05-04 14:56:36 +02003824 mbedtls_ssl_config_free( &conf );
Gilles Peskinef1cb75f2021-01-13 18:46:01 +01003825 rng_free( &rng );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003826
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003827#if defined(MBEDTLS_SSL_CACHE_C)
3828 mbedtls_ssl_cache_free( &cache );
Paul Bakker0a597072012-09-25 21:55:46 +00003829#endif
Manuel Pégourié-Gonnardd59675d2015-05-19 15:28:00 +02003830#if defined(MBEDTLS_SSL_SESSION_TICKETS)
3831 mbedtls_ssl_ticket_free( &ticket_ctx );
3832#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003833#if defined(MBEDTLS_SSL_COOKIE_C)
3834 mbedtls_ssl_cookie_free( &cookie_ctx );
Manuel Pégourié-Gonnardd485d192014-07-23 14:56:15 +02003835#endif
Paul Bakker0a597072012-09-25 21:55:46 +00003836
Hanno Becker095d9cf2018-10-09 12:39:13 +01003837 mbedtls_free( buf );
3838
Manuel Pégourié-Gonnard3309a672019-07-15 10:31:11 +02003839#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
3840 if( context_buf != NULL )
3841 mbedtls_platform_zeroize( context_buf, context_buf_len );
3842 mbedtls_free( context_buf );
3843#endif
3844
Gilles Peskine414e7172021-02-03 00:04:08 +01003845#if defined(MBEDTLS_USE_PSA_CRYPTO)
3846 mbedtls_psa_crypto_free( );
3847#endif
3848
Gilles Peskine60fe6602021-02-16 18:56:42 +01003849#if defined(MBEDTLS_TEST_HOOKS)
Gilles Peskined0a46e52021-02-03 00:03:03 +01003850 /* Let test hooks detect errors such as resource leaks.
3851 * Don't do it in query_config mode, because some test code prints
3852 * information to stdout and this gets mixed with the regular output. */
3853 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
Gilles Peskine53dea742021-02-02 22:55:06 +01003854 {
Gilles Peskined0a46e52021-02-03 00:03:03 +01003855 if( test_hooks_failure_detected( ) )
3856 {
3857 if( ret == 0 )
3858 ret = 1;
3859 mbedtls_printf( "Test hooks detected errors.\n" );
3860 }
Gilles Peskine53dea742021-02-02 22:55:06 +01003861 }
3862 test_hooks_free( );
Gilles Peskine60fe6602021-02-16 18:56:42 +01003863#endif /* MBEDTLS_TEST_HOOKS */
Gilles Peskine53dea742021-02-02 22:55:06 +01003864
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003865#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
3866#if defined(MBEDTLS_MEMORY_DEBUG)
3867 mbedtls_memory_buffer_alloc_status();
Paul Bakker82024bf2013-07-04 11:52:32 +02003868#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003869 mbedtls_memory_buffer_alloc_free();
Gilles Peskine34babfc2021-02-16 15:44:37 +01003870#endif /* MBEDTLS_MEMORY_BUFFER_ALLOC_C */
Paul Bakker82024bf2013-07-04 11:52:32 +02003871
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003872 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3873 {
3874 mbedtls_printf( " done.\n" );
Manuel Pégourié-Gonnardf29e5de2014-11-21 11:54:41 +01003875
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003876#if defined(_WIN32)
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003877 mbedtls_printf( " + Press Enter to exit this program.\n" );
3878 fflush( stdout ); getchar();
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003879#endif
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003880 }
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003881
Paul Bakkerdbd79ca2013-07-24 16:28:35 +02003882 // Shell can not handle large exit numbers -> 1 for errors
3883 if( ret < 0 )
3884 ret = 1;
3885
gabor-mezei-arma9eecf12020-07-07 11:11:02 +02003886 if( opt.query_config_mode == DFL_QUERY_CONFIG_MODE )
3887 mbedtls_exit( ret );
3888 else
3889 mbedtls_exit( query_config_ret );
Paul Bakkerb60b95f2012-09-25 09:05:17 +00003890}
Gilles Peskineb4df7542021-01-08 21:20:09 +01003891#endif /* !MBEDTLS_SSL_TEST_IMPOSSIBLE && MBEDTLS_SSL_SRV_C */