Lines Matching refs:ssl
175 int ssl3_connect(SSL *ssl) { in ssl3_connect() argument
177 void (*cb)(const SSL *ssl, int type, int value) = NULL; in ssl3_connect()
181 assert(ssl->handshake_func == ssl3_connect); in ssl3_connect()
182 assert(!ssl->server); in ssl3_connect()
183 assert(!SSL_IS_DTLS(ssl)); in ssl3_connect()
188 if (ssl->info_callback != NULL) { in ssl3_connect()
189 cb = ssl->info_callback; in ssl3_connect()
190 } else if (ssl->ctx->info_callback != NULL) { in ssl3_connect()
191 cb = ssl->ctx->info_callback; in ssl3_connect()
194 ssl->in_handshake++; in ssl3_connect()
197 state = ssl->state; in ssl3_connect()
199 switch (ssl->state) { in ssl3_connect()
202 cb(ssl, SSL_CB_HANDSHAKE_START, 1); in ssl3_connect()
205 if (ssl->init_buf == NULL) { in ssl3_connect()
213 ssl->init_buf = buf; in ssl3_connect()
217 if (!ssl_init_wbio_buffer(ssl, 0)) { in ssl3_connect()
224 if (!ssl3_init_handshake_buffer(ssl)) { in ssl3_connect()
230 ssl->state = SSL3_ST_CW_CLNT_HELLO_A; in ssl3_connect()
231 ssl->init_num = 0; in ssl3_connect()
236 ssl->shutdown = 0; in ssl3_connect()
237 ret = ssl3_send_client_hello(ssl); in ssl3_connect()
241 ssl->state = SSL3_ST_CR_SRVR_HELLO_A; in ssl3_connect()
242 ssl->init_num = 0; in ssl3_connect()
245 if (ssl->bbio != ssl->wbio) { in ssl3_connect()
246 ssl->wbio = BIO_push(ssl->bbio, ssl->wbio); in ssl3_connect()
253 ret = ssl3_get_server_hello(ssl); in ssl3_connect()
258 if (ssl->hit) { in ssl3_connect()
259 ssl->state = SSL3_ST_CR_CHANGE; in ssl3_connect()
260 if (ssl->tlsext_ticket_expected) { in ssl3_connect()
262 ssl->state = SSL3_ST_CR_SESSION_TICKET_A; in ssl3_connect()
265 ssl->state = SSL3_ST_CR_CERT_A; in ssl3_connect()
267 ssl->init_num = 0; in ssl3_connect()
272 if (ssl_cipher_has_server_public_key(ssl->s3->tmp.new_cipher)) { in ssl3_connect()
273 ret = ssl3_get_server_certificate(ssl); in ssl3_connect()
277 if (ssl->s3->tmp.certificate_status_expected) { in ssl3_connect()
278 ssl->state = SSL3_ST_CR_CERT_STATUS_A; in ssl3_connect()
280 ssl->state = SSL3_ST_VERIFY_SERVER_CERT; in ssl3_connect()
284 ssl->state = SSL3_ST_CR_KEY_EXCH_A; in ssl3_connect()
286 ssl->init_num = 0; in ssl3_connect()
290 ret = ssl3_verify_server_cert(ssl); in ssl3_connect()
295 ssl->state = SSL3_ST_CR_KEY_EXCH_A; in ssl3_connect()
296 ssl->init_num = 0; in ssl3_connect()
301 ret = ssl3_get_server_key_exchange(ssl); in ssl3_connect()
305 ssl->state = SSL3_ST_CR_CERT_REQ_A; in ssl3_connect()
306 ssl->init_num = 0; in ssl3_connect()
311 ret = ssl3_get_certificate_request(ssl); in ssl3_connect()
315 ssl->state = SSL3_ST_CR_SRVR_DONE_A; in ssl3_connect()
316 ssl->init_num = 0; in ssl3_connect()
321 ret = ssl3_get_server_done(ssl); in ssl3_connect()
325 if (ssl->s3->tmp.cert_req) { in ssl3_connect()
326 ssl->state = SSL3_ST_CW_CERT_A; in ssl3_connect()
328 ssl->state = SSL3_ST_CW_KEY_EXCH_A; in ssl3_connect()
330 ssl->init_num = 0; in ssl3_connect()
338 ret = ssl3_send_client_certificate(ssl); in ssl3_connect()
342 ssl->state = SSL3_ST_CW_KEY_EXCH_A; in ssl3_connect()
343 ssl->init_num = 0; in ssl3_connect()
348 ret = ssl3_send_client_key_exchange(ssl); in ssl3_connect()
354 if (ssl->s3->tmp.cert_req == 1) { in ssl3_connect()
355 ssl->state = SSL3_ST_CW_CERT_VRFY_A; in ssl3_connect()
357 ssl->state = SSL3_ST_CW_CHANGE_A; in ssl3_connect()
360 ssl->init_num = 0; in ssl3_connect()
366 ret = ssl3_send_cert_verify(ssl); in ssl3_connect()
370 ssl->state = SSL3_ST_CW_CHANGE_A; in ssl3_connect()
371 ssl->init_num = 0; in ssl3_connect()
376 ret = ssl3_send_change_cipher_spec(ssl, SSL3_ST_CW_CHANGE_A, in ssl3_connect()
382 ssl->state = SSL3_ST_CW_FINISHED_A; in ssl3_connect()
383 if (ssl->s3->tlsext_channel_id_valid) { in ssl3_connect()
384 ssl->state = SSL3_ST_CW_CHANNEL_ID_A; in ssl3_connect()
386 if (ssl->s3->next_proto_neg_seen) { in ssl3_connect()
387 ssl->state = SSL3_ST_CW_NEXT_PROTO_A; in ssl3_connect()
389 ssl->init_num = 0; in ssl3_connect()
391 ssl->session->cipher = ssl->s3->tmp.new_cipher; in ssl3_connect()
392 if (!ssl->enc_method->setup_key_block(ssl) || in ssl3_connect()
393 !ssl->enc_method->change_cipher_state( in ssl3_connect()
394 ssl, SSL3_CHANGE_CIPHER_CLIENT_WRITE)) { in ssl3_connect()
403 ret = ssl3_send_next_proto(ssl); in ssl3_connect()
408 if (ssl->s3->tlsext_channel_id_valid) { in ssl3_connect()
409 ssl->state = SSL3_ST_CW_CHANNEL_ID_A; in ssl3_connect()
411 ssl->state = SSL3_ST_CW_FINISHED_A; in ssl3_connect()
417 ret = ssl3_send_channel_id(ssl); in ssl3_connect()
421 ssl->state = SSL3_ST_CW_FINISHED_A; in ssl3_connect()
426 ret = ssl3_send_finished(ssl, SSL3_ST_CW_FINISHED_A, in ssl3_connect()
428 ssl->enc_method->client_finished_label, in ssl3_connect()
429 ssl->enc_method->client_finished_label_len); in ssl3_connect()
433 ssl->state = SSL3_ST_CW_FLUSH; in ssl3_connect()
435 if (ssl->hit) { in ssl3_connect()
436 ssl->s3->tmp.next_state = SSL_ST_OK; in ssl3_connect()
442 ret = tls1_record_handshake_hashes_for_channel_id(ssl); in ssl3_connect()
446 if ((SSL_get_mode(ssl) & SSL_MODE_ENABLE_FALSE_START) && in ssl3_connect()
447 ssl3_can_false_start(ssl) && in ssl3_connect()
450 !ssl->s3->initial_handshake_complete) { in ssl3_connect()
451 ssl->s3->tmp.next_state = SSL3_ST_FALSE_START; in ssl3_connect()
454 if (ssl->tlsext_ticket_expected) { in ssl3_connect()
455 ssl->s3->tmp.next_state = SSL3_ST_CR_SESSION_TICKET_A; in ssl3_connect()
457 ssl->s3->tmp.next_state = SSL3_ST_CR_CHANGE; in ssl3_connect()
461 ssl->init_num = 0; in ssl3_connect()
466 ret = ssl3_get_new_session_ticket(ssl); in ssl3_connect()
470 ssl->state = SSL3_ST_CR_CHANGE; in ssl3_connect()
471 ssl->init_num = 0; in ssl3_connect()
476 ret = ssl3_get_cert_status(ssl); in ssl3_connect()
480 ssl->state = SSL3_ST_VERIFY_SERVER_CERT; in ssl3_connect()
481 ssl->init_num = 0; in ssl3_connect()
485 ret = ssl->method->ssl_read_change_cipher_spec(ssl); in ssl3_connect()
490 if (!ssl3_do_change_cipher_spec(ssl)) { in ssl3_connect()
494 ssl->state = SSL3_ST_CR_FINISHED_A; in ssl3_connect()
499 ret = ssl3_get_finished(ssl, SSL3_ST_CR_FINISHED_A, in ssl3_connect()
505 if (ssl->hit) { in ssl3_connect()
506 ssl->state = SSL3_ST_CW_CHANGE_A; in ssl3_connect()
508 ssl->state = SSL_ST_OK; in ssl3_connect()
510 ssl->init_num = 0; in ssl3_connect()
514 ssl->rwstate = SSL_WRITING; in ssl3_connect()
515 if (BIO_flush(ssl->wbio) <= 0) { in ssl3_connect()
519 ssl->rwstate = SSL_NOTHING; in ssl3_connect()
520 ssl->state = ssl->s3->tmp.next_state; in ssl3_connect()
525 if (ssl->tlsext_ticket_expected) { in ssl3_connect()
526 ssl->state = SSL3_ST_CR_SESSION_TICKET_A; in ssl3_connect()
528 ssl->state = SSL3_ST_CR_CHANGE; in ssl3_connect()
530 ssl->s3->tmp.in_false_start = 1; in ssl3_connect()
532 ssl_free_wbio_buffer(ssl); in ssl3_connect()
538 ssl3_cleanup_key_block(ssl); in ssl3_connect()
540 BUF_MEM_free(ssl->init_buf); in ssl3_connect()
541 ssl->init_buf = NULL; in ssl3_connect()
544 ssl_free_wbio_buffer(ssl); in ssl3_connect()
546 const int is_initial_handshake = !ssl->s3->initial_handshake_complete; in ssl3_connect()
548 ssl->init_num = 0; in ssl3_connect()
549 ssl->s3->tmp.in_false_start = 0; in ssl3_connect()
550 ssl->s3->initial_handshake_complete = 1; in ssl3_connect()
554 ssl_update_cache(ssl, SSL_SESS_CACHE_CLIENT); in ssl3_connect()
561 cb(ssl, SSL_CB_HANDSHAKE_DONE, 1); in ssl3_connect()
572 if (!ssl->s3->tmp.reuse_message && !skip) { in ssl3_connect()
573 if (cb != NULL && ssl->state != state) { in ssl3_connect()
574 new_state = ssl->state; in ssl3_connect()
575 ssl->state = state; in ssl3_connect()
576 cb(ssl, SSL_CB_CONNECT_LOOP, 1); in ssl3_connect()
577 ssl->state = new_state; in ssl3_connect()
584 ssl->in_handshake--; in ssl3_connect()
587 cb(ssl, SSL_CB_CONNECT_EXIT, ret); in ssl3_connect()
592 static int ssl3_write_client_cipher_list(SSL *ssl, CBB *out) { in ssl3_write_client_cipher_list() argument
594 ssl_set_client_disabled(ssl); in ssl3_write_client_cipher_list()
601 STACK_OF(SSL_CIPHER) *ciphers = SSL_get_ciphers(ssl); in ssl3_write_client_cipher_list()
608 if ((cipher->algorithm_mkey & ssl->cert->mask_k) || in ssl3_write_client_cipher_list()
609 (cipher->algorithm_auth & ssl->cert->mask_a)) { in ssl3_write_client_cipher_list()
613 ssl3_version_from_wire(ssl, ssl->client_version)) { in ssl3_write_client_cipher_list()
630 if (ssl->client_version == SSL3_VERSION && in ssl3_write_client_cipher_list()
631 !ssl->s3->initial_handshake_complete) { in ssl3_write_client_cipher_list()
636 ssl->s3->tmp.extensions.sent |= (1u << 0); in ssl3_write_client_cipher_list()
639 if ((ssl->mode & SSL_MODE_SEND_FALLBACK_SCSV) && in ssl3_write_client_cipher_list()
647 int ssl3_send_client_hello(SSL *ssl) { in ssl3_send_client_hello() argument
648 if (ssl->state == SSL3_ST_CW_CLNT_HELLO_B) { in ssl3_send_client_hello()
649 return ssl_do_write(ssl); in ssl3_send_client_hello()
654 if (SSL_IS_DTLS(ssl) && !ssl3_init_handshake_buffer(ssl)) { in ssl3_send_client_hello()
662 assert(ssl->state == SSL3_ST_CW_CLNT_HELLO_A); in ssl3_send_client_hello()
663 if (!ssl->s3->have_version) { in ssl3_send_client_hello()
664 uint16_t max_version = ssl3_get_max_client_version(ssl); in ssl3_send_client_hello()
671 ssl->version = max_version; in ssl3_send_client_hello()
676 ssl->client_version = max_version; in ssl3_send_client_hello()
681 if (ssl->session != NULL && in ssl3_send_client_hello()
682 (ssl->session->session_id_length == 0 || ssl->session->not_resumable || in ssl3_send_client_hello()
683 ssl->session->timeout < (long)(time(NULL) - ssl->session->time) || in ssl3_send_client_hello()
684 (!SSL_IS_DTLS(ssl) && ssl->session->ssl_version > ssl->version) || in ssl3_send_client_hello()
685 (SSL_IS_DTLS(ssl) && ssl->session->ssl_version < ssl->version))) { in ssl3_send_client_hello()
686 SSL_set_session(ssl, NULL); in ssl3_send_client_hello()
691 if ((!SSL_IS_DTLS(ssl) || !ssl->d1->send_cookie) && in ssl3_send_client_hello()
692 !ssl_fill_hello_random(ssl->s3->client_random, in ssl3_send_client_hello()
693 sizeof(ssl->s3->client_random), 0 /* client */)) { in ssl3_send_client_hello()
698 int has_session = ssl->session != NULL && in ssl3_send_client_hello()
699 !ssl->s3->initial_handshake_complete; in ssl3_send_client_hello()
702 if (!CBB_init_fixed(&cbb, ssl_handshake_start(ssl), in ssl3_send_client_hello()
703 ssl->init_buf->max - SSL_HM_HEADER_LENGTH(ssl)) || in ssl3_send_client_hello()
704 !CBB_add_u16(&cbb, ssl->client_version) || in ssl3_send_client_hello()
705 !CBB_add_bytes(&cbb, ssl->s3->client_random, SSL3_RANDOM_SIZE) || in ssl3_send_client_hello()
708 !CBB_add_bytes(&child, ssl->session->session_id, in ssl3_send_client_hello()
709 ssl->session->session_id_length))) { in ssl3_send_client_hello()
713 if (SSL_IS_DTLS(ssl)) { in ssl3_send_client_hello()
715 !CBB_add_bytes(&child, ssl->d1->cookie, ssl->d1->cookie_len)) { in ssl3_send_client_hello()
721 if (!ssl3_write_client_cipher_list(ssl, &cbb) || in ssl3_send_client_hello()
724 !ssl_add_clienthello_tlsext(ssl, &cbb, in ssl3_send_client_hello()
725 CBB_len(&cbb) + SSL_HM_HEADER_LENGTH(ssl)) || in ssl3_send_client_hello()
727 !ssl_set_handshake_header(ssl, SSL3_MT_CLIENT_HELLO, length)) { in ssl3_send_client_hello()
731 ssl->state = SSL3_ST_CW_CLNT_HELLO_B; in ssl3_send_client_hello()
732 return ssl_do_write(ssl); in ssl3_send_client_hello()
739 int ssl3_get_server_hello(SSL *ssl) { in ssl3_get_server_hello() argument
742 CERT *ct = ssl->cert; in ssl3_get_server_hello()
749 n = ssl->method->ssl_get_message(ssl, SSL3_ST_CR_SRVR_HELLO_A, in ssl3_get_server_hello()
769 CBS_init(&server_hello, ssl->init_msg, n); in ssl3_get_server_hello()
782 assert(ssl->s3->have_version == ssl->s3->initial_handshake_complete); in ssl3_get_server_hello()
783 if (!ssl->s3->have_version) { in ssl3_get_server_hello()
784 if (!ssl3_is_version_enabled(ssl, server_version)) { in ssl3_get_server_hello()
786 ssl->version = server_version; in ssl3_get_server_hello()
789 ssl->s3->have_version = 1; in ssl3_get_server_hello()
793 ssl->version = server_version; in ssl3_get_server_hello()
794 ssl->enc_method = ssl3_get_enc_method(server_version); in ssl3_get_server_hello()
795 assert(ssl->enc_method != NULL); in ssl3_get_server_hello()
798 ssl->s3->have_version = 1; in ssl3_get_server_hello()
799 } else if (server_version != ssl->version) { in ssl3_get_server_hello()
806 memcpy(ssl->s3->server_random, CBS_data(&server_random), SSL3_RANDOM_SIZE); in ssl3_get_server_hello()
808 assert(ssl->session == NULL || ssl->session->session_id_length > 0); in ssl3_get_server_hello()
809 if (!ssl->s3->initial_handshake_complete && ssl->session != NULL && in ssl3_get_server_hello()
810 CBS_mem_equal(&session_id, ssl->session->session_id, in ssl3_get_server_hello()
811 ssl->session->session_id_length)) { in ssl3_get_server_hello()
812 if (ssl->sid_ctx_length != ssl->session->sid_ctx_length || in ssl3_get_server_hello()
813 memcmp(ssl->session->sid_ctx, ssl->sid_ctx, ssl->sid_ctx_length)) { in ssl3_get_server_hello()
820 ssl->hit = 1; in ssl3_get_server_hello()
824 ssl->hit = 0; in ssl3_get_server_hello()
825 if (!ssl_get_new_session(ssl, 0 /* client */)) { in ssl3_get_server_hello()
829 ssl->session->session_id_length = CBS_len(&session_id); in ssl3_get_server_hello()
830 memcpy(ssl->session->session_id, CBS_data(&session_id), in ssl3_get_server_hello()
845 ssl3_version_from_wire(ssl, ssl->version)) { in ssl3_get_server_hello()
851 sk = ssl_get_ciphers_by_id(ssl); in ssl3_get_server_hello()
859 if (ssl->hit) { in ssl3_get_server_hello()
860 if (ssl->session->cipher != c) { in ssl3_get_server_hello()
865 if (ssl->session->ssl_version != ssl->version) { in ssl3_get_server_hello()
871 ssl->s3->tmp.new_cipher = c; in ssl3_get_server_hello()
874 if (!ssl3_init_handshake_hash(ssl)) { in ssl3_get_server_hello()
881 if (!SSL_USE_SIGALGS(ssl) || ssl->hit) { in ssl3_get_server_hello()
882 ssl3_free_handshake_buffer(ssl); in ssl3_get_server_hello()
893 if (!ssl_parse_serverhello_tlsext(ssl, &server_hello)) { in ssl3_get_server_hello()
906 if (ssl->hit && in ssl3_get_server_hello()
907 ssl->s3->tmp.extended_master_secret != in ssl3_get_server_hello()
908 ssl->session->extended_master_secret) { in ssl3_get_server_hello()
910 if (ssl->session->extended_master_secret) { in ssl3_get_server_hello()
921 ssl3_send_alert(ssl, SSL3_AL_FATAL, al); in ssl3_get_server_hello()
929 static int ssl3_check_leaf_certificate(SSL *ssl, X509 *leaf) { in ssl3_check_leaf_certificate() argument
937 const SSL_CIPHER *cipher = ssl->s3->tmp.new_cipher; in ssl3_check_leaf_certificate()
956 if (!tls1_check_ec_cert(ssl, leaf)) { in ssl3_check_leaf_certificate()
969 int ssl3_get_server_certificate(SSL *ssl) { in ssl3_get_server_certificate() argument
978 n = ssl->method->ssl_get_message(ssl, SSL3_ST_CR_CERT_A, SSL3_ST_CR_CERT_B, in ssl3_get_server_certificate()
979 SSL3_MT_CERTIFICATE, (long)ssl->max_cert_list, in ssl3_get_server_certificate()
986 CBS_init(&cbs, ssl->init_msg, n); in ssl3_get_server_certificate()
1030 if (!ssl3_check_leaf_certificate(ssl, leaf)) { in ssl3_get_server_certificate()
1037 sk_X509_pop_free(ssl->session->cert_chain, X509_free); in ssl3_get_server_certificate()
1038 ssl->session->cert_chain = sk; in ssl3_get_server_certificate()
1041 X509_free(ssl->session->peer); in ssl3_get_server_certificate()
1042 ssl->session->peer = X509_up_ref(leaf); in ssl3_get_server_certificate()
1044 ssl->session->verify_result = ssl->verify_result; in ssl3_get_server_certificate()
1050 ssl3_send_alert(ssl, SSL3_AL_FATAL, al); in ssl3_get_server_certificate()
1060 int ssl3_get_server_key_exchange(SSL *ssl) { in ssl3_get_server_key_exchange() argument
1073 n = ssl->method->ssl_get_message(ssl, SSL3_ST_CR_KEY_EXCH_A, in ssl3_get_server_key_exchange()
1074 SSL3_ST_CR_KEY_EXCH_B, -1, ssl->max_cert_list, in ssl3_get_server_key_exchange()
1080 if (ssl->s3->tmp.message_type != SSL3_MT_SERVER_KEY_EXCHANGE) { in ssl3_get_server_key_exchange()
1081 if (ssl_cipher_requires_server_key_exchange(ssl->s3->tmp.new_cipher)) { in ssl3_get_server_key_exchange()
1083 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNEXPECTED_MESSAGE); in ssl3_get_server_key_exchange()
1089 if (ssl->s3->tmp.new_cipher->algorithm_auth & SSL_aPSK) { in ssl3_get_server_key_exchange()
1092 OPENSSL_free(ssl->s3->tmp.peer_psk_identity_hint); in ssl3_get_server_key_exchange()
1093 ssl->s3->tmp.peer_psk_identity_hint = NULL; in ssl3_get_server_key_exchange()
1095 ssl->s3->tmp.reuse_message = 1; in ssl3_get_server_key_exchange()
1100 CBS_init(&server_key_exchange, ssl->init_msg, n); in ssl3_get_server_key_exchange()
1103 alg_k = ssl->s3->tmp.new_cipher->algorithm_mkey; in ssl3_get_server_key_exchange()
1104 alg_a = ssl->s3->tmp.new_cipher->algorithm_auth; in ssl3_get_server_key_exchange()
1133 if (!CBS_strdup(&psk_identity_hint, &ssl->s3->tmp.peer_psk_identity_hint)) { in ssl3_get_server_key_exchange()
1164 ssl->session->key_exchange_info = DH_num_bits(dh); in ssl3_get_server_key_exchange()
1165 if (ssl->session->key_exchange_info < 1024) { in ssl3_get_server_key_exchange()
1168 } else if (ssl->session->key_exchange_info > 4096) { in ssl3_get_server_key_exchange()
1176 SSL_ECDH_CTX_init_for_dhe(&ssl->s3->tmp.ecdh_ctx, dh); in ssl3_get_server_key_exchange()
1181 if (!CBS_stow(&dh_Ys, &ssl->s3->tmp.peer_key, &peer_key_len)) { in ssl3_get_server_key_exchange()
1185 assert(sizeof(ssl->s3->tmp.peer_key_len) == 2 && peer_key_len <= 0xffff); in ssl3_get_server_key_exchange()
1186 ssl->s3->tmp.peer_key_len = (uint16_t)peer_key_len; in ssl3_get_server_key_exchange()
1200 ssl->session->key_exchange_info = curve_id; in ssl3_get_server_key_exchange()
1203 if (!tls1_check_curve_id(ssl, curve_id)) { in ssl3_get_server_key_exchange()
1211 if (!SSL_ECDH_CTX_init(&ssl->s3->tmp.ecdh_ctx, curve_id) || in ssl3_get_server_key_exchange()
1212 !CBS_stow(&point, &ssl->s3->tmp.peer_key, &peer_key_len)) { in ssl3_get_server_key_exchange()
1216 assert(sizeof(ssl->s3->tmp.peer_key_len) == 2 && peer_key_len <= 0xffff); in ssl3_get_server_key_exchange()
1217 ssl->s3->tmp.peer_key_len = (uint16_t)peer_key_len; in ssl3_get_server_key_exchange()
1231 if (ssl_cipher_has_server_public_key(ssl->s3->tmp.new_cipher)) { in ssl3_get_server_key_exchange()
1232 pkey = X509_get_pubkey(ssl->session->peer); in ssl3_get_server_key_exchange()
1237 if (SSL_USE_SIGALGS(ssl)) { in ssl3_get_server_key_exchange()
1245 if (!tls12_check_peer_sigalg(ssl, &md, &al, hash, signature, pkey)) { in ssl3_get_server_key_exchange()
1248 ssl->s3->tmp.server_key_exchange_hash = hash; in ssl3_get_server_key_exchange()
1265 !EVP_DigestVerifyUpdate(&md_ctx, ssl->s3->client_random, in ssl3_get_server_key_exchange()
1267 !EVP_DigestVerifyUpdate(&md_ctx, ssl->s3->server_random, in ssl3_get_server_key_exchange()
1293 ssl3_send_alert(ssl, SSL3_AL_FATAL, al); in ssl3_get_server_key_exchange()
1307 int ssl3_get_certificate_request(SSL *ssl) { in ssl3_get_certificate_request() argument
1317 n = ssl->method->ssl_get_message(ssl, SSL3_ST_CR_CERT_REQ_A, in ssl3_get_certificate_request()
1318 SSL3_ST_CR_CERT_REQ_B, -1, ssl->max_cert_list, in ssl3_get_certificate_request()
1325 ssl->s3->tmp.cert_req = 0; in ssl3_get_certificate_request()
1327 if (ssl->s3->tmp.message_type == SSL3_MT_SERVER_DONE) { in ssl3_get_certificate_request()
1328 ssl->s3->tmp.reuse_message = 1; in ssl3_get_certificate_request()
1331 ssl3_free_handshake_buffer(ssl); in ssl3_get_certificate_request()
1335 if (ssl->s3->tmp.message_type != SSL3_MT_CERTIFICATE_REQUEST) { in ssl3_get_certificate_request()
1336 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNEXPECTED_MESSAGE); in ssl3_get_certificate_request()
1341 CBS_init(&cbs, ssl->init_msg, n); in ssl3_get_certificate_request()
1351 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1356 if (!CBS_stow(&certificate_types, &ssl->s3->tmp.certificate_types, in ssl3_get_certificate_request()
1357 &ssl->s3->tmp.num_certificate_types)) { in ssl3_get_certificate_request()
1358 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR); in ssl3_get_certificate_request()
1362 if (SSL_USE_SIGALGS(ssl)) { in ssl3_get_certificate_request()
1365 !tls1_parse_peer_sigalgs(ssl, &supported_signature_algorithms)) { in ssl3_get_certificate_request()
1366 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1374 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1383 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1393 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1399 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1405 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_certificate_request()
1417 ssl->s3->tmp.cert_req = 1; in ssl3_get_certificate_request()
1418 sk_X509_NAME_pop_free(ssl->s3->tmp.ca_names, X509_NAME_free); in ssl3_get_certificate_request()
1419 ssl->s3->tmp.ca_names = ca_sk; in ssl3_get_certificate_request()
1429 int ssl3_get_new_session_ticket(SSL *ssl) { in ssl3_get_new_session_ticket() argument
1431 long n = ssl->method->ssl_get_message( in ssl3_get_new_session_ticket()
1432 ssl, SSL3_ST_CR_SESSION_TICKET_A, SSL3_ST_CR_SESSION_TICKET_B, in ssl3_get_new_session_ticket()
1441 CBS_init(&new_session_ticket, ssl->init_msg, n); in ssl3_get_new_session_ticket()
1455 ssl->tlsext_ticket_expected = 0; in ssl3_get_new_session_ticket()
1459 if (ssl->hit) { in ssl3_get_new_session_ticket()
1465 if (!SSL_SESSION_to_bytes_for_ticket(ssl->session, &bytes, &bytes_len)) { in ssl3_get_new_session_ticket()
1476 SSL_SESSION_free(ssl->session); in ssl3_get_new_session_ticket()
1477 ssl->session = new_session; in ssl3_get_new_session_ticket()
1480 if (!CBS_stow(&ticket, &ssl->session->tlsext_tick, in ssl3_get_new_session_ticket()
1481 &ssl->session->tlsext_ticklen)) { in ssl3_get_new_session_ticket()
1485 ssl->session->tlsext_tick_lifetime_hint = ticket_lifetime_hint; in ssl3_get_new_session_ticket()
1490 if (!EVP_Digest(CBS_data(&ticket), CBS_len(&ticket), ssl->session->session_id, in ssl3_get_new_session_ticket()
1491 &ssl->session->session_id_length, EVP_sha256(), NULL)) { in ssl3_get_new_session_ticket()
1498 ssl3_send_alert(ssl, SSL3_AL_FATAL, al); in ssl3_get_new_session_ticket()
1503 int ssl3_get_cert_status(SSL *ssl) { in ssl3_get_cert_status() argument
1509 n = ssl->method->ssl_get_message( in ssl3_get_cert_status()
1510 ssl, SSL3_ST_CR_CERT_STATUS_A, SSL3_ST_CR_CERT_STATUS_B, in ssl3_get_cert_status()
1517 if (ssl->s3->tmp.message_type != SSL3_MT_CERTIFICATE_STATUS) { in ssl3_get_cert_status()
1520 ssl->s3->tmp.reuse_message = 1; in ssl3_get_cert_status()
1524 CBS_init(&certificate_status, ssl->init_msg, n); in ssl3_get_cert_status()
1535 if (!CBS_stow(&ocsp_response, &ssl->session->ocsp_response, in ssl3_get_cert_status()
1536 &ssl->session->ocsp_response_length)) { in ssl3_get_cert_status()
1544 ssl3_send_alert(ssl, SSL3_AL_FATAL, al); in ssl3_get_cert_status()
1548 int ssl3_get_server_done(SSL *ssl) { in ssl3_get_server_done() argument
1552 n = ssl->method->ssl_get_message(ssl, SSL3_ST_CR_SRVR_DONE_A, in ssl3_get_server_done()
1563 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); in ssl3_get_server_done()
1574 int ssl3_send_client_key_exchange(SSL *ssl) { in ssl3_send_client_key_exchange() argument
1575 if (ssl->state == SSL3_ST_CW_KEY_EXCH_B) { in ssl3_send_client_key_exchange()
1576 return ssl_do_write(ssl); in ssl3_send_client_key_exchange()
1578 assert(ssl->state == SSL3_ST_CW_KEY_EXCH_A); in ssl3_send_client_key_exchange()
1583 if (!CBB_init_fixed(&cbb, ssl_handshake_start(ssl), in ssl3_send_client_key_exchange()
1584 ssl->init_buf->max - SSL_HM_HEADER_LENGTH(ssl))) { in ssl3_send_client_key_exchange()
1588 uint32_t alg_k = ssl->s3->tmp.new_cipher->algorithm_mkey; in ssl3_send_client_key_exchange()
1589 uint32_t alg_a = ssl->s3->tmp.new_cipher->algorithm_auth; in ssl3_send_client_key_exchange()
1595 if (ssl->psk_client_callback == NULL) { in ssl3_send_client_key_exchange()
1602 psk_len = ssl->psk_client_callback( in ssl3_send_client_key_exchange()
1603 ssl, ssl->s3->tmp.peer_psk_identity_hint, identity, sizeof(identity), in ssl3_send_client_key_exchange()
1607 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE); in ssl3_send_client_key_exchange()
1612 OPENSSL_free(ssl->session->psk_identity); in ssl3_send_client_key_exchange()
1613 ssl->session->psk_identity = BUF_strdup(identity); in ssl3_send_client_key_exchange()
1614 if (ssl->session->psk_identity == NULL) { in ssl3_send_client_key_exchange()
1638 EVP_PKEY *pkey = X509_get_pubkey(ssl->session->peer); in ssl3_send_client_key_exchange()
1650 ssl->session->key_exchange_info = EVP_PKEY_bits(pkey); in ssl3_send_client_key_exchange()
1653 pms[0] = ssl->client_version >> 8; in ssl3_send_client_key_exchange()
1654 pms[1] = ssl->client_version & 0xff; in ssl3_send_client_key_exchange()
1662 if (ssl->version > SSL3_VERSION) { in ssl3_send_client_key_exchange()
1674 !ssl_log_rsa_client_key_exchange(ssl, ptr, enc_pms_len, pms, pms_len) || in ssl3_send_client_key_exchange()
1691 !SSL_ECDH_CTX_generate_keypair(&ssl->s3->tmp.ecdh_ctx, &child) || in ssl3_send_client_key_exchange()
1698 if (!SSL_ECDH_CTX_compute_secret(&ssl->s3->tmp.ecdh_ctx, &pms, &pms_len, in ssl3_send_client_key_exchange()
1699 &alert, ssl->s3->tmp.peer_key, in ssl3_send_client_key_exchange()
1700 ssl->s3->tmp.peer_key_len)) { in ssl3_send_client_key_exchange()
1701 ssl3_send_alert(ssl, SSL3_AL_FATAL, alert); in ssl3_send_client_key_exchange()
1706 SSL_ECDH_CTX_cleanup(&ssl->s3->tmp.ecdh_ctx); in ssl3_send_client_key_exchange()
1707 OPENSSL_free(ssl->s3->tmp.peer_key); in ssl3_send_client_key_exchange()
1708 ssl->s3->tmp.peer_key = NULL; in ssl3_send_client_key_exchange()
1720 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE); in ssl3_send_client_key_exchange()
1753 !ssl_set_handshake_header(ssl, SSL3_MT_CLIENT_KEY_EXCHANGE, length)) { in ssl3_send_client_key_exchange()
1756 ssl->state = SSL3_ST_CW_KEY_EXCH_B; in ssl3_send_client_key_exchange()
1758 ssl->session->master_key_length = ssl->enc_method->generate_master_secret( in ssl3_send_client_key_exchange()
1759 ssl, ssl->session->master_key, pms, pms_len); in ssl3_send_client_key_exchange()
1760 if (ssl->session->master_key_length == 0) { in ssl3_send_client_key_exchange()
1763 ssl->session->extended_master_secret = ssl->s3->tmp.extended_master_secret; in ssl3_send_client_key_exchange()
1768 return ssl_do_write(ssl); in ssl3_send_client_key_exchange()
1778 int ssl3_send_cert_verify(SSL *ssl) { in ssl3_send_cert_verify() argument
1779 if (ssl->state == SSL3_ST_CW_CERT_VRFY_C) { in ssl3_send_cert_verify()
1780 return ssl_do_write(ssl); in ssl3_send_cert_verify()
1784 if (!CBB_init_fixed(&cbb, ssl_handshake_start(ssl), in ssl3_send_cert_verify()
1785 ssl->init_buf->max - SSL_HM_HEADER_LENGTH(ssl))) { in ssl3_send_cert_verify()
1789 assert(ssl_has_private_key(ssl)); in ssl3_send_cert_verify()
1791 const size_t max_sig_len = ssl_private_key_max_signature_len(ssl); in ssl3_send_cert_verify()
1794 if (ssl->state == SSL3_ST_CW_CERT_VRFY_A) { in ssl3_send_cert_verify()
1797 if (SSL_USE_SIGALGS(ssl)) { in ssl3_send_cert_verify()
1798 md = tls1_choose_signing_digest(ssl); in ssl3_send_cert_verify()
1799 if (!tls12_add_sigandhash(ssl, &cbb, md)) { in ssl3_send_cert_verify()
1809 if (!ssl3_cert_verify_hash(ssl, digest, &digest_len, &md, in ssl3_send_cert_verify()
1810 ssl_private_key_type(ssl))) { in ssl3_send_cert_verify()
1815 ssl3_free_handshake_buffer(ssl); in ssl3_send_cert_verify()
1823 sign_result = ssl_private_key_sign(ssl, ptr, &sig_len, max_sig_len, md, in ssl3_send_cert_verify()
1826 assert(ssl->state == SSL3_ST_CW_CERT_VRFY_B); in ssl3_send_cert_verify()
1831 if ((SSL_USE_SIGALGS(ssl) && !CBB_did_write(&cbb, 2)) || in ssl3_send_cert_verify()
1837 ssl_private_key_sign_complete(ssl, ptr, &sig_len, max_sig_len); in ssl3_send_cert_verify()
1842 ssl->rwstate = SSL_NOTHING; in ssl3_send_cert_verify()
1845 ssl->rwstate = SSL_NOTHING; in ssl3_send_cert_verify()
1848 ssl->rwstate = SSL_PRIVATE_KEY_OPERATION; in ssl3_send_cert_verify()
1849 ssl->state = SSL3_ST_CW_CERT_VRFY_B; in ssl3_send_cert_verify()
1856 !ssl_set_handshake_header(ssl, SSL3_MT_CERTIFICATE_VERIFY, length)) { in ssl3_send_cert_verify()
1860 ssl->state = SSL3_ST_CW_CERT_VRFY_C; in ssl3_send_cert_verify()
1861 return ssl_do_write(ssl); in ssl3_send_cert_verify()
1870 static int ssl3_has_client_certificate(SSL *ssl) { in ssl3_has_client_certificate() argument
1871 return ssl->cert && ssl->cert->x509 && ssl_has_private_key(ssl); in ssl3_has_client_certificate()
1874 int ssl3_send_client_certificate(SSL *ssl) { in ssl3_send_client_certificate() argument
1879 if (ssl->state == SSL3_ST_CW_CERT_A) { in ssl3_send_client_certificate()
1881 if (ssl->cert->cert_cb) { in ssl3_send_client_certificate()
1882 i = ssl->cert->cert_cb(ssl, ssl->cert->cert_cb_arg); in ssl3_send_client_certificate()
1884 ssl->rwstate = SSL_X509_LOOKUP; in ssl3_send_client_certificate()
1888 ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_INTERNAL_ERROR); in ssl3_send_client_certificate()
1891 ssl->rwstate = SSL_NOTHING; in ssl3_send_client_certificate()
1894 if (ssl3_has_client_certificate(ssl)) { in ssl3_send_client_certificate()
1895 ssl->state = SSL3_ST_CW_CERT_C; in ssl3_send_client_certificate()
1897 ssl->state = SSL3_ST_CW_CERT_B; in ssl3_send_client_certificate()
1902 if (ssl->state == SSL3_ST_CW_CERT_B) { in ssl3_send_client_certificate()
1906 i = ssl_do_client_cert_cb(ssl, &x509, &pkey); in ssl3_send_client_certificate()
1908 ssl->rwstate = SSL_X509_LOOKUP; in ssl3_send_client_certificate()
1911 ssl->rwstate = SSL_NOTHING; in ssl3_send_client_certificate()
1913 ssl->state = SSL3_ST_CW_CERT_B; in ssl3_send_client_certificate()
1914 if (!SSL_use_certificate(ssl, x509) || !SSL_use_PrivateKey(ssl, pkey)) { in ssl3_send_client_certificate()
1924 if (i && !ssl3_has_client_certificate(ssl)) { in ssl3_send_client_certificate()
1928 if (ssl->version == SSL3_VERSION) { in ssl3_send_client_certificate()
1929 ssl->s3->tmp.cert_req = 0; in ssl3_send_client_certificate()
1930 ssl3_send_alert(ssl, SSL3_AL_WARNING, SSL_AD_NO_CERTIFICATE); in ssl3_send_client_certificate()
1933 ssl->s3->tmp.cert_req = 2; in ssl3_send_client_certificate()
1936 ssl3_free_handshake_buffer(ssl); in ssl3_send_client_certificate()
1941 ssl->state = SSL3_ST_CW_CERT_C; in ssl3_send_client_certificate()
1944 if (ssl->state == SSL3_ST_CW_CERT_C) { in ssl3_send_client_certificate()
1945 if (ssl->s3->tmp.cert_req == 2) { in ssl3_send_client_certificate()
1947 uint8_t *p = ssl_handshake_start(ssl); in ssl3_send_client_certificate()
1949 if (!ssl_set_handshake_header(ssl, SSL3_MT_CERTIFICATE, 3)) { in ssl3_send_client_certificate()
1952 } else if (!ssl3_output_cert_chain(ssl)) { in ssl3_send_client_certificate()
1955 ssl->state = SSL3_ST_CW_CERT_D; in ssl3_send_client_certificate()
1959 return ssl_do_write(ssl); in ssl3_send_client_certificate()
1962 int ssl3_send_next_proto(SSL *ssl) { in ssl3_send_next_proto() argument
1963 if (ssl->state == SSL3_ST_CW_NEXT_PROTO_B) { in ssl3_send_next_proto()
1964 return ssl_do_write(ssl); in ssl3_send_next_proto()
1967 assert(ssl->state == SSL3_ST_CW_NEXT_PROTO_A); in ssl3_send_next_proto()
1970 size_t padding_len = 32 - ((ssl->next_proto_negotiated_len + 2) % 32); in ssl3_send_next_proto()
1975 if (!CBB_init_fixed(&cbb, ssl_handshake_start(ssl), in ssl3_send_next_proto()
1976 ssl->init_buf->max - SSL_HM_HEADER_LENGTH(ssl)) || in ssl3_send_next_proto()
1978 !CBB_add_bytes(&child, ssl->next_proto_negotiated, in ssl3_send_next_proto()
1979 ssl->next_proto_negotiated_len) || in ssl3_send_next_proto()
1983 !ssl_set_handshake_header(ssl, SSL3_MT_NEXT_PROTO, length)) { in ssl3_send_next_proto()
1989 ssl->state = SSL3_ST_CW_NEXT_PROTO_B; in ssl3_send_next_proto()
1990 return ssl_do_write(ssl); in ssl3_send_next_proto()
1993 int ssl3_send_channel_id(SSL *ssl) { in ssl3_send_channel_id() argument
1994 if (ssl->state == SSL3_ST_CW_CHANNEL_ID_B) { in ssl3_send_channel_id()
1995 return ssl_do_write(ssl); in ssl3_send_channel_id()
1998 assert(ssl->state == SSL3_ST_CW_CHANNEL_ID_A); in ssl3_send_channel_id()
2000 if (ssl->tlsext_channel_id_private == NULL && in ssl3_send_channel_id()
2001 ssl->ctx->channel_id_cb != NULL) { in ssl3_send_channel_id()
2003 ssl->ctx->channel_id_cb(ssl, &key); in ssl3_send_channel_id()
2005 !SSL_set1_tls_channel_id(ssl, key)) { in ssl3_send_channel_id()
2012 if (ssl->tlsext_channel_id_private == NULL) { in ssl3_send_channel_id()
2013 ssl->rwstate = SSL_CHANNEL_ID_LOOKUP; in ssl3_send_channel_id()
2016 ssl->rwstate = SSL_NOTHING; in ssl3_send_channel_id()
2018 EC_KEY *ec_key = EVP_PKEY_get0_EC_KEY(ssl->tlsext_channel_id_private); in ssl3_send_channel_id()
2037 if (!tls1_channel_id_hash(ssl, digest, &digest_len)) { in ssl3_send_channel_id()
2049 if (!CBB_init_fixed(&cbb, ssl_handshake_start(ssl), in ssl3_send_channel_id()
2050 ssl->init_buf->max - SSL_HM_HEADER_LENGTH(ssl)) || in ssl3_send_channel_id()
2058 !ssl_set_handshake_header(ssl, SSL3_MT_ENCRYPTED_EXTENSIONS, length)) { in ssl3_send_channel_id()
2064 ssl->state = SSL3_ST_CW_CHANNEL_ID_B; in ssl3_send_channel_id()
2065 ret = ssl_do_write(ssl); in ssl3_send_channel_id()
2074 int ssl_do_client_cert_cb(SSL *ssl, X509 **out_x509, EVP_PKEY **out_pkey) { in ssl_do_client_cert_cb() argument
2075 if (ssl->ctx->client_cert_cb == NULL) { in ssl_do_client_cert_cb()
2078 return ssl->ctx->client_cert_cb(ssl, out_x509, out_pkey); in ssl_do_client_cert_cb()
2081 int ssl3_verify_server_cert(SSL *ssl) { in ssl3_verify_server_cert() argument
2082 int ret = ssl_verify_cert_chain(ssl, ssl->session->cert_chain); in ssl3_verify_server_cert()
2083 if (ssl->verify_mode != SSL_VERIFY_NONE && ret <= 0) { in ssl3_verify_server_cert()
2084 int al = ssl_verify_alarm_type(ssl->verify_result); in ssl3_verify_server_cert()
2085 ssl3_send_alert(ssl, SSL3_AL_FATAL, al); in ssl3_verify_server_cert()