| 1 | /*
|
|---|
| 2 | * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
|
|---|
| 3 | *
|
|---|
| 4 | * Licensed under the Apache License 2.0 (the "License"). You may not use
|
|---|
| 5 | * this file except in compliance with the License. You can obtain a copy
|
|---|
| 6 | * in the file LICENSE in the source distribution or at
|
|---|
| 7 | * https://www.openssl.org/source/license.html
|
|---|
| 8 | */
|
|---|
| 9 |
|
|---|
| 10 | #include <openssl/opensslconf.h>
|
|---|
| 11 |
|
|---|
| 12 | #include <openssl/ssl.h>
|
|---|
| 13 | #include <openssl/srp.h>
|
|---|
| 14 |
|
|---|
| 15 | #define PORT "4433"
|
|---|
| 16 | #define PROTOCOL "tcp"
|
|---|
| 17 |
|
|---|
| 18 | #define SSL_VERSION_ALLOWS_RENEGOTIATION(s) \
|
|---|
| 19 | (SSL_is_dtls(s) || (SSL_version(s) < TLS1_3_VERSION))
|
|---|
| 20 |
|
|---|
| 21 | typedef int (*do_server_cb)(int s, int stype, int prot, unsigned char *context);
|
|---|
| 22 | int report_server_accept(BIO *out, int asock, int with_address, int with_pid);
|
|---|
| 23 | int do_server(int *accept_sock, const char *host, const char *port,
|
|---|
| 24 | int family, int type, int protocol, do_server_cb cb,
|
|---|
| 25 | unsigned char *context, int naccept, BIO *bio_s_out);
|
|---|
| 26 |
|
|---|
| 27 | int verify_callback(int ok, X509_STORE_CTX *ctx);
|
|---|
| 28 |
|
|---|
| 29 | int set_cert_stuff(SSL_CTX *ctx, char *cert_file, char *key_file);
|
|---|
| 30 | int set_cert_key_stuff(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key,
|
|---|
| 31 | STACK_OF(X509) *chain, int build_chain);
|
|---|
| 32 | int ssl_print_sigalgs(BIO *out, SSL *s);
|
|---|
| 33 | int ssl_print_point_formats(BIO *out, SSL *s);
|
|---|
| 34 | int ssl_print_groups(BIO *out, SSL *s, int noshared);
|
|---|
| 35 | int ssl_print_tmp_key(BIO *out, SSL *s);
|
|---|
| 36 | int init_client(int *sock, const char *host, const char *port,
|
|---|
| 37 | const char *bindhost, const char *bindport,
|
|---|
| 38 | int family, int type, int protocol);
|
|---|
| 39 | int should_retry(int i);
|
|---|
| 40 | void do_ssl_shutdown(SSL *ssl);
|
|---|
| 41 |
|
|---|
| 42 | long bio_dump_callback(BIO *bio, int cmd, const char *argp, size_t len,
|
|---|
| 43 | int argi, long argl, int ret, size_t *processed);
|
|---|
| 44 |
|
|---|
| 45 | void apps_ssl_info_callback(const SSL *s, int where, int ret);
|
|---|
| 46 | void msg_cb(int write_p, int version, int content_type, const void *buf,
|
|---|
| 47 | size_t len, SSL *ssl, void *arg);
|
|---|
| 48 | void tlsext_cb(SSL *s, int client_server, int type, const unsigned char *data,
|
|---|
| 49 | int len, void *arg);
|
|---|
| 50 |
|
|---|
| 51 | int generate_cookie_callback(SSL *ssl, unsigned char *cookie,
|
|---|
| 52 | unsigned int *cookie_len);
|
|---|
| 53 | int verify_cookie_callback(SSL *ssl, const unsigned char *cookie,
|
|---|
| 54 | unsigned int cookie_len);
|
|---|
| 55 |
|
|---|
| 56 | #ifdef __VMS /* 31 char symbol name limit */
|
|---|
| 57 | # define generate_stateless_cookie_callback generate_stateless_cookie_cb
|
|---|
| 58 | # define verify_stateless_cookie_callback verify_stateless_cookie_cb
|
|---|
| 59 | #endif
|
|---|
| 60 |
|
|---|
| 61 | int generate_stateless_cookie_callback(SSL *ssl, unsigned char *cookie,
|
|---|
| 62 | size_t *cookie_len);
|
|---|
| 63 | int verify_stateless_cookie_callback(SSL *ssl, const unsigned char *cookie,
|
|---|
| 64 | size_t cookie_len);
|
|---|
| 65 |
|
|---|
| 66 | typedef struct ssl_excert_st SSL_EXCERT;
|
|---|
| 67 |
|
|---|
| 68 | void ssl_ctx_set_excert(SSL_CTX *ctx, SSL_EXCERT *exc);
|
|---|
| 69 | void ssl_excert_free(SSL_EXCERT *exc);
|
|---|
| 70 | int args_excert(int option, SSL_EXCERT **pexc);
|
|---|
| 71 | int load_excert(SSL_EXCERT **pexc);
|
|---|
| 72 | void print_verify_detail(SSL *s, BIO *bio);
|
|---|
| 73 | void print_ssl_summary(SSL *s);
|
|---|
| 74 | int config_ctx(SSL_CONF_CTX *cctx, STACK_OF(OPENSSL_STRING) *str, SSL_CTX *ctx);
|
|---|
| 75 | int ssl_ctx_add_crls(SSL_CTX *ctx, STACK_OF(X509_CRL) *crls,
|
|---|
| 76 | int crl_download);
|
|---|
| 77 | int ssl_load_stores(SSL_CTX *ctx, const char *vfyCApath,
|
|---|
| 78 | const char *vfyCAfile, const char *vfyCAstore,
|
|---|
| 79 | const char *chCApath, const char *chCAfile,
|
|---|
| 80 | const char *chCAstore, STACK_OF(X509_CRL) *crls,
|
|---|
| 81 | int crl_download);
|
|---|
| 82 | void ssl_ctx_security_debug(SSL_CTX *ctx, int verbose);
|
|---|
| 83 | int set_keylog_file(SSL_CTX *ctx, const char *keylog_file);
|
|---|
| 84 | void print_ca_names(BIO *bio, SSL *s);
|
|---|
| 85 | void ssl_print_secure_renegotiation_notes(BIO *bio, SSL *s);
|
|---|
| 86 |
|
|---|
| 87 | #ifndef OPENSSL_NO_SRP
|
|---|
| 88 | /* The client side SRP context that we pass to all SRP related callbacks */
|
|---|
| 89 | typedef struct srp_arg_st {
|
|---|
| 90 | char *srppassin;
|
|---|
| 91 | char *srplogin;
|
|---|
| 92 | int msg; /* copy from c_msg */
|
|---|
| 93 | int debug; /* copy from c_debug */
|
|---|
| 94 | int amp; /* allow more groups */
|
|---|
| 95 | int strength; /* minimal size for N */
|
|---|
| 96 | } SRP_ARG;
|
|---|
| 97 |
|
|---|
| 98 | int set_up_srp_arg(SSL_CTX *ctx, SRP_ARG *srp_arg, int srp_lateuser, int c_msg,
|
|---|
| 99 | int c_debug);
|
|---|
| 100 | void set_up_dummy_srp(SSL_CTX *ctx);
|
|---|
| 101 |
|
|---|
| 102 | /* The server side SRP context that we pass to all SRP related callbacks */
|
|---|
| 103 | typedef struct srpsrvparm_st {
|
|---|
| 104 | char *login;
|
|---|
| 105 | SRP_VBASE *vb;
|
|---|
| 106 | SRP_user_pwd *user;
|
|---|
| 107 | } srpsrvparm;
|
|---|
| 108 |
|
|---|
| 109 | int set_up_srp_verifier_file(SSL_CTX *ctx, srpsrvparm *srp_callback_parm,
|
|---|
| 110 | char *srpuserseed, char *srp_verifier_file);
|
|---|
| 111 | void lookup_srp_user(srpsrvparm *srp_callback_parm, BIO *bio_s_out);
|
|---|
| 112 | #endif /* OPENSSL_NO_SRP */
|
|---|
