summaryrefslogtreecommitdiff
path: root/src/regress/lib/libssl/handshake
diff options
context:
space:
mode:
authorcvs2svn <admin@example.com>2021-08-30 17:27:46 +0000
committercvs2svn <admin@example.com>2021-08-30 17:27:46 +0000
commit4e4f5b4c833ba5285e001bdb6b832bdf91c43da3 (patch)
treeab301f051b9dd067fa28b0fe56806a2893b8161e /src/regress/lib/libssl/handshake
parent20a5de624e2e817be526407f2b8de078016ee258 (diff)
downloadopenbsd-tb_20210830.tar.gz
openbsd-tb_20210830.tar.bz2
openbsd-tb_20210830.zip
This commit was manufactured by cvs2git to create tag 'tb_20210830'.tb_20210830
Diffstat (limited to 'src/regress/lib/libssl/handshake')
-rw-r--r--src/regress/lib/libssl/handshake/Makefile44
-rw-r--r--src/regress/lib/libssl/handshake/handshake_table.c514
-rw-r--r--src/regress/lib/libssl/handshake/valid_handshakes_terminate.c57
3 files changed, 0 insertions, 615 deletions
diff --git a/src/regress/lib/libssl/handshake/Makefile b/src/regress/lib/libssl/handshake/Makefile
deleted file mode 100644
index aa0f70bd3b..0000000000
--- a/src/regress/lib/libssl/handshake/Makefile
+++ /dev/null
@@ -1,44 +0,0 @@
1# $OpenBSD: Makefile,v 1.8 2020/12/17 00:51:11 bluhm Exp $
2
3PROGS += handshake_table
4PROGS += valid_handshakes_terminate
5
6.for p in ${PROGS}
7REGRESS_TARGETS += run-$p
8.endfor
9
10LDADD = ${SSL_INT} -lcrypto
11DPADD = ${LIBCRYPTO} ${LIBSSL}
12WARNINGS = Yes
13CFLAGS += -DLIBRESSL_INTERNAL -Wundef -Werror -I${BSDSRCDIR}/lib/libssl
14
15print: handshake_table
16 @./handshake_table -C
17
18handshake.gv: handshake_table
19 ./handshake_table -g > $@.tmp
20 mv $@.tmp $@
21
22CLEANFILES += handshake.gv
23
24.for _FMT in png ps svg
25handshake.${_FMT}: handshake.gv
26 @if [ ! -x /usr/local/bin/dot ]; then \
27 echo "pkg_add graphviz to generate png"; \
28 false; \
29 fi
30 dot -T${_FMT} handshake.gv -o $@
31
32CLEANFILES += handshake.${_FMT}
33.endfor
34
35.for p in ${PROGS}
36run-$p: $p
37 ./$p
38
39.PHONY: run-$p
40.endfor
41
42.PHONY: print
43
44.include <bsd.regress.mk>
diff --git a/src/regress/lib/libssl/handshake/handshake_table.c b/src/regress/lib/libssl/handshake/handshake_table.c
deleted file mode 100644
index 88777f6fa8..0000000000
--- a/src/regress/lib/libssl/handshake/handshake_table.c
+++ /dev/null
@@ -1,514 +0,0 @@
1/* $OpenBSD: handshake_table.c,v 1.15 2020/05/14 18:04:19 tb Exp $ */
2/*
3 * Copyright (c) 2019 Theo Buehler <tb@openbsd.org>
4 *
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
8 *
9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 */
17
18#include <err.h>
19#include <stdint.h>
20#include <stdio.h>
21#include <stdlib.h>
22#include <unistd.h>
23
24#include "tls13_handshake.h"
25
26#define MAX_FLAGS (UINT8_MAX + 1)
27
28/*
29 * From RFC 8446:
30 *
31 * Appendix A. State Machine
32 *
33 * This appendix provides a summary of the legal state transitions for
34 * the client and server handshakes. State names (in all capitals,
35 * e.g., START) have no formal meaning but are provided for ease of
36 * comprehension. Actions which are taken only in certain circumstances
37 * are indicated in []. The notation "K_{send,recv} = foo" means "set
38 * the send/recv key to the given key".
39 *
40 * A.1. Client
41 *
42 * START <----+
43 * Send ClientHello | | Recv HelloRetryRequest
44 * [K_send = early data] | |
45 * v |
46 * / WAIT_SH ----+
47 * | | Recv ServerHello
48 * | | K_recv = handshake
49 * Can | V
50 * send | WAIT_EE
51 * early | | Recv EncryptedExtensions
52 * data | +--------+--------+
53 * | Using | | Using certificate
54 * | PSK | v
55 * | | WAIT_CERT_CR
56 * | | Recv | | Recv CertificateRequest
57 * | | Certificate | v
58 * | | | WAIT_CERT
59 * | | | | Recv Certificate
60 * | | v v
61 * | | WAIT_CV
62 * | | | Recv CertificateVerify
63 * | +> WAIT_FINISHED <+
64 * | | Recv Finished
65 * \ | [Send EndOfEarlyData]
66 * | K_send = handshake
67 * | [Send Certificate [+ CertificateVerify]]
68 * Can send | Send Finished
69 * app data --> | K_send = K_recv = application
70 * after here v
71 * CONNECTED
72 *
73 * Note that with the transitions as shown above, clients may send
74 * alerts that derive from post-ServerHello messages in the clear or
75 * with the early data keys. If clients need to send such alerts, they
76 * SHOULD first rekey to the handshake keys if possible.
77 *
78 */
79
80struct child {
81 enum tls13_message_type mt;
82 uint8_t flag;
83 uint8_t forced;
84 uint8_t illegal;
85};
86
87#define DEFAULT 0x00
88
89static struct child stateinfo[][TLS13_NUM_MESSAGE_TYPES] = {
90 [CLIENT_HELLO] = {
91 {SERVER_HELLO_RETRY_REQUEST, DEFAULT, 0, 0},
92 {SERVER_HELLO, WITHOUT_HRR, 0, 0},
93 },
94 [SERVER_HELLO_RETRY_REQUEST] = {
95 {CLIENT_HELLO_RETRY, DEFAULT, 0, 0},
96 },
97 [CLIENT_HELLO_RETRY] = {
98 {SERVER_HELLO, DEFAULT, 0, 0},
99 },
100 [SERVER_HELLO] = {
101 {SERVER_ENCRYPTED_EXTENSIONS, DEFAULT, 0, 0},
102 },
103 [SERVER_ENCRYPTED_EXTENSIONS] = {
104 {SERVER_CERTIFICATE_REQUEST, DEFAULT, 0, 0},
105 {SERVER_CERTIFICATE, WITHOUT_CR, 0, 0},
106 {SERVER_FINISHED, WITH_PSK, 0, 0},
107 },
108 [SERVER_CERTIFICATE_REQUEST] = {
109 {SERVER_CERTIFICATE, DEFAULT, 0, 0},
110 },
111 [SERVER_CERTIFICATE] = {
112 {SERVER_CERTIFICATE_VERIFY, DEFAULT, 0, 0},
113 },
114 [SERVER_CERTIFICATE_VERIFY] = {
115 {SERVER_FINISHED, DEFAULT, 0, 0},
116 },
117 [SERVER_FINISHED] = {
118 {CLIENT_FINISHED, DEFAULT, WITHOUT_CR | WITH_PSK, 0},
119 {CLIENT_CERTIFICATE, DEFAULT, 0, WITHOUT_CR | WITH_PSK},
120 },
121 [CLIENT_CERTIFICATE] = {
122 {CLIENT_FINISHED, DEFAULT, 0, 0},
123 {CLIENT_CERTIFICATE_VERIFY, WITH_CCV, 0, 0},
124 },
125 [CLIENT_CERTIFICATE_VERIFY] = {
126 {CLIENT_FINISHED, DEFAULT, 0, 0},
127 },
128 [CLIENT_FINISHED] = {
129 {APPLICATION_DATA, DEFAULT, 0, 0},
130 },
131 [APPLICATION_DATA] = {
132 {0, DEFAULT, 0, 0},
133 },
134};
135
136const size_t stateinfo_count = sizeof(stateinfo) / sizeof(stateinfo[0]);
137
138void build_table(enum tls13_message_type
139 table[MAX_FLAGS][TLS13_NUM_MESSAGE_TYPES],
140 struct child current, struct child end,
141 struct child path[], uint8_t flags, unsigned int depth);
142size_t count_handshakes(void);
143void edge(enum tls13_message_type start,
144 enum tls13_message_type end, uint8_t flag);
145const char *flag2str(uint8_t flag);
146void flag_label(uint8_t flag);
147void forced_edges(enum tls13_message_type start,
148 enum tls13_message_type end, uint8_t forced);
149int generate_graphics(void);
150void fprint_entry(FILE *stream,
151 enum tls13_message_type path[TLS13_NUM_MESSAGE_TYPES],
152 uint8_t flags);
153void fprint_flags(FILE *stream, uint8_t flags);
154const char *mt2str(enum tls13_message_type mt);
155__dead void usage(void);
156int verify_table(enum tls13_message_type
157 table[MAX_FLAGS][TLS13_NUM_MESSAGE_TYPES], int print);
158
159const char *
160flag2str(uint8_t flag)
161{
162 const char *ret;
163
164 if (flag & (flag - 1))
165 errx(1, "more than one bit is set");
166
167 switch (flag) {
168 case INITIAL:
169 ret = "INITIAL";
170 break;
171 case NEGOTIATED:
172 ret = "NEGOTIATED";
173 break;
174 case WITHOUT_CR:
175 ret = "WITHOUT_CR";
176 break;
177 case WITHOUT_HRR:
178 ret = "WITHOUT_HRR";
179 break;
180 case WITH_PSK:
181 ret = "WITH_PSK";
182 break;
183 case WITH_CCV:
184 ret = "WITH_CCV";
185 break;
186 case WITH_0RTT:
187 ret = "WITH_0RTT";
188 break;
189 default:
190 ret = "UNKNOWN";
191 }
192
193 return ret;
194}
195
196const char *
197mt2str(enum tls13_message_type mt)
198{
199 const char *ret;
200
201 switch (mt) {
202 case INVALID:
203 ret = "INVALID";
204 break;
205 case CLIENT_HELLO:
206 ret = "CLIENT_HELLO";
207 break;
208 case CLIENT_HELLO_RETRY:
209 ret = "CLIENT_HELLO_RETRY";
210 break;
211 case CLIENT_END_OF_EARLY_DATA:
212 ret = "CLIENT_END_OF_EARLY_DATA";
213 break;
214 case CLIENT_CERTIFICATE:
215 ret = "CLIENT_CERTIFICATE";
216 break;
217 case CLIENT_CERTIFICATE_VERIFY:
218 ret = "CLIENT_CERTIFICATE_VERIFY";
219 break;
220 case CLIENT_FINISHED:
221 ret = "CLIENT_FINISHED";
222 break;
223 case SERVER_HELLO:
224 ret = "SERVER_HELLO";
225 break;
226 case SERVER_HELLO_RETRY_REQUEST:
227 ret = "SERVER_HELLO_RETRY_REQUEST";
228 break;
229 case SERVER_ENCRYPTED_EXTENSIONS:
230 ret = "SERVER_ENCRYPTED_EXTENSIONS";
231 break;
232 case SERVER_CERTIFICATE:
233 ret = "SERVER_CERTIFICATE";
234 break;
235 case SERVER_CERTIFICATE_VERIFY:
236 ret = "SERVER_CERTIFICATE_VERIFY";
237 break;
238 case SERVER_CERTIFICATE_REQUEST:
239 ret = "SERVER_CERTIFICATE_REQUEST";
240 break;
241 case SERVER_FINISHED:
242 ret = "SERVER_FINISHED";
243 break;
244 case APPLICATION_DATA:
245 ret = "APPLICATION_DATA";
246 break;
247 case TLS13_NUM_MESSAGE_TYPES:
248 ret = "TLS13_NUM_MESSAGE_TYPES";
249 break;
250 default:
251 ret = "UNKNOWN";
252 break;
253 }
254
255 return ret;
256}
257
258void
259fprint_flags(FILE *stream, uint8_t flags)
260{
261 int first = 1, i;
262
263 if (flags == 0) {
264 fprintf(stream, "%s", flag2str(flags));
265 return;
266 }
267
268 for (i = 0; i < 8; i++) {
269 uint8_t set = flags & (1U << i);
270
271 if (set) {
272 fprintf(stream, "%s%s", first ? "" : " | ",
273 flag2str(set));
274 first = 0;
275 }
276 }
277}
278
279void
280fprint_entry(FILE *stream,
281 enum tls13_message_type path[TLS13_NUM_MESSAGE_TYPES], uint8_t flags)
282{
283 int i;
284
285 fprintf(stream, "\t[");
286 fprint_flags(stream, flags);
287 fprintf(stream, "] = {\n");
288
289 for (i = 0; i < TLS13_NUM_MESSAGE_TYPES; i++) {
290 if (path[i] == 0)
291 break;
292 fprintf(stream, "\t\t%s,\n", mt2str(path[i]));
293 }
294 fprintf(stream, "\t},\n");
295}
296
297void
298edge(enum tls13_message_type start, enum tls13_message_type end,
299 uint8_t flag)
300{
301 printf("\t%s -> %s", mt2str(start), mt2str(end));
302 flag_label(flag);
303 printf(";\n");
304}
305
306void
307flag_label(uint8_t flag)
308{
309 if (flag)
310 printf(" [label=\"%s\"]", flag2str(flag));
311}
312
313void
314forced_edges(enum tls13_message_type start, enum tls13_message_type end,
315 uint8_t forced)
316{
317 uint8_t forced_flag, i;
318
319 if (forced == 0)
320 return;
321
322 for (i = 0; i < 8; i++) {
323 forced_flag = forced & (1U << i);
324 if (forced_flag)
325 edge(start, end, forced_flag);
326 }
327}
328
329int
330generate_graphics(void)
331{
332 enum tls13_message_type start, end;
333 unsigned int child;
334 uint8_t flag;
335 uint8_t forced;
336
337 printf("digraph G {\n");
338 printf("\t%s [shape=box];\n", mt2str(CLIENT_HELLO));
339 printf("\t%s [shape=box];\n", mt2str(APPLICATION_DATA));
340
341 for (start = CLIENT_HELLO; start < APPLICATION_DATA; start++) {
342 for (child = 0; stateinfo[start][child].mt != 0; child++) {
343 end = stateinfo[start][child].mt;
344 flag = stateinfo[start][child].flag;
345 forced = stateinfo[start][child].forced;
346
347 if (forced == 0)
348 edge(start, end, flag);
349 else
350 forced_edges(start, end, forced);
351 }
352 }
353
354 printf("}\n");
355 return 0;
356}
357
358extern enum tls13_message_type handshakes[][TLS13_NUM_MESSAGE_TYPES];
359extern size_t handshake_count;
360
361size_t
362count_handshakes(void)
363{
364 size_t ret = 0, i;
365
366 for (i = 0; i < handshake_count; i++) {
367 if (handshakes[i][0] != INVALID)
368 ret++;
369 }
370
371 return ret;
372}
373
374void
375build_table(enum tls13_message_type table[MAX_FLAGS][TLS13_NUM_MESSAGE_TYPES],
376 struct child current, struct child end, struct child path[], uint8_t flags,
377 unsigned int depth)
378{
379 unsigned int i;
380
381 if (depth >= TLS13_NUM_MESSAGE_TYPES - 1)
382 errx(1, "recursed too deeply");
383
384 /* Record current node. */
385 path[depth++] = current;
386 flags |= current.flag;
387
388 /* If we haven't reached the end, recurse over the children. */
389 if (current.mt != end.mt) {
390 for (i = 0; stateinfo[current.mt][i].mt != 0; i++) {
391 struct child child = stateinfo[current.mt][i];
392 int forced = stateinfo[current.mt][i].forced;
393 int illegal = stateinfo[current.mt][i].illegal;
394
395 if ((forced == 0 || (forced & flags)) &&
396 (illegal == 0 || !(illegal & flags)))
397 build_table(table, child, end, path, flags,
398 depth);
399 }
400 return;
401 }
402
403 if (flags == 0)
404 errx(1, "path does not set flags");
405
406 if (table[flags][0] != 0)
407 errx(1, "path traversed twice");
408
409 for (i = 0; i < depth; i++)
410 table[flags][i] = path[i].mt;
411}
412
413int
414verify_table(enum tls13_message_type table[MAX_FLAGS][TLS13_NUM_MESSAGE_TYPES],
415 int print)
416{
417 int success = 1, i;
418 size_t num_valid, num_found = 0;
419 uint8_t flags = 0;
420
421 do {
422 if (table[flags][0] == 0)
423 continue;
424
425 num_found++;
426
427 for (i = 0; i < TLS13_NUM_MESSAGE_TYPES; i++) {
428 if (table[flags][i] != handshakes[flags][i]) {
429 fprintf(stderr,
430 "incorrect entry %d of handshake ", i);
431 fprint_flags(stderr, flags);
432 fprintf(stderr, "\n");
433 success = 0;
434 }
435 }
436
437 if (print)
438 fprint_entry(stdout, table[flags], flags);
439 } while(++flags != 0);
440
441 num_valid = count_handshakes();
442 if (num_valid != num_found) {
443 fprintf(stderr,
444 "incorrect number of handshakes: want %zu, got %zu.\n",
445 num_valid, num_found);
446 success = 0;
447 }
448
449 return success;
450}
451
452__dead void
453usage(void)
454{
455 fprintf(stderr, "usage: handshake_table [-C | -g]\n");
456 exit(1);
457}
458
459int
460main(int argc, char *argv[])
461{
462 static enum tls13_message_type
463 hs_table[MAX_FLAGS][TLS13_NUM_MESSAGE_TYPES] = {
464 [INITIAL] = {
465 CLIENT_HELLO,
466 SERVER_HELLO_RETRY_REQUEST,
467 CLIENT_HELLO_RETRY,
468 SERVER_HELLO,
469 },
470 };
471 struct child start = {
472 CLIENT_HELLO, DEFAULT, 0, 0,
473 };
474 struct child end = {
475 APPLICATION_DATA, DEFAULT, 0, 0,
476 };
477 struct child path[TLS13_NUM_MESSAGE_TYPES] = {{0}};
478 uint8_t flags = NEGOTIATED;
479 unsigned int depth = 0;
480 int ch, graphviz = 0, print = 0;
481
482 while ((ch = getopt(argc, argv, "Cg")) != -1) {
483 switch (ch) {
484 case 'C':
485 print = 1;
486 break;
487 case 'g':
488 graphviz = 1;
489 break;
490 default:
491 usage();
492 }
493 }
494 argc -= optind;
495 argv += optind;
496
497 if (argc != 0)
498 usage();
499
500 if (graphviz && print)
501 usage();
502
503 if (graphviz)
504 return generate_graphics();
505
506 build_table(hs_table, start, end, path, flags, depth);
507 if (!verify_table(hs_table, print))
508 return 1;
509
510 if (!print)
511 printf("SUCCESS\n");
512
513 return 0;
514}
diff --git a/src/regress/lib/libssl/handshake/valid_handshakes_terminate.c b/src/regress/lib/libssl/handshake/valid_handshakes_terminate.c
deleted file mode 100644
index 5f0e4f2c18..0000000000
--- a/src/regress/lib/libssl/handshake/valid_handshakes_terminate.c
+++ /dev/null
@@ -1,57 +0,0 @@
1/* $OpenBSD: valid_handshakes_terminate.c,v 1.3 2019/04/05 20:25:42 tb Exp $ */
2/*
3 * Copyright (c) 2019 Theo Buehler <tb@openbsd.org>
4 *
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
8 *
9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 */
17
18#include <err.h>
19#include <stdio.h>
20
21#include "tls13_handshake.c"
22
23int
24main(int argc, char *argv[])
25{
26 size_t i, j;
27 int terminates;
28 int fail = 0;
29
30 for (i = 1; i < handshake_count; i++) {
31 enum tls13_message_type mt = handshakes[i][0];
32
33 if (mt == INVALID)
34 continue;
35
36 terminates = 0;
37
38 for (j = 0; j < TLS13_NUM_MESSAGE_TYPES; j++) {
39 mt = handshakes[i][j];
40 if (state_machine[mt].handshake_complete) {
41 terminates = 1;
42 break;
43 }
44 }
45
46 if (!terminates) {
47 fail = 1;
48 printf("FAIL: handshake_complete never true in "
49 "handshake %zu\n", i);
50 }
51 }
52
53 if (!fail)
54 printf("SUCCESS\n");
55
56 return fail;
57}
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2026-02-10 00:34:07 +0000