diff options
author | jsing <> | 2019-05-28 17:16:42 +0000 |
---|---|---|
committer | jsing <> | 2019-05-28 17:16:42 +0000 |
commit | 190f375342fe35816611a439d14321f5eea5f45c (patch) | |
tree | 697fe092de0b1fae702a5064e5ff13888fae2965 /src | |
parent | f5ae3203ef048096eaf58b462871c35302e13017 (diff) | |
download | openbsd-190f375342fe35816611a439d14321f5eea5f45c.tar.gz openbsd-190f375342fe35816611a439d14321f5eea5f45c.tar.bz2 openbsd-190f375342fe35816611a439d14321f5eea5f45c.zip |
Tidy up some names/structures following the renaming of TLS extension
functions based on message type (clienthello/serverhello), to which side
is handling the processing.
No intended functional change.
ok beck@
Diffstat (limited to 'src')
-rw-r--r-- | src/lib/libssl/ssl_tlsext.c | 70 |
1 files changed, 35 insertions, 35 deletions
diff --git a/src/lib/libssl/ssl_tlsext.c b/src/lib/libssl/ssl_tlsext.c index 62b8251ec4..8e9f734bf5 100644 --- a/src/lib/libssl/ssl_tlsext.c +++ b/src/lib/libssl/ssl_tlsext.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl_tlsext.c,v 1.45 2019/05/08 23:49:45 tb Exp $ */ | 1 | /* $OpenBSD: ssl_tlsext.c,v 1.46 2019/05/28 17:16:42 jsing Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org> | 3 | * Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org> |
4 | * Copyright (c) 2017 Doug Hogan <doug@openbsd.org> | 4 | * Copyright (c) 2017 Doug Hogan <doug@openbsd.org> |
@@ -1669,12 +1669,12 @@ static struct tls_extension tls_extensions[] = { | |||
1669 | .client = { | 1669 | .client = { |
1670 | .needs = tlsext_versions_client_needs, | 1670 | .needs = tlsext_versions_client_needs, |
1671 | .build = tlsext_versions_client_build, | 1671 | .build = tlsext_versions_client_build, |
1672 | .parse = tlsext_versions_server_parse, | 1672 | .parse = tlsext_versions_client_parse, |
1673 | }, | 1673 | }, |
1674 | .server = { | 1674 | .server = { |
1675 | .needs = tlsext_versions_server_needs, | 1675 | .needs = tlsext_versions_server_needs, |
1676 | .build = tlsext_versions_server_build, | 1676 | .build = tlsext_versions_server_build, |
1677 | .parse = tlsext_versions_client_parse, | 1677 | .parse = tlsext_versions_server_parse, |
1678 | }, | 1678 | }, |
1679 | }, | 1679 | }, |
1680 | { | 1680 | { |
@@ -1684,12 +1684,12 @@ static struct tls_extension tls_extensions[] = { | |||
1684 | .client = { | 1684 | .client = { |
1685 | .needs = tlsext_keyshare_client_needs, | 1685 | .needs = tlsext_keyshare_client_needs, |
1686 | .build = tlsext_keyshare_client_build, | 1686 | .build = tlsext_keyshare_client_build, |
1687 | .parse = tlsext_keyshare_server_parse, | 1687 | .parse = tlsext_keyshare_client_parse, |
1688 | }, | 1688 | }, |
1689 | .server = { | 1689 | .server = { |
1690 | .needs = tlsext_keyshare_server_needs, | 1690 | .needs = tlsext_keyshare_server_needs, |
1691 | .build = tlsext_keyshare_server_build, | 1691 | .build = tlsext_keyshare_server_build, |
1692 | .parse = tlsext_keyshare_client_parse, | 1692 | .parse = tlsext_keyshare_server_parse, |
1693 | }, | 1693 | }, |
1694 | }, | 1694 | }, |
1695 | { | 1695 | { |
@@ -1698,12 +1698,12 @@ static struct tls_extension tls_extensions[] = { | |||
1698 | .client = { | 1698 | .client = { |
1699 | .needs = tlsext_sni_client_needs, | 1699 | .needs = tlsext_sni_client_needs, |
1700 | .build = tlsext_sni_client_build, | 1700 | .build = tlsext_sni_client_build, |
1701 | .parse = tlsext_sni_server_parse, | 1701 | .parse = tlsext_sni_client_parse, |
1702 | }, | 1702 | }, |
1703 | .server = { | 1703 | .server = { |
1704 | .needs = tlsext_sni_server_needs, | 1704 | .needs = tlsext_sni_server_needs, |
1705 | .build = tlsext_sni_server_build, | 1705 | .build = tlsext_sni_server_build, |
1706 | .parse = tlsext_sni_client_parse, | 1706 | .parse = tlsext_sni_server_parse, |
1707 | }, | 1707 | }, |
1708 | }, | 1708 | }, |
1709 | { | 1709 | { |
@@ -1712,12 +1712,12 @@ static struct tls_extension tls_extensions[] = { | |||
1712 | .client = { | 1712 | .client = { |
1713 | .needs = tlsext_ri_client_needs, | 1713 | .needs = tlsext_ri_client_needs, |
1714 | .build = tlsext_ri_client_build, | 1714 | .build = tlsext_ri_client_build, |
1715 | .parse = tlsext_ri_server_parse, | 1715 | .parse = tlsext_ri_client_parse, |
1716 | }, | 1716 | }, |
1717 | .server = { | 1717 | .server = { |
1718 | .needs = tlsext_ri_server_needs, | 1718 | .needs = tlsext_ri_server_needs, |
1719 | .build = tlsext_ri_server_build, | 1719 | .build = tlsext_ri_server_build, |
1720 | .parse = tlsext_ri_client_parse, | 1720 | .parse = tlsext_ri_server_parse, |
1721 | }, | 1721 | }, |
1722 | }, | 1722 | }, |
1723 | { | 1723 | { |
@@ -1727,12 +1727,12 @@ static struct tls_extension tls_extensions[] = { | |||
1727 | .client = { | 1727 | .client = { |
1728 | .needs = tlsext_ocsp_client_needs, | 1728 | .needs = tlsext_ocsp_client_needs, |
1729 | .build = tlsext_ocsp_client_build, | 1729 | .build = tlsext_ocsp_client_build, |
1730 | .parse = tlsext_ocsp_server_parse, | 1730 | .parse = tlsext_ocsp_client_parse, |
1731 | }, | 1731 | }, |
1732 | .server = { | 1732 | .server = { |
1733 | .needs = tlsext_ocsp_server_needs, | 1733 | .needs = tlsext_ocsp_server_needs, |
1734 | .build = tlsext_ocsp_server_build, | 1734 | .build = tlsext_ocsp_server_build, |
1735 | .parse = tlsext_ocsp_client_parse, | 1735 | .parse = tlsext_ocsp_server_parse, |
1736 | }, | 1736 | }, |
1737 | }, | 1737 | }, |
1738 | { | 1738 | { |
@@ -1741,12 +1741,12 @@ static struct tls_extension tls_extensions[] = { | |||
1741 | .client = { | 1741 | .client = { |
1742 | .needs = tlsext_ecpf_client_needs, | 1742 | .needs = tlsext_ecpf_client_needs, |
1743 | .build = tlsext_ecpf_client_build, | 1743 | .build = tlsext_ecpf_client_build, |
1744 | .parse = tlsext_ecpf_server_parse, | 1744 | .parse = tlsext_ecpf_client_parse, |
1745 | }, | 1745 | }, |
1746 | .server = { | 1746 | .server = { |
1747 | .needs = tlsext_ecpf_server_needs, | 1747 | .needs = tlsext_ecpf_server_needs, |
1748 | .build = tlsext_ecpf_server_build, | 1748 | .build = tlsext_ecpf_server_build, |
1749 | .parse = tlsext_ecpf_client_parse, | 1749 | .parse = tlsext_ecpf_server_parse, |
1750 | }, | 1750 | }, |
1751 | }, | 1751 | }, |
1752 | { | 1752 | { |
@@ -1755,12 +1755,12 @@ static struct tls_extension tls_extensions[] = { | |||
1755 | .client = { | 1755 | .client = { |
1756 | .needs = tlsext_supportedgroups_client_needs, | 1756 | .needs = tlsext_supportedgroups_client_needs, |
1757 | .build = tlsext_supportedgroups_client_build, | 1757 | .build = tlsext_supportedgroups_client_build, |
1758 | .parse = tlsext_supportedgroups_server_parse, | 1758 | .parse = tlsext_supportedgroups_client_parse, |
1759 | }, | 1759 | }, |
1760 | .server = { | 1760 | .server = { |
1761 | .needs = tlsext_supportedgroups_server_needs, | 1761 | .needs = tlsext_supportedgroups_server_needs, |
1762 | .build = tlsext_supportedgroups_server_build, | 1762 | .build = tlsext_supportedgroups_server_build, |
1763 | .parse = tlsext_supportedgroups_client_parse, | 1763 | .parse = tlsext_supportedgroups_server_parse, |
1764 | }, | 1764 | }, |
1765 | }, | 1765 | }, |
1766 | { | 1766 | { |
@@ -1769,12 +1769,12 @@ static struct tls_extension tls_extensions[] = { | |||
1769 | .client = { | 1769 | .client = { |
1770 | .needs = tlsext_sessionticket_client_needs, | 1770 | .needs = tlsext_sessionticket_client_needs, |
1771 | .build = tlsext_sessionticket_client_build, | 1771 | .build = tlsext_sessionticket_client_build, |
1772 | .parse = tlsext_sessionticket_server_parse, | 1772 | .parse = tlsext_sessionticket_client_parse, |
1773 | }, | 1773 | }, |
1774 | .server = { | 1774 | .server = { |
1775 | .needs = tlsext_sessionticket_server_needs, | 1775 | .needs = tlsext_sessionticket_server_needs, |
1776 | .build = tlsext_sessionticket_server_build, | 1776 | .build = tlsext_sessionticket_server_build, |
1777 | .parse = tlsext_sessionticket_client_parse, | 1777 | .parse = tlsext_sessionticket_server_parse, |
1778 | }, | 1778 | }, |
1779 | }, | 1779 | }, |
1780 | { | 1780 | { |
@@ -1783,12 +1783,12 @@ static struct tls_extension tls_extensions[] = { | |||
1783 | .client = { | 1783 | .client = { |
1784 | .needs = tlsext_sigalgs_client_needs, | 1784 | .needs = tlsext_sigalgs_client_needs, |
1785 | .build = tlsext_sigalgs_client_build, | 1785 | .build = tlsext_sigalgs_client_build, |
1786 | .parse = tlsext_sigalgs_server_parse, | 1786 | .parse = tlsext_sigalgs_client_parse, |
1787 | }, | 1787 | }, |
1788 | .server = { | 1788 | .server = { |
1789 | .needs = tlsext_sigalgs_server_needs, | 1789 | .needs = tlsext_sigalgs_server_needs, |
1790 | .build = tlsext_sigalgs_server_build, | 1790 | .build = tlsext_sigalgs_server_build, |
1791 | .parse = tlsext_sigalgs_client_parse, | 1791 | .parse = tlsext_sigalgs_server_parse, |
1792 | }, | 1792 | }, |
1793 | }, | 1793 | }, |
1794 | { | 1794 | { |
@@ -1797,12 +1797,12 @@ static struct tls_extension tls_extensions[] = { | |||
1797 | .client = { | 1797 | .client = { |
1798 | .needs = tlsext_alpn_client_needs, | 1798 | .needs = tlsext_alpn_client_needs, |
1799 | .build = tlsext_alpn_client_build, | 1799 | .build = tlsext_alpn_client_build, |
1800 | .parse = tlsext_alpn_server_parse, | 1800 | .parse = tlsext_alpn_client_parse, |
1801 | }, | 1801 | }, |
1802 | .server = { | 1802 | .server = { |
1803 | .needs = tlsext_alpn_server_needs, | 1803 | .needs = tlsext_alpn_server_needs, |
1804 | .build = tlsext_alpn_server_build, | 1804 | .build = tlsext_alpn_server_build, |
1805 | .parse = tlsext_alpn_client_parse, | 1805 | .parse = tlsext_alpn_server_parse, |
1806 | }, | 1806 | }, |
1807 | }, | 1807 | }, |
1808 | { | 1808 | { |
@@ -1811,12 +1811,12 @@ static struct tls_extension tls_extensions[] = { | |||
1811 | .client = { | 1811 | .client = { |
1812 | .needs = tlsext_cookie_client_needs, | 1812 | .needs = tlsext_cookie_client_needs, |
1813 | .build = tlsext_cookie_client_build, | 1813 | .build = tlsext_cookie_client_build, |
1814 | .parse = tlsext_cookie_server_parse, | 1814 | .parse = tlsext_cookie_client_parse, |
1815 | }, | 1815 | }, |
1816 | .server = { | 1816 | .server = { |
1817 | .needs = tlsext_cookie_server_needs, | 1817 | .needs = tlsext_cookie_server_needs, |
1818 | .build = tlsext_cookie_server_build, | 1818 | .build = tlsext_cookie_server_build, |
1819 | .parse = tlsext_cookie_client_parse, | 1819 | .parse = tlsext_cookie_server_parse, |
1820 | }, | 1820 | }, |
1821 | }, | 1821 | }, |
1822 | #ifndef OPENSSL_NO_SRTP | 1822 | #ifndef OPENSSL_NO_SRTP |
@@ -1827,12 +1827,12 @@ static struct tls_extension tls_extensions[] = { | |||
1827 | .client = { | 1827 | .client = { |
1828 | .needs = tlsext_srtp_client_needs, | 1828 | .needs = tlsext_srtp_client_needs, |
1829 | .build = tlsext_srtp_client_build, | 1829 | .build = tlsext_srtp_client_build, |
1830 | .parse = tlsext_srtp_server_parse, | 1830 | .parse = tlsext_srtp_client_parse, |
1831 | }, | 1831 | }, |
1832 | .server = { | 1832 | .server = { |
1833 | .needs = tlsext_srtp_server_needs, | 1833 | .needs = tlsext_srtp_server_needs, |
1834 | .build = tlsext_srtp_server_build, | 1834 | .build = tlsext_srtp_server_build, |
1835 | .parse = tlsext_srtp_client_parse, | 1835 | .parse = tlsext_srtp_server_parse, |
1836 | }, | 1836 | }, |
1837 | } | 1837 | } |
1838 | #endif /* OPENSSL_NO_SRTP */ | 1838 | #endif /* OPENSSL_NO_SRTP */ |
@@ -1993,7 +1993,7 @@ tlsext_parse(SSL *s, CBS *cbs, int *alert, int is_server, uint16_t msg_type) | |||
1993 | } | 1993 | } |
1994 | 1994 | ||
1995 | static void | 1995 | static void |
1996 | tlsext_client_reset_state(SSL *s) | 1996 | tlsext_server_reset_state(SSL *s) |
1997 | { | 1997 | { |
1998 | s->internal->servername_done = 0; | 1998 | s->internal->servername_done = 0; |
1999 | s->tlsext_status_type = -1; | 1999 | s->tlsext_status_type = -1; |
@@ -2004,22 +2004,22 @@ tlsext_client_reset_state(SSL *s) | |||
2004 | } | 2004 | } |
2005 | 2005 | ||
2006 | int | 2006 | int |
2007 | tlsext_client_build(SSL *s, CBB *cbb, uint16_t msg_type) | 2007 | tlsext_server_build(SSL *s, CBB *cbb, uint16_t msg_type) |
2008 | { | 2008 | { |
2009 | return tlsext_build(s, cbb, 0, msg_type); | 2009 | return tlsext_build(s, cbb, 1, msg_type); |
2010 | } | 2010 | } |
2011 | 2011 | ||
2012 | int | 2012 | int |
2013 | tlsext_server_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) | 2013 | tlsext_server_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) |
2014 | { | 2014 | { |
2015 | /* XXX - this possibly should be done by the caller... */ | 2015 | /* XXX - this possibly should be done by the caller... */ |
2016 | tlsext_client_reset_state(s); | 2016 | tlsext_server_reset_state(s); |
2017 | 2017 | ||
2018 | return tlsext_parse(s, cbs, alert, 0, msg_type); | 2018 | return tlsext_parse(s, cbs, alert, 1, msg_type); |
2019 | } | 2019 | } |
2020 | 2020 | ||
2021 | static void | 2021 | static void |
2022 | tlsext_server_reset_state(SSL *s) | 2022 | tlsext_client_reset_state(SSL *s) |
2023 | { | 2023 | { |
2024 | S3I(s)->renegotiate_seen = 0; | 2024 | S3I(s)->renegotiate_seen = 0; |
2025 | free(S3I(s)->alpn_selected); | 2025 | free(S3I(s)->alpn_selected); |
@@ -2027,16 +2027,16 @@ tlsext_server_reset_state(SSL *s) | |||
2027 | } | 2027 | } |
2028 | 2028 | ||
2029 | int | 2029 | int |
2030 | tlsext_server_build(SSL *s, CBB *cbb, uint16_t msg_type) | 2030 | tlsext_client_build(SSL *s, CBB *cbb, uint16_t msg_type) |
2031 | { | 2031 | { |
2032 | return tlsext_build(s, cbb, 1, msg_type); | 2032 | return tlsext_build(s, cbb, 0, msg_type); |
2033 | } | 2033 | } |
2034 | 2034 | ||
2035 | int | 2035 | int |
2036 | tlsext_client_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) | 2036 | tlsext_client_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) |
2037 | { | 2037 | { |
2038 | /* XXX - this possibly should be done by the caller... */ | 2038 | /* XXX - this possibly should be done by the caller... */ |
2039 | tlsext_server_reset_state(s); | 2039 | tlsext_client_reset_state(s); |
2040 | 2040 | ||
2041 | return tlsext_parse(s, cbs, alert, 1, msg_type); | 2041 | return tlsext_parse(s, cbs, alert, 0, msg_type); |
2042 | } | 2042 | } |