diff options
Diffstat (limited to '')
| -rw-r--r-- | src/lib/libssl/ssl_tlsext.c | 70 |
1 files changed, 35 insertions, 35 deletions
diff --git a/src/lib/libssl/ssl_tlsext.c b/src/lib/libssl/ssl_tlsext.c index 62b8251ec4..8e9f734bf5 100644 --- a/src/lib/libssl/ssl_tlsext.c +++ b/src/lib/libssl/ssl_tlsext.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ssl_tlsext.c,v 1.45 2019/05/08 23:49:45 tb Exp $ */ | 1 | /* $OpenBSD: ssl_tlsext.c,v 1.46 2019/05/28 17:16:42 jsing Exp $ */ |
| 2 | /* | 2 | /* |
| 3 | * Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org> | 3 | * Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org> |
| 4 | * Copyright (c) 2017 Doug Hogan <doug@openbsd.org> | 4 | * Copyright (c) 2017 Doug Hogan <doug@openbsd.org> |
| @@ -1669,12 +1669,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1669 | .client = { | 1669 | .client = { |
| 1670 | .needs = tlsext_versions_client_needs, | 1670 | .needs = tlsext_versions_client_needs, |
| 1671 | .build = tlsext_versions_client_build, | 1671 | .build = tlsext_versions_client_build, |
| 1672 | .parse = tlsext_versions_server_parse, | 1672 | .parse = tlsext_versions_client_parse, |
| 1673 | }, | 1673 | }, |
| 1674 | .server = { | 1674 | .server = { |
| 1675 | .needs = tlsext_versions_server_needs, | 1675 | .needs = tlsext_versions_server_needs, |
| 1676 | .build = tlsext_versions_server_build, | 1676 | .build = tlsext_versions_server_build, |
| 1677 | .parse = tlsext_versions_client_parse, | 1677 | .parse = tlsext_versions_server_parse, |
| 1678 | }, | 1678 | }, |
| 1679 | }, | 1679 | }, |
| 1680 | { | 1680 | { |
| @@ -1684,12 +1684,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1684 | .client = { | 1684 | .client = { |
| 1685 | .needs = tlsext_keyshare_client_needs, | 1685 | .needs = tlsext_keyshare_client_needs, |
| 1686 | .build = tlsext_keyshare_client_build, | 1686 | .build = tlsext_keyshare_client_build, |
| 1687 | .parse = tlsext_keyshare_server_parse, | 1687 | .parse = tlsext_keyshare_client_parse, |
| 1688 | }, | 1688 | }, |
| 1689 | .server = { | 1689 | .server = { |
| 1690 | .needs = tlsext_keyshare_server_needs, | 1690 | .needs = tlsext_keyshare_server_needs, |
| 1691 | .build = tlsext_keyshare_server_build, | 1691 | .build = tlsext_keyshare_server_build, |
| 1692 | .parse = tlsext_keyshare_client_parse, | 1692 | .parse = tlsext_keyshare_server_parse, |
| 1693 | }, | 1693 | }, |
| 1694 | }, | 1694 | }, |
| 1695 | { | 1695 | { |
| @@ -1698,12 +1698,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1698 | .client = { | 1698 | .client = { |
| 1699 | .needs = tlsext_sni_client_needs, | 1699 | .needs = tlsext_sni_client_needs, |
| 1700 | .build = tlsext_sni_client_build, | 1700 | .build = tlsext_sni_client_build, |
| 1701 | .parse = tlsext_sni_server_parse, | 1701 | .parse = tlsext_sni_client_parse, |
| 1702 | }, | 1702 | }, |
| 1703 | .server = { | 1703 | .server = { |
| 1704 | .needs = tlsext_sni_server_needs, | 1704 | .needs = tlsext_sni_server_needs, |
| 1705 | .build = tlsext_sni_server_build, | 1705 | .build = tlsext_sni_server_build, |
| 1706 | .parse = tlsext_sni_client_parse, | 1706 | .parse = tlsext_sni_server_parse, |
| 1707 | }, | 1707 | }, |
| 1708 | }, | 1708 | }, |
| 1709 | { | 1709 | { |
| @@ -1712,12 +1712,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1712 | .client = { | 1712 | .client = { |
| 1713 | .needs = tlsext_ri_client_needs, | 1713 | .needs = tlsext_ri_client_needs, |
| 1714 | .build = tlsext_ri_client_build, | 1714 | .build = tlsext_ri_client_build, |
| 1715 | .parse = tlsext_ri_server_parse, | 1715 | .parse = tlsext_ri_client_parse, |
| 1716 | }, | 1716 | }, |
| 1717 | .server = { | 1717 | .server = { |
| 1718 | .needs = tlsext_ri_server_needs, | 1718 | .needs = tlsext_ri_server_needs, |
| 1719 | .build = tlsext_ri_server_build, | 1719 | .build = tlsext_ri_server_build, |
| 1720 | .parse = tlsext_ri_client_parse, | 1720 | .parse = tlsext_ri_server_parse, |
| 1721 | }, | 1721 | }, |
| 1722 | }, | 1722 | }, |
| 1723 | { | 1723 | { |
| @@ -1727,12 +1727,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1727 | .client = { | 1727 | .client = { |
| 1728 | .needs = tlsext_ocsp_client_needs, | 1728 | .needs = tlsext_ocsp_client_needs, |
| 1729 | .build = tlsext_ocsp_client_build, | 1729 | .build = tlsext_ocsp_client_build, |
| 1730 | .parse = tlsext_ocsp_server_parse, | 1730 | .parse = tlsext_ocsp_client_parse, |
| 1731 | }, | 1731 | }, |
| 1732 | .server = { | 1732 | .server = { |
| 1733 | .needs = tlsext_ocsp_server_needs, | 1733 | .needs = tlsext_ocsp_server_needs, |
| 1734 | .build = tlsext_ocsp_server_build, | 1734 | .build = tlsext_ocsp_server_build, |
| 1735 | .parse = tlsext_ocsp_client_parse, | 1735 | .parse = tlsext_ocsp_server_parse, |
| 1736 | }, | 1736 | }, |
| 1737 | }, | 1737 | }, |
| 1738 | { | 1738 | { |
| @@ -1741,12 +1741,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1741 | .client = { | 1741 | .client = { |
| 1742 | .needs = tlsext_ecpf_client_needs, | 1742 | .needs = tlsext_ecpf_client_needs, |
| 1743 | .build = tlsext_ecpf_client_build, | 1743 | .build = tlsext_ecpf_client_build, |
| 1744 | .parse = tlsext_ecpf_server_parse, | 1744 | .parse = tlsext_ecpf_client_parse, |
| 1745 | }, | 1745 | }, |
| 1746 | .server = { | 1746 | .server = { |
| 1747 | .needs = tlsext_ecpf_server_needs, | 1747 | .needs = tlsext_ecpf_server_needs, |
| 1748 | .build = tlsext_ecpf_server_build, | 1748 | .build = tlsext_ecpf_server_build, |
| 1749 | .parse = tlsext_ecpf_client_parse, | 1749 | .parse = tlsext_ecpf_server_parse, |
| 1750 | }, | 1750 | }, |
| 1751 | }, | 1751 | }, |
| 1752 | { | 1752 | { |
| @@ -1755,12 +1755,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1755 | .client = { | 1755 | .client = { |
| 1756 | .needs = tlsext_supportedgroups_client_needs, | 1756 | .needs = tlsext_supportedgroups_client_needs, |
| 1757 | .build = tlsext_supportedgroups_client_build, | 1757 | .build = tlsext_supportedgroups_client_build, |
| 1758 | .parse = tlsext_supportedgroups_server_parse, | 1758 | .parse = tlsext_supportedgroups_client_parse, |
| 1759 | }, | 1759 | }, |
| 1760 | .server = { | 1760 | .server = { |
| 1761 | .needs = tlsext_supportedgroups_server_needs, | 1761 | .needs = tlsext_supportedgroups_server_needs, |
| 1762 | .build = tlsext_supportedgroups_server_build, | 1762 | .build = tlsext_supportedgroups_server_build, |
| 1763 | .parse = tlsext_supportedgroups_client_parse, | 1763 | .parse = tlsext_supportedgroups_server_parse, |
| 1764 | }, | 1764 | }, |
| 1765 | }, | 1765 | }, |
| 1766 | { | 1766 | { |
| @@ -1769,12 +1769,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1769 | .client = { | 1769 | .client = { |
| 1770 | .needs = tlsext_sessionticket_client_needs, | 1770 | .needs = tlsext_sessionticket_client_needs, |
| 1771 | .build = tlsext_sessionticket_client_build, | 1771 | .build = tlsext_sessionticket_client_build, |
| 1772 | .parse = tlsext_sessionticket_server_parse, | 1772 | .parse = tlsext_sessionticket_client_parse, |
| 1773 | }, | 1773 | }, |
| 1774 | .server = { | 1774 | .server = { |
| 1775 | .needs = tlsext_sessionticket_server_needs, | 1775 | .needs = tlsext_sessionticket_server_needs, |
| 1776 | .build = tlsext_sessionticket_server_build, | 1776 | .build = tlsext_sessionticket_server_build, |
| 1777 | .parse = tlsext_sessionticket_client_parse, | 1777 | .parse = tlsext_sessionticket_server_parse, |
| 1778 | }, | 1778 | }, |
| 1779 | }, | 1779 | }, |
| 1780 | { | 1780 | { |
| @@ -1783,12 +1783,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1783 | .client = { | 1783 | .client = { |
| 1784 | .needs = tlsext_sigalgs_client_needs, | 1784 | .needs = tlsext_sigalgs_client_needs, |
| 1785 | .build = tlsext_sigalgs_client_build, | 1785 | .build = tlsext_sigalgs_client_build, |
| 1786 | .parse = tlsext_sigalgs_server_parse, | 1786 | .parse = tlsext_sigalgs_client_parse, |
| 1787 | }, | 1787 | }, |
| 1788 | .server = { | 1788 | .server = { |
| 1789 | .needs = tlsext_sigalgs_server_needs, | 1789 | .needs = tlsext_sigalgs_server_needs, |
| 1790 | .build = tlsext_sigalgs_server_build, | 1790 | .build = tlsext_sigalgs_server_build, |
| 1791 | .parse = tlsext_sigalgs_client_parse, | 1791 | .parse = tlsext_sigalgs_server_parse, |
| 1792 | }, | 1792 | }, |
| 1793 | }, | 1793 | }, |
| 1794 | { | 1794 | { |
| @@ -1797,12 +1797,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1797 | .client = { | 1797 | .client = { |
| 1798 | .needs = tlsext_alpn_client_needs, | 1798 | .needs = tlsext_alpn_client_needs, |
| 1799 | .build = tlsext_alpn_client_build, | 1799 | .build = tlsext_alpn_client_build, |
| 1800 | .parse = tlsext_alpn_server_parse, | 1800 | .parse = tlsext_alpn_client_parse, |
| 1801 | }, | 1801 | }, |
| 1802 | .server = { | 1802 | .server = { |
| 1803 | .needs = tlsext_alpn_server_needs, | 1803 | .needs = tlsext_alpn_server_needs, |
| 1804 | .build = tlsext_alpn_server_build, | 1804 | .build = tlsext_alpn_server_build, |
| 1805 | .parse = tlsext_alpn_client_parse, | 1805 | .parse = tlsext_alpn_server_parse, |
| 1806 | }, | 1806 | }, |
| 1807 | }, | 1807 | }, |
| 1808 | { | 1808 | { |
| @@ -1811,12 +1811,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1811 | .client = { | 1811 | .client = { |
| 1812 | .needs = tlsext_cookie_client_needs, | 1812 | .needs = tlsext_cookie_client_needs, |
| 1813 | .build = tlsext_cookie_client_build, | 1813 | .build = tlsext_cookie_client_build, |
| 1814 | .parse = tlsext_cookie_server_parse, | 1814 | .parse = tlsext_cookie_client_parse, |
| 1815 | }, | 1815 | }, |
| 1816 | .server = { | 1816 | .server = { |
| 1817 | .needs = tlsext_cookie_server_needs, | 1817 | .needs = tlsext_cookie_server_needs, |
| 1818 | .build = tlsext_cookie_server_build, | 1818 | .build = tlsext_cookie_server_build, |
| 1819 | .parse = tlsext_cookie_client_parse, | 1819 | .parse = tlsext_cookie_server_parse, |
| 1820 | }, | 1820 | }, |
| 1821 | }, | 1821 | }, |
| 1822 | #ifndef OPENSSL_NO_SRTP | 1822 | #ifndef OPENSSL_NO_SRTP |
| @@ -1827,12 +1827,12 @@ static struct tls_extension tls_extensions[] = { | |||
| 1827 | .client = { | 1827 | .client = { |
| 1828 | .needs = tlsext_srtp_client_needs, | 1828 | .needs = tlsext_srtp_client_needs, |
| 1829 | .build = tlsext_srtp_client_build, | 1829 | .build = tlsext_srtp_client_build, |
| 1830 | .parse = tlsext_srtp_server_parse, | 1830 | .parse = tlsext_srtp_client_parse, |
| 1831 | }, | 1831 | }, |
| 1832 | .server = { | 1832 | .server = { |
| 1833 | .needs = tlsext_srtp_server_needs, | 1833 | .needs = tlsext_srtp_server_needs, |
| 1834 | .build = tlsext_srtp_server_build, | 1834 | .build = tlsext_srtp_server_build, |
| 1835 | .parse = tlsext_srtp_client_parse, | 1835 | .parse = tlsext_srtp_server_parse, |
| 1836 | }, | 1836 | }, |
| 1837 | } | 1837 | } |
| 1838 | #endif /* OPENSSL_NO_SRTP */ | 1838 | #endif /* OPENSSL_NO_SRTP */ |
| @@ -1993,7 +1993,7 @@ tlsext_parse(SSL *s, CBS *cbs, int *alert, int is_server, uint16_t msg_type) | |||
| 1993 | } | 1993 | } |
| 1994 | 1994 | ||
| 1995 | static void | 1995 | static void |
| 1996 | tlsext_client_reset_state(SSL *s) | 1996 | tlsext_server_reset_state(SSL *s) |
| 1997 | { | 1997 | { |
| 1998 | s->internal->servername_done = 0; | 1998 | s->internal->servername_done = 0; |
| 1999 | s->tlsext_status_type = -1; | 1999 | s->tlsext_status_type = -1; |
| @@ -2004,22 +2004,22 @@ tlsext_client_reset_state(SSL *s) | |||
| 2004 | } | 2004 | } |
| 2005 | 2005 | ||
| 2006 | int | 2006 | int |
| 2007 | tlsext_client_build(SSL *s, CBB *cbb, uint16_t msg_type) | 2007 | tlsext_server_build(SSL *s, CBB *cbb, uint16_t msg_type) |
| 2008 | { | 2008 | { |
| 2009 | return tlsext_build(s, cbb, 0, msg_type); | 2009 | return tlsext_build(s, cbb, 1, msg_type); |
| 2010 | } | 2010 | } |
| 2011 | 2011 | ||
| 2012 | int | 2012 | int |
| 2013 | tlsext_server_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) | 2013 | tlsext_server_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) |
| 2014 | { | 2014 | { |
| 2015 | /* XXX - this possibly should be done by the caller... */ | 2015 | /* XXX - this possibly should be done by the caller... */ |
| 2016 | tlsext_client_reset_state(s); | 2016 | tlsext_server_reset_state(s); |
| 2017 | 2017 | ||
| 2018 | return tlsext_parse(s, cbs, alert, 0, msg_type); | 2018 | return tlsext_parse(s, cbs, alert, 1, msg_type); |
| 2019 | } | 2019 | } |
| 2020 | 2020 | ||
| 2021 | static void | 2021 | static void |
| 2022 | tlsext_server_reset_state(SSL *s) | 2022 | tlsext_client_reset_state(SSL *s) |
| 2023 | { | 2023 | { |
| 2024 | S3I(s)->renegotiate_seen = 0; | 2024 | S3I(s)->renegotiate_seen = 0; |
| 2025 | free(S3I(s)->alpn_selected); | 2025 | free(S3I(s)->alpn_selected); |
| @@ -2027,16 +2027,16 @@ tlsext_server_reset_state(SSL *s) | |||
| 2027 | } | 2027 | } |
| 2028 | 2028 | ||
| 2029 | int | 2029 | int |
| 2030 | tlsext_server_build(SSL *s, CBB *cbb, uint16_t msg_type) | 2030 | tlsext_client_build(SSL *s, CBB *cbb, uint16_t msg_type) |
| 2031 | { | 2031 | { |
| 2032 | return tlsext_build(s, cbb, 1, msg_type); | 2032 | return tlsext_build(s, cbb, 0, msg_type); |
| 2033 | } | 2033 | } |
| 2034 | 2034 | ||
| 2035 | int | 2035 | int |
| 2036 | tlsext_client_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) | 2036 | tlsext_client_parse(SSL *s, CBS *cbs, int *alert, uint16_t msg_type) |
| 2037 | { | 2037 | { |
| 2038 | /* XXX - this possibly should be done by the caller... */ | 2038 | /* XXX - this possibly should be done by the caller... */ |
| 2039 | tlsext_server_reset_state(s); | 2039 | tlsext_client_reset_state(s); |
| 2040 | 2040 | ||
| 2041 | return tlsext_parse(s, cbs, alert, 1, msg_type); | 2041 | return tlsext_parse(s, cbs, alert, 0, msg_type); |
| 2042 | } | 2042 | } |
