18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TLSv1 client - write handshake message 31f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * Copyright (c) 2006-2011, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/md5.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/sha1.h" 141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#include "crypto/sha256.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/tls.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/random.h" 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "x509v3.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "tlsv1_common.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "tlsv1_record.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "tlsv1_client.h" 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "tlsv1_client_i.h" 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic size_t tls_client_cert_chain_der_len(struct tlsv1_client *conn) 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len = 0; 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct x509_certificate *cert; 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->cred == NULL) 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = conn->cred->cert; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (cert) { 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len += 3 + cert->cert_len; 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (x509_certificate_self_signed(cert)) 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = x509_certificate_get_subject(conn->cred->trusted_certs, 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &cert->issuer); 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return len; 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * tls_send_client_hello(struct tlsv1_client *conn, size_t *out_len) 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *hello, *end, *pos, *hs_length, *hs_start, *rhdr; 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len, i; 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send ClientHello"); 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = 0; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE32(conn->client_random, now.sec); 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (random_get_bytes(conn->client_random + 4, TLS_RANDOM_LEN - 4)) { 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "TLSv1: Could not generate " 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "client_random"); 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "TLSv1: client_random", 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->client_random, TLS_RANDOM_LEN); 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = 100 + conn->num_cipher_suites * 2 + conn->client_hello_ext_len; 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hello = os_malloc(len); 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (hello == NULL) 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = hello + len; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rhdr = hello; 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rhdr + TLS_RECORD_HEADER_LEN; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* opaque fragment[TLSPlaintext.length] */ 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handshake */ 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_start = pos; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HandshakeType msg_type */ 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_HANDSHAKE_TYPE_CLIENT_HELLO; 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* uint24 length (to be filled) */ 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_length = pos; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* body - ClientHello */ 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* ProtocolVersion client_version */ 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(pos, TLS_VERSION); 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Random random: uint32 gmt_unix_time, opaque random_bytes */ 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, conn->client_random, TLS_RANDOM_LEN); 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += TLS_RANDOM_LEN; 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* SessionID session_id */ 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = conn->session_id_len; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, conn->session_id, conn->session_id_len); 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += conn->session_id_len; 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* CipherSuite cipher_suites<2..2^16-1> */ 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(pos, 2 * conn->num_cipher_suites); 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conn->num_cipher_suites; i++) { 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(pos, conn->cipher_suites[i]); 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* CompressionMethod compression_methods<1..2^8-1> */ 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 1; 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_COMPRESSION_NULL; 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->client_hello_ext) { 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, conn->client_hello_ext, 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->client_hello_ext_len); 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += conn->client_hello_ext_len; 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE24(hs_length, pos - hs_length - 3); 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_verify_hash_add(&conn->verify, hs_start, pos - hs_start); 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_send(&conn->rl, TLS_CONTENT_TYPE_HANDSHAKE, 1141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt rhdr, end - rhdr, hs_start, pos - hs_start, 1151f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt out_len) < 0) { 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to create TLS record"); 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(hello); 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->state = SERVER_HELLO; 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return hello; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_write_client_certificate(struct tlsv1_client *conn, 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 **msgpos, u8 *end) 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos, *rhdr, *hs_start, *hs_length, *cert_start; 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rlen; 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct x509_certificate *cert; 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = *msgpos; 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send Certificate"); 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rhdr = pos; 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += TLS_RECORD_HEADER_LEN; 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* opaque fragment[TLSPlaintext.length] */ 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handshake */ 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_start = pos; 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HandshakeType msg_type */ 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_HANDSHAKE_TYPE_CERTIFICATE; 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* uint24 length (to be filled) */ 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_length = pos; 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* body - Certificate */ 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* uint24 length (to be filled) */ 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert_start = pos; 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = conn->cred ? conn->cred->cert : NULL; 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (cert) { 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + 3 + cert->cert_len > end) { 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Not enough buffer space " 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "for Certificate (cert_len=%lu left=%lu)", 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) cert->cert_len, 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) (end - pos)); 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE24(pos, cert->cert_len); 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, cert->cert_start, cert->cert_len); 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += cert->cert_len; 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (x509_certificate_self_signed(cert)) 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = x509_certificate_get_subject(conn->cred->trusted_certs, 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &cert->issuer); 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->cred == NULL || cert == conn->cred->cert || cert == NULL) { 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Client was not configured with all the needed certificates 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to form a full certificate chain. The server may fail to 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * validate the chain unless it is configured with all the 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * missing CA certificates. 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Full client certificate chain " 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "not configured - validation may fail"); 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE24(cert_start, pos - cert_start - 3); 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE24(hs_length, pos - hs_length - 3); 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_send(&conn->rl, TLS_CONTENT_TYPE_HANDSHAKE, 1911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt rhdr, end - rhdr, hs_start, pos - hs_start, 1921f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &rlen) < 0) { 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to generate a record"); 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rhdr + rlen; 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_verify_hash_add(&conn->verify, hs_start, pos - hs_start); 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *msgpos = pos; 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tlsv1_key_x_anon_dh(struct tlsv1_client *conn, u8 **pos, u8 *end) 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* ClientDiffieHellmanPublic */ 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *csecret, *csecret_start, *dh_yc, *shared; 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t csecret_len, dh_yc_len, shared_len; 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_len = conn->dh_p_len; 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret = os_malloc(csecret_len); 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (csecret == NULL) { 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to allocate " 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "memory for Yc (Diffie-Hellman)"); 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (random_get_bytes(csecret, csecret_len)) { 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to get random " 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "data for Diffie-Hellman"); 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(csecret, conn->dh_p, csecret_len) > 0) 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret[0] = 0; /* make sure Yc < p */ 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_start = csecret; 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (csecret_len > 1 && *csecret_start == 0) { 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_start++; 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_len--; 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TLSv1: DH client's secret value", 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_start, csecret_len); 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Yc = g^csecret mod p */ 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh_yc_len = conn->dh_p_len; 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh_yc = os_malloc(dh_yc_len); 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh_yc == NULL) { 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to allocate " 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "memory for Diffie-Hellman"); 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (crypto_mod_exp(conn->dh_g, conn->dh_g_len, 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_start, csecret_len, 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->dh_p, conn->dh_p_len, 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh_yc, &dh_yc_len)) { 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(dh_yc); 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TLSv1: DH Yc (client's public value)", 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh_yc, dh_yc_len); 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(*pos, dh_yc_len); 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos += 2; 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (*pos + dh_yc_len > end) { 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Not enough room in the " 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "message buffer for Yc"); 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(dh_yc); 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(*pos, dh_yc, dh_yc_len); 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos += dh_yc_len; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(dh_yc); 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_len = conn->dh_p_len; 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared = os_malloc(shared_len); 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (shared == NULL) { 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Could not allocate memory for " 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "DH"); 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* shared = Ys^csecret mod p */ 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (crypto_mod_exp(conn->dh_ys, conn->dh_ys_len, 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt csecret_start, csecret_len, 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->dh_p, conn->dh_p_len, 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared, &shared_len)) { 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(shared); 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TLSv1: Shared secret from DH key exchange", 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared, shared_len); 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(csecret_start, 0, csecret_len); 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(csecret); 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_derive_keys(conn, shared, shared_len)) { 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to derive keys"); 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(shared); 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(shared, 0, shared_len); 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(shared); 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tlsv1_client_free_dh(conn); 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tlsv1_key_x_rsa(struct tlsv1_client *conn, u8 **pos, u8 *end) 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 pre_master_secret[TLS_PRE_MASTER_SECRET_LEN]; 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t clen; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res; 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_derive_pre_master_secret(pre_master_secret) < 0 || 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_derive_keys(conn, pre_master_secret, 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_PRE_MASTER_SECRET_LEN)) { 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to derive keys"); 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* EncryptedPreMasterSecret */ 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->server_rsa_key == NULL) { 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: No server RSA key to " 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "use for encrypting pre-master secret"); 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* RSA encrypted value is encoded with PKCS #1 v1.5 block type 2. */ 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos += 2; 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt clen = end - *pos; 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = crypto_public_key_encrypt_pkcs1_v15( 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->server_rsa_key, 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pre_master_secret, TLS_PRE_MASTER_SECRET_LEN, 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos, &clen); 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(pre_master_secret, 0, TLS_PRE_MASTER_SECRET_LEN); 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: RSA encryption failed"); 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(*pos - 2, clen); 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "TLSv1: Encrypted pre_master_secret", 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos, clen); 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos += clen; 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_write_client_key_exchange(struct tlsv1_client *conn, 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 **msgpos, u8 *end) 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos, *rhdr, *hs_start, *hs_length; 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rlen; 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_key_exchange keyx; 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct tls_cipher_suite *suite; 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt suite = tls_get_cipher_suite(conn->rl.cipher_suite); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (suite == NULL) 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keyx = TLS_KEY_X_NULL; 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keyx = suite->key_exchange; 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = *msgpos; 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send ClientKeyExchange"); 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rhdr = pos; 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += TLS_RECORD_HEADER_LEN; 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* opaque fragment[TLSPlaintext.length] */ 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handshake */ 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_start = pos; 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HandshakeType msg_type */ 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_HANDSHAKE_TYPE_CLIENT_KEY_EXCHANGE; 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* uint24 length (to be filled) */ 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_length = pos; 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* body - ClientKeyExchange */ 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (keyx == TLS_KEY_X_DH_anon) { 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_key_x_anon_dh(conn, &pos, end) < 0) 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_key_x_rsa(conn, &pos, end) < 0) 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE24(hs_length, pos - hs_length - 3); 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_send(&conn->rl, TLS_CONTENT_TYPE_HANDSHAKE, 4131f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt rhdr, end - rhdr, hs_start, pos - hs_start, 4141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &rlen) < 0) { 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to create a record"); 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rhdr + rlen; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_verify_hash_add(&conn->verify, hs_start, pos - hs_start); 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *msgpos = pos; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_write_client_certificate_verify(struct tlsv1_client *conn, 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 **msgpos, u8 *end) 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos, *rhdr, *hs_start, *hs_length, *signed_start; 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rlen, hlen, clen; 4341f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 hash[100], *hpos; 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum { SIGN_ALG_RSA, SIGN_ALG_DSA } alg = SIGN_ALG_RSA; 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = *msgpos; 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send CertificateVerify"); 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rhdr = pos; 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += TLS_RECORD_HEADER_LEN; 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handshake */ 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_start = pos; 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HandshakeType msg_type */ 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_HANDSHAKE_TYPE_CERTIFICATE_VERIFY; 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* uint24 length (to be filled) */ 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hs_length = pos; 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RFC 2246: 7.4.3 and 7.4.8: 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Signature signature 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RSA: 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * digitally-signed struct { 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * opaque md5_hash[16]; 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * opaque sha_hash[20]; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * }; 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * DSA: 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * digitally-signed struct { 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * opaque sha_hash[20]; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * }; 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The hash values are calculated over all handshake messages sent or 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * received starting at ClientHello up to, but not including, this 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * CertificateVerify message, including the type and length fields of 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the handshake messages. 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hpos = hash; 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4741f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_TLSV12 4751f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (conn->rl.tls_version == TLS_VERSION_1_2) { 4761f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt hlen = SHA256_MAC_LEN; 4771f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (conn->verify.sha256_cert == NULL || 4781f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt crypto_hash_finish(conn->verify.sha256_cert, hpos, &hlen) < 4791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 0) { 4801f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt conn->verify.sha256_cert = NULL; 4811f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 4821f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 4831f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 4841f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 4851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt conn->verify.sha256_cert = NULL; 4861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 4871f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* 4881f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * RFC 3447, A.2.4 RSASSA-PKCS1-v1_5 4891f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * 4901f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * DigestInfo ::= SEQUENCE { 4911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * digestAlgorithm DigestAlgorithm, 4921f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * digest OCTET STRING 4931f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * } 4941f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * 4951f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * SHA-256 OID: sha256WithRSAEncryption ::= {pkcs-1 11} 4961f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * 4971f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * DER encoded DigestInfo for SHA256 per RFC 3447: 4981f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * 30 31 30 0d 06 09 60 86 48 01 65 03 04 02 01 05 00 04 20 || 4991f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * H 5001f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt */ 5011f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt os_memmove(hash + 19, hash, hlen); 5021f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt hlen += 19; 5031f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt os_memcpy(hash, "\x30\x31\x30\x0d\x06\x09\x60\x86\x48\x01\x65" 5041f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "\x03\x04\x02\x01\x05\x00\x04\x20", 19); 5051f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } else { 5061f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_TLSV12 */ 5071f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alg == SIGN_ALG_RSA) { 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen = MD5_MAC_LEN; 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->verify.md5_cert == NULL || 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.md5_cert, hpos, &hlen) < 0) 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt { 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.md5_cert = NULL; 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.sha1_cert, NULL, NULL); 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.sha1_cert = NULL; 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hpos += MD5_MAC_LEN; 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.md5_cert, NULL, NULL); 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.md5_cert = NULL; 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen = SHA1_MAC_LEN; 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->verify.sha1_cert == NULL || 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.sha1_cert, hpos, &hlen) < 0) { 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.sha1_cert = NULL; 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.sha1_cert = NULL; 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alg == SIGN_ALG_RSA) 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen += MD5_MAC_LEN; 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5381f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_TLSV12 5391f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 5401f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_TLSV12 */ 5411f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "TLSv1: CertificateVerify hash", hash, hlen); 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5441f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_TLSV12 5451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (conn->rl.tls_version >= TLS_VERSION_1_2) { 5461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* 5471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * RFC 5246, 4.7: 5481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * TLS v1.2 adds explicit indication of the used signature and 5491f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * hash algorithms. 5501f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * 5511f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * struct { 5521f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * HashAlgorithm hash; 5531f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * SignatureAlgorithm signature; 5541f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * } SignatureAndHashAlgorithm; 5551f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt */ 5561f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt *pos++ = TLS_HASH_ALG_SHA256; 5571f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt *pos++ = TLS_SIGN_ALG_RSA; 5581f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 5591f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_TLSV12 */ 5601f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RFC 2246, 4.7: 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * In digital signing, one-way hash functions are used as input for a 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * signing algorithm. A digitally-signed element is encoded as an 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * opaque vector <0..2^16-1>, where the length is specified by the 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * signing algorithm and key. 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * In RSA signing, a 36-byte structure of two hashes (one SHA and one 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MD5) is signed (encrypted with the private key). It is encoded with 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * PKCS #1 block type 0 or type 1 as described in [PKCS1]. 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt signed_start = pos; /* length to be filled */ 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt clen = end - pos; 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->cred == NULL || 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_private_key_sign_pkcs1(conn->cred->key, hash, hlen, 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos, &clen) < 0) { 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to sign hash (PKCS #1)"); 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(signed_start, clen); 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += clen; 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE24(hs_length, pos - hs_length - 3); 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_send(&conn->rl, TLS_CONTENT_TYPE_HANDSHAKE, 5901f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt rhdr, end - rhdr, hs_start, pos - hs_start, 5911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &rlen) < 0) { 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to generate a record"); 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rhdr + rlen; 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_verify_hash_add(&conn->verify, hs_start, pos - hs_start); 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *msgpos = pos; 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_write_client_change_cipher_spec(struct tlsv1_client *conn, 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 **msgpos, u8 *end) 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rlen; 6111f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 payload[1]; 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send ChangeCipherSpec"); 6141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 6151f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt payload[0] = TLS_CHANGE_CIPHER_SPEC; 6161f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_send(&conn->rl, TLS_CONTENT_TYPE_CHANGE_CIPHER_SPEC, 6181f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt *msgpos, end - *msgpos, payload, sizeof(payload), 6191f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &rlen) < 0) { 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to create a record"); 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_change_write_cipher(&conn->rl) < 0) { 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to set write cipher for " 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "record layer"); 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6341f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt *msgpos += rlen; 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_write_client_finished(struct tlsv1_client *conn, 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 **msgpos, u8 *end) 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6431f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 *pos, *hs_start; 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rlen, hlen; 6451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 verify_data[1 + 3 + TLS_VERIFY_DATA_LEN]; 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[MD5_MAC_LEN + SHA1_MAC_LEN]; 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send Finished"); 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Encrypted Handshake Message: Finished */ 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6521f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_TLSV12 6531f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (conn->rl.tls_version >= TLS_VERSION_1_2) { 6541f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt hlen = SHA256_MAC_LEN; 6551f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (conn->verify.sha256_client == NULL || 6561f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt crypto_hash_finish(conn->verify.sha256_client, hash, &hlen) 6571f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt < 0) { 6581f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 6591f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 6601f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt conn->verify.sha256_client = NULL; 6611f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 6621f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 6631f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt conn->verify.sha256_client = NULL; 6641f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } else { 6651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_TLSV12 */ 6661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen = MD5_MAC_LEN; 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->verify.md5_client == NULL || 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.md5_client, hash, &hlen) < 0) { 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.md5_client = NULL; 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.sha1_client, NULL, NULL); 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.sha1_client = NULL; 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.md5_client = NULL; 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen = SHA1_MAC_LEN; 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->verify.sha1_client == NULL || 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt crypto_hash_finish(conn->verify.sha1_client, hash + MD5_MAC_LEN, 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &hlen) < 0) { 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.sha1_client = NULL; 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->verify.sha1_client = NULL; 6881f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt hlen = MD5_MAC_LEN + SHA1_MAC_LEN; 6891f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 6901f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_TLSV12 6911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 6921f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_TLSV12 */ 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6941f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (tls_prf(conn->rl.tls_version, 6951f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt conn->master_secret, TLS_MASTER_SECRET_LEN, 6961f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "client finished", hash, hlen, 6971f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt verify_data + 1 + 3, TLS_VERIFY_DATA_LEN)) { 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to generate verify_data"); 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TLSv1: verify_data (client)", 7041f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt verify_data + 1 + 3, TLS_VERIFY_DATA_LEN); 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handshake */ 7071f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt pos = hs_start = verify_data; 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HandshakeType msg_type */ 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_HANDSHAKE_TYPE_FINISHED; 7101f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* uint24 length */ 7111f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt WPA_PUT_BE24(pos, TLS_VERIFY_DATA_LEN); 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 3; 7131f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt pos += TLS_VERIFY_DATA_LEN; /* verify_data already in place */ 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_verify_hash_add(&conn->verify, hs_start, pos - hs_start); 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tlsv1_record_send(&conn->rl, TLS_CONTENT_TYPE_HANDSHAKE, 7171f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt *msgpos, end - *msgpos, hs_start, pos - hs_start, 7181f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &rlen) < 0) { 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Failed to create a record"); 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_alert(conn, TLS_ALERT_LEVEL_FATAL, 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_ALERT_INTERNAL_ERROR); 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt *msgpos += rlen; 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * tls_send_client_key_exchange(struct tlsv1_client *conn, 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t *out_len) 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *msg, *end, *pos; 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t msglen; 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = 0; 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msglen = 2000; 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->certificate_requested) 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msglen += tls_client_cert_chain_der_len(conn); 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = os_malloc(msglen); 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = msg; 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = msg + msglen; 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->certificate_requested) { 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_write_client_certificate(conn, &pos, end) < 0) { 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_write_client_key_exchange(conn, &pos, end) < 0 || 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (conn->certificate_requested && conn->cred && conn->cred->key && 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_write_client_certificate_verify(conn, &pos, end) < 0) || 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_write_client_change_cipher_spec(conn, &pos, end) < 0 || 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_write_client_finished(conn, &pos, end) < 0) { 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = pos - msg; 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->state = SERVER_CHANGE_CIPHER_SPEC; 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return msg; 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * tls_send_change_cipher_spec(struct tlsv1_client *conn, 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t *out_len) 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *msg, *end, *pos; 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = 0; 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = os_malloc(1000); 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = msg; 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = msg + 1000; 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_write_client_change_cipher_spec(conn, &pos, end) < 0 || 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_write_client_finished(conn, &pos, end) < 0) { 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = pos - msg; 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Session resumption completed " 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "successfully"); 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->state = ESTABLISHED; 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return msg; 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * tlsv1_client_handshake_write(struct tlsv1_client *conn, size_t *out_len, 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int no_appl_data) 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (conn->state) { 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case CLIENT_KEY_EXCHANGE: 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return tls_send_client_key_exchange(conn, out_len); 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case CHANGE_CIPHER_SPEC: 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return tls_send_change_cipher_spec(conn, out_len); 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ACK_FINISHED: 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Handshake completed " 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "successfully"); 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->state = ESTABLISHED; 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = 0; 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (no_appl_data) { 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Need to return something to get final TLS ACK. */ 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_malloc(1); 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Unexpected state %d while " 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "generating reply", conn->state); 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * tlsv1_client_send_alert(struct tlsv1_client *conn, u8 level, 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 description, size_t *out_len) 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *alert, *pos, *length; 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLSv1: Send Alert(%d:%d)", level, description); 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = 0; 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alert = os_malloc(10); 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alert == NULL) 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = alert; 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TLSPlaintext */ 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* ContentType type */ 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = TLS_CONTENT_TYPE_ALERT; 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* ProtocolVersion version */ 8481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt WPA_PUT_BE16(pos, conn->rl.tls_version ? conn->rl.tls_version : 8491f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt TLS_VERSION); 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* uint16 length (to be filled) */ 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt length = pos; 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* opaque fragment[TLSPlaintext.length] */ 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Alert */ 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* AlertLevel level */ 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = level; 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* AlertDescription description */ 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = description; 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(length, pos - length - 2); 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *out_len = pos - alert; 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return alert; 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 867