tls_openssl.c revision af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5
18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * SSL/TLS interface functions for OpenSSL 334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * Copyright (c) 2004-2013, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_SMARTCARD 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 13db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root#ifndef ANDROID 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define OPENSSL_NO_ENGINE 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 17db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root#endif 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <openssl/ssl.h> 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <openssl/err.h> 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <openssl/pkcs12.h> 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <openssl/x509v3.h> 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <openssl/engine.h> 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto.h" 29af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#include "sha1.h" 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "tls.h" 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 32ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#if defined(SSL_CTX_get_app_data) && defined(SSL_CTX_set_app_data) 33ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#define OPENSSL_SUPPORTS_CTX_APP_DATA 34ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#endif 35ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt 369ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#if OPENSSL_VERSION_NUMBER < 0x10000000L 379ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt/* ERR_remove_thread_state replaces ERR_remove_state and the latter is 389ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt * deprecated. However, OpenSSL 0.9.8 doesn't include 399ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt * ERR_remove_thread_state. */ 409ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#define ERR_remove_thread_state(tid) ERR_remove_state(0) 419ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#endif 429ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 439ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#if defined(OPENSSL_IS_BORINGSSL) 449ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt/* stack_index_t is the return type of OpenSSL's sk_XXX_num() functions. */ 459ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidttypedef size_t stack_index_t; 469ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#else 479ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidttypedef int stack_index_t; 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 50ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt#ifdef SSL_set_tlsext_status_type 51ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt#ifndef OPENSSL_NO_TLSEXT 52ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt#define HAVE_OCSP 53ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt#include <openssl/ocsp.h> 54ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt#endif /* OPENSSL_NO_TLSEXT */ 55ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt#endif /* SSL_set_tlsext_status_type */ 56ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt 573f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root#ifdef ANDROID 583f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root#include <openssl/pem.h> 593f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root#include <keystore/keystore_get.h> 603f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root 613f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Rootstatic BIO * BIO_from_keystore(const char *key) 623f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root{ 63ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt BIO *bio = NULL; 64ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt uint8_t *value = NULL; 65ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt int length = keystore_get(key, strlen(key), &value); 66ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt if (length != -1 && (bio = BIO_new(BIO_s_mem())) != NULL) 67ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt BIO_write(bio, value, length); 68ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt free(value); 69ff07917b8921a2a178ed9188a63b166af144ae53Dmitry Shmidt return bio; 703f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root} 713f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root#endif /* ANDROID */ 723f3ca3bb849b192d41b99aae775f6fc52f67118dKenny Root 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_openssl_ref_count = 0; 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 75ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidtstruct tls_context { 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void (*event_cb)(void *ctx, enum tls_event ev, 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt union tls_event_data *data); 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *cb_ctx; 791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt int cert_in_cb; 8034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt char *ocsp_stapling_response; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 83ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidtstatic struct tls_context *tls_global = NULL; 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct tls_connection { 87ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context; 88216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt SSL_CTX *ssl_ctx; 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL *ssl; 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO *ssl_in, *ssl_out; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE *engine; /* functional reference to the engine */ 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_PKEY *private_key; /* the private key if using engine */ 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 952f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt char *subject_match, *altsubject_match, *suffix_match, *domain_match; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int read_alerts, write_alerts, failed; 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_session_ticket_cb session_ticket_cb; 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *session_ticket_cb_ctx; 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* SessionTicket received from OpenSSL hello_extension_cb (server) */ 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *session_ticket; 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t session_ticket_len; 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned int ca_cert_verify:1; 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned int cert_probe:1; 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned int server_cert_only:1; 10826af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen unsigned int invalid_hb_used:1; 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 srv_cert_hash[32]; 111c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt 112c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt unsigned int flags; 11334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 11434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt X509 *peer_cert; 11534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt X509 *peer_issuer; 116fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt X509 *peer_issuer_issuer; 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 120ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidtstatic struct tls_context * tls_context_new(const struct tls_config *conf) 121ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt{ 122ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context = os_zalloc(sizeof(*context)); 123ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (context == NULL) 124ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt return NULL; 125ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (conf) { 126ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->event_cb = conf->event_cb; 127ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->cb_ctx = conf->cb_ctx; 128ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->cert_in_cb = conf->cert_in_cb; 129ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt } 130ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt return context; 131ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt} 132ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt 133ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_NO_STDOUT_DEBUG 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void _tls_show_errors(void) 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err; 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((err = ERR_get_error())) { 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Just ignore the errors, since stdout is disabled */ 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define tls_show_errors(l, f, t) _tls_show_errors() 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* CONFIG_NO_STDOUT_DEBUG */ 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void tls_show_errors(int level, const char *func, const char *txt) 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err; 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(level, "OpenSSL: %s - %s %s", 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt func, txt, ERR_error_string(ERR_get_error(), NULL)); 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((err = ERR_get_error())) { 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "OpenSSL: pending error: %s", 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(err, NULL)); 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_STDOUT_DEBUG */ 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_NATIVE_WINDOWS 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Windows CryptoAPI and access to certificate stores */ 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <wincrypt.h> 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef __MINGW32_VERSION 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MinGW does not yet include all the needed definitions for CryptoAPI, so 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * define here whatever extra is needed. 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define CERT_SYSTEM_STORE_CURRENT_USER (1 << 16) 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define CERT_STORE_READONLY_FLAG 0x00008000 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define CERT_STORE_OPEN_EXISTING_FLAG 0x00004000 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* __MINGW32_VERSION */ 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct cryptoapi_rsa_data { 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const CERT_CONTEXT *cert; 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HCRYPTPROV crypt_prov; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DWORD key_spec; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BOOL free_crypt_prov; 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void cryptoapi_error(const char *msg) 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "CryptoAPI: %s; err=%u", 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg, (unsigned int) GetLastError()); 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int cryptoapi_rsa_pub_enc(int flen, const unsigned char *from, 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *to, RSA *rsa, int padding) 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s - not implemented", __func__); 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int cryptoapi_rsa_pub_dec(int flen, const unsigned char *from, 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *to, RSA *rsa, int padding) 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s - not implemented", __func__); 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int cryptoapi_rsa_priv_enc(int flen, const unsigned char *from, 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *to, RSA *rsa, int padding) 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct cryptoapi_rsa_data *priv = 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (struct cryptoapi_rsa_data *) rsa->meth->app_data; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HCRYPTHASH hash; 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DWORD hash_size, len, i; 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf = NULL; 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret = 0; 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv == NULL) { 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT, 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_R_PASSED_NULL_PARAMETER); 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (padding != RSA_PKCS1_PADDING) { 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT, 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_R_UNKNOWN_PADDING_TYPE); 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (flen != 16 /* MD5 */ + 20 /* SHA-1 */) { 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "%s - only MD5-SHA1 hash supported", 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT, 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_R_INVALID_MESSAGE_LENGTH); 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!CryptCreateHash(priv->crypt_prov, CALG_SSL3_SHAMD5, 0, 0, &hash)) 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt { 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_error("CryptCreateHash failed"); 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(hash_size); 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!CryptGetHashParam(hash, HP_HASHSIZE, (BYTE *) &hash_size, &len, 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0)) { 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_error("CryptGetHashParam failed"); 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((int) hash_size != flen) { 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "CryptoAPI: Invalid hash size (%u != %d)", 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned) hash_size, flen); 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT, 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_R_INVALID_MESSAGE_LENGTH); 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!CryptSetHashParam(hash, HP_HASHVAL, (BYTE * ) from, 0)) { 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_error("CryptSetHashParam failed"); 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = RSA_size(rsa); 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_malloc(len); 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) { 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT, ERR_R_MALLOC_FAILURE); 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!CryptSignHash(hash, priv->key_spec, NULL, 0, buf, &len)) { 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_error("CryptSignHash failed"); 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < len; i++) 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt to[i] = buf[len - i - 1]; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = len; 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidterr: 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CryptDestroyHash(hash); 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int cryptoapi_rsa_priv_dec(int flen, const unsigned char *from, 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *to, RSA *rsa, int padding) 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s - not implemented", __func__); 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void cryptoapi_free_data(struct cryptoapi_rsa_data *priv) 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv == NULL) 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv->crypt_prov && priv->free_crypt_prov) 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CryptReleaseContext(priv->crypt_prov, 0); 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv->cert) 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CertFreeCertificateContext(priv->cert); 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(priv); 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int cryptoapi_finish(RSA *rsa) 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_free_data((struct cryptoapi_rsa_data *) rsa->meth->app_data); 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free((void *) rsa->meth); 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa->meth = NULL; 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const CERT_CONTEXT * cryptoapi_find_cert(const char *name, DWORD store) 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HCERTSTORE cs; 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const CERT_CONTEXT *ret = NULL; 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cs = CertOpenStore((LPCSTR) CERT_STORE_PROV_SYSTEM, 0, 0, 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt store | CERT_STORE_OPEN_EXISTING_FLAG | 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CERT_STORE_READONLY_FLAG, L"MY"); 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cs == NULL) { 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_error("Failed to open 'My system store'"); 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (strncmp(name, "cert://", 7) == 0) { 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned short wbuf[255]; 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MultiByteToWideChar(CP_ACP, 0, name + 7, -1, wbuf, 255); 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = CertFindCertificateInStore(cs, X509_ASN_ENCODING | 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS_7_ASN_ENCODING, 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0, CERT_FIND_SUBJECT_STR, 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wbuf, NULL); 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (strncmp(name, "hash://", 7) == 0) { 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CRYPT_HASH_BLOB blob; 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len; 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *hash = name + 7; 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf; 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = os_strlen(hash) / 2; 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_malloc(len); 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf && hexstr2bin(hash, buf, len) == 0) { 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blob.cbData = len; 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blob.pbData = buf; 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = CertFindCertificateInStore(cs, 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_ASN_ENCODING | 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS_7_ASN_ENCODING, 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0, CERT_FIND_HASH, 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &blob, NULL); 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CertCloseStore(cs, 0); 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_cryptoapi_cert(SSL *ssl, const char *name) 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *cert = NULL; 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA *rsa = NULL, *pub_rsa; 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct cryptoapi_rsa_data *priv; 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_METHOD *rsa_meth; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (name == NULL || 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (strncmp(name, "cert://", 7) != 0 && 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt strncmp(name, "hash://", 7) != 0)) 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt priv = os_zalloc(sizeof(*priv)); 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth = os_zalloc(sizeof(*rsa_meth)); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv == NULL || rsa_meth == NULL) { 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "CryptoAPI: Failed to allocate memory " 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "for CryptoAPI RSA method"); 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(priv); 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rsa_meth); 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt priv->cert = cryptoapi_find_cert(name, CERT_SYSTEM_STORE_CURRENT_USER); 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv->cert == NULL) { 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt priv->cert = cryptoapi_find_cert( 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name, CERT_SYSTEM_STORE_LOCAL_MACHINE); 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (priv->cert == NULL) { 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "CryptoAPI: Could not find certificate " 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s'", name); 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 399216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt cert = d2i_X509(NULL, 400216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt (const unsigned char **) &priv->cert->pbCertEncoded, 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt priv->cert->cbCertEncoded); 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert == NULL) { 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "CryptoAPI: Could not process X509 DER " 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "encoding"); 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!CryptAcquireCertificatePrivateKey(priv->cert, 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CRYPT_ACQUIRE_COMPARE_KEY_FLAG, 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, &priv->crypt_prov, 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &priv->key_spec, 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &priv->free_crypt_prov)) { 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_error("Failed to acquire a private key for the " 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate"); 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->name = "Microsoft CryptoAPI RSA Method"; 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->rsa_pub_enc = cryptoapi_rsa_pub_enc; 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->rsa_pub_dec = cryptoapi_rsa_pub_dec; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->rsa_priv_enc = cryptoapi_rsa_priv_enc; 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->rsa_priv_dec = cryptoapi_rsa_priv_dec; 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->finish = cryptoapi_finish; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->flags = RSA_METHOD_FLAG_NO_CHECK; 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa_meth->app_data = (char *) priv; 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa = RSA_new(); 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rsa == NULL) { 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_FILE, 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_R_MALLOC_FAILURE); 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!SSL_use_certificate(ssl, cert)) { 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_free(rsa); 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa = NULL; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pub_rsa = cert->cert_info->key->pkey->pkey.rsa; 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = NULL; 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa->n = BN_dup(pub_rsa->n); 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsa->e = BN_dup(pub_rsa->e); 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!RSA_set_method(rsa, rsa_meth)) 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!SSL_use_RSAPrivateKey(ssl, rsa)) 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_free(rsa); 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidterr: 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert) 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rsa) 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSA_free(rsa); 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rsa_meth); 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cryptoapi_free_data(priv); 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_cryptoapi_ca_cert(SSL_CTX *ssl_ctx, SSL *ssl, const char *name) 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HCERTSTORE cs; 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PCCERT_CONTEXT ctx = NULL; 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *cert; 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char buf[128]; 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *store; 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef UNICODE 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WCHAR *wstore; 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* UNICODE */ 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (name == NULL || strncmp(name, "cert_store://", 13) != 0) 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt store = name + 13; 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef UNICODE 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wstore = os_malloc((os_strlen(store) + 1) * sizeof(WCHAR)); 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wstore == NULL) 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wsprintf(wstore, L"%S", store); 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cs = CertOpenSystemStore(0, wstore); 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(wstore); 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* UNICODE */ 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cs = CertOpenSystemStore(0, store); 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* UNICODE */ 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cs == NULL) { 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s: failed to open system cert store " 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s': error=%d", __func__, store, 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (int) GetLastError()); 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((ctx = CertEnumCertificatesInStore(cs, ctx))) { 500216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt cert = d2i_X509(NULL, 501216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt (const unsigned char **) &ctx->pbCertEncoded, 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->cbCertEncoded); 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert == NULL) { 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "CryptoAPI: Could not process " 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "X509 DER encoding for CA cert"); 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_NAME_oneline(X509_get_subject_name(cert), buf, 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(buf)); 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Loaded CA certificate for " 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "system certificate store: subject='%s'", buf); 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!X509_STORE_add_cert(ssl_ctx->cert_store, cert)) { 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to add ca_cert to OpenSSL " 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate store"); 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!CertCloseStore(cs, 0)) { 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s: failed to close system cert store " 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s': error=%d", __func__, name + 13, 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (int) GetLastError()); 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* CONFIG_NATIVE_WINDOWS */ 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_cryptoapi_cert(SSL *ssl, const char *name) 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void ssl_info_cb(const SSL *ssl, int where, int ret) 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *str; 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int w; 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: (where=0x%x ret=0x%x)", where, ret); 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt w = where & ~SSL_ST_MASK; 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (w & SSL_ST_CONNECT) 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt str = "SSL_connect"; 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else if (w & SSL_ST_ACCEPT) 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt str = "SSL_accept"; 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt str = "undefined"; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (where & SSL_CB_LOOP) { 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: %s:%s", 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt str, SSL_state_string_long(ssl)); 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (where & SSL_CB_ALERT) { 561ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_connection *conn = SSL_get_app_data((SSL *) ssl); 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "SSL: SSL3 alert: %s:%s:%s", 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt where & SSL_CB_READ ? 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "read (remote end reported an error)" : 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "write (local SSL3 detected an error)", 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_alert_type_string_long(ret), 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_alert_desc_string_long(ret)); 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((ret >> 8) == SSL3_AL_FATAL) { 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (where & SSL_CB_READ) 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->read_alerts++; 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->write_alerts++; 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 574ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (conn->context->event_cb != NULL) { 57504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt union tls_event_data ev; 576ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context = conn->context; 57704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt os_memset(&ev, 0, sizeof(ev)); 57804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt ev.alert.is_local = !(where & SSL_CB_READ); 57904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt ev.alert.type = SSL_alert_type_string_long(ret); 58004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt ev.alert.description = SSL_alert_desc_string_long(ret); 581ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->event_cb(context->cb_ctx, TLS_ALERT, &ev); 58204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (where & SSL_CB_EXIT && ret <= 0) { 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: %s:%s in %s", 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt str, ret == 0 ? "failed" : "error", 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_state_string_long(ssl)); 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * tls_engine_load_dynamic_generic - load any openssl engine 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pre: an array of commands and values that load an engine initialized 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * in the engine specific function 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @post: an array of commands and values that initialize an already loaded 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * engine (or %NULL if not required) 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @id: the engine id of the engine to load (only required if post is not %NULL 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is a generic function that loads any openssl engine. 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_engine_load_dynamic_generic(const char *pre[], 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *post[], const char *id) 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE *engine; 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *dynamic_id = "dynamic"; 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt engine = ENGINE_by_id(id); 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (engine) { 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_free(engine); 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: engine '%s' is already " 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "available", id); 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_clear_error(); 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt engine = ENGINE_by_id(dynamic_id); 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (engine == NULL) { 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "ENGINE: Can't find engine %s [%s]", 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dynamic_id, 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Perform the pre commands. This will load the engine. */ 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pre && pre[0]) { 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: '%s' '%s'", pre[0], pre[1]); 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ENGINE_ctrl_cmd_string(engine, pre[0], pre[1], 0) == 0) { 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "ENGINE: ctrl cmd_string failed: " 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s %s [%s]", pre[0], pre[1], 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_free(engine); 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pre += 2; 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Free the reference to the "dynamic" engine. The loaded engine can 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * now be looked up using ENGINE_by_id(). 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_free(engine); 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt engine = ENGINE_by_id(id); 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (engine == NULL) { 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "ENGINE: Can't find engine %s [%s]", 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt id, ERR_error_string(ERR_get_error(), NULL)); 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (post && post[0]) { 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: '%s' '%s'", post[0], post[1]); 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ENGINE_ctrl_cmd_string(engine, post[0], post[1], 0) == 0) { 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: ctrl cmd_string failed:" 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " %s %s [%s]", post[0], post[1], 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_remove(engine); 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_free(engine); 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt post += 2; 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_free(engine); 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * tls_engine_load_dynamic_pkcs11 - load the pkcs11 engine provided by opensc 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pkcs11_so_path: pksc11_so_path from the configuration 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pcks11_module_path: pkcs11_module_path from the configuration 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_engine_load_dynamic_pkcs11(const char *pkcs11_so_path, 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *pkcs11_module_path) 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *engine_id = "pkcs11"; 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *pre_cmd[] = { 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SO_PATH", NULL /* pkcs11_so_path */, 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ID", NULL /* engine_id */, 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "LIST_ADD", "1", 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* "NO_VCHECK", "1", */ 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "LOAD", NULL, 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, NULL 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt }; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *post_cmd[] = { 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "MODULE_PATH", NULL /* pkcs11_module_path */, 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, NULL 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt }; 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6936c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (!pkcs11_so_path) 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pre_cmd[1] = pkcs11_so_path; 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pre_cmd[3] = engine_id; 6986c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (pkcs11_module_path) 6996c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt post_cmd[1] = pkcs11_module_path; 7006c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt else 7016c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt post_cmd[0] = NULL; 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: Loading pkcs11 Engine from %s", 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pkcs11_so_path); 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return tls_engine_load_dynamic_generic(pre_cmd, post_cmd, engine_id); 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * tls_engine_load_dynamic_opensc - load the opensc engine provided by opensc 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @opensc_so_path: opensc_so_path from the configuration 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_engine_load_dynamic_opensc(const char *opensc_so_path) 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *engine_id = "opensc"; 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *pre_cmd[] = { 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SO_PATH", NULL /* opensc_so_path */, 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ID", NULL /* engine_id */, 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "LIST_ADD", "1", 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "LOAD", NULL, 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, NULL 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt }; 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!opensc_so_path) 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pre_cmd[1] = opensc_so_path; 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pre_cmd[3] = engine_id; 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: Loading OpenSC Engine from %s", 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt opensc_so_path); 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return tls_engine_load_dynamic_generic(pre_cmd, NULL, engine_id); 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid * tls_init(const struct tls_config *conf) 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl; 742ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context; 7436c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const char *ciphers; 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_openssl_ref_count == 0) { 746ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt tls_global = context = tls_context_new(conf); 747ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (context == NULL) 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_FIPS 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef OPENSSL_FIPS 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf && conf->fips_mode) { 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!FIPS_mode_set(1)) { 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "Failed to enable FIPS " 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "mode"); 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_load_crypto_strings(); 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_print_errors_fp(stderr); 75761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt os_free(tls_global); 75861d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt tls_global = NULL; 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "Running in FIPS mode"); 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_FIPS */ 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf && conf->fips_mode) { 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "FIPS mode requested, but not " 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "supported"); 76761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt os_free(tls_global); 76861d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt tls_global = NULL; 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_FIPS */ 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_FIPS */ 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_load_error_strings(); 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_library_init(); 775216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt#ifndef OPENSSL_NO_SHA256 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_add_digest(EVP_sha256()); 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_SHA256 */ 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: if /dev/urandom is available, PRNG is seeded 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * automatically. If this is not the case, random data should 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be added here. */ 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef PKCS12_FUNCS 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_RC2 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 40-bit RC2 is commonly used in PKCS#12 files, so enable it. 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is enabled by PKCS12_PBE_add() in OpenSSL 0.9.8 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * versions, but it looks like OpenSSL 1.0.0 does not do that 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * anymore. 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_add_cipher(EVP_rc2_40_cbc()); 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_RC2 */ 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS12_PBE_add(); 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* PKCS12_FUNCS */ 794ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt } else { 795ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#ifdef OPENSSL_SUPPORTS_CTX_APP_DATA 796ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt /* Newer OpenSSL can store app-data per-SSL */ 797ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context = tls_context_new(conf); 798ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (context == NULL) 799ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt return NULL; 8007d5c8f257a74ac0d12828962a492e8b84ef83923Dmitry Shmidt#else /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 8017d5c8f257a74ac0d12828962a492e8b84ef83923Dmitry Shmidt context = tls_global; 802ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#endif /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_openssl_ref_count++; 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8066c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ssl = SSL_CTX_new(SSLv23_method()); 807ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (ssl == NULL) { 808ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt tls_openssl_ref_count--; 80968d0e3ed07847339aedfac8e02f50db68c702e52Dmitry Shmidt#ifdef OPENSSL_SUPPORTS_CTX_APP_DATA 81068d0e3ed07847339aedfac8e02f50db68c702e52Dmitry Shmidt if (context != tls_global) 81168d0e3ed07847339aedfac8e02f50db68c702e52Dmitry Shmidt os_free(context); 81268d0e3ed07847339aedfac8e02f50db68c702e52Dmitry Shmidt#endif /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 813ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (tls_openssl_ref_count == 0) { 814ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt os_free(tls_global); 815ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt tls_global = NULL; 816ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt } 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 818ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt } 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8206c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt SSL_CTX_set_options(ssl, SSL_OP_NO_SSLv2); 8216c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt SSL_CTX_set_options(ssl, SSL_OP_NO_SSLv3); 8226c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_info_callback(ssl, ssl_info_cb); 824ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#ifdef OPENSSL_SUPPORTS_CTX_APP_DATA 825ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt SSL_CTX_set_app_data(ssl, context); 826ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#endif /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 8296c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: Loading dynamic engine"); 8306c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ERR_load_ENGINE_strings(); 8316c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ENGINE_load_dynamic(); 8326c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf && 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (conf->opensc_engine_path || conf->pkcs11_engine_path || 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->pkcs11_module_path)) { 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_engine_load_dynamic_opensc(conf->opensc_engine_path) || 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_engine_load_dynamic_pkcs11(conf->pkcs11_engine_path, 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->pkcs11_module_path)) { 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_deinit(ssl); 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8456c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (conf && conf->openssl_ciphers) 8466c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ciphers = conf->openssl_ciphers; 8476c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt else 8486c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ciphers = "DEFAULT:!EXP:!LOW"; 8496c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (SSL_CTX_set_cipher_list(ssl, ciphers) != 1) { 8506c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_ERROR, 8516c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "OpenSSL: Failed to set cipher string '%s'", 8526c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ciphers); 8536c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt tls_deinit(ssl); 8546c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt return NULL; 8556c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 8566c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ssl; 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid tls_deinit(void *ssl_ctx) 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl = ssl_ctx; 864ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#ifdef OPENSSL_SUPPORTS_CTX_APP_DATA 865ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context = SSL_CTX_get_app_data(ssl); 866ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (context != tls_global) 867ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt os_free(context); 868ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#endif /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_free(ssl); 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_openssl_ref_count--; 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_openssl_ref_count == 0) { 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_cleanup(); 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CRYPTO_cleanup_all_ex_data(); 8779ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt ERR_remove_thread_state(NULL); 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_free_strings(); 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_cleanup(); 88034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_free(tls_global->ocsp_stapling_response); 88134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt tls_global->ocsp_stapling_response = NULL; 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(tls_global); 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_global = NULL; 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_engine_init(struct tls_connection *conn, const char *engine_id, 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *pin, const char *key_id, 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *cert_id, const char *ca_cert_id) 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret = -1; 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (engine_id == NULL) { 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: Engine ID not set"); 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_clear_error(); 900db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root#ifdef ANDROID 901db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root ENGINE_load_dynamic(); 902db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root#endif 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->engine = ENGINE_by_id(engine_id); 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!conn->engine) { 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: engine %s not available [%s]", 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt engine_id, ERR_error_string(ERR_get_error(), NULL)); 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ENGINE_init(conn->engine) != 1) { 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: engine init failed " 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(engine: %s) [%s]", engine_id, 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: engine initialized"); 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 917db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root#ifndef ANDROID 9186c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (pin && ENGINE_ctrl_cmd_string(conn->engine, "PIN", pin, 0) == 0) { 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: cannot set pin [%s]", 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 923db3c5a43353099fd4771f3b7a13efae905878ce9Kenny Root#endif 9246c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (key_id) { 9256c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt /* 9266c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt * Ensure that the ENGINE does not attempt to use the OpenSSL 9276c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt * UI system to obtain a PIN, if we didn't provide one. 9286c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt */ 9296c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt struct { 9306c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const void *password; 9316c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const char *prompt_info; 9326c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } key_cb = { "", NULL }; 9336c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 9346c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt /* load private key first in-case PIN is required for cert */ 9356c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt conn->private_key = ENGINE_load_private_key(conn->engine, 9366c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt key_id, NULL, 9376c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt &key_cb); 9386c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (!conn->private_key) { 9396c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_ERROR, 9406c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "ENGINE: cannot load private key with id '%s' [%s]", 9416c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt key_id, 9426c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 9436c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ret = TLS_SET_PARAMS_ENGINE_PRV_INIT_FAILED; 9446c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt goto err; 9456c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* handle a certificate and/or CA certificate */ 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert_id || ca_cert_id) { 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *cmd_name = "LOAD_CERT_CTRL"; 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* test if the engine supports a LOAD_CERT_CTRL */ 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!ENGINE_ctrl(conn->engine, ENGINE_CTRL_GET_CMD_FROM_NAME, 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0, (void *)cmd_name, NULL)) { 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: engine does not support" 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " loading certificates"); 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = TLS_SET_PARAMS_ENGINE_PRV_INIT_FAILED; 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto err; 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidterr: 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->engine) { 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_free(conn->engine); 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->engine = NULL; 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->private_key) { 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_PKEY_free(conn->private_key); 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->private_key = NULL; 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_ENGINE */ 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void tls_engine_deinit(struct tls_connection *conn) 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: engine deinit"); 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->private_key) { 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_PKEY_free(conn->private_key); 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->private_key = NULL; 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->engine) { 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ENGINE_finish(conn->engine); 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->engine = NULL; 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_get_errors(void *ssl_ctx) 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int count = 0; 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err; 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((err = ERR_get_error())) { 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS - SSL error: %s", 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(err, NULL)); 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count++; 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return count; 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 101226af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen 101326af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinenstatic void tls_msg_cb(int write_p, int version, int content_type, 101426af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen const void *buf, size_t len, SSL *ssl, void *arg) 101526af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen{ 101626af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen struct tls_connection *conn = arg; 101726af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen const u8 *pos = buf; 101826af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen 101926af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpa_printf(MSG_DEBUG, "OpenSSL: %s ver=0x%x content_type=%d", 102026af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen write_p ? "TX" : "RX", version, content_type); 102126af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpa_hexdump_key(MSG_MSGDUMP, "OpenSSL: Message", buf, len); 102226af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen if (content_type == 24 && len >= 3 && pos[0] == 1) { 102326af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen size_t payload_len = WPA_GET_BE16(pos + 1); 102426af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen if (payload_len + 3 > len) { 102526af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpa_printf(MSG_ERROR, "OpenSSL: Heartbeat attack detected"); 102626af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen conn->invalid_hb_used = 1; 102726af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen } 102826af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen } 102926af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen} 103026af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen 103126af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct tls_connection * tls_connection_init(void *ssl_ctx) 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl = ssl_ctx; 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn; 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long options; 1037ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#ifdef OPENSSL_SUPPORTS_CTX_APP_DATA 10387d5c8f257a74ac0d12828962a492e8b84ef83923Dmitry Shmidt struct tls_context *context = SSL_CTX_get_app_data(ssl); 10397d5c8f257a74ac0d12828962a492e8b84ef83923Dmitry Shmidt#else /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 10407d5c8f257a74ac0d12828962a492e8b84ef83923Dmitry Shmidt struct tls_context *context = tls_global; 1041ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt#endif /* OPENSSL_SUPPORTS_CTX_APP_DATA */ 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn = os_zalloc(sizeof(*conn)); 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 1046216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt conn->ssl_ctx = ssl_ctx; 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ssl = SSL_new(ssl); 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->ssl == NULL) { 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to initialize new SSL connection"); 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn); 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1055ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt conn->context = context; 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_app_data(conn->ssl, conn); 105726af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen SSL_set_msg_callback(conn->ssl, tls_msg_cb); 105826af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen SSL_set_msg_callback_arg(conn->ssl, conn); 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt options = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_OP_SINGLE_DH_USE; 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef SSL_OP_NO_COMPRESSION 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt options |= SSL_OP_NO_COMPRESSION; 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* SSL_OP_NO_COMPRESSION */ 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_options(conn->ssl, options); 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ssl_in = BIO_new(BIO_s_mem()); 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!conn->ssl_in) { 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to create a new BIO for ssl_in"); 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_free(conn->ssl); 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn); 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ssl_out = BIO_new(BIO_s_mem()); 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!conn->ssl_out) { 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to create a new BIO for ssl_out"); 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_free(conn->ssl); 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(conn->ssl_in); 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn); 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_bio(conn->ssl, conn->ssl_in, conn->ssl_out); 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return conn; 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid tls_connection_deinit(void *ssl_ctx, struct tls_connection *conn) 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 10948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 10958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_free(conn->ssl); 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_engine_deinit(conn); 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->subject_match); 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->altsubject_match); 1099051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt os_free(conn->suffix_match); 11002f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_free(conn->domain_match); 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->session_ticket); 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn); 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_established(void *ssl_ctx, struct tls_connection *conn) 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return conn ? SSL_is_init_finished(conn->ssl) : 0; 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_shutdown(void *ssl_ctx, struct tls_connection *conn) 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Shutdown previous TLS connection without notifying the peer 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * because the connection was already terminated in practice 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * and "close notify" shutdown alert would confuse AS. */ 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_quiet_shutdown(conn->ssl, 1); 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_shutdown(conn->ssl); 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_match_altsubject_component(X509 *cert, int type, 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *value, size_t len) 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt GENERAL_NAME *gen; 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ext; 11319ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt int found = 0; 11329ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt stack_index_t i; 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ext = X509_get_ext_d2i(cert, NID_subject_alt_name, NULL, NULL); 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; ext && i < sk_GENERAL_NAME_num(ext); i++) { 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt gen = sk_GENERAL_NAME_value(ext, i); 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (gen->type != type) 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_strlen((char *) gen->d.ia5->data) == len && 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(value, gen->d.ia5->data, len) == 0) 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt found++; 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return found; 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_match_altsubject(X509 *cert, const char *match) 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int type; 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *pos, *end; 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len; 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = match; 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt do { 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_strncmp(pos, "EMAIL:", 6) == 0) { 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type = GEN_EMAIL; 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 6; 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (os_strncmp(pos, "DNS:", 4) == 0) { 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type = GEN_DNS; 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 4; 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (os_strncmp(pos, "URI:", 4) == 0) { 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type = GEN_URI; 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 4; 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Invalid altSubjectName " 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "match '%s'", pos); 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = os_strchr(pos, ';'); 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (end) { 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_strncmp(end + 1, "EMAIL:", 6) == 0 || 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_strncmp(end + 1, "DNS:", 4) == 0 || 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_strncmp(end + 1, "URI:", 4) == 0) 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = os_strchr(end + 1, ';'); 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (end) 11808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = end - pos; 11818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 11828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = os_strlen(pos); 11838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_match_altsubject_component(cert, type, pos, len) > 0) 11848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 11858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = end + 1; 11868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } while (end); 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1192fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 11932f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidtstatic int domain_suffix_match(const u8 *val, size_t len, const char *match, 11942f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt int full) 1195051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt{ 1196051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt size_t i, match_len; 1197051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1198051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt /* Check for embedded nuls that could mess up suffix matching */ 1199051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt for (i = 0; i < len; i++) { 1200051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (val[i] == '\0') { 1201051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Embedded null in a string - reject"); 1202051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 0; 1203051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1204051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1205051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1206051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt match_len = os_strlen(match); 12072f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (match_len > len || (full && match_len != len)) 1208051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 0; 1209051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1210051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (os_strncasecmp((const char *) val + len - match_len, match, 1211051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt match_len) != 0) 1212051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 0; /* no match */ 1213051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1214051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (match_len == len) 1215051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 1; /* exact match */ 1216051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1217051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (val[len - match_len - 1] == '.') 1218051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 1; /* full label match completes suffix match */ 1219051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1220051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Reject due to incomplete label match"); 1221051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 0; 1222051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt} 1223fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 1224051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1225051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 12262f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidtstatic int tls_match_suffix(X509 *cert, const char *match, int full) 1227051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt{ 1228fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt#ifdef CONFIG_NATIVE_WINDOWS 1229fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt /* wincrypt.h has conflicting X509_NAME definition */ 1230fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt return -1; 1231fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt#else /* CONFIG_NATIVE_WINDOWS */ 1232051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt GENERAL_NAME *gen; 1233051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt void *ext; 1234051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt int i; 12359ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt stack_index_t j; 1236051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt int dns_name = 0; 1237051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt X509_NAME *name; 1238051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 12392f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Match domain against %s%s", 12402f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt full ? "": "suffix ", match); 1241051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1242051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt ext = X509_get_ext_d2i(cert, NID_subject_alt_name, NULL, NULL); 1243051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 12449ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (j = 0; ext && j < sk_GENERAL_NAME_num(ext); j++) { 12459ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt gen = sk_GENERAL_NAME_value(ext, j); 1246051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (gen->type != GEN_DNS) 1247051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt continue; 1248051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt dns_name++; 1249051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "TLS: Certificate dNSName", 1250051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt gen->d.dNSName->data, 1251051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt gen->d.dNSName->length); 1252051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (domain_suffix_match(gen->d.dNSName->data, 12532f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt gen->d.dNSName->length, match, full) == 12542f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 1) { 12552f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: %s in dNSName found", 12562f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt full ? "Match" : "Suffix match"); 1257051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 1; 1258051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1259051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1260051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1261051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (dns_name) { 1262051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: None of the dNSName(s) matched"); 1263051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 0; 1264051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1265051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1266051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt name = X509_get_subject_name(cert); 1267051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt i = -1; 1268051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt for (;;) { 1269051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt X509_NAME_ENTRY *e; 1270051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt ASN1_STRING *cn; 1271051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1272051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt i = X509_NAME_get_index_by_NID(name, NID_commonName, i); 1273051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (i == -1) 1274051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt break; 1275051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt e = X509_NAME_get_entry(name, i); 1276051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (e == NULL) 1277051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt continue; 1278051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt cn = X509_NAME_ENTRY_get_data(e); 1279051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (cn == NULL) 1280051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt continue; 1281051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "TLS: Certificate commonName", 1282051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt cn->data, cn->length); 12832f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (domain_suffix_match(cn->data, cn->length, match, full) == 1) 12842f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt { 12852f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: %s in commonName found", 12862f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt full ? "Match" : "Suffix match"); 1287051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 1; 1288051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1289051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1290051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 12912f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: No CommonName %smatch found", 12922f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt full ? "": "suffix "); 1293051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return 0; 1294fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 1295051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt} 1296051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 1297051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 12988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic enum tls_fail_reason openssl_tls_fail_reason(int err) 12998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (err) { 13018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CERT_REVOKED: 13028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_FAIL_REVOKED; 13038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CERT_NOT_YET_VALID: 13048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CRL_NOT_YET_VALID: 13058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_FAIL_NOT_YET_VALID; 13068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CERT_HAS_EXPIRED: 13078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CRL_HAS_EXPIRED: 13088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_FAIL_EXPIRED; 13098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: 13108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_GET_CRL: 13118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER: 13128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN: 13138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: 13148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: 13158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE: 13168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CERT_CHAIN_TOO_LONG: 13178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_PATH_LENGTH_EXCEEDED: 13188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_INVALID_CA: 13198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_FAIL_UNTRUSTED; 13208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE: 13218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE: 13228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY: 13238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD: 13248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD: 13258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD: 13268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD: 13278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CERT_UNTRUSTED: 13288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case X509_V_ERR_CERT_REJECTED: 13298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_FAIL_BAD_CERTIFICATE; 13308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 13318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_FAIL_UNSPECIFIED; 13328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic struct wpabuf * get_x509_cert(X509 *cert) 13378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 13398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *tmp; 13408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int cert_len = i2d_X509(cert, NULL); 13428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert_len <= 0) 13438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 13448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = wpabuf_alloc(cert_len); 13468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) 13478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 13488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = wpabuf_put(buf, cert_len); 13508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt i2d_X509(cert, &tmp); 13518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf; 13528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void openssl_tls_fail_event(struct tls_connection *conn, 13568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *err_cert, int err, int depth, 13578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *subject, const char *err_str, 13588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum tls_fail_reason reason) 13598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt union tls_event_data ev; 13618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *cert = NULL; 1362ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context = conn->context; 13638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1364ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (context->event_cb == NULL) 13658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 13668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = get_x509_cert(err_cert); 13688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&ev, 0, sizeof(ev)); 13698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.cert_fail.reason = reason != TLS_FAIL_UNSPECIFIED ? 13708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt reason : openssl_tls_fail_reason(err); 13718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.cert_fail.depth = depth; 13728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.cert_fail.subject = subject; 13738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.cert_fail.reason_txt = err_str; 13748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.cert_fail.cert = cert; 1375ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->event_cb(context->cb_ctx, TLS_CERT_CHAIN_FAILURE, &ev); 13768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(cert); 13778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void openssl_tls_cert_event(struct tls_connection *conn, 13818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *err_cert, int depth, 13828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *subject) 13838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *cert = NULL; 13858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt union tls_event_data ev; 1386ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context = conn->context; 13872f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt char *altsubject[TLS_MAX_ALT_SUBJECT]; 13882f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt int alt, num_altsubject = 0; 13892f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt GENERAL_NAME *gen; 13902f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt void *ext; 13912f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt stack_index_t i; 13928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_SHA256 13938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[32]; 13948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_SHA256 */ 13958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1396ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (context->event_cb == NULL) 13978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 13988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&ev, 0, sizeof(ev)); 1400ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (conn->cert_probe || context->cert_in_cb) { 14018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = get_x509_cert(err_cert); 14028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.peer_cert.cert = cert; 14038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_SHA256 14058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert) { 14068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[1]; 14078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[1]; 14088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = wpabuf_head(cert); 14098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = wpabuf_len(cert); 14108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sha256_vector(1, addr, len, hash) == 0) { 14118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.peer_cert.hash = hash; 14128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.peer_cert.hash_len = sizeof(hash); 14138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_SHA256 */ 14168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.peer_cert.depth = depth; 14178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ev.peer_cert.subject = subject; 14182f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 14192f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt ext = X509_get_ext_d2i(err_cert, NID_subject_alt_name, NULL, NULL); 14202f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt for (i = 0; ext && i < sk_GENERAL_NAME_num(ext); i++) { 14212f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt char *pos; 14222f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 14232f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (num_altsubject == TLS_MAX_ALT_SUBJECT) 14242f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt break; 14252f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt gen = sk_GENERAL_NAME_value(ext, i); 14262f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (gen->type != GEN_EMAIL && 14272f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt gen->type != GEN_DNS && 14282f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt gen->type != GEN_URI) 14292f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt continue; 14302f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 14312f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt pos = os_malloc(10 + gen->d.ia5->length + 1); 14322f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (pos == NULL) 14332f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt break; 14342f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt altsubject[num_altsubject++] = pos; 14352f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 14362f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt switch (gen->type) { 14372f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt case GEN_EMAIL: 14382f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_memcpy(pos, "EMAIL:", 6); 14392f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt pos += 6; 14402f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt break; 14412f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt case GEN_DNS: 14422f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_memcpy(pos, "DNS:", 4); 14432f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt pos += 4; 14442f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt break; 14452f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt case GEN_URI: 14462f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_memcpy(pos, "URI:", 4); 14472f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt pos += 4; 14482f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt break; 14492f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt } 14502f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 14512f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_memcpy(pos, gen->d.ia5->data, gen->d.ia5->length); 14522f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt pos += gen->d.ia5->length; 14532f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt *pos = '\0'; 14542f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt } 14552f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 14562f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt for (alt = 0; alt < num_altsubject; alt++) 14572f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt ev.peer_cert.altsubject[alt] = altsubject[alt]; 14582f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt ev.peer_cert.num_altsubject = num_altsubject; 14592f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 1460ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->event_cb(context->cb_ctx, TLS_PEER_CERTIFICATE, &ev); 14618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(cert); 14622f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt for (alt = 0; alt < num_altsubject; alt++) 14632f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_free(altsubject[alt]); 14648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_verify_cb(int preverify_ok, X509_STORE_CTX *x509_ctx) 14688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char buf[256]; 14708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *err_cert; 14718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int err, depth; 14728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL *ssl; 14738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn; 1474ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt struct tls_context *context; 14752f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt char *match, *altmatch, *suffix_match, *domain_match; 14768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *err_str; 14778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err_cert = X509_STORE_CTX_get_current_cert(x509_ctx); 147996be6222df414a7dde5c5b1b72df22e67b1a77fcDmitry Shmidt if (!err_cert) 148096be6222df414a7dde5c5b1b72df22e67b1a77fcDmitry Shmidt return 0; 148196be6222df414a7dde5c5b1b72df22e67b1a77fcDmitry Shmidt 14828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err = X509_STORE_CTX_get_error(x509_ctx); 14838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt depth = X509_STORE_CTX_get_error_depth(x509_ctx); 14848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ssl = X509_STORE_CTX_get_ex_data(x509_ctx, 14858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_get_ex_data_X509_STORE_CTX_idx()); 14868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_NAME_oneline(X509_get_subject_name(err_cert), buf, sizeof(buf)); 14878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn = SSL_get_app_data(ssl); 14898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 14908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 149134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 149234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (depth == 0) 149334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt conn->peer_cert = err_cert; 149434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt else if (depth == 1) 149534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt conn->peer_issuer = err_cert; 1496fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt else if (depth == 2) 1497fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt conn->peer_issuer_issuer = err_cert; 149834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 1499ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context = conn->context; 15008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt match = conn->subject_match; 15018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt altmatch = conn->altsubject_match; 1502051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt suffix_match = conn->suffix_match; 15032f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt domain_match = conn->domain_match; 15048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!preverify_ok && !conn->ca_cert_verify) 15068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 1; 15078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!preverify_ok && depth > 0 && conn->server_cert_only) 15088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 1; 1509c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt if (!preverify_ok && (conn->flags & TLS_CONN_DISABLE_TIME_CHECKS) && 1510c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt (err == X509_V_ERR_CERT_HAS_EXPIRED || 1511c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt err == X509_V_ERR_CERT_NOT_YET_VALID)) { 1512c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Ignore certificate validity " 1513c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt "time mismatch"); 1514c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt preverify_ok = 1; 1515c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt } 15168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err_str = X509_verify_cert_error_string(err); 15188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_SHA256 15204dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt /* 15214dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt * Do not require preverify_ok so we can explicity allow otherwise 15224dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt * invalid pinned server certificates. 15234dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt */ 15244dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt if (depth == 0 && conn->server_cert_only) { 15258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *cert; 15268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = get_x509_cert(err_cert); 15278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!cert) { 15288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Could not fetch " 15298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server certificate data"); 15308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 0; 15318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 15328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[32]; 15338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[1]; 15348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[1]; 15358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = wpabuf_head(cert); 15368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = wpabuf_len(cert); 15378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sha256_vector(1, addr, len, hash) < 0 || 15388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(conn->srv_cert_hash, hash, 32) != 0) { 15398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err_str = "Server certificate mismatch"; 15408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err = X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN; 15418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 0; 15424dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt } else if (!preverify_ok) { 15434dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt /* 15444dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt * Certificate matches pinned certificate, allow 15454dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt * regardless of other problems. 15464dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt */ 15474dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt wpa_printf(MSG_DEBUG, 15484dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt "OpenSSL: Ignore validation issues for a pinned server certificate"); 15494dd28dc25895165566a1c8a9cac7bcd755ff8fe3Dmitry Shmidt preverify_ok = 1; 15508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(cert); 15528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_SHA256 */ 15558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!preverify_ok) { 15578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TLS: Certificate verification failed," 15588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " error %d (%s) depth %d for '%s'", err, err_str, 15598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt depth, buf); 15608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt openssl_tls_fail_event(conn, err_cert, err, depth, buf, 15618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err_str, TLS_FAIL_UNSPECIFIED); 15628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return preverify_ok; 15638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: tls_verify_cb - preverify_ok=%d " 15668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "err=%d (%s) ca_cert_verify=%d depth=%d buf='%s'", 15678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok, err, err_str, 15688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ca_cert_verify, depth, buf); 15698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (depth == 0 && match && os_strstr(buf, match) == NULL) { 15708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TLS: Subject '%s' did not " 15718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "match with '%s'", buf, match); 15728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 0; 15738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt openssl_tls_fail_event(conn, err_cert, err, depth, buf, 15748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Subject mismatch", 15758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_FAIL_SUBJECT_MISMATCH); 15768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (depth == 0 && altmatch && 15778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt !tls_match_altsubject(err_cert, altmatch)) { 15788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TLS: altSubjectName match " 15798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s' not found", altmatch); 15808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 0; 15818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt openssl_tls_fail_event(conn, err_cert, err, depth, buf, 15828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AltSubject mismatch", 15838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_FAIL_ALTSUBJECT_MISMATCH); 1584051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } else if (depth == 0 && suffix_match && 15852f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt !tls_match_suffix(err_cert, suffix_match, 0)) { 1586051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_printf(MSG_WARNING, "TLS: Domain suffix match '%s' not found", 1587051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt suffix_match); 1588051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt preverify_ok = 0; 1589051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt openssl_tls_fail_event(conn, err_cert, err, depth, buf, 1590051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt "Domain suffix mismatch", 1591051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt TLS_FAIL_DOMAIN_SUFFIX_MISMATCH); 15922f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt } else if (depth == 0 && domain_match && 15932f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt !tls_match_suffix(err_cert, domain_match, 1)) { 15942f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt wpa_printf(MSG_WARNING, "TLS: Domain match '%s' not found", 15952f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt domain_match); 15962f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt preverify_ok = 0; 15972f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt openssl_tls_fail_event(conn, err_cert, err, depth, buf, 15982f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt "Domain mismatch", 15992f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt TLS_FAIL_DOMAIN_MISMATCH); 16008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 16018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt openssl_tls_cert_event(conn, err_cert, depth, buf); 16028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->cert_probe && preverify_ok && depth == 0) { 16048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Reject server certificate " 16058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "on probe-only run"); 16068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt preverify_ok = 0; 16078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt openssl_tls_fail_event(conn, err_cert, err, depth, buf, 16088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Server certificate chain probe", 16098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_FAIL_SERVER_CHAIN_PROBE); 16108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1612ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt if (preverify_ok && context->event_cb != NULL) 1613ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt context->event_cb(context->cb_ctx, 1614ea69e84a6f4455c59348485895d3d5e3af77a65bDmitry Shmidt TLS_CERT_CHAIN_SUCCESS, NULL); 161504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 16168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return preverify_ok; 16178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 16188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 16218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_load_ca_der(void *_ssl_ctx, const char *ca_cert) 16228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 16238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl_ctx = _ssl_ctx; 16248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_LOOKUP *lookup; 16258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret = 0; 16268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1627216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt lookup = X509_STORE_add_lookup(SSL_CTX_get_cert_store(ssl_ctx), 16288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_LOOKUP_file()); 16298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (lookup == NULL) { 16308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 16318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed add lookup for X509 store"); 16328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 16338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!X509_LOOKUP_load_file(lookup, ca_cert, X509_FILETYPE_ASN1)) { 16368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err = ERR_peek_error(); 16378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 16388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed load CA in DER format"); 16398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ERR_GET_LIB(err) == ERR_LIB_X509 && 16408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_GET_REASON(err) == X509_R_CERT_ALREADY_IN_HASH_TABLE) { 16418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - ignoring " 16428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "cert already in hash table error", 16438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 16448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 16458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = -1; 16468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 16498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 16508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 16518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_ca_cert(void *_ssl_ctx, struct tls_connection *conn, 16548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *ca_cert, const u8 *ca_cert_blob, 16558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t ca_cert_blob_len, const char *ca_path) 16568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 16578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl_ctx = _ssl_ctx; 1658216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt X509_STORE *store; 16598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 16618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Remove previously configured trusted CA certificates before adding 16628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * new ones. 16638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1664216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt store = X509_STORE_new(); 1665216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt if (store == NULL) { 16668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - failed to allocate new " 16678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate store", __func__); 16688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 16698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1670216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt SSL_CTX_set_cert_store(ssl_ctx, store); 16718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_verify(conn->ssl, SSL_VERIFY_PEER, tls_verify_cb); 16738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ca_cert_verify = 1; 16748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert && os_strncmp(ca_cert, "probe://", 8) == 0) { 16768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Probe for server certificate " 16778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "chain"); 16788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->cert_probe = 1; 16798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ca_cert_verify = 0; 16808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 16818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert && os_strncmp(ca_cert, "hash://", 7) == 0) { 16848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_SHA256 16858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *pos = ca_cert + 7; 16868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_strncmp(pos, "server/sha256/", 14) != 0) { 16878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Unsupported ca_cert " 16888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "hash value '%s'", ca_cert); 16898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 16908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 14; 16928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_strlen(pos) != 32 * 2) { 16938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Unexpected SHA256 " 16948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "hash length in ca_cert '%s'", ca_cert); 16958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 16968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (hexstr2bin(pos, conn->srv_cert_hash, 32) < 0) { 16988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Invalid SHA256 hash " 16998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "value in ca_cert '%s'", ca_cert); 17008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->server_cert_only = 1; 17038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Checking only server " 17048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate match"); 17058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 17068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* CONFIG_SHA256 */ 17078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "No SHA256 included in the build - " 17088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "cannot validate server certificate hash"); 17098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_SHA256 */ 17118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert_blob) { 1714216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt X509 *cert = d2i_X509(NULL, 1715216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt (const unsigned char **) &ca_cert_blob, 17168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ca_cert_blob_len); 17178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert == NULL) { 17188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 17198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to parse ca_cert_blob"); 17208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1723216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt if (!X509_STORE_add_cert(SSL_CTX_get_cert_store(ssl_ctx), 1724216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt cert)) { 17258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err = ERR_peek_error(); 17268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 17278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to add ca_cert_blob to " 17288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate store"); 17298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ERR_GET_LIB(err) == ERR_LIB_X509 && 17308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_GET_REASON(err) == 17318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_R_CERT_ALREADY_IN_HASH_TABLE) { 17328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - ignoring " 17338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "cert already in hash table error", 17348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 17358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 17368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 17378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 17418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - added ca_cert_blob " 17428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "to certificate store", __func__); 17438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 17448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef ANDROID 17478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert && os_strncmp("keystore://", ca_cert, 11) == 0) { 17488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO *bio = BIO_from_keystore(&ca_cert[11]); 17498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt STACK_OF(X509_INFO) *stack = NULL; 17509ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt stack_index_t i; 17518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bio) { 17538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt stack = PEM_X509_INFO_read_bio(bio, NULL, NULL, NULL); 17548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(bio); 17558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!stack) 17578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < sk_X509_INFO_num(stack); ++i) { 17608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_INFO *info = sk_X509_INFO_value(stack, i); 17618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (info->x509) { 17628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_STORE_add_cert(ssl_ctx->cert_store, 17638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt info->x509); 17648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (info->crl) { 17668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_STORE_add_crl(ssl_ctx->cert_store, 17678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt info->crl); 17688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sk_X509_INFO_pop_free(stack, X509_INFO_free); 17718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_verify(conn->ssl, SSL_VERIFY_PEER, tls_verify_cb); 17728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 17738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* ANDROID */ 17758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_NATIVE_WINDOWS 17778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert && tls_cryptoapi_ca_cert(ssl_ctx, conn->ssl, ca_cert) == 17788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0) { 17798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Added CA certificates from " 17808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "system certificate store"); 17818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 17828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 17848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert || ca_path) { 17868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 17878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_load_verify_locations(ssl_ctx, ca_cert, ca_path) != 17888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1) { 17898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 17908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to load root certificates"); 17918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert && 17928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_load_ca_der(ssl_ctx, ca_cert) == 0) { 17938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - loaded " 17948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "DER format CA certificate", 17958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 17968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 17978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 17998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Trusted root " 18008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate(s) loaded"); 18018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_get_errors(ssl_ctx); 18028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_STDIO */ 18048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - OPENSSL_NO_STDIO", 18058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 18068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 18088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 18098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* No ca_cert configured - do not try to verify server 18108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * certificate */ 18118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ca_cert_verify = 0; 18128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 18158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 18168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_global_ca_cert(SSL_CTX *ssl_ctx, const char *ca_cert) 18198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 18208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ca_cert) { 18218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_load_verify_locations(ssl_ctx, ca_cert, NULL) != 1) 18228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt { 18238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 18248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to load root certificates"); 18258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Trusted root " 18298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate(s) loaded"); 18308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 18328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Add the same CAs to the client certificate requests */ 18338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_client_CA_list(ssl_ctx, 18348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_load_client_CA_file(ca_cert)); 18358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 18368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 18398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 18408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_global_set_verify(void *ssl_ctx, int check_crl) 18438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 18448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int flags; 18458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (check_crl) { 18478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_STORE *cs = SSL_CTX_get_cert_store(ssl_ctx); 18488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cs == NULL) { 18498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, "Failed to get " 18508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate store when enabling " 18518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "check_crl"); 18528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt flags = X509_V_FLAG_CRL_CHECK; 18558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (check_crl == 2) 18568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt flags |= X509_V_FLAG_CRL_CHECK_ALL; 18578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_STORE_set_flags(cs, flags); 18588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 18608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 18618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_set_subject_match(struct tls_connection *conn, 18648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *subject_match, 1865051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt const char *altsubject_match, 18662f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt const char *suffix_match, 18672f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt const char *domain_match) 18688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 18698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->subject_match); 18708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->subject_match = NULL; 18718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (subject_match) { 18728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->subject_match = os_strdup(subject_match); 18738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->subject_match == NULL) 18748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->altsubject_match); 18788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->altsubject_match = NULL; 18798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (altsubject_match) { 18808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->altsubject_match = os_strdup(altsubject_match); 18818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->altsubject_match == NULL) 18828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1885051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt os_free(conn->suffix_match); 1886051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt conn->suffix_match = NULL; 1887051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (suffix_match) { 1888051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt conn->suffix_match = os_strdup(suffix_match); 1889051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt if (conn->suffix_match == NULL) 1890051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt return -1; 1891051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt } 1892051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt 18932f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt os_free(conn->domain_match); 18942f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt conn->domain_match = NULL; 18952f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (domain_match) { 18962f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt conn->domain_match = os_strdup(domain_match); 18972f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (conn->domain_match == NULL) 18982f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt return -1; 18992f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt } 19002f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt 19018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 19028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 19038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_set_verify(void *ssl_ctx, struct tls_connection *conn, 19068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int verify_peer) 19078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 19088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt static int counter = 0; 19098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 19118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (verify_peer) { 19148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ca_cert_verify = 1; 19158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_verify(conn->ssl, SSL_VERIFY_PEER | 19168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_VERIFY_FAIL_IF_NO_PEER_CERT | 19178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_VERIFY_CLIENT_ONCE, tls_verify_cb); 19188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 19198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->ca_cert_verify = 0; 19208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_verify(conn->ssl, SSL_VERIFY_NONE, NULL); 19218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_accept_state(conn->ssl); 19248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 19268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Set session id context in order to avoid fatal errors when client 19278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * tries to resume a session. However, set the context to a unique 19288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * value in order to effectively disable session resumption for now 19298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * since not all areas of the server code are ready for it (e.g., 19308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EAP-TTLS needs special handling for Phase 2 after abbreviated TLS 19318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * handshake). 19328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 19338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt counter++; 19348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_session_id_context(conn->ssl, 19358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (const unsigned char *) &counter, 19368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(counter)); 19378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 19398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 19408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_client_cert(struct tls_connection *conn, 19438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *client_cert, 19448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *client_cert_blob, 19458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t client_cert_blob_len) 19468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 19478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (client_cert == NULL && client_cert_blob == NULL) 19488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 19498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (client_cert_blob && 19518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_use_certificate_ASN1(conn->ssl, (u8 *) client_cert_blob, 19528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt client_cert_blob_len) == 1) { 19538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_certificate_ASN1 --> " 19548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "OK"); 19558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 19568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (client_cert_blob) { 19578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_DEBUG, __func__, 19588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SSL_use_certificate_ASN1 failed"); 19598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (client_cert == NULL) 19628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef ANDROID 19658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_strncmp("keystore://", client_cert, 11) == 0) { 19668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO *bio = BIO_from_keystore(&client_cert[11]); 19678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *x509 = NULL; 19688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret = -1; 19698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bio) { 19708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt x509 = PEM_read_bio_X509(bio, NULL, NULL, NULL); 19718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(bio); 19728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (x509) { 19748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_certificate(conn->ssl, x509) == 1) 19758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = 0; 19768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(x509); 19778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 19798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* ANDROID */ 19818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 19838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_certificate_file(conn->ssl, client_cert, 19848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_ASN1) == 1) { 19858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_certificate_file (DER)" 19868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " --> OK"); 19878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 19888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_certificate_file(conn->ssl, client_cert, 19918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_PEM) == 1) { 19928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_clear_error(); 19938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_certificate_file (PEM)" 19948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " --> OK"); 19958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 19968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_DEBUG, __func__, 19998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SSL_use_certificate_file failed"); 20008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_STDIO */ 20018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - OPENSSL_NO_STDIO", __func__); 20028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 20038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 20068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_global_client_cert(SSL_CTX *ssl_ctx, const char *client_cert) 20098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 20108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 20118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (client_cert == NULL) 20128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 20138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_use_certificate_file(ssl_ctx, client_cert, 20158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_ASN1) != 1 && 20161f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt SSL_CTX_use_certificate_chain_file(ssl_ctx, client_cert) != 1 && 20178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_use_certificate_file(ssl_ctx, client_cert, 20188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_PEM) != 1) { 20198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 20208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to load client certificate"); 20218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 20248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_STDIO */ 20258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (client_cert == NULL) 20268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 20278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - OPENSSL_NO_STDIO", __func__); 20288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 20308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 20318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_passwd_cb(char *buf, int size, int rwflag, void *password) 20348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 20358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (password == NULL) { 20368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 20378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_strlcpy(buf, (char *) password, size); 20398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_strlen(buf); 20408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 20418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef PKCS12_FUNCS 20448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_parse_pkcs12(SSL_CTX *ssl_ctx, SSL *ssl, PKCS12 *p12, 20458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *passwd) 20468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 20478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_PKEY *pkey; 20488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *cert; 20498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt STACK_OF(X509) *certs; 20508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res = 0; 20518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char buf[256]; 20528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pkey = NULL; 20548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cert = NULL; 20558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt certs = NULL; 20568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!PKCS12_parse(p12, passwd, &pkey, &cert, &certs)) { 20578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_DEBUG, __func__, 20588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to parse PKCS12 file"); 20598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS12_free(p12); 20608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Successfully parsed PKCS12 data"); 20638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cert) { 20658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_NAME_oneline(X509_get_subject_name(cert), buf, 20668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(buf)); 20678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Got certificate from PKCS12: " 20688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "subject='%s'", buf); 20698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ssl) { 20708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_certificate(ssl, cert) != 1) 20718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = -1; 20728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 20738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_use_certificate(ssl_ctx, cert) != 1) 20748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = -1; 20758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 20778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pkey) { 20808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Got private key from PKCS12"); 20818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ssl) { 20828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_PrivateKey(ssl, pkey) != 1) 20838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = -1; 20848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 20858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_use_PrivateKey(ssl_ctx, pkey) != 1) 20868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = -1; 20878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EVP_PKEY_free(pkey); 20898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (certs) { 20928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((cert = sk_X509_pop(certs)) != NULL) { 20938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_NAME_oneline(X509_get_subject_name(cert), buf, 20948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(buf)); 20958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: additional certificate" 20968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " from PKCS12: subject='%s'", buf); 20978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 20988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * There is no SSL equivalent for the chain cert - so 20998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * always add it to the context... 21008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 21018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_add_extra_chain_cert(ssl_ctx, cert) != 1) { 21028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = -1; 21038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sk_X509_free(certs); 21078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS12_free(p12); 21108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) 21128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_get_errors(ssl_ctx); 21138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return res; 21158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 21168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* PKCS12_FUNCS */ 21178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_read_pkcs12(SSL_CTX *ssl_ctx, SSL *ssl, const char *private_key, 21208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *passwd) 21218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 21228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef PKCS12_FUNCS 21238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt FILE *f; 21248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS12 *p12; 21258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt f = fopen(private_key, "rb"); 21278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (f == NULL) 21288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt p12 = d2i_PKCS12_fp(f, NULL); 21318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt fclose(f); 21328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (p12 == NULL) { 21348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 21358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to use PKCS#12 file"); 21368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return tls_parse_pkcs12(ssl_ctx, ssl, p12, passwd); 21408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* PKCS12_FUNCS */ 21428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: PKCS12 support disabled - cannot read " 21438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "p12/pfx files"); 21448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* PKCS12_FUNCS */ 21468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 21478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_read_pkcs12_blob(SSL_CTX *ssl_ctx, SSL *ssl, 21508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *blob, size_t len, const char *passwd) 21518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 21528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef PKCS12_FUNCS 21538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt PKCS12 *p12; 21548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2155216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt p12 = d2i_PKCS12(NULL, (const unsigned char **) &blob, len); 21568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (p12 == NULL) { 21578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 21588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to use PKCS#12 blob"); 21598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return tls_parse_pkcs12(ssl_ctx, ssl, p12, passwd); 21638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* PKCS12_FUNCS */ 21658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: PKCS12 support disabled - cannot parse " 21668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "p12/pfx blobs"); 21678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* PKCS12_FUNCS */ 21698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 21708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 21738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_engine_get_cert(struct tls_connection *conn, 21748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *cert_id, 21758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 **cert) 21768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 21778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* this runs after the private key is loaded so no PIN is required */ 21788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct { 21798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *cert_id; 21808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *cert; 21818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } params; 21828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params.cert_id = cert_id; 21838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params.cert = NULL; 21848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!ENGINE_ctrl_cmd(conn->engine, "LOAD_CERT_CTRL", 21868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0, ¶ms, NULL, 1)) { 21878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: cannot load client cert with id" 21888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " '%s' [%s]", cert_id, 21898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 21908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_SET_PARAMS_ENGINE_PRV_INIT_FAILED; 21918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!params.cert) { 21938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "ENGINE: did not properly cert with id" 21948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " '%s'", cert_id); 21958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_SET_PARAMS_ENGINE_PRV_INIT_FAILED; 21968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *cert = params.cert; 21988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 21998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 22018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_engine_client_cert(struct tls_connection *conn, 22048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *cert_id) 22058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 22078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *cert; 22088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_engine_get_cert(conn, cert_id, &cert)) 22108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!SSL_use_certificate(conn->ssl, cert)) { 22138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_ERROR, __func__, 22148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SSL_use_certificate failed"); 22158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 22168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 22198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "ENGINE: SSL_use_certificate --> " 22208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "OK"); 22218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 22228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_ENGINE */ 22248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 22268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_engine_ca_cert(void *_ssl_ctx, 22308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn, 22318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *ca_cert_id) 22328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 22348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509 *cert; 22358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl_ctx = _ssl_ctx; 2236216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt X509_STORE *store; 22378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_engine_get_cert(conn, ca_cert_id, &cert)) 22398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* start off the same as tls_connection_ca_cert */ 2242216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt store = X509_STORE_new(); 2243216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt if (store == NULL) { 22448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - failed to allocate new " 22458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "certificate store", __func__); 22468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 22478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2249216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt SSL_CTX_set_cert_store(ssl_ctx, store); 2250216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt if (!X509_STORE_add_cert(store, cert)) { 22518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err = ERR_peek_error(); 22528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_WARNING, __func__, 22538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to add CA certificate from engine " 22548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "to certificate store"); 22558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ERR_GET_LIB(err) == ERR_LIB_X509 && 22568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_GET_REASON(err) == X509_R_CERT_ALREADY_IN_HASH_TABLE) { 22578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - ignoring cert" 22588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " already in hash table error", 22598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 22608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 22618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 22628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt X509_free(cert); 22668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - added CA certificate from engine " 22678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "to certificate store", __func__); 22688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_verify(conn->ssl, SSL_VERIFY_PEER, tls_verify_cb); 226961d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt conn->ca_cert_verify = 1; 227061d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt 22718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 22728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_ENGINE */ 22748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 22768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_engine_private_key(struct tls_connection *conn) 22808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_ENGINE 22828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_PrivateKey(conn->ssl, conn->private_key) != 1) { 22838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_ERROR, __func__, 22848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ENGINE: cannot use private key for TLS"); 22858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!SSL_check_private_key(conn->ssl)) { 22888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 22898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Private key failed verification"); 22908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 22938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_ENGINE */ 22948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "SSL: Configuration uses engine, but " 22958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "engine support was not compiled in"); 22968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_ENGINE */ 22988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_private_key(void *_ssl_ctx, 23028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn, 23038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *private_key, 23048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *private_key_passwd, 23058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *private_key_blob, 23068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t private_key_blob_len) 23078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 23088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl_ctx = _ssl_ctx; 23098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *passwd; 23108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok; 23118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (private_key == NULL && private_key_blob == NULL) 23138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 23148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (private_key_passwd) { 23168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt passwd = os_strdup(private_key_passwd); 23178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (passwd == NULL) 23188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 23198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 23208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt passwd = NULL; 23218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_default_passwd_cb(ssl_ctx, tls_passwd_cb); 23238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_default_passwd_cb_userdata(ssl_ctx, passwd); 23248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 0; 23268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (private_key_blob) { 23278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_PrivateKey_ASN1(EVP_PKEY_RSA, conn->ssl, 23288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) private_key_blob, 23298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt private_key_blob_len) == 1) { 23308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_PrivateKey_" 23318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ASN1(EVP_PKEY_RSA) --> OK"); 23328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_PrivateKey_ASN1(EVP_PKEY_DSA, conn->ssl, 23378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) private_key_blob, 23388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt private_key_blob_len) == 1) { 23398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: SSL_use_PrivateKey_" 23408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ASN1(EVP_PKEY_DSA) --> OK"); 23418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_RSAPrivateKey_ASN1(conn->ssl, 23468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) private_key_blob, 23478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt private_key_blob_len) == 1) { 23488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: " 23498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SSL_use_RSAPrivateKey_ASN1 --> OK"); 23508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_read_pkcs12_blob(ssl_ctx, conn->ssl, private_key_blob, 23558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt private_key_blob_len, passwd) == 0) { 23568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: PKCS#12 as blob --> " 23578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "OK"); 23588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (!ok && private_key) { 23668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 23678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_PrivateKey_file(conn->ssl, private_key, 23688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_ASN1) == 1) { 23698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: " 23708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SSL_use_PrivateKey_File (DER) --> OK"); 23718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_use_PrivateKey_file(conn->ssl, private_key, 23768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_PEM) == 1) { 23778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: " 23788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SSL_use_PrivateKey_File (PEM) --> OK"); 23798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_STDIO */ 23838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s - OPENSSL_NO_STDIO", 23848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 23858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 23868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_read_pkcs12(ssl_ctx, conn->ssl, private_key, passwd) 23888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt == 0) { 23898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Reading PKCS#12 file " 23908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "--> OK"); 23918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 23938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_cryptoapi_cert(conn->ssl, private_key) == 0) { 23968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Using CryptoAPI to " 23978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "access certificate store --> OK"); 23988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok = 1; 23998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 24008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 24038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!ok) { 24068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 24078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to load private key"); 24088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(passwd); 24098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_clear_error(); 24128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_default_passwd_cb(ssl_ctx, NULL); 24138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(passwd); 241461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt 24158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!SSL_check_private_key(conn->ssl)) { 24168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, "Private key failed " 24178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "verification"); 24188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: Private key loaded successfully"); 24228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 24238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 24248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_global_private_key(SSL_CTX *ssl_ctx, const char *private_key, 24278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *private_key_passwd) 24288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 24298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *passwd; 24308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (private_key == NULL) 24328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 24338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (private_key_passwd) { 24358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt passwd = os_strdup(private_key_passwd); 24368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (passwd == NULL) 24378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 24398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt passwd = NULL; 24408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_default_passwd_cb(ssl_ctx, tls_passwd_cb); 24428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_default_passwd_cb_userdata(ssl_ctx, passwd); 24438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ( 24448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_STDIO 24458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_use_PrivateKey_file(ssl_ctx, private_key, 24468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_ASN1) != 1 && 24478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_use_PrivateKey_file(ssl_ctx, private_key, 24488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_FILETYPE_PEM) != 1 && 24498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_STDIO */ 24508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_read_pkcs12(ssl_ctx, NULL, private_key, passwd)) { 24518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 24528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to load private key"); 24538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(passwd); 24548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_clear_error(); 24558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(passwd); 24588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_clear_error(); 24598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX_set_default_passwd_cb(ssl_ctx, NULL); 246061d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt 24618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!SSL_CTX_check_private_key(ssl_ctx)) { 24628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 24638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Private key failed verification"); 24648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 24688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 24698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_connection_dh(struct tls_connection *conn, const char *dh_file) 24728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 24738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef OPENSSL_NO_DH 24748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh_file == NULL) 24758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 24768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "TLS: openssl does not include DH support, but " 24778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "dh_file specified"); 24788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_DH */ 24808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DH *dh; 24818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO *bio; 24828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: add support for dh_blob */ 24848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh_file == NULL) 24858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 24868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 24878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 24898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt bio = BIO_new_file(dh_file, "r"); 24908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bio == NULL) { 24918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to open DH file '%s': %s", 24928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh_file, ERR_error_string(ERR_get_error(), NULL)); 24938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 24948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 24958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh = PEM_read_bio_DHparams(bio, NULL, NULL, NULL); 24968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(bio); 24978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_DSA 24988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (dh == NULL) { 24998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DSA *dsa; 25008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Failed to parse DH file '%s': %s -" 25018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " trying to parse as DSA params", dh_file, 25028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 25038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt bio = BIO_new_file(dh_file, "r"); 25048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bio == NULL) 25058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dsa = PEM_read_bio_DSAparams(bio, NULL, NULL, NULL); 25078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(bio); 25088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!dsa) { 25098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Failed to parse DSA file " 25108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s': %s", dh_file, 25118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 25128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: DH file in DSA param format"); 25168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh = DSA_dup_DH(dsa); 25178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DSA_free(dsa); 25188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh == NULL) { 25198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to convert DSA " 25208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "params into DH params"); 25218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* !OPENSSL_NO_DSA */ 25268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh == NULL) { 25278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to read/parse DH/DSA file " 25288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s'", dh_file); 25298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 25308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_set_tmp_dh(conn->ssl, dh) != 1) { 25338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to set DH params from '%s': " 25348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s", dh_file, 25358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 25368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DH_free(dh); 25378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 25388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DH_free(dh); 25408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 25418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_DH */ 25428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 25438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_global_dh(SSL_CTX *ssl_ctx, const char *dh_file) 25468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 25478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef OPENSSL_NO_DH 25488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh_file == NULL) 25498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 25508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "TLS: openssl does not include DH support, but " 25518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "dh_file specified"); 25528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 25538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* OPENSSL_NO_DH */ 25548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DH *dh; 25558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO *bio; 25568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: add support for dh_blob */ 25588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh_file == NULL) 25598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 25608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ssl_ctx == NULL) 25618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 25628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt bio = BIO_new_file(dh_file, "r"); 25648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bio == NULL) { 25658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to open DH file '%s': %s", 25668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh_file, ERR_error_string(ERR_get_error(), NULL)); 25678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 25688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh = PEM_read_bio_DHparams(bio, NULL, NULL, NULL); 25708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(bio); 25718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef OPENSSL_NO_DSA 25728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (dh == NULL) { 25738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DSA *dsa; 25748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Failed to parse DH file '%s': %s -" 25758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " trying to parse as DSA params", dh_file, 25768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 25778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt bio = BIO_new_file(dh_file, "r"); 25788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bio == NULL) 25798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dsa = PEM_read_bio_DSAparams(bio, NULL, NULL, NULL); 25818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_free(bio); 25828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!dsa) { 25838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Failed to parse DSA file " 25848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s': %s", dh_file, 25858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 25868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 25898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: DH file in DSA param format"); 25908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dh = DSA_dup_DH(dsa); 25918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DSA_free(dsa); 25928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh == NULL) { 25938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to convert DSA " 25948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "params into DH params"); 25958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 25988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 25998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* !OPENSSL_NO_DSA */ 26008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dh == NULL) { 26018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to read/parse DH/DSA file " 26028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "'%s'", dh_file); 26038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 26048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 26058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_CTX_set_tmp_dh(ssl_ctx, dh) != 1) { 26078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to set DH params from '%s': " 26088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s", dh_file, 26098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ERR_error_string(ERR_get_error(), NULL)); 26108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DH_free(dh); 26118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 26128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 26138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DH_free(dh); 26148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 26158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* OPENSSL_NO_DH */ 26168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 26178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_get_keys(void *ssl_ctx, struct tls_connection *conn, 26208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_keys *keys) 26218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 262261d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#ifdef CONFIG_FIPS 262361d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt wpa_printf(MSG_ERROR, "OpenSSL: TLS keys cannot be exported in FIPS " 262461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt "mode"); 262561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt return -1; 262661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#else /* CONFIG_FIPS */ 26278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL *ssl; 26288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL || keys == NULL) 26308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 26318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ssl = conn->ssl; 26328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ssl == NULL || ssl->s3 == NULL || ssl->session == NULL) 26338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 26348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(keys, 0, sizeof(*keys)); 26368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys->client_random = ssl->s3->client_random; 26378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys->client_random_len = SSL3_RANDOM_SIZE; 26388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys->server_random = ssl->s3->server_random; 26398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys->server_random_len = SSL3_RANDOM_SIZE; 26408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 264261d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#endif /* CONFIG_FIPS */ 26438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 26448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 26458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2646af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidtstatic int openssl_get_keyblock_size(SSL *ssl) 2647af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt{ 2648af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt const EVP_CIPHER *c; 2649af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt const EVP_MD *h; 2650af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt int md_size; 2651af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2652af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (ssl->enc_read_ctx == NULL || ssl->enc_read_ctx->cipher == NULL || 2653af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt ssl->read_hash == NULL) 2654af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2655af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2656af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt c = ssl->enc_read_ctx->cipher; 2657af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#if OPENSSL_VERSION_NUMBER >= 0x00909000L 2658af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt h = EVP_MD_CTX_md(ssl->read_hash); 2659af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#else 2660af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt h = conn->ssl->read_hash; 2661af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#endif 2662af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (h) 2663af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt md_size = EVP_MD_size(h); 2664af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#if OPENSSL_VERSION_NUMBER >= 0x10000000L 2665af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt else if (ssl->s3) 2666af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt md_size = ssl->s3->tmp.new_mac_secret_size; 2667af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#endif 2668af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt else 2669af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2670af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2671af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: keyblock size: key_len=%d MD_size=%d " 2672af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt "IV_len=%d", EVP_CIPHER_key_length(c), md_size, 2673af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt EVP_CIPHER_iv_length(c)); 2674af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return 2 * (EVP_CIPHER_key_length(c) + 2675af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt md_size + 2676af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt EVP_CIPHER_iv_length(c)); 2677af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt} 2678af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2679af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2680af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidtstatic int openssl_tls_prf(void *tls_ctx, struct tls_connection *conn, 2681af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt const char *label, int server_random_first, 2682af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt int skip_keyblock, u8 *out, size_t out_len) 2683af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt{ 2684af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#ifdef CONFIG_FIPS 2685af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt wpa_printf(MSG_ERROR, "OpenSSL: TLS keys cannot be exported in FIPS " 2686af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt "mode"); 2687af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2688af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#else /* CONFIG_FIPS */ 2689af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt SSL *ssl; 2690af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt u8 *rnd; 2691af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt int ret = -1; 2692af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt int skip = 0; 2693af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt u8 *tmp_out = NULL; 2694af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt u8 *_out = out; 2695af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2696af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt /* 2697af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt * TLS library did not support key generation, so get the needed TLS 2698af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt * session parameters and use an internal implementation of TLS PRF to 2699af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt * derive the key. 2700af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt */ 2701af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2702af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (conn == NULL) 2703af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2704af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt ssl = conn->ssl; 2705af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (ssl == NULL || ssl->s3 == NULL || ssl->session == NULL || 2706af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt ssl->s3->client_random == NULL || ssl->s3->server_random == NULL || 2707af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt ssl->session->master_key == NULL) 2708af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2709af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2710af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (skip_keyblock) { 2711af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt skip = openssl_get_keyblock_size(ssl); 2712af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (skip < 0) 2713af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2714af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt tmp_out = os_malloc(skip + out_len); 2715af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (!tmp_out) 2716af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2717af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt _out = tmp_out; 2718af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt } 2719af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2720af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt rnd = os_malloc(2 * SSL3_RANDOM_SIZE); 2721af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (rnd == NULL) 2722af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return -1; 2723af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (server_random_first) { 2724af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt os_memcpy(rnd, ssl->s3->server_random, SSL3_RANDOM_SIZE); 2725af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt os_memcpy(rnd + SSL3_RANDOM_SIZE, ssl->s3->client_random, 2726af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt SSL3_RANDOM_SIZE); 2727af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt } else { 2728af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt os_memcpy(rnd, ssl->s3->client_random, SSL3_RANDOM_SIZE); 2729af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt os_memcpy(rnd + SSL3_RANDOM_SIZE, ssl->s3->server_random, 2730af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt SSL3_RANDOM_SIZE); 2731af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt } 2732af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2733af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt /* TODO: TLSv1.2 may need another PRF. This could use something closer 2734af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt * to SSL_export_keying_material() design. */ 2735af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (tls_prf_sha1_md5(ssl->session->master_key, 2736af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt ssl->session->master_key_length, 2737af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt label, rnd, 2 * SSL3_RANDOM_SIZE, 2738af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt _out, skip + out_len) == 0) 2739af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt ret = 0; 2740af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt os_free(rnd); 2741af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (ret == 0 && skip_keyblock) 2742af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt os_memcpy(out, _out + skip, out_len); 2743af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt bin_clear_free(tmp_out, skip); 2744af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2745af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return ret; 2746af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt#endif /* CONFIG_FIPS */ 2747af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt} 2748af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 2749af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt 27508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_prf(void *tls_ctx, struct tls_connection *conn, 27518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *label, int server_random_first, 2752af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt int skip_keyblock, u8 *out, size_t out_len) 27538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 275461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#if OPENSSL_VERSION_NUMBER >= 0x10001000L 275561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt SSL *ssl; 275661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt if (conn == NULL) 275761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt return -1; 2758af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt if (server_random_first || skip_keyblock) 2759af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return openssl_tls_prf(tls_ctx, conn, label, 2760af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt server_random_first, skip_keyblock, 2761af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt out, out_len); 276261d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt ssl = conn->ssl; 276361d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt if (SSL_export_keying_material(ssl, out, out_len, label, 276461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt os_strlen(label), NULL, 0, 0) == 1) { 276561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Using internal PRF"); 276661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt return 0; 276761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt } 276861d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#endif 2769af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt return openssl_tls_prf(tls_ctx, conn, label, server_random_first, 2770af9da3180dc20f57df1fc1e1811f3df9fa9e6ab5Dmitry Shmidt skip_keyblock, out, out_len); 27718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 27728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 27738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 27748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic struct wpabuf * 27758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtopenssl_handshake(struct tls_connection *conn, const struct wpabuf *in_data, 27768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int server) 27778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 27788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res; 27798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *out_data; 27808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 27818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 27828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Give TLS handshake data from the server (if available) to OpenSSL 27838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * for processing. 27848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 27858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (in_data && 27868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt BIO_write(conn->ssl_in, wpabuf_head(in_data), wpabuf_len(in_data)) 27878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt < 0) { 27888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 27898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Handshake failed - BIO_write"); 27908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 27918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 27928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 27938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Initiate TLS handshake or continue the existing handshake */ 27948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (server) 27958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = SSL_accept(conn->ssl); 27968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 27978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = SSL_connect(conn->ssl); 27988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res != 1) { 27998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int err = SSL_get_error(conn->ssl, res); 28008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (err == SSL_ERROR_WANT_READ) 28018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: SSL_connect - want " 28028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "more data"); 28038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else if (err == SSL_ERROR_WANT_WRITE) 28048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: SSL_connect - want to " 28058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "write"); 28068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 28078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, "SSL_connect"); 28088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->failed++; 28098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Get the TLS handshake data to be sent to the server */ 28138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = BIO_ctrl_pending(conn->ssl_out); 28148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: %d bytes pending from ssl_out", res); 28158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt out_data = wpabuf_alloc(res); 28168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (out_data == NULL) { 28178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: Failed to allocate memory for " 28188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "handshake output (%d bytes)", res); 28198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (BIO_reset(conn->ssl_out) < 0) { 28208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 28218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "BIO_reset failed"); 28228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 28248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = res == 0 ? 0 : BIO_read(conn->ssl_out, wpabuf_mhead(out_data), 28268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res); 28278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 28288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 28298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Handshake failed - BIO_read"); 28308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (BIO_reset(conn->ssl_out) < 0) { 28318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 28328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "BIO_reset failed"); 28338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(out_data); 28358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 28368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put(out_data, res); 28388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return out_data; 28408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 28418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic struct wpabuf * 28448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtopenssl_get_appl_data(struct tls_connection *conn, size_t max_len) 28458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 28468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *appl_data; 28478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res; 28488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt appl_data = wpabuf_alloc(max_len + 100); 28508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (appl_data == NULL) 28518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 28528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = SSL_read(conn->ssl, wpabuf_mhead(appl_data), 28548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_size(appl_data)); 28558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 28568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int err = SSL_get_error(conn->ssl, res); 28578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (err == SSL_ERROR_WANT_READ || 28588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt err == SSL_ERROR_WANT_WRITE) { 28598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: No Application Data " 28608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "included"); 28618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 28628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 28638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Failed to read possible " 28648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Application Data"); 28658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(appl_data); 28678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 28688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 28698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put(appl_data, res); 28718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_buf_key(MSG_MSGDUMP, "SSL: Application Data in Finished " 28728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "message", appl_data); 28738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return appl_data; 28758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 28768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic struct wpabuf * 28798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtopenssl_connection_handshake(struct tls_connection *conn, 28808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpabuf *in_data, 28818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf **appl_data, int server) 28828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 28838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *out_data; 28848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (appl_data) 28868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *appl_data = NULL; 28878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt out_data = openssl_handshake(conn, in_data, server); 28898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (out_data == NULL) 28908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 289126af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen if (conn->invalid_hb_used) { 289226af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpa_printf(MSG_INFO, "TLS: Heartbeat attack detected - do not send response"); 289326af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpabuf_free(out_data); 289426af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen return NULL; 289526af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen } 28968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_is_init_finished(conn->ssl) && appl_data && in_data) 28988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *appl_data = openssl_get_appl_data(conn, wpabuf_len(in_data)); 28998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 290026af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen if (conn->invalid_hb_used) { 290126af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpa_printf(MSG_INFO, "TLS: Heartbeat attack detected - do not send response"); 290226af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen if (appl_data) { 290326af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpabuf_free(*appl_data); 290426af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen *appl_data = NULL; 290526af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen } 290626af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpabuf_free(out_data); 290726af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen return NULL; 290826af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen } 290926af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen 29108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return out_data; 29118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 29128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * 29158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidttls_connection_handshake(void *ssl_ctx, struct tls_connection *conn, 29168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpabuf *in_data, 29178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf **appl_data) 29188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 29198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return openssl_connection_handshake(conn, in_data, appl_data, 0); 29208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 29218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * tls_connection_server_handshake(void *tls_ctx, 29248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn, 29258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpabuf *in_data, 29268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf **appl_data) 29278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 29288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return openssl_connection_handshake(conn, in_data, appl_data, 1); 29298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 29308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * tls_connection_encrypt(void *tls_ctx, 29338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn, 29348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpabuf *in_data) 29358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 29368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res; 29378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 29388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 29408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Give plaintext data for OpenSSL to encrypt into the TLS tunnel. */ 29438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((res = BIO_reset(conn->ssl_in)) < 0 || 29448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (res = BIO_reset(conn->ssl_out)) < 0) { 29458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, "BIO_reset failed"); 29468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 29488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = SSL_write(conn->ssl, wpabuf_head(in_data), wpabuf_len(in_data)); 29498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 29508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 29518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Encryption failed - SSL_write"); 29528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 29548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Read encrypted data to be sent to the server */ 29568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = wpabuf_alloc(wpabuf_len(in_data) + 300); 29578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) 29588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = BIO_read(conn->ssl_out, wpabuf_mhead(buf), wpabuf_size(buf)); 29608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 29618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 29628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Encryption failed - BIO_read"); 29638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(buf); 29648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 29668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put(buf, res); 29678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf; 29698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 29708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * tls_connection_decrypt(void *tls_ctx, 29738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn, 29748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpabuf *in_data) 29758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 29768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res; 29778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 29788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Give encrypted data from TLS tunnel for OpenSSL to decrypt. */ 29808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = BIO_write(conn->ssl_in, wpabuf_head(in_data), 29818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_len(in_data)); 29828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 29838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 29848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Decryption failed - BIO_write"); 29858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 29878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (BIO_reset(conn->ssl_out) < 0) { 29888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, "BIO_reset failed"); 29898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 29908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 29918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 29928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Read decrypted data for further processing */ 29938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 29948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Even though we try to disable TLS compression, it is possible that 29958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * this cannot be done with all TLS libraries. Add extra buffer space 29968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to handle the possibility of the decrypted data being longer than 29978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * input data. 29988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 29998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = wpabuf_alloc((wpabuf_len(in_data) + 500) * 3); 30008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) 30018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 30028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = SSL_read(conn->ssl, wpabuf_mhead(buf), wpabuf_size(buf)); 30038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) { 30048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 30058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Decryption failed - SSL_read"); 30068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(buf); 30078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 30088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 30098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put(buf, res); 30108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 301126af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen if (conn->invalid_hb_used) { 301226af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpa_printf(MSG_INFO, "TLS: Heartbeat attack detected - do not send response"); 301326af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen wpabuf_free(buf); 301426af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen return NULL; 301526af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen } 301626af48b2fcdee1b88e4092a9078cb7c9bf79da6eJouni Malinen 30178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf; 30188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 30198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_resumed(void *ssl_ctx, struct tls_connection *conn) 30228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3023216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt#if OPENSSL_VERSION_NUMBER >= 0x10001000L 3024216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt return conn ? SSL_cache_hit(conn->ssl) : 0; 3025216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt#else 30268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return conn ? conn->ssl->hit : 0; 3027216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt#endif 30288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 30298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_set_cipher_list(void *tls_ctx, struct tls_connection *conn, 30328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *ciphers) 30338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 30348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char buf[100], *pos, *end; 30358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *c; 30368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret; 30378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL || conn->ssl == NULL || ciphers == NULL) 30398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 30408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf[0] = '\0'; 30428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 30438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = pos + sizeof(buf); 30448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt c = ciphers; 30468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (*c != TLS_CIPHER_NONE) { 30478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *suite; 30488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (*c) { 30508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case TLS_CIPHER_RC4_SHA: 30518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt suite = "RC4-SHA"; 30528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 30538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case TLS_CIPHER_AES128_SHA: 30548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt suite = "AES128-SHA"; 30558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 30568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case TLS_CIPHER_RSA_DHE_AES128_SHA: 30578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt suite = "DHE-RSA-AES128-SHA"; 30588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 30598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case TLS_CIPHER_ANON_DH_AES128_SHA: 30608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt suite = "ADH-AES128-SHA"; 30618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 30628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 30638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Unsupported " 30648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "cipher selection: %d", *c); 30658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 30668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 30678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = os_snprintf(pos, end - pos, ":%s", suite); 30686c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (os_snprintf_error(end - pos, ret)) 30698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 30708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += ret; 30718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt c++; 30738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 30748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: cipher suites: %s", buf + 1); 30768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_set_cipher_list(conn->ssl, buf + 1) != 1) { 30788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 30798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Cipher suite configuration failed"); 30808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 30818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 30828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 30848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 30858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_get_cipher(void *ssl_ctx, struct tls_connection *conn, 30888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *buf, size_t buflen) 30898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 30908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *name; 30918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL || conn->ssl == NULL) 30928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 30938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = SSL_get_cipher(conn->ssl); 30958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (name == NULL) 30968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 30978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 30988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_strlcpy(buf, name, buflen); 30998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 31008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 31018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_enable_workaround(void *ssl_ctx, 31048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn) 31058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 31068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_options(conn->ssl, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS); 31078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 31098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 31108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_FAST) || defined(EAP_FAST_DYNAMIC) || defined(EAP_SERVER_FAST) 31138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* ClientHello TLS extensions require a patch to openssl, so this function is 31148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * commented out unless explicitly needed for EAP-FAST in order to be able to 31158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * build this file with unmodified openssl. */ 31168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_client_hello_ext(void *ssl_ctx, struct tls_connection *conn, 31178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ext_type, const u8 *data, 31188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t data_len) 31198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 31208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL || conn->ssl == NULL || ext_type != 35) 31218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 31228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_set_session_ticket_ext(conn->ssl, (void *) data, 31248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data_len) != 1) 31258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 31268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 31288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 31298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_FAST || EAP_FAST_DYNAMIC || EAP_SERVER_FAST */ 31308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_get_failed(void *ssl_ctx, struct tls_connection *conn) 31338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 31348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 31358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 31368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return conn->failed; 31378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 31388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_get_read_alerts(void *ssl_ctx, struct tls_connection *conn) 31418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 31428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 31438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 31448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return conn->read_alerts; 31458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 31468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_get_write_alerts(void *ssl_ctx, struct tls_connection *conn) 31498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 31508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 31518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 31528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return conn->write_alerts; 31538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 31548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 31558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 315634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifdef HAVE_OCSP 315734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 315834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtstatic void ocsp_debug_print_resp(OCSP_RESPONSE *rsp) 315934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt{ 316034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifndef CONFIG_NO_STDOUT_DEBUG 316134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt BIO *out; 316234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt size_t rlen; 316334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt char *txt; 316434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int res; 316534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 316634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (wpa_debug_level > MSG_DEBUG) 316734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return; 316834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 316934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt out = BIO_new(BIO_s_mem()); 317034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!out) 317134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return; 317234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 317334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_print(out, rsp, 0); 317434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt rlen = BIO_ctrl_pending(out); 317534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt txt = os_malloc(rlen + 1); 317634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!txt) { 317734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt BIO_free(out); 317834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return; 317934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 318034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 318134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt res = BIO_read(out, txt, rlen); 318234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (res > 0) { 318334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt txt[res] = '\0'; 318434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP Response\n%s", txt); 318534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 318634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_free(txt); 318734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt BIO_free(out); 318834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* CONFIG_NO_STDOUT_DEBUG */ 318934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt} 319034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 319134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 3192717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic void debug_print_cert(X509 *cert, const char *title) 3193717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt{ 3194717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#ifndef CONFIG_NO_STDOUT_DEBUG 3195717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt BIO *out; 3196717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt size_t rlen; 3197717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt char *txt; 3198717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt int res; 3199717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 3200717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (wpa_debug_level > MSG_DEBUG) 3201717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return; 3202717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 3203717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt out = BIO_new(BIO_s_mem()); 3204717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (!out) 3205717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return; 3206717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 3207717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt X509_print(out, cert); 3208717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt rlen = BIO_ctrl_pending(out); 3209717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt txt = os_malloc(rlen + 1); 3210717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (!txt) { 3211717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt BIO_free(out); 3212717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return; 3213717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 3214717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 3215717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt res = BIO_read(out, txt, rlen); 3216717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (res > 0) { 3217717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt txt[res] = '\0'; 3218717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s\n%s", title, txt); 3219717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 3220717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt os_free(txt); 3221717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 3222717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt BIO_free(out); 3223717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#endif /* CONFIG_NO_STDOUT_DEBUG */ 3224717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt} 3225717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 3226717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 322734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtstatic int ocsp_resp_cb(SSL *s, void *arg) 322834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt{ 322934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt struct tls_connection *conn = arg; 323034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const unsigned char *p; 323134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int len, status, reason; 323234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE *rsp; 323334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP *basic; 323434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_CERTID *id; 323534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt ASN1_GENERALIZEDTIME *produced_at, *this_update, *next_update; 3236fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt X509_STORE *store; 3237fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt STACK_OF(X509) *certs = NULL; 323834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 323934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt len = SSL_get_tlsext_status_ocsp_resp(s, &p); 324034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!p) { 324134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: No OCSP response received"); 324234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return (conn->flags & TLS_CONN_REQUIRE_OCSP) ? 0 : 1; 324334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 324434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 324534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "OpenSSL: OCSP response", p, len); 324634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 324734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt rsp = d2i_OCSP_RESPONSE(NULL, &p, len); 324834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!rsp) { 324934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_INFO, "OpenSSL: Failed to parse OCSP response"); 325034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 325134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 325234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 325334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt ocsp_debug_print_resp(rsp); 325434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 325534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt status = OCSP_response_status(rsp); 325634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (status != OCSP_RESPONSE_STATUS_SUCCESSFUL) { 325734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_INFO, "OpenSSL: OCSP responder error %d (%s)", 325834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt status, OCSP_response_status_str(status)); 325934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 326034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 326134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 326234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt basic = OCSP_response_get1_basic(rsp); 326334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!basic) { 326434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_INFO, "OpenSSL: Could not find BasicOCSPResponse"); 326534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 326634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 326734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 3268216983bceec7c450951e2fbcd076b5c75d432e57Dmitry Shmidt store = SSL_CTX_get_cert_store(conn->ssl_ctx); 3269fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt if (conn->peer_issuer) { 3270717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt debug_print_cert(conn->peer_issuer, "Add OCSP issuer"); 3271fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt 3272fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt if (X509_STORE_add_cert(store, conn->peer_issuer) != 1) { 3273fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 32747f65602d49069f96a7bb44da8bd79ffe8d4c6a98Dmitry Shmidt "OpenSSL: Could not add issuer to certificate store"); 3275fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt } 3276fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt certs = sk_X509_new_null(); 3277fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt if (certs) { 3278fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt X509 *cert; 3279fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt cert = X509_dup(conn->peer_issuer); 3280fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt if (cert && !sk_X509_push(certs, cert)) { 3281fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt tls_show_errors( 3282fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt MSG_INFO, __func__, 32837f65602d49069f96a7bb44da8bd79ffe8d4c6a98Dmitry Shmidt "OpenSSL: Could not add issuer to OCSP responder trust store"); 3284fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt X509_free(cert); 3285fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt sk_X509_free(certs); 3286fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt certs = NULL; 3287fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt } 32887f65602d49069f96a7bb44da8bd79ffe8d4c6a98Dmitry Shmidt if (certs && conn->peer_issuer_issuer) { 3289fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt cert = X509_dup(conn->peer_issuer_issuer); 3290fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt if (cert && !sk_X509_push(certs, cert)) { 3291fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt tls_show_errors( 3292fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt MSG_INFO, __func__, 32937f65602d49069f96a7bb44da8bd79ffe8d4c6a98Dmitry Shmidt "OpenSSL: Could not add issuer's issuer to OCSP responder trust store"); 3294fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt X509_free(cert); 3295fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt } 3296fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt } 3297fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt } 3298fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt } 3299fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt 3300fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt status = OCSP_basic_verify(basic, certs, store, OCSP_TRUSTOTHER); 3301fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt sk_X509_pop_free(certs, X509_free); 330234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (status <= 0) { 330334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 330434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt "OpenSSL: OCSP response failed verification"); 330534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP_free(basic); 330634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_free(rsp); 330734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 330834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 330934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 331034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP response verification succeeded"); 331134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 33125605286c30e1701491bd3af974ae423727750eddDmitry Shmidt if (!conn->peer_cert) { 33135605286c30e1701491bd3af974ae423727750eddDmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Peer certificate not available for OCSP status check"); 33145605286c30e1701491bd3af974ae423727750eddDmitry Shmidt OCSP_BASICRESP_free(basic); 33155605286c30e1701491bd3af974ae423727750eddDmitry Shmidt OCSP_RESPONSE_free(rsp); 33165605286c30e1701491bd3af974ae423727750eddDmitry Shmidt return 0; 33175605286c30e1701491bd3af974ae423727750eddDmitry Shmidt } 33185605286c30e1701491bd3af974ae423727750eddDmitry Shmidt 33195605286c30e1701491bd3af974ae423727750eddDmitry Shmidt if (!conn->peer_issuer) { 33205605286c30e1701491bd3af974ae423727750eddDmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Peer issuer certificate not available for OCSP status check"); 332134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP_free(basic); 332234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_free(rsp); 332334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 332434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 332534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 332634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt id = OCSP_cert_to_id(NULL, conn->peer_cert, conn->peer_issuer); 332734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!id) { 332834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: Could not create OCSP certificate identifier"); 332934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP_free(basic); 333034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_free(rsp); 333134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 333234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 333334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 333434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!OCSP_resp_find_status(basic, id, &status, &reason, &produced_at, 333534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt &this_update, &next_update)) { 333634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_INFO, "OpenSSL: Could not find current server certificate from OCSP response%s", 333734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt (conn->flags & TLS_CONN_REQUIRE_OCSP) ? "" : 333834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt " (OCSP not required)"); 333934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP_free(basic); 334034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_free(rsp); 334134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return (conn->flags & TLS_CONN_REQUIRE_OCSP) ? 0 : 1; 334234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 334334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 334434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (!OCSP_check_validity(this_update, next_update, 5 * 60, -1)) { 334534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt tls_show_errors(MSG_INFO, __func__, 334634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt "OpenSSL: OCSP status times invalid"); 334734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP_free(basic); 334834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_free(rsp); 334934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 335034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 335134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 335234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_BASICRESP_free(basic); 335334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_RESPONSE_free(rsp); 335434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 335534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP status for server certificate: %s", 335634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt OCSP_cert_status_str(status)); 335734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 335834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (status == V_OCSP_CERTSTATUS_GOOD) 335934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 1; 336034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (status == V_OCSP_CERTSTATUS_REVOKED) 336134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 336234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (conn->flags & TLS_CONN_REQUIRE_OCSP) { 336334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP status unknown, but OCSP required"); 336434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 0; 336534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 3366051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP status unknown, but OCSP was not required, so allow connection to continue"); 336734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return 1; 336834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt} 336934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 337034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 337134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtstatic int ocsp_status_cb(SSL *s, void *arg) 337234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt{ 337334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt char *tmp; 337434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt char *resp; 337534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt size_t len; 337634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 337734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (tls_global->ocsp_stapling_response == NULL) { 337834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP status callback - no response configured"); 337934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return SSL_TLSEXT_ERR_OK; 338034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 338134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 338234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt resp = os_readfile(tls_global->ocsp_stapling_response, &len); 338334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (resp == NULL) { 338434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP status callback - could not read response file"); 338534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt /* TODO: Build OCSPResponse with responseStatus = internalError 338634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt */ 338734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return SSL_TLSEXT_ERR_OK; 338834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 338934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: OCSP status callback - send cached response"); 339034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt tmp = OPENSSL_malloc(len); 339134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (tmp == NULL) { 339234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_free(resp); 339334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return SSL_TLSEXT_ERR_ALERT_FATAL; 339434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 339534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 339634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_memcpy(tmp, resp, len); 339734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_free(resp); 339834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt SSL_set_tlsext_status_ocsp_resp(s, tmp, len); 339934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 340034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt return SSL_TLSEXT_ERR_OK; 340134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt} 340234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 340334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* HAVE_OCSP */ 340434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 340534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 34068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_set_params(void *tls_ctx, struct tls_connection *conn, 34078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct tls_connection_params *params) 34088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 34098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret; 34108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err; 34116c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt int can_pkcs11 = 0; 34126c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const char *key_id = params->key_id; 34136c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const char *cert_id = params->cert_id; 34146c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const char *ca_cert_id = params->ca_cert_id; 34156c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt const char *engine_id = params->engine ? params->engine_id : NULL; 34168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 34178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL) 34188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 34198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 34206c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt /* 34216c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt * If the engine isn't explicitly configured, and any of the 34226c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt * cert/key fields are actually PKCS#11 URIs, then automatically 34236c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt * use the PKCS#11 ENGINE. 34246c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt */ 34256c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (!engine_id || os_strcmp(engine_id, "pkcs11") == 0) 34266c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt can_pkcs11 = 1; 34276c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 34286c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (!key_id && params->private_key && can_pkcs11 && 34296c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt os_strncmp(params->private_key, "pkcs11:", 7) == 0) { 34306c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt can_pkcs11 = 2; 34316c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt key_id = params->private_key; 34326c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 34336c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 34346c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (!cert_id && params->client_cert && can_pkcs11 && 34356c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt os_strncmp(params->client_cert, "pkcs11:", 7) == 0) { 34366c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt can_pkcs11 = 2; 34376c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt cert_id = params->client_cert; 34386c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 34396c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 34406c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (!ca_cert_id && params->ca_cert && can_pkcs11 && 34416c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt os_strncmp(params->ca_cert, "pkcs11:", 7) == 0) { 34426c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt can_pkcs11 = 2; 34436c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ca_cert_id = params->ca_cert; 34446c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 34456c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 34466c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt /* If we need to automatically enable the PKCS#11 ENGINE, do so. */ 34476c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (can_pkcs11 == 2 && !engine_id) 34486c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt engine_id = "pkcs11"; 34496c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 34506c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (params->flags & TLS_CONN_EAP_FAST) { 34516c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_DEBUG, 34526c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "OpenSSL: Use TLSv1_method() for EAP-FAST"); 34536c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (SSL_set_ssl_method(conn->ssl, TLSv1_method()) != 1) { 34546c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt tls_show_errors(MSG_INFO, __func__, 34556c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "Failed to set TLSv1_method() for EAP-FAST"); 34566c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt return -1; 34576c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 34586c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 34596c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 34608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((err = ERR_get_error())) { 34618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "%s: Clearing pending SSL error: %s", 34628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, ERR_error_string(err, NULL)); 34638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 34648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 34656c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (engine_id) { 34668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SSL: Initializing TLS engine"); 34676c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ret = tls_engine_init(conn, engine_id, params->pin, 34686c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt key_id, cert_id, ca_cert_id); 34698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret) 34708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 34718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 34728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_connection_set_subject_match(conn, 34738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->subject_match, 3474051af73b8f8014eff33330aead0f36944b3403e6Dmitry Shmidt params->altsubject_match, 34752f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt params->suffix_match, 34762f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt params->domain_match)) 34778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 34788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 34796c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (engine_id && ca_cert_id) { 34808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_connection_engine_ca_cert(tls_ctx, conn, 34816c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt ca_cert_id)) 34828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_SET_PARAMS_ENGINE_PRV_VERIFY_FAILED; 34838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (tls_connection_ca_cert(tls_ctx, conn, params->ca_cert, 34848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->ca_cert_blob, 34858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->ca_cert_blob_len, 34868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->ca_path)) 34878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 34888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 34896c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (engine_id && cert_id) { 34906c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (tls_connection_engine_client_cert(conn, cert_id)) 34918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_SET_PARAMS_ENGINE_PRV_VERIFY_FAILED; 34928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (tls_connection_client_cert(conn, params->client_cert, 34938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->client_cert_blob, 34948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->client_cert_blob_len)) 34958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 34968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 34976c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (engine_id && key_id) { 34988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TLS: Using private key from engine"); 34998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_connection_engine_private_key(conn)) 35008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TLS_SET_PARAMS_ENGINE_PRV_VERIFY_FAILED; 35018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (tls_connection_private_key(tls_ctx, conn, 35028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->private_key, 35038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->private_key_passwd, 35048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->private_key_blob, 35058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->private_key_blob_len)) { 35068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to load private key '%s'", 35078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->private_key); 35088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 35098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 35108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_connection_dh(conn, params->dh_file)) { 35128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to load DH file '%s'", 35138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->dh_file); 35148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 35158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 35168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35176c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (params->openssl_ciphers && 35186c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt SSL_set_cipher_list(conn->ssl, params->openssl_ciphers) != 1) { 35196c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_INFO, 35206c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "OpenSSL: Failed to set cipher string '%s'", 35216c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt params->openssl_ciphers); 35226c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt return -1; 35236c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 35246c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 352561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#ifdef SSL_OP_NO_TICKET 352661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt if (params->flags & TLS_CONN_DISABLE_SESSION_TICKET) 352761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt SSL_set_options(conn->ssl, SSL_OP_NO_TICKET); 352834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifdef SSL_clear_options 352961d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt else 353061d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt SSL_clear_options(conn->ssl, SSL_OP_NO_TICKET); 353134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* SSL_clear_options */ 353261d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#endif /* SSL_OP_NO_TICKET */ 353361d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt 353413ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt#ifdef SSL_OP_NO_TLSv1_1 353513ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt if (params->flags & TLS_CONN_DISABLE_TLSv1_1) 353613ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt SSL_set_options(conn->ssl, SSL_OP_NO_TLSv1_1); 353713ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt else 353813ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt SSL_clear_options(conn->ssl, SSL_OP_NO_TLSv1_1); 353913ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt#endif /* SSL_OP_NO_TLSv1_1 */ 354013ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt#ifdef SSL_OP_NO_TLSv1_2 354113ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt if (params->flags & TLS_CONN_DISABLE_TLSv1_2) 354213ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt SSL_set_options(conn->ssl, SSL_OP_NO_TLSv1_2); 354313ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt else 354413ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt SSL_clear_options(conn->ssl, SSL_OP_NO_TLSv1_2); 354513ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt#endif /* SSL_OP_NO_TLSv1_2 */ 354613ca8d8ea51a1aa5e24c6c956473a11b0c7daed4Dmitry Shmidt 354734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifdef HAVE_OCSP 354834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (params->flags & TLS_CONN_REQUEST_OCSP) { 3549fa3fc4a1ac08ad14272301c7f6f01b362997c3e4Dmitry Shmidt SSL_CTX *ssl_ctx = tls_ctx; 355034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt SSL_set_tlsext_status_type(conn->ssl, TLSEXT_STATUSTYPE_ocsp); 355134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt SSL_CTX_set_tlsext_status_cb(ssl_ctx, ocsp_resp_cb); 355234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt SSL_CTX_set_tlsext_status_arg(ssl_ctx, conn); 355334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt } 355434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* HAVE_OCSP */ 355534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 3556c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt conn->flags = params->flags; 3557c55524ad84d13014e8019491c2b17e5dcf13545aDmitry Shmidt 35588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_get_errors(tls_ctx); 35598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 35618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 35628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_global_set_params(void *tls_ctx, 35658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct tls_connection_params *params) 35668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 35678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CTX *ssl_ctx = tls_ctx; 35688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long err; 35698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while ((err = ERR_get_error())) { 35718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "%s: Clearing pending SSL error: %s", 35728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, ERR_error_string(err, NULL)); 35738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 35748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_global_ca_cert(ssl_ctx, params->ca_cert)) 35768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 35778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_global_client_cert(ssl_ctx, params->client_cert)) 35798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 35808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_global_private_key(ssl_ctx, params->private_key, 35828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->private_key_passwd)) 35838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 35848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tls_global_dh(ssl_ctx, params->dh_file)) { 35868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TLS: Failed to load DH file '%s'", 35878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt params->dh_file); 35888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 35898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 35908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 35916c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (params->openssl_ciphers && 35926c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt SSL_CTX_set_cipher_list(ssl_ctx, params->openssl_ciphers) != 1) { 35936c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_INFO, 35946c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "OpenSSL: Failed to set cipher string '%s'", 35956c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt params->openssl_ciphers); 35966c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt return -1; 35976c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 35986c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 359961d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#ifdef SSL_OP_NO_TICKET 360061d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt if (params->flags & TLS_CONN_DISABLE_SESSION_TICKET) 360161d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TICKET); 360234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifdef SSL_CTX_clear_options 360361d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt else 360461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt SSL_CTX_clear_options(ssl_ctx, SSL_OP_NO_TICKET); 360534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* SSL_clear_options */ 360661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt#endif /* SSL_OP_NO_TICKET */ 360761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt 360834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifdef HAVE_OCSP 360934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt SSL_CTX_set_tlsext_status_cb(ssl_ctx, ocsp_status_cb); 361034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt SSL_CTX_set_tlsext_status_arg(ssl_ctx, ssl_ctx); 361134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_free(tls_global->ocsp_stapling_response); 361234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt if (params->ocsp_stapling_response) 361334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt tls_global->ocsp_stapling_response = 361434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt os_strdup(params->ocsp_stapling_response); 361534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt else 361634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt tls_global->ocsp_stapling_response = NULL; 361734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* HAVE_OCSP */ 361834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 36198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 36208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 36218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtunsigned int tls_capabilities(void *tls_ctx) 36248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 36258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 36268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 36278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_FAST) || defined(EAP_FAST_DYNAMIC) || defined(EAP_SERVER_FAST) 36308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Pre-shared secred requires a patch to openssl, so this function is 36318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * commented out unless explicitly needed for EAP-FAST in order to be able to 36328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * build this file with unmodified openssl. */ 36338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36349ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#ifdef OPENSSL_IS_BORINGSSL 36359ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidtstatic int tls_sess_sec_cb(SSL *s, void *secret, int *secret_len, 36369ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt STACK_OF(SSL_CIPHER) *peer_ciphers, 36379ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt const SSL_CIPHER **cipher, void *arg) 36389ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#else /* OPENSSL_IS_BORINGSSL */ 36398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_sess_sec_cb(SSL *s, void *secret, int *secret_len, 36408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt STACK_OF(SSL_CIPHER) *peer_ciphers, 36418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_CIPHER **cipher, void *arg) 36429ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt#endif /* OPENSSL_IS_BORINGSSL */ 36438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 36448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn = arg; 36458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret; 36468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL || conn->session_ticket_cb == NULL) 36488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 36498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = conn->session_ticket_cb(conn->session_ticket_cb_ctx, 36518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket, 36528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket_len, 36538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s->s3->client_random, 36548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s->s3->server_random, secret); 36558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->session_ticket); 36568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket = NULL; 36578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret <= 0) 36598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 36608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *secret_len = SSL_MAX_MASTER_KEY_LENGTH; 36628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 36638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 36648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int tls_session_ticket_ext_cb(SSL *s, const unsigned char *data, 36678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len, void *arg) 36688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 36698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn = arg; 36708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn == NULL || conn->session_ticket_cb == NULL) 36728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 36738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "OpenSSL: %s: length=%d", __func__, len); 36758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(conn->session_ticket); 36778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket = NULL; 36788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "OpenSSL: ClientHello SessionTicket " 36808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "extension", data, len); 36818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket = os_malloc(len); 36838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conn->session_ticket == NULL) 36848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 36858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(conn->session_ticket, data, len); 36878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket_len = len; 36888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 36908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 36918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_FAST || EAP_FAST_DYNAMIC || EAP_SERVER_FAST */ 36928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 36948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tls_connection_set_session_ticket_cb(void *tls_ctx, 36958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tls_connection *conn, 36968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_session_ticket_cb cb, 36978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx) 36988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 36998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_FAST) || defined(EAP_FAST_DYNAMIC) || defined(EAP_SERVER_FAST) 37008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket_cb = cb; 37018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn->session_ticket_cb_ctx = ctx; 37028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 37038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cb) { 37048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_set_session_secret_cb(conn->ssl, tls_sess_sec_cb, 37058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conn) != 1) 37068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 37078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_session_ticket_ext_cb(conn->ssl, 37088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tls_session_ticket_ext_cb, conn); 37098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 37108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (SSL_set_session_secret_cb(conn->ssl, NULL, NULL) != 1) 37118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 37128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SSL_set_session_ticket_ext_cb(conn->ssl, NULL, NULL); 37138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 37148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 37158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 37168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* EAP_FAST || EAP_FAST_DYNAMIC || EAP_SERVER_FAST */ 37178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 37188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_FAST || EAP_FAST_DYNAMIC || EAP_SERVER_FAST */ 37198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3720ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt 3721ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt 3722ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidtint tls_get_library_version(char *buf, size_t buf_len) 3723ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt{ 3724ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt return os_snprintf(buf, buf_len, "OpenSSL build=%s run=%s", 3725ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt OPENSSL_VERSION_TEXT, 3726ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt SSLeay_version(SSLEAY_VERSION)); 3727ff787d557db719adea0fdf2679667500c65cf74dDmitry Shmidt} 3728