diff options
author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2013-11-08 22:14:07 +0100 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2013-11-08 22:17:10 +0100 |
commit | 76c93d23c073ef8b885503b7d28a31ffe2add6d8 (patch) | |
tree | 1dd2d22a197bc40c5330e516969a7cb1ae9bc96f /tests/mini-dtls-hello-verify.c | |
parent | 559a144f6bbcbb611453f82e655dd7438c14d1a7 (diff) | |
download | gnutls-76c93d23c073ef8b885503b7d28a31ffe2add6d8.tar.gz |
reindented code
Diffstat (limited to 'tests/mini-dtls-hello-verify.c')
-rw-r--r-- | tests/mini-dtls-hello-verify.c | 528 |
1 files changed, 259 insertions, 269 deletions
diff --git a/tests/mini-dtls-hello-verify.c b/tests/mini-dtls-hello-verify.c index 534d8a6178..c5e3d96993 100644 --- a/tests/mini-dtls-hello-verify.c +++ b/tests/mini-dtls-hello-verify.c @@ -31,7 +31,7 @@ int main() { - exit(77); + exit(77); } #else @@ -53,16 +53,14 @@ static void terminate(void); /* This program tests the client hello verify in DTLS */ -static void -server_log_func (int level, const char *str) +static void server_log_func(int level, const char *str) { - fprintf (stderr, "server|<%d>| %s", level, str); + fprintf(stderr, "server|<%d>| %s", level, str); } -static void -client_log_func (int level, const char *str) +static void client_log_func(int level, const char *str) { - fprintf (stderr, "client|<%d>| %s", level, str); + fprintf(stderr, "client|<%d>| %s", level, str); } /* A very basic TLS client, with anonymous authentication. @@ -71,100 +69,94 @@ client_log_func (int level, const char *str) #define MAX_BUF 1024 static ssize_t -push (gnutls_transport_ptr_t tr, const void *data, size_t len) +push(gnutls_transport_ptr_t tr, const void *data, size_t len) { -int fd = (long int)tr; + int fd = (long int) tr; - return send(fd, data, len, 0); + return send(fd, data, len, 0); } -static void -client (int fd) +static void client(int fd) { - int ret; - char buffer[MAX_BUF + 1]; - gnutls_anon_client_credentials_t anoncred; - gnutls_session_t session; - /* Need to enable anonymous KX specifically. */ - - global_init (); - - if (debug) - { - gnutls_global_set_log_function (client_log_func); - gnutls_global_set_log_level (4711); - } - - gnutls_anon_allocate_client_credentials (&anoncred); - - /* Initialize TLS session - */ - gnutls_init (&session, GNUTLS_CLIENT|GNUTLS_DATAGRAM); - gnutls_dtls_set_mtu( session, 1500); - gnutls_handshake_set_timeout(session, 20*1000); - - /* Use default priorities */ - gnutls_priority_set_direct (session, "NONE:+VERS-DTLS-ALL:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-ECDH:+CURVE-ALL", NULL); - - /* put the anonymous credentials to the current session - */ - gnutls_credentials_set (session, GNUTLS_CRD_ANON, anoncred); - - gnutls_transport_set_int (session, fd); - gnutls_transport_set_push_function (session, push); - - /* Perform the TLS handshake - */ - do - { - ret = gnutls_handshake (session); - } - while (ret < 0 && gnutls_error_is_fatal(ret) == 0); - - if (ret < 0) - { - fail ("client: Handshake failed\n"); - gnutls_perror (ret); - exit(1); - } - else - { - if (debug) - success ("client: Handshake was completed\n"); - } - - if (debug) - success ("client: TLS version is: %s\n", - gnutls_protocol_get_name (gnutls_protocol_get_version - (session))); - - do { - ret = gnutls_record_recv (session, buffer, MAX_BUF); - } while (ret == GNUTLS_E_AGAIN || ret == GNUTLS_E_INTERRUPTED); - - if (ret == 0) - { - if (debug) - success ("client: Peer has closed the TLS connection\n"); - goto end; - } - else if (ret < 0) - { - fail ("client: Error: %s\n", gnutls_strerror (ret)); - exit(1); - } - - gnutls_bye (session, GNUTLS_SHUT_WR); - -end: - - close (fd); - - gnutls_deinit (session); - - gnutls_anon_free_client_credentials (anoncred); - - gnutls_global_deinit (); + int ret; + char buffer[MAX_BUF + 1]; + gnutls_anon_client_credentials_t anoncred; + gnutls_session_t session; + /* Need to enable anonymous KX specifically. */ + + global_init(); + + if (debug) { + gnutls_global_set_log_function(client_log_func); + gnutls_global_set_log_level(4711); + } + + gnutls_anon_allocate_client_credentials(&anoncred); + + /* Initialize TLS session + */ + gnutls_init(&session, GNUTLS_CLIENT | GNUTLS_DATAGRAM); + gnutls_dtls_set_mtu(session, 1500); + gnutls_handshake_set_timeout(session, 20 * 1000); + + /* Use default priorities */ + gnutls_priority_set_direct(session, + "NONE:+VERS-DTLS-ALL:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-ECDH:+CURVE-ALL", + NULL); + + /* put the anonymous credentials to the current session + */ + gnutls_credentials_set(session, GNUTLS_CRD_ANON, anoncred); + + gnutls_transport_set_int(session, fd); + gnutls_transport_set_push_function(session, push); + + /* Perform the TLS handshake + */ + do { + ret = gnutls_handshake(session); + } + while (ret < 0 && gnutls_error_is_fatal(ret) == 0); + + if (ret < 0) { + fail("client: Handshake failed\n"); + gnutls_perror(ret); + exit(1); + } else { + if (debug) + success("client: Handshake was completed\n"); + } + + if (debug) + success("client: TLS version is: %s\n", + gnutls_protocol_get_name + (gnutls_protocol_get_version(session))); + + do { + ret = gnutls_record_recv(session, buffer, MAX_BUF); + } while (ret == GNUTLS_E_AGAIN || ret == GNUTLS_E_INTERRUPTED); + + if (ret == 0) { + if (debug) + success + ("client: Peer has closed the TLS connection\n"); + goto end; + } else if (ret < 0) { + fail("client: Error: %s\n", gnutls_strerror(ret)); + exit(1); + } + + gnutls_bye(session, GNUTLS_SHUT_WR); + + end: + + close(fd); + + gnutls_deinit(session); + + gnutls_anon_free_client_credentials(anoncred); + + gnutls_global_deinit(); } @@ -173,188 +165,186 @@ pid_t child; static void terminate(void) { -int status; + int status; - kill(child, SIGTERM); - wait(&status); - exit(1); + kill(child, SIGTERM); + wait(&status); + exit(1); } #define CLI_ADDR (void*)"test" #define CLI_ADDR_LEN 4 -static void -server (int fd) +static void server(int fd) { -int ret, csend = 0; -gnutls_anon_server_credentials_t anoncred; -char buffer[MAX_BUF + 1]; -gnutls_datum_t cookie_key; -gnutls_dtls_prestate_st prestate; -gnutls_session_t session; - - /* this must be called once in the program - */ - global_init (); - - if (debug) - { - gnutls_global_set_log_function (server_log_func); - gnutls_global_set_log_level (4711); - } - - ret = gnutls_key_generate(&cookie_key, GNUTLS_COOKIE_KEY_SIZE); - if (ret < 0) - { - fail("Cannot generate key: %s\n", gnutls_strerror(ret)); - terminate(); - } - - gnutls_anon_allocate_server_credentials (&anoncred); - - gnutls_init (&session, GNUTLS_SERVER|GNUTLS_DATAGRAM); - gnutls_handshake_set_timeout(session, 20*1000); - gnutls_dtls_set_mtu( session, 1500); - - /* avoid calling all the priority functions, since the defaults - * are adequate. - */ - gnutls_priority_set_direct (session, "NONE:+VERS-DTLS1.0:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-ECDH:+CURVE-ALL", NULL); - - gnutls_credentials_set (session, GNUTLS_CRD_ANON, anoncred); - - gnutls_transport_set_int (session, fd); - gnutls_transport_set_push_function (session, push); - - for (;;) - { - ret = recv(fd, buffer, sizeof(buffer), MSG_PEEK); - if (ret < 0) - { - fail("Cannot receive data\n"); - terminate(); - } - - memset(&prestate, 0, sizeof(prestate)); - ret = gnutls_dtls_cookie_verify(&cookie_key, CLI_ADDR, CLI_ADDR_LEN, buffer, ret, &prestate); - if (ret < 0) /* cookie not valid */ - { - if (debug) success("Sending hello verify request\n"); - - ret = gnutls_dtls_cookie_send(&cookie_key, CLI_ADDR, CLI_ADDR_LEN, &prestate, (gnutls_transport_ptr_t)(long)fd, push); - if (ret < 0) - { - fail("Cannot send data\n"); - terminate(); - } - - /* discard peeked data*/ - recv(fd, buffer, sizeof(buffer), 0); - csend++; - - if (csend > 2) - { - fail("too many cookies sent\n"); - terminate(); - } - - continue; - } - - /* success */ - break; - } - - gnutls_dtls_prestate_set(session, &prestate); - - do - { - ret = gnutls_handshake (session); - } - while (ret < 0 && gnutls_error_is_fatal(ret) == 0); - if (ret < 0) - { - close (fd); - gnutls_deinit (session); - fail ("server: Handshake has failed (%s)\n\n", gnutls_strerror (ret)); - terminate(); - } - if (debug) - success ("server: Handshake was completed\n"); - - if (debug) - success ("server: TLS version is: %s\n", - gnutls_protocol_get_name (gnutls_protocol_get_version - (session))); - - /* see the Getting peer's information example */ - /* print_info(session); */ - - do { - ret = gnutls_record_send (session, buffer, sizeof (buffer)); - } while (ret == GNUTLS_E_AGAIN || ret == GNUTLS_E_INTERRUPTED); - - if (ret < 0) - { - close (fd); - gnutls_deinit (session); - fail ("server: data sending has failed (%s)\n\n", gnutls_strerror (ret)); - terminate(); - } - - - /* do not wait for the peer to close the connection. - */ - gnutls_bye (session, GNUTLS_SHUT_WR); - - close (fd); - gnutls_deinit (session); - - gnutls_anon_free_server_credentials (anoncred); - gnutls_free(cookie_key.data); - - gnutls_global_deinit (); - - if (debug) - success ("server: finished\n"); + int ret, csend = 0; + gnutls_anon_server_credentials_t anoncred; + char buffer[MAX_BUF + 1]; + gnutls_datum_t cookie_key; + gnutls_dtls_prestate_st prestate; + gnutls_session_t session; + + /* this must be called once in the program + */ + global_init(); + + if (debug) { + gnutls_global_set_log_function(server_log_func); + gnutls_global_set_log_level(4711); + } + + ret = gnutls_key_generate(&cookie_key, GNUTLS_COOKIE_KEY_SIZE); + if (ret < 0) { + fail("Cannot generate key: %s\n", gnutls_strerror(ret)); + terminate(); + } + + gnutls_anon_allocate_server_credentials(&anoncred); + + gnutls_init(&session, GNUTLS_SERVER | GNUTLS_DATAGRAM); + gnutls_handshake_set_timeout(session, 20 * 1000); + gnutls_dtls_set_mtu(session, 1500); + + /* avoid calling all the priority functions, since the defaults + * are adequate. + */ + gnutls_priority_set_direct(session, + "NONE:+VERS-DTLS1.0:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-ECDH:+CURVE-ALL", + NULL); + + gnutls_credentials_set(session, GNUTLS_CRD_ANON, anoncred); + + gnutls_transport_set_int(session, fd); + gnutls_transport_set_push_function(session, push); + + for (;;) { + ret = recv(fd, buffer, sizeof(buffer), MSG_PEEK); + if (ret < 0) { + fail("Cannot receive data\n"); + terminate(); + } + + memset(&prestate, 0, sizeof(prestate)); + ret = + gnutls_dtls_cookie_verify(&cookie_key, CLI_ADDR, + CLI_ADDR_LEN, buffer, ret, + &prestate); + if (ret < 0) { /* cookie not valid */ + if (debug) + success("Sending hello verify request\n"); + + ret = + gnutls_dtls_cookie_send(&cookie_key, CLI_ADDR, + CLI_ADDR_LEN, + &prestate, + (gnutls_transport_ptr_t) + (long) fd, push); + if (ret < 0) { + fail("Cannot send data\n"); + terminate(); + } + + /* discard peeked data */ + recv(fd, buffer, sizeof(buffer), 0); + csend++; + + if (csend > 2) { + fail("too many cookies sent\n"); + terminate(); + } + + continue; + } + + /* success */ + break; + } + + gnutls_dtls_prestate_set(session, &prestate); + + do { + ret = gnutls_handshake(session); + } + while (ret < 0 && gnutls_error_is_fatal(ret) == 0); + if (ret < 0) { + close(fd); + gnutls_deinit(session); + fail("server: Handshake has failed (%s)\n\n", + gnutls_strerror(ret)); + terminate(); + } + if (debug) + success("server: Handshake was completed\n"); + + if (debug) + success("server: TLS version is: %s\n", + gnutls_protocol_get_name + (gnutls_protocol_get_version(session))); + + /* see the Getting peer's information example */ + /* print_info(session); */ + + do { + ret = gnutls_record_send(session, buffer, sizeof(buffer)); + } while (ret == GNUTLS_E_AGAIN || ret == GNUTLS_E_INTERRUPTED); + + if (ret < 0) { + close(fd); + gnutls_deinit(session); + fail("server: data sending has failed (%s)\n\n", + gnutls_strerror(ret)); + terminate(); + } + + + /* do not wait for the peer to close the connection. + */ + gnutls_bye(session, GNUTLS_SHUT_WR); + + close(fd); + gnutls_deinit(session); + + gnutls_anon_free_server_credentials(anoncred); + gnutls_free(cookie_key.data); + + gnutls_global_deinit(); + + if (debug) + success("server: finished\n"); } -void doit (void) +void doit(void) { - int fd[2]; - int ret; - - ret = socketpair(AF_UNIX, SOCK_STREAM, 0, fd); - if (ret < 0) - { - perror("socketpair"); - exit(1); - } - - child = fork (); - if (child < 0) - { - perror ("fork"); - fail ("fork"); - exit(1); - } - - if (child) - { - int status; - /* parent */ - - server (fd[0]); - wait (&status); - if (WEXITSTATUS(status) != 0) - fail("Child died with status %d\n", WEXITSTATUS(status)); - } - else - { - close(fd[0]); - client (fd[1]); - exit(0); - } + int fd[2]; + int ret; + + ret = socketpair(AF_UNIX, SOCK_STREAM, 0, fd); + if (ret < 0) { + perror("socketpair"); + exit(1); + } + + child = fork(); + if (child < 0) { + perror("fork"); + fail("fork"); + exit(1); + } + + if (child) { + int status; + /* parent */ + + server(fd[0]); + wait(&status); + if (WEXITSTATUS(status) != 0) + fail("Child died with status %d\n", + WEXITSTATUS(status)); + } else { + close(fd[0]); + client(fd[1]); + exit(0); + } } -#endif /* _WIN32 */ +#endif /* _WIN32 */ |