-
Notifications
You must be signed in to change notification settings - Fork 1
/
tls.cpp
388 lines (330 loc) · 11 KB
/
tls.cpp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
#include "tls.hpp"
#include "def.h"
int bytes_recv;
int port = 8000;
char* test_data;
int test_type;
unsigned int buf_size;
pthread_cond_t server_cond;
pthread_mutex_t server_lock;
int server_up;
/* AF_ALG defines not in linux headers */
/*
* Just for testing some unused family.
* TODO: this needs to be moved to include/linux/socket.h once linux will
* support AF_KTLS socket. We have to pick some unused now since linux does not
* allow to register unknown protocol family.
*/
#define PF_KTLS 12
#define AF_KTLS PF_KTLS
/*
* getsockopt() optnames
*/
#define KTLS_SET_IV_RECV 1
#define KTLS_SET_KEY_RECV 2
#define KTLS_SET_SALT_RECV 3
#define KTLS_SET_IV_SEND 4
#define KTLS_SET_KEY_SEND 5
#define KTLS_SET_SALT_SEND 6
#define KTLS_SET_MTU 7
#define KTLS_UNATTACH 8
/*
* setsockopt() optnames
*/
#define KTLS_GET_IV_RECV 11
#define KTLS_GET_KEY_RECV 12
#define KTLS_GET_SALT_RECV 13
#define KTLS_GET_IV_SEND 14
#define KTLS_GET_KEY_SEND 15
#define KTLS_GET_SALT_SEND 16
#define KTLS_GET_MTU 17
/*
* Additional options
*/
#define KTLS_PROTO_OPENCONNECT 128
/*
* Supported ciphers
*/
#define KTLS_CIPHER_AES_GCM_128 51
#define KTLS_VERSION_LATEST 0
#define KTLS_VERSION_1_2 1
struct sockaddr_ktls {
__u16 sa_cipher;
__u16 sa_socket;
__u16 sa_version;
};
struct servlet_args {
int client;
SSL *ssl;
enum serve_action type;
};
int create_socket(int port) {
int sockfd;
struct sockaddr_in6 dest_addr;
sockfd = socket(AF_INET6, SOCK_STREAM, 0);
memset(&(dest_addr), '\0', sizeof(dest_addr));
dest_addr.sin6_family = AF_INET6;
dest_addr.sin6_port = htons(port);
inet_pton(AF_INET6, "::1", &dest_addr.sin6_addr.s6_addr);
if (connect(sockfd, (struct sockaddr *) &dest_addr,
sizeof(struct sockaddr_in6)) == -1) {
perror("Connect: ");
exit(EXIT_FAILURE);
}
return sockfd;
}
int OpenListener(int port) {
int sd;
struct sockaddr_in6 addr;
sd = socket(PF_INET6, SOCK_STREAM, 0);
int optval = 1;
setsockopt(sd, SOL_SOCKET, SO_REUSEADDR | SO_REUSEPORT, &optval,
sizeof(optval));
bzero(&addr, sizeof(addr));
addr.sin6_family = AF_INET6;
addr.sin6_port = htons(port);
memcpy(addr.sin6_addr.s6_addr, &in6addr_any, sizeof(in6addr_any));
if (bind(sd, (const struct sockaddr*) &addr, sizeof(addr)) != 0) {
perror("can't bind port");
abort();
}
if (listen(sd, 10) != 0) {
perror("Can't configure listening port");
abort();
}
return sd;
}
SSL_CTX* InitServerCTX(void) {
SSL_CTX *ctx;
/* create new context from method */
ctx = SSL_CTX_new(TLSv1_2_method());
if (ctx == nullptr) {
ERR_print_errors_fp(stderr);
abort();
}
return ctx;
}
void LoadCertificates(SSL_CTX* ctx, char const *CertFile, char const *KeyFile) {
/* set the local certificate from CertFile */
if (SSL_CTX_use_certificate_file(ctx, CertFile, SSL_FILETYPE_PEM) <= 0) {
ERR_print_errors_fp(stderr);
abort();
}
/* set the private key from KeyFile (may be the same as CertFile) */
if (SSL_CTX_use_PrivateKey_file(ctx, KeyFile, SSL_FILETYPE_PEM) <= 0) {
ERR_print_errors_fp(stderr);
abort();
}
/* verify private key */
if (!SSL_CTX_check_private_key(ctx)) {
fprintf(stderr, "Private key does not match the public certificate\n");
abort();
}
}
void SSL_shutdown_helper(SSL *ssl) {
int rc = SSL_shutdown(ssl);
if (rc == 0) {
rc = SSL_shutdown(ssl);
}
if (rc < 0) {
printf("SSL Shutdown failed\n");
}
}
void resetKeys(int opfd, SSL *ssl) {
EVP_CIPHER_CTX * writeCtx = ssl->enc_write_ctx;
EVP_CIPHER_CTX * readCtx = ssl->enc_read_ctx;
EVP_AES_GCM_CTX* gcmWrite = (EVP_AES_GCM_CTX*)(writeCtx->cipher_data);
EVP_AES_GCM_CTX* gcmRead = (EVP_AES_GCM_CTX*)(readCtx->cipher_data);
unsigned char* writeKey = (unsigned char*)(gcmWrite->gcm.key);
unsigned char* readKey = (unsigned char*)(gcmRead->gcm.key);
unsigned char* writeIV = gcmWrite->iv;
unsigned char* readIV = gcmRead->iv;
unsigned char* readSeqNum = ssl->s3->read_sequence;
unsigned char* writeSeqNum = ssl->s3->write_sequence;
int err = 0;
socklen_t optlen = 8;
err = getsockopt(opfd, AF_KTLS, KTLS_GET_IV_RECV, readSeqNum, &optlen);
if (err < 0) {
perror("failed to get send key on AF_KTLS socket using setsockopt(2)");
}
err = getsockopt(opfd, AF_KTLS, KTLS_GET_IV_SEND, writeSeqNum, &optlen);
if (err < 0) {
perror("failed to get send key on AF_KTLS socket using setsockopt(2)");
}
}
void tls_attach(int origfd, int opfd, SSL *ssl) {
struct sockaddr_ktls sa = { .sa_cipher = KTLS_CIPHER_AES_GCM_128,
.sa_socket = origfd, .sa_version = KTLS_VERSION_1_2};
if (bind(opfd, (struct sockaddr *) &sa, sizeof(sa)) < 0) {
perror("AF_ALG: bind failed\n");
exit(EXIT_FAILURE);
}
EVP_CIPHER_CTX * writeCtx = ssl->enc_write_ctx;
EVP_CIPHER_CTX * readCtx = ssl->enc_read_ctx;
EVP_AES_GCM_CTX* gcmWrite = (EVP_AES_GCM_CTX*) (writeCtx->cipher_data);
EVP_AES_GCM_CTX* gcmRead = (EVP_AES_GCM_CTX*) (readCtx->cipher_data);
unsigned char* writeKey = (unsigned char*) (gcmWrite->gcm.key);
unsigned char* readKey = (unsigned char*) (gcmRead->gcm.key);
unsigned char* writeIV = gcmWrite->iv;
unsigned char* readIV = gcmRead->iv;
if (setsockopt(opfd, AF_KTLS, KTLS_SET_KEY_SEND, writeKey, 16)) {
perror("AF_ALG: set write key failed\n");
exit(EXIT_FAILURE);
}
if (setsockopt(opfd, AF_KTLS, KTLS_SET_KEY_RECV, readKey, 16)) {
perror("AF_ALG: set read key failed\n");
exit(EXIT_FAILURE);
}
if (setsockopt(opfd, AF_KTLS, KTLS_SET_SALT_SEND, writeIV, 4)) {
perror("AF_ALG: set write key failed\n");
exit(EXIT_FAILURE);
}
if (setsockopt(opfd, AF_KTLS, KTLS_SET_SALT_RECV, readIV, 4)) {
perror("AF_ALG: set read key failed\n");
exit(EXIT_FAILURE);
}
unsigned char* writeSeqNum = ssl->s3->write_sequence;
if (setsockopt(opfd, AF_KTLS, KTLS_SET_IV_SEND, writeSeqNum, 8)) {
perror("AF_ALG: set write key failed\n");
exit(EXIT_FAILURE);
}
unsigned char* readSeqNum = ssl->s3->read_sequence;
if (setsockopt(opfd, AF_KTLS, KTLS_SET_IV_RECV, readSeqNum, 8)) {
perror("AF_ALG: set read key failed\n");
exit(EXIT_FAILURE);
}
}
void tls_unattach(int opfd) {
if (setsockopt(opfd, AF_KTLS, KTLS_UNATTACH, 0, 0)) {
perror("unattach failed\n");
}
}
void main_test_client(tls_test test, int type) {
SSL_CTX *ctx;
SSL *ssl;
int origfd = 0;
if ((ctx = SSL_CTX_new(TLSv1_2_method())) == nullptr)
printf("Unable to create a new SSL context structure.\n");
SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2);
SSL_CTX_set_cipher_list(ctx, "ECDH-ECDSA-AES128-GCM-SHA256");
ssl = SSL_new(ctx);
origfd = create_socket(port+2*type);
SSL_set_fd(ssl, origfd);
SSL_connect(ssl);
int opfd = socket(AF_KTLS, SOCK_STREAM, 0);
if (opfd < 0) {
perror("AF_ALG: create socket failed\n");
exit(EXIT_FAILURE);
}
tls_attach(origfd, opfd, ssl);
struct test_args args;
args.origfd = origfd;
args.ssl = ssl;
test(opfd, &args);
resetKeys(opfd, ssl);
tls_unattach(opfd);
close(opfd);
SSL_shutdown_helper(ssl);
SSL_free(ssl);
close(origfd);
SSL_CTX_free(ctx);
}
void *Servlet(void *args)/* Serve the connection -- threadable */
{
struct servlet_args *sargs = (struct servlet_args *) args;
enum serve_action type = sargs->type;
SSL *ssl = sargs->ssl;
int sd;
struct server_args serv_args;
serv_args.ssl = ssl;
serv_args.type = tls_server;
serv_args.client = sargs->client;
SSL_accept(ssl);
tls_server_funcs[type] (&serv_args);
SSL_shutdown_helper(ssl);
free(args);
sd = SSL_get_fd(ssl);/* get socket connection */
SSL_free(ssl);/* release SSL state */
close(sd);/* close connection */
return nullptr;
}
void main_server(int type) {
SSL_CTX *ctx;
ctx = InitServerCTX();/* initialize SSL */
LoadCertificates(ctx, "ca.crt", "ca.pem");/* load certs */
SSL_CTX_set_cipher_list(ctx, "ECDH-ECDSA-AES128-GCM-SHA256");
int server = OpenListener(port+(2*type));/* create server socket */
pthread_mutex_lock(&server_lock);
server_up++;
pthread_cond_signal(&server_cond);
pthread_mutex_unlock(&server_lock);
while (1) {
struct sockaddr_in addr;
unsigned int len = sizeof(addr);
int client = accept(server, (struct sockaddr*) &addr, &len);
SSL *ssl = SSL_new(ctx); /* get new SSL state with context */
SSL_set_fd(ssl, client);/* set connection socket to SSL state */
pthread_t pthread;
struct servlet_args *args = (struct servlet_args *) malloc(
sizeof(struct servlet_args));
args->client = client;
args->ssl = ssl;
args->type = (enum serve_action) type;
pthread_create(&pthread, nullptr, Servlet, args);
}
close(server);/* close server socket */
SSL_CTX_free(ctx);/* release context */
}
void ref_test_client(tls_test test, int type) {
int client = create_socket(port+(type * 2 + 1));
test(client, nullptr);
close(client);
}
void *ref_Servlet(void *args) {
struct servlet_args *sargs = (struct servlet_args *) args;
enum serve_action type = (enum serve_action) sargs->type;
struct server_args serv_args;
int client = sargs->client;
serv_args.client = client;
serv_args.type = plain_server;
tls_server_funcs[type] (&serv_args);
free(args);
close(client);/* close connection */
return nullptr;
}
void ref_server(int type) {
int server = OpenListener(port+(2*type+1));
pthread_mutex_lock(&server_lock);
server_up++;
pthread_cond_signal(&server_cond);
pthread_mutex_unlock(&server_lock);
while (1) {
int client = accept(server, nullptr, nullptr);
pthread_t pthread;
struct servlet_args *args = (struct servlet_args *) malloc(
sizeof(struct servlet_args));
args->client = client;
args->type = (enum serve_action) type;
pthread_create(&pthread, nullptr, ref_Servlet, args);
}
}
char *prepare_msghdr(struct msghdr *msg) {
memset(msg, 0, sizeof(*msg));
// Load up the cmsg data
struct cmsghdr *header = nullptr;
uint32_t *type = nullptr;
/* IV data */
struct af_alg_iv *alg_iv = nullptr;
int ivsize = 12;
uint32_t iv_msg_size = CMSG_SPACE(sizeof(*alg_iv) + ivsize);
/* AEAD data */
uint32_t *assoclen = nullptr;
uint32_t assoc_msg_size = CMSG_SPACE(sizeof(*assoclen));
uint32_t bufferlen = CMSG_SPACE(sizeof(*type)) + /*Encryption/Decryption*/
iv_msg_size + /* IV */
assoc_msg_size;/* AEAD associated data size */
char* buffer = (char *) calloc(1, bufferlen);
msg->msg_control = buffer;
msg->msg_controllen = bufferlen;
return buffer;
}