123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383 |
- /* Copyright (c) 2003, Roger Dingledine.
- * Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson.
- * Copyright (c) 2007, The Tor Project, Inc. */
- /* See LICENSE for licensing information */
- /* $Id$ */
- const char tortls_c_id[] =
- "$Id$";
- /**
- * \file tortls.c
- * \brief Wrapper functions to present a consistent interface to
- * TLS, SSL, and X.509 functions from OpenSSL.
- **/
- /* (Unlike other tor functions, these
- * are prefixed with tor_ in order to avoid conflicting with OpenSSL
- * functions and variables.)
- */
- #include "orconfig.h"
- #include <assert.h>
- #include <openssl/ssl.h>
- #include <openssl/ssl3.h>
- #include <openssl/err.h>
- #include <openssl/tls1.h>
- #include <openssl/asn1.h>
- #include <openssl/bio.h>
- #include <openssl/opensslv.h>
- #if OPENSSL_VERSION_NUMBER < 0x00907000l
- #error "We require openssl >= 0.9.7"
- #endif
- #define CRYPTO_PRIVATE /* to import prototypes from crypto.h */
- #include "crypto.h"
- #include "tortls.h"
- #include "util.h"
- #include "log.h"
- #include "container.h"
- #include <string.h>
- // #define V2_HANDSHAKE_SERVER
- // #define V2_HANDSHAKE_CLIENT
- /* Copied from or.h */
- #define LEGAL_NICKNAME_CHARACTERS \
- "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"
- /** How long do identity certificates live? (sec) */
- #define IDENTITY_CERT_LIFETIME (365*24*60*60)
- /** Structure holding the TLS state for a single connection. */
- typedef struct tor_tls_context_t {
- int refcnt;
- SSL_CTX *ctx;
- X509 *my_cert;
- X509 *my_id_cert;
- crypto_pk_env_t *key;
- } tor_tls_context_t;
- /** Holds a SSL object and its associated data. Members are only
- * accessed from within tortls.c.
- */
- struct tor_tls_t {
- tor_tls_context_t *context; /**DOCDOC */
- SSL *ssl; /**< An OpenSSL SSL object. */
- int socket; /**< The underlying file descriptor for this TLS connection. */
- enum {
- TOR_TLS_ST_HANDSHAKE, TOR_TLS_ST_OPEN, TOR_TLS_ST_GOTCLOSE,
- TOR_TLS_ST_SENTCLOSE, TOR_TLS_ST_CLOSED, TOR_TLS_ST_RENEGOTIATE,
- } state : 3; /**< The current SSL state, depending on which operations have
- * completed successfully. */
- unsigned int isServer:1; /**< True iff this is a server-side connection */
- unsigned int hadCert:1; /**< Docdoc */
- unsigned int wasV2Handshake:1; /**< DOCDOC */
- size_t wantwrite_n; /**< 0 normally, >0 if we returned wantwrite last
- * time. */
- unsigned long last_write_count;
- unsigned long last_read_count;
- void (*negotiated_callback)(tor_tls_t *tls, void *arg);
- void *callback_arg;
- };
- static void tor_tls_context_decref(tor_tls_context_t *ctx);
- static void tor_tls_context_incref(tor_tls_context_t *ctx);
- static X509* tor_tls_create_certificate(crypto_pk_env_t *rsa,
- crypto_pk_env_t *rsa_sign,
- const char *cname,
- const char *cname_sign,
- unsigned int lifetime);
- /** Global tls context. We keep it here because nobody else needs to
- * touch it. */
- static tor_tls_context_t *global_tls_context = NULL;
- /** True iff tor_tls_init() has been called. */
- static int tls_library_is_initialized = 0;
- /* Module-internal error codes. */
- #define _TOR_TLS_SYSCALL (_MIN_TOR_TLS_ERROR_VAL - 2)
- #define _TOR_TLS_ZERORETURN (_MIN_TOR_TLS_ERROR_VAL - 1)
- /** Log all pending tls errors at level <b>severity</b>. Use
- * <b>doing</b> to describe our current activities.
- */
- static void
- tls_log_errors(int severity, const char *doing)
- {
- int err;
- const char *msg, *lib, *func;
- while ((err = ERR_get_error()) != 0) {
- msg = (const char*)ERR_reason_error_string(err);
- lib = (const char*)ERR_lib_error_string(err);
- func = (const char*)ERR_func_error_string(err);
- if (!msg) msg = "(null)";
- if (doing) {
- log(severity, LD_NET, "TLS error while %s: %s (in %s:%s)",
- doing, msg, lib,func);
- } else {
- log(severity, LD_NET, "TLS error: %s (in %s:%s)", msg, lib, func);
- }
- }
- }
- /** Convert an errno (or a WSAerrno on windows) into a TOR_TLS_* error
- * code. */
- static int
- tor_errno_to_tls_error(int e)
- {
- #if defined(MS_WINDOWS) && !defined(USE_BSOCKETS)
- switch (e) {
- case WSAECONNRESET: // most common
- return TOR_TLS_ERROR_CONNRESET;
- case WSAETIMEDOUT:
- return TOR_TLS_ERROR_TIMEOUT;
- case WSAENETUNREACH:
- case WSAEHOSTUNREACH:
- return TOR_TLS_ERROR_NO_ROUTE;
- case WSAECONNREFUSED:
- return TOR_TLS_ERROR_CONNREFUSED; // least common
- default:
- return TOR_TLS_ERROR_MISC;
- }
- #else
- switch (e) {
- case ECONNRESET: // most common
- return TOR_TLS_ERROR_CONNRESET;
- case ETIMEDOUT:
- return TOR_TLS_ERROR_TIMEOUT;
- case EHOSTUNREACH:
- case ENETUNREACH:
- return TOR_TLS_ERROR_NO_ROUTE;
- case ECONNREFUSED:
- return TOR_TLS_ERROR_CONNREFUSED; // least common
- default:
- return TOR_TLS_ERROR_MISC;
- }
- #endif
- }
- /** DOCDOC */
- const char *
- tor_tls_err_to_string(int err)
- {
- if (err >= 0)
- return "[Not an error.]";
- switch (err) {
- case TOR_TLS_ERROR_MISC: return "misc error";
- case TOR_TLS_ERROR_IO: return "unexpected close";
- case TOR_TLS_ERROR_CONNREFUSED: return "connection refused";
- case TOR_TLS_ERROR_CONNRESET: return "connection reset";
- case TOR_TLS_ERROR_NO_ROUTE: return "host unreachable";
- case TOR_TLS_ERROR_TIMEOUT: return "connection timed out";
- case TOR_TLS_CLOSE: return "closed";
- case TOR_TLS_WANTREAD: return "want to read";
- case TOR_TLS_WANTWRITE: return "want to write";
- default: return "(unknown error code)";
- }
- }
- #define CATCH_SYSCALL 1
- #define CATCH_ZERO 2
- /** Given a TLS object and the result of an SSL_* call, use
- * SSL_get_error to determine whether an error has occurred, and if so
- * which one. Return one of TOR_TLS_{DONE|WANTREAD|WANTWRITE|ERROR}.
- * If extra&CATCH_SYSCALL is true, return _TOR_TLS_SYSCALL instead of
- * reporting syscall errors. If extra&CATCH_ZERO is true, return
- * _TOR_TLS_ZERORETURN instead of reporting zero-return errors.
- *
- * If an error has occurred, log it at level <b>severity</b> and describe the
- * current action as <b>doing</b>.
- */
- static int
- tor_tls_get_error(tor_tls_t *tls, int r, int extra,
- const char *doing, int severity)
- {
- int err = SSL_get_error(tls->ssl, r);
- int tor_error = TOR_TLS_ERROR_MISC;
- switch (err) {
- case SSL_ERROR_NONE:
- return TOR_TLS_DONE;
- case SSL_ERROR_WANT_READ:
- return TOR_TLS_WANTREAD;
- case SSL_ERROR_WANT_WRITE:
- return TOR_TLS_WANTWRITE;
- case SSL_ERROR_SYSCALL:
- if (extra&CATCH_SYSCALL)
- return _TOR_TLS_SYSCALL;
- if (r == 0) {
- log(severity, LD_NET, "TLS error: unexpected close while %s", doing);
- tor_error = TOR_TLS_ERROR_IO;
- } else {
- int e = tor_socket_errno(tls->socket);
- log(severity, LD_NET,
- "TLS error: <syscall error while %s> (errno=%d: %s)",
- doing, e, tor_socket_strerror(e));
- tor_error = tor_errno_to_tls_error(e);
- }
- tls_log_errors(severity, doing);
- return tor_error;
- case SSL_ERROR_ZERO_RETURN:
- if (extra&CATCH_ZERO)
- return _TOR_TLS_ZERORETURN;
- log(severity, LD_NET, "TLS error: Zero return");
- tls_log_errors(severity, doing);
- /* XXXX020 Actually, a 'zero return' error has a pretty specific meaning:
- * the connection has been closed cleanly. */
- return TOR_TLS_ERROR_MISC;
- default:
- tls_log_errors(severity, doing);
- return TOR_TLS_ERROR_MISC;
- }
- }
- /** Initialize OpenSSL, unless it has already been initialized.
- */
- static void
- tor_tls_init(void)
- {
- if (!tls_library_is_initialized) {
- SSL_library_init();
- SSL_load_error_strings();
- crypto_global_init(-1);
- tls_library_is_initialized = 1;
- }
- }
- /** Free all global TLS structures. */
- void
- tor_tls_free_all(void)
- {
- if (global_tls_context) {
- tor_tls_context_decref(global_tls_context);
- global_tls_context = NULL;
- }
- }
- /** We need to give OpenSSL a callback to verify certificates. This is
- * it: We always accept peer certs and complete the handshake. We
- * don't validate them until later.
- */
- static int
- always_accept_verify_cb(int preverify_ok,
- X509_STORE_CTX *x509_ctx)
- {
- /* avoid "unused parameter" warning. */
- preverify_ok = 0;
- x509_ctx = NULL;
- return 1;
- }
- /** Generate and sign an X509 certificate with the public key <b>rsa</b>,
- * signed by the private key <b>rsa_sign</b>. The commonName of the
- * certificate will be <b>cname</b>; the commonName of the issuer will be
- * <b>cname_sign</b>. The cert will be valid for <b>cert_lifetime</b> seconds
- * starting from now. Return a certificate on success, NULL on
- * failure.
- */
- static X509 *
- tor_tls_create_certificate(crypto_pk_env_t *rsa,
- crypto_pk_env_t *rsa_sign,
- const char *cname,
- const char *cname_sign,
- unsigned int cert_lifetime)
- {
- time_t start_time, end_time;
- EVP_PKEY *sign_pkey = NULL, *pkey=NULL;
- X509 *x509 = NULL;
- X509_NAME *name = NULL, *name_issuer=NULL;
- int nid;
- tor_tls_init();
- start_time = time(NULL);
- tor_assert(rsa);
- tor_assert(cname);
- tor_assert(rsa_sign);
- tor_assert(cname_sign);
- if (!(sign_pkey = _crypto_pk_env_get_evp_pkey(rsa_sign,1)))
- goto error;
- if (!(pkey = _crypto_pk_env_get_evp_pkey(rsa,0)))
- goto error;
- if (!(x509 = X509_new()))
- goto error;
- if (!(X509_set_version(x509, 2)))
- goto error;
- if (!(ASN1_INTEGER_set(X509_get_serialNumber(x509), (long)start_time)))
- goto error;
- if (!(name = X509_NAME_new()))
- goto error;
- if ((nid = OBJ_txt2nid("organizationName")) == NID_undef)
- goto error;
- if (!(X509_NAME_add_entry_by_NID(name, nid, MBSTRING_ASC,
- (unsigned char*)"t o r", -1, -1, 0)))
- goto error;
- if ((nid = OBJ_txt2nid("commonName")) == NID_undef) goto error;
- if (!(X509_NAME_add_entry_by_NID(name, nid, MBSTRING_ASC,
- (unsigned char*)cname, -1, -1, 0)))
- goto error;
- if (!(X509_set_subject_name(x509, name)))
- goto error;
- if (!(name_issuer = X509_NAME_new()))
- goto error;
- if ((nid = OBJ_txt2nid("organizationName")) == NID_undef)
- goto error;
- if (!(X509_NAME_add_entry_by_NID(name_issuer, nid, MBSTRING_ASC,
- (unsigned char*)"t o r", -1, -1, 0)))
- goto error;
- if ((nid = OBJ_txt2nid("commonName")) == NID_undef) goto error;
- if (!(X509_NAME_add_entry_by_NID(name_issuer, nid, MBSTRING_ASC,
- (unsigned char*)cname_sign, -1, -1, 0)))
- goto error;
- if (!(X509_set_issuer_name(x509, name_issuer)))
- goto error;
- if (!X509_time_adj(X509_get_notBefore(x509),0,&start_time))
- goto error;
- end_time = start_time + cert_lifetime;
- if (!X509_time_adj(X509_get_notAfter(x509),0,&end_time))
- goto error;
- if (!X509_set_pubkey(x509, pkey))
- goto error;
- if (!X509_sign(x509, sign_pkey, EVP_sha1()))
- goto error;
- goto done;
- error:
- if (x509) {
- X509_free(x509);
- x509 = NULL;
- }
- done:
- tls_log_errors(LOG_WARN, "generating certificate");
- if (sign_pkey)
- EVP_PKEY_free(sign_pkey);
- if (pkey)
- EVP_PKEY_free(pkey);
- if (name)
- X509_NAME_free(name);
- if (name_issuer)
- X509_NAME_free(name_issuer);
- return x509;
- }
- #define SERVER_CIPHER_LIST \
- (TLS1_TXT_DHE_RSA_WITH_AES_256_SHA ":" \
- TLS1_TXT_DHE_RSA_WITH_AES_128_SHA ":" \
- SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA)
- /* Note: for setting up your own private testing network with link crypto
- * disabled, set the cipher lists to your cipher list to
- * SSL3_TXT_RSA_NULL_SHA. If you do this, you won't be able to communicate
- * with any of the "real" Tors, though. */
- #if OPENSSL_VERSION_NUMBER >= 0x00908000l
- #define CLIENT_CIPHER_LIST \
- (TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA ":" \
- TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA ":" \
- TLS1_TXT_DHE_RSA_WITH_AES_256_SHA ":" \
- TLS1_TXT_DHE_DSS_WITH_AES_256_SHA ":" \
- TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA ":" \
- TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA ":" \
- TLS1_TXT_RSA_WITH_AES_256_SHA ":" \
- TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA ":" \
- TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA ":" \
- TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA ":" \
- TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA ":" \
- TLS1_TXT_DHE_RSA_WITH_AES_128_SHA ":" \
- TLS1_TXT_DHE_DSS_WITH_AES_128_SHA ":" \
- TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA":" \
- TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA":" \
- TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA ":" \
- TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA ":" \
- SSL3_TXT_RSA_RC4_128_MD5 ":" \
- SSL3_TXT_RSA_RC4_128_SHA ":" \
- TLS1_TXT_RSA_WITH_AES_128_SHA ":" \
- TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA ":" \
- TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA ":" \
- SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA ":" \
- SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA ":" \
- TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA ":" \
- TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA ":" \
- SSL3_TXT_RSA_FIPS_WITH_3DES_EDE_CBC_SHA ":" \
- SSL3_TXT_RSA_DES_192_CBC3_SHA)
- #else
- /* Ug. We don't have as many ciphers with openssl 0.9.7 as we'd like. Fix
- * this list into something that sucks less. */
- #define CLIENT_CIPHER_LIST \
- (TLS1_TXT_DHE_RSA_WITH_AES_256_SHA ":" \
- TLS1_TXT_DHE_RSA_WITH_AES_128_SHA ":" \
- SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA ":" \
- SSL3_TXT_RSA_RC4_128_SHA)
- #endif
- #ifndef V2_HANDSHAKE_CLIENT
- #undef CLIENT_CIPHER_LIST
- #define CLIENT_CIPHER_LIST (TLS1_TXT_DHE_RSA_WITH_AES_128_SHA ":" \
- SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA)
- #endif
- /** DOCDOC */
- static void
- tor_tls_context_decref(tor_tls_context_t *ctx)
- {
- tor_assert(ctx);
- if (--ctx->refcnt == 0) {
- SSL_CTX_free(ctx->ctx);
- X509_free(ctx->my_cert);
- X509_free(ctx->my_id_cert);
- crypto_free_pk_env(ctx->key);
- tor_free(ctx);
- }
- }
- /** DOCDOC */
- static void
- tor_tls_context_incref(tor_tls_context_t *ctx)
- {
- ++ctx->refcnt;
- }
- /** Create a new TLS context for use with Tor TLS handshakes.
- * <b>identity</b> should be set to the identity key used to sign the
- * certificate, and <b>nickname</b> set to the nickname to use.
- *
- * You can call this function multiple times. Each time you call it,
- * it generates new certificates; all new connections will use
- * the new SSL context.
- */
- int
- tor_tls_context_new(crypto_pk_env_t *identity, const char *nickname,
- unsigned int key_lifetime)
- {
- crypto_pk_env_t *rsa = NULL;
- crypto_dh_env_t *dh = NULL;
- EVP_PKEY *pkey = NULL;
- tor_tls_context_t *result = NULL;
- X509 *cert = NULL, *idcert = NULL;
- char nn2[128];
- if (!nickname)
- nickname = "null";
- tor_snprintf(nn2, sizeof(nn2), "%s <signing>", nickname);
- tor_tls_init();
- /* Generate short-term RSA key. */
- if (!(rsa = crypto_new_pk_env()))
- goto error;
- if (crypto_pk_generate_key(rsa)<0)
- goto error;
- /* Create certificate signed by identity key. */
- cert = tor_tls_create_certificate(rsa, identity, nickname, nn2,
- key_lifetime);
- /* Create self-signed certificate for identity key. */
- idcert = tor_tls_create_certificate(identity, identity, nn2, nn2,
- IDENTITY_CERT_LIFETIME);
- if (!cert || !idcert) {
- log(LOG_WARN, LD_CRYPTO, "Error creating certificate");
- goto error;
- }
- result = tor_malloc_zero(sizeof(tor_tls_context_t));
- result->refcnt = 1;
- result->my_cert = X509_dup(cert);
- result->my_id_cert = X509_dup(idcert);
- result->key = crypto_pk_dup_key(rsa);
- #ifdef EVERYONE_HAS_AES
- /* Tell OpenSSL to only use TLS1 */
- if (!(result->ctx = SSL_CTX_new(TLSv1_method())))
- goto error;
- #else
- /* Tell OpenSSL to use SSL3 or TLS1 but not SSL2. */
- if (!(result->ctx = SSL_CTX_new(SSLv23_method())))
- goto error;
- SSL_CTX_set_options(result->ctx, SSL_OP_NO_SSLv2);
- #endif
- SSL_CTX_set_options(result->ctx, SSL_OP_SINGLE_DH_USE);
- if (cert && !SSL_CTX_use_certificate(result->ctx,cert))
- goto error;
- X509_free(cert); /* We just added a reference to cert. */
- cert=NULL;
- #if 0
- if (idcert && !SSL_CTX_add_extra_chain_cert(result->ctx,idcert))
- goto error;
- #else
- if (idcert) {
- X509_STORE *s = SSL_CTX_get_cert_store(result->ctx);
- tor_assert(s);
- X509_STORE_add_cert(s, idcert);
- }
- #endif
- idcert=NULL; /* The context now owns the reference to idcert */
- SSL_CTX_set_session_cache_mode(result->ctx, SSL_SESS_CACHE_OFF);
- tor_assert(rsa);
- if (!(pkey = _crypto_pk_env_get_evp_pkey(rsa,1)))
- goto error;
- if (!SSL_CTX_use_PrivateKey(result->ctx, pkey))
- goto error;
- EVP_PKEY_free(pkey);
- pkey = NULL;
- if (!SSL_CTX_check_private_key(result->ctx))
- goto error;
- dh = crypto_dh_new();
- SSL_CTX_set_tmp_dh(result->ctx, _crypto_dh_env_get_dh(dh));
- crypto_dh_free(dh);
- SSL_CTX_set_verify(result->ctx, SSL_VERIFY_PEER,
- always_accept_verify_cb);
- /* let us realloc bufs that we're writing from */
- SSL_CTX_set_mode(result->ctx, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER);
- /* Free the old context if one exists. */
- if (global_tls_context) {
- /* This is safe even if there are open connections: OpenSSL does
- * reference counting with SSL and SSL_CTX objects. */
- tor_tls_context_decref(global_tls_context);
- }
- global_tls_context = result;
- if (rsa)
- crypto_free_pk_env(rsa);
- return 0;
- error:
- tls_log_errors(LOG_WARN, "creating TLS context");
- if (pkey)
- EVP_PKEY_free(pkey);
- if (rsa)
- crypto_free_pk_env(rsa);
- if (dh)
- crypto_dh_free(dh);
- if (result)
- tor_tls_context_decref(result);
- if (cert)
- X509_free(cert);
- if (idcert)
- X509_free(idcert);
- return -1;
- }
- #ifdef V2_HANDSHAKE_SERVER
- /** DOCDOC */
- static int
- tor_tls_client_is_using_v2_ciphers(const SSL *ssl)
- {
- int i;
- SSL_SESSION *session;
- /* If we reached this point, we just got a client hello. See if there is
- * a cipher list. */
- if (!(session = SSL_get_session(ssl))) {
- log_warn(LD_NET, "No session on TLS?");
- return 0;
- }
- if (!session->ciphers) {
- log_warn(LD_NET, "No ciphers on session");
- return 0;
- }
- /* Now we need to see if there are any ciphers whose presence means we're
- * dealing with an updated Tor. */
- for (i = 0; i < sk_SSL_CIPHER_num(session->ciphers); ++i) {
- SSL_CIPHER *cipher = sk_SSL_CIPHER_value(session->ciphers, i);
- const char *ciphername = SSL_CIPHER_get_name(cipher);
- if (strcmp(ciphername, TLS1_TXT_DHE_RSA_WITH_AES_128_SHA) &&
- strcmp(ciphername, TLS1_TXT_DHE_RSA_WITH_AES_256_SHA) &&
- strcmp(ciphername, SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA) &&
- strcmp(ciphername, "(NONE)")) {
- /* XXXX should be ld_debug */
- log_info(LD_NET, "Got a non-version-1 cipher called '%s'",ciphername);
- // return 1;
- goto dump_list;
- }
- }
- return 0;
- dump_list:
- {
- smartlist_t *elts = smartlist_create();
- char *s;
- for (i = 0; i < sk_SSL_CIPHER_num(session->ciphers); ++i) {
- SSL_CIPHER *cipher = sk_SSL_CIPHER_value(session->ciphers, i);
- const char *ciphername = SSL_CIPHER_get_name(cipher);
- smartlist_add(elts, (char*)ciphername);
- }
- s = smartlist_join_strings(elts, ":", 0, NULL);
- log_info(LD_NET, "Got a non-version-1 cipher list. It is: '%s'", s);
- tor_free(s);
- smartlist_free(elts);
- }
- return 1;
- }
- /** DOCDOC */
- static void
- tor_tls_server_info_callback(const SSL *ssl, int type, int val)
- {
- (void) val;
- if (type != SSL_CB_ACCEPT_LOOP)
- return;
- if (ssl->state != SSL3_ST_SW_SRVR_HELLO_A)
- return;
- if (tor_tls_client_is_using_v2_ciphers(ssl)) {
- /* Yes, we're casting away the const from ssl. This is very naughty of us.
- * Let's hope openssl doesn't notice! */
- /* Set SSL_MODE_NO_AUTO_CHAIN to keep from sending back any extra certs. */
- SSL_set_mode((SSL*) ssl, SSL_MODE_NO_AUTO_CHAIN);
- /* Don't send a hello request. */
- SSL_set_verify((SSL*) ssl, SSL_VERIFY_NONE, NULL);
- }
- }
- #endif
- /** Create a new TLS object from a file descriptor, and a flag to
- * determine whether it is functioning as a server.
- */
- tor_tls_t *
- tor_tls_new(int sock, int isServer)
- {
- BIO *bio = NULL;
- tor_tls_t *result = tor_malloc_zero(sizeof(tor_tls_t));
- tor_assert(global_tls_context); /* make sure somebody made it first */
- if (!(result->ssl = SSL_new(global_tls_context->ctx))) {
- tls_log_errors(LOG_WARN, "generating TLS context");
- tor_free(result);
- return NULL;
- }
- if (!SSL_set_cipher_list(result->ssl,
- isServer ? SERVER_CIPHER_LIST : CLIENT_CIPHER_LIST)) {
- SSL_free(result->ssl);
- tor_free(result);
- return NULL;
- }
- result->socket = sock;
- #ifdef USE_BSOCKETS
- bio = BIO_new_bsocket(sock, BIO_NOCLOSE);
- #else
- bio = BIO_new_socket(sock, BIO_NOCLOSE);
- #endif
- if (! bio) {
- tls_log_errors(LOG_WARN, "opening BIO");
- SSL_free(result->ssl);
- tor_free(result);
- return NULL;
- }
- SSL_set_bio(result->ssl, bio, bio);
- tor_tls_context_incref(global_tls_context);
- result->context = global_tls_context;
- result->state = TOR_TLS_ST_HANDSHAKE;
- result->isServer = isServer;
- result->wantwrite_n = 0;
- #ifdef V2_HANDSHAKE_SERVER
- if (isServer) {
- SSL_set_info_callback(result->ssl, tor_tls_server_info_callback);
- }
- #endif
- /* Not expected to get called. */
- tls_log_errors(LOG_WARN, "generating TLS context");
- return result;
- }
- /**DOCDOC*/
- void
- tor_tls_set_renegotiate_callback(tor_tls_t *tls,
- void (*cb)(tor_tls_t *, void *arg),
- void *arg)
- {
- tls->negotiated_callback = cb;
- tls->callback_arg = arg;
- }
- /** Return whether this tls initiated the connect (client) or
- * received it (server). */
- int
- tor_tls_is_server(tor_tls_t *tls)
- {
- tor_assert(tls);
- return tls->isServer;
- }
- /** Release resources associated with a TLS object. Does not close the
- * underlying file descriptor.
- */
- void
- tor_tls_free(tor_tls_t *tls)
- {
- tor_assert(tls && tls->ssl);
- SSL_free(tls->ssl);
- tls->ssl = NULL;
- tls->negotiated_callback = NULL;
- if (tls->context)
- tor_tls_context_decref(tls->context);
- tor_free(tls);
- }
- /** Underlying function for TLS reading. Reads up to <b>len</b>
- * characters from <b>tls</b> into <b>cp</b>. On success, returns the
- * number of characters read. On failure, returns TOR_TLS_ERROR,
- * TOR_TLS_CLOSE, TOR_TLS_WANTREAD, or TOR_TLS_WANTWRITE.
- */
- int
- tor_tls_read(tor_tls_t *tls, char *cp, size_t len)
- {
- int r, err;
- tor_assert(tls);
- tor_assert(tls->ssl);
- tor_assert(tls->state == TOR_TLS_ST_OPEN);
- r = SSL_read(tls->ssl, cp, len);
- if (r > 0) {
- #ifdef V2_HANDSHAKE_SERVER
- if (!tls->hadCert && tls->ssl->session && tls->ssl->session->peer) {
- tls->hadCert = 1;
- /* New certificate! */
- log_info(LD_NET, "Got a TLS renegotiation.");
- if (tls->negotiated_callback)
- tls->negotiated_callback(tls, tls->callback_arg);
- }
- #endif
- return r;
- }
- err = tor_tls_get_error(tls, r, CATCH_ZERO, "reading", LOG_DEBUG);
- if (err == _TOR_TLS_ZERORETURN) {
- log_debug(LD_NET,"read returned r=%d; TLS is closed",r);
- tls->state = TOR_TLS_ST_CLOSED;
- return TOR_TLS_CLOSE;
- } else {
- tor_assert(err != TOR_TLS_DONE);
- log_debug(LD_NET,"read returned r=%d, err=%d",r,err);
- return err;
- }
- }
- /** Underlying function for TLS writing. Write up to <b>n</b>
- * characters from <b>cp</b> onto <b>tls</b>. On success, returns the
- * number of characters written. On failure, returns TOR_TLS_ERROR,
- * TOR_TLS_WANTREAD, or TOR_TLS_WANTWRITE.
- */
- int
- tor_tls_write(tor_tls_t *tls, const char *cp, size_t n)
- {
- int r, err;
- tor_assert(tls);
- tor_assert(tls->ssl);
- tor_assert(tls->state == TOR_TLS_ST_OPEN);
- if (n == 0)
- return 0;
- if (tls->wantwrite_n) {
- /* if WANTWRITE last time, we must use the _same_ n as before */
- tor_assert(n >= tls->wantwrite_n);
- log_debug(LD_NET,"resuming pending-write, (%d to flush, reusing %d)",
- (int)n, (int)tls->wantwrite_n);
- n = tls->wantwrite_n;
- tls->wantwrite_n = 0;
- }
- r = SSL_write(tls->ssl, cp, n);
- err = tor_tls_get_error(tls, r, 0, "writing", LOG_INFO);
- if (err == TOR_TLS_DONE) {
- return r;
- }
- if (err == TOR_TLS_WANTWRITE || err == TOR_TLS_WANTREAD) {
- tls->wantwrite_n = n;
- }
- return err;
- }
- /** Perform initial handshake on <b>tls</b>. When finished, returns
- * TOR_TLS_DONE. On failure, returns TOR_TLS_ERROR, TOR_TLS_WANTREAD,
- * or TOR_TLS_WANTWRITE.
- */
- int
- tor_tls_handshake(tor_tls_t *tls)
- {
- int r;
- tor_assert(tls);
- tor_assert(tls->ssl);
- tor_assert(tls->state == TOR_TLS_ST_HANDSHAKE);
- check_no_tls_errors();
- if (tls->isServer) {
- r = SSL_accept(tls->ssl);
- } else {
- r = SSL_connect(tls->ssl);
- }
- r = tor_tls_get_error(tls,r,0, "handshaking", LOG_INFO);
- if (ERR_peek_error() != 0) {
- tls_log_errors(tls->isServer ? LOG_INFO : LOG_WARN,
- "handshaking");
- return TOR_TLS_ERROR_MISC;
- }
- if (r == TOR_TLS_DONE) {
- tls->state = TOR_TLS_ST_OPEN;
- tls->hadCert = tor_tls_peer_has_cert(tls) ? 1 : 0;
- if (tls->isServer) {
- SSL_set_info_callback(tls->ssl, NULL);
- SSL_set_verify(tls->ssl, SSL_VERIFY_NONE, always_accept_verify_cb);
- /* There doesn't seem to be a clear OpenSSL API to clear mode flags. */
- tls->ssl->mode &= ~SSL_MODE_NO_AUTO_CHAIN;
- #ifdef V2_HANDSHAKE_SERVER
- if (tor_tls_client_is_using_v2_ciphers(tls->ssl)) {
- /* This check is redundant, but back when we did it in the callback,
- * we didn't have access to the tor_tls_t struct. We could make some
- * kind of static map linking SSLs to tor_tls_ts, but that way lies
- * sadness. */
- tls->wasV2Handshake = 1;
- } else {
- tls->wasV2Handshake = 0;
- }
- #endif
- } else {
- #ifdef V2_HANDSHAKE_CLIENT
- /* If we got no ID cert, we're a v2 handshake. */
- X509 *cert = SSL_get_peer_certificate(tls->ssl);/*XXXX020 refcnt?*/
- STACK_OF(X509) *chain = SSL_get_peer_cert_chain(tls->ssl);
- int n_certs = sk_X509_num(chain);
- if (n_certs > 1 || (n_certs == 1 && cert != sk_X509_value(chain, 0)))
- tls->wasV2Handshake = 0;
- else
- tls->wasV2Handshake = 1;
- #endif
- SSL_set_cipher_list(tls->ssl, SERVER_CIPHER_LIST);
- }
- }
- return r;
- }
- /** Client only: Renegotiate a TLS session. When finished, returns
- * TOR_TLS_DONE. On failure, returns TOR_TLS_ERROR, TOR_TLS_WANTREAD, or
- * TOR_TLS_WANTWRITE.
- */
- int
- tor_tls_renegotiate(tor_tls_t *tls)
- {
- int r;
- tor_assert(tls);
- /* We could do server-initiated renegotiation too, but that would be tricky.
- * Instead of "SSL_renegotiate, then SSL_do_handshake until done" */
- tor_assert(!tls->isServer);
- if (tls->state != TOR_TLS_ST_RENEGOTIATE) {
- int r = SSL_renegotiate(tls->ssl);
- if (r <= 0) {
- return tor_tls_get_error(tls, r, CATCH_SYSCALL|CATCH_ZERO,
- "renegotiating", LOG_WARN);
- }
- tls->state = TOR_TLS_ST_RENEGOTIATE;
- }
- r = SSL_do_handshake(tls->ssl);
- if (r == 1) {
- tls->state = TOR_TLS_ST_OPEN;
- return TOR_TLS_DONE;
- } else
- return tor_tls_get_error(tls, r, CATCH_SYSCALL|CATCH_ZERO,
- "renegotiating handshake", LOG_WARN);
- }
- /** Shut down an open tls connection <b>tls</b>. When finished, returns
- * TOR_TLS_DONE. On failure, returns TOR_TLS_ERROR, TOR_TLS_WANTREAD,
- * or TOR_TLS_WANTWRITE.
- */
- int
- tor_tls_shutdown(tor_tls_t *tls)
- {
- int r, err;
- char buf[128];
- tor_assert(tls);
- tor_assert(tls->ssl);
- while (1) {
- if (tls->state == TOR_TLS_ST_SENTCLOSE) {
- /* If we've already called shutdown once to send a close message,
- * we read until the other side has closed too.
- */
- do {
- r = SSL_read(tls->ssl, buf, 128);
- } while (r>0);
- err = tor_tls_get_error(tls, r, CATCH_ZERO, "reading to shut down",
- LOG_INFO);
- if (err == _TOR_TLS_ZERORETURN) {
- tls->state = TOR_TLS_ST_GOTCLOSE;
- /* fall through... */
- } else {
- return err;
- }
- }
- r = SSL_shutdown(tls->ssl);
- if (r == 1) {
- /* If shutdown returns 1, the connection is entirely closed. */
- tls->state = TOR_TLS_ST_CLOSED;
- return TOR_TLS_DONE;
- }
- err = tor_tls_get_error(tls, r, CATCH_SYSCALL|CATCH_ZERO, "shutting down",
- LOG_INFO);
- if (err == _TOR_TLS_SYSCALL) {
- /* The underlying TCP connection closed while we were shutting down. */
- tls->state = TOR_TLS_ST_CLOSED;
- return TOR_TLS_DONE;
- } else if (err == _TOR_TLS_ZERORETURN) {
- /* The TLS connection says that it sent a shutdown record, but
- * isn't done shutting down yet. Make sure that this hasn't
- * happened before, then go back to the start of the function
- * and try to read.
- */
- if (tls->state == TOR_TLS_ST_GOTCLOSE ||
- tls->state == TOR_TLS_ST_SENTCLOSE) {
- log(LOG_WARN, LD_NET,
- "TLS returned \"half-closed\" value while already half-closed");
- return TOR_TLS_ERROR_MISC;
- }
- tls->state = TOR_TLS_ST_SENTCLOSE;
- /* fall through ... */
- } else {
- return err;
- }
- } /* end loop */
- }
- /** Return true iff this TLS connection is authenticated.
- */
- int
- tor_tls_peer_has_cert(tor_tls_t *tls)
- {
- X509 *cert;
- cert = SSL_get_peer_certificate(tls->ssl);
- tls_log_errors(LOG_WARN, "getting peer certificate");
- if (!cert)
- return 0;
- X509_free(cert);
- return 1;
- }
- /** DOCDOC */
- int
- tor_tls_get_cert_digests(tor_tls_t *tls,
- char *my_digest_out,
- char *peer_digest_out)
- {
- X509 *cert;
- unsigned int len;
- tor_assert(tls && tls->context);
- cert = tls->context->my_cert;
- if (cert) {
- X509_digest(cert, EVP_sha1(), (unsigned char*)my_digest_out, &len);
- if (len != DIGEST_LEN)
- return -1;
- }
- cert = SSL_get_peer_certificate(tls->ssl);
- if (cert) {
- X509_digest(cert, EVP_sha1(), (unsigned char*)peer_digest_out, &len);
- if (len != DIGEST_LEN)
- return -1;
- }
- return 0;
- }
- /** DOCDOC */
- crypto_pk_env_t *
- tor_tls_dup_private_key(tor_tls_t *tls)
- {
- return crypto_pk_dup_key(tls->context->key);
- }
- /** DOCDOC */
- char *
- tor_tls_encode_my_certificate(tor_tls_t *tls, size_t *size_out,
- int conn_cert)
- {
- unsigned char *result, *cp;
- int certlen;
- X509 *cert;
- tor_assert(tls && tls->context);
- cert = conn_cert ? tls->context->my_cert : tls->context->my_id_cert;
- tor_assert(cert);
- certlen = i2d_X509(cert, NULL);
- tor_assert(certlen >= 0);
- cp = result = tor_malloc(certlen);
- i2d_X509(cert, &cp);
- tor_assert(cp-result == certlen);
- *size_out = (size_t)certlen;
- return (char*) result;
- }
- /** Warn that a certificate lifetime extends through a certain range. */
- static void
- log_cert_lifetime(X509 *cert, const char *problem)
- {
- BIO *bio = NULL;
- BUF_MEM *buf;
- char *s1=NULL, *s2=NULL;
- char mytime[33];
- time_t now = time(NULL);
- struct tm tm;
- if (problem)
- log_warn(LD_GENERAL,
- "Certificate %s: is your system clock set incorrectly?",
- problem);
- if (!(bio = BIO_new(BIO_s_mem()))) {
- log_warn(LD_GENERAL, "Couldn't allocate BIO!"); goto end;
- }
- if (!(ASN1_TIME_print(bio, X509_get_notBefore(cert)))) {
- tls_log_errors(LOG_WARN, "printing certificate lifetime");
- goto end;
- }
- BIO_get_mem_ptr(bio, &buf);
- s1 = tor_strndup(buf->data, buf->length);
- (void)BIO_reset(bio);
- if (!(ASN1_TIME_print(bio, X509_get_notAfter(cert)))) {
- tls_log_errors(LOG_WARN, "printing certificate lifetime");
- goto end;
- }
- BIO_get_mem_ptr(bio, &buf);
- s2 = tor_strndup(buf->data, buf->length);
- strftime(mytime, 32, "%b %d %H:%M:%S %Y GMT", tor_gmtime_r(&now, &tm));
- log_warn(LD_GENERAL,
- "(certificate lifetime runs from %s through %s. Your time is %s.)",
- s1,s2,mytime);
- end:
- /* Not expected to get invoked */
- tls_log_errors(LOG_WARN, "getting certificate lifetime");
- if (bio)
- BIO_free(bio);
- if (s1)
- tor_free(s1);
- if (s2)
- tor_free(s2);
- }
- /** DOCDOC helper.
- * cert_out needs to be freed. id_cert_out doesn't. */
- static void
- try_to_extract_certs_from_tls(int severity, tor_tls_t *tls,
- X509 **cert_out, X509 **id_cert_out)
- {
- X509 *cert = NULL, *id_cert = NULL;
- STACK_OF(X509) *chain = NULL;
- int num_in_chain, i;
- *cert_out = *id_cert_out = NULL;
- if (!(cert = SSL_get_peer_certificate(tls->ssl)))
- return;
- *cert_out = cert;
- if (!(chain = SSL_get_peer_cert_chain(tls->ssl)))
- return;
- num_in_chain = sk_X509_num(chain);
- /* 1 means we're receiving (server-side), and it's just the id_cert.
- * 2 means we're connecting (client-side), and it's both the link
- * cert and the id_cert.
- */
- if (num_in_chain < 1) {
- log_fn(severity,LD_PROTOCOL,
- "Unexpected number of certificates in chain (%d)",
- num_in_chain);
- return;
- }
- for (i=0; i<num_in_chain; ++i) {
- id_cert = sk_X509_value(chain, i);
- if (X509_cmp(id_cert, cert) != 0)
- break;
- }
- *id_cert_out = id_cert;
- }
- /** If the provided tls connection is authenticated and has a
- * certificate that is currently valid and signed, then set
- * *<b>identity_key</b> to the identity certificate's key and return
- * 0. Else, return -1 and log complaints with log-level <b>severity</b>.
- */
- int
- tor_tls_verify_v1(int severity, tor_tls_t *tls, crypto_pk_env_t **identity_key)
- {
- X509 *cert = NULL, *id_cert = NULL;
- EVP_PKEY *id_pkey = NULL;
- RSA *rsa;
- int r = -1;
- *identity_key = NULL;
- try_to_extract_certs_from_tls(severity, tls, &cert, &id_cert);
- if (!cert)
- goto done;
- if (!id_cert) {
- log_fn(severity,LD_PROTOCOL,"No distinct identity certificate found");
- goto done;
- }
- if (!(id_pkey = X509_get_pubkey(id_cert)) ||
- X509_verify(cert, id_pkey) <= 0) {
- log_fn(severity,LD_PROTOCOL,"X509_verify on cert and pkey returned <= 0");
- tls_log_errors(severity,"verifying certificate");
- goto done;
- }
- rsa = EVP_PKEY_get1_RSA(id_pkey);
- if (!rsa)
- goto done;
- *identity_key = _crypto_new_pk_env_rsa(rsa);
- r = 0;
- done:
- if (cert)
- X509_free(cert);
- if (id_pkey)
- EVP_PKEY_free(id_pkey);
- /* This should never get invoked, but let's make sure in case OpenSSL
- * acts unexpectedly. */
- tls_log_errors(LOG_WARN, "finishing tor_tls_verify");
- return r;
- }
- #if 0
- /** DOCDOC
- *
- * Returns 1 on "verification is done", 0 on "still need LINK_AUTH."
- */
- int
- tor_tls_verify_certs_v2(int severity, tor_tls_t *tls,
- const char *cert_str, size_t cert_len,
- const char *id_cert_str, size_t id_cert_len,
- crypto_pk_env_t **cert_key_out,
- char *conn_cert_digest_out,
- crypto_pk_env_t **id_key_out,
- char *id_digest_out)
- {
- X509 *cert = NULL, *id_cert = NULL;
- EVP_PKEY *id_pkey = NULL, *cert_pkey = NULL;
- int free_id_cert = 0, peer_used_tls_cert = 0;
- int r = -1;
- tor_assert(cert_key_out);
- tor_assert(conn_cert_digest_out);
- tor_assert(id_key_out);
- tor_assert(id_digest_out);
- *cert_key_out = NULL;
- if (cert_str && cert_len) {
- /*XXXX020 warn on error. */
- const unsigned char *cp = (const unsigned char*) cert_str;
- cert = d2i_X509(NULL, &cp, cert_len);
- }
- if (id_cert_str && id_cert_len) {
- /*XXXX020 warn on error. */
- const unsigned char *cp = (const unsigned char*) id_cert_str;
- id_cert = d2i_X509(NULL, &cp, id_cert_len);
- if (id_cert)
- free_id_cert = 1;
- }
- if (cert) {
- int cmp = 0;
- X509 *cert_tmp = SSL_get_peer_certificate(tls->ssl);
- if (cert_tmp) {
- peer_used_tls_cert = 1;
- cmp = X509_cmp(cert, cert_tmp);
- X509_free(cert_tmp);
- }
- if (cmp != 0) {
- log_fn(severity, LD_PROTOCOL,
- "Certificate in CERT cell didn't match TLS cert.");
- goto done;
- }
- }
- if (!cert || !id_cert) {
- X509 *c=NULL, *id=NULL;
- try_to_extract_certs_from_tls(severity, tls, &c, &id);
- if (c) {
- if (!cert)
- cert = c;
- else
- X509_free(c);
- }
- if (id && !id_cert)
- id_cert = id;
- }
- if (!id_cert || !cert)
- goto done;
- if (!(id_pkey = X509_get_pubkey(id_cert)) ||
- X509_verify(cert, id_pkey) <= 0) {
- log_fn(severity,LD_PROTOCOL,"X509_verify on cert and pkey returned <= 0");
- tls_log_errors(severity,"verifying certificate");
- goto done;
- }
- if (!(*id_key_out = _crypto_new_pk_env_evp_pkey(id_pkey)))
- goto done;
- crypto_pk_get_digest(*id_key_out, id_digest_out);
- if (!(cert_pkey = X509_get_pubkey(cert)))
- goto done;
- if (!(*cert_key_out = _crypto_new_pk_env_evp_pkey(cert_pkey)))
- goto done;
- {
- unsigned int len = 0;
- X509_digest(cert, EVP_sha1(), (unsigned char*)conn_cert_digest_out, &len);
- tor_assert(len == DIGEST_LEN);
- }
- r = peer_used_tls_cert ? 1 : 0;
- done:
- if (cert)
- X509_free(cert);
- if (id_cert && free_id_cert)
- X509_free(id_cert);
- if (id_pkey)
- EVP_PKEY_free(id_pkey);
- if (cert_pkey)
- EVP_PKEY_free(cert_pkey);
- return r;
- }
- #endif
- /** Check whether the certificate set on the connection <b>tls</b> is
- * expired or not-yet-valid, give or take <b>tolerance</b>
- * seconds. Return 0 for valid, -1 for failure.
- *
- * NOTE: you should call tor_tls_verify before tor_tls_check_lifetime.
- */
- int
- tor_tls_check_lifetime(tor_tls_t *tls, int tolerance)
- {
- time_t now, t;
- X509 *cert;
- int r = -1;
- now = time(NULL);
- if (!(cert = SSL_get_peer_certificate(tls->ssl)))
- goto done;
- t = now + tolerance;
- if (X509_cmp_time(X509_get_notBefore(cert), &t) > 0) {
- log_cert_lifetime(cert, "not yet valid");
- goto done;
- }
- t = now - tolerance;
- if (X509_cmp_time(X509_get_notAfter(cert), &t) < 0) {
- log_cert_lifetime(cert, "already expired");
- goto done;
- }
- r = 0;
- done:
- if (cert)
- X509_free(cert);
- /* Not expected to get invoked */
- tls_log_errors(LOG_WARN, "checking certificate lifetime");
- return r;
- }
- /** Return the number of bytes available for reading from <b>tls</b>.
- */
- int
- tor_tls_get_pending_bytes(tor_tls_t *tls)
- {
- tor_assert(tls);
- return SSL_pending(tls->ssl);
- }
- /** If <b>tls</b> requires that the next write be of a particular size,
- * return that size. Otherwise, return 0. */
- size_t
- tor_tls_get_forced_write_size(tor_tls_t *tls)
- {
- return tls->wantwrite_n;
- }
- /** Sets n_read and n_written to the number of bytes read and written,
- * respectivey, on the raw socket used by <b>tls</b> since the last time this
- * function was called on <b>tls</b>. */
- void
- tor_tls_get_n_raw_bytes(tor_tls_t *tls, size_t *n_read, size_t *n_written)
- {
- unsigned long r, w;
- r = BIO_number_read(SSL_get_rbio(tls->ssl));
- w = BIO_number_written(SSL_get_wbio(tls->ssl));
- /* We are ok with letting these unsigned ints go "negative" here:
- * If we wrapped around, this should still give us the right answer, unless
- * we wrapped around by more than ULONG_MAX since the last time we called
- * this function.
- */
- *n_read = (size_t)(r - tls->last_read_count);
- *n_written = (size_t)(w - tls->last_write_count);
- tls->last_read_count = r;
- tls->last_write_count = w;
- }
- /** Implement check_no_tls_errors: If there are any pending OpenSSL
- * errors, log an error message. */
- void
- _check_no_tls_errors(const char *fname, int line)
- {
- if (ERR_peek_error() == 0)
- return;
- log(LOG_WARN, LD_CRYPTO, "Unhandled OpenSSL errors found at %s:%d: ",
- tor_fix_source_file(fname), line);
- tls_log_errors(LOG_WARN, NULL);
- }
- /**DOCDOC */
- int
- tor_tls_used_v1_handshake(tor_tls_t *tls)
- {
- if (tls->isServer) {
- #ifdef V2_HANDSHAKE_SERVER
- return ! tls->wasV2Handshake;
- #endif
- } else {
- #ifdef V2_HANDSHAKE_CLIENT
- return ! tls->wasV2Handshake;
- #endif
- }
- return 1;
- }
- #if SSL3_RANDOM_SIZE != TOR_TLS_RANDOM_LEN
- #error "The TOR_TLS_RANDOM_LEN macro is defined incorrectly. That's a bug."
- #endif
- /** DOCDOC */
- int
- tor_tls_get_random_values(tor_tls_t *tls, char *client_random_out,
- char *server_random_out)
- {
- tor_assert(tls && tls->ssl);
- if (!tls->ssl->s3)
- return -1;
- memcpy(client_random_out, tls->ssl->s3->client_random, SSL3_RANDOM_SIZE);
- memcpy(server_random_out, tls->ssl->s3->server_random, SSL3_RANDOM_SIZE);
- return 0;
- }
- /** DOCDOC */
- int
- tor_tls_hmac_with_master_secret(tor_tls_t *tls, char *hmac_out,
- const char *data, size_t data_len)
- {
- SSL_SESSION *s;
- tor_assert(tls && tls->ssl);
- if (!(s = SSL_get_session(tls->ssl)))
- return -1;
- if (s->master_key_length < 0)
- return -1;
- crypto_hmac_sha1(hmac_out,
- (const char*)s->master_key,
- (size_t)s->master_key_length,
- data, data_len);
- return 0;
- }
|