From c96f16e8103783f6b98d9f844ea3a7f2195e4834 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Thu, 30 May 2024 04:49:40 +0200 Subject: Adding debian version 1.9.4-1. Signed-off-by: Daniel Baumann --- debian/vendor-h2o/deps/picotls/t/cli.c | 392 ------------ debian/vendor-h2o/deps/picotls/t/minicrypto.c | 165 ----- debian/vendor-h2o/deps/picotls/t/openssl.c | 227 ------- debian/vendor-h2o/deps/picotls/t/picotls.c | 843 -------------------------- debian/vendor-h2o/deps/picotls/t/test.h | 52 -- debian/vendor-h2o/deps/picotls/t/util.h | 240 -------- 6 files changed, 1919 deletions(-) delete mode 100644 debian/vendor-h2o/deps/picotls/t/cli.c delete mode 100644 debian/vendor-h2o/deps/picotls/t/minicrypto.c delete mode 100644 debian/vendor-h2o/deps/picotls/t/openssl.c delete mode 100644 debian/vendor-h2o/deps/picotls/t/picotls.c delete mode 100644 debian/vendor-h2o/deps/picotls/t/test.h delete mode 100644 debian/vendor-h2o/deps/picotls/t/util.h (limited to 'debian/vendor-h2o/deps/picotls/t') diff --git a/debian/vendor-h2o/deps/picotls/t/cli.c b/debian/vendor-h2o/deps/picotls/t/cli.c deleted file mode 100644 index fc73499..0000000 --- a/debian/vendor-h2o/deps/picotls/t/cli.c +++ /dev/null @@ -1,392 +0,0 @@ -/* - * Copyright (c) 2016 DeNA Co., Ltd., Kazuho Oku - * - * Permission is hereby granted, free of charge, to any person obtaining a copy - * of this software and associated documentation files (the "Software"), to - * deal in the Software without restriction, including without limitation the - * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or - * sell copies of the Software, and to permit persons to whom the Software is - * furnished to do so, subject to the following conditions: - * - * The above copyright notice and this permission notice shall be included in - * all copies or substantial portions of the Software. - * - * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING - * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS - * IN THE SOFTWARE. - */ -#ifndef _XOPEN_SOURCE -#define _XOPEN_SOURCE 700 /* required for glibc to use getaddrinfo, etc. */ -#endif - -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include "picotls.h" -#include "picotls/openssl.h" -#include "util.h" - -static void shift_buffer(ptls_buffer_t *buf, size_t delta) -{ - if (delta != 0) { - assert(delta <= buf->off); - if (delta != buf->off) - memmove(buf->base, buf->base + delta, buf->off - delta); - buf->off -= delta; - } -} - -static int handle_connection(int sockfd, ptls_context_t *ctx, const char *server_name, const char *input_file, - ptls_handshake_properties_t *hsprop) -{ - ptls_t *tls = ptls_new(ctx, server_name == NULL); - ptls_buffer_t rbuf, encbuf, ptbuf; - char bytebuf[16384]; - enum { IN_HANDSHAKE, IN_1RTT, IN_SHUTDOWN } state = IN_HANDSHAKE; - int inputfd = 0, ret = 0; - size_t early_bytes_sent = 0; - ssize_t ioret; - - ptls_buffer_init(&rbuf, "", 0); - ptls_buffer_init(&encbuf, "", 0); - ptls_buffer_init(&ptbuf, "", 0); - - fcntl(sockfd, F_SETFL, O_NONBLOCK); - - if (input_file != NULL) { - if ((inputfd = open(input_file, O_RDONLY)) == -1) { - fprintf(stderr, "failed to open file:%s:%s\n", input_file, strerror(errno)); - ret = 1; - goto Exit; - } - } - if (server_name != NULL) { - ptls_set_server_name(tls, server_name, 0); - if ((ret = ptls_handshake(tls, &encbuf, NULL, NULL, hsprop)) != PTLS_ERROR_IN_PROGRESS) { - fprintf(stderr, "ptls_handshake:%d\n", ret); - ret = 1; - goto Exit; - } - } - - while (1) { - /* check if data is available */ - fd_set readfds, writefds, exceptfds; - int maxfd = 0; - struct timeval timeout; - do { - FD_ZERO(&readfds); - FD_ZERO(&writefds); - FD_ZERO(&exceptfds); - FD_SET(sockfd, &readfds); - if (encbuf.off != 0) - FD_SET(sockfd, &writefds); - FD_SET(sockfd, &exceptfds); - maxfd = sockfd + 1; - if (inputfd != -1) { - FD_SET(inputfd, &readfds); - FD_SET(inputfd, &exceptfds); - if (maxfd <= inputfd) - maxfd = inputfd + 1; - } - timeout.tv_sec = encbuf.off != 0 ? 0 : 3600; - timeout.tv_usec = 0; - } while (select(maxfd, &readfds, &writefds, &exceptfds, &timeout) == -1); - - /* consume incoming messages */ - if (FD_ISSET(sockfd, &readfds) || FD_ISSET(sockfd, &exceptfds)) { - size_t off = 0, leftlen; - while ((ioret = read(sockfd, bytebuf, sizeof(bytebuf))) == -1 && errno == EINTR) - ; - if (ioret == -1 && (errno == EWOULDBLOCK || errno == EAGAIN)) { - /* no data */ - ioret = 0; - } else if (ioret <= 0) { - goto Exit; - } - while ((leftlen = ioret - off) != 0) { - if (state == IN_HANDSHAKE) { - if ((ret = ptls_handshake(tls, &encbuf, bytebuf + off, &leftlen, hsprop)) == 0) { - state = IN_1RTT; - /* release data sent as early-data, if server accepted it */ - if (hsprop->client.early_data_accepted_by_peer) - shift_buffer(&ptbuf, early_bytes_sent); - if (ptbuf.off != 0) { - if ((ret = ptls_send(tls, &encbuf, ptbuf.base, ptbuf.off)) != 0) { - fprintf(stderr, "ptls_send(1rtt):%d\n", ret); - goto Exit; - } - ptbuf.off = 0; - } - } else if (ret == PTLS_ERROR_IN_PROGRESS) { - /* ok */ - } else { - fprintf(stderr, "ptls_handshake:%d\n", ret); - goto Exit; - } - } else { - if ((ret = ptls_receive(tls, &rbuf, bytebuf + off, &leftlen)) == 0) { - if (rbuf.off != 0) { - write(1, rbuf.base, rbuf.off); - rbuf.off = 0; - } - } else if (ret == PTLS_ERROR_IN_PROGRESS) { - /* ok */ - } else { - fprintf(stderr, "ptls_receive:%d\n", ret); - goto Exit; - } - } - off += leftlen; - } - } - - /* read input (and send if possible) */ - if (inputfd != -1 && (FD_ISSET(inputfd, &readfds) || FD_ISSET(inputfd, &exceptfds))) { - while ((ioret = read(inputfd, bytebuf, sizeof(bytebuf))) == -1 && errno == EINTR) - ; - if (ioret > 0) { - ptls_buffer_pushv(&ptbuf, bytebuf, ioret); - if (state == IN_HANDSHAKE) { - size_t send_amount = 0; - if (hsprop->client.max_early_data_size != NULL) { - size_t max_can_be_sent = *hsprop->client.max_early_data_size; - if (max_can_be_sent > ptbuf.off) - max_can_be_sent = ptbuf.off; - send_amount = max_can_be_sent - early_bytes_sent; - } - if (send_amount != 0) { - if ((ret = ptls_send(tls, &encbuf, ptbuf.base, send_amount)) != 0) { - fprintf(stderr, "ptls_send(early_data):%d\n", ret); - goto Exit; - } - early_bytes_sent += send_amount; - } - } else { - if ((ret = ptls_send(tls, &encbuf, bytebuf, ioret)) != 0) { - fprintf(stderr, "ptls_send(1rtt):%d\n", ret); - goto Exit; - } - ptbuf.off = 0; - } - } else { - /* closed */ - if (input_file != NULL) - close(inputfd); - inputfd = -1; - } - } - - /* send any data */ - if (encbuf.off != 0) { - while ((ioret = write(sockfd, encbuf.base, encbuf.off)) == -1 && errno == EINTR) - ; - if (ioret == -1 && (errno == EWOULDBLOCK || errno == EAGAIN)) { - /* no data */ - } else if (ioret <= 0) { - goto Exit; - } else { - shift_buffer(&encbuf, ioret); - } - } - - /* close the sender side when necessary */ - if (state == IN_1RTT && inputfd == -1) { - /* FIXME send close_alert */ - shutdown(sockfd, SHUT_WR); - state = IN_SHUTDOWN; - } - } - -Exit: - if (sockfd != -1) - close(sockfd); - if (input_file != NULL && inputfd != -1) - close(inputfd); - ptls_buffer_dispose(&rbuf); - ptls_buffer_dispose(&encbuf); - ptls_buffer_dispose(&ptbuf); - ptls_free(tls); - return ret != 0; -} - -static int run_server(struct sockaddr *sa, socklen_t salen, ptls_context_t *ctx, const char *input_file, - ptls_handshake_properties_t *hsprop) -{ - int listen_fd, conn_fd, on = 1; - - if ((listen_fd = socket(sa->sa_family, SOCK_STREAM, 0)) == -1) { - perror("socket(2) failed"); - return 1; - } - if (setsockopt(listen_fd, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on)) != 0) { - perror("setsockopt(SO_REUSEADDR) failed"); - return 1; - } - if (bind(listen_fd, sa, salen) != 0) { - perror("bind(2) failed"); - return 1; - } - if (listen(listen_fd, SOMAXCONN) != 0) { - perror("listen(2) failed"); - return 1; - } - - while (1) { - if ((conn_fd = accept(listen_fd, NULL, 0)) != -1) - handle_connection(conn_fd, ctx, NULL, input_file, hsprop); - } - - return 0; -} - -static int run_client(struct sockaddr *sa, socklen_t salen, ptls_context_t *ctx, const char *server_name, const char *input_file, - ptls_handshake_properties_t *hsprop) -{ - int fd; - - if ((fd = socket(sa->sa_family, SOCK_STREAM, 0)) == 1) { - perror("socket(2) failed"); - return 1; - } - if (connect(fd, sa, salen) != 0) { - perror("connect(2) failed"); - return 1; - } - - return handle_connection(fd, ctx, server_name, input_file, hsprop); -} - -static void usage(const char *cmd) -{ - printf("Usage: %s [options] host port\n" - "\n" - "Options:\n" - " -4 force IPv4\n" - " -6 force IPv6\n" - " -c certificate-file\n" - " -i file a file to read from and send to the peer (default: stdin)\n" - " -k key-file specifies the credentials to be used for running the\n" - " server. If omitted, the command runs as a client.\n" - " -l log-file file to log traffic secrets\n" - " -n negotiates the key exchange method (i.e. wait for HRR)\n" - " -s session-file file to read/write the session ticket\n" - " -S require public key exchange when resuming a session\n" - " -e when resuming a session, send first 8,192 bytes of input\n" - " as early data\n" - " -v verify peer using the default certificates\n" - " -h print this help\n" - "\n", - cmd); -} - -int main(int argc, char **argv) -{ - ERR_load_crypto_strings(); - OpenSSL_add_all_algorithms(); -#if !defined(OPENSSL_NO_ENGINE) - /* Load all compiled-in ENGINEs */ - ENGINE_load_builtin_engines(); - ENGINE_register_all_ciphers(); - ENGINE_register_all_digests(); -#endif - - ptls_context_t ctx = {ptls_openssl_random_bytes, &ptls_get_time, ptls_openssl_key_exchanges, ptls_openssl_cipher_suites}; - ptls_handshake_properties_t hsprop = {{{{NULL}}}}; - const char *host, *port, *file = NULL; - int use_early_data = 0, ch; - struct sockaddr_storage sa; - socklen_t salen; - int family = 0; - - while ((ch = getopt(argc, argv, "46c:i:k:nes:Sl:vh")) != -1) { - switch (ch) { - case '4': - family = AF_INET; - break; - case '6': - family = AF_INET6; - break; - case 'c': - load_certificate_chain(&ctx, optarg); - break; - case 'i': - file = optarg; - break; - case 'k': - load_private_key(&ctx, optarg); - break; - case 'n': - hsprop.client.negotiate_before_key_exchange = 1; - break; - case 'e': - use_early_data = 1; - break; - case 's': - setup_session_file(&ctx, &hsprop, optarg); - break; - case 'S': - ctx.require_dhe_on_psk = 1; - break; - case 'l': - setup_log_secret(&ctx, optarg); - break; - case 'v': - setup_verify_certificate(&ctx); - break; - default: - usage(argv[0]); - exit(1); - } - } - argc -= optind; - argv += optind; - if (ctx.certificates.count != 0 || ctx.sign_certificate != NULL) { - /* server */ - if (ctx.certificates.count == 0 || ctx.sign_certificate == NULL) { - fprintf(stderr, "-c and -k options must be used together\n"); - return 1; - } - setup_session_cache(&ctx); - } else { - /* client */ - if (use_early_data) { - static size_t max_early_data_size; - hsprop.client.max_early_data_size = &max_early_data_size; - } - } - if (argc != 2) { - fprintf(stderr, "missing host and port\n"); - return 1; - } - host = (--argc, *argv++); - port = (--argc, *argv++); - - if (resolve_address((struct sockaddr *)&sa, &salen, host, port, family, SOCK_STREAM, IPPROTO_TCP) != 0) - exit(1); - - if (ctx.certificates.count != 0) { - return run_server((struct sockaddr *)&sa, salen, &ctx, file, &hsprop); - } else { - return run_client((struct sockaddr *)&sa, salen, &ctx, host, file, &hsprop); - } -} diff --git a/debian/vendor-h2o/deps/picotls/t/minicrypto.c b/debian/vendor-h2o/deps/picotls/t/minicrypto.c deleted file mode 100644 index 0c18a90..0000000 --- a/debian/vendor-h2o/deps/picotls/t/minicrypto.c +++ /dev/null @@ -1,165 +0,0 @@ -/* - * Copyright (c) 2016 DeNA Co., Ltd., Kazuho Oku - * - * Permission is hereby granted, free of charge, to any person obtaining a copy - * of this software and associated documentation files (the "Software"), to - * deal in the Software without restriction, including without limitation the - * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or - * sell copies of the Software, and to permit persons to whom the Software is - * furnished to do so, subject to the following conditions: - * - * The above copyright notice and this permission notice shall be included in - * all copies or substantial portions of the Software. - * - * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING - * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS - * IN THE SOFTWARE. - */ -#ifndef _XOPEN_SOURCE -#define _XOPEN_SOURCE 700 /* required for glibc to use getaddrinfo, etc. */ -#endif -#include -#include -#include -#include "../deps/picotest/picotest.h" -#include "../lib/cifra.c" -#include "../lib/uecc.c" -#include "test.h" - -static void test_secp256r1_key_exchange(void) -{ - test_key_exchange(&ptls_minicrypto_secp256r1); -} - -static void test_x25519_key_exchange(void) -{ - test_key_exchange(&ptls_minicrypto_x25519); -} - -static void test_secp256r1_sign(void) -{ - const char *msg = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdef"; - ptls_minicrypto_secp256r1sha256_sign_certificate_t signer = {{secp256r1sha256_sign}}; - uint8_t pub[SECP256R1_PUBLIC_KEY_SIZE]; - uint16_t selected; - ptls_buffer_t sigbuf; - uint32_t sigbuf_small[128]; - - uECC_make_key(pub, signer.key, uECC_secp256r1()); - ptls_buffer_init(&sigbuf, sigbuf_small, sizeof(sigbuf_small)); - - ok(secp256r1sha256_sign(&signer.super, NULL, &selected, &sigbuf, ptls_iovec_init(msg, 32), - (uint16_t[]){PTLS_SIGNATURE_ECDSA_SECP256R1_SHA256}, 1) == 0); - ok(selected == PTLS_SIGNATURE_ECDSA_SECP256R1_SHA256); - - /* FIXME verify sign */ - - ptls_buffer_dispose(&sigbuf); -} - -static void test_hrr(void) -{ - ptls_key_exchange_algorithm_t *client_keyex[] = {&ptls_minicrypto_x25519, &ptls_minicrypto_secp256r1, NULL}; - ptls_context_t client_ctx = {ptls_minicrypto_random_bytes, &ptls_get_time, client_keyex, ptls_minicrypto_cipher_suites}; - ptls_t *client, *server; - ptls_buffer_t cbuf, sbuf, decbuf; - uint8_t cbuf_small[16384], sbuf_small[16384], decbuf_small[16384]; - size_t consumed; - int ret; - - assert(ctx_peer->key_exchanges[0] != NULL && ctx_peer->key_exchanges[0]->id == PTLS_GROUP_SECP256R1); - assert(ctx_peer->key_exchanges[1] == NULL); - - client = ptls_new(&client_ctx, 0); - server = ptls_new(ctx_peer, 1); - ptls_buffer_init(&cbuf, cbuf_small, sizeof(cbuf_small)); - ptls_buffer_init(&sbuf, sbuf_small, sizeof(sbuf_small)); - ptls_buffer_init(&decbuf, decbuf_small, sizeof(decbuf_small)); - - ret = ptls_handshake(client, &cbuf, NULL, NULL, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(consumed == cbuf.off); - cbuf.off = 0; - - ok(sbuf.off > 5 + 4); - ok(sbuf.base[5] == 2 /* PTLS_HANDSHAKE_TYPE_SERVER_HELLO (RETRY_REQUEST) */); - - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(consumed == sbuf.off); - sbuf.off = 0; - - ok(cbuf.off >= 5 + 4); - ok(cbuf.base[5] == 1 /* PTLS_HANDSHAKE_TYPE_CLIENT_HELLO */); - - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, NULL); - ok(ret == 0); - ok(consumed == cbuf.off); - cbuf.off = 0; - - ok(sbuf.off >= 5 + 4); - ok(sbuf.base[5] == 2 /* PTLS_HANDSHAKE_TYPE_SERVER_HELLO */); - - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, NULL); - ok(ret == 0); - ok(consumed == sbuf.off); - sbuf.off = 0; - - ret = ptls_send(client, &cbuf, "hello world", 11); - ok(ret == 0); - - consumed = cbuf.off; - ret = ptls_receive(server, &decbuf, cbuf.base, &consumed); - ok(ret == 0); - ok(consumed == cbuf.off); - cbuf.off = 0; - - ok(decbuf.off == 11); - ok(memcmp(decbuf.base, "hello world", 11) == 0); - - ptls_buffer_dispose(&decbuf); - ptls_buffer_dispose(&sbuf); - ptls_buffer_dispose(&cbuf); - ptls_free(client); - ptls_free(server); -} - -int main(int argc, char **argv) -{ - subtest("secp256r1", test_secp256r1_key_exchange); - subtest("x25519", test_x25519_key_exchange); - subtest("secp256r1-sign", test_secp256r1_sign); - - ptls_iovec_t cert = ptls_iovec_init(SECP256R1_CERTIFICATE, sizeof(SECP256R1_CERTIFICATE) - 1); - - ptls_minicrypto_secp256r1sha256_sign_certificate_t sign_certificate; - ptls_minicrypto_init_secp256r1sha256_sign_certificate(&sign_certificate, - ptls_iovec_init(SECP256R1_PRIVATE_KEY, SECP256R1_PRIVATE_KEY_SIZE)); - - ptls_context_t ctxbuf = {ptls_minicrypto_random_bytes, - &ptls_get_time, - ptls_minicrypto_key_exchanges, - ptls_minicrypto_cipher_suites, - {&cert, 1}, - NULL, - NULL, - &sign_certificate.super}; - ctx = ctx_peer = &ctxbuf; - - subtest("picotls", test_picotls); - subtest("hrr", test_hrr); - - return done_testing(); - return done_testing(); -} diff --git a/debian/vendor-h2o/deps/picotls/t/openssl.c b/debian/vendor-h2o/deps/picotls/t/openssl.c deleted file mode 100644 index 9a7fc53..0000000 --- a/debian/vendor-h2o/deps/picotls/t/openssl.c +++ /dev/null @@ -1,227 +0,0 @@ -/* - * Copyright (c) 2016 DeNA Co., Ltd., Kazuho Oku - * - * Permission is hereby granted, free of charge, to any person obtaining a copy - * of this software and associated documentation files (the "Software"), to - * deal in the Software without restriction, including without limitation the - * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or - * sell copies of the Software, and to permit persons to whom the Software is - * furnished to do so, subject to the following conditions: - * - * The above copyright notice and this permission notice shall be included in - * all copies or substantial portions of the Software. - * - * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING - * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS - * IN THE SOFTWARE. - */ -#ifdef _WINDOWS -#include "wincompat.h" -#endif -#include -#include -#include -#include -#include -#include -#include "picotls.h" -#include "picotls/minicrypto.h" -#include "../deps/picotest/picotest.h" -#include "../lib/openssl.c" -#include "test.h" - -#define RSA_PRIVATE_KEY \ - "-----BEGIN RSA PRIVATE KEY-----\n" \ - "MIIEowIBAAKCAQEA5soWzSG7iyawQlHM1yaX2dUAATUkhpbg2WPFOEem7E3zYzc6\n" \ - "A/Z+bViFlfEgL37cbDUb4pnOAHrrsjGgkyBYh5i9iCTVfCk+H6SOHZJORO1Tq8X9\n" \ - "C7WcNcshpSdm2Pa8hmv9hsHbLSeoPNeg8NkTPwMVaMZ2GpdmiyAmhzSZ2H9mzNI7\n" \ - "ntPW/XCchVf+ax2yt9haZ+mQE2NPYwHDjqCtdGkP5ZXXnYhJSBzSEhxfGckIiKDy\n" \ - "OxiNkLFLvUdT4ERSFBjauP2cSI0XoOUsiBxJNwHH310AU8jZbveSTcXGYgEuu2MI\n" \ - "uDo7Vhkq5+TCqXsIFNbjy0taOoPRvUbPsbqFlQIDAQABAoIBAQCWcUv1wjR/2+Nw\n" \ - "B+Swp267R9bt8pdxyK6f5yKrskGErremiFygMrFtVBQYjws9CsRjISehSkN4GqjE\n" \ - "CweygJZVJeL++YvUmQnvFJSzgCjXU6GEStbOKD/A7T5sa0fmzMhOE907V+kpAT3x\n" \ - "E1rNRaP/ImJ1X1GjuefVb0rOPiK/dehFQWfsUkOvh+J3PU76wcnexxzJgxhVxdfX\n" \ - "qNa7UDsWzTImUjcHIfnhXc1K/oSKk6HjImQi/oE4lgoJUCEDaUbq0nXNrM0EmTTv\n" \ - "OQ5TVP5Lds9p8UDEa55eZllGXam0zKjhDKtkQ/5UfnxsAv2adY5cuH+XN0ExfKD8\n" \ - "wIZ5qINtAoGBAPRbQGZZkP/HOYA4YZ9HYAUQwFS9IZrQ8Y7C/UbL01Xli13nKalH\n" \ - "xXdG6Zv6Yv0FCJKA3N945lEof9rwriwhuZbyrA1TcKok/s7HR8Bhcsm2DzRD5OiC\n" \ - "3HK+Xy+6fBaMebffqBPp3Lfj/lSPNt0w/8DdrKBTw/cAy40g0n1zEu07AoGBAPHJ\n" \ - "V4IfQBiblCqDh77FfQRUNR4hVbbl00Gviigiw563nk7sxdrOJ1edTyTOUBHtM3zg\n" \ - "AT9sYz2CUXvsyEPqzMDANWMb9e2R//NcP6aM4k7WQRnwkZkp0WOIH95U2o1MHCYc\n" \ - "5meAHVf2UMl+64xU2ZfY3rjMmPLjWMt0hKYsOmtvAoGAClIQVkJSLXtsok2/Ucrh\n" \ - "81TRysJyOOe6TB1QNT1Gn8oiKMUqrUuqu27zTvM0WxtrUUTAD3A7yhG71LN1p8eE\n" \ - "3ytAuQ9dItKNMI6aKTX0czCNU9fKQ0fDp9UCkDGALDOisHFx1+V4vQuUIl4qIw1+\n" \ - "v9adA+iFzljqP/uy6DmEAyECgYAyWCgecf9YoFxzlbuYH2rukdIVmf9M/AHG9ZQg\n" \ - "00xEKhuOd4KjErXiamDmWwcVFHzaDZJ08E6hqhbpZN42Nhe4Ms1q+5FzjCjtNVIT\n" \ - "jdY5cCdSDWNjru9oeBmao7R2I1jhHrdi6awyeplLu1+0cp50HbYSaJeYS3pbssFE\n" \ - "EIWBhQKBgG3xleD4Sg9rG2OWQz5IrvLFg/Hy7YWyushVez61kZeLDnt9iM2um76k\n" \ - "/xFNIW0a+eL2VxRTCbXr9z86hjc/6CeSJHKYFQl4zsSAZkaIJ0+HbrhDNBAYh9b2\n" \ - "mRdX+OMdZ7Z5J3Glt8ENFRqe8RlESMpAKxjR+dID0bjwAjVr2KCh\n" \ - "-----END RSA PRIVATE KEY-----\n" - -#define RSA_CERTIFICATE \ - "-----BEGIN CERTIFICATE-----\n" \ - "MIICqDCCAZACCQDI5jeEvExN+TANBgkqhkiG9w0BAQUFADAWMRQwEgYDVQQDEwtl\n" \ - "eGFtcGxlLmNvbTAeFw0xNjA5MzAwMzQ0NTFaFw0yNjA5MjgwMzQ0NTFaMBYxFDAS\n" \ - "BgNVBAMTC2V4YW1wbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC\n" \ - "AQEA5soWzSG7iyawQlHM1yaX2dUAATUkhpbg2WPFOEem7E3zYzc6A/Z+bViFlfEg\n" \ - "L37cbDUb4pnOAHrrsjGgkyBYh5i9iCTVfCk+H6SOHZJORO1Tq8X9C7WcNcshpSdm\n" \ - "2Pa8hmv9hsHbLSeoPNeg8NkTPwMVaMZ2GpdmiyAmhzSZ2H9mzNI7ntPW/XCchVf+\n" \ - "ax2yt9haZ+mQE2NPYwHDjqCtdGkP5ZXXnYhJSBzSEhxfGckIiKDyOxiNkLFLvUdT\n" \ - "4ERSFBjauP2cSI0XoOUsiBxJNwHH310AU8jZbveSTcXGYgEuu2MIuDo7Vhkq5+TC\n" \ - "qXsIFNbjy0taOoPRvUbPsbqFlQIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQAwZQsG\n" \ - "E/3DQFBOnmBITFsaIVJVXU0fbfIjy3p1r6O9z2zvrfB1i8AMxOORAVjE5wHstGnK\n" \ - "3sLMjkMYXqu1XEfQbStQN+Bsi8m+nE/x9MmuLthpzJHXUmPYZ4TKs0KJmFPLTXYi\n" \ - "j0OrP0a5BNcyGj/B4Z33aaU9N3z0TWBwx4OPjJoK3iInBx80sC1Ig2PE6mDBxLOg\n" \ - "5Ohm/XU/43MrtH8SgYkxr3OyzXTm8J0RFMWhYlo1uqR+pWV3TgacixNnUq5w5h4m\n" \ - "sqXcikh+j8ReNXsKnMOAfFo+HbRqyKWNE3DekCIiiQ5ds4A4SfT7pYyGAmBkAxht\n" \ - "sS919x2o8l97kaYf\n" \ - "-----END CERTIFICATE-----\n" - -static void test_ecdh_key_exchange(void) -{ - test_key_exchange(&ptls_openssl_secp256r1); -} - -static void test_rsa_sign(void) -{ - ptls_openssl_sign_certificate_t *sc = (ptls_openssl_sign_certificate_t *)ctx->sign_certificate; - - const void *message = "hello world"; - ptls_buffer_t sigbuf; - uint8_t sigbuf_small[1024]; - - ptls_buffer_init(&sigbuf, sigbuf_small, sizeof(sigbuf_small)); - ok(do_sign(sc->key, &sigbuf, ptls_iovec_init(message, strlen(message)), EVP_sha256()) == 0); - EVP_PKEY_up_ref(sc->key); - ok(verify_sign(sc->key, ptls_iovec_init(message, strlen(message)), ptls_iovec_init(sigbuf.base, sigbuf.off)) == 0); - - ptls_buffer_dispose(&sigbuf); -} - -static void test_ecdsa_sign(void) -{ - EVP_PKEY *pkey; - - { /* create pkey */ - EC_KEY *eckey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); - EC_KEY_generate_key(eckey); - pkey = EVP_PKEY_new(); - EVP_PKEY_set1_EC_KEY(pkey, eckey); - EC_KEY_free(eckey); - } - - const char *message = "hello world"; - ptls_buffer_t sigbuf; - uint8_t sigbuf_small[1024]; - - ptls_buffer_init(&sigbuf, sigbuf_small, sizeof(sigbuf_small)); - ok(do_sign(pkey, &sigbuf, ptls_iovec_init(message, strlen(message)), EVP_sha256()) == 0); - EVP_PKEY_up_ref(pkey); - ok(verify_sign(pkey, ptls_iovec_init(message, strlen(message)), ptls_iovec_init(sigbuf.base, sigbuf.off)) == 0); - - ptls_buffer_dispose(&sigbuf); - EVP_PKEY_free(pkey); -} - -static void setup_certificate(ptls_iovec_t *dst) -{ - BIO *bio = BIO_new_mem_buf(RSA_CERTIFICATE, strlen(RSA_CERTIFICATE)); - X509 *cert = PEM_read_bio_X509(bio, NULL, NULL, NULL); - assert(cert != NULL || !!"failed to load certificate"); - BIO_free(bio); - - dst->base = NULL; - dst->len = i2d_X509(cert, &dst->base); - - X509_free(cert); -} - -static void setup_sign_certificate(ptls_openssl_sign_certificate_t *sc) -{ - BIO *bio = BIO_new_mem_buf(RSA_PRIVATE_KEY, strlen(RSA_PRIVATE_KEY)); - EVP_PKEY *pkey = PEM_read_bio_PrivateKey(bio, NULL, NULL, NULL); - assert(pkey != NULL || !"failed to load private key"); - BIO_free(bio); - - ptls_openssl_init_sign_certificate(sc, pkey); - - EVP_PKEY_free(pkey); -} - -int main(int argc, char **argv) -{ - ptls_openssl_sign_certificate_t openssl_sign_certificate; - ptls_openssl_verify_certificate_t openssl_verify_certificate; - - ERR_load_crypto_strings(); - OpenSSL_add_all_algorithms(); -#if !defined(OPENSSL_NO_ENGINE) - /* Load all compiled-in ENGINEs */ - ENGINE_load_builtin_engines(); - ENGINE_register_all_ciphers(); - ENGINE_register_all_digests(); -#endif - - ptls_iovec_t cert; - setup_certificate(&cert); - setup_sign_certificate(&openssl_sign_certificate); - ptls_openssl_init_verify_certificate(&openssl_verify_certificate, NULL); - ptls_context_t openssl_ctx = {ptls_openssl_random_bytes, - &ptls_get_time, - ptls_openssl_key_exchanges, - ptls_openssl_cipher_suites, - {&cert, 1}, - NULL, - NULL, - &openssl_sign_certificate.super, - &openssl_verify_certificate.super}; - assert(openssl_ctx.cipher_suites[0]->hash->digest_size == 48); /* sha384 */ - ptls_context_t openssl_ctx_sha256only = openssl_ctx; - ++openssl_ctx_sha256only.cipher_suites; - assert(openssl_ctx_sha256only.cipher_suites[0]->hash->digest_size == 32); /* sha256 */ - - ctx = ctx_peer = &openssl_ctx; - - subtest("ecdh-key-exchange", test_ecdh_key_exchange); - subtest("rsa-sign", test_rsa_sign); - subtest("ecdsa-sign", test_ecdsa_sign); - subtest("picotls", test_picotls); - - ctx = ctx_peer = &openssl_ctx_sha256only; - subtest("picotls", test_picotls); - - ctx = &openssl_ctx_sha256only; - ctx_peer = &openssl_ctx; - subtest("picotls", test_picotls); - - ctx = &openssl_ctx; - ctx_peer = &openssl_ctx_sha256only; - subtest("picotls", test_picotls); - - ptls_minicrypto_secp256r1sha256_sign_certificate_t minicrypto_sign_certificate; - ptls_iovec_t minicrypto_certificate = ptls_iovec_init(SECP256R1_CERTIFICATE, sizeof(SECP256R1_CERTIFICATE) - 1); - ptls_minicrypto_init_secp256r1sha256_sign_certificate( - &minicrypto_sign_certificate, ptls_iovec_init(SECP256R1_PRIVATE_KEY, sizeof(SECP256R1_PRIVATE_KEY) - 1)); - ptls_context_t minicrypto_ctx = {ptls_minicrypto_random_bytes, - &ptls_get_time, - ptls_minicrypto_key_exchanges, - ptls_minicrypto_cipher_suites, - {&minicrypto_certificate, 1}, - NULL, - NULL, - &minicrypto_sign_certificate.super}; - ctx = &openssl_ctx; - ctx_peer = &minicrypto_ctx; - subtest("vs. minicrypto", test_picotls); - - ctx = &minicrypto_ctx; - ctx_peer = &openssl_ctx; - subtest("minicrypto vs.", test_picotls); - - return done_testing(); -} diff --git a/debian/vendor-h2o/deps/picotls/t/picotls.c b/debian/vendor-h2o/deps/picotls/t/picotls.c deleted file mode 100644 index bb90c62..0000000 --- a/debian/vendor-h2o/deps/picotls/t/picotls.c +++ /dev/null @@ -1,843 +0,0 @@ -/* - * Copyright (c) 2016 DeNA Co., Ltd., Kazuho Oku - * - * Permission is hereby granted, free of charge, to any person obtaining a copy - * of this software and associated documentation files (the "Software"), to - * deal in the Software without restriction, including without limitation the - * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or - * sell copies of the Software, and to permit persons to whom the Software is - * furnished to do so, subject to the following conditions: - * - * The above copyright notice and this permission notice shall be included in - * all copies or substantial portions of the Software. - * - * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING - * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS - * IN THE SOFTWARE. - */ -#ifdef _WINDOWS -#include "wincompat.h" -#endif -#include -#include -#include -#include "picotls.h" -#include "picotls/minicrypto.h" -#include "../deps/picotest/picotest.h" -#include "../lib/picotls.c" -#include "test.h" - -ptls_context_t *ctx, *ctx_peer; - -static ptls_cipher_suite_t *find_cipher(ptls_context_t *ctx, uint16_t id) -{ - ptls_cipher_suite_t **cs; - for (cs = ctx->cipher_suites; *cs != NULL; ++cs) - if ((*cs)->id == id) - return *cs; - return NULL; -} - -static void test_hash(ptls_hash_algorithm_t *hash) -{ - ptls_hash_context_t *hctx = hash->create(); - uint8_t digest[PTLS_MAX_DIGEST_SIZE]; - - hctx->final(hctx, digest, PTLS_HASH_FINAL_MODE_FREE); - ok(memcmp(digest, hash->empty_digest, hash->digest_size) == 0); -} - -static void test_sha256(void) -{ - test_hash(find_cipher(ctx, PTLS_CIPHER_SUITE_AES_128_GCM_SHA256)->hash); -} - -static void test_sha384(void) -{ - ptls_cipher_suite_t *cs = find_cipher(ctx, PTLS_CIPHER_SUITE_AES_256_GCM_SHA384); - if (cs != NULL) - test_hash(cs->hash); -} - -static void test_hmac_sha256(void) -{ - /* test vector from RFC 4231 */ - const char *secret = "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b", *message = "Hi There"; - uint8_t digest[32]; - - ptls_hash_context_t *hctx = - ptls_hmac_create(find_cipher(ctx, PTLS_CIPHER_SUITE_AES_128_GCM_SHA256)->hash, secret, strlen(secret)); - hctx->update(hctx, message, strlen(message)); - hctx->final(hctx, digest, 0); - - ok(memcmp(digest, "\xb0\x34\x4c\x61\xd8\xdb\x38\x53\x5c\xa8\xaf\xce\xaf\x0b\xf1\x2b\x88\x1d\xc2\x00\xc9\x83\x3d\xa7\x26\xe9\x37" - "\x6c\x2e\x32\xcf\xf7", - 32) == 0); -} - -static void test_hkdf(void) -{ - ptls_hash_algorithm_t *sha256 = find_cipher(ctx, PTLS_CIPHER_SUITE_AES_128_GCM_SHA256)->hash; - const char salt[] = "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c"; - const char ikm[] = "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b"; - const char info[] = "\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9"; - uint8_t prk[PTLS_MAX_DIGEST_SIZE]; - uint8_t okm[42]; - - ptls_hkdf_extract(sha256, prk, ptls_iovec_init(salt, sizeof(salt) - 1), ptls_iovec_init(ikm, sizeof(ikm) - 1)); - ok(memcmp(prk, "\x07\x77\x09\x36\x2c\x2e\x32\xdf\x0d\xdc\x3f\x0d\xc4\x7b\xba\x63\x90\xb6\xc7\x3b\xb5\x0f\x9c\x31\x22\xec\x84" - "\x4a\xd7\xc2\xb3\xe5", - 32) == 0); - - ptls_hkdf_expand(sha256, okm, sizeof(okm), ptls_iovec_init(prk, sha256->digest_size), ptls_iovec_init(info, sizeof(info) - 1)); - ok(memcmp(okm, "\x3c\xb2\x5f\x25\xfa\xac\xd5\x7a\x90\x43\x4f\x64\xd0\x36\x2f\x2a\x2d\x2d\x0a\x90\xcf\x1a\x5a\x4c\x5d\xb0\x2d" - "\x56\xec\xc4\xc5\xbf\x34\x00\x72\x08\xd5\xb8\x87\x18\x58\x65", - sizeof(okm)) == 0); -} - -static void test_ciphersuite(ptls_cipher_suite_t *cs1, ptls_cipher_suite_t *cs2) -{ - const char *traffic_secret = "01234567890123456789012345678901", *src1 = "hello world", *src2 = "good bye, all"; - ptls_aead_context_t *c; - char enc1[256], enc2[256], dec1[256], dec2[256]; - size_t enc1len, enc2len, dec1len, dec2len; - - /* encrypt */ - c = ptls_aead_new(cs1->aead, cs1->hash, 1, traffic_secret, NULL); - assert(c != NULL); - ptls_aead_encrypt_init(c, 0, NULL, 0); - enc1len = ptls_aead_encrypt_update(c, enc1, src1, strlen(src1)); - enc1len += ptls_aead_encrypt_final(c, enc1 + enc1len); - ptls_aead_encrypt_init(c, 1, NULL, 0); - enc2len = ptls_aead_encrypt_update(c, enc2, src2, strlen(src2)); - enc2len += ptls_aead_encrypt_final(c, enc2 + enc2len); - ptls_aead_free(c); - - c = ptls_aead_new(cs2->aead, cs2->hash, 0, traffic_secret, NULL); - assert(c != NULL); - - /* decrypt and compare */ - dec1len = ptls_aead_decrypt(c, dec1, enc1, enc1len, 0, NULL, 0); - ok(dec1len != SIZE_MAX); - dec2len = ptls_aead_decrypt(c, dec2, enc2, enc2len, 1, NULL, 0); - ok(dec2len != SIZE_MAX); - ok(strlen(src1) == dec1len); - ok(memcmp(src1, dec1, dec1len) == 0); - ok(strlen(src2) == dec2len); - ok(memcmp(src2, dec2, dec2len - 1) == 0); - - /* alter and decrypt to detect failure */ - enc1[0] ^= 1; - dec1len = ptls_aead_decrypt(c, dec1, enc1, enc1len, 0, NULL, 0); - ok(dec1len == SIZE_MAX); - - ptls_aead_free(c); -} - -static void test_aad_ciphersuite(ptls_cipher_suite_t *cs1, ptls_cipher_suite_t *cs2) -{ - const char *traffic_secret = "01234567890123456789012345678901", *src = "hello world", *aad = "my true aad"; - ptls_aead_context_t *c; - char enc[256], dec[256]; - size_t enclen, declen; - - /* encrypt */ - c = ptls_aead_new(cs1->aead, cs1->hash, 1, traffic_secret, NULL); - assert(c != NULL); - ptls_aead_encrypt_init(c, 123, aad, strlen(aad)); - enclen = ptls_aead_encrypt_update(c, enc, src, strlen(src)); - enclen += ptls_aead_encrypt_final(c, enc + enclen); - ptls_aead_free(c); - - /* decrypt */ - c = ptls_aead_new(cs2->aead, cs2->hash, 0, traffic_secret, NULL); - assert(c != NULL); - declen = ptls_aead_decrypt(c, dec, enc, enclen, 123, aad, strlen(aad)); - ok(declen == strlen(src)); - ok(memcmp(src, dec, declen) == 0); - declen = ptls_aead_decrypt(c, dec, enc, enclen, 123, "my fake aad", strlen(aad)); - ok(declen == SIZE_MAX); - ptls_aead_free(c); -} - -static void test_ctr(ptls_cipher_suite_t *cs, const uint8_t *key, size_t key_len, const void *iv, size_t iv_len, - const void *expected, size_t expected_len) -{ - static uint8_t zeroes[64] = {0}; - - if (cs == NULL) - return; - - ptls_cipher_algorithm_t *algo = cs->aead->ctr_cipher; - uint8_t buf[sizeof(zeroes)]; - - assert(expected_len <= sizeof(zeroes)); - ok(algo->key_size == key_len); - ok(algo->iv_size == iv_len); - - ptls_cipher_context_t *ctx = ptls_cipher_new(algo, 1, key); - assert(ctx != NULL); - ptls_cipher_init(ctx, iv); - ptls_cipher_encrypt(ctx, buf, zeroes, expected_len); - ptls_cipher_free(ctx); - - ok(memcmp(buf, expected, expected_len) == 0); -} - -static void test_aes128ctr(void) -{ - static const uint8_t key[] = {0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6, 0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c}, - iv[] = {0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a}, - expected[] = {0x3a, 0xd7, 0x7b, 0xb4, 0x0d, 0x7a, 0x36, 0x60, - 0xa8, 0x9e, 0xca, 0xf3, 0x24, 0x66, 0xef, 0x97}; - - test_ctr(find_cipher(ctx, PTLS_CIPHER_SUITE_AES_128_GCM_SHA256), key, sizeof(key), iv, sizeof(iv), expected, sizeof(expected)); -} - -static void test_chacha20(void) -{ - static const uint8_t key[] = {0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, - 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31}, - iv[] = {1, 0, 0, 0, 0, 0, 0, 9, 0, 0, 0, 0x4a, 0, 0, 0, 0}, - expected[] = {0x10, 0xf1, 0xe7, 0xe4, 0xd1, 0x3b, 0x59, 0x15, 0x50, 0x0f, 0xdd, - 0x1f, 0xa3, 0x20, 0x71, 0xc4, 0xc7, 0xd1, 0xf4, 0xc7, 0x33, 0xc0, - 0x68, 0x03, 0x04, 0x22, 0xaa, 0x9a, 0xc3, 0xd4, 0x6c, 0x4e}; - - test_ctr(find_cipher(ctx, PTLS_CIPHER_SUITE_CHACHA20_POLY1305_SHA256), key, sizeof(key), iv, sizeof(iv), expected, - sizeof(expected)); -} - -static void test_aes128gcm(void) -{ - ptls_cipher_suite_t *cs = find_cipher(ctx, PTLS_CIPHER_SUITE_AES_128_GCM_SHA256), - *cs_peer = find_cipher(ctx, PTLS_CIPHER_SUITE_AES_128_GCM_SHA256); - - test_ciphersuite(cs, cs_peer); - test_aad_ciphersuite(cs, cs_peer); -} - -static void test_aes256gcm(void) -{ - ptls_cipher_suite_t *cs = find_cipher(ctx, PTLS_CIPHER_SUITE_AES_256_GCM_SHA384), - *cs_peer = find_cipher(ctx, PTLS_CIPHER_SUITE_AES_256_GCM_SHA384); - - if (cs != NULL && cs_peer != NULL) { - test_ciphersuite(cs, cs_peer); - test_aad_ciphersuite(cs, cs_peer); - } -} - -static void test_chacha20poly1305(void) -{ - ptls_cipher_suite_t *cs = find_cipher(ctx, PTLS_CIPHER_SUITE_CHACHA20_POLY1305_SHA256), - *cs_peer = find_cipher(ctx, PTLS_CIPHER_SUITE_CHACHA20_POLY1305_SHA256); - - if (cs != NULL && cs_peer != NULL) { - test_ciphersuite(cs, cs_peer); - test_aad_ciphersuite(cs, cs_peer); - } -} - -static struct { - struct { - uint8_t buf[32]; - size_t len; - int is_end_of_record; - } vec[16]; - size_t count; -} test_fragmented_message_queue = {{{{0}}}}; - -static int test_fragmented_message_record(ptls_t *tls, ptls_buffer_t *sendbuf, ptls_iovec_t message, int is_end_of_record, - ptls_handshake_properties_t *properties) -{ - memcpy(test_fragmented_message_queue.vec[test_fragmented_message_queue.count].buf, message.base, message.len); - test_fragmented_message_queue.vec[test_fragmented_message_queue.count].len = message.len; - test_fragmented_message_queue.vec[test_fragmented_message_queue.count].is_end_of_record = is_end_of_record; - ++test_fragmented_message_queue.count; - - return 0; -} - -static void test_fragmented_message(void) -{ - ptls_t tls = {NULL}; - struct st_ptls_record_t rec = {PTLS_CONTENT_TYPE_HANDSHAKE, 0x0301}; - int ret; - -#define SET_RECORD(lit) \ - do { \ - rec.length = sizeof(lit) - 1; \ - rec.fragment = (const uint8_t *)(lit); \ - } while (0) - - /* not fragmented */ - test_fragmented_message_queue.count = 0; - SET_RECORD("\x01\x00\x00\x03" - "abc"); - ret = handle_handshake_record(&tls, test_fragmented_message_record, NULL, &rec, NULL); - ok(ret == 0); - ok(test_fragmented_message_queue.count == 1); - ok(test_fragmented_message_queue.vec[0].len == rec.length); - ok(memcmp(test_fragmented_message_queue.vec[0].buf, rec.fragment, rec.length) == 0); - ok(test_fragmented_message_queue.vec[0].is_end_of_record); - ok(tls.recvbuf.mess.base == NULL); - - /* fragmented */ - test_fragmented_message_queue.count = 0; - SET_RECORD("\x01\x00\x00\x03" - "a"); - ret = handle_handshake_record(&tls, test_fragmented_message_record, NULL, &rec, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(tls.recvbuf.mess.base != NULL); - ok(test_fragmented_message_queue.count == 0); - SET_RECORD("bc\x02\x00\x00\x02" - "de" - "\x03"); - ret = handle_handshake_record(&tls, test_fragmented_message_record, NULL, &rec, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(test_fragmented_message_queue.count == 2); - ok(test_fragmented_message_queue.vec[0].len == 7); - ok(memcmp(test_fragmented_message_queue.vec[0].buf, "\x01\x00\x00\x03" - "abc", - 7) == 0); - ok(!test_fragmented_message_queue.vec[0].is_end_of_record); - ok(test_fragmented_message_queue.vec[1].len == 6); - ok(memcmp(test_fragmented_message_queue.vec[1].buf, "\x02\x00\x00\x02" - "de", - 6) == 0); - ok(!test_fragmented_message_queue.vec[1].is_end_of_record); - SET_RECORD("\x00\x00\x03" - "end"); - ret = handle_handshake_record(&tls, test_fragmented_message_record, NULL, &rec, NULL); - ok(ret == 0); - ok(tls.recvbuf.mess.base == NULL); - ok(test_fragmented_message_queue.count == 3); - ok(test_fragmented_message_queue.vec[2].len == 7); - ok(memcmp(test_fragmented_message_queue.vec[2].buf, "\x03\x00\x00\x03" - "end", - 7) == 0); - ok(test_fragmented_message_queue.vec[2].is_end_of_record); - -#undef SET_RECORD -} - -static int save_client_hello(ptls_on_client_hello_t *self, ptls_t *tls, ptls_iovec_t server_name, const ptls_iovec_t *protocols, - size_t num_protocols, const uint16_t *signature_algorithms, size_t num_signature_algorithms) -{ - ptls_set_server_name(tls, (const char *)server_name.base, server_name.len); - ptls_set_negotiated_protocol(tls, (const char *)protocols[0].base, protocols[0].len); - return 0; -} - -enum { TEST_HANDSHAKE_1RTT, TEST_HANDSHAKE_2RTT, TEST_HANDSHAKE_HRR, TEST_HANDSHAKE_HRR_STATELESS, TEST_HANDSHAKE_EARLY_DATA }; - -static void test_handshake(ptls_iovec_t ticket, int mode, int expect_ticket, int check_ch) -{ - ptls_t *client, *server; - ptls_handshake_properties_t client_hs_prop = {{{{NULL}, ticket}}}, server_hs_prop = {{{{NULL}}}}; - uint8_t cbuf_small[16384], sbuf_small[16384], decbuf_small[16384]; - ptls_buffer_t cbuf, sbuf, decbuf; - size_t consumed, max_early_data_size = 0; - int ret; - const char *req = "GET / HTTP/1.0\r\n\r\n"; - const char *resp = "HTTP/1.0 200 OK\r\n\r\nhello world\n"; - - client = ptls_new(ctx, 0); - server = ptls_new(ctx_peer, 1); - ptls_buffer_init(&cbuf, cbuf_small, sizeof(cbuf_small)); - ptls_buffer_init(&sbuf, sbuf_small, sizeof(sbuf_small)); - ptls_buffer_init(&decbuf, decbuf_small, sizeof(decbuf_small)); - - if (check_ch) { - static ptls_on_client_hello_t cb = {save_client_hello}; - ctx_peer->on_client_hello = &cb; - static const ptls_iovec_t protocols[] = {{(uint8_t *)"h2", 2}, {(uint8_t *)"http/1.1", 8}}; - client_hs_prop.client.negotiated_protocols.list = protocols; - client_hs_prop.client.negotiated_protocols.count = sizeof(protocols) / sizeof(protocols[0]); - ptls_set_server_name(client, "example.com", 0); - } - - switch (mode) { - case TEST_HANDSHAKE_HRR: - client_hs_prop.client.negotiate_before_key_exchange = 1; - break; - case TEST_HANDSHAKE_HRR_STATELESS: - client_hs_prop.client.negotiate_before_key_exchange = 1; - server_hs_prop.server.cookie.key = "0123456789abcdef0123456789abcdef"; - server_hs_prop.server.retry_uses_cookie = 1; - break; - case TEST_HANDSHAKE_EARLY_DATA: - assert(ctx_peer->max_early_data_size != 0); - client_hs_prop.client.max_early_data_size = &max_early_data_size; - break; - } - - ret = ptls_handshake(client, &cbuf, NULL, NULL, &client_hs_prop); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(cbuf.off != 0); - - switch (mode) { - case TEST_HANDSHAKE_2RTT: - case TEST_HANDSHAKE_HRR: - case TEST_HANDSHAKE_HRR_STATELESS: - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, &server_hs_prop); - if (mode == TEST_HANDSHAKE_HRR_STATELESS) { - ok(ret == PTLS_ERROR_STATELESS_RETRY); - ptls_free(server); - server = ptls_new(ctx_peer, 1); - } else { - ok(ret == PTLS_ERROR_IN_PROGRESS); - } - ok(cbuf.off == consumed); - ok(sbuf.off != 0); - cbuf.off = 0; - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, &client_hs_prop); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(sbuf.off == consumed); - ok(cbuf.off != 0); - sbuf.off = 0; - break; - case TEST_HANDSHAKE_EARLY_DATA: - ok(max_early_data_size == ctx_peer->max_early_data_size); - ret = ptls_send(client, &cbuf, req, strlen(req)); - ok(ret == 0); - break; - } - - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, &server_hs_prop); - ok(ret == 0); - ok(sbuf.off != 0); - if (check_ch) { - ok(ptls_get_server_name(server) != NULL); - ok(strcmp(ptls_get_server_name(server), "example.com") == 0); - ok(ptls_get_negotiated_protocol(server) != NULL); - ok(strcmp(ptls_get_negotiated_protocol(server), "h2") == 0); - } else { - ok(ptls_get_server_name(server) == NULL); - ok(ptls_get_negotiated_protocol(server) == NULL); - } - - if (mode == TEST_HANDSHAKE_EARLY_DATA) { - ok(consumed < cbuf.off); - memmove(cbuf.base, cbuf.base + consumed, cbuf.off - consumed); - cbuf.off -= consumed; - - consumed = cbuf.off; - ret = ptls_receive(server, &decbuf, cbuf.base, &consumed); - ok(ret == 0); - ok(consumed == cbuf.off); - ok(decbuf.off == strlen(req)); - ok(memcmp(decbuf.base, req, decbuf.off) == 0); - ok(!ptls_handshake_is_complete(server)); - cbuf.off = 0; - decbuf.off = 0; - - ret = ptls_send(server, &sbuf, resp, strlen(resp)); - ok(ret == 0); - } else { - ok(consumed == cbuf.off); - cbuf.off = 0; - } - - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, NULL); - ok(ret == 0); - ok(cbuf.off != 0); - if (check_ch) { - ok(ptls_get_server_name(client) != NULL); - ok(strcmp(ptls_get_server_name(client), "example.com") == 0); - ok(ptls_get_negotiated_protocol(client) != NULL); - ok(strcmp(ptls_get_negotiated_protocol(client), "h2") == 0); - } else { - ok(ptls_get_server_name(server) == NULL); - ok(ptls_get_negotiated_protocol(server) == NULL); - } - - if (expect_ticket) { - ok(consumed < sbuf.off); - memmove(sbuf.base, sbuf.base + consumed, sbuf.off - consumed); - sbuf.off -= consumed; - } else { - ok(consumed == sbuf.off); - sbuf.off = 0; - } - - if (mode != TEST_HANDSHAKE_EARLY_DATA) { - ret = ptls_send(client, &cbuf, req, strlen(req)); - ok(ret == 0); - - consumed = cbuf.off; - ret = ptls_receive(server, &decbuf, cbuf.base, &consumed); - ok(ret == 0); - ok(consumed == cbuf.off); - ok(decbuf.off == strlen(req)); - ok(memcmp(decbuf.base, req, strlen(req)) == 0); - ok(ptls_handshake_is_complete(server)); - decbuf.off = 0; - - ret = ptls_send(server, &sbuf, resp, strlen(resp)); - ok(ret == 0); - } - - consumed = sbuf.off; - ret = ptls_receive(client, &decbuf, sbuf.base, &consumed); - ok(ret == 0); - ok(consumed == sbuf.off); - ok(decbuf.off == strlen(resp)); - ok(memcmp(decbuf.base, resp, strlen(resp)) == 0); - ok(ptls_handshake_is_complete(client)); - decbuf.off = 0; - - if (mode == TEST_HANDSHAKE_EARLY_DATA) { - consumed = cbuf.off; - ret = ptls_receive(server, &decbuf, cbuf.base, &consumed); - ok(ret == 0); - ok(cbuf.off == consumed); - ok(decbuf.off == 0); - ok(ptls_handshake_is_complete(client)); - } - - ptls_buffer_dispose(&cbuf); - ptls_buffer_dispose(&sbuf); - ptls_buffer_dispose(&decbuf); - ptls_free(client); - ptls_free(server); - - if (check_ch) - ctx_peer->on_client_hello = NULL; -} - -static ptls_sign_certificate_t *sc_orig; -size_t sc_callcnt; - -static int sign_certificate(ptls_sign_certificate_t *self, ptls_t *tls, uint16_t *selected_algorithm, ptls_buffer_t *output, - ptls_iovec_t input, const uint16_t *algorithms, size_t num_algorithms) -{ - ++sc_callcnt; - return sc_orig->cb(sc_orig, tls, selected_algorithm, output, input, algorithms, num_algorithms); -} - -static void test_full_handshake(void) -{ - sc_callcnt = 0; - test_handshake(ptls_iovec_init(NULL, 0), TEST_HANDSHAKE_1RTT, 0, 0); - ok(sc_callcnt == 1); - test_handshake(ptls_iovec_init(NULL, 0), TEST_HANDSHAKE_1RTT, 0, 0); - ok(sc_callcnt == 2); - test_handshake(ptls_iovec_init(NULL, 0), TEST_HANDSHAKE_1RTT, 0, 1); - ok(sc_callcnt == 3); -} - -static void test_hrr_handshake(void) -{ - sc_callcnt = 0; - test_handshake(ptls_iovec_init(NULL, 0), TEST_HANDSHAKE_HRR, 0, 0); - ok(sc_callcnt == 1); -} - -static void test_hrr_stateless_handshake(void) -{ - sc_callcnt = 0; - test_handshake(ptls_iovec_init(NULL, 0), TEST_HANDSHAKE_HRR_STATELESS, 0, 0); - ok(sc_callcnt == 1); -} - -static int copy_ticket(ptls_encrypt_ticket_t *self, ptls_t *tls, int is_encrypt, ptls_buffer_t *dst, ptls_iovec_t src) -{ - int ret; - - if ((ret = ptls_buffer_reserve(dst, src.len)) != 0) - return ret; - memcpy(dst->base + dst->off, src.base, src.len); - dst->off += src.len; - - return 0; -} - -static ptls_iovec_t saved_ticket = {NULL}; - -static int save_ticket(ptls_save_ticket_t *self, ptls_t *tls, ptls_iovec_t src) -{ - saved_ticket.base = malloc(src.len); - memcpy(saved_ticket.base, src.base, src.len); - saved_ticket.len = src.len; - return 0; -} - -static void do_test_resumption(int different_preferred_key_share) -{ - assert(ctx->key_exchanges[0]->id == ctx_peer->key_exchanges[0]->id); - assert(ctx->key_exchanges[1] == NULL); - assert(ctx_peer->key_exchanges[1] == NULL); - assert(ctx->key_exchanges[0]->id != ptls_minicrypto_x25519.id); - ptls_key_exchange_algorithm_t *different_key_exchanges[] = {&ptls_minicrypto_x25519, ctx->key_exchanges[0], NULL}, - **key_exchanges_orig = ctx->key_exchanges; - - if (different_preferred_key_share) - ctx->key_exchanges = different_key_exchanges; - - ptls_encrypt_ticket_t et = {copy_ticket}; - ptls_save_ticket_t st = {save_ticket}; - - assert(ctx_peer->ticket_lifetime == 0); - assert(ctx_peer->max_early_data_size == 0); - assert(ctx_peer->encrypt_ticket == NULL); - assert(ctx_peer->save_ticket == NULL); - saved_ticket = ptls_iovec_init(NULL, 0); - - ctx_peer->ticket_lifetime = 86400; - ctx_peer->max_early_data_size = 8192; - ctx_peer->encrypt_ticket = &et; - ctx->save_ticket = &st; - - sc_callcnt = 0; - test_handshake(saved_ticket, different_preferred_key_share ? TEST_HANDSHAKE_2RTT : TEST_HANDSHAKE_1RTT, 1, 0); - ok(sc_callcnt == 1); - ok(saved_ticket.base != NULL); - - /* psk using saved ticket */ - test_handshake(saved_ticket, TEST_HANDSHAKE_1RTT, 1, 0); - ok(sc_callcnt == 1); - - /* 0-rtt psk using saved ticket */ - test_handshake(saved_ticket, TEST_HANDSHAKE_EARLY_DATA, 1, 0); - ok(sc_callcnt == 1); - - ctx->require_dhe_on_psk = 1; - - /* psk-dhe using saved ticket */ - test_handshake(saved_ticket, TEST_HANDSHAKE_1RTT, 1, 0); - ok(sc_callcnt == 1); - - /* 0-rtt psk-dhe using saved ticket */ - test_handshake(saved_ticket, TEST_HANDSHAKE_EARLY_DATA, 1, 0); - ok(sc_callcnt == 1); - - ctx->require_dhe_on_psk = 0; - ctx_peer->ticket_lifetime = 0; - ctx_peer->max_early_data_size = 0; - ctx_peer->encrypt_ticket = NULL; - ctx->save_ticket = NULL; - ctx->key_exchanges = key_exchanges_orig; -} - -static void test_resumption(void) -{ - do_test_resumption(0); -} - -static void test_resumption_different_preferred_key_share(void) -{ - if (ctx == ctx_peer) - return; - do_test_resumption(1); -} - -static void test_enforce_retry(int use_cookie) -{ - ptls_t *client, *server; - ptls_handshake_properties_t server_hs_prop = {{{{NULL}}}}; - ptls_buffer_t cbuf, sbuf, decbuf; - size_t consumed; - int ret; - - server_hs_prop.server.cookie.key = "0123456789abcdef0123456789abcdef"; - server_hs_prop.server.cookie.additional_data = ptls_iovec_init("1.2.3.4:1234", 12); - server_hs_prop.server.enforce_retry = 1; - server_hs_prop.server.retry_uses_cookie = use_cookie; - - ptls_buffer_init(&cbuf, "", 0); - ptls_buffer_init(&sbuf, "", 0); - ptls_buffer_init(&decbuf, "", 0); - - client = ptls_new(ctx, 0); - - ret = ptls_handshake(client, &cbuf, NULL, NULL, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(cbuf.off != 0); - - server = ptls_new(ctx, 1); - - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, &server_hs_prop); - cbuf.off = 0; - - if (use_cookie) { - ok(ret == PTLS_ERROR_STATELESS_RETRY); - ptls_free(server); - server = ptls_new(ctx, 1); - } else { - ok(ret == PTLS_ERROR_IN_PROGRESS); - } - - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(sbuf.off == consumed); - sbuf.off = 0; - - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, &server_hs_prop); - ok(ret == 0); - ok(cbuf.off == consumed); - cbuf.off = 0; - - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, NULL); - ok(ret == 0); - ok(sbuf.off == consumed); - sbuf.off = 0; - - ret = ptls_send(client, &cbuf, "hello world", 11); - ok(ret == 0); - - consumed = cbuf.off; - ret = ptls_receive(server, &decbuf, cbuf.base, &consumed); - ok(ret == 0); - ok(cbuf.off == consumed); - cbuf.off = 0; - - ok(decbuf.off == 11); - ok(memcmp(decbuf.base, "hello world", 11) == 0); - decbuf.off = 0; - - ptls_free(client); - ptls_free(server); - - ptls_buffer_dispose(&cbuf); - ptls_buffer_dispose(&sbuf); - ptls_buffer_dispose(&decbuf); -} - -static void test_enforce_retry_stateful(void) -{ - test_enforce_retry(0); -} - -static void test_enforce_retry_stateless(void) -{ - test_enforce_retry(1); -} - -static ptls_t *stateless_hrr_prepare(ptls_buffer_t *sbuf, ptls_handshake_properties_t *server_hs_prop) -{ - ptls_t *client = ptls_new(ctx, 0), *server = ptls_new(ctx_peer, 1); - ptls_buffer_t cbuf; - size_t consumed; - int ret; - - ptls_buffer_init(&cbuf, "", 0); - ptls_buffer_init(sbuf, "", 0); - - ret = ptls_handshake(client, &cbuf, NULL, NULL, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - - consumed = cbuf.off; - ret = ptls_handshake(server, sbuf, cbuf.base, &consumed, server_hs_prop); - ok(ret == PTLS_ERROR_STATELESS_RETRY); - - ptls_buffer_dispose(&cbuf); - ptls_free(server); - - return client; -} - -static void test_stateless_hrr_aad_change(void) -{ - ptls_t *client, *server; - ptls_handshake_properties_t server_hs_prop = {{{{NULL}}}}; - ptls_buffer_t cbuf, sbuf; - size_t consumed; - int ret; - - server_hs_prop.server.cookie.key = "0123456789abcdef0123456789abcdef"; - server_hs_prop.server.cookie.additional_data = ptls_iovec_init("1.2.3.4:1234", 12); - server_hs_prop.server.enforce_retry = 1; - server_hs_prop.server.retry_uses_cookie = 1; - - client = stateless_hrr_prepare(&sbuf, &server_hs_prop); - ptls_buffer_init(&cbuf, "", 0); - - consumed = sbuf.off; - ret = ptls_handshake(client, &cbuf, sbuf.base, &consumed, NULL); - ok(ret == PTLS_ERROR_IN_PROGRESS); - ok(sbuf.off == consumed); - sbuf.off = 0; - - server = ptls_new(ctx_peer, 1); - server_hs_prop.server.cookie.additional_data = ptls_iovec_init("1.2.3.4:4321", 12); - - consumed = cbuf.off; - ret = ptls_handshake(server, &sbuf, cbuf.base, &consumed, &server_hs_prop); - ok(ret == PTLS_ALERT_HANDSHAKE_FAILURE); - - ptls_free(client); - ptls_free(server); - - ptls_buffer_dispose(&cbuf); - ptls_buffer_dispose(&sbuf); -} - -void test_picotls(void) -{ - subtest("sha256", test_sha256); - subtest("sha384", test_sha384); - subtest("hmac-sha256", test_hmac_sha256); - subtest("hkdf", test_hkdf); - subtest("aes128gcm", test_aes128gcm); - subtest("aes256gcm", test_aes256gcm); - subtest("chacha20poly1305", test_chacha20poly1305); - subtest("aes128ctr", test_aes128ctr); - subtest("chacha20", test_chacha20); - - subtest("fragmented-message", test_fragmented_message); - - ptls_sign_certificate_t sc = {sign_certificate}; - sc_orig = ctx_peer->sign_certificate; - ctx_peer->sign_certificate = ≻ - - subtest("full-handshake", test_full_handshake); - subtest("hrr-handshake", test_hrr_handshake); - subtest("hrr-stateless-handshake", test_hrr_stateless_handshake); - subtest("resumption", test_resumption); - subtest("resumption-different-preferred-key-share", test_resumption_different_preferred_key_share); - - subtest("enforce-retry-stateful", test_enforce_retry_stateful); - subtest("enforce-retry-stateless", test_enforce_retry_stateless); - - subtest("stateless-hrr-aad-change", test_stateless_hrr_aad_change); - - ctx_peer->sign_certificate = sc_orig; -} - -void test_key_exchange(ptls_key_exchange_algorithm_t *algo) -{ - ptls_key_exchange_context_t *ctx; - ptls_iovec_t client_pubkey, client_secret, server_pubkey, server_secret; - int ret; - - /* fail */ - ret = algo->exchange(&server_pubkey, &server_secret, (ptls_iovec_t){NULL}); - ok(ret != 0); - - /* perform ecdh */ - ret = algo->create(&ctx, &client_pubkey); - ok(ret == 0); - ret = algo->exchange(&server_pubkey, &server_secret, client_pubkey); - ok(ret == 0); - ret = ctx->on_exchange(&ctx, &client_secret, server_pubkey); - ok(ret == 0); - ok(client_secret.len == server_secret.len); - ok(memcmp(client_secret.base, server_secret.base, client_secret.len) == 0); - - free(client_secret.base); - free(server_pubkey.base); - free(server_secret.base); -} diff --git a/debian/vendor-h2o/deps/picotls/t/test.h b/debian/vendor-h2o/deps/picotls/t/test.h deleted file mode 100644 index 2f33876..0000000 --- a/debian/vendor-h2o/deps/picotls/t/test.h +++ /dev/null @@ -1,52 +0,0 @@ -/* - * Copyright (c) 2016 DeNA Co., Ltd., Kazuho Oku - * - * Permission is hereby granted, free of charge, to any person obtaining a copy - * of this software and associated documentation files (the "Software"), to - * deal in the Software without restriction, including without limitation the - * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or - * sell copies of the Software, and to permit persons to whom the Software is - * furnished to do so, subject to the following conditions: - * - * The above copyright notice and this permission notice shall be included in - * all copies or substantial portions of the Software. - * - * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING - * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS - * IN THE SOFTWARE. - */ -#ifndef test_h -#define test_h - -#include "picotls.h" - -/* raw private key and certificate using secp256v1 */ -#define SECP256R1_PRIVATE_KEY \ - "\x92\xbe\xc7\x34\x58\xc8\xa7\x1a\x25\x22\xf0\x29\x81\xc8\xca\x33\x84\xa5\xca\x0b\x8f\x0f\x19\x94\x83\xcb\xaf\x3f\x3d\x9f\x19" \ - "\xa1" -#define SECP256R1_CERTIFICATE \ - "\x30\x82\x01\x97\x30\x82\x01\x3f\xa0\x03\x02\x01\x02\x02\x09\x00\xa5\x28\xf1\x53\xe1\x92\xb8\x1c\x30\x09\x06\x07\x2a\x86\x48" \ - "\xce\x3d\x04\x01\x30\x16\x31\x14\x30\x12\x06\x03\x55\x04\x03\x13\x0b\x65\x78\x61\x6d\x70\x6c\x65\x2e\x63\x6f\x6d\x30\x1e\x17" \ - "\x0d\x31\x36\x31\x31\x30\x33\x30\x37\x31\x33\x32\x39\x5a\x17\x0d\x32\x36\x31\x31\x30\x31\x30\x37\x31\x33\x32\x39\x5a\x30\x16" \ - "\x31\x14\x30\x12\x06\x03\x55\x04\x03\x13\x0b\x65\x78\x61\x6d\x70\x6c\x65\x2e\x63\x6f\x6d\x30\x59\x30\x13\x06\x07\x2a\x86\x48" \ - "\xce\x3d\x02\x01\x06\x08\x2a\x86\x48\xce\x3d\x03\x01\x07\x03\x42\x00\x04\x73\x47\xc4\x07\x56\x9a\x5a\x83\xa2\x49\xba\x34\x73" \ - "\x66\xd8\xb5\x95\x1e\xd6\xe9\x4e\xaf\x76\x09\x9f\x96\xb6\xb6\xab\xd3\xb9\xf0\x3e\x96\x10\x6f\xb2\xb4\x42\x93\x95\xfc\x30\x61" \ - "\x3b\xb4\x4b\xa1\x46\x92\xec\xf9\xf1\x0f\x7a\x25\x5c\x87\x29\x3e\x23\x56\x77\x91\xa3\x77\x30\x75\x30\x1d\x06\x03\x55\x1d\x0e" \ - "\x04\x16\x04\x14\x24\x7a\x07\x7b\x93\xd2\x3a\x60\x5e\xea\xb3\xdf\x21\xdf\x02\x63\x7d\x89\x40\xdd\x30\x46\x06\x03\x55\x1d\x23" \ - "\x04\x3f\x30\x3d\x80\x14\x24\x7a\x07\x7b\x93\xd2\x3a\x60\x5e\xea\xb3\xdf\x21\xdf\x02\x63\x7d\x89\x40\xdd\xa1\x1a\xa4\x18\x30" \ - "\x16\x31\x14\x30\x12\x06\x03\x55\x04\x03\x13\x0b\x65\x78\x61\x6d\x70\x6c\x65\x2e\x63\x6f\x6d\x82\x09\x00\xa5\x28\xf1\x53\xe1" \ - "\x92\xb8\x1c\x30\x0c\x06\x03\x55\x1d\x13\x04\x05\x30\x03\x01\x01\xff\x30\x09\x06\x07\x2a\x86\x48\xce\x3d\x04\x01\x03\x47\x00" \ - "\x30\x44\x02\x20\x3f\xfc\x14\x45\xa4\xc6\x21\x37\xa9\x4a\x6b\x79\x4d\x86\xea\x48\x2c\xa8\xea\xb8\x18\xd9\xc9\x94\xd0\x15\x38" \ - "\xa5\xfd\x23\xf1\xb0\x02\x20\x2e\xd4\x93\xfe\x19\xfa\x31\x82\xa0\xfe\xa2\x04\xbd\xf4\x8b\x68\xdb\xee\x7a\xe8\x33\x2c\xe1\x35" \ - "\x6d\xdc\x08\x37\xfd\x49\x35\x90" - -extern ptls_context_t *ctx, *ctx_peer; - -void test_key_exchange(ptls_key_exchange_algorithm_t *algo); -void test_picotls(void); - -#endif diff --git a/debian/vendor-h2o/deps/picotls/t/util.h b/debian/vendor-h2o/deps/picotls/t/util.h deleted file mode 100644 index 78ce87c..0000000 --- a/debian/vendor-h2o/deps/picotls/t/util.h +++ /dev/null @@ -1,240 +0,0 @@ -/* - * Copyright (c) 2016,2017 DeNA Co., Ltd., Kazuho Oku, Fastly - * - * Permission is hereby granted, free of charge, to any person obtaining a copy - * of this software and associated documentation files (the "Software"), to - * deal in the Software without restriction, including without limitation the - * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or - * sell copies of the Software, and to permit persons to whom the Software is - * furnished to do so, subject to the following conditions: - * - * The above copyright notice and this permission notice shall be included in - * all copies or substantial portions of the Software. - * - * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING - * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS - * IN THE SOFTWARE. - */ -#ifndef util_h -#define util_h - -#ifndef _XOPEN_SOURCE -#define _XOPEN_SOURCE 700 /* required for glibc to use getaddrinfo, etc. */ -#endif - -#include -#include -#include -#include -#include -#include -#include -#include -#include -#include "picotls/openssl.h" - -static inline void load_certificate_chain(ptls_context_t *ctx, const char *fn) -{ - if (ptls_load_certificates(ctx, (char *)fn) != 0) { - fprintf(stderr, "failed to load certificate:%s:%s\n", fn, strerror(errno)); - exit(1); - } -} - -static inline void load_private_key(ptls_context_t *ctx, const char *fn) -{ - static ptls_openssl_sign_certificate_t sc; - FILE *fp; - EVP_PKEY *pkey; - - if ((fp = fopen(fn, "rb")) == NULL) { - fprintf(stderr, "failed to open file:%s:%s\n", fn, strerror(errno)); - exit(1); - } - pkey = PEM_read_PrivateKey(fp, NULL, NULL, NULL); - fclose(fp); - - if (pkey == NULL) { - fprintf(stderr, "failed to read private key from file:%s\n", fn); - exit(1); - } - - ptls_openssl_init_sign_certificate(&sc, pkey); - EVP_PKEY_free(pkey); - - ctx->sign_certificate = &sc.super; -} - -struct st_util_save_ticket_t { - ptls_save_ticket_t super; - char fn[MAXPATHLEN]; -}; - -static int save_ticket_cb(ptls_save_ticket_t *_self, ptls_t *tls, ptls_iovec_t src) -{ - struct st_util_save_ticket_t *self = (void *)_self; - FILE *fp; - - if ((fp = fopen(self->fn, "wb")) == NULL) { - fprintf(stderr, "failed to open file:%s:%s\n", self->fn, strerror(errno)); - return PTLS_ERROR_LIBRARY; - } - fwrite(src.base, 1, src.len, fp); - fclose(fp); - - return 0; -} - -static inline void setup_session_file(ptls_context_t *ctx, ptls_handshake_properties_t *hsprop, const char *fn) -{ - static struct st_util_save_ticket_t st; - FILE *fp; - - /* setup save_ticket callback */ - strcpy(st.fn, fn); - st.super.cb = save_ticket_cb; - ctx->save_ticket = &st.super; - - /* load session ticket if possible */ - if ((fp = fopen(fn, "rb")) != NULL) { - static uint8_t ticket[16384]; - size_t ticket_size = fread(ticket, 1, sizeof(ticket), fp); - if (ticket_size == 0 || !feof(fp)) { - fprintf(stderr, "failed to load ticket from file:%s\n", fn); - exit(1); - } - fclose(fp); - hsprop->client.session_ticket = ptls_iovec_init(ticket, ticket_size); - } -} - -static inline void setup_verify_certificate(ptls_context_t *ctx) -{ - static ptls_openssl_verify_certificate_t vc; - ptls_openssl_init_verify_certificate(&vc, NULL); - ctx->verify_certificate = &vc.super; -} - -struct st_util_log_secret_t { - ptls_log_secret_t super; - FILE *fp; -}; - -static void fprinthex(FILE *fp, ptls_iovec_t vec) -{ - size_t i; - for (i = 0; i != vec.len; ++i) - fprintf(fp, "%02x", vec.base[i]); -} - -static void log_secret_cb(ptls_log_secret_t *_self, ptls_t *tls, const char *label, ptls_iovec_t secret) -{ - struct st_util_log_secret_t *self = (void *)_self; - - fprintf(self->fp, "%s ", label); - fprinthex(self->fp, ptls_get_client_random(tls)); - fprintf(self->fp, " "); - fprinthex(self->fp, secret); - fprintf(self->fp, "\n"); - fflush(self->fp); -} - -static inline void setup_log_secret(ptls_context_t *ctx, const char *fn) -{ - static struct st_util_log_secret_t ls; - - if ((ls.fp = fopen(fn, "at")) == NULL) { - fprintf(stderr, "failed to open file:%s:%s\n", fn, strerror(errno)); - exit(1); - } - ls.super.cb = log_secret_cb; - ctx->log_secret = &ls.super; -} - -/* single-entry session cache */ -struct st_util_session_cache_t { - ptls_encrypt_ticket_t super; - uint8_t id[32]; - ptls_iovec_t data; -}; - -static int encrypt_ticket_cb(ptls_encrypt_ticket_t *_self, ptls_t *tls, int is_encrypt, ptls_buffer_t *dst, ptls_iovec_t src) -{ - struct st_util_session_cache_t *self = (void *)_self; - int ret; - - if (is_encrypt) { - - /* replace the cached entry along with a newly generated session id */ - free(self->data.base); - if ((self->data.base = malloc(src.len)) == NULL) - return PTLS_ERROR_NO_MEMORY; - - ptls_get_context(tls)->random_bytes(self->id, sizeof(self->id)); - memcpy(self->data.base, src.base, src.len); - self->data.len = src.len; - - /* store the session id in buffer */ - if ((ret = ptls_buffer_reserve(dst, sizeof(self->id))) != 0) - return ret; - memcpy(dst->base + dst->off, self->id, sizeof(self->id)); - dst->off += sizeof(self->id); - - } else { - - /* check if session id is the one stored in cache */ - if (src.len != sizeof(self->id)) - return PTLS_ERROR_SESSION_NOT_FOUND; - if (memcmp(self->id, src.base, sizeof(self->id)) != 0) - return PTLS_ERROR_SESSION_NOT_FOUND; - - /* return the cached value */ - if ((ret = ptls_buffer_reserve(dst, self->data.len)) != 0) - return ret; - memcpy(dst->base + dst->off, self->data.base, self->data.len); - dst->off += self->data.len; - } - - return 0; -} - -static inline void setup_session_cache(ptls_context_t *ctx) -{ - static struct st_util_session_cache_t sc; - - sc.super.cb = encrypt_ticket_cb; - - ctx->ticket_lifetime = 86400; - ctx->max_early_data_size = 8192; - ctx->encrypt_ticket = &sc.super; -} - -static inline int resolve_address(struct sockaddr *sa, socklen_t *salen, const char *host, const char *port, int family, int type, - int proto) -{ - struct addrinfo hints, *res; - int err; - - memset(&hints, 0, sizeof(hints)); - hints.ai_family = family; - hints.ai_socktype = type; - hints.ai_protocol = proto; - hints.ai_flags = AI_ADDRCONFIG | AI_NUMERICSERV | AI_PASSIVE; - if ((err = getaddrinfo(host, port, &hints, &res)) != 0 || res == NULL) { - fprintf(stderr, "failed to resolve address:%s:%s:%s\n", host, port, - err != 0 ? gai_strerror(err) : "getaddrinfo returned NULL"); - return -1; - } - - memcpy(sa, res->ai_addr, res->ai_addrlen); - *salen = res->ai_addrlen; - - freeaddrinfo(res); - return 0; -} - -#endif -- cgit v1.2.3