#include <tls_messages_internal.h>

Public Member Functions
const std::vector< uint16_t > &	ciphersuites () const
	Client_Hello_Internal ()
	Client_Hello_Internal (const std::vector< uint8_t > &buf)
const std::vector< uint8_t > &	comp_methods () const
Extensions &	extensions ()
const Extensions &	extensions () const
const std::vector< uint8_t > &	hello_cookie () const
const std::vector< uint8_t > &	hello_cookie_input_bits () const
Protocol_Version	legacy_version () const
const std::vector< uint8_t > &	random () const
const Session_ID &	session_id () const
Protocol_Version	version () const

Public Attributes
std::vector< uint8_t >	m_comp_methods
std::vector< uint8_t >	m_cookie_input_bits
Extensions	m_extensions
std::vector< uint8_t >	m_hello_cookie
Protocol_Version	m_legacy_version
std::vector< uint8_t >	m_random
Session_ID	m_session_id
std::vector< uint16_t >	m_suites

Detailed Description

Version-agnostic internal client hello data container that allows parsing Client_Hello messages without prior knowledge of the contained protocol version.

Definition at line 57 of file tls_messages_internal.h.

Constructor & Destructor Documentation

◆ Client_Hello_Internal() [1/2]

Botan::TLS::Client_Hello_Internal::Client_Hello_Internal ( )

inline

Definition at line 59 of file tls_messages_internal.h.

59: m_comp_methods({0}) {}

Botan::TLS::Client_Hello_Internal::m_comp_methods

std::vector< uint8_t > m_comp_methods

Definition tls_messages_internal.h:97

References m_comp_methods.

◆ Client_Hello_Internal() [2/2]

Botan::TLS::Client_Hello_Internal::Client_Hello_Internal ( const std::vector< uint8_t > & buf )

explicit

Definition at line 46 of file msg_client_hello.cpp.

                                                                          {
   if(buf.size() < 41) {
      throw Decoding_Error("Client_Hello: Packet corrupted");
   }
 
   TLS_Data_Reader reader("ClientHello", buf);
 
   const uint8_t major_version = reader.get_byte();
   const uint8_t minor_version = reader.get_byte();
 
   m_legacy_version = Protocol_Version(major_version, minor_version);
   m_random = reader.get_fixed<uint8_t>(32);
   m_session_id = Session_ID(reader.get_range<uint8_t>(1, 0, 32));
 
   if(m_legacy_version.is_datagram_protocol()) {
      auto sha256 = HashFunction::create_or_throw("SHA-256");
      sha256->update(reader.get_data_read_so_far());
 
      m_hello_cookie = reader.get_range<uint8_t>(1, 0, 255);
 
      sha256->update(reader.get_remaining());
      m_cookie_input_bits = sha256->final_stdvec();
   }
 
   m_suites = reader.get_range_vector<uint16_t>(2, 1, 32767);
   m_comp_methods = reader.get_range_vector<uint8_t>(1, 1, 255);
 
   m_extensions.deserialize(reader, Connection_Side::Client, Handshake_Type::ClientHello);
}

References Botan::TLS::Client, Botan::TLS::ClientHello, Botan::HashFunction::create_or_throw(), Botan::TLS::TLS_Data_Reader::get_byte(), Botan::TLS::TLS_Data_Reader::get_data_read_so_far(), Botan::TLS::TLS_Data_Reader::get_fixed(), Botan::TLS::TLS_Data_Reader::get_range(), Botan::TLS::TLS_Data_Reader::get_range_vector(), Botan::TLS::TLS_Data_Reader::get_remaining(), m_comp_methods, m_cookie_input_bits, m_extensions, m_hello_cookie, m_legacy_version, m_random, m_session_id, and m_suites.

Member Function Documentation

◆ ciphersuites()

const std::vector< uint16_t > & Botan::TLS::Client_Hello_Internal::ciphersuites ( ) const

inline

Definition at line 80 of file tls_messages_internal.h.

80{ return m_suites; }

References m_suites.

◆ comp_methods()

const std::vector< uint8_t > & Botan::TLS::Client_Hello_Internal::comp_methods ( ) const

inline

Definition at line 82 of file tls_messages_internal.h.

82{ return m_comp_methods; }

References m_comp_methods.

◆ extensions() [1/2]

Extensions & Botan::TLS::Client_Hello_Internal::extensions ( )

inline

Definition at line 90 of file tls_messages_internal.h.

90{ return m_extensions; }

References m_extensions.

◆ extensions() [2/2]

const Extensions & Botan::TLS::Client_Hello_Internal::extensions ( ) const

inline

Definition at line 88 of file tls_messages_internal.h.

88{ return m_extensions; }

References m_extensions.

Referenced by version().

◆ hello_cookie()

const std::vector< uint8_t > & Botan::TLS::Client_Hello_Internal::hello_cookie ( ) const

inline

Definition at line 84 of file tls_messages_internal.h.

84{ return m_hello_cookie; }

References m_hello_cookie.

◆ hello_cookie_input_bits()

const std::vector< uint8_t > & Botan::TLS::Client_Hello_Internal::hello_cookie_input_bits ( ) const

inline

Definition at line 86 of file tls_messages_internal.h.

86{ return m_cookie_input_bits; }

References m_cookie_input_bits.

◆ legacy_version()

Protocol_Version Botan::TLS::Client_Hello_Internal::legacy_version ( ) const

inline

Definition at line 74 of file tls_messages_internal.h.

74{ return m_legacy_version; }

References m_legacy_version.

◆ random()

const std::vector< uint8_t > & Botan::TLS::Client_Hello_Internal::random ( ) const

inline

Definition at line 78 of file tls_messages_internal.h.

78{ return m_random; }

References m_random.

◆ session_id()

const Session_ID & Botan::TLS::Client_Hello_Internal::session_id ( ) const

inline

Definition at line 76 of file tls_messages_internal.h.

76{ return m_session_id; }

References m_session_id.

◆ version()

Protocol_Version Botan::TLS::Client_Hello_Internal::version ( ) const

This distinguishes between a TLS 1.3 compliant Client Hello (containing the "supported_version" extension) and legacy Client Hello messages.

Returns: TLS 1.3 if the Client Hello contains "supported_versions", or the content of the "legacy_version" version field if it indicates (D)TLS 1.2 or older, or (D)TLS 1.2 if the "legacy_version" was some other odd value.

Definition at line 76 of file msg_client_hello.cpp.

                                                      {
   // RFC 8446 4.2.1
   //    If [the "supported_versions"] extension is not present, servers
   //    which are compliant with this specification and which also support
   //    TLS 1.2 MUST negotiate TLS 1.2 or prior as specified in [RFC5246],
   //    even if ClientHello.legacy_version is 0x0304 or later.
   //
   // RFC 8446 4.2.1
   //    Servers MUST be prepared to receive ClientHellos that include
   //    [the supported_versions] extension but do not include 0x0304 in
   //    the list of versions.
   //
   // RFC 8446 4.1.2
   //    TLS 1.3 ClientHellos are identified as having a legacy_version of
   //    0x0303 and a supported_versions extension present with 0x0304 as
   //    the highest version indicated therein.
   if(!extensions().has<Supported_Versions>() ||
      !extensions().get<Supported_Versions>()->supports(Protocol_Version::TLS_V13)) {
      // The exact legacy_version is ignored we just inspect it to
      // distinguish TLS and DTLS.
      return (m_legacy_version.is_datagram_protocol()) ? Protocol_Version::DTLS_V12 : Protocol_Version::TLS_V12;
   }
 
   // Note: The Client_Hello_13 class will make sure that legacy_version
   //       is exactly 0x0303 (aka ossified TLS 1.2)
   return Protocol_Version::TLS_V13;
}