Botan 3.9.0
Crypto and TLS for C&
tls_channel_impl_12.cpp
Go to the documentation of this file.
1/*
2* TLS Channels
3* (C) 2011,2012,2014,2015,2016 Jack Lloyd
4* 2016 Matthias Gierlings
5*
6* Botan is released under the Simplified BSD License (see license.txt)
7*/
8
9#include <botan/internal/tls_channel_impl_12.h>
10
11#include <botan/kdf.h>
12#include <botan/tls_messages.h>
13#include <botan/tls_policy.h>
14#include <botan/x509cert.h>
15#include <botan/internal/loadstor.h>
16#include <botan/internal/mem_utils.h>
17#include <botan/internal/stl_util.h>
18#include <botan/internal/tls_handshake_state.h>
19#include <botan/internal/tls_record.h>
20#include <botan/internal/tls_seq_numbers.h>
21
22namespace Botan::TLS {
23
24Channel_Impl_12::Channel_Impl_12(const std::shared_ptr<Callbacks>& callbacks,
25 const std::shared_ptr<Session_Manager>& session_manager,
26 const std::shared_ptr<RandomNumberGenerator>& rng,
27 const std::shared_ptr<const Policy>& policy,
28 bool is_server,
29 bool is_datagram,
30 size_t reserved_io_buffer_size) :
31 m_is_server(is_server),
32 m_is_datagram(is_datagram),
33 m_callbacks(callbacks),
34 m_session_manager(session_manager),
35 m_policy(policy),
36 m_rng(rng),
37 m_has_been_closed(false) {
38 BOTAN_ASSERT_NONNULL(m_callbacks);
39 BOTAN_ASSERT_NONNULL(m_session_manager);
41 BOTAN_ASSERT_NONNULL(m_policy);
42
43 /* epoch 0 is plaintext, thus null cipher state */
44 m_write_cipher_states[0] = nullptr;
45 m_read_cipher_states[0] = nullptr;
46
47 m_writebuf.reserve(reserved_io_buffer_size);
48 m_readbuf.reserve(reserved_io_buffer_size);
49}
50
51void Channel_Impl_12::reset_state() {
52 m_active_state.reset();
53 m_pending_state.reset();
54 m_readbuf.clear();
55 m_write_cipher_states.clear();
56 m_read_cipher_states.clear();
57}
58
60 // This operation only makes sense for DTLS
61 BOTAN_ASSERT_NOMSG(m_is_datagram);
62 m_active_state.reset();
63 m_read_cipher_states.clear();
64 m_write_cipher_states.clear();
65
66 m_write_cipher_states[0] = nullptr;
67 m_read_cipher_states[0] = nullptr;
68
69 if(m_sequence_numbers) {
70 m_sequence_numbers->reset();
71 }
72}
73
75
76Connection_Sequence_Numbers& Channel_Impl_12::sequence_numbers() const {
77 BOTAN_ASSERT(m_sequence_numbers, "Have a sequence numbers object");
78 return *m_sequence_numbers;
79}
80
81std::shared_ptr<Connection_Cipher_State> Channel_Impl_12::read_cipher_state_epoch(uint16_t epoch) const {
82 auto i = m_read_cipher_states.find(epoch);
83 if(i == m_read_cipher_states.end()) {
84 throw Internal_Error("TLS::Channel_Impl_12 No read cipherstate for epoch " + std::to_string(epoch));
85 }
86 return i->second;
87}
88
89std::shared_ptr<Connection_Cipher_State> Channel_Impl_12::write_cipher_state_epoch(uint16_t epoch) const {
90 auto i = m_write_cipher_states.find(epoch);
91 if(i == m_write_cipher_states.end()) {
92 throw Internal_Error("TLS::Channel_Impl_12 No write cipherstate for epoch " + std::to_string(epoch));
93 }
94 return i->second;
95}
96
97std::vector<X509_Certificate> Channel_Impl_12::peer_cert_chain() const {
98 if(const auto* active = active_state()) {
99 return get_peer_cert_chain(*active);
100 }
101 return std::vector<X509_Certificate>();
102}
103
104std::optional<std::string> Channel_Impl_12::external_psk_identity() const {
105 const auto* state = (active_state() != nullptr) ? active_state() : pending_state();
106 if(state != nullptr) {
107 return state->psk_identity();
108 } else {
109 return std::nullopt;
110 }
111}
112
114 if(pending_state() != nullptr) {
115 throw Internal_Error("create_handshake_state called during handshake");
116 }
117
118 if(const auto* active = active_state()) {
119 Protocol_Version active_version = active->version();
120
121 if(active_version.is_datagram_protocol() != version.is_datagram_protocol()) {
122 throw TLS_Exception(Alert::ProtocolVersion,
123 "Active state using version " + active_version.to_string() + " cannot change to " +
124 version.to_string() + " in pending");
125 }
126 }
127
128 if(!m_sequence_numbers) {
129 if(version.is_datagram_protocol()) {
130 m_sequence_numbers = std::make_unique<Datagram_Sequence_Numbers>();
131 } else {
132 m_sequence_numbers = std::make_unique<Stream_Sequence_Numbers>();
133 }
134 }
135
136 using namespace std::placeholders;
137
138 std::unique_ptr<Handshake_IO> io;
139 if(version.is_datagram_protocol()) {
140 const uint16_t mtu = static_cast<uint16_t>(policy().dtls_default_mtu());
141 const size_t initial_timeout_ms = policy().dtls_initial_timeout();
142 const size_t max_timeout_ms = policy().dtls_maximum_timeout();
143
144 auto send_record_f = [this](uint16_t epoch, Record_Type record_type, const std::vector<uint8_t>& record) {
145 send_record_under_epoch(epoch, record_type, record);
146 };
147 io = std::make_unique<Datagram_Handshake_IO>(
148 send_record_f, sequence_numbers(), mtu, initial_timeout_ms, max_timeout_ms);
149 } else {
150 auto send_record_f = [this](Record_Type rec_type, const std::vector<uint8_t>& record) {
151 send_record(rec_type, record);
152 };
153 io = std::make_unique<Stream_Handshake_IO>(send_record_f);
154 }
155
156 m_pending_state = new_handshake_state(std::move(io));
157
158 if(const auto* active = active_state()) {
159 m_pending_state->set_version(active->version());
160 }
161
162 return *m_pending_state;
163}
164
166 if(m_pending_state) {
167 return m_pending_state->handshake_io().timeout_check();
168 }
169
170 //FIXME: scan cipher suites and remove epochs older than 2*MSL
171 return false;
172}
173
174void Channel_Impl_12::renegotiate(bool force_full_renegotiation) {
175 if(pending_state() != nullptr) { // currently in handshake?
176 return;
177 }
178
179 if(const auto* active = active_state()) {
180 if(!force_full_renegotiation) {
181 force_full_renegotiation = !policy().allow_resumption_for_renegotiation();
182 }
183
184 initiate_handshake(create_handshake_state(active->version()), force_full_renegotiation);
185 } else {
186 throw Invalid_State("Cannot renegotiate on inactive connection");
187 }
188}
189
190void Channel_Impl_12::update_traffic_keys(bool /*update_requested*/) {
191 throw Invalid_Argument("cannot update traffic keys on a TLS 1.2 channel");
192}
193
195 const auto* pending = pending_state();
196
197 BOTAN_ASSERT(pending && pending->server_hello(), "Have received server hello");
198
199 if(pending->server_hello()->compression_method() != 0) {
200 throw Internal_Error("Negotiated unknown compression algorithm");
201 }
202
203 sequence_numbers().new_read_cipher_state();
204
205 const uint16_t epoch = sequence_numbers().current_read_epoch();
206
207 BOTAN_ASSERT(!m_read_cipher_states.contains(epoch), "No read cipher state currently set for next epoch");
208
209 // flip side as we are reading
210 std::shared_ptr<Connection_Cipher_State> read_state(
211 new Connection_Cipher_State(pending->version(),
213 false,
214 pending->ciphersuite(),
215 pending->session_keys(),
216 pending->server_hello()->supports_encrypt_then_mac()));
217
218 m_read_cipher_states[epoch] = read_state;
219}
220
222 const auto* pending = pending_state();
223
224 BOTAN_ASSERT(pending && pending->server_hello(), "Have received server hello");
225
226 if(pending->server_hello()->compression_method() != 0) {
227 throw Internal_Error("Negotiated unknown compression algorithm");
228 }
229
230 sequence_numbers().new_write_cipher_state();
231
232 const uint16_t epoch = sequence_numbers().current_write_epoch();
233
234 BOTAN_ASSERT(!m_write_cipher_states.contains(epoch), "No write cipher state currently set for next epoch");
235
236 std::shared_ptr<Connection_Cipher_State> write_state(
237 new Connection_Cipher_State(pending->version(),
238 side,
239 true,
240 pending->ciphersuite(),
241 pending->session_keys(),
242 pending->server_hello()->supports_encrypt_then_mac()));
243
244 m_write_cipher_states[epoch] = write_state;
245}
246
248 return (active_state() != nullptr);
249}
250
252 return !is_closed() && is_handshake_complete();
253}
254
256 return m_has_been_closed;
257}
258
260 std::swap(m_active_state, m_pending_state);
261 m_pending_state.reset();
262
263 if(!m_active_state->version().is_datagram_protocol()) {
264 // TLS is easy just remove all but the current state
265 const uint16_t current_epoch = sequence_numbers().current_write_epoch();
266
267 const auto not_current_epoch = [current_epoch](uint16_t epoch) { return (epoch != current_epoch); };
268
269 map_remove_if(not_current_epoch, m_write_cipher_states);
270 map_remove_if(not_current_epoch, m_read_cipher_states);
271 }
272
274}
275
276size_t Channel_Impl_12::from_peer(std::span<const uint8_t> data) {
277 const bool allow_epoch0_restart = m_is_datagram && m_is_server && policy().allow_dtls_epoch0_restart();
278
279 const auto* input = data.data();
280 auto input_size = data.size();
281
282 try {
283 while(input_size > 0) {
284 size_t consumed = 0;
285
286 auto get_epoch = [this](uint16_t epoch) { return read_cipher_state_epoch(epoch); };
287
288 const Record_Header record = read_record(m_is_datagram,
289 m_readbuf,
290 input,
291 input_size,
292 consumed,
293 m_record_buf,
294 m_sequence_numbers.get(),
295 get_epoch,
296 allow_epoch0_restart);
297
298 const size_t needed = record.needed();
299
300 BOTAN_ASSERT(consumed > 0, "Got to eat something");
301
302 BOTAN_ASSERT(consumed <= input_size, "Record reader consumed sane amount");
303
304 input += consumed;
305 input_size -= consumed;
306
307 BOTAN_ASSERT(input_size == 0 || needed == 0, "Got a full record or consumed all input");
308
309 if(input_size == 0 && needed != 0) {
310 return needed; // need more data to complete record
311 }
312
313 // Ignore invalid records in DTLS
314 if(m_is_datagram && record.type() == Record_Type::Invalid) {
315 return 0;
316 }
317
318 if(m_record_buf.size() > MAX_PLAINTEXT_SIZE) {
319 throw TLS_Exception(Alert::RecordOverflow, "TLS plaintext record is larger than allowed maximum");
320 }
321
322 const bool epoch0_restart = m_is_datagram && record.epoch() == 0 && active_state() != nullptr;
323 BOTAN_ASSERT_IMPLICATION(epoch0_restart, allow_epoch0_restart, "Allowed state");
324
325 const bool initial_record = epoch0_restart || (pending_state() == nullptr && active_state() == nullptr);
326 bool initial_handshake_message = false;
327 if(record.type() == Record_Type::Handshake && !m_record_buf.empty()) {
328 Handshake_Type type = static_cast<Handshake_Type>(m_record_buf[0]);
329 initial_handshake_message = (type == Handshake_Type::ClientHello);
330 }
331
332 if(record.type() != Record_Type::Alert) {
333 if(initial_record) {
334 // For initial records just check for basic sanity
335 if(record.version().major_version() != 3 && record.version().major_version() != 0xFE) {
336 throw TLS_Exception(Alert::ProtocolVersion, "Received unexpected record version in initial record");
337 }
338 } else if(const auto* pending = pending_state()) {
339 if(pending->server_hello() != nullptr && !initial_handshake_message &&
340 record.version() != pending->version()) {
341 throw TLS_Exception(Alert::ProtocolVersion, "Received unexpected record version");
342 }
343 } else if(const auto* active = active_state()) {
344 if(record.version() != active->version() && !initial_handshake_message) {
345 throw TLS_Exception(Alert::ProtocolVersion, "Received unexpected record version");
346 }
347 }
348 }
349
350 if(record.type() == Record_Type::Handshake || record.type() == Record_Type::ChangeCipherSpec) {
351 if(m_has_been_closed) {
352 throw TLS_Exception(Alert::UnexpectedMessage, "Received handshake data after connection closure");
353 }
354 process_handshake_ccs(m_record_buf, record.sequence(), record.type(), record.version(), epoch0_restart);
355 } else if(record.type() == Record_Type::ApplicationData) {
356 if(m_has_been_closed) {
357 throw TLS_Exception(Alert::UnexpectedMessage, "Received application data after connection closure");
358 }
359 if(pending_state() != nullptr) {
360 throw TLS_Exception(Alert::UnexpectedMessage, "Can't interleave application and handshake data");
361 }
362 process_application_data(record.sequence(), m_record_buf);
363 } else if(record.type() == Record_Type::Alert) {
364 process_alert(m_record_buf);
365 } else if(record.type() != Record_Type::Invalid) {
366 throw Unexpected_Message("Unexpected record type " + std::to_string(static_cast<size_t>(record.type())) +
367 " from counterparty");
368 }
369 }
370
371 return 0; // on a record boundary
372 } catch(TLS_Exception& e) {
374 throw;
376 send_fatal_alert(Alert::BadRecordMac);
377 throw;
378 } catch(Decoding_Error&) {
379 send_fatal_alert(Alert::DecodeError);
380 throw;
381 } catch(...) {
382 send_fatal_alert(Alert::InternalError);
383 throw;
384 }
385}
386
387void Channel_Impl_12::process_handshake_ccs(const secure_vector<uint8_t>& record,
388 uint64_t record_sequence,
389 Record_Type record_type,
390 Protocol_Version record_version,
391 bool epoch0_restart) {
392 if(!m_pending_state) {
393 // No pending handshake, possibly new:
394 if(record_version.is_datagram_protocol() && !epoch0_restart) {
395 if(m_sequence_numbers) {
396 /*
397 * Might be a peer retransmit under epoch - 1 in which
398 * case we must retransmit last flight
399 */
400 sequence_numbers().read_accept(record_sequence);
401
402 const uint16_t epoch = record_sequence >> 48;
403
404 if(epoch == sequence_numbers().current_read_epoch()) {
405 create_handshake_state(record_version);
406 } else if(epoch == sequence_numbers().current_read_epoch() - 1) {
407 BOTAN_ASSERT(m_active_state, "Have active state here");
408 m_active_state->handshake_io().add_record(record.data(), record.size(), record_type, record_sequence);
409 }
410 } else {
411 create_handshake_state(record_version);
412 }
413 } else {
414 create_handshake_state(record_version);
415 }
416 }
417
418 // May have been created in above conditional
419 if(m_pending_state) {
420 m_pending_state->handshake_io().add_record(record.data(), record.size(), record_type, record_sequence);
421
422 while(auto* pending = m_pending_state.get()) {
423 auto msg = pending->get_next_handshake_msg();
424
425 if(msg.first == Handshake_Type::None) { // no full handshake yet
426 break;
427 }
428
429 process_handshake_msg(active_state(), *pending, msg.first, msg.second, epoch0_restart);
430
431 if(!m_pending_state) {
432 break;
433 }
434 }
435 }
436}
437
438void Channel_Impl_12::process_application_data(uint64_t seq_no, const secure_vector<uint8_t>& record) {
439 if(active_state() == nullptr) {
440 throw Unexpected_Message("Application data before handshake done");
441 }
442
443 callbacks().tls_record_received(seq_no, record);
444}
445
446void Channel_Impl_12::process_alert(const secure_vector<uint8_t>& record) {
447 Alert alert_msg(record);
448
449 if(alert_msg.type() == Alert::NoRenegotiation) {
450 m_pending_state.reset();
451 }
452
453 callbacks().tls_alert(alert_msg);
454
455 if(alert_msg.is_fatal()) {
456 if(const auto* active = active_state()) {
457 const auto& session_id = active->server_hello()->session_id();
458 if(!session_id.empty()) {
459 session_manager().remove(Session_Handle(session_id));
460 }
461 }
462 }
463
464 if(alert_msg.type() == Alert::CloseNotify) {
465 // TLS 1.2 requires us to immediately react with our "close_notify",
466 // the return value of the application's callback has no effect on that.
468 send_warning_alert(Alert::CloseNotify); // reply in kind
469 }
470
471 if(alert_msg.type() == Alert::CloseNotify || alert_msg.is_fatal()) {
472 m_has_been_closed = true;
473 }
474}
475
476void Channel_Impl_12::write_record(Connection_Cipher_State* cipher_state,
477 uint16_t epoch,
478 Record_Type record_type,
479 const uint8_t input[],
480 size_t length) {
481 BOTAN_ASSERT(m_pending_state || m_active_state, "Some connection state exists");
482
483 const Protocol_Version record_version =
484 (m_pending_state) ? (m_pending_state->version()) : (m_active_state->version());
485
486 const uint64_t next_seq = sequence_numbers().next_write_sequence(epoch);
487
488 if(cipher_state == nullptr) {
489 TLS::write_unencrypted_record(m_writebuf, record_type, record_version, next_seq, input, length);
490 } else {
491 TLS::write_record(m_writebuf, record_type, record_version, next_seq, input, length, *cipher_state, rng());
492 }
493
494 callbacks().tls_emit_data(m_writebuf);
495}
496
497void Channel_Impl_12::send_record_array(uint16_t epoch, Record_Type type, const uint8_t input[], size_t length) {
498 if(length == 0) {
499 return;
500 }
501
502 auto cipher_state = write_cipher_state_epoch(epoch);
503
504 while(length > 0) {
505 const size_t sending = std::min<size_t>(length, MAX_PLAINTEXT_SIZE);
506 write_record(cipher_state.get(), epoch, type, input, sending);
507
508 input += sending;
509 length -= sending;
510 }
511}
512
513void Channel_Impl_12::send_record(Record_Type record_type, const std::vector<uint8_t>& record) {
514 send_record_array(sequence_numbers().current_write_epoch(), record_type, record.data(), record.size());
515}
516
517void Channel_Impl_12::send_record_under_epoch(uint16_t epoch,
518 Record_Type record_type,
519 const std::vector<uint8_t>& record) {
520 send_record_array(epoch, record_type, record.data(), record.size());
521}
522
523void Channel_Impl_12::to_peer(std::span<const uint8_t> data) {
524 if(!is_active()) {
525 throw Invalid_State("Data cannot be sent on inactive TLS connection");
526 }
527
528 send_record_array(sequence_numbers().current_write_epoch(), Record_Type::ApplicationData, data.data(), data.size());
529}
530
532 const bool ready_to_send_anything = !is_closed() && m_sequence_numbers;
533 if(alert.is_valid() && ready_to_send_anything) {
534 try {
535 send_record(Record_Type::Alert, alert.serialize());
536 } catch(...) { /* swallow it */
537 }
538 }
539
540 if(alert.type() == Alert::NoRenegotiation) {
541 m_pending_state.reset();
542 }
543
544 if(alert.is_fatal()) {
545 if(const auto* active = active_state()) {
546 const auto& session_id = active->server_hello()->session_id();
547 if(!session_id.empty()) {
549 }
550 }
551 reset_state();
552 }
553
554 if(alert.type() == Alert::CloseNotify || alert.is_fatal()) {
555 m_has_been_closed = true;
556 }
557}
558
560 const bool secure_renegotiation = client_hello->secure_renegotiation();
561
562 if(const auto* active = active_state()) {
563 const bool active_sr = active->client_hello()->secure_renegotiation();
564
565 if(active_sr != secure_renegotiation) {
566 throw TLS_Exception(Alert::HandshakeFailure, "Client changed its mind about secure renegotiation");
567 }
568 }
569
570 if(secure_renegotiation) {
571 const std::vector<uint8_t>& data = client_hello->renegotiation_info();
572
574 throw TLS_Exception(Alert::HandshakeFailure, "Client sent bad values for secure renegotiation");
575 }
576 }
577}
578
580 const bool secure_renegotiation = server_hello->secure_renegotiation();
581
582 if(const auto* active = active_state()) {
583 const bool active_sr = active->server_hello()->secure_renegotiation();
584
585 if(active_sr != secure_renegotiation) {
586 throw TLS_Exception(Alert::HandshakeFailure, "Server changed its mind about secure renegotiation");
587 }
588 }
589
590 if(secure_renegotiation) {
591 const std::vector<uint8_t>& data = server_hello->renegotiation_info();
592
594 throw TLS_Exception(Alert::HandshakeFailure, "Server sent bad values for secure renegotiation");
595 }
596 }
597}
598
600 if(const auto* active = active_state()) {
601 return active->client_finished()->verify_data();
602 }
603 return std::vector<uint8_t>();
604}
605
607 if(const auto* active = active_state()) {
608 std::vector<uint8_t> buf = active->client_finished()->verify_data();
609 buf += active->server_finished()->verify_data();
610 return buf;
611 }
612
613 return std::vector<uint8_t>();
614}
615
617 if(const auto* active = active_state()) {
618 return active->server_hello()->secure_renegotiation();
619 }
620
621 if(const auto* pending = pending_state()) {
622 if(const auto* hello = pending->server_hello()) {
623 return hello->secure_renegotiation();
624 }
625 }
626
627 return false;
628}
629
631 std::string_view context,
632 size_t length) const {
633 if(const auto* active = active_state()) {
634 if(pending_state() != nullptr) {
635 throw Invalid_State("Channel_Impl_12::key_material_export cannot export during renegotiation");
636 }
637
638 auto prf = active->protocol_specific_prf();
639
640 const secure_vector<uint8_t>& master_secret = active->session_keys().master_secret();
641
642 std::vector<uint8_t> salt;
643 salt += active->client_hello()->random();
644 salt += active->server_hello()->random();
645
646 if(!context.empty()) {
647 size_t context_size = context.length();
648 if(context_size > 0xFFFF) {
649 throw Invalid_Argument("key_material_export context is too long");
650 }
651 salt.push_back(get_byte<0>(static_cast<uint16_t>(context_size)));
652 salt.push_back(get_byte<1>(static_cast<uint16_t>(context_size)));
653 salt += as_span_of_bytes(context);
654 }
655
656 return SymmetricKey(prf->derive_key(length, master_secret, salt, as_span_of_bytes(label)));
657 } else {
658 throw Invalid_State("Channel_Impl_12::key_material_export connection not active");
659 }
660}
661
662} // namespace Botan::TLS
#define BOTAN_ASSERT_NOMSG(expr)
Definition assert.h:75
#define BOTAN_ASSERT_NONNULL(ptr)
Definition assert.h:114
#define BOTAN_ASSERT_IMPLICATION(expr1, expr2, msg)
Definition assert.h:101
#define BOTAN_ASSERT(expr, assertion_made)
Definition assert.h:62
bool is_valid() const
Definition tls_alert.h:77
std::vector< uint8_t > serialize() const
Definition tls_alert.cpp:32
bool is_fatal() const
Definition tls_alert.h:92
Type type() const
Definition tls_alert.h:99
virtual void tls_session_activated()
virtual void tls_record_received(uint64_t seq_no, std::span< const uint8_t > data)=0
virtual void tls_alert(Alert alert)=0
virtual bool tls_peer_closed_connection()
virtual void tls_emit_data(std::span< const uint8_t > data)=0
RandomNumberGenerator & rng()
virtual std::vector< X509_Certificate > get_peer_cert_chain(const Handshake_State &state) const =0
void change_cipher_spec_reader(Connection_Side side)
void update_traffic_keys(bool request_peer_update=false) override
Handshake_State & create_handshake_state(Protocol_Version version)
std::vector< uint8_t > secure_renegotiation_data_for_server_hello() const
bool is_handshake_complete() const override
size_t from_peer(std::span< const uint8_t > data) override
void secure_renegotiation_check(const Client_Hello_12 *client_hello)
Session_Manager & session_manager()
const Policy & policy() const
void send_alert(const Alert &alert) override
virtual void initiate_handshake(Handshake_State &state, bool force_full_renegotiation)=0
std::vector< X509_Certificate > peer_cert_chain() const override
void to_peer(std::span< const uint8_t > data) override
void change_cipher_spec_writer(Connection_Side side)
std::vector< uint8_t > secure_renegotiation_data_for_client_hello() const
virtual std::unique_ptr< Handshake_State > new_handshake_state(std::unique_ptr< class Handshake_IO > io)=0
Channel_Impl_12(const std::shared_ptr< Callbacks > &callbacks, const std::shared_ptr< Session_Manager > &session_manager, const std::shared_ptr< RandomNumberGenerator > &rng, const std::shared_ptr< const Policy > &policy, bool is_server, bool is_datagram, size_t io_buf_sz=TLS::Channel::IO_BUF_DEFAULT_SIZE)
SymmetricKey key_material_export(std::string_view label, std::string_view context, size_t length) const override
std::optional< std::string > external_psk_identity() const override
virtual void process_handshake_msg(const Handshake_State *active_state, Handshake_State &pending_state, Handshake_Type type, const std::vector< uint8_t > &contents, bool epoch0_restart)=0
bool secure_renegotiation_supported() const override
void renegotiate(bool force_full_renegotiation=false) override
void send_warning_alert(Alert::Type type)
void send_fatal_alert(Alert::Type type)
std::vector< uint8_t > renegotiation_info() const
virtual void read_accept(uint64_t seq)=0
virtual size_t dtls_maximum_timeout() const
virtual size_t dtls_default_mtu() const
virtual bool allow_dtls_epoch0_restart() const
virtual size_t dtls_initial_timeout() const
virtual bool allow_resumption_for_renegotiation() const
std::string to_string() const
uint8_t major_version() const
Definition tls_version.h:90
Protocol_Version version() const
Definition tls_record.h:79
Record_Type type() const
Definition tls_record.h:91
uint64_t sequence() const
Definition tls_record.h:84
size_t needed() const
Definition tls_record.h:77
uint16_t epoch() const
Definition tls_record.h:89
std::vector< uint8_t > renegotiation_info() const
Helper class to embody a session handle in all protocol versions.
Definition tls_session.h:63
virtual size_t remove(const Session_Handle &handle)=0
Alert::Type type() const
Definition tls_exceptn.h:21
Record_Header read_record(bool is_datagram, secure_vector< uint8_t > &readbuf, const uint8_t input[], size_t input_len, size_t &consumed, secure_vector< uint8_t > &recbuf, Connection_Sequence_Numbers *sequence_numbers, const get_cipherstate_fn &get_cipherstate, bool allow_epoch0_restart)
@ MAX_PLAINTEXT_SIZE
Definition tls_magic.h:30
void write_unencrypted_record(secure_vector< uint8_t > &output, Record_Type record_type, Protocol_Version version, uint64_t record_sequence, const uint8_t *message, size_t message_len)
void write_record(secure_vector< uint8_t > &output, Record_Type record_type, Protocol_Version version, uint64_t record_sequence, const uint8_t *message, size_t message_len, Connection_Cipher_State &cs, RandomNumberGenerator &rng)
Strong< std::vector< uint8_t >, struct Session_ID_ > Session_ID
holds a TLS 1.2 session ID for stateful resumption
Definition tls_session.h:31
constexpr uint8_t get_byte(T input)
Definition loadstor.h:79
void map_remove_if(Pred pred, T &assoc)
Definition stl_util.h:62
OctetString SymmetricKey
Definition symkey.h:140
std::span< const uint8_t > as_span_of_bytes(const char *s, size_t len)
Definition mem_utils.h:28
std::vector< T, secure_allocator< T > > secure_vector
Definition secmem.h:69