]>
Commit | Line | Data |
---|---|---|
8523288e | 1 | #! /usr/bin/env perl |
b6461792 | 2 | # Copyright 2016-2024 The OpenSSL Project Authors. All Rights Reserved. |
8523288e | 3 | # |
909f1a2e | 4 | # Licensed under the Apache License 2.0 (the "License"). You may not use |
8523288e DB |
5 | # this file except in compliance with the License. You can obtain a copy |
6 | # in the file LICENSE in the source distribution or at | |
7 | # https://www.openssl.org/source/license.html | |
8 | ||
9 | use strict; | |
c4220c0f AP |
10 | use feature 'state'; |
11 | ||
8523288e DB |
12 | use OpenSSL::Test qw/:DEFAULT cmdstr srctop_file bldtop_dir/; |
13 | use OpenSSL::Test::Utils; | |
14 | use TLSProxy::Proxy; | |
15 | ||
16 | my $test_name = "test_sslcbcpadding"; | |
17 | setup($test_name); | |
18 | ||
19 | plan skip_all => "TLSProxy isn't usable on $^O" | |
c5856878 | 20 | if $^O =~ /^(VMS)$/; |
8523288e DB |
21 | |
22 | plan skip_all => "$test_name needs the dynamic engine feature enabled" | |
23 | if disabled("engine") || disabled("dynamic-engine"); | |
24 | ||
25 | plan skip_all => "$test_name needs the sock feature enabled" | |
26 | if disabled("sock"); | |
27 | ||
f3ea8d77 DB |
28 | plan skip_all => "$test_name needs TLSv1.2 enabled" |
29 | if disabled("tls1_2"); | |
8523288e | 30 | |
8523288e DB |
31 | my $proxy = TLSProxy::Proxy->new( |
32 | \&add_maximal_padding_filter, | |
33 | cmdstr(app(["openssl"]), display => 1), | |
34 | srctop_file("apps", "server.pem"), | |
35 | (!$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE}) | |
36 | ); | |
37 | ||
5cf6d7c5 DB |
38 | # TODO: We could test all 256 values, but then the log file gets too large for |
39 | # CI. See https://github.com/openssl/openssl/issues/1440. | |
40 | my @test_offsets = (0, 128, 254, 255); | |
41 | ||
5cf6d7c5 | 42 | # Test that maximally-padded records are accepted. |
3058b742 | 43 | my $bad_padding_offset = -1; |
837e591d | 44 | $proxy->serverflags("-tls1_2"); |
a763ca11 | 45 | $proxy->clientflags("-no_tls1_3"); |
c4220c0f | 46 | $proxy->serverconnects(1 + scalar(@test_offsets)); |
8523288e | 47 | $proxy->start() or plan skip_all => "Unable to start up Proxy for tests"; |
3058b742 | 48 | plan tests => 1 + scalar(@test_offsets); |
8523288e DB |
49 | ok(TLSProxy::Message->success(), "Maximally-padded record test"); |
50 | ||
5cf6d7c5 | 51 | # Test that invalid padding is rejected. |
c4220c0f AP |
52 | my $fatal_alert; # set by add_maximal_padding_filter on client's fatal alert |
53 | ||
5cf6d7c5 | 54 | foreach my $offset (@test_offsets) { |
5cf6d7c5 | 55 | $bad_padding_offset = $offset; |
c4220c0f AP |
56 | $fatal_alert = 0; |
57 | $proxy->clearClient(); | |
a763ca11 | 58 | $proxy->clientflags("-no_tls1_3"); |
c4220c0f AP |
59 | $proxy->clientstart(); |
60 | ok($fatal_alert, "Invalid padding byte $bad_padding_offset"); | |
8523288e DB |
61 | } |
62 | ||
63 | sub add_maximal_padding_filter | |
64 | { | |
65 | my $proxy = shift; | |
c4220c0f AP |
66 | my $messages = $proxy->message_list; |
67 | state $sent_corrupted_payload; | |
8523288e DB |
68 | |
69 | if ($proxy->flight == 0) { | |
70 | # Disable Encrypt-then-MAC. | |
c4220c0f | 71 | foreach my $message (@{$messages}) { |
8523288e DB |
72 | if ($message->mt != TLSProxy::Message::MT_CLIENT_HELLO) { |
73 | next; | |
74 | } | |
75 | ||
76 | $message->delete_extension(TLSProxy::Message::EXT_ENCRYPT_THEN_MAC); | |
77 | $message->process_extensions(); | |
78 | $message->repack(); | |
79 | } | |
c4220c0f AP |
80 | $sent_corrupted_payload = 0; |
81 | return; | |
8523288e DB |
82 | } |
83 | ||
c4220c0f AP |
84 | my $last_message = @{$messages}[-1]; |
85 | if (defined($last_message) | |
86 | && $last_message->server | |
87 | && $last_message->mt == TLSProxy::Message::MT_FINISHED | |
88 | && !@{$last_message->records}[0]->{sent}) { | |
89 | ||
8523288e DB |
90 | # Insert a maximally-padded record. Assume a block size of 16 (AES) and |
91 | # a MAC length of 20 (SHA-1). | |
92 | my $block_size = 16; | |
93 | my $mac_len = 20; | |
94 | ||
95 | # Size the plaintext so that 256 is a valid padding. | |
96 | my $plaintext_len = $block_size - ($mac_len % $block_size); | |
97 | my $plaintext = "A" x $plaintext_len; | |
98 | ||
99 | my $data = "B" x $block_size; # Explicit IV. | |
100 | $data .= $plaintext; | |
101 | $data .= TLSProxy::Proxy::fill_known_data($mac_len); # MAC. | |
102 | ||
103 | # Add padding. | |
104 | for (my $i = 0; $i < 256; $i++) { | |
105 | if ($i == $bad_padding_offset) { | |
c4220c0f | 106 | $sent_corrupted_payload = 1; |
8523288e DB |
107 | $data .= "\xfe"; |
108 | } else { | |
109 | $data .= "\xff"; | |
110 | } | |
111 | } | |
112 | ||
113 | my $record = TLSProxy::Record->new( | |
114 | $proxy->flight, | |
115 | TLSProxy::Record::RT_APPLICATION_DATA, | |
116 | TLSProxy::Record::VERS_TLS_1_2, | |
117 | length($data), | |
243ecf19 | 118 | 0, |
8523288e DB |
119 | length($data), |
120 | $plaintext_len, | |
121 | $data, | |
122 | $plaintext, | |
123 | ); | |
124 | ||
125 | # Send the record immediately after the server Finished. | |
126 | push @{$proxy->record_list}, $record; | |
c4220c0f AP |
127 | } elsif ($sent_corrupted_payload) { |
128 | # Check for bad_record_mac from client | |
129 | my $last_record = @{$proxy->record_list}[-1]; | |
a1c72cc2 | 130 | $fatal_alert = 1 if $last_record->is_fatal_alert(0) == TLSProxy::Message::AL_DESC_BAD_RECORD_MAC; |
8523288e DB |
131 | } |
132 | } |