]>
Commit | Line | Data |
---|---|---|
846e33c7 | 1 | /* |
83cf7abf | 2 | * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved. |
c80149d9 | 3 | * Copyright 2005 Nokia. All rights reserved. |
d02b48c6 | 4 | * |
2c18d164 | 5 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
846e33c7 RS |
6 | * this file except in compliance with the License. You can obtain a copy |
7 | * in the file LICENSE in the source distribution or at | |
8 | * https://www.openssl.org/source/license.html | |
d02b48c6 | 9 | */ |
846e33c7 | 10 | |
d02b48c6 | 11 | #include <stdio.h> |
ec577822 | 12 | #include <openssl/buffer.h> |
706457b7 | 13 | #include "ssl_local.h" |
d02b48c6 | 14 | |
4b618848 | 15 | #ifndef OPENSSL_NO_STDIO |
0821bcd4 | 16 | int SSL_SESSION_print_fp(FILE *fp, const SSL_SESSION *x) |
0f113f3e MC |
17 | { |
18 | BIO *b; | |
19 | int ret; | |
d02b48c6 | 20 | |
9982cbbb | 21 | if ((b = BIO_new(BIO_s_file())) == NULL) { |
0f113f3e | 22 | SSLerr(SSL_F_SSL_SESSION_PRINT_FP, ERR_R_BUF_LIB); |
26a7d938 | 23 | return 0; |
0f113f3e MC |
24 | } |
25 | BIO_set_fp(b, fp, BIO_NOCLOSE); | |
26 | ret = SSL_SESSION_print(b, x); | |
27 | BIO_free(b); | |
26a7d938 | 28 | return ret; |
0f113f3e | 29 | } |
d02b48c6 RE |
30 | #endif |
31 | ||
0821bcd4 | 32 | int SSL_SESSION_print(BIO *bp, const SSL_SESSION *x) |
0f113f3e | 33 | { |
ec60ccc1 | 34 | size_t i; |
0f113f3e | 35 | const char *s; |
5281bb22 | 36 | int istls13; |
d02b48c6 | 37 | |
0f113f3e MC |
38 | if (x == NULL) |
39 | goto err; | |
5281bb22 | 40 | istls13 = (x->ssl_version == TLS1_3_VERSION); |
0f113f3e MC |
41 | if (BIO_puts(bp, "SSL-Session:\n") <= 0) |
42 | goto err; | |
3eb2aff4 | 43 | s = ssl_protocol_to_string(x->ssl_version); |
0f113f3e MC |
44 | if (BIO_printf(bp, " Protocol : %s\n", s) <= 0) |
45 | goto err; | |
58964a49 | 46 | |
0f113f3e MC |
47 | if (x->cipher == NULL) { |
48 | if (((x->cipher_id) & 0xff000000) == 0x02000000) { | |
d61e6040 TK |
49 | if (BIO_printf(bp, " Cipher : %06lX\n", |
50 | x->cipher_id & 0xffffff) <= 0) | |
0f113f3e MC |
51 | goto err; |
52 | } else { | |
d61e6040 TK |
53 | if (BIO_printf(bp, " Cipher : %04lX\n", |
54 | x->cipher_id & 0xffff) <= 0) | |
0f113f3e MC |
55 | goto err; |
56 | } | |
57 | } else { | |
d61e6040 TK |
58 | if (BIO_printf(bp, " Cipher : %s\n", |
59 | ((x->cipher->name == NULL) ? "unknown" | |
60 | : x->cipher->name)) <= 0) | |
0f113f3e MC |
61 | goto err; |
62 | } | |
63 | if (BIO_puts(bp, " Session-ID: ") <= 0) | |
64 | goto err; | |
65 | for (i = 0; i < x->session_id_length; i++) { | |
66 | if (BIO_printf(bp, "%02X", x->session_id[i]) <= 0) | |
67 | goto err; | |
68 | } | |
69 | if (BIO_puts(bp, "\n Session-ID-ctx: ") <= 0) | |
70 | goto err; | |
71 | for (i = 0; i < x->sid_ctx_length; i++) { | |
72 | if (BIO_printf(bp, "%02X", x->sid_ctx[i]) <= 0) | |
73 | goto err; | |
74 | } | |
32f803d8 MC |
75 | if (istls13) { |
76 | if (BIO_puts(bp, "\n Resumption PSK: ") <= 0) | |
77 | goto err; | |
78 | } else if (BIO_puts(bp, "\n Master-Key: ") <= 0) | |
0f113f3e | 79 | goto err; |
ec60ccc1 | 80 | for (i = 0; i < x->master_key_length; i++) { |
0f113f3e MC |
81 | if (BIO_printf(bp, "%02X", x->master_key[i]) <= 0) |
82 | goto err; | |
83 | } | |
ddac1974 | 84 | #ifndef OPENSSL_NO_PSK |
0f113f3e MC |
85 | if (BIO_puts(bp, "\n PSK identity: ") <= 0) |
86 | goto err; | |
87 | if (BIO_printf(bp, "%s", x->psk_identity ? x->psk_identity : "None") <= 0) | |
88 | goto err; | |
89 | if (BIO_puts(bp, "\n PSK identity hint: ") <= 0) | |
90 | goto err; | |
91 | if (BIO_printf | |
92 | (bp, "%s", x->psk_identity_hint ? x->psk_identity_hint : "None") <= 0) | |
93 | goto err; | |
ddac1974 | 94 | #endif |
edc032b5 | 95 | #ifndef OPENSSL_NO_SRP |
0f113f3e MC |
96 | if (BIO_puts(bp, "\n SRP username: ") <= 0) |
97 | goto err; | |
98 | if (BIO_printf(bp, "%s", x->srp_username ? x->srp_username : "None") <= 0) | |
99 | goto err; | |
edc032b5 | 100 | #endif |
aff8c126 | 101 | if (x->ext.tick_lifetime_hint) { |
0f113f3e MC |
102 | if (BIO_printf(bp, |
103 | "\n TLS session ticket lifetime hint: %ld (seconds)", | |
aff8c126 | 104 | x->ext.tick_lifetime_hint) <= 0) |
0f113f3e MC |
105 | goto err; |
106 | } | |
aff8c126 | 107 | if (x->ext.tick) { |
0f113f3e MC |
108 | if (BIO_puts(bp, "\n TLS session ticket:\n") <= 0) |
109 | goto err; | |
348240c6 | 110 | /* TODO(size_t): Convert this call */ |
a230b26e | 111 | if (BIO_dump_indent |
aff8c126 | 112 | (bp, (const char *)x->ext.tick, (int)x->ext.ticklen, 4) |
0f113f3e MC |
113 | <= 0) |
114 | goto err; | |
115 | } | |
09b6c2ef | 116 | #ifndef OPENSSL_NO_COMP |
0f113f3e MC |
117 | if (x->compress_meth != 0) { |
118 | SSL_COMP *comp = NULL; | |
413c4f45 | 119 | |
c8f6c28a | 120 | if (!ssl_cipher_get_evp(NULL, x, NULL, NULL, NULL, NULL, &comp, 0)) |
69f68237 | 121 | goto err; |
0f113f3e | 122 | if (comp == NULL) { |
a230b26e | 123 | if (BIO_printf(bp, "\n Compression: %d", x->compress_meth) <= 0) |
0f113f3e MC |
124 | goto err; |
125 | } else { | |
9a555706 | 126 | if (BIO_printf(bp, "\n Compression: %d (%s)", comp->id, |
a230b26e | 127 | comp->name) <= 0) |
0f113f3e MC |
128 | goto err; |
129 | } | |
130 | } | |
09b6c2ef | 131 | #endif |
0f113f3e MC |
132 | if (x->time != 0L) { |
133 | if (BIO_printf(bp, "\n Start Time: %ld", x->time) <= 0) | |
134 | goto err; | |
135 | } | |
136 | if (x->timeout != 0L) { | |
137 | if (BIO_printf(bp, "\n Timeout : %ld (sec)", x->timeout) <= 0) | |
138 | goto err; | |
139 | } | |
140 | if (BIO_puts(bp, "\n") <= 0) | |
141 | goto err; | |
142 | ||
143 | if (BIO_puts(bp, " Verify return code: ") <= 0) | |
144 | goto err; | |
145 | if (BIO_printf(bp, "%ld (%s)\n", x->verify_result, | |
146 | X509_verify_cert_error_string(x->verify_result)) <= 0) | |
147 | goto err; | |
25f923dd | 148 | |
ddc06b35 DSH |
149 | if (BIO_printf(bp, " Extended master secret: %s\n", |
150 | x->flags & SSL_SESS_FLAG_EXTMS ? "yes" : "no") <= 0) | |
151 | goto err; | |
152 | ||
32f803d8 MC |
153 | if (istls13) { |
154 | if (BIO_printf(bp, " Max Early Data: %u\n", | |
155 | x->ext.max_early_data) <= 0) | |
156 | goto err; | |
157 | } | |
158 | ||
208fb891 | 159 | return 1; |
0f113f3e | 160 | err: |
26a7d938 | 161 | return 0; |
0f113f3e | 162 | } |
d02b48c6 | 163 | |
0f113f3e MC |
164 | /* |
165 | * print session id and master key in NSS keylog format (RSA | |
166 | * Session-ID:<session id> Master-Key:<master key>) | |
167 | */ | |
189ae368 | 168 | int SSL_SESSION_print_keylog(BIO *bp, const SSL_SESSION *x) |
0f113f3e | 169 | { |
ec60ccc1 | 170 | size_t i; |
189ae368 | 171 | |
0f113f3e MC |
172 | if (x == NULL) |
173 | goto err; | |
174 | if (x->session_id_length == 0 || x->master_key_length == 0) | |
175 | goto err; | |
189ae368 | 176 | |
0f113f3e MC |
177 | /* |
178 | * the RSA prefix is required by the format's definition although there's | |
8483a003 | 179 | * nothing RSA-specific in the output, therefore, we don't have to check if |
0f113f3e MC |
180 | * the cipher suite is based on RSA |
181 | */ | |
182 | if (BIO_puts(bp, "RSA ") <= 0) | |
183 | goto err; | |
189ae368 | 184 | |
0f113f3e MC |
185 | if (BIO_puts(bp, "Session-ID:") <= 0) |
186 | goto err; | |
187 | for (i = 0; i < x->session_id_length; i++) { | |
188 | if (BIO_printf(bp, "%02X", x->session_id[i]) <= 0) | |
189 | goto err; | |
190 | } | |
191 | if (BIO_puts(bp, " Master-Key:") <= 0) | |
192 | goto err; | |
ec60ccc1 | 193 | for (i = 0; i < x->master_key_length; i++) { |
0f113f3e MC |
194 | if (BIO_printf(bp, "%02X", x->master_key[i]) <= 0) |
195 | goto err; | |
196 | } | |
197 | if (BIO_puts(bp, "\n") <= 0) | |
198 | goto err; | |
189ae368 | 199 | |
208fb891 | 200 | return 1; |
0f113f3e | 201 | err: |
26a7d938 | 202 | return 0; |
0f113f3e | 203 | } |