2 * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
3 * Copyright 2005 Nokia. All rights reserved.
5 * Licensed under the Apache License 2.0 (the "License"). You may not use
6 * this file except in compliance with the License. You can obtain a copy
7 * in the file LICENSE in the source distribution or at
8 * https://www.openssl.org/source/license.html
12 #include <openssl/buffer.h>
13 #include "ssl_local.h"
15 #ifndef OPENSSL_NO_STDIO
16 int SSL_SESSION_print_fp(FILE *fp
, const SSL_SESSION
*x
)
21 if ((b
= BIO_new(BIO_s_file())) == NULL
) {
22 SSLerr(SSL_F_SSL_SESSION_PRINT_FP
, ERR_R_BUF_LIB
);
25 BIO_set_fp(b
, fp
, BIO_NOCLOSE
);
26 ret
= SSL_SESSION_print(b
, x
);
32 int SSL_SESSION_print(BIO
*bp
, const SSL_SESSION
*x
)
40 istls13
= (x
->ssl_version
== TLS1_3_VERSION
);
41 if (BIO_puts(bp
, "SSL-Session:\n") <= 0)
43 s
= ssl_protocol_to_string(x
->ssl_version
);
44 if (BIO_printf(bp
, " Protocol : %s\n", s
) <= 0)
47 if (x
->cipher
== NULL
) {
48 if (((x
->cipher_id
) & 0xff000000) == 0x02000000) {
49 if (BIO_printf(bp
, " Cipher : %06lX\n",
50 x
->cipher_id
& 0xffffff) <= 0)
53 if (BIO_printf(bp
, " Cipher : %04lX\n",
54 x
->cipher_id
& 0xffff) <= 0)
58 if (BIO_printf(bp
, " Cipher : %s\n",
59 ((x
->cipher
->name
== NULL
) ? "unknown"
60 : x
->cipher
->name
)) <= 0)
63 if (BIO_puts(bp
, " Session-ID: ") <= 0)
65 for (i
= 0; i
< x
->session_id_length
; i
++) {
66 if (BIO_printf(bp
, "%02X", x
->session_id
[i
]) <= 0)
69 if (BIO_puts(bp
, "\n Session-ID-ctx: ") <= 0)
71 for (i
= 0; i
< x
->sid_ctx_length
; i
++) {
72 if (BIO_printf(bp
, "%02X", x
->sid_ctx
[i
]) <= 0)
76 if (BIO_puts(bp
, "\n Resumption PSK: ") <= 0)
78 } else if (BIO_puts(bp
, "\n Master-Key: ") <= 0)
80 for (i
= 0; i
< x
->master_key_length
; i
++) {
81 if (BIO_printf(bp
, "%02X", x
->master_key
[i
]) <= 0)
84 #ifndef OPENSSL_NO_PSK
85 if (BIO_puts(bp
, "\n PSK identity: ") <= 0)
87 if (BIO_printf(bp
, "%s", x
->psk_identity
? x
->psk_identity
: "None") <= 0)
89 if (BIO_puts(bp
, "\n PSK identity hint: ") <= 0)
92 (bp
, "%s", x
->psk_identity_hint
? x
->psk_identity_hint
: "None") <= 0)
95 #ifndef OPENSSL_NO_SRP
96 if (BIO_puts(bp
, "\n SRP username: ") <= 0)
98 if (BIO_printf(bp
, "%s", x
->srp_username
? x
->srp_username
: "None") <= 0)
101 if (x
->ext
.tick_lifetime_hint
) {
103 "\n TLS session ticket lifetime hint: %ld (seconds)",
104 x
->ext
.tick_lifetime_hint
) <= 0)
108 if (BIO_puts(bp
, "\n TLS session ticket:\n") <= 0)
110 /* TODO(size_t): Convert this call */
112 (bp
, (const char *)x
->ext
.tick
, (int)x
->ext
.ticklen
, 4)
116 #ifndef OPENSSL_NO_COMP
117 if (x
->compress_meth
!= 0) {
118 SSL_COMP
*comp
= NULL
;
120 if (!ssl_cipher_get_evp(x
, NULL
, NULL
, NULL
, NULL
, &comp
, 0))
123 if (BIO_printf(bp
, "\n Compression: %d", x
->compress_meth
) <= 0)
126 if (BIO_printf(bp
, "\n Compression: %d (%s)", comp
->id
,
133 if (BIO_printf(bp
, "\n Start Time: %ld", x
->time
) <= 0)
136 if (x
->timeout
!= 0L) {
137 if (BIO_printf(bp
, "\n Timeout : %ld (sec)", x
->timeout
) <= 0)
140 if (BIO_puts(bp
, "\n") <= 0)
143 if (BIO_puts(bp
, " Verify return code: ") <= 0)
145 if (BIO_printf(bp
, "%ld (%s)\n", x
->verify_result
,
146 X509_verify_cert_error_string(x
->verify_result
)) <= 0)
149 if (BIO_printf(bp
, " Extended master secret: %s\n",
150 x
->flags
& SSL_SESS_FLAG_EXTMS
? "yes" : "no") <= 0)
154 if (BIO_printf(bp
, " Max Early Data: %u\n",
155 x
->ext
.max_early_data
) <= 0)
165 * print session id and master key in NSS keylog format (RSA
166 * Session-ID:<session id> Master-Key:<master key>)
168 int SSL_SESSION_print_keylog(BIO
*bp
, const SSL_SESSION
*x
)
174 if (x
->session_id_length
== 0 || x
->master_key_length
== 0)
178 * the RSA prefix is required by the format's definition although there's
179 * nothing RSA-specific in the output, therefore, we don't have to check if
180 * the cipher suite is based on RSA
182 if (BIO_puts(bp
, "RSA ") <= 0)
185 if (BIO_puts(bp
, "Session-ID:") <= 0)
187 for (i
= 0; i
< x
->session_id_length
; i
++) {
188 if (BIO_printf(bp
, "%02X", x
->session_id
[i
]) <= 0)
191 if (BIO_puts(bp
, " Master-Key:") <= 0)
193 for (i
= 0; i
< x
->master_key_length
; i
++) {
194 if (BIO_printf(bp
, "%02X", x
->master_key
[i
]) <= 0)
197 if (BIO_puts(bp
, "\n") <= 0)