2 * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include <openssl/objects.h>
14 /* Add the client's renegotiation binding */
15 int ssl_add_clienthello_renegotiate_ext(SSL
*s
, unsigned char *p
, int *len
,
19 if ((s
->s3
->previous_client_finished_len
+ 1) > maxlen
) {
20 SSLerr(SSL_F_SSL_ADD_CLIENTHELLO_RENEGOTIATE_EXT
,
21 SSL_R_RENEGOTIATE_EXT_TOO_LONG
);
26 *p
= s
->s3
->previous_client_finished_len
;
29 memcpy(p
, s
->s3
->previous_client_finished
,
30 s
->s3
->previous_client_finished_len
);
33 *len
= s
->s3
->previous_client_finished_len
+ 1;
39 * Parse the client's renegotiation binding and abort if it's not right
41 int ssl_parse_clienthello_renegotiate_ext(SSL
*s
, PACKET
*pkt
, int *al
)
44 const unsigned char *d
;
46 /* Parse the length byte */
47 if (!PACKET_get_1(pkt
, &ilen
)
48 || !PACKET_get_bytes(pkt
, &d
, ilen
)) {
49 SSLerr(SSL_F_SSL_PARSE_CLIENTHELLO_RENEGOTIATE_EXT
,
50 SSL_R_RENEGOTIATION_ENCODING_ERR
);
51 *al
= SSL_AD_ILLEGAL_PARAMETER
;
55 /* Check that the extension matches */
56 if (ilen
!= s
->s3
->previous_client_finished_len
) {
57 SSLerr(SSL_F_SSL_PARSE_CLIENTHELLO_RENEGOTIATE_EXT
,
58 SSL_R_RENEGOTIATION_MISMATCH
);
59 *al
= SSL_AD_HANDSHAKE_FAILURE
;
63 if (memcmp(d
, s
->s3
->previous_client_finished
,
64 s
->s3
->previous_client_finished_len
)) {
65 SSLerr(SSL_F_SSL_PARSE_CLIENTHELLO_RENEGOTIATE_EXT
,
66 SSL_R_RENEGOTIATION_MISMATCH
);
67 *al
= SSL_AD_HANDSHAKE_FAILURE
;
71 s
->s3
->send_connection_binding
= 1;
76 /* Add the server's renegotiation binding */
77 int ssl_add_serverhello_renegotiate_ext(SSL
*s
, unsigned char *p
, int *len
,
81 if ((s
->s3
->previous_client_finished_len
+
82 s
->s3
->previous_server_finished_len
+ 1) > maxlen
) {
83 SSLerr(SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT
,
84 SSL_R_RENEGOTIATE_EXT_TOO_LONG
);
89 *p
= s
->s3
->previous_client_finished_len
+
90 s
->s3
->previous_server_finished_len
;
93 memcpy(p
, s
->s3
->previous_client_finished
,
94 s
->s3
->previous_client_finished_len
);
95 p
+= s
->s3
->previous_client_finished_len
;
97 memcpy(p
, s
->s3
->previous_server_finished
,
98 s
->s3
->previous_server_finished_len
);
101 *len
= s
->s3
->previous_client_finished_len
102 + s
->s3
->previous_server_finished_len
+ 1;
108 * Parse the server's renegotiation binding and abort if it's not right
110 int ssl_parse_serverhello_renegotiate_ext(SSL
*s
, PACKET
*pkt
, int *al
)
112 unsigned int expected_len
= s
->s3
->previous_client_finished_len
113 + s
->s3
->previous_server_finished_len
;
115 const unsigned char *data
;
117 /* Check for logic errors */
118 OPENSSL_assert(!expected_len
|| s
->s3
->previous_client_finished_len
);
119 OPENSSL_assert(!expected_len
|| s
->s3
->previous_server_finished_len
);
121 /* Parse the length byte */
122 if (!PACKET_get_1(pkt
, &ilen
)) {
123 SSLerr(SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT
,
124 SSL_R_RENEGOTIATION_ENCODING_ERR
);
125 *al
= SSL_AD_ILLEGAL_PARAMETER
;
129 /* Consistency check */
130 if (PACKET_remaining(pkt
) != ilen
) {
131 SSLerr(SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT
,
132 SSL_R_RENEGOTIATION_ENCODING_ERR
);
133 *al
= SSL_AD_ILLEGAL_PARAMETER
;
137 /* Check that the extension matches */
138 if (ilen
!= expected_len
) {
139 SSLerr(SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT
,
140 SSL_R_RENEGOTIATION_MISMATCH
);
141 *al
= SSL_AD_HANDSHAKE_FAILURE
;
145 if (!PACKET_get_bytes(pkt
, &data
, s
->s3
->previous_client_finished_len
)
146 || memcmp(data
, s
->s3
->previous_client_finished
,
147 s
->s3
->previous_client_finished_len
) != 0) {
148 SSLerr(SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT
,
149 SSL_R_RENEGOTIATION_MISMATCH
);
150 *al
= SSL_AD_HANDSHAKE_FAILURE
;
154 if (!PACKET_get_bytes(pkt
, &data
, s
->s3
->previous_server_finished_len
)
155 || memcmp(data
, s
->s3
->previous_server_finished
,
156 s
->s3
->previous_server_finished_len
) != 0) {
157 SSLerr(SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT
,
158 SSL_R_RENEGOTIATION_MISMATCH
);
159 *al
= SSL_AD_ILLEGAL_PARAMETER
;
162 s
->s3
->send_connection_binding
= 1;