examples/server/server.c

/* server.c
 *
 * Copyright (C) 2006-2019 wolfSSL Inc.
 *
 * This file is part of wolfSSL.
 *
 * wolfSSL is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * wolfSSL is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
 */


#ifdef HAVE_CONFIG_H
    #include <config.h>
#endif
#include <wolfssl/ssl.h> /* name change portability layer */

#include <wolfssl/wolfcrypt/settings.h>
#ifdef HAVE_ECC
    #include <wolfssl/wolfcrypt/ecc.h>   /* wc_ecc_fp_free */
#endif

#if defined(WOLFSSL_MDK_ARM) || defined(WOLFSSL_KEIL_TCP_NET)
        #include <stdio.h>
        #include <string.h>
        #include "rl_fs.h"
        #include "rl_net.h"
#endif

#include <wolfssl/openssl/ssl.h>
#include <wolfssl/test.h>
#ifdef WOLFSSL_DTLS
    #include <wolfssl/error-ssl.h>
#endif

#include "examples/server/server.h"

#ifndef NO_WOLFSSL_SERVER

#ifdef WOLFSSL_ASYNC_CRYPT
    static int devId = INVALID_DEVID;
#endif

/* Note on using port 0: if the server uses port 0 to bind an ephemeral port
 * number and is using the ready file for scripted testing, the code in
 * test.h will write the actual port number into the ready file for use
 * by the client. */

static const char webServerMsg[] =
    "HTTP/1.1 200 OK\r\n"
    "Content-Type: text/html\r\n"
    "Connection: close\r\n"
    "Content-Length: 141\r\n"
    "\r\n"
    "<html>\r\n"
    "<head>\r\n"
    "<title>Welcome to wolfSSL!</title>\r\n"
    "</head>\r\n"
    "<body>\r\n"
    "<p>wolfSSL has successfully performed handshake!</p>\r\n"
    "</body>\r\n"
    "</html>\r\n";

int runWithErrors = 0; /* Used with -x flag to run err_sys vs. print errors */
static int lng_index = 0;

#ifdef WOLFSSL_CALLBACKS
    Timeval srvTo;
    static int srvHandShakeCB(HandShakeInfo* info)
    {
        (void)info;
        return 0;
    }

    static int srvTimeoutCB(TimeoutInfo* info)
    {
        (void)info;
        return 0;
    }

#endif

#ifndef NO_HANDSHAKE_DONE_CB
    static int myHsDoneCb(WOLFSSL* ssl, void* user_ctx)
    {
        (void)user_ctx;
        (void)ssl;

        /* printf("Notified HandShake done\n"); */

        /* return negative number to end TLS connection now */
        return 0;
    }
#endif


static void err_sys_ex(int out, const char* msg)
{
    if (out == 1) { /* if server is running w/ -x flag, print error w/o exit */
        printf("wolfSSL error: %s\n", msg);
        printf("Continuing server execution...\n\n");
    } else {
        err_sys(msg);
    }
}


#ifdef WOLFSSL_DTLS

/* Translates return codes returned from
 * send() and recv() if need be.
 */
static WC_INLINE int TranslateReturnCode(int old, int sd)
{
    (void)sd;

#if defined(FREESCALE_MQX) || defined(FREESCALE_KSDK_MQX)
    if (old == 0) {
        errno = SOCKET_EWOULDBLOCK;
        return -1;  /* convert to BSD style wouldblock as error */
    }

    if (old < 0) {
        errno = RTCS_geterror(sd);
        if (errno == RTCSERR_TCP_CONN_CLOSING)
            return 0;   /* convert to BSD style closing */
        if (errno == RTCSERR_TCP_CONN_RLSD)
            errno = SOCKET_ECONNRESET;
        if (errno == RTCSERR_TCP_TIMED_OUT)
            errno = SOCKET_EAGAIN;
    }
#endif

    return old;
}

static WC_INLINE int wolfSSL_LastError(void)
{
#ifdef USE_WINDOWS_API
    return WSAGetLastError();
#elif defined(EBSNET)
    return xn_getlasterror();
#else
    return errno;
#endif
}

/* wolfSSL Sock Addr */
struct WOLFSSL_TEST_SOCKADDR {
    unsigned int  sz; /* sockaddr size */
    SOCKADDR_IN_T sa; /* pointer to the sockaddr_in or sockaddr_in6 */
};

typedef struct WOLFSSL_TEST_DTLS_CTX {
    struct WOLFSSL_TEST_SOCKADDR peer;
    int rfd;
    int wfd;
    int failOnce;
    word32 blockSeq;
} WOLFSSL_TEST_DTLS_CTX;


static WC_INLINE int PeekSeq(const char* buf, word32* seq)
{
    const char* c = buf + 3;

    if ((c[0] | c[1] | c[2] | c[3]) == 0) {
        *seq = (c[4] << 24) | (c[5] << 16) | (c[6] << 8) | c[7];
        return 1;
    }

    return 0;
}


/* The send embedded callback
 *  return : nb bytes sent, or error
 */
static int TestEmbedSendTo(WOLFSSL* ssl, char *buf, int sz, void *ctx)
{
    WOLFSSL_TEST_DTLS_CTX* dtlsCtx = (WOLFSSL_TEST_DTLS_CTX*)ctx;
    int sd = dtlsCtx->wfd;
    int sent;
    int len = sz;
    int err;

    (void)ssl;

    WOLFSSL_ENTER("TestEmbedSendTo()");

    if (dtlsCtx->failOnce) {
        word32 seq = 0;

        if (PeekSeq(buf, &seq) && seq == dtlsCtx->blockSeq) {
            dtlsCtx->failOnce = 0;
            WOLFSSL_MSG("Forcing WANT_WRITE");
            return WOLFSSL_CBIO_ERR_WANT_WRITE;
        }
    }

    sent = (int)sendto(sd, &buf[sz - len], len, 0,
                                (const SOCKADDR*)&dtlsCtx->peer.sa,
                                dtlsCtx->peer.sz);

    sent = TranslateReturnCode(sent, sd);

    if (sent < 0) {
        err = wolfSSL_LastError();
        WOLFSSL_MSG("Embed Send To error");

        if (err == SOCKET_EWOULDBLOCK || err == SOCKET_EAGAIN) {
            WOLFSSL_MSG("\tWould Block");
            return WOLFSSL_CBIO_ERR_WANT_WRITE;
        }
        else if (err == SOCKET_ECONNRESET) {
            WOLFSSL_MSG("\tConnection reset");
            return WOLFSSL_CBIO_ERR_CONN_RST;
        }
        else if (err == SOCKET_EINTR) {
            WOLFSSL_MSG("\tSocket interrupted");
            return WOLFSSL_CBIO_ERR_ISR;
        }
        else if (err == SOCKET_EPIPE) {
            WOLFSSL_MSG("\tSocket EPIPE");
            return WOLFSSL_CBIO_ERR_CONN_CLOSE;
        }
        else {
            WOLFSSL_MSG("\tGeneral error");
            return WOLFSSL_CBIO_ERR_GENERAL;
        }
    }

    return sent;
}

#endif /* WOLFSSL_DTLS */


static int NonBlockingSSL_Accept(SSL* ssl)
{
#ifndef WOLFSSL_CALLBACKS
    int ret = SSL_accept(ssl);
#else
    int ret = wolfSSL_accept_ex(ssl, srvHandShakeCB, srvTimeoutCB, srvTo);
#endif
    int error = SSL_get_error(ssl, 0);
    SOCKET_T sockfd = (SOCKET_T)SSL_get_fd(ssl);
    int select_ret = 0;

    while (ret != WOLFSSL_SUCCESS &&
        (error == WOLFSSL_ERROR_WANT_READ || error == WOLFSSL_ERROR_WANT_WRITE
        #ifdef WOLFSSL_ASYNC_CRYPT
            || error == WC_PENDING_E
        #endif
    )) {
        int currTimeout = 1;

        if (error == WOLFSSL_ERROR_WANT_READ) {
            /* printf("... server would read block\n"); */
        }
        else if (error == WOLFSSL_ERROR_WANT_WRITE) {
            /* printf("... server would write block\n"); */
        }

    #ifdef WOLFSSL_ASYNC_CRYPT
        if (error == WC_PENDING_E) {
            ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
            if (ret < 0) break;
        }
        else
    #endif
        {
            if (error != WOLFSSL_ERROR_WANT_WRITE) {
            #ifdef WOLFSSL_DTLS
                currTimeout = wolfSSL_dtls_get_current_timeout(ssl);
            #endif
                select_ret = tcp_select(sockfd, currTimeout);
            }
        }

        if ((select_ret == TEST_RECV_READY) || (select_ret == TEST_SEND_READY)
            || (select_ret == TEST_ERROR_READY)
        #ifdef WOLFSSL_ASYNC_CRYPT
            || error == WC_PENDING_E
        #endif
        ) {
            #ifndef WOLFSSL_CALLBACKS
                ret = SSL_accept(ssl);
            #else
                ret = wolfSSL_accept_ex(ssl,
                                    srvHandShakeCB, srvTimeoutCB, srvTo);
            #endif
            error = SSL_get_error(ssl, 0);
            if (error == WOLFSSL_ERROR_WANT_WRITE) {
                /* Do a select here. */
                select_ret = tcp_select_tx(sockfd, 1);
                if (select_ret == TEST_TIMEOUT)
                    error = WOLFSSL_FATAL_ERROR;
            }
        }
        else if (select_ret == TEST_TIMEOUT && !wolfSSL_dtls(ssl)) {
            error = WOLFSSL_ERROR_WANT_READ;
        }
    #ifdef WOLFSSL_DTLS
        else if (select_ret == TEST_TIMEOUT && wolfSSL_dtls(ssl) &&
                                        wolfSSL_dtls_got_timeout(ssl) >= 0) {
            error = WOLFSSL_ERROR_WANT_READ;
        }
    #endif
        else {
            error = WOLFSSL_FATAL_ERROR;
        }
    }

    return ret;
}

/* Echo number of bytes specified by -e arg */
int ServerEchoData(SSL* ssl, int clientfd, int echoData, int block,
                   int throughput)
{
    int ret = 0, err;
    double start = 0, rx_time = 0, tx_time = 0;
    int xfer_bytes = 0, select_ret, len, rx_pos;
    char* buffer;

    buffer = (char*)malloc(block);
    if (!buffer) {
        err_sys_ex(runWithErrors, "Server buffer malloc failed");
    }

    while ((echoData && throughput == 0) ||
          (!echoData && xfer_bytes < throughput))
    {
        select_ret = tcp_select(clientfd, 1); /* Timeout=1 second */
        if (select_ret == TEST_RECV_READY) {

            len = min(block, throughput - xfer_bytes);
            rx_pos = 0;

            if (throughput) {
                start = current_time(1);
            }

            /* Read data */
            while (rx_pos < len) {
                ret = SSL_read(ssl, &buffer[rx_pos], len - rx_pos);
                if (ret < 0) {
                    err = SSL_get_error(ssl, 0);
                #ifdef WOLFSSL_ASYNC_CRYPT
                    if (err == WC_PENDING_E) {
                        ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
                        if (ret < 0) break;
                    }
                    else
                #endif
                    if (err != WOLFSSL_ERROR_WANT_READ &&
                                             err != WOLFSSL_ERROR_ZERO_RETURN) {
                        printf("SSL_read echo error %d\n", err);
                        err_sys_ex(runWithErrors, "SSL_read failed");
                        break;
                    }
                }
                else {
                    rx_pos += ret;
                }
            }
            if (throughput) {
                rx_time += current_time(0) - start;
                start = current_time(1);
            }

            /* Write data */
            do {
                err = 0; /* reset error */
                ret = SSL_write(ssl, buffer, len);
                if (ret <= 0) {
                    err = SSL_get_error(ssl, 0);
                #ifdef WOLFSSL_ASYNC_CRYPT
                    if (err == WC_PENDING_E) {
                        ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
                        if (ret < 0) break;
                    }
                #endif
                }
            } while (err == WC_PENDING_E);
            if (ret != len) {
                printf("SSL_write echo error %d\n", err);
                err_sys_ex(runWithErrors, "SSL_write failed");
            }

            if (throughput) {
                tx_time += current_time(0) - start;
            }

            xfer_bytes += len;
        }
    }

    free(buffer);

    if (throughput) {
        printf("wolfSSL Server Benchmark %d bytes\n"
            "\tRX      %8.3f ms (%8.3f MBps)\n"
            "\tTX      %8.3f ms (%8.3f MBps)\n",
            throughput,
            tx_time * 1000, throughput / tx_time / 1024 / 1024,
            rx_time * 1000, throughput / rx_time / 1024 / 1024
        );
    }

    return EXIT_SUCCESS;
}

static void ServerRead(WOLFSSL* ssl, char* input, int inputLen)
{
    int ret, err;
    char buffer[WOLFSSL_MAX_ERROR_SZ];

    /* Read data */
    do {
        err = 0; /* reset error */
        ret = SSL_read(ssl, input, inputLen);
        if (ret < 0) {
            err = SSL_get_error(ssl, 0);

        #ifdef WOLFSSL_ASYNC_CRYPT
            if (err == WC_PENDING_E) {
                ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
                if (ret < 0) break;
            }
            else
        #endif
        #ifdef WOLFSSL_DTLS
            if (wolfSSL_dtls(ssl) && err == DECRYPT_ERROR) {
                printf("Dropped client's message due to a bad MAC\n");
            }
            else
        #endif
            if (err != WOLFSSL_ERROR_WANT_READ) {
                printf("SSL_read input error %d, %s\n", err,
                                                 ERR_error_string(err, buffer));
                err_sys_ex(runWithErrors, "SSL_read failed");
            }
        }
        else if (SSL_get_error(ssl, 0) == 0 &&
                            tcp_select(SSL_get_fd(ssl), 0) == TEST_RECV_READY) {
                err = WOLFSSL_ERROR_WANT_READ;
        }
    } while (err == WC_PENDING_E || err == WOLFSSL_ERROR_WANT_READ);
    if (ret > 0) {
        input[ret] = 0; /* null terminate message */
        printf("Client message: %s\n", input);
    }
}

static void ServerWrite(WOLFSSL* ssl, const char* output, int outputLen)
{
    int ret, err;
    char buffer[WOLFSSL_MAX_ERROR_SZ];
    int len;

#ifdef OPENSSL_ALL
    /* Fuzz testing expects reply split over two msgs when TLSv1.0 or below */
    if (wolfSSL_GetVersion(ssl) <= WOLFSSL_TLSV1)
         len = outputLen / 2;
    else
#endif
        len = outputLen;

    do {
        err = 0; /* reset error */
        ret = SSL_write(ssl, output, len);
        if (ret <= 0) {
            err = SSL_get_error(ssl, 0);

        #ifdef WOLFSSL_ASYNC_CRYPT
            if (err == WC_PENDING_E) {
                ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
                if (ret < 0) break;
            }
        #endif
        }
        else if (ret != outputLen) {
            output += ret;
            len = (outputLen -= ret);
            err = WOLFSSL_ERROR_WANT_WRITE;
        }
    } while (err == WC_PENDING_E || err == WOLFSSL_ERROR_WANT_WRITE);
    if (ret != outputLen) {
        printf("SSL_write msg error %d, %s\n", err,
                                                 ERR_error_string(err, buffer));
        err_sys_ex(runWithErrors, "SSL_write failed");
    }
}
/* when adding new option, please follow the steps below: */
/*  1. add new option message in English section          */
/*  2. increase the number of the second dimention        */
/*  3. add the same message into Japanese section         */
/*     (will be translated later)                         */
/*  4. add printf() into suitable position of Usage()     */
static const char* server_usage_msg[][49] = {
    /* English */
    {
        " NOTE: All files relative to wolfSSL home dir\n",               /* 0 */
        "-? <num>    Help, print this usage\n"
        "            0: English, 1: Japanese\n",                         /* 1 */
        "-p <num>    Port to listen on, not 0, default",                 /* 2 */
#ifndef WOLFSSL_TLS13
        "-v <num>    SSL version [0-3], SSLv3(0) - TLS1.2(3)), default", /* 3 */
#else
        "-v <num>    SSL version [0-4], SSLv3(0) - TLS1.3(4)), default", /* 3 */
#endif
        "-l <str>    Cipher suite list (: delimited)\n",                 /* 4 */
        "-c <file>   Certificate file,           default",               /* 5 */
        "-k <file>   Key file,                   default",               /* 6 */
        "-A <file>   Certificate Authority file, default",               /* 7 */
        "-R <file>   Create Ready file for external monitor"
                                                     " default none\n",  /* 8 */
#ifndef NO_DH
        "-D <file>   Diffie-Hellman Params file, default",               /* 9 */
        "-Z <num>    Minimum DH key bits,        default",              /* 10 */
#endif
#ifdef HAVE_ALPN
        "-L <str>    Application-Layer Protocol Negotiation"
                                                  " ({C,F}:<list>)\n",  /* 11 */
#endif
        "-d          Disable client cert check\n",                      /* 12 */
        "-b          Bind to any interface instead of localhost only\n",/* 13 */
        "-s          Use pre Shared keys\n",                            /* 14 */
        "-u          Use UDP DTLS,"
           " add -v 2 for DTLSv1, -v 3 for DTLSv1.2 (default)\n",       /* 15 */
#ifdef WOLFSSL_SCTP
        "-G          Use SCTP DTLS,"
           " add -v 2 for DTLSv1, -v 3 for DTLSv1.2 (default)\n",       /* 16 */
#endif
        "-f          Fewer packets/group messages\n",                   /* 17 */
        "-r          Allow one client Resumption\n",                    /* 18 */
        "-N          Use Non-blocking sockets\n",                       /* 19 */
        "-S <str>    Use Host Name Indication\n",                       /* 20 */
        "-w          Wait for bidirectional shutdown\n",                /* 21 */
#ifdef HAVE_OCSP
        "-o          Perform OCSP lookup on peer certificate\n",        /* 22 */
        "-O <url>    Perform OCSP lookup using <url> as responder\n",   /* 23 */
#endif
#ifdef HAVE_PK_CALLBACKS
        "-P          Public Key Callbacks\n",                           /* 24 */
#endif
#ifdef HAVE_ANON
        "-a          Anonymous server\n",                               /* 25 */
#endif
#ifndef NO_PSK
        "-I          Do not send PSK identity hint\n",                  /* 26 */
#endif
        "-x          Print server errors but do not close connection\n",/* 27 */
        "-i          Loop indefinitely (allow repeated connections)\n", /* 28 */
        "-e          Echo data mode (return raw bytes received)\n",     /* 29 */
#ifdef HAVE_NTRU
        "-n          Use NTRU key (needed for NTRU suites)\n",          /* 30 */
#endif
        "-B <num>    Benchmark throughput"
                            " using <num> bytes and print stats\n",     /* 31 */
#ifdef HAVE_CRL
        "-V          Disable CRL\n",                                    /* 32 */
#endif
#ifdef WOLFSSL_TRUST_PEER_CERT
        "-E <file>   Path to load trusted peer cert\n",                 /* 33 */
#endif
#ifdef HAVE_WNR
        "-q <file>   Whitewood config file,      default",              /* 34 */
#endif
        "-g          Return basic HTML web page\n",                     /* 35 */
        "-C <num>    The number of connections to accept, default: 1\n",/* 36 */
        "-H <arg>    Internal tests"
            " [defCipherList, exitWithRet, verifyFail, useSupCurve,\n", /* 37 */
        "                            loadSSL, disallowETM]\n",          /* 38 */
#ifdef WOLFSSL_TLS13
        "-U          Update keys and IVs before sending\n",             /* 39 */
        "-K          Key Exchange for PSK not using (EC)DHE\n",         /* 40 */
#ifndef NO_DH
        "-y          Pre-generate Key Share using FFDHE_2048 only\n",   /* 41 */
#endif
#ifdef HAVE_ECC
        "-Y          Pre-generate Key Share using P-256 only \n",       /* 42 */
#endif
#ifdef HAVE_CURVE25519
        "-t          Pre-generate Key share using Curve25519 only\n",   /* 43 */
#endif
#ifdef HAVE_SESSION_TICKET
        "-T          Do not generate session ticket\n",                 /* 44 */
#endif
#ifdef WOLFSSL_POST_HANDSHAKE_AUTH
        "-Q          Request certificate from client post-handshake\n", /* 45 */
#endif
#ifdef WOLFSSL_SEND_HRR_COOKIE
        "-J          Server sends Cookie Extension containing state\n", /* 46 */
#endif
#endif /* WOLFSSL_TLS13 */
#ifdef WOLFSSL_EARLY_DATA
        "-0          Early data read from client (0-RTT handshake)\n",  /* 47 */
#endif
#ifdef WOLFSSL_MULTICAST
        "-3 <grpid>  Multicast, grpid < 256\n",                         /* 48 */
#endif
        "-1 <num>    Display a result by specified language."
                             "\n            0: English, 1: Japanese\n", /* 49 */
#ifdef HAVE_TRUSTED_CA
        "-5          Use Trusted CA Key Indication\n",                  /* 52 */
#endif
        NULL,
    },
#ifndef NO_MULTIBYTE_PRINT
    /* Japanese */
    {
        " 注意 : 全てのファイルは"
        " wolfSSL ホーム・ディレクトリからの相対です。\n",               /* 0 */
        "-? <num>    ヘルプ, 使い方を表示\n"
        "            0: 英語、 1: 日本語\n",                             /* 1 */
        "-p <num>    接続先ポート, 0は無効, 既定値",                     /* 2 */
#ifndef WOLFSSL_TLS13
        "-v <num>    SSL バージョン [0-3], SSLv3(0) - TLS1.2(3)),"
                                                            " 既定値",   /* 3 */
#else
        "-v <num>    SSL バージョン [0-4], SSLv3(0) - TLS1.3(4)),"
                                                            " 既定値",   /* 3 */
#endif
        "-l <str>    暗号スイートリスト (区切り文字 :)\n",               /* 4 */
        "-c <file>   証明書ファイル,  既定値",                           /* 5 */
        "-k <file>   鍵ファイル,      既定値",                           /* 6 */
        "-A <file>   認証局ファイル,  既定値",                           /* 7 */
        "-R <file>   外部モニタ用の準備完了ファイルを作成する。"
                                                      "既定値  なし\n",  /* 8 */
#ifndef NO_DH
        "-D <file>   ディフィー・ヘルマンのパラメータファイル,"
                                                     " 既定値",          /* 9 */
        "-Z <num>    最小 DH 鍵 ビット, 既定値",                        /* 10 */
#endif
#ifdef HAVE_ALPN
        "-L <str>    アプリケーション層プロトコルネゴシエーションを行う"
                                                  " ({C,F}:<list>)\n",  /* 11 */
#endif
        "-d          クライアント認証を無効とする\n",                   /* 12 */
        "-b          ローカルホスト以外のインターフェースへも"
                                                "バインドする\n",       /* 13 */
        "-s          事前共有鍵を使用する\n",                           /* 14 */
        "-u          UDP DTLSを使用する。-v 2 を追加指定すると"
             " DTLSv1, -v 3 を追加指定すると DTLSv1.2 (既定値)\n",      /* 15 */
#ifdef WOLFSSL_SCTP
        "-G          SCTP DTLSを使用する。-v 2 を追加指定すると"
              " DTLSv1, -v 3 を追加指定すると DTLSv1.2 (既定値)\n",     /* 16 */
#endif
        "-f          より少ないパケット/グループメッセージを使用する\n",/* 17 */
        "-r          クライアントの再開を許可する\n",                   /* 18 */
        "-N          ノンブロッキング・ソケットを使用する\n",           /* 19 */
        "-S <str>    ホスト名表示を使用する\n",                         /* 20 */
        "-w          双方向シャットダウンを待つ\n",                     /* 21 */
#ifdef HAVE_OCSP
        "-o          OCSPルックアップをピア証明書で実施する\n",         /* 22 */
        "-O <url>    OCSPルックアップを、"
                        "<url>を使用し応答者として実施する\n",          /* 23 */
#endif
#ifdef HAVE_PK_CALLBACKS
        "-P          公開鍵コールバック\n",                             /* 24 */
#endif
#ifdef HAVE_ANON
        "-a          匿名サーバー\n",                                   /* 25 */
#endif
#ifndef NO_PSK
        "-I          PSKアイデンティティのヒントを送信しない\n",        /* 26 */
#endif
        "-x          サーバーエラーを出力するが接続を切断しない\n",     /* 27 */
        "-i          無期限にループする(繰り返し接続を許可)\n",         /* 28 */
        "-e          エコー・データモード"
                                   "(受け取ったバイトデータを返す)\n",  /* 29 */
#ifdef HAVE_NTRU
        "-n          NTRU鍵を使用する(NTRUスイートに必要)\n",           /* 30 */
#endif
        "-B <num>    <num> バイトを用いてのベンチマーク・スループット"
                                          "測定と結果を出力する\n",     /* 31 */
#ifdef HAVE_CRL
        "-V          CRLを無効とする\n",                                /* 32 */
#endif
#ifdef WOLFSSL_TRUST_PEER_CERT
        "-E <file>   信頼出来るピアの証明書ロードの為のパス\n\n",       /* 33 */
#endif
#ifdef HAVE_WNR
        "-q <file>   Whitewood コンフィグファイル,      既定値",        /* 34 */
#endif
        "-g          基本的な Web ページを返す\n",                      /* 35 */
        "-C <num>    アクセプト可能な接続数を指定する。既定値: 1\n",    /* 36 */
        "-H <arg>    内部テスト"
            " [defCipherList, exitWithRet, verifyFail, useSupCurve,\n", /* 37 */
        "                            loadSSL, disallowETM]\n",          /* 38 */
#ifdef WOLFSSL_TLS13
        "-U          データ送信前に、鍵とIVを更新する\n",               /* 39 */
        "-K          鍵交換にPSKを使用、(EC)DHEは使用しない\n",         /* 40 */
#ifndef NO_DH
        "-y          FFDHE_2048のみを使用して鍵共有を事前生成する\n",   /* 41 */
#endif
#ifdef HAVE_ECC
        "-Y          P-256のみを使用したキー共有の事前生成\n",          /* 42 */
#endif
#ifdef HAVE_CURVE25519
        "-t          Curve25519のみを使用して鍵共有を事前生成する\n",   /* 43 */
#endif
#ifdef HAVE_SESSION_TICKET
        "-T         セッションチケットを生成しない\n",                  /* 44 */
#endif
#ifdef WOLFSSL_POST_HANDSHAKE_AUTH
        "-Q          クライアントのポストハンドシェイクから"
                                              "証明書を要求する\n",     /* 45 */
#endif
#ifdef WOLFSSL_SEND_HRR_COOKIE
        "-J          サーバーの状態を含むTLS Cookie 拡張を送信する\n",  /* 46 */
#endif
#endif /* WOLFSSL_TLS13 */
#ifdef WOLFSSL_EARLY_DATA
        "-0          クライアントからの Early Data 読み取り"
                                      "（0-RTTハンドシェイク）\n",      /* 47 */
#endif
#ifdef WOLFSSL_MULTICAST
        "-3 <grpid>  マルチキャスト, grpid < 256\n",                    /* 48 */
#endif
        "-1 <num>    指定された言語で結果を表示します。"
                                 "\n            0: 英語、 1: 日本語\n", /* 49 */
#ifdef HAVE_TRUSTED_CA
        "-5          信頼できる認証局の鍵表示を使用する\n",             /* 52 */
#endif
        NULL,
    },
#endif
};

static void Usage(void)
{
    int msgId = 0;
    const char** msg = server_usage_msg[lng_index];

    printf("%s%s%s", "server ", LIBWOLFSSL_VERSION_STRING,
           msg[msgId]);
    printf("%s", msg[++msgId]);                     /* ? */
    printf("%s %d\n", msg[++msgId], wolfSSLPort);   /* -p */
#ifndef WOLFSSL_TLS13
    printf("%s %d\n", msg[++msgId], SERVER_DEFAULT_VERSION); /* -v */
#else
    printf("%s %d\n", msg[++msgId], SERVER_DEFAULT_VERSION); /* -v */
#endif
    printf("%s", msg[++msgId]);     /* -l */
    printf("%s %s\n", msg[++msgId], svrCertFile);    /* -c */
    printf("%s %s\n", msg[++msgId], svrKeyFile);     /* -k */
    printf("%s %s\n", msg[++msgId], cliCertFile);    /* -A */
    printf("%s", msg[++msgId]);     /* -R */
#ifndef NO_DH
    printf("%s %s\n", msg[++msgId], dhParamFile);           /* -D */
    printf("%s %d\n", msg[++msgId], DEFAULT_MIN_DHKEY_BITS);/* -Z */
#endif
#ifdef HAVE_ALPN
    printf("%s", msg[++msgId]);     /* -L */
#endif
    printf("%s", msg[++msgId]);     /* -d */
    printf("%s", msg[++msgId]);     /* -b */
    printf("%s", msg[++msgId]);     /* -s */
    printf("%s", msg[++msgId]);     /* -u */
#ifdef WOLFSSL_SCTP
    printf("%s", msg[++msgId]);     /* -G */
#endif
    printf("%s", msg[++msgId]);     /* -f */
    printf("%s", msg[++msgId]);     /* -r */
    printf("%s", msg[++msgId]);     /* -N */
    printf("%s", msg[++msgId]);     /* -S */
    printf("%s", msg[++msgId]);     /* -w */
#ifdef HAVE_SECURE_RENEGOTIATION
    printf("-M          Allow Secure Renegotiation\n");
    printf("-m          Force Server Initiated Secure Renegotiation\n");
#endif /* HAVE_SECURE_RENEGOTIATION */
#ifdef HAVE_OCSP
    printf("%s", msg[++msgId]);     /* -o */
    printf("%s", msg[++msgId]);     /* -O */
#endif
#ifdef HAVE_PK_CALLBACKS
    printf("%s", msg[++msgId]);     /* -P */
#endif
#ifdef HAVE_ANON
    printf("%s", msg[++msgId]);     /* -a */
#endif
#ifndef NO_PSK
    printf("%s", msg[++msgId]);     /* -I */
#endif
    printf("%s", msg[++msgId]);     /* -x */
    printf("%s", msg[++msgId]);     /* -i */
    printf("%s", msg[++msgId]);     /* -e */
#ifdef HAVE_NTRU
    printf("%s", msg[++msgId]);     /* -n */
#endif
    printf("%s", msg[++msgId]);     /* -B */
#ifdef HAVE_CRL
    printf("%s", msg[++msgId]);     /* -V */
#endif
#ifdef WOLFSSL_TRUST_PEER_CERT
    printf("%s", msg[++msgId]);     /* -E */
#endif
#ifdef HAVE_WNR
    printf("%s %s\n", msg[++msgId], wnrConfig);  /* -q */
#endif
    printf("%s", msg[++msgId]);     /* -g */
    printf("%s", msg[++msgId]);     /* -C */
    printf("%s", msg[++msgId]);     /* -H */
    printf("%s", msg[++msgId]);     /* more -H options */
#ifdef WOLFSSL_TLS13
    printf("%s", msg[++msgId]);     /* -U */
    printf("%s", msg[++msgId]);     /* -K */
#ifndef NO_DH
    printf("%s", msg[++msgId]);     /* -y */
#endif
#ifdef HAVE_ECC
    printf("%s", msg[++msgId]);     /* -Y */
#endif
#ifdef HAVE_CURVE25519
    printf("%s", msg[++msgId]);     /* -t */
#endif
#ifdef HAVE_SESSION_TICKET
    printf("%s", msg[++msgId]);     /* -T */
#endif
#ifdef WOLFSSL_POST_HANDSHAKE_AUTH
    printf("%s", msg[++msgId]);     /* -Q */
#endif
#ifdef WOLFSSL_SEND_HRR_COOKIE
    printf("%s", msg[++msgId]);     /* -J */
#endif
#endif /* WOLFSSL_TLS13 */
#ifdef WOLFSSL_EARLY_DATA
    printf("%s", msg[++msgId]);     /* -0 */
#endif
#if !defined(NO_DH) && !defined(HAVE_FIPS) && \
    !defined(HAVE_SELFTEST) && !defined(WOLFSSL_OLD_PRIME_CHECK)
    printf("-2          Disable DH Prime check\n");
#endif
#ifdef WOLFSSL_DTLS
    printf("-4 <seq>    DTLS fake would-block for message seq\n");
#endif
#ifdef WOLFSSL_MULTICAST
    printf("%s", msg[++msgId]);     /* -3 */
#endif
    printf("%s", msg[++msgId]);     /* -1 */
#ifdef HAVE_TRUSTED_CA
    printf("%s", msg[++msgId]);     /* -5 */
#endif /* HAVE_TRUSTED_CA */
}

THREAD_RETURN WOLFSSL_THREAD server_test(void* args)
{
    SOCKET_T sockfd   = WOLFSSL_SOCKET_INVALID;
    SOCKET_T clientfd = WOLFSSL_SOCKET_INVALID;

    wolfSSL_method_func method = NULL;
    SSL_CTX*    ctx    = 0;
    SSL*        ssl    = 0;

#ifndef WOLFSSL_ALT_TEST_STRINGS
    const char msg[] = "I hear you fa shizzle!";
#else
    const char msg[] = "I hear you fa shizzle!\n";
#endif
    int    useWebServerMsg = 0;
    char   input[80];
    int    ch;
    int    version = SERVER_DEFAULT_VERSION;
#ifndef WOLFSSL_NO_CLIENT_AUTH
    int    doCliCertCheck = 1;
#else
    int    doCliCertCheck = 0;
#endif
#ifdef HAVE_CRL
    int    disableCRL = 0;
#endif
    int    useAnyAddr = 0;
    word16 port = wolfSSLPort;
    int    usePsk = 0;
    int    usePskPlus = 0;
    int    useAnon = 0;
    int    doDTLS = 0;
    int    dtlsUDP = 0;
    int    dtlsSCTP = 0;
    int    doMcast = 0;
#ifdef WOLFSSL_DTLS
    int    doBlockSeq = 0;
    WOLFSSL_TEST_DTLS_CTX dtlsCtx;
#endif
    int    needDH = 0;
    int    useNtruKey   = 0;
    int    nonBlocking  = 0;
    int    fewerPackets = 0;
#ifdef HAVE_PK_CALLBACKS
    int    pkCallbacks  = 0;
    PkCbInfo pkCbInfo;
#endif
    int    wc_shutdown     = 0;
    int    resume = 0;
    int    resumeCount = 0;
    int    loops = 1;
    int    cnt = 0;
    int    echoData = 0;
    int    block = TEST_BUFFER_SIZE;
    int    throughput = 0;
    int    minDhKeyBits  = DEFAULT_MIN_DHKEY_BITS;
    short  minRsaKeyBits = DEFAULT_MIN_RSAKEY_BITS;
    short  minEccKeyBits = DEFAULT_MIN_ECCKEY_BITS;
    int    doListen = 1;
    int    crlFlags = 0;
    int    ret;
    int    err = 0;
    char*  serverReadyFile = NULL;
    char*  alpnList = NULL;
    unsigned char alpn_opt = 0;
    char*  cipherList = NULL;
    int    useDefCipherList = 0;
    int    overrideDateErrors = 0;
    const char* verifyCert = cliCertFile;
    const char* ourCert    = svrCertFile;
    const char* ourKey     = svrKeyFile;
    const char* ourDhParam = dhParamFile;
    tcp_ready*  readySignal = NULL;
    int    argc = ((func_args*)args)->argc;
    char** argv = ((func_args*)args)->argv;

#ifdef WOLFSSL_TRUST_PEER_CERT
    const char* trustCert  = NULL;
#endif

#ifndef NO_PSK
    int sendPskIdentityHint = 1;
#endif

#ifdef HAVE_SNI
    char*  sniHostName = NULL;
#endif

#ifdef HAVE_TRUSTED_CA
    int trustedCaKeyId = 0;
#endif /* HAVE_TRUSTED_CA */

#ifdef HAVE_OCSP
    int    useOcsp  = 0;
    char*  ocspUrl  = NULL;
#endif

#ifdef HAVE_WNR
    const char* wnrConfigFile = wnrConfig;
#endif
    char buffer[WOLFSSL_MAX_ERROR_SZ];
#ifdef WOLFSSL_TLS13
    int noPskDheKe = 0;
#endif
    int updateKeysIVs = 0;
    int postHandAuth = 0;
#ifdef WOLFSSL_EARLY_DATA
    int earlyData = 0;
#endif
#ifdef HAVE_SECURE_RENEGOTIATION
    int scr = 0;
    int forceScr = 0;
#endif /* HAVE_SECURE_RENEGOTIATION */
#ifdef WOLFSSL_SEND_HRR_COOKIE
    int hrrCookie = 0;
#endif
    byte mcastID = 0;
#if !defined(NO_DH) && !defined(HAVE_FIPS) && \
    !defined(HAVE_SELFTEST) && !defined(WOLFSSL_OLD_PRIME_CHECK)
    int doDhKeyCheck = 1;
#endif

#ifdef WOLFSSL_STATIC_MEMORY
    #if (defined(HAVE_ECC) && !defined(ALT_ECC_SIZE)) \
        || defined(SESSION_CERTS)
        /* big enough to handle most cases including session certs */
        byte memory[204000];
    #else
        byte memory[80000];
    #endif
    byte memoryIO[34500]; /* max for IO buffer (TLS packet can be 16k) */
    WOLFSSL_MEM_CONN_STATS ssl_stats;
    #ifdef DEBUG_WOLFSSL
        WOLFSSL_MEM_STATS mem_stats;
    #endif
#endif
#ifdef WOLFSSL_TLS13
    int onlyKeyShare = 0;
    int noTicket = 0;
#endif
    int useX25519 = 0;
    int exitWithRet = 0;
    int loadCertKeyIntoSSLObj = 0;

#ifdef HAVE_ENCRYPT_THEN_MAC
    int disallowETM = 0;
#endif

    ((func_args*)args)->return_code = -1; /* error state */

#ifdef NO_RSA
    #ifdef HAVE_ECC
        verifyCert = (char*)cliEccCertFile;
        ourCert    = (char*)eccCertFile;
        ourKey     = (char*)eccKeyFile;
    #elif defined(HAVE_ED25519)
        verifyCert = (char*)cliEdCertFile;
        ourCert    = (char*)edCertFile;
        ourKey     = (char*)edKeyFile;
    #endif
#endif

    (void)needDH;
    (void)ourKey;
    (void)ourCert;
    (void)ourDhParam;
    (void)verifyCert;
    (void)useNtruKey;
    (void)doCliCertCheck;
    (void)minDhKeyBits;
    (void)minRsaKeyBits;
    (void)minEccKeyBits;
    (void)alpnList;
    (void)alpn_opt;
    (void)crlFlags;
    (void)readySignal;
    (void)updateKeysIVs;
    (void)postHandAuth;
    (void)mcastID;
    (void)loadCertKeyIntoSSLObj;
    (void)overrideDateErrors;

#ifdef WOLFSSL_TIRTOS
    fdOpenSession(Task_self());
#endif

#ifdef WOLFSSL_VXWORKS
    useAnyAddr = 1;
#else
    /* Not Used: h, z, F, T, V, W, X */
    while ((ch = mygetopt(argc, argv, "?:"
                "abc:defgijk:l:mnop:q:rstuv:wxy"
                "A:B:C:D:E:GH:IJKL:MNO:PQR:S:TUVYZ:"
                "01:23:4:5")) != -1) {
        switch (ch) {
            case '?' :
                if(myoptarg!=NULL) {
                    lng_index = atoi(myoptarg);
                    if(lng_index<0||lng_index>1){
                        lng_index = 0;
                    }
                }
                Usage();
                XEXIT_T(EXIT_SUCCESS);

            case 'x' :
                runWithErrors = 1;
                break;

            case 'd' :
                doCliCertCheck = 0;
                break;

            case 'V' :
                #ifdef HAVE_CRL
                    disableCRL = 1;
                #endif
                break;

            case 'b' :
                useAnyAddr = 1;
                break;

            case 's' :
                usePsk = 1;
                break;

            case 'j' :
                usePskPlus = 1;
                break;

            case 'n' :
                useNtruKey = 1;
                break;

            case 'u' :
                doDTLS  = 1;
                dtlsUDP = 1;
                break;

            case 'G' :
            #ifdef WOLFSSL_SCTP
                doDTLS  = 1;
                dtlsSCTP = 1;
            #endif
                break;

            case 'f' :
                fewerPackets = 1;
                break;

            case 'R' :
                serverReadyFile = myoptarg;
                break;

            case 'r' :
                #ifndef NO_SESSION_CACHE
                    resume = 1;
                #endif
                break;

            case 'P' :
            #ifdef HAVE_PK_CALLBACKS
                pkCallbacks = 1;
            #endif
                break;

            case 'p' :
                port = (word16)atoi(myoptarg);
                break;

            case 'w' :
                wc_shutdown = 1;
                break;

            case 'v' :
                if (myoptarg[0] == 'd') {
                    version = SERVER_DOWNGRADE_VERSION;
                    break;
                }
            #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
                else if (myoptarg[0] == 'e') {
                    version = EITHER_DOWNGRADE_VERSION;
                #ifndef NO_CERTS
                    loadCertKeyIntoSSLObj = 1;
                #endif
                    break;
                }
            #endif
                version = atoi(myoptarg);
                if (version < 0 || version > 4) {
                    Usage();
                    XEXIT_T(MY_EX_USAGE);
                }
                break;

            case 'l' :
                cipherList = myoptarg;
                break;

            case 'H' :
                if (XSTRNCMP(myoptarg, "defCipherList", 13) == 0) {
                    printf("Using default cipher list for testing\n");
                    useDefCipherList = 1;
                }
                else if (XSTRNCMP(myoptarg, "exitWithRet", 11) == 0) {
                    printf("Skip exit() for testing\n");
                    exitWithRet = 1;
                }
                else if (XSTRNCMP(myoptarg, "verifyFail", 10) == 0) {
                    printf("Verify should fail\n");
                    myVerifyFail = 1;
                }
                else if (XSTRNCMP(myoptarg, "loadSSL", 7) == 0) {
                    printf("Also load cert/key into wolfSSL object\n");
                #ifndef NO_CERTS
                    loadCertKeyIntoSSLObj = 2;
                #endif
                }
                else if (XSTRNCMP(myoptarg, "loadSSLOnly", 11) == 0) {
                    printf("Only load cert/key into wolfSSL object\n");
                #ifndef NO_CERTS
                    loadCertKeyIntoSSLObj = 1;
                #endif
                }
                else if (XSTRNCMP(myoptarg, "disallowETM", 11) == 0) {
                    printf("Disallow Encrypt-Then-MAC\n");
                #ifdef HAVE_ENCRYPT_THEN_MAC
                    disallowETM = 1;
                #endif
                }
                else if (XSTRNCMP(myoptarg, "overrideDateErr", 15) == 0) {
                #if !defined(NO_FILESYSTEM) && !defined(NO_CERTS)
                    overrideDateErrors = 1;
                #endif
                }
                else {
                    Usage();
                    XEXIT_T(MY_EX_USAGE);
                }
                break;

            case 'A' :
                verifyCert = myoptarg;
                break;

            case 'c' :
                ourCert = myoptarg;
                break;

            case 'k' :
                ourKey = myoptarg;
                break;

            case 'D' :
                #ifndef NO_DH
                    ourDhParam = myoptarg;
                #endif
                break;

            case 'Z' :
                #ifndef NO_DH
                    minDhKeyBits = atoi(myoptarg);
                    if (minDhKeyBits <= 0 || minDhKeyBits > 16000) {
                        Usage();
                        XEXIT_T(MY_EX_USAGE);
                    }
                #endif
                break;

            case 'N':
                nonBlocking = 1;
                break;

            case 'S' :
                #ifdef HAVE_SNI
                    sniHostName = myoptarg;
                #endif
                break;

            case 'o' :
                #ifdef HAVE_OCSP
                    useOcsp = 1;
                #endif
                break;

            case 'O' :
                #ifdef HAVE_OCSP
                    useOcsp = 1;
                    ocspUrl = myoptarg;
                #endif
                break;

            case 'a' :
                #ifdef HAVE_ANON
                    useAnon = 1;
                #endif
                break;
            case 'I':
                #ifndef NO_PSK
                    sendPskIdentityHint = 0;
                #endif
                break;

            case 'L' :
                #ifdef HAVE_ALPN
                    alpnList = myoptarg;

                    if (alpnList[0] == 'C' && alpnList[1] == ':')
                        alpn_opt = WOLFSSL_ALPN_CONTINUE_ON_MISMATCH;
                    else if (alpnList[0] == 'F' && alpnList[1] == ':')
                        alpn_opt = WOLFSSL_ALPN_FAILED_ON_MISMATCH;
                    else {
                        Usage();
                        XEXIT_T(MY_EX_USAGE);
                    }

                    alpnList += 2;

                #endif
                break;

            case 'i' :
                loops = -1;
                break;

            case 'C' :
                loops = atoi(myoptarg);
                if (loops <= 0) {
                    Usage();
                    XEXIT_T(MY_EX_USAGE);
                }
                break;

            case 'e' :
                echoData = 1;
                break;

            case 'B':
                throughput = atoi(myoptarg);
                for (; *myoptarg != '\0'; myoptarg++) {
                    if (*myoptarg == ',') {
                        block = atoi(myoptarg + 1);
                        break;
                    }
                }
                if (throughput <= 0 || block <= 0) {
                    Usage();
                    XEXIT_T(MY_EX_USAGE);
                }
                break;

            #ifdef WOLFSSL_TRUST_PEER_CERT
            case 'E' :
                 trustCert = myoptarg;
                break;
            #endif

            case 'q' :
                #ifdef HAVE_WNR
                    wnrConfigFile = myoptarg;
                #endif
                break;

            case 'g' :
                useWebServerMsg = 1;
                break;

            case 'y' :
                #if defined(WOLFSSL_TLS13) && !defined(NO_DH)
                    onlyKeyShare = 1;
                #endif
                break;

            case 'Y' :
                #if defined(WOLFSSL_TLS13) && defined(HAVE_ECC)
                    onlyKeyShare = 2;
                #endif
                break;

            case 't' :
                #ifdef HAVE_CURVE25519
                    useX25519 = 1;
                    #if defined(WOLFSSL_TLS13) && defined(HAVE_ECC)
                        onlyKeyShare = 2;
                    #endif
                #endif
                break;

            case 'K' :
                #ifdef WOLFSSL_TLS13
                    noPskDheKe = 1;
                #endif
                break;

            case 'T' :
                #if defined(WOLFSSL_TLS13) && defined(HAVE_SESSION_TICKET)
                    noTicket = 1;
                #endif
                break;

            case 'U' :
                #ifdef WOLFSSL_TLS13
                    updateKeysIVs = 1;
                #endif
                break;

            case 'Q' :
            #if defined(WOLFSSL_TLS13) && defined(WOLFSSL_POST_HANDSHAKE_AUTH)
                postHandAuth = 1;
                doCliCertCheck = 0;
            #endif
                break;

            case 'J' :
            #ifdef WOLFSSL_SEND_HRR_COOKIE
                hrrCookie = 1;
            #endif
                break;

            case 'M' :
            #ifdef HAVE_SECURE_RENEGOTIATION
                scr = 1;
            #endif /* HAVE_SECURE_RENEGOTIATION */
                break;

            case 'm' :
            #ifdef HAVE_SECURE_RENEGOTIATION
                scr = 1;
                forceScr = 1;
            #endif /* HAVE_SECURE_RENEGOTIATION */
                break;

            case '0' :
            #ifdef WOLFSSL_EARLY_DATA
                earlyData = 1;
            #endif
                break;

            case '1' :
                lng_index = atoi(myoptarg);
                if(lng_index<0||lng_index>1){
                    lng_index = 0;
                }
                break;

            case '2' :
               #if !defined(NO_DH) && !defined(HAVE_FIPS) && \
                   !defined(HAVE_SELFTEST) && !defined(WOLFSSL_OLD_PRIME_CHECK)
                    doDhKeyCheck = 0;
                #endif
                break;

            case '3' :
                #ifdef WOLFSSL_MULTICAST
                    doMcast = 1;
                    mcastID = (byte)(atoi(myoptarg) & 0xFF);
                #endif
                break;

            case '4' :
                #ifdef WOLFSSL_DTLS
                    XMEMSET(&dtlsCtx, 0, sizeof(dtlsCtx));
                    doBlockSeq = 1;
                    dtlsCtx.blockSeq = atoi(myoptarg);
                #endif
                    break;

            case '5' :
            #ifdef HAVE_TRUSTED_CA
                trustedCaKeyId = 1;
            #endif /* HAVE_TRUSTED_CA */
                break;

            default:
                Usage();
                XEXIT_T(MY_EX_USAGE);
        }
    }

    myoptind = 0;      /* reset for test cases */
#endif /* !WOLFSSL_VXWORKS */

    /* Can only use DTLS over UDP or SCTP, can't do both. */
    if (dtlsUDP && dtlsSCTP) {
        err_sys_ex(runWithErrors, "Cannot use DTLS with both UDP and SCTP.");
    }

    /* sort out DTLS versus TLS versions */
    if (version == CLIENT_INVALID_VERSION) {
        if (doDTLS)
            version = CLIENT_DTLS_DEFAULT_VERSION;
        else
            version = CLIENT_DEFAULT_VERSION;
    }
    else {
        if (doDTLS) {
            if (version == 3)
                version = -2;
        #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
            else if (version == EITHER_DOWNGRADE_VERSION)
                version = -3;
        #endif
            else
                version = -1;
        }
    }

#ifdef HAVE_WNR
    if (wc_InitNetRandom(wnrConfigFile, NULL, 5000) != 0)
        err_sys_ex(runWithErrors, "can't load whitewood net random config file");
#endif

    switch (version) {
#ifndef NO_OLD_TLS
    #ifdef WOLFSSL_ALLOW_SSLV3
        case 0:
            method = wolfSSLv3_server_method_ex;
            break;
    #endif

    #ifndef NO_TLS
        #ifdef WOLFSSL_ALLOW_TLSV10
        case 1:
            method = wolfTLSv1_server_method_ex;
            break;
        #endif

        case 2:
            method = wolfTLSv1_1_server_method_ex;
            break;
    #endif /* !NO_TLS */
#endif /* !NO_OLD_TLS */

#ifndef NO_TLS
    #ifndef WOLFSSL_NO_TLS12
        case 3:
            method = wolfTLSv1_2_server_method_ex;
            break;
    #endif

    #ifdef WOLFSSL_TLS13
        case 4:
            method = wolfTLSv1_3_server_method_ex;
            break;
    #endif

        case SERVER_DOWNGRADE_VERSION:
            method = wolfSSLv23_server_method_ex;
            break;
    #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
        case EITHER_DOWNGRADE_VERSION:
            method = wolfSSLv23_method_ex;
            break;
    #endif
#endif /* NO_TLS */

#ifdef WOLFSSL_DTLS
    #ifndef NO_OLD_TLS
        case -1:
            method = wolfDTLSv1_server_method_ex;
            break;
    #endif

    #ifndef WOLFSSL_NO_TLS12
        case -2:
            method = wolfDTLSv1_2_server_method_ex;
            break;
    #endif
    #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
        case -3:
            method = wolfDTLSv1_2_method_ex;
            break;
    #endif
#endif

        default:
            err_sys_ex(runWithErrors, "Bad SSL version");
    }

    if (method == NULL)
        err_sys_ex(runWithErrors, "unable to get method");

#ifdef WOLFSSL_STATIC_MEMORY
    #ifdef DEBUG_WOLFSSL
    /* print off helper buffer sizes for use with static memory
     * printing to stderr incase of debug mode turned on */
    fprintf(stderr, "static memory management size = %d\n",
            wolfSSL_MemoryPaddingSz());
    fprintf(stderr, "calculated optimum general buffer size = %d\n",
            wolfSSL_StaticBufferSz(memory, sizeof(memory), 0));
    fprintf(stderr, "calculated optimum IO buffer size      = %d\n",
            wolfSSL_StaticBufferSz(memoryIO, sizeof(memoryIO),
                                                  WOLFMEM_IO_POOL_FIXED));
    #endif /* DEBUG_WOLFSSL */

    if (wolfSSL_CTX_load_static_memory(&ctx, method, memory, sizeof(memory),0,1)
            != WOLFSSL_SUCCESS)
        err_sys_ex(runWithErrors, "unable to load static memory and create ctx");

    /* load in a buffer for IO */
    if (wolfSSL_CTX_load_static_memory(&ctx, NULL, memoryIO, sizeof(memoryIO),
                                 WOLFMEM_IO_POOL_FIXED | WOLFMEM_TRACK_STATS, 1)
            != WOLFSSL_SUCCESS)
        err_sys_ex(runWithErrors, "unable to load static memory and create ctx");
#else
    ctx = SSL_CTX_new(method(NULL));
#endif /* WOLFSSL_STATIC_MEMORY */
    if (ctx == NULL)
        err_sys_ex(runWithErrors, "unable to get ctx");

#if defined(HAVE_SESSION_TICKET) && defined(HAVE_CHACHA) && \
                                    defined(HAVE_POLY1305)
    if (TicketInit() != 0)
        err_sys_ex(runWithErrors, "unable to setup Session Ticket Key context");
    wolfSSL_CTX_set_TicketEncCb(ctx, myTicketEncCb);
#endif

    if (cipherList && !useDefCipherList) {
        if (SSL_CTX_set_cipher_list(ctx, cipherList) != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "server can't set cipher list 1");
    }

#ifdef WOLFSSL_LEANPSK
    if (!usePsk) {
        usePsk = 1;
    }
#endif

#if defined(NO_RSA) && !defined(HAVE_ECC) && !defined(HAVE_ED25519)
    if (!usePsk) {
        usePsk = 1;
    }
#endif

    if (fewerPackets)
        wolfSSL_CTX_set_group_messages(ctx);

#ifdef WOLFSSL_SCTP
    if (dtlsSCTP)
        wolfSSL_CTX_dtls_set_sctp(ctx);
#endif

#ifdef WOLFSSL_ENCRYPTED_KEYS
    SSL_CTX_set_default_passwd_cb(ctx, PasswordCallBack);
#endif

#if !defined(NO_CERTS)
    if ((!usePsk || usePskPlus) && !useAnon && !(loadCertKeyIntoSSLObj == 1)) {
    #ifndef TEST_LOAD_BUFFER
        if (SSL_CTX_use_certificate_chain_file(ctx, ourCert)
                                         != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "can't load server cert file, check file and run from"
                    " wolfSSL home dir");
    #else
        /* loads cert chain file using buffer API */
        load_buffer(ctx, ourCert, WOLFSSL_CERT_CHAIN);
    #endif
    }
#endif

#ifndef NO_DH
    if (wolfSSL_CTX_SetMinDhKey_Sz(ctx, (word16)minDhKeyBits) != WOLFSSL_SUCCESS) {
        err_sys_ex(runWithErrors, "Error setting minimum DH key size");
    }
#endif
#ifndef NO_RSA
    if (wolfSSL_CTX_SetMinRsaKey_Sz(ctx, minRsaKeyBits) != WOLFSSL_SUCCESS){
        err_sys_ex(runWithErrors, "Error setting minimum RSA key size");
    }
#endif
#ifdef HAVE_ECC
    if (wolfSSL_CTX_SetMinEccKey_Sz(ctx, minEccKeyBits) != WOLFSSL_SUCCESS){
        err_sys_ex(runWithErrors, "Error setting minimum ECC key size");
    }
#endif

#ifdef HAVE_NTRU
    if (useNtruKey) {
        if (wolfSSL_CTX_use_NTRUPrivateKey_file(ctx, ourKey)
                                != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "can't load ntru key file, "
                    "Please run from wolfSSL home dir");
    }
#endif
#if !defined(NO_CERTS)
    #ifdef HAVE_PK_CALLBACKS
        pkCbInfo.ourKey = ourKey;
    #endif
    if (!useNtruKey && (!usePsk || usePskPlus) && !useAnon
        && !(loadCertKeyIntoSSLObj == 1)
    #if defined(HAVE_PK_CALLBACKS) && defined(TEST_PK_PRIVKEY)
        && !pkCallbacks
    #endif /* HAVE_PK_CALLBACKS && TEST_PK_PRIVKEY */
    ) {
    #ifndef TEST_LOAD_BUFFER
        if (SSL_CTX_use_PrivateKey_file(ctx, ourKey, WOLFSSL_FILETYPE_PEM)
                                         != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "can't load server private key file, check file and run "
                "from wolfSSL home dir");
    #else
        /* loads private key file using buffer API */
        load_buffer(ctx, ourKey, WOLFSSL_KEY);
    #endif
    }
#endif

    if (usePsk || usePskPlus) {
#ifndef NO_PSK
        SSL_CTX_set_psk_server_callback(ctx, my_psk_server_cb);
    #ifdef WOLFSSL_TLS13
        wolfSSL_CTX_set_psk_server_tls13_callback(ctx, my_psk_server_tls13_cb);
    #endif

        if (sendPskIdentityHint == 1)
            SSL_CTX_use_psk_identity_hint(ctx, "cyassl server");

        if (cipherList == NULL && !usePskPlus) {
            const char *defaultCipherList;
        #if defined(HAVE_AESGCM) && !defined(NO_DH)
            #ifdef WOLFSSL_TLS13
                defaultCipherList = "DHE-PSK-AES128-GCM-SHA256:"
                                    "TLS13-AES128-GCM-SHA256";
            #else
                defaultCipherList = "DHE-PSK-AES128-GCM-SHA256";
            #endif
                needDH = 1;
        #elif defined(HAVE_NULL_CIPHER)
                defaultCipherList = "PSK-NULL-SHA256";
        #else
                defaultCipherList = "PSK-AES128-CBC-SHA256";
        #endif
            if (SSL_CTX_set_cipher_list(ctx, defaultCipherList) != WOLFSSL_SUCCESS)
                err_sys_ex(runWithErrors, "server can't set cipher list 2");
        }
#endif
    }


#ifdef HAVE_ECC
    /* Use ECDHE key size that matches long term key.
     * Zero means use ctx->privateKeySz.
     * Default ECDHE_SIZE is 32 bytes
     */
    if (wolfSSL_CTX_SetTmpEC_DHE_Sz(ctx, 0) != WOLFSSL_SUCCESS){
        err_sys_ex(runWithErrors, "Error setting ECDHE size");
    }
#endif

    if (useAnon) {
#ifdef HAVE_ANON
        wolfSSL_CTX_allow_anon_cipher(ctx);
        if (cipherList == NULL || (cipherList && useDefCipherList)) {
            const char* defaultCipherList;
            defaultCipherList = "ADH-AES256-GCM-SHA384:"
                                "ADH-AES128-SHA";
            if (SSL_CTX_set_cipher_list(ctx, defaultCipherList)
                                                            != WOLFSSL_SUCCESS)
                err_sys_ex(runWithErrors, "server can't set cipher list 4");
        }
#endif
    }

#if !defined(NO_FILESYSTEM) && !defined(NO_CERTS)
    /* if not using PSK, verify peer with certs
       if using PSK Plus then verify peer certs except PSK suites */
    if (doCliCertCheck && (usePsk == 0 || usePskPlus) && useAnon == 0) {
        unsigned int verify_flags = 0;
        SSL_CTX_set_verify(ctx, WOLFSSL_VERIFY_PEER |
                            (usePskPlus ? WOLFSSL_VERIFY_FAIL_EXCEPT_PSK :
                                WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT),
                            overrideDateErrors == 1 ? myDateCb : NULL);

    #ifdef TEST_BEFORE_DATE
        verify_flags |= WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY;
    #endif

        if (wolfSSL_CTX_load_verify_locations_ex(ctx, verifyCert, 0, verify_flags) != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
        #ifdef WOLFSSL_TRUST_PEER_CERT
        if (trustCert) {
            if ((ret = wolfSSL_CTX_trust_peer_cert(ctx, trustCert,
                                            WOLFSSL_FILETYPE_PEM)) != WOLFSSL_SUCCESS) {
                err_sys_ex(runWithErrors, "can't load trusted peer cert file");
            }
        }
        #endif /* WOLFSSL_TRUST_PEER_CERT */
   }
#endif

#if defined(WOLFSSL_SNIFFER)
    /* don't use EDH, can't sniff tmp keys */
    if (cipherList == NULL) {
        if (SSL_CTX_set_cipher_list(ctx, "AES128-SHA") != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "server can't set cipher list 3");
    }
#endif

#ifdef HAVE_SNI
    if (sniHostName)
        if (wolfSSL_CTX_UseSNI(ctx, WOLFSSL_SNI_HOST_NAME, sniHostName,
                    (word16) XSTRLEN(sniHostName)) != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "UseSNI failed");
#endif

#ifdef USE_WINDOWS_API
    if (port == 0) {
        /* Generate random port for testing */
        port = GetRandomPort();
    }
#endif /* USE_WINDOWS_API */

#ifdef WOLFSSL_ASYNC_CRYPT
    ret = wolfAsync_DevOpen(&devId);
    if (ret < 0) {
        printf("Async device open failed\nRunning without async\n");
    }
    wolfSSL_CTX_UseAsync(ctx, devId);
#endif /* WOLFSSL_ASYNC_CRYPT */

#ifdef WOLFSSL_TLS13
    if (noPskDheKe)
        wolfSSL_CTX_no_dhe_psk(ctx);
    if (noTicket)
        wolfSSL_CTX_no_ticket_TLSv13(ctx);
#endif

    while (1) {
        /* allow resume option */
        if (resumeCount > 1) {
            if (dtlsUDP == 0) {
                SOCKADDR_IN_T client;
                socklen_t client_len = sizeof(client);
                clientfd = accept(sockfd, (struct sockaddr*)&client,
                                 (ACCEPT_THIRD_T)&client_len);
            }
            else {
                tcp_listen(&sockfd, &port, useAnyAddr, dtlsUDP, dtlsSCTP);
                clientfd = sockfd;
            }
            if (WOLFSSL_SOCKET_IS_INVALID(clientfd)) {
                err_sys_ex(runWithErrors, "tcp accept failed");
            }
        }
#if defined(WOLFSSL_STATIC_MEMORY) && defined(DEBUG_WOLFSSL)
        fprintf(stderr, "Before creating SSL\n");
        if (wolfSSL_CTX_is_static_memory(ctx, &mem_stats) != 1)
            err_sys_ex(runWithErrors, "ctx not using static memory");
        if (wolfSSL_PrintStats(&mem_stats) != 1) /* function in test.h */
            err_sys_ex(runWithErrors, "error printing out memory stats");
#endif

    if (doMcast) {
#ifdef WOLFSSL_MULTICAST
        wolfSSL_CTX_mcast_set_member_id(ctx, mcastID);
        if (wolfSSL_CTX_set_cipher_list(ctx, "WDM-NULL-SHA256") != WOLFSSL_SUCCESS)
            err_sys("Couldn't set multicast cipher list.");
#endif
    }

    if (doDTLS && dtlsUDP) {
#ifdef WOLFSSL_DTLS
        if (doBlockSeq) {
            wolfSSL_CTX_SetIOSend(ctx, TestEmbedSendTo);
        }
#endif
    }

#ifdef HAVE_PK_CALLBACKS
        if (pkCallbacks)
            SetupPkCallbacks(ctx);
#endif

        ssl = SSL_new(ctx);
        if (ssl == NULL)
            err_sys_ex(runWithErrors, "unable to get SSL");
        #ifdef OPENSSL_EXTRA
        wolfSSL_KeepArrays(ssl);
        #endif

    /* Support for loading private key and cert using WOLFSSL object */
#if !defined(NO_CERTS)
    if ((!usePsk || usePskPlus) && !useAnon && loadCertKeyIntoSSLObj) {
    #ifndef TEST_LOAD_BUFFER
        if (SSL_use_certificate_chain_file(ssl, ourCert)
                                         != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "can't load server cert file, check file and run from"
                    " wolfSSL home dir");
    #else
        /* loads cert chain file using buffer API */
        load_ssl_buffer(ssl, ourCert, WOLFSSL_CERT_CHAIN);
    #endif
    }

    if (!useNtruKey && (!usePsk || usePskPlus) && !useAnon && loadCertKeyIntoSSLObj
    #if defined(HAVE_PK_CALLBACKS) && defined(TEST_PK_PRIVKEY)
        && !pkCallbacks
    #endif /* HAVE_PK_CALLBACKS && TEST_PK_PRIVKEY */
    ) {
    #ifndef TEST_LOAD_BUFFER
        if (SSL_use_PrivateKey_file(ssl, ourKey, WOLFSSL_FILETYPE_PEM)
                                         != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "can't load server private key file, check file and run "
                "from wolfSSL home dir");
    #else
        /* loads private key file using buffer API */
        load_ssl_buffer(ssl, ourKey, WOLFSSL_KEY);
    #endif
    }
#endif /* !NO_CERTS */

#ifdef WOLFSSL_SEND_HRR_COOKIE
        if (hrrCookie && wolfSSL_send_hrr_cookie(ssl, NULL, 0) != WOLFSSL_SUCCESS) {
            err_sys("unable to set use of cookie with HRR msg");
        }
#endif

#if defined(WOLFSSL_STATIC_MEMORY) && defined(DEBUG_WOLFSSL)
        fprintf(stderr, "After creating SSL\n");
        if (wolfSSL_CTX_is_static_memory(ctx, &mem_stats) != 1)
            err_sys_ex(runWithErrors, "ctx not using static memory");
        if (wolfSSL_PrintStats(&mem_stats) != 1) /* function in test.h */
            err_sys_ex(runWithErrors, "error printing out memory stats");
#endif

    if (doMcast) {
#ifdef WOLFSSL_MULTICAST
        byte pms[512];
        byte cr[32];
        byte sr[32];
        const byte suite[2] = {0, 0xfe};  /* WDM_WITH_NULL_SHA256 */

        XMEMSET(pms, 0x23, sizeof(pms));
        XMEMSET(cr, 0xA5, sizeof(cr));
        XMEMSET(sr, 0x5A, sizeof(sr));

        if (wolfSSL_set_secret(ssl, 1, pms, sizeof(pms), cr, sr, suite)
                != WOLFSSL_SUCCESS)
            err_sys("unable to set mcast secret");
#endif
    }

#ifdef HAVE_SECURE_RENEGOTIATION
        if (scr) {
            if (wolfSSL_UseSecureRenegotiation(ssl) != WOLFSSL_SUCCESS) {
                err_sys_ex(runWithErrors, "can't enable secure renegotiation");
            }
        }
#endif /* HAVE_SECURE_RENEGOTIATION */

#ifndef NO_HANDSHAKE_DONE_CB
        wolfSSL_SetHsDoneCb(ssl, myHsDoneCb, NULL);
#endif
#ifdef HAVE_CRL
    if (!disableCRL) {
#ifdef HAVE_CRL_MONITOR
        crlFlags = WOLFSSL_CRL_MONITOR | WOLFSSL_CRL_START_MON;
#endif
        if (wolfSSL_EnableCRL(ssl, 0) != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "unable to enable CRL");
        if (wolfSSL_LoadCRL(ssl, crlPemDir, WOLFSSL_FILETYPE_PEM, crlFlags)
                                                                 != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "unable to load CRL");
        if (wolfSSL_SetCRL_Cb(ssl, CRL_CallBack) != WOLFSSL_SUCCESS)
            err_sys_ex(runWithErrors, "unable to set CRL callback url");
    }
#endif
#ifdef HAVE_OCSP
        if (useOcsp) {
            if (ocspUrl != NULL) {
                wolfSSL_CTX_SetOCSP_OverrideURL(ctx, ocspUrl);
                wolfSSL_CTX_EnableOCSP(ctx, WOLFSSL_OCSP_NO_NONCE
                                                   | WOLFSSL_OCSP_URL_OVERRIDE);
            }
            else
                wolfSSL_CTX_EnableOCSP(ctx, WOLFSSL_OCSP_NO_NONCE);
        }
#ifndef NO_RSA
    /* All the OSCP Stapling test certs are RSA. */
#if defined(HAVE_CERTIFICATE_STATUS_REQUEST) \
    || defined(HAVE_CERTIFICATE_STATUS_REQUEST_V2)
            if (wolfSSL_CTX_EnableOCSPStapling(ctx) != WOLFSSL_SUCCESS)
                err_sys_ex(runWithErrors, "can't enable OCSP Stapling Certificate Manager");
            if (SSL_CTX_load_verify_locations(ctx, "certs/ocsp/intermediate1-ca-cert.pem", 0) != WOLFSSL_SUCCESS)
                err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
            if (SSL_CTX_load_verify_locations(ctx, "certs/ocsp/intermediate2-ca-cert.pem", 0) != WOLFSSL_SUCCESS)
                err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
            if (SSL_CTX_load_verify_locations(ctx, "certs/ocsp/intermediate3-ca-cert.pem", 0) != WOLFSSL_SUCCESS)
                err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
#endif /* HAVE_CERTIFICATE_STATUS_REQUEST HAVE_CERTIFICATE_STATUS_REQUEST_V2 */
#endif /* NO_RSA */
#endif /* HAVE_OCSP */

#ifdef HAVE_PK_CALLBACKS
        if (pkCallbacks)
            SetupPkCallbackContexts(ssl, &pkCbInfo);
#endif

    #ifdef WOLFSSL_TLS13
        if (version >= 4) {
            WOLFSSL_START(WC_FUNC_CLIENT_KEY_EXCHANGE_DO);
            if (onlyKeyShare == 2) {
                if (useX25519 == 1) {
        #ifdef HAVE_CURVE25519
                    int groups[1] = { WOLFSSL_ECC_X25519 };

                    if (wolfSSL_UseKeyShare(ssl, WOLFSSL_ECC_X25519)
                                                           != WOLFSSL_SUCCESS) {
                        err_sys("unable to use curve x25519");
                    }
                    if (wolfSSL_set_groups(ssl, groups, 1) != WOLFSSL_SUCCESS) {
                        err_sys("unable to set groups: x25519");
                    }
        #endif
                }
                else
                {
        #ifdef HAVE_ECC
            #if !defined(NO_ECC256) || defined(HAVE_ALL_CURVES)
                    int groups[1] = { WOLFSSL_ECC_SECP256R1 };

                    if (wolfSSL_UseKeyShare(ssl, WOLFSSL_ECC_SECP256R1)
                                                           != WOLFSSL_SUCCESS) {
                        err_sys("unable to use curve secp256r1");
                    }
                    if (wolfSSL_set_groups(ssl, groups, 1) != WOLFSSL_SUCCESS) {
                        err_sys("unable to set groups: secp256r1");
                    }
            #endif
        #endif
                }
            }
            else if (onlyKeyShare == 1) {
        #ifdef HAVE_FFDHE_2048
                int groups[1] = { WOLFSSL_FFDHE_2048 };

                if (wolfSSL_UseKeyShare(ssl, WOLFSSL_FFDHE_2048)
                                                           != WOLFSSL_SUCCESS) {
                    err_sys("unable to use DH 2048-bit parameters");
                }
                if (wolfSSL_set_groups(ssl, groups, 1) != WOLFSSL_SUCCESS) {
                    err_sys("unable to set groups: DH 2048-bit");
                }
        #endif
            }
            WOLFSSL_END(WC_FUNC_CLIENT_KEY_EXCHANGE_DO);
        }
    #endif

    #ifdef HAVE_ENCRYPT_THEN_MAC
        if (disallowETM)
            wolfSSL_AllowEncryptThenMac(ssl, 0);
    #endif


        /* do accept */
        readySignal = ((func_args*)args)->signal;
        if (readySignal) {
            readySignal->srfName = serverReadyFile;
        }
        tcp_accept(&sockfd, &clientfd, (func_args*)args, port, useAnyAddr,
                       dtlsUDP, dtlsSCTP, serverReadyFile ? 1 : 0, doListen);
        doListen = 0; /* Don't listen next time */

        if (SSL_set_fd(ssl, clientfd) != WOLFSSL_SUCCESS) {
            err_sys_ex(runWithErrors, "error in setting fd");
        }

#ifdef HAVE_TRUSTED_CA
        if (trustedCaKeyId) {
            if (wolfSSL_UseTrustedCA(ssl, WOLFSSL_TRUSTED_CA_PRE_AGREED,
                        NULL, 0) != WOLFSSL_SUCCESS) {
                err_sys_ex(runWithErrors, "UseTrustedCA failed");
            }
        }
#endif /* HAVE_TRUSTED_CA */

#ifdef HAVE_ALPN
        if (alpnList != NULL) {
            printf("ALPN accepted protocols list : %s\n", alpnList);
            wolfSSL_UseALPN(ssl, alpnList, (word32)XSTRLEN(alpnList), alpn_opt);
        }
#endif

#ifdef WOLFSSL_DTLS
        if (doDTLS && dtlsUDP) {
            SOCKADDR_IN_T cliaddr;
            byte          b[1500];
            int           n;
            socklen_t     len = sizeof(cliaddr);

            /* For DTLS, peek at the next datagram so we can get the client's
             * address and set it into the ssl object later to generate the
             * cookie. */
            n = (int)recvfrom(clientfd, (char*)b, sizeof(b), MSG_PEEK,
                              (struct sockaddr*)&cliaddr, &len);
            if (n <= 0)
                err_sys_ex(runWithErrors, "recvfrom failed");

            if (doBlockSeq) {
                XMEMCPY(&dtlsCtx.peer.sa, &cliaddr, len);
                dtlsCtx.peer.sz = len;
                dtlsCtx.wfd = clientfd;
                dtlsCtx.failOnce = 1;

                wolfSSL_SetIOWriteCtx(ssl, &dtlsCtx);
            }
            else {
                wolfSSL_dtls_set_peer(ssl, &cliaddr, len);
            }
        }
#endif
        if ((usePsk == 0 || usePskPlus) || useAnon == 1 || cipherList != NULL
                                                               || needDH == 1) {
            #if !defined(NO_FILESYSTEM) && !defined(NO_DH) && !defined(NO_ASN)
                wolfSSL_SetTmpDH_file(ssl, ourDhParam, WOLFSSL_FILETYPE_PEM);
            #elif !defined(NO_DH)
                SetDH(ssl);  /* repick suites with DHE, higher priority than PSK */
            #endif
#if !defined(NO_DH) && !defined(WOLFSSL_OLD_PRIME_CHECK) && \
    !defined(HAVE_FIPS) && !defined(HAVE_SELFTEST)
            if (!doDhKeyCheck)
                wolfSSL_SetEnableDhKeyTest(ssl, 0);
#endif
        }

#ifndef WOLFSSL_CALLBACKS
        if (nonBlocking) {
            #ifdef WOLFSSL_DTLS
            if (doDTLS) {
                wolfSSL_dtls_set_using_nonblock(ssl, 1);
            }
            #endif
            tcp_set_nonblocking(&clientfd);
        }
#endif

#ifndef WOLFSSL_CALLBACKS
        if (nonBlocking) {
            ret = NonBlockingSSL_Accept(ssl);
        }
        else {
    #ifdef WOLFSSL_EARLY_DATA
            if (earlyData) {
                do {
                    int len;
                    err = 0; /* reset error */
                    ret = wolfSSL_read_early_data(ssl, input, sizeof(input)-1,
                                                                          &len);
                    if (ret != WOLFSSL_SUCCESS) {
                        err = SSL_get_error(ssl, 0);
                    #ifdef WOLFSSL_ASYNC_CRYPT
                        if (err == WC_PENDING_E) {
                            ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
                            if (ret < 0) break;
                        }
                    #endif
                    }
                    if (ret > 0) {
                        input[ret] = 0; /* null terminate message */
                        printf("Early Data Client message: %s\n", input);
                    }
                } while (err == WC_PENDING_E || ret > 0);
            }
    #endif
            do {
                err = 0; /* reset error */
                ret = SSL_accept(ssl);
                if (ret != WOLFSSL_SUCCESS) {
                    err = SSL_get_error(ssl, 0);
                #ifdef WOLFSSL_ASYNC_CRYPT
                    if (err == WC_PENDING_E) {
                        ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
                        if (ret < 0) break;
                    }
                #endif
                }
            } while (err == WC_PENDING_E);
        }
#else
        ret = NonBlockingSSL_Accept(ssl);
#endif
        if (ret != WOLFSSL_SUCCESS) {
            err = SSL_get_error(ssl, 0);
            printf("SSL_accept error %d, %s\n", err,
                                                ERR_error_string(err, buffer));
            if (!exitWithRet) {
                err_sys_ex(runWithErrors, "SSL_accept failed");
            } else {
                /* cleanup */
                SSL_free(ssl); ssl = NULL;
                SSL_CTX_free(ctx); ctx = NULL;
                CloseSocket(clientfd);
                CloseSocket(sockfd);
                ((func_args*)args)->return_code = err;
                goto exit;
            }
        }

        showPeerEx(ssl, lng_index);
        if (SSL_state(ssl) != 0) {
            err_sys_ex(runWithErrors, "SSL in error state");
        }

#ifdef OPENSSL_EXTRA
    {
        byte*  rnd;
        byte*  pt;
        size_t size;

        /* get size of buffer then print */
        size = wolfSSL_get_server_random(NULL, NULL, 0);
        if (size == 0) {
            err_sys_ex(runWithErrors, "error getting server random buffer size");
        }

        rnd = (byte*)XMALLOC(size, NULL, DYNAMIC_TYPE_TMP_BUFFER);
        if (rnd == NULL) {
            err_sys_ex(runWithErrors, "error creating server random buffer");
        }

        size = wolfSSL_get_server_random(ssl, rnd, size);
        if (size == 0) {
            XFREE(rnd, NULL, DYNAMIC_TYPE_TMP_BUFFER);
            err_sys_ex(runWithErrors, "error getting server random buffer");
        }

        printf("Server Random : ");
        pt = rnd;
        if (pt != NULL) {
            for (pt = rnd; pt < rnd + size; pt++) printf("%02X", *pt);
            printf("\n");
        } else {
            err_sys_ex(runWithErrors, "error: attempted to dereference null "
                                                                   "pointer");
        }
        XFREE(rnd, NULL, DYNAMIC_TYPE_TMP_BUFFER);
    }
#endif

#ifdef HAVE_ALPN
        if (alpnList != NULL) {
            char *protocol_name = NULL, *list = NULL;
            word16 protocol_nameSz = 0, listSz = 0;

            err = wolfSSL_ALPN_GetProtocol(ssl, &protocol_name, &protocol_nameSz);
            if (err == WOLFSSL_SUCCESS)
                printf("Sent ALPN protocol : %s (%d)\n",
                       protocol_name, protocol_nameSz);
            else if (err == WOLFSSL_ALPN_NOT_FOUND)
                printf("No ALPN response sent (no match)\n");
            else
                printf("Getting ALPN protocol name failed\n");

            err = wolfSSL_ALPN_GetPeerProtocol(ssl, &list, &listSz);
            if (err == WOLFSSL_SUCCESS)
                printf("List of protocol names sent by Client: %s (%d)\n",
                       list, listSz);
            else
                printf("Get list of client's protocol name failed\n");

            free(list);
        }
#endif

#if !defined(NO_FILESYSTEM) && !defined(NO_CERTS)
    #if defined(WOLFSSL_TLS13) && defined(WOLFSSL_POST_HANDSHAKE_AUTH)
        if (postHandAuth) {
            unsigned int verify_flags = 0;

            SSL_set_verify(ssl, WOLFSSL_VERIFY_PEER |
                                ((usePskPlus) ? WOLFSSL_VERIFY_FAIL_EXCEPT_PSK :
                                WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT), 0);

        #ifdef TEST_BEFORE_DATE
            verify_flags |= WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY;
        #endif

            if (wolfSSL_CTX_load_verify_locations_ex(ctx, verifyCert, 0, verify_flags)
                                                           != WOLFSSL_SUCCESS) {
                err_sys_ex(runWithErrors, "can't load ca file, Please run from "
                                          "wolfSSL home dir");
            }
            #ifdef WOLFSSL_TRUST_PEER_CERT
            if (trustCert) {
                if ((ret = wolfSSL_trust_peer_cert(ssl, trustCert,
                                    WOLFSSL_FILETYPE_PEM)) != WOLFSSL_SUCCESS) {
                    err_sys_ex(runWithErrors, "can't load trusted peer cert "
                                              "file");
                }
            }
            #endif /* WOLFSSL_TRUST_PEER_CERT */
       }
    #endif
#endif

        if (echoData == 0 && throughput == 0) {
            ServerRead(ssl, input, sizeof(input)-1);
            err = SSL_get_error(ssl, 0);
        }

#if defined(HAVE_SECURE_RENEGOTIATION) && \
    defined(HAVE_SERVER_RENEGOTIATION_INFO)
        if (scr && forceScr) {
            if (nonBlocking) {
                printf("not doing secure renegotiation on example with"
                       " nonblocking yet\n");
            } else {
                if (wolfSSL_Rehandshake(ssl) != WOLFSSL_SUCCESS) {
                    printf("not doing secure renegotiation\n");
                }
                else {
                    printf("RENEGOTIATION SUCCESSFUL\n");
                }
            }
        }
#endif /* HAVE_SECURE_RENEGOTIATION */

        if (err == 0 && echoData == 0 && throughput == 0) {
            const char* write_msg;
            int write_msg_sz;

#ifdef WOLFSSL_TLS13
            if (updateKeysIVs)
                wolfSSL_update_keys(ssl);
#endif
#if defined(WOLFSSL_TLS13) && defined(WOLFSSL_POST_HANDSHAKE_AUTH)
            if (postHandAuth)
                wolfSSL_request_certificate(ssl);
#endif

            /* Write data */
            if (!useWebServerMsg) {
                write_msg = msg;
                write_msg_sz = sizeof(msg);
            }
            else {
                write_msg = webServerMsg;
                write_msg_sz = sizeof(webServerMsg);
            }
            ServerWrite(ssl, write_msg, write_msg_sz);

#ifdef WOLFSSL_TLS13
            if (updateKeysIVs || postHandAuth)
                ServerRead(ssl, input, sizeof(input)-1);
#endif
        }
        else if (err == 0 || err == WOLFSSL_ERROR_ZERO_RETURN) {
            ServerEchoData(ssl, clientfd, echoData, block, throughput);
        }

#if defined(WOLFSSL_MDK_SHELL) && defined(HAVE_MDK_RTX)
        os_dly_wait(500) ;
#elif defined (WOLFSSL_TIRTOS)
        Task_yield();
#endif

        if (dtlsUDP == 0) {
            ret = SSL_shutdown(ssl);
            if (wc_shutdown && ret == WOLFSSL_SHUTDOWN_NOT_DONE)
                SSL_shutdown(ssl);    /* bidirectional shutdown */
        }
        /* display collected statistics */
#ifdef WOLFSSL_STATIC_MEMORY
        if (wolfSSL_is_static_memory(ssl, &ssl_stats) != 1)
            err_sys_ex(runWithErrors, "static memory was not used with ssl");

        fprintf(stderr, "\nprint off SSL memory stats\n");
        fprintf(stderr, "*** This is memory state before wolfSSL_free is called\n");
        fprintf(stderr, "peak connection memory = %d\n", ssl_stats.peakMem);
        fprintf(stderr, "current memory in use  = %d\n", ssl_stats.curMem);
        fprintf(stderr, "peak connection allocs = %d\n", ssl_stats.peakAlloc);
        fprintf(stderr, "current connection allocs = %d\n",ssl_stats.curAlloc);
        fprintf(stderr, "total connection allocs   = %d\n",ssl_stats.totalAlloc);
        fprintf(stderr, "total connection frees    = %d\n\n", ssl_stats.totalFr);

#endif
        SSL_free(ssl); ssl = NULL;

        CloseSocket(clientfd);

        if (resume == 1 && resumeCount == 0) {
            resumeCount++;           /* only do one resume for testing */
            continue;
        }
        resumeCount = 0;

        cnt++;
        if (loops > 0 && --loops == 0) {
            break;  /* out of while loop, done with normal and resume option */
        }
    } /* while(1) */

    WOLFSSL_TIME(cnt);
    (void)cnt;

#if defined(HAVE_CERTIFICATE_STATUS_REQUEST) \
 || defined(HAVE_CERTIFICATE_STATUS_REQUEST_V2)
    wolfSSL_CTX_DisableOCSPStapling(ctx);
#endif

    CloseSocket(sockfd);
    SSL_CTX_free(ctx); ctx = NULL;

    ((func_args*)args)->return_code = 0;

exit:

#if defined(HAVE_ECC) && defined(FP_ECC) && defined(HAVE_THREAD_LS) \
                      && (defined(NO_MAIN_DRIVER) || defined(HAVE_STACK_SIZE))
    wc_ecc_fp_free();  /* free per thread cache */
#endif

#ifdef WOLFSSL_TIRTOS
    fdCloseSession(Task_self());
#endif

#if defined(HAVE_SESSION_TICKET) && defined(HAVE_CHACHA) && \
                                    defined(HAVE_POLY1305)
    TicketCleanup();
#endif

#ifdef WOLFSSL_ASYNC_CRYPT
    wolfAsync_DevClose(&devId);
#endif

    /* There are use cases  when these assignments are not read. To avoid
     * potential confusion those warnings have been handled here.
     */
    (void) ourKey;
    (void) verifyCert;
    (void) doCliCertCheck;
    (void) useNtruKey;
    (void) ourDhParam;
    (void) ourCert;
    (void) useX25519;
#ifdef HAVE_SECURE_RENEGOTIATION
    (void) forceScr;
#endif
#ifndef WOLFSSL_TIRTOS
    return 0;
#endif
}

#endif /* !NO_WOLFSSL_SERVER */


/* so overall tests can pull in test function */
#ifndef NO_MAIN_DRIVER

    int main(int argc, char** argv)
    {
        func_args args;
        tcp_ready ready;


        StartTCP();

        args.argc = argc;
        args.argv = argv;
        args.signal = &ready;
        args.return_code = 0;
        InitTcpReady(&ready);

#if defined(DEBUG_WOLFSSL) && !defined(WOLFSSL_MDK_SHELL)
        wolfSSL_Debugging_ON();
#endif
        wolfSSL_Init();
        ChangeToWolfRoot();

#ifndef NO_WOLFSSL_SERVER
#ifdef HAVE_STACK_SIZE
        StackSizeCheck(&args, server_test);
#else
        server_test(&args);
#endif
#else
        printf("Server not compiled in!\n");
#endif

        wolfSSL_Cleanup();
        FreeTcpReady(&ready);

#ifdef HAVE_WNR
    if (wc_FreeNetRandom() < 0)
        err_sys_ex(runWithErrors, "Failed to free netRandom context");
#endif /* HAVE_WNR */

        return args.return_code;
    }

    int myoptind = 0;
    char* myoptarg = NULL;

#endif /* NO_MAIN_DRIVER */
-											Add headers to examples and .i files
										
										
											2011-07-26 13:27:22 -07:00
+								/* server.c
 								 *
-											Updates for v4.0.0
										
										
											2019-03-15 10:37:36 -07:00
+								 * Copyright (C) 2006-2019 wolfSSL Inc.
-											Add headers to examples and .i files
										
										
											2011-07-26 13:27:22 -07:00
+								 *
-											prepare for release v3.9.0
										
										
											2016-03-17 16:02:13 -06:00
+								 * This file is part of wolfSSL.
-											Add headers to examples and .i files
										
										
											2011-07-26 13:27:22 -07:00
+								 *
-											library wide licence update
										
										
											2015-01-06 12:14:15 -07:00
+								 * wolfSSL is free software; you can redistribute it and/or modify
-											Add headers to examples and .i files
										
										
											2011-07-26 13:27:22 -07:00
+								 * it under the terms of the GNU General Public License as published by
 								 * the Free Software Foundation; either version 2 of the License, or
 								 * (at your option) any later version.
 								 *
-											library wide licence update
										
										
											2015-01-06 12:14:15 -07:00
+								 * wolfSSL is distributed in the hope that it will be useful,
-											Add headers to examples and .i files
										
										
											2011-07-26 13:27:22 -07:00
+								 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 								 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 								 * GNU General Public License for more details.
 								 *
 								 * You should have received a copy of the GNU General Public License
 								 * along with this program; if not, write to the Free Software
-											prepare for release v3.9.0
										
										
											2016-03-17 16:02:13 -06:00
+								 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
-											Add headers to examples and .i files
										
										
											2011-07-26 13:27:22 -07:00
+								 */
-											prepare for release v3.9.0
										
										
											2016-03-17 16:02:13 -06:00
-											add check around config.h for non autoconf systems
										
										
											2011-08-24 16:37:16 -07:00
+								#ifdef HAVE_CONFIG_H
 								    #include <config.h>
 								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#include <wolfssl/ssl.h> /* name change portability layer */
-											Corrected spelling mistakes, formatting
										
										
											2011-08-04 16:42:55 -06:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#include <wolfssl/wolfcrypt/settings.h>
-											cleanup fp cache on examples with thread local storage
										
										
											2014-09-09 10:14:32 -07:00
+								#ifdef HAVE_ECC
-											Test Fixes
										
										
											2018-03-06 16:45:44 -08:00
+								    #include <wolfssl/wolfcrypt/ecc.h>   /* wc_ecc_fp_free */
-											cleanup fp cache on examples with thread local storage
										
										
											2014-09-09 10:14:32 -07:00
+								#endif
-											make sure all tests/examples *.c use settings.h correctly
										
										
											2013-04-10 12:17:23 -07:00
-											fixed mdk4 macro control in example server/client, echoserver/client
										
										
											2015-11-27 11:31:12 +09:00
+								#if defined(WOLFSSL_MDK_ARM) || defined(WOLFSSL_KEIL_TCP_NET)
-											Sync MDK5 Software Pack with 2.9.4
										
										
											2014-04-11 16:20:12 +09:00
+								        #include <stdio.h>
 								        #include <string.h>
-											refactor MDK options in client/server.c
										
										
											2018-01-01 11:57:31 +09:00
+								        #include "rl_fs.h"
 								        #include "rl_net.h"
-											Sync MDK5 Software Pack with 2.9.4
										
										
											2014-04-11 16:20:12 +09:00
+								#endif
-											refactor MDK options in client/server.c
										
										
											2018-01-01 11:57:31 +09:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#include <wolfssl/openssl/ssl.h>
 								#include <wolfssl/test.h>
 								#ifdef WOLFSSL_DTLS
 								    #include <wolfssl/error-ssl.h>
-											DTLS Bad MAC Checks
										
										
											2017-07-31 11:24:42 -07:00
+								#endif
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											This adds more compiler hardening flags (and fixes all of the issues
										
										
											2012-09-19 23:38:41 -07:00
+								#include "examples/server/server.h"
-											Fix build with either NO_WOLFSSL_SERVER or NO_WOLFSSL_CLIENT defined.
										
										
											2017-06-26 23:05:32 -07:00
+								#ifndef NO_WOLFSSL_SERVER
-											Added asynchronous wolfCrypt RSA, TLS client and Cavium Nitrox V support. Asynchronous wolfSSL client support for "DoServerKeyExchange", "SendClientKeyExchange", "SendCertificateVerify" and "DoCertificateVerify". Fixes for async DTLS. Refactor of the wolf event and async handling for use in wolfCrypt. Refactor of the async device support so its hardware agnostic. Added Cavium Nitrox V support (Nitrox tested using SDK v0.2 CNN55XX-SDK with new configure "--with-cavium-v=/dir" option). Moved Nitrox specific functions to new port file "port/cavium/cavium_nitrox.c". RSA refactor to handle async with states. RSA optimization for using dpraw for private key decode. Use double linked list in wolf event for faster/cleaner code. Use typedef for wolf event flag. Cleanup of the async error codes. wolfCrypt test and benchmark support for async RSA. Asynchronous mode enabled using "./configure --enable-asynccrypt". If no async hardware is defined then the internal async simulator (WOLFSSL_ASYNC_CRYPT_TEST) is used. Note: Using async mode requires async.c/h files from wolfSSL. If interested in using asynchronous mode please send email to info@wolfssl.com.
										
										
											2016-08-15 13:59:41 -06:00
+								#ifdef WOLFSSL_ASYNC_CRYPT
 								    static int devId = INVALID_DEVID;
 								#endif
-											revise the comments about port 0 use in the example client and server
										
										
											2015-12-24 15:42:52 -08:00
+								/* Note on using port 0: if the server uses port 0 to bind an ephemeral port
 								 * number and is using the ready file for scripted testing, the code in
 								 * test.h will write the actual port number into the ready file for use
 								 * by the client. */
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								static const char webServerMsg[] =
-											review changes.
										
										
											2019-03-01 13:52:45 -07:00
+								    "HTTP/1.1 200 OK\r\n"
 								    "Content-Type: text/html\r\n"
 								    "Connection: close\r\n"
-											Release Fixes
										
										
											2019-03-20 11:01:24 -07:00
+								    "Content-Length: 141\r\n"
-											examples server HTTP update.
										
										
											2019-02-15 15:45:30 -07:00
+								    "\r\n"
-											review changes.
										
										
											2019-03-01 13:52:45 -07:00
+								    "<html>\r\n"
 								    "<head>\r\n"
 								    "<title>Welcome to wolfSSL!</title>\r\n"
 								    "</head>\r\n"
 								    "<body>\r\n"
 								    "<p>wolfSSL has successfully performed handshake!</p>\r\n"
 								    "</body>\r\n"
 								    "</html>\r\n";
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								int runWithErrors = 0; /* Used with -x flag to run err_sys vs. print errors */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								static int lng_index = 0;
-											Fix build with either NO_WOLFSSL_SERVER or NO_WOLFSSL_CLIENT defined.
										
										
											2017-06-26 23:05:32 -07:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifdef WOLFSSL_CALLBACKS
-											Fix build with either NO_WOLFSSL_SERVER or NO_WOLFSSL_CLIENT defined.
										
										
											2017-06-26 23:05:32 -07:00
+								    Timeval srvTo;
 								    static int srvHandShakeCB(HandShakeInfo* info)
 								    {
 								        (void)info;
 								        return 0;
 								    }
 								    static int srvTimeoutCB(TimeoutInfo* info)
 								    {
 								        (void)info;
 								        return 0;
 								    }
 								#endif
 								#ifndef NO_HANDSHAKE_DONE_CB
 								    static int myHsDoneCb(WOLFSSL* ssl, void* user_ctx)
 								    {
 								        (void)user_ctx;
 								        (void)ssl;
 								        /* printf("Notified HandShake done\n"); */
 								        /* return negative number to end TLS connection now */
 								        return 0;
 								    }
 								#endif
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								static void err_sys_ex(int out, const char* msg)
 								{
 								    if (out == 1) { /* if server is running w/ -x flag, print error w/o exit */
 								        printf("wolfSSL error: %s\n", msg);
 								        printf("Continuing server execution...\n\n");
 								    } else {
 								        err_sys(msg);
 								    }
 								}
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
 								#ifdef WOLFSSL_DTLS
 								/* Translates return codes returned from
 								 * send() and recv() if need be.
 								 */
 								static WC_INLINE int TranslateReturnCode(int old, int sd)
 								{
 								    (void)sd;
 								#if defined(FREESCALE_MQX) || defined(FREESCALE_KSDK_MQX)
 								    if (old == 0) {
 								        errno = SOCKET_EWOULDBLOCK;
 								        return -1;  /* convert to BSD style wouldblock as error */
 								    }
 								    if (old < 0) {
 								        errno = RTCS_geterror(sd);
 								        if (errno == RTCSERR_TCP_CONN_CLOSING)
 								            return 0;   /* convert to BSD style closing */
 								        if (errno == RTCSERR_TCP_CONN_RLSD)
 								            errno = SOCKET_ECONNRESET;
 								        if (errno == RTCSERR_TCP_TIMED_OUT)
 								            errno = SOCKET_EAGAIN;
 								    }
 								#endif
 								    return old;
 								}
 								static WC_INLINE int wolfSSL_LastError(void)
 								{
 								#ifdef USE_WINDOWS_API
 								    return WSAGetLastError();
 								#elif defined(EBSNET)
 								    return xn_getlasterror();
 								#else
 								    return errno;
 								#endif
 								}
 								/* wolfSSL Sock Addr */
 								struct WOLFSSL_TEST_SOCKADDR {
 								    unsigned int  sz; /* sockaddr size */
 								    SOCKADDR_IN_T sa; /* pointer to the sockaddr_in or sockaddr_in6 */
 								};
 								typedef struct WOLFSSL_TEST_DTLS_CTX {
 								    struct WOLFSSL_TEST_SOCKADDR peer;
 								    int rfd;
 								    int wfd;
 								    int failOnce;
 								    word32 blockSeq;
 								} WOLFSSL_TEST_DTLS_CTX;
 								static WC_INLINE int PeekSeq(const char* buf, word32* seq)
 								{
 								    const char* c = buf + 3;
 								    if ((c[0] | c[1] | c[2] | c[3]) == 0) {
 								        *seq = (c[4] << 24) | (c[5] << 16) | (c[6] << 8) | c[7];
 								        return 1;
 								    }
 								    return 0;
 								}
 								/* The send embedded callback
 								 *  return : nb bytes sent, or error
 								 */
 								static int TestEmbedSendTo(WOLFSSL* ssl, char *buf, int sz, void *ctx)
 								{
 								    WOLFSSL_TEST_DTLS_CTX* dtlsCtx = (WOLFSSL_TEST_DTLS_CTX*)ctx;
 								    int sd = dtlsCtx->wfd;
 								    int sent;
 								    int len = sz;
 								    int err;
 								    (void)ssl;
 								    WOLFSSL_ENTER("TestEmbedSendTo()");
 								    if (dtlsCtx->failOnce) {
 								        word32 seq = 0;
-											Adds new wc_ecc_get_curve_params API for getting the ecc_set_type params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
										
										
											2019-07-24 10:35:33 -07:00
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								        if (PeekSeq(buf, &seq) && seq == dtlsCtx->blockSeq) {
 								            dtlsCtx->failOnce = 0;
 								            WOLFSSL_MSG("Forcing WANT_WRITE");
 								            return WOLFSSL_CBIO_ERR_WANT_WRITE;
 								        }
 								    }
 								    sent = (int)sendto(sd, &buf[sz - len], len, 0,
 								                                (const SOCKADDR*)&dtlsCtx->peer.sa,
 								                                dtlsCtx->peer.sz);
 								    sent = TranslateReturnCode(sent, sd);
 								    if (sent < 0) {
 								        err = wolfSSL_LastError();
 								        WOLFSSL_MSG("Embed Send To error");
 								        if (err == SOCKET_EWOULDBLOCK || err == SOCKET_EAGAIN) {
 								            WOLFSSL_MSG("\tWould Block");
 								            return WOLFSSL_CBIO_ERR_WANT_WRITE;
 								        }
 								        else if (err == SOCKET_ECONNRESET) {
 								            WOLFSSL_MSG("\tConnection reset");
 								            return WOLFSSL_CBIO_ERR_CONN_RST;
 								        }
 								        else if (err == SOCKET_EINTR) {
 								            WOLFSSL_MSG("\tSocket interrupted");
 								            return WOLFSSL_CBIO_ERR_ISR;
 								        }
 								        else if (err == SOCKET_EPIPE) {
 								            WOLFSSL_MSG("\tSocket EPIPE");
 								            return WOLFSSL_CBIO_ERR_CONN_CLOSE;
 								        }
 								        else {
 								            WOLFSSL_MSG("\tGeneral error");
 								            return WOLFSSL_CBIO_ERR_GENERAL;
 								        }
 								    }
 								    return sent;
 								}
 								#endif /* WOLFSSL_DTLS */
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
+								static int NonBlockingSSL_Accept(SSL* ssl)
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								{
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifndef WOLFSSL_CALLBACKS
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								    int ret = SSL_accept(ssl);
 								#else
-											Patches
										
										
											2018-08-24 11:21:10 -07:00
+								    int ret = wolfSSL_accept_ex(ssl, srvHandShakeCB, srvTimeoutCB, srvTo);
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								#endif
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								    int error = SSL_get_error(ssl, 0);
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								    SOCKET_T sockfd = (SOCKET_T)SSL_get_fd(ssl);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    int select_ret = 0;
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
+								    while (ret != WOLFSSL_SUCCESS &&
 								        (error == WOLFSSL_ERROR_WANT_READ || error == WOLFSSL_ERROR_WANT_WRITE
 								        #ifdef WOLFSSL_ASYNC_CRYPT
 								            || error == WC_PENDING_E
 								        #endif
 								    )) {
-											add dtls recv timeout max user setting too
										
										
											2013-05-08 12:49:55 -07:00
+								        int currTimeout = 1;
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (error == WOLFSSL_ERROR_WANT_READ) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            /* printf("... server would read block\n"); */
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								        }
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        else if (error == WOLFSSL_ERROR_WANT_WRITE) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            /* printf("... server would write block\n"); */
 								        }
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    #ifdef WOLFSSL_ASYNC_CRYPT
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
+								        if (error == WC_PENDING_E) {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								            if (ret < 0) break;
 								        }
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
+								        else
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    #endif
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
+								        {
-											DTLS Nonblocking Updates
										
										
											2018-12-14 11:30:03 -08:00
+								            if (error != WOLFSSL_ERROR_WANT_WRITE) {
 								            #ifdef WOLFSSL_DTLS
 								                currTimeout = wolfSSL_dtls_get_current_timeout(ssl);
 								            #endif
 								                select_ret = tcp_select(sockfd, currTimeout);
 								            }
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								        }
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
-											DTLS Nonblocking Updates
										
										
											2018-12-14 11:30:03 -08:00
+								        if ((select_ret == TEST_RECV_READY) || (select_ret == TEST_SEND_READY)
 								            || (select_ret == TEST_ERROR_READY)
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
+								        #ifdef WOLFSSL_ASYNC_CRYPT
 								            || error == WC_PENDING_E
 								        #endif
 								        ) {
-											Removed replaced the last two references to "CYASSL" macros with "WOLFSSL" in the example server.
										
										
											2018-06-06 13:14:06 -07:00
+								            #ifndef WOLFSSL_CALLBACKS
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								                ret = SSL_accept(ssl);
 								            #else
-											Patches
										
										
											2018-08-24 11:21:10 -07:00
+								                ret = wolfSSL_accept_ex(ssl,
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								                                    srvHandShakeCB, srvTimeoutCB, srvTo);
 								            #endif
 								            error = SSL_get_error(ssl, 0);
-											DTLS Nonblocking Updates
										
										
											2018-12-14 11:30:03 -08:00
+								            if (error == WOLFSSL_ERROR_WANT_WRITE) {
 								                /* Do a select here. */
 								                select_ret = tcp_select_tx(sockfd, 1);
 								                if (select_ret == TEST_TIMEOUT)
 								                    error = WOLFSSL_FATAL_ERROR;
 								            }
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								        }
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        else if (select_ret == TEST_TIMEOUT && !wolfSSL_dtls(ssl)) {
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            error = WOLFSSL_ERROR_WANT_READ;
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								        }
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								    #ifdef WOLFSSL_DTLS
 								        else if (select_ret == TEST_TIMEOUT && wolfSSL_dtls(ssl) &&
 								                                        wolfSSL_dtls_got_timeout(ssl) >= 0) {
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            error = WOLFSSL_ERROR_WANT_READ;
-											add dtls recv timeout max user setting too
										
										
											2013-05-08 12:49:55 -07:00
+								        }
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    #endif
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								        else {
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            error = WOLFSSL_FATAL_ERROR;
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								        }
 								    }
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
 								    return ret;
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								}
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								/* Echo number of bytes specified by -e arg */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								int ServerEchoData(SSL* ssl, int clientfd, int echoData, int block,
 								                   int throughput)
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								{
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    int ret = 0, err;
 								    double start = 0, rx_time = 0, tx_time = 0;
 								    int xfer_bytes = 0, select_ret, len, rx_pos;
 								    char* buffer;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								    buffer = (char*)malloc(block);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    if (!buffer) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "Server buffer malloc failed");
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    }
 								    while ((echoData && throughput == 0) ||
 								          (!echoData && xfer_bytes < throughput))
 								    {
 								        select_ret = tcp_select(clientfd, 1); /* Timeout=1 second */
 								        if (select_ret == TEST_RECV_READY) {
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								            len = min(block, throughput - xfer_bytes);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            rx_pos = 0;
 								            if (throughput) {
 								                start = current_time(1);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            }
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            /* Read data */
 								            while (rx_pos < len) {
 								                ret = SSL_read(ssl, &buffer[rx_pos], len - rx_pos);
-											Fix wc_ecc_alloc_rs memset logic. Fix error handling in hmac.c for SHA224. Cleanup of the wc_DhGenerateKeyPair_Async function. Added comment about the “BuildTlsFinished” allocation for hash buffer. Fixed issue with example server that caused the benchmark script to fail in throughput mode.
										
										
											2017-04-11 14:13:08 -07:00
+								                if (ret < 0) {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								                    err = SSL_get_error(ssl, 0);
 								                #ifdef WOLFSSL_ASYNC_CRYPT
 								                    if (err == WC_PENDING_E) {
 								                        ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								                        if (ret < 0) break;
 								                    }
 								                    else
 								                #endif
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                    if (err != WOLFSSL_ERROR_WANT_READ &&
-											Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
										
										
											2018-03-16 12:02:36 -07:00
+								                                             err != WOLFSSL_ERROR_ZERO_RETURN) {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								                        printf("SSL_read echo error %d\n", err);
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                        err_sys_ex(runWithErrors, "SSL_read failed");
-											Fixed example server to not try and write on failure.
										
										
											2019-04-11 11:30:41 -07:00
+								                        break;
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								                    }
 								                }
 								                else {
 								                    rx_pos += ret;
 								                }
 								            }
 								            if (throughput) {
 								                rx_time += current_time(0) - start;
 								                start = current_time(1);
 								            }
 								            /* Write data */
 								            do {
 								                err = 0; /* reset error */
 								                ret = SSL_write(ssl, buffer, len);
 								                if (ret <= 0) {
 								                    err = SSL_get_error(ssl, 0);
 								                #ifdef WOLFSSL_ASYNC_CRYPT
 								                    if (err == WC_PENDING_E) {
 								                        ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								                        if (ret < 0) break;
 								                    }
 								                #endif
 								                }
 								            } while (err == WC_PENDING_E);
 								            if (ret != len) {
 								                printf("SSL_write echo error %d\n", err);
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "SSL_write failed");
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            }
 								            if (throughput) {
 								                tx_time += current_time(0) - start;
 								            }
 								            xfer_bytes += len;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
 								    }
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
 								    free(buffer);
 								    if (throughput) {
 								        printf("wolfSSL Server Benchmark %d bytes\n"
 								            "\tRX      %8.3f ms (%8.3f MBps)\n"
 								            "\tTX      %8.3f ms (%8.3f MBps)\n",
 								            throughput,
 								            tx_time * 1000, throughput / tx_time / 1024 / 1024,
 								            rx_time * 1000, throughput / rx_time / 1024 / 1024
 								        );
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    }
 								    return EXIT_SUCCESS;
 								}
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								static void ServerRead(WOLFSSL* ssl, char* input, int inputLen)
 								{
 								    int ret, err;
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								    char buffer[WOLFSSL_MAX_ERROR_SZ];
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
 								    /* Read data */
 								    do {
 								        err = 0; /* reset error */
 								        ret = SSL_read(ssl, input, inputLen);
 								        if (ret < 0) {
 								            err = SSL_get_error(ssl, 0);
 								        #ifdef WOLFSSL_ASYNC_CRYPT
 								            if (err == WC_PENDING_E) {
 								                ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								                if (ret < 0) break;
 								            }
 								            else
-											DTLS Bad MAC Checks
										
										
											2017-07-31 11:24:42 -07:00
+								        #endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        #ifdef WOLFSSL_DTLS
-											DTLS Bad MAC Checks
										
										
											2017-07-31 11:24:42 -07:00
+								            if (wolfSSL_dtls(ssl) && err == DECRYPT_ERROR) {
 								                printf("Dropped client's message due to a bad MAC\n");
 								            }
 								            else
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								        #endif
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            if (err != WOLFSSL_ERROR_WANT_READ) {
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								                printf("SSL_read input error %d, %s\n", err,
 								                                                 ERR_error_string(err, buffer));
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "SSL_read failed");
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								            }
 								        }
-											Changes to server example for fuzz testing
										
										
											2019-07-01 13:35:33 +10:00
+								        else if (SSL_get_error(ssl, 0) == 0 &&
 								                            tcp_select(SSL_get_fd(ssl), 0) == TEST_RECV_READY) {
 								                err = WOLFSSL_ERROR_WANT_READ;
 								        }
-											Fix post authentication for TLS 1.3
										
										
											2018-06-08 17:34:03 +10:00
+								    } while (err == WC_PENDING_E || err == WOLFSSL_ERROR_WANT_READ);
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								    if (ret > 0) {
 								        input[ret] = 0; /* null terminate message */
 								        printf("Client message: %s\n", input);
 								    }
 								}
 								static void ServerWrite(WOLFSSL* ssl, const char* output, int outputLen)
 								{
 								    int ret, err;
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								    char buffer[WOLFSSL_MAX_ERROR_SZ];
-											Changes to server example for fuzz testing
										
										
											2019-07-01 13:35:33 +10:00
+								    int len;
 								#ifdef OPENSSL_ALL
 								    /* Fuzz testing expects reply split over two msgs when TLSv1.0 or below */
 								    if (wolfSSL_GetVersion(ssl) <= WOLFSSL_TLSV1)
 								         len = outputLen / 2;
 								    else
 								#endif
 								        len = outputLen;
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
 								    do {
 								        err = 0; /* reset error */
-											Changes to server example for fuzz testing
										
										
											2019-07-01 13:35:33 +10:00
+								        ret = SSL_write(ssl, output, len);
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								        if (ret <= 0) {
 								            err = SSL_get_error(ssl, 0);
 								        #ifdef WOLFSSL_ASYNC_CRYPT
 								            if (err == WC_PENDING_E) {
 								                ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								                if (ret < 0) break;
 								            }
 								        #endif
 								        }
-											Changes to server example for fuzz testing
										
										
											2019-07-01 13:35:33 +10:00
+								        else if (ret != outputLen) {
 								            output += ret;
 								            len = (outputLen -= ret);
 								            err = WOLFSSL_ERROR_WANT_WRITE;
 								        }
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								    } while (err == WC_PENDING_E || err == WOLFSSL_ERROR_WANT_WRITE);
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								    if (ret != outputLen) {
 								        printf("SSL_write msg error %d, %s\n", err,
 								                                                 ERR_error_string(err, buffer));
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "SSL_write failed");
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								    }
 								}
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								/* when adding new option, please follow the steps below: */
 								/*  1. add new option message in English section          */
 								/*  2. increase the number of the second dimention        */
 								/*  3. add the same message into Japanese section         */
 								/*     (will be translated later)                         */
 								/*  4. add printf() into suitable position of Usage()     */
 								static const char* server_usage_msg[][49] = {
 								    /* English */
 								    {
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        " NOTE: All files relative to wolfSSL home dir\n",               /* 0 */
 								        "-? <num>    Help, print this usage\n"
 								        "            0: English, 1: Japanese\n",                         /* 1 */
 								        "-p <num>    Port to listen on, not 0, default",                 /* 2 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifndef WOLFSSL_TLS13
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-v <num>    SSL version [0-3], SSLv3(0) - TLS1.2(3)), default", /* 3 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#else
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-v <num>    SSL version [0-4], SSLv3(0) - TLS1.3(4)), default", /* 3 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-l <str>    Cipher suite list (: delimited)\n",                 /* 4 */
 								        "-c <file>   Certificate file,           default",               /* 5 */
 								        "-k <file>   Key file,                   default",               /* 6 */
 								        "-A <file>   Certificate Authority file, default",               /* 7 */
 								        "-R <file>   Create Ready file for external monitor"
 								                                                     " default none\n",  /* 8 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifndef NO_DH
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-D <file>   Diffie-Hellman Params file, default",               /* 9 */
 								        "-Z <num>    Minimum DH key bits,        default",              /* 10 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_ALPN
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-L <str>    Application-Layer Protocol Negotiation"
 								                                                  " ({C,F}:<list>)\n",  /* 11 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-d          Disable client cert check\n",                      /* 12 */
 								        "-b          Bind to any interface instead of localhost only\n",/* 13 */
 								        "-s          Use pre Shared keys\n",                            /* 14 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								        "-u          Use UDP DTLS,"
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								           " add -v 2 for DTLSv1, -v 3 for DTLSv1.2 (default)\n",       /* 15 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef WOLFSSL_SCTP
 								        "-G          Use SCTP DTLS,"
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								           " add -v 2 for DTLSv1, -v 3 for DTLSv1.2 (default)\n",       /* 16 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-f          Fewer packets/group messages\n",                   /* 17 */
 								        "-r          Allow one client Resumption\n",                    /* 18 */
 								        "-N          Use Non-blocking sockets\n",                       /* 19 */
 								        "-S <str>    Use Host Name Indication\n",                       /* 20 */
 								        "-w          Wait for bidirectional shutdown\n",                /* 21 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef HAVE_OCSP
 								        "-o          Perform OCSP lookup on peer certificate\n",        /* 22 */
 								        "-O <url>    Perform OCSP lookup using <url> as responder\n",   /* 23 */
 								#endif
 								#ifdef HAVE_PK_CALLBACKS
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-P          Public Key Callbacks\n",                           /* 24 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_ANON
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-a          Anonymous server\n",                               /* 25 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifndef NO_PSK
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-I          Do not send PSK identity hint\n",                  /* 26 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-x          Print server errors but do not close connection\n",/* 27 */
 								        "-i          Loop indefinitely (allow repeated connections)\n", /* 28 */
 								        "-e          Echo data mode (return raw bytes received)\n",     /* 29 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef HAVE_NTRU
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-n          Use NTRU key (needed for NTRU suites)\n",          /* 30 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-B <num>    Benchmark throughput"
 								                            " using <num> bytes and print stats\n",     /* 31 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef HAVE_CRL
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-V          Disable CRL\n",                                    /* 32 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_TRUST_PEER_CERT
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-E <file>   Path to load trusted peer cert\n",                 /* 33 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_WNR
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-q <file>   Whitewood config file,      default",              /* 34 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-g          Return basic HTML web page\n",                     /* 35 */
 								        "-C <num>    The number of connections to accept, default: 1\n",/* 36 */
 								        "-H <arg>    Internal tests"
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								            " [defCipherList, exitWithRet, verifyFail, useSupCurve,\n", /* 37 */
 								        "                            loadSSL, disallowETM]\n",          /* 38 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef WOLFSSL_TLS13
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-U          Update keys and IVs before sending\n",             /* 39 */
 								        "-K          Key Exchange for PSK not using (EC)DHE\n",         /* 40 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifndef NO_DH
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-y          Pre-generate Key Share using FFDHE_2048 only\n",   /* 41 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_ECC
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-Y          Pre-generate Key Share using P-256 only \n",       /* 42 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_CURVE25519
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-t          Pre-generate Key share using Curve25519 only\n",   /* 43 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_SESSION_TICKET
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-T          Do not generate session ticket\n",                 /* 44 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_POST_HANDSHAKE_AUTH
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-Q          Request certificate from client post-handshake\n", /* 45 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_SEND_HRR_COOKIE
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-J          Server sends Cookie Extension containing state\n", /* 46 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Adds new wc_ecc_get_curve_params API for getting the ecc_set_type params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
										
										
											2019-07-24 10:35:33 -07:00
+								#endif /* WOLFSSL_TLS13 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef WOLFSSL_EARLY_DATA
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-0          Early data read from client (0-RTT handshake)\n",  /* 47 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_MULTICAST
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-3 <grpid>  Multicast, grpid < 256\n",                         /* 48 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-1 <num>    Display a result by specified language."
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								                             "\n            0: English, 1: Japanese\n", /* 49 */
-											Move the -5 option text into the localization array and add a Japanese translation.
										
										
											2019-02-21 10:28:23 -08:00
+								#ifdef HAVE_TRUSTED_CA
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-5          Use Trusted CA Key Indication\n",                  /* 52 */
-											Move the -5 option text into the localization array and add a Japanese translation.
										
										
											2019-02-21 10:28:23 -08:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								        NULL,
 								    },
-											NO_MULTIBYTE to NO_MULTIBYTE_PRINT
										
										
											2018-11-29 07:04:01 +09:00
+								#ifndef NO_MULTIBYTE_PRINT
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    /* Japanese */
 								    {
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        " 注意 : 全てのファイルは"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        " wolfSSL ホーム・ディレクトリからの相対です。\n",               /* 0 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-? <num>    ヘルプ, 使い方を表示\n"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "            0: 英語、 1: 日本語\n",                             /* 1 */
 								        "-p <num>    接続先ポート, 0は無効, 既定値",                     /* 2 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifndef WOLFSSL_TLS13
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-v <num>    SSL バージョン [0-3], SSLv3(0) - TLS1.2(3)),"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                                            " 既定値",   /* 3 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#else
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-v <num>    SSL バージョン [0-4], SSLv3(0) - TLS1.3(4)),"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                                            " 既定値",   /* 3 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-l <str>    暗号スイートリスト (区切り文字 :)\n",               /* 4 */
 								        "-c <file>   証明書ファイル,  既定値",                           /* 5 */
 								        "-k <file>   鍵ファイル,      既定値",                           /* 6 */
 								        "-A <file>   認証局ファイル,  既定値",                           /* 7 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-R <file>   外部モニタ用の準備完了ファイルを作成する。"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                                      "既定値  なし\n",  /* 8 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifndef NO_DH
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-D <file>   ディフィー・ヘルマンのパラメータファイル,"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                                     " 既定値",          /* 9 */
 								        "-Z <num>    最小 DH 鍵 ビット, 既定値",                        /* 10 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_ALPN
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-L <str>    アプリケーション層プロトコルネゴシエーションを行う"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                                  " ({C,F}:<list>)\n",  /* 11 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-d          クライアント認証を無効とする\n",                   /* 12 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-b          ローカルホスト以外のインターフェースへも"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                                "バインドする\n",       /* 13 */
 								        "-s          事前共有鍵を使用する\n",                           /* 14 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-u          UDP DTLSを使用する。-v 2 を追加指定すると"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								             " DTLSv1, -v 3 を追加指定すると DTLSv1.2 (既定値)\n",      /* 15 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef WOLFSSL_SCTP
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-G          SCTP DTLSを使用する。-v 2 を追加指定すると"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								              " DTLSv1, -v 3 を追加指定すると DTLSv1.2 (既定値)\n",     /* 16 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-f          より少ないパケット/グループメッセージを使用する\n",/* 17 */
 								        "-r          クライアントの再開を許可する\n",                   /* 18 */
 								        "-N          ノンブロッキング・ソケットを使用する\n",           /* 19 */
 								        "-S <str>    ホスト名表示を使用する\n",                         /* 20 */
 								        "-w          双方向シャットダウンを待つ\n",                     /* 21 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef HAVE_OCSP
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-o          OCSPルックアップをピア証明書で実施する\n",         /* 22 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-O <url>    OCSPルックアップを、"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                        "<url>を使用し応答者として実施する\n",          /* 23 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_PK_CALLBACKS
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-P          公開鍵コールバック\n",                             /* 24 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_ANON
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-a          匿名サーバー\n",                                   /* 25 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifndef NO_PSK
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-I          PSKアイデンティティのヒントを送信しない\n",        /* 26 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-x          サーバーエラーを出力するが接続を切断しない\n",     /* 27 */
 								        "-i          無期限にループする(繰り返し接続を許可)\n",         /* 28 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-e          エコー・データモード"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                   "(受け取ったバイトデータを返す)\n",  /* 29 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef HAVE_NTRU
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-n          NTRU鍵を使用する(NTRUスイートに必要)\n",           /* 30 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-B <num>    <num> バイトを用いてのベンチマーク・スループット"
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								                                          "測定と結果を出力する\n",     /* 31 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef HAVE_CRL
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-V          CRLを無効とする\n",                                /* 32 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_TRUST_PEER_CERT
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-E <file>   信頼出来るピアの証明書ロードの為のパス\n\n",       /* 33 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_WNR
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-q <file>   Whitewood コンフィグファイル,      既定値",        /* 34 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Rollback stacing
										
										
											2018-11-29 06:52:43 +09:00
+								        "-g          基本的な Web ページを返す\n",                      /* 35 */
 								        "-C <num>    アクセプト可能な接続数を指定する。既定値: 1\n",    /* 36 */
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-H <arg>    内部テスト"
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								            " [defCipherList, exitWithRet, verifyFail, useSupCurve,\n", /* 37 */
 								        "                            loadSSL, disallowETM]\n",          /* 38 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef WOLFSSL_TLS13
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-U          データ送信前に、鍵とIVを更新する\n",               /* 39 */
 								        "-K          鍵交換にPSKを使用、(EC)DHEは使用しない\n",         /* 40 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifndef NO_DH
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-y          FFDHE_2048のみを使用して鍵共有を事前生成する\n",   /* 41 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_ECC
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-Y          P-256のみを使用したキー共有の事前生成\n",          /* 42 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_CURVE25519
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-t          Curve25519のみを使用して鍵共有を事前生成する\n",   /* 43 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef HAVE_SESSION_TICKET
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-T         セッションチケットを生成しない\n",                  /* 44 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_POST_HANDSHAKE_AUTH
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-Q          クライアントのポストハンドシェイクから"
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								                                              "証明書を要求する\n",     /* 45 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_SEND_HRR_COOKIE
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-J          サーバーの状態を含むTLS Cookie 拡張を送信する\n",  /* 46 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Adds new wc_ecc_get_curve_params API for getting the ecc_set_type params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
										
										
											2019-07-24 10:35:33 -07:00
+								#endif /* WOLFSSL_TLS13 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#ifdef WOLFSSL_EARLY_DATA
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-0          クライアントからの Early Data 読み取り"
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								                                      "（0-RTTハンドシェイク）\n",      /* 47 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
 								#ifdef WOLFSSL_MULTICAST
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-3 <grpid>  マルチキャスト, grpid < 256\n",                    /* 48 */
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								#endif
-											Keep the max line length to 80
										
										
											2018-10-20 17:15:17 +09:00
+								        "-1 <num>    指定された言語で結果を表示します。"
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								                                 "\n            0: 英語、 1: 日本語\n", /* 49 */
-											Move the -5 option text into the localization array and add a Japanese translation.
										
										
											2019-02-21 10:28:23 -08:00
+								#ifdef HAVE_TRUSTED_CA
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								        "-5          信頼できる認証局の鍵表示を使用する\n",             /* 52 */
-											Move the -5 option text into the localization array and add a Japanese translation.
										
										
											2019-02-21 10:28:23 -08:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								        NULL,
 								    },
-											NO_MULTIBYTE for multibyte non-supported IDEs
										
										
											2018-11-26 08:11:31 +09:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								};
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								static void Usage(void)
 								{
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    int msgId = 0;
 								    const char** msg = server_usage_msg[lng_index];
-											Adds new wc_ecc_get_curve_params API for getting the ecc_set_type params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
										
										
											2019-07-24 10:35:33 -07:00
+								    printf("%s%s%s", "server ", LIBWOLFSSL_VERSION_STRING,
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								           msg[msgId]);
 								    printf("%s", msg[++msgId]);                     /* ? */
 								    printf("%s %d\n", msg[++msgId], wolfSSLPort);   /* -p */
-											Changes for Nginx
										
										
											2017-07-03 18:29:15 +10:00
+								#ifndef WOLFSSL_TLS13
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s %d\n", msg[++msgId], SERVER_DEFAULT_VERSION); /* -v */
-											Changes for Nginx
										
										
											2017-07-03 18:29:15 +10:00
+								#else
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s %d\n", msg[++msgId], SERVER_DEFAULT_VERSION); /* -v */
-											Changes for Nginx
										
										
											2017-07-03 18:29:15 +10:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -l */
 								    printf("%s %s\n", msg[++msgId], svrCertFile);    /* -c */
 								    printf("%s %s\n", msg[++msgId], svrKeyFile);     /* -k */
 								    printf("%s %s\n", msg[++msgId], cliCertFile);    /* -A */
 								    printf("%s", msg[++msgId]);     /* -R */
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								#ifndef NO_DH
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s %s\n", msg[++msgId], dhParamFile);           /* -D */
 								    printf("%s %d\n", msg[++msgId], DEFAULT_MIN_DHKEY_BITS);/* -Z */
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-14 20:53:30 +02:00
+								#endif
 								#ifdef HAVE_ALPN
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -L */
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -d */
 								    printf("%s", msg[++msgId]);     /* -b */
 								    printf("%s", msg[++msgId]);     /* -s */
 								    printf("%s", msg[++msgId]);     /* -u */
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								#ifdef WOLFSSL_SCTP
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -G */
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -f */
 								    printf("%s", msg[++msgId]);     /* -r */
 								    printf("%s", msg[++msgId]);     /* -N */
 								    printf("%s", msg[++msgId]);     /* -S */
 								    printf("%s", msg[++msgId]);     /* -w */
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								#ifdef HAVE_SECURE_RENEGOTIATION
 								    printf("-M          Allow Secure Renegotiation\n");
 								    printf("-m          Force Server Initiated Secure Renegotiation\n");
 								#endif /* HAVE_SECURE_RENEGOTIATION */
-											OCSP Updates
										
										
											2013-06-20 11:07:54 -07:00
+								#ifdef HAVE_OCSP
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -o */
 								    printf("%s", msg[++msgId]);     /* -O */
-											OCSP Updates
										
										
											2013-06-20 11:07:54 -07:00
+								#endif
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								#ifdef HAVE_PK_CALLBACKS
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -P */
-											add Rsa Sign/Verify callbacks, client/server examples
										
										
											2013-08-26 16:27:29 -07:00
+								#endif
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
+								#ifdef HAVE_ANON
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -a */
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
+								#endif
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								#ifndef NO_PSK
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -I */
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -x */
 								    printf("%s", msg[++msgId]);     /* -i */
 								    printf("%s", msg[++msgId]);     /* -e */
-											help message to use NTRU key in example server
										
										
											2015-12-22 11:51:26 -07:00
+								#ifdef HAVE_NTRU
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -n */
-											help message to use NTRU key in example server
										
										
											2015-12-22 11:51:26 -07:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -B */
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								#ifdef HAVE_CRL
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -V */
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								#endif
-											automated test for trusted peer certs
										
										
											2016-03-01 16:35:32 -07:00
+								#ifdef WOLFSSL_TRUST_PEER_CERT
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -E */
-											automated test for trusted peer certs
										
										
											2016-03-01 16:35:32 -07:00
+								#endif
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#ifdef HAVE_WNR
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s %s\n", msg[++msgId], wnrConfig);  /* -q */
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -g */
 								    printf("%s", msg[++msgId]);     /* -C */
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								    printf("%s", msg[++msgId]);     /* -H */
 								    printf("%s", msg[++msgId]);     /* more -H options */
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								#ifdef WOLFSSL_TLS13
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -U */
 								    printf("%s", msg[++msgId]);     /* -K */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#ifndef NO_DH
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -y */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#endif
 								#ifdef HAVE_ECC
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -Y */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#endif
 								#ifdef HAVE_CURVE25519
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -t */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#endif
 								#ifdef HAVE_SESSION_TICKET
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -T */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#endif
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								#ifdef WOLFSSL_POST_HANDSHAKE_AUTH
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -Q */
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								#endif
-											Code review fixes
										
										
											2017-06-27 08:52:53 +10:00
+								#ifdef WOLFSSL_SEND_HRR_COOKIE
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -J */
-											Code review fixes
										
										
											2017-06-27 08:52:53 +10:00
+								#endif
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#endif /* WOLFSSL_TLS13 */
-											TLS v1.3 0-RTT
										
										
											2017-06-19 11:37:10 +10:00
+								#ifdef WOLFSSL_EARLY_DATA
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -0 */
-											TLS v1.3 0-RTT
										
										
											2017-06-19 11:37:10 +10:00
+								#endif
-											DHE Speed Up
										
										
											2018-12-03 13:53:44 -08:00
+								#if !defined(NO_DH) && !defined(HAVE_FIPS) && \
 								    !defined(HAVE_SELFTEST) && !defined(WOLFSSL_OLD_PRIME_CHECK)
 								    printf("-2          Disable DH Prime check\n");
 								#endif
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								#ifdef WOLFSSL_DTLS
 								    printf("-4 <seq>    DTLS fake would-block for message seq\n");
 								#endif
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								#ifdef WOLFSSL_MULTICAST
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -3 */
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								#endif
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								    printf("%s", msg[++msgId]);     /* -1 */
-											Trusted CA Key Indication Extension
										
										
											2018-09-28 09:05:59 -07:00
+								#ifdef HAVE_TRUSTED_CA
-											Move the -5 option text into the localization array and add a Japanese translation.
										
										
											2019-02-21 10:28:23 -08:00
+								    printf("%s", msg[++msgId]);     /* -5 */
-											Trusted CA Key Indication Extension
										
										
											2018-09-28 09:05:59 -07:00
+								#endif /* HAVE_TRUSTED_CA */
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								}
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								THREAD_RETURN WOLFSSL_THREAD server_test(void* args)
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								{
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    SOCKET_T sockfd   = WOLFSSL_SOCKET_INVALID;
 								    SOCKET_T clientfd = WOLFSSL_SOCKET_INVALID;
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											static method func / ocsp callbacks / heap test / alpn free func / remove timing resistant constraint
										
										
											2016-06-09 11:36:31 -06:00
+								    wolfSSL_method_func method = NULL;
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								    SSL_CTX*    ctx    = 0;
 								    SSL*        ssl    = 0;
-											Add cipher suite ECDHE-ECDSA-AES128-CCM
										
										
											2016-06-13 14:39:41 -07:00
+								#ifndef WOLFSSL_ALT_TEST_STRINGS
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    const char msg[] = "I hear you fa shizzle!";
-											Add cipher suite ECDHE-ECDSA-AES128-CCM
										
										
											2016-06-13 14:39:41 -07:00
+								#else
 								    const char msg[] = "I hear you fa shizzle!\n";
 								#endif
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								    int    useWebServerMsg = 0;
-											lower example client/server stack buffer sizes
										
										
											2013-03-29 14:06:36 -07:00
+								    char   input[80];
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    int    ch;
 								    int    version = SERVER_DEFAULT_VERSION;
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								#ifndef WOLFSSL_NO_CLIENT_AUTH
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    int    doCliCertCheck = 1;
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								#else
 								    int    doCliCertCheck = 0;
 								#endif
 								#ifdef HAVE_CRL
 								    int    disableCRL = 0;
 								#endif
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    int    useAnyAddr = 0;
-											MDK4, wolfSSL name change
										
										
											2015-08-12 16:45:40 +09:00
+								    word16 port = wolfSSLPort;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    int    usePsk = 0;
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								    int    usePskPlus = 0;
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
+								    int    useAnon = 0;
-											add -u for DTLS UPD command line client/server examples
										
										
											2012-08-02 11:54:49 -07:00
+								    int    doDTLS = 0;
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								    int    dtlsUDP = 0;
 								    int    dtlsSCTP = 0;
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								    int    doMcast = 0;
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								#ifdef WOLFSSL_DTLS
 								    int    doBlockSeq = 0;
 								    WOLFSSL_TEST_DTLS_CTX dtlsCtx;
 								#endif
-											allow dh to be used w/o certs and asn
										
										
											2015-03-27 14:28:05 -07:00
+								    int    needDH = 0;
-											NTRU suites from earlier code
										
										
											2015-07-11 12:52:22 -06:00
+								    int    useNtruKey   = 0;
-											add fewerPacket/group messages to example client/server and disalbe client cert/key load
										
										
											2013-04-19 13:10:19 -07:00
+								    int    nonBlocking  = 0;
 								    int    fewerPackets = 0;
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
+								#ifdef HAVE_PK_CALLBACKS
-											add Rsa Sign/Verify callbacks, client/server examples
										
										
											2013-08-26 16:27:29 -07:00
+								    int    pkCallbacks  = 0;
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
+								    PkCbInfo pkCbInfo;
 								#endif
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
+								    int    wc_shutdown     = 0;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    int    resume = 0;
 								    int    resumeCount = 0;
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								    int    loops = 1;
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								    int    cnt = 0;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    int    echoData = 0;
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								    int    block = TEST_BUFFER_SIZE;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    int    throughput = 0;
-											add check for min RSA key size at TLS/SSL level
										
										
											2016-04-14 13:35:49 -06:00
+								    int    minDhKeyBits  = DEFAULT_MIN_DHKEY_BITS;
-											use short for RSA min key size and check casts
										
										
											2016-04-22 12:56:51 -06:00
+								    short  minRsaKeyBits = DEFAULT_MIN_RSAKEY_BITS;
-											change type to short for comparision and up default min size
										
										
											2016-04-20 15:44:45 -06:00
+								    short  minEccKeyBits = DEFAULT_MIN_ECCKEY_BITS;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    int    doListen = 1;
-											have calling thread wait for crl monitor thread to setup for simpler cleanup
										
										
											2015-11-23 14:15:12 -08:00
+								    int    crlFlags = 0;
-											fix shutdown returns
										
										
											2015-02-16 14:23:33 -08:00
+								    int    ret;
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
+								    int    err = 0;
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								    char*  serverReadyFile = NULL;
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								    char*  alpnList = NULL;
-											ALPN : add option to continue in case of client/server protocol mismatch (like OpenSSL)
										
										
											2015-10-13 09:38:40 +02:00
+								    unsigned char alpn_opt = 0;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    char*  cipherList = NULL;
-											Added test for server to use the default cipher suite list using new “-U” option. This allows the InitSuites logic to be used for determining cipher suites instead of always overriding using the “-l” option. Now both versions are used, so tests are done with wolfSSL_CTX_set_cipher_list and InitSuites. Removed a few cipher suite tests from test.conf that are not valid with old TLS. These were not picked up as failures before because wolfSSL_CTX_set_cipher_list matched on name only, allowing older versions to use the suite.
										
										
											2017-04-04 14:31:47 -07:00
+								    int    useDefCipherList = 0;
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								    int    overrideDateErrors = 0;
-											Cleanup name conflicts with test.h cert files (by adding “File” to end). Fix memory leak in ecc_test_buffers function.
										
										
											2017-04-06 15:54:59 -07:00
+								    const char* verifyCert = cliCertFile;
 								    const char* ourCert    = svrCertFile;
 								    const char* ourKey     = svrKeyFile;
 								    const char* ourDhParam = dhParamFile;
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								    tcp_ready*  readySignal = NULL;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    int    argc = ((func_args*)args)->argc;
 								    char** argv = ((func_args*)args)->argv;
-											automated test for trusted peer certs
										
										
											2016-03-01 16:35:32 -07:00
+								#ifdef WOLFSSL_TRUST_PEER_CERT
 								    const char* trustCert  = NULL;
 								#endif
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								#ifndef NO_PSK
-											fix psk no identify hint example logic
										
										
											2015-08-03 09:32:51 -07:00
+								    int sendPskIdentityHint = 1;
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								#endif
-											merge in sni
										
										
											2013-05-21 14:37:50 -07:00
+								#ifdef HAVE_SNI
 								    char*  sniHostName = NULL;
 								#endif
-											Trusted CA Key Indication Extension
										
										
											2018-09-28 09:05:59 -07:00
+								#ifdef HAVE_TRUSTED_CA
 								    int trustedCaKeyId = 0;
 								#endif /* HAVE_TRUSTED_CA */
-											OCSP Updates
										
										
											2013-06-20 11:07:54 -07:00
+								#ifdef HAVE_OCSP
 								    int    useOcsp  = 0;
 								    char*  ocspUrl  = NULL;
 								#endif
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#ifdef HAVE_WNR
 								    const char* wnrConfigFile = wnrConfig;
 								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								    char buffer[WOLFSSL_MAX_ERROR_SZ];
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								#ifdef WOLFSSL_TLS13
 								    int noPskDheKe = 0;
 								#endif
 								    int updateKeysIVs = 0;
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								    int postHandAuth = 0;
-											TLS v1.3 0-RTT
										
										
											2017-06-19 11:37:10 +10:00
+								#ifdef WOLFSSL_EARLY_DATA
 								    int earlyData = 0;
 								#endif
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								#ifdef HAVE_SECURE_RENEGOTIATION
 								    int scr = 0;
 								    int forceScr = 0;
 								#endif /* HAVE_SECURE_RENEGOTIATION */
-											Change define name for sending HRR Cookie
										
										
											2017-06-27 08:37:55 +10:00
+								#ifdef WOLFSSL_SEND_HRR_COOKIE
-											Add TLS v1.3 Cookie extension support
										
										
											2017-06-23 16:26:54 +10:00
+								    int hrrCookie = 0;
 								#endif
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								    byte mcastID = 0;
-											Make the skip DH test flag build-conditional.
										
										
											2018-11-30 09:19:11 -08:00
+								#if !defined(NO_DH) && !defined(HAVE_FIPS) && \
 								    !defined(HAVE_SELFTEST) && !defined(WOLFSSL_OLD_PRIME_CHECK)
 								    int doDhKeyCheck = 1;
 								#endif
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#ifdef WOLFSSL_STATIC_MEMORY
-											tlsx with static memory / account for session certs size
										
										
											2016-06-07 15:39:16 -06:00
+								    #if (defined(HAVE_ECC) && !defined(ALT_ECC_SIZE)) \
 								        || defined(SESSION_CERTS)
 								        /* big enough to handle most cases including session certs */
 								        byte memory[204000];
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								    #else
 								        byte memory[80000];
 								    #endif
-											Fixes for static memory with -r session resumption option on client. Fix for possible failed InitSSL cleanup using NULL ssl->ctx for static memory.
										
										
											2017-10-23 10:50:19 -07:00
+								    byte memoryIO[34500]; /* max for IO buffer (TLS packet can be 16k) */
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								    WOLFSSL_MEM_CONN_STATS ssl_stats;
-											Fixes for static memory with -r session resumption option on client. Fix for possible failed InitSSL cleanup using NULL ssl->ctx for static memory.
										
										
											2017-10-23 10:50:19 -07:00
+								    #ifdef DEBUG_WOLFSSL
 								        WOLFSSL_MEM_STATS mem_stats;
 								    #endif
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#endif
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								#ifdef WOLFSSL_TLS13
 								    int onlyKeyShare = 0;
 								    int noTicket = 0;
 								#endif
 								    int useX25519 = 0;
-											Minor fix for the expected failure case use of ssl after free. Renamed skipExit to exitWithRet.
										
										
											2018-05-03 10:02:59 -07:00
+								    int exitWithRet = 0;
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    int loadCertKeyIntoSSLObj = 0;
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								#ifdef HAVE_ENCRYPT_THEN_MAC
 								    int disallowETM = 0;
 								#endif
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								    ((func_args*)args)->return_code = -1; /* error state */
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											fix NO_RSA ecc command line examples default certs
										
										
											2013-03-07 18:20:29 -08:00
+								#ifdef NO_RSA
-											Changes to build with X25519 and Ed25519 only
										
										
											2018-07-23 10:20:18 +10:00
+								    #ifdef HAVE_ECC
 								        verifyCert = (char*)cliEccCertFile;
 								        ourCert    = (char*)eccCertFile;
 								        ourKey     = (char*)eccKeyFile;
 								    #elif defined(HAVE_ED25519)
 								        verifyCert = (char*)cliEdCertFile;
 								        ourCert    = (char*)edCertFile;
 								        ourKey     = (char*)edKeyFile;
 								    #endif
-											fix NO_RSA ecc command line examples default certs
										
										
											2013-03-07 18:20:29 -08:00
+								#endif
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
-											allow dh to be used w/o certs and asn
										
										
											2015-03-27 14:28:05 -07:00
+								    (void)needDH;
-											fix some psk warnings
										
										
											2015-03-27 19:20:31 -07:00
+								    (void)ourKey;
 								    (void)ourCert;
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								    (void)ourDhParam;
-											fix some psk warnings
										
										
											2015-03-27 19:20:31 -07:00
+								    (void)verifyCert;
-											NTRU suites from earlier code
										
										
											2015-07-11 12:52:22 -06:00
+								    (void)useNtruKey;
-											fix some psk warnings
										
										
											2015-03-27 19:20:31 -07:00
+								    (void)doCliCertCheck;
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								    (void)minDhKeyBits;
-											add check for min RSA key size at TLS/SSL level
										
										
											2016-04-14 13:35:49 -06:00
+								    (void)minRsaKeyBits;
-											minimum ECC key size check at TLS/SSL level
										
										
											2016-04-19 15:50:25 -06:00
+								    (void)minEccKeyBits;
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								    (void)alpnList;
-											ALPN : add option to continue in case of client/server protocol mismatch (like OpenSSL)
										
										
											2015-10-13 09:38:40 +02:00
+								    (void)alpn_opt;
-											have calling thread wait for crl monitor thread to setup for simpler cleanup
										
										
											2015-11-23 14:15:12 -08:00
+								    (void)crlFlags;
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								    (void)readySignal;
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								    (void)updateKeysIVs;
-											Allow TLS 1.2 to be compiled out.
										
										
											2018-05-17 09:08:03 +10:00
+								    (void)postHandAuth;
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								    (void)mcastID;
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    (void)loadCertKeyIntoSSLObj;
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								    (void)overrideDateErrors;
-											fix NO_RSA ecc command line examples default certs
										
										
											2013-03-07 18:20:29 -08:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifdef WOLFSSL_TIRTOS
-											fix tirtos merge
										
										
											2014-09-08 19:40:03 -07:00
+								    fdOpenSession(Task_self());
-											Added TI-RTOS support for CyaSSL tests
										
										
											2014-05-08 15:52:20 -07:00
+								#endif
-											updates for vxworks compatibility
										
										
											2015-11-12 13:33:47 -07:00
+								#ifdef WOLFSSL_VXWORKS
 								    useAnyAddr = 1;
 								#else
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								    /* Not Used: h, z, F, T, V, W, X */
-											fixed to take additioanl option for -?
										
										
											2019-02-21 13:44:08 +09:00
+								    while ((ch = mygetopt(argc, argv, "?:"
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								                "abc:defgijk:l:mnop:q:rstuv:wxy"
 								                "A:B:C:D:E:GH:IJKL:MNO:PQR:S:TUVYZ:"
-											Trusted CA Key Indication Extension
										
										
											2018-09-28 09:05:59 -07:00
+								                "01:23:4:5")) != -1) {
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        switch (ch) {
 								            case '?' :
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								                if(myoptarg!=NULL) {
 								                    lng_index = atoi(myoptarg);
 								                    if(lng_index<0||lng_index>1){
 								                        lng_index = 0;
 								                    }
 								                }
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                XEXIT_T(EXIT_SUCCESS);
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            case 'x' :
 								                runWithErrors = 1;
 								                break;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            case 'd' :
 								                doCliCertCheck = 0;
 								                break;
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								            case 'V' :
 								                #ifdef HAVE_CRL
 								                    disableCRL = 1;
 								                #endif
 								                break;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            case 'b' :
 								                useAnyAddr = 1;
 								                break;
 								            case 's' :
 								                usePsk = 1;
 								                break;
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								            case 'j' :
 								                usePskPlus = 1;
 								                break;
-											NTRU suites from earlier code
										
										
											2015-07-11 12:52:22 -06:00
+								            case 'n' :
 								                useNtruKey = 1;
 								                break;
-											add -u for DTLS UPD command line client/server examples
										
										
											2012-08-02 11:54:49 -07:00
+								            case 'u' :
 								                doDTLS  = 1;
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								                dtlsUDP = 1;
 								                break;
 								            case 'G' :
 								            #ifdef WOLFSSL_SCTP
 								                doDTLS  = 1;
 								                dtlsSCTP = 1;
 								            #endif
-											add -u for DTLS UPD command line client/server examples
										
										
											2012-08-02 11:54:49 -07:00
+								                break;
-											add fewerPacket/group messages to example client/server and disalbe client cert/key load
										
										
											2013-04-19 13:10:19 -07:00
+								            case 'f' :
 								                fewerPackets = 1;
 								                break;
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
+								            case 'R' :
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								                serverReadyFile = myoptarg;
-											add server_ready file to externally monitor example server for ready to accept, -r option
										
										
											2014-11-26 12:13:47 -08:00
+								                break;
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
+								            case 'r' :
 								                #ifndef NO_SESSION_CACHE
 								                    resume = 1;
 								                #endif
 								                break;
-											add Rsa Sign/Verify callbacks, client/server examples
										
										
											2013-08-26 16:27:29 -07:00
+								            case 'P' :
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            #ifdef HAVE_PK_CALLBACKS
-											add Rsa Sign/Verify callbacks, client/server examples
										
										
											2013-08-26 16:27:29 -07:00
+								                pkCallbacks = 1;
 								            #endif
 								                break;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            case 'p' :
-											fix clang -Wconversion except -Wsign-conversion
										
										
											2014-03-03 16:46:48 -08:00
+								                port = (word16)atoi(myoptarg);
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                break;
-											add option for bidirectional shutdown
										
										
											2015-01-30 08:41:34 -07:00
+								            case 'w' :
-											shutdown shadows global in sys/socket.h line 576 renamed wc_shutdown
										
										
											2015-02-18 08:00:25 -07:00
+								                wc_shutdown = 1;
-											add option for bidirectional shutdown
										
										
											2015-01-30 08:41:34 -07:00
+								                break;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            case 'v' :
-											Fix downgrading from TLS v1.3 to TLS v1.2
										
										
											2018-02-22 11:05:58 +10:00
+								                if (myoptarg[0] == 'd') {
 								                    version = SERVER_DOWNGRADE_VERSION;
 								                    break;
 								                }
-											Adds build option WOLFSSL_EITHER_SIDE for deferring the "side" of the TLS session until first connect or accept. Added the DTLS generic v1.0 and v1.2 methods for "either" side. Added "either" methods unit tests. Added "either" -v e support to example client/server. Fix to expose wolfSSL_use_certificate_file and wolfSSL_use_PrivateKey_file without OPENSSL_EXTRA. Cleanup of the methods for (void)heap and log messages. Spelling fixes.
										
										
											2018-10-04 14:48:53 -07:00
+								            #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
 								                else if (myoptarg[0] == 'e') {
 								                    version = EITHER_DOWNGRADE_VERSION;
-											Fixes for various scan-build reports.
										
										
											2018-12-27 11:08:30 -08:00
+								                #ifndef NO_CERTS
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								                    loadCertKeyIntoSSLObj = 1;
-											Fixes for various scan-build reports.
										
										
											2018-12-27 11:08:30 -08:00
+								                #endif
-											Adds build option WOLFSSL_EITHER_SIDE for deferring the "side" of the TLS session until first connect or accept. Added the DTLS generic v1.0 and v1.2 methods for "either" side. Added "either" methods unit tests. Added "either" -v e support to example client/server. Fix to expose wolfSSL_use_certificate_file and wolfSSL_use_PrivateKey_file without OPENSSL_EXTRA. Cleanup of the methods for (void)heap and log messages. Spelling fixes.
										
										
											2018-10-04 14:48:53 -07:00
+								                    break;
 								                }
 								            #endif
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								                version = atoi(myoptarg);
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								                if (version < 0 || version > 4) {
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                    Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                    XEXIT_T(MY_EX_USAGE);
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                }
 								                break;
 								            case 'l' :
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								                cipherList = myoptarg;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                break;
-											Fix to calc BuildSHA_CertVerify if WOLFSSL_ALLOW_TLS_SHA1. Fix to add check for DTLS to not allow stream ciphers. Removed the RC4 tests from the test-dtls.conf. Added support for using default suites on client side. Switched the arg to “-H”. Cleanup of the example server/client args list. Fixes for build with “--disable-sha”.
										
										
											2017-04-05 11:21:11 -07:00
+								            case 'H' :
-											Testing improvements for cert gen and TLS cert validation:
										
										
											2017-10-19 16:17:51 -07:00
+								                if (XSTRNCMP(myoptarg, "defCipherList", 13) == 0) {
 								                    printf("Using default cipher list for testing\n");
 								                    useDefCipherList = 1;
 								                }
-											Added test cases for ensuring forced error fails on client and server. Added test cases to ensure bad certificate can be overriden.
										
										
											2018-08-29 10:55:12 -07:00
+								                else if (XSTRNCMP(myoptarg, "exitWithRet", 11) == 0) {
-											* Added support for expected fail test cases with example client/server and suites unit test.
										
										
											2018-05-03 09:40:51 -07:00
+								                    printf("Skip exit() for testing\n");
-											Minor fix for the expected failure case use of ssl after free. Renamed skipExit to exitWithRet.
										
										
											2018-05-03 10:02:59 -07:00
+								                    exitWithRet = 1;
-											Testing improvements for cert gen and TLS cert validation:
										
										
											2017-10-19 16:17:51 -07:00
+								                }
-											Added test cases for ensuring forced error fails on client and server. Added test cases to ensure bad certificate can be overriden.
										
										
											2018-08-29 10:55:12 -07:00
+								                else if (XSTRNCMP(myoptarg, "verifyFail", 10) == 0) {
 								                    printf("Verify should fail\n");
 								                    myVerifyFail = 1;
 								                }
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								                else if (XSTRNCMP(myoptarg, "loadSSL", 7) == 0) {
-											memory management with OCSP requests
										
										
											2019-01-14 09:49:50 -07:00
+								                    printf("Also load cert/key into wolfSSL object\n");
 								                #ifndef NO_CERTS
 								                    loadCertKeyIntoSSLObj = 2;
 								                #endif
 								                }
 								                else if (XSTRNCMP(myoptarg, "loadSSLOnly", 11) == 0) {
 								                    printf("Only load cert/key into wolfSSL object\n");
-											Fixes for various scan-build reports.
										
										
											2018-12-27 11:08:30 -08:00
+								                #ifndef NO_CERTS
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								                    loadCertKeyIntoSSLObj = 1;
-											Fixes for various scan-build reports.
										
										
											2018-12-27 11:08:30 -08:00
+								                #endif
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								                }
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								                else if (XSTRNCMP(myoptarg, "disallowETM", 11) == 0) {
 								                    printf("Disallow Encrypt-Then-MAC\n");
 								                #ifdef HAVE_ENCRYPT_THEN_MAC
 								                    disallowETM = 1;
 								                #endif
 								                }
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								                else if (XSTRNCMP(myoptarg, "overrideDateErr", 15) == 0) {
-											Fixes for minor nightly build tests.
										
										
											2019-09-25 07:17:57 -07:00
+								                #if !defined(NO_FILESYSTEM) && !defined(NO_CERTS)
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								                    overrideDateErrors = 1;
-											Fixes for minor nightly build tests.
										
										
											2019-09-25 07:17:57 -07:00
+								                #endif
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								                }
-											Testing improvements for cert gen and TLS cert validation:
										
										
											2017-10-19 16:17:51 -07:00
+								                else {
 								                    Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                    XEXIT_T(MY_EX_USAGE);
-											Testing improvements for cert gen and TLS cert validation:
										
										
											2017-10-19 16:17:51 -07:00
+								                }
-											Added test for server to use the default cipher suite list using new “-U” option. This allows the InitSuites logic to be used for determining cipher suites instead of always overriding using the “-l” option. Now both versions are used, so tests are done with wolfSSL_CTX_set_cipher_list and InitSuites. Removed a few cipher suite tests from test.conf that are not valid with old TLS. These were not picked up as failures before because wolfSSL_CTX_set_cipher_list matched on name only, allowing older versions to use the suite.
										
										
											2017-04-04 14:31:47 -07:00
+								                break;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            case 'A' :
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								                verifyCert = myoptarg;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                break;
 								            case 'c' :
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								                ourCert = myoptarg;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                break;
 								            case 'k' :
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								                ourKey = myoptarg;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								                break;
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								            case 'D' :
 								                #ifndef NO_DH
 								                    ourDhParam = myoptarg;
 								                #endif
 								                break;
 								            case 'Z' :
 								                #ifndef NO_DH
 								                    minDhKeyBits = atoi(myoptarg);
 								                    if (minDhKeyBits <= 0 || minDhKeyBits > 16000) {
 								                        Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                        XEXIT_T(MY_EX_USAGE);
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								                    }
 								                #endif
 								                break;
-											added non-blocking and session resume as example server and client command line options
										
										
											2012-10-17 13:13:58 -07:00
+								            case 'N':
 								                nonBlocking = 1;
 								                break;
-											merge in sni
										
										
											2013-05-21 14:37:50 -07:00
+								            case 'S' :
 								                #ifdef HAVE_SNI
 								                    sniHostName = myoptarg;
 								                #endif
 								                break;
-											OCSP Updates
										
										
											2013-06-20 11:07:54 -07:00
+								            case 'o' :
 								                #ifdef HAVE_OCSP
 								                    useOcsp = 1;
 								                #endif
 								                break;
 								            case 'O' :
 								                #ifdef HAVE_OCSP
 								                    useOcsp = 1;
 								                    ocspUrl = myoptarg;
 								                #endif
 								                break;
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
+								            case 'a' :
 								                #ifdef HAVE_ANON
 								                    useAnon = 1;
 								                #endif
 								                break;
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								            case 'I':
 								                #ifndef NO_PSK
-											fix psk no identify hint example logic
										
										
											2015-08-03 09:32:51 -07:00
+								                    sendPskIdentityHint = 0;
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								                #endif
 								                break;
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								            case 'L' :
 								                #ifdef HAVE_ALPN
 								                    alpnList = myoptarg;
-											ALPN : add option to continue in case of client/server protocol mismatch (like OpenSSL)
										
										
											2015-10-13 09:38:40 +02:00
 								                    if (alpnList[0] == 'C' && alpnList[1] == ':')
 								                        alpn_opt = WOLFSSL_ALPN_CONTINUE_ON_MISMATCH;
 								                    else if (alpnList[0] == 'F' && alpnList[1] == ':')
 								                        alpn_opt = WOLFSSL_ALPN_FAILED_ON_MISMATCH;
 								                    else {
 								                        Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                        XEXIT_T(MY_EX_USAGE);
-											ALPN : add option to continue in case of client/server protocol mismatch (like OpenSSL)
										
										
											2015-10-13 09:38:40 +02:00
+								                    }
 								                    alpnList += 2;
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								                #endif
 								                break;
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
 								            case 'i' :
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								                loops = -1;
 								                break;
 								            case 'C' :
 								                loops = atoi(myoptarg);
 								                if (loops <= 0) {
 								                    Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                    XEXIT_T(MY_EX_USAGE);
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								                }
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                break;
 								            case 'e' :
 								                echoData = 1;
 								                break;
 								            case 'B':
 								                throughput = atoi(myoptarg);
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								                for (; *myoptarg != '\0'; myoptarg++) {
 								                    if (*myoptarg == ',') {
 								                        block = atoi(myoptarg + 1);
 								                        break;
 								                    }
 								                }
 								                if (throughput <= 0 || block <= 0) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                    Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                    XEXIT_T(MY_EX_USAGE);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                }
 								                break;
-											automated test for trusted peer certs
										
										
											2016-03-01 16:35:32 -07:00
+								            #ifdef WOLFSSL_TRUST_PEER_CERT
 								            case 'E' :
 								                 trustCert = myoptarg;
 								                break;
 								            #endif
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								            case 'q' :
 								                #ifdef HAVE_WNR
 								                    wnrConfigFile = myoptarg;
 								                #endif
 								                break;
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								            case 'g' :
 								                useWebServerMsg = 1;
 								                break;
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								            case 'y' :
 								                #if defined(WOLFSSL_TLS13) && !defined(NO_DH)
 								                    onlyKeyShare = 1;
 								                #endif
 								                break;
 								            case 'Y' :
 								                #if defined(WOLFSSL_TLS13) && defined(HAVE_ECC)
 								                    onlyKeyShare = 2;
 								                #endif
 								                break;
 								            case 't' :
 								                #ifdef HAVE_CURVE25519
 								                    useX25519 = 1;
 								                    #if defined(WOLFSSL_TLS13) && defined(HAVE_ECC)
 								                        onlyKeyShare = 2;
 								                    #endif
 								                #endif
 								                break;
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								            case 'K' :
 								                #ifdef WOLFSSL_TLS13
 								                    noPskDheKe = 1;
 								                #endif
 								                break;
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								            case 'T' :
 								                #if defined(WOLFSSL_TLS13) && defined(HAVE_SESSION_TICKET)
 								                    noTicket = 1;
 								                #endif
 								                break;
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								            case 'U' :
 								                #ifdef WOLFSSL_TLS13
 								                    updateKeysIVs = 1;
 								                #endif
 								                break;
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								            case 'Q' :
 								            #if defined(WOLFSSL_TLS13) && defined(WOLFSSL_POST_HANDSHAKE_AUTH)
 								                postHandAuth = 1;
 								                doCliCertCheck = 0;
 								            #endif
 								                break;
-											Add TLS v1.3 Cookie extension support
										
										
											2017-06-23 16:26:54 +10:00
+								            case 'J' :
-											Change define name for sending HRR Cookie
										
										
											2017-06-27 08:37:55 +10:00
+								            #ifdef WOLFSSL_SEND_HRR_COOKIE
-											Add TLS v1.3 Cookie extension support
										
										
											2017-06-23 16:26:54 +10:00
+								                hrrCookie = 1;
 								            #endif
 								                break;
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								            case 'M' :
 								            #ifdef HAVE_SECURE_RENEGOTIATION
 								                scr = 1;
 								            #endif /* HAVE_SECURE_RENEGOTIATION */
 								                break;
 								            case 'm' :
 								            #ifdef HAVE_SECURE_RENEGOTIATION
 								                scr = 1;
 								                forceScr = 1;
 								            #endif /* HAVE_SECURE_RENEGOTIATION */
 								                break;
-											TLS v1.3 0-RTT
										
										
											2017-06-19 11:37:10 +10:00
+								            case '0' :
 								            #ifdef WOLFSSL_EARLY_DATA
 								                earlyData = 1;
 								            #endif
 								                break;
-											DHE Speed Up
										
										
											2018-12-03 13:53:44 -08:00
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								            case '1' :
 								                lng_index = atoi(myoptarg);
 								                if(lng_index<0||lng_index>1){
 								                    lng_index = 0;
 								                }
 								                break;
-											DHE Speed Up
										
										
											2018-12-03 13:53:44 -08:00
 								            case '2' :
 								               #if !defined(NO_DH) && !defined(HAVE_FIPS) && \
 								                   !defined(HAVE_SELFTEST) && !defined(WOLFSSL_OLD_PRIME_CHECK)
 								                    doDhKeyCheck = 0;
 								                #endif
 								                break;
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								            case '3' :
 								                #ifdef WOLFSSL_MULTICAST
 								                    doMcast = 1;
 								                    mcastID = (byte)(atoi(myoptarg) & 0xFF);
 								                #endif
 								                break;
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								            case '4' :
 								                #ifdef WOLFSSL_DTLS
 								                    XMEMSET(&dtlsCtx, 0, sizeof(dtlsCtx));
 								                    doBlockSeq = 1;
 								                    dtlsCtx.blockSeq = atoi(myoptarg);
 								                #endif
-											Fix a fall-through bug in the server options parsing around a new
										
										
											2019-02-19 10:31:37 -08:00
+								                    break;
-											Trusted CA Key Indication Extension
										
										
											2018-09-28 09:05:59 -07:00
 								            case '5' :
 								            #ifdef HAVE_TRUSTED_CA
 								                trustedCaKeyId = 1;
 								            #endif /* HAVE_TRUSTED_CA */
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								                break;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            default:
 								                Usage();
-											Added new build option --enable-memtest or WOLFSSL_FORCE_MALLOC_FAIL_TEST which enables random malloc failures for testing. This test supresses the abort() calls to detect seg faults. A new script ./scripts/memtest.sh starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295--- and rerun using ./tests/unit.test 295.
										
										
											2018-07-27 10:16:14 -07:00
+								                XEXIT_T(MY_EX_USAGE);
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        }
 								    }
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								    myoptind = 0;      /* reset for test cases */
-											Example client/server compatible with VxWorks
										
										
											2015-10-29 13:39:02 -06:00
+								#endif /* !WOLFSSL_VXWORKS */
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								    /* Can only use DTLS over UDP or SCTP, can't do both. */
 								    if (dtlsUDP && dtlsSCTP) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "Cannot use DTLS with both UDP and SCTP.");
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								    }
-											added test cases and fixed a bug with AEAD ciphers with DTLSv1.2.
										
										
											2013-03-07 22:52:51 -08:00
+								    /* sort out DTLS versus TLS versions */
 								    if (version == CLIENT_INVALID_VERSION) {
 								        if (doDTLS)
 								            version = CLIENT_DTLS_DEFAULT_VERSION;
 								        else
 								            version = CLIENT_DEFAULT_VERSION;
 								    }
 								    else {
 								        if (doDTLS) {
 								            if (version == 3)
 								                version = -2;
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								        #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
 								            else if (version == EITHER_DOWNGRADE_VERSION)
 								                version = -3;
 								        #endif
-											added test cases and fixed a bug with AEAD ciphers with DTLSv1.2.
										
										
											2013-03-07 22:52:51 -08:00
+								            else
 								                version = -1;
 								        }
 								    }
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#ifdef HAVE_WNR
 								    if (wc_InitNetRandom(wnrConfigFile, NULL, 5000) != 0)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "can't load whitewood net random config file");
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#endif
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    switch (version) {
-											compile option to leave out MD5 and SSL code
										
										
											2012-11-26 18:40:43 -08:00
+								#ifndef NO_OLD_TLS
-											disable SSLv3 by default
										
										
											2015-08-12 16:39:13 -07:00
+								    #ifdef WOLFSSL_ALLOW_SSLV3
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        case 0:
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								            method = wolfSSLv3_server_method_ex;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            break;
-											disable SSLv3 by default
										
										
											2015-08-12 16:39:13 -07:00
+								    #endif
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											pull in Kojo MDK-ARM projects, changes
										
										
											2013-05-16 09:47:27 -07:00
+								    #ifndef NO_TLS
-											Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
										
										
											2017-11-14 13:55:48 -08:00
+								        #ifdef WOLFSSL_ALLOW_TLSV10
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        case 1:
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								            method = wolfTLSv1_server_method_ex;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            break;
-											Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
										
										
											2017-11-14 13:55:48 -08:00
+								        #endif
-											pull in Kojo MDK-ARM projects, changes
										
										
											2013-05-16 09:47:27 -07:00
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        case 2:
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								            method = wolfTLSv1_1_server_method_ex;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            break;
-											Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
										
										
											2017-11-14 13:55:48 -08:00
+								    #endif /* !NO_TLS */
 								#endif /* !NO_OLD_TLS */
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											pull in Kojo MDK-ARM projects, changes
										
										
											2013-05-16 09:47:27 -07:00
+								#ifndef NO_TLS
-											Allow TLS 1.2 to be compiled out.
										
										
											2018-05-17 09:08:03 +10:00
+								    #ifndef WOLFSSL_NO_TLS12
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        case 3:
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								            method = wolfTLSv1_2_server_method_ex;
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								            break;
-											Allow TLS 1.2 to be compiled out.
										
										
											2018-05-17 09:08:03 +10:00
+								    #endif
-											QSH (quantum-safe handshake) extension
										
										
											2015-07-07 09:55:58 -06:00
-											Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
										
										
											2017-11-14 13:55:48 -08:00
+								    #ifdef WOLFSSL_TLS13
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								        case 4:
 								            method = wolfTLSv1_3_server_method_ex;
 								            break;
-											Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
										
										
											2017-11-14 13:55:48 -08:00
+								    #endif
-											Fix downgrading from TLS v1.3 to TLS v1.2
										
										
											2018-02-22 11:05:58 +10:00
 								        case SERVER_DOWNGRADE_VERSION:
 								            method = wolfSSLv23_server_method_ex;
 								            break;
-											Adds build option WOLFSSL_EITHER_SIDE for deferring the "side" of the TLS session until first connect or accept. Added the DTLS generic v1.0 and v1.2 methods for "either" side. Added "either" methods unit tests. Added "either" -v e support to example client/server. Fix to expose wolfSSL_use_certificate_file and wolfSSL_use_PrivateKey_file without OPENSSL_EXTRA. Cleanup of the methods for (void)heap and log messages. Spelling fixes.
										
										
											2018-10-04 14:48:53 -07:00
+								    #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
 								        case EITHER_DOWNGRADE_VERSION:
 								            method = wolfSSLv23_method_ex;
 								            break;
 								    #endif
-											Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
										
										
											2017-11-14 13:55:48 -08:00
+								#endif /* NO_TLS */
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifdef WOLFSSL_DTLS
-											turn off DTLSv1 functions for disable old tls
										
										
											2015-04-08 13:29:25 -07:00
+								    #ifndef NO_OLD_TLS
-											add -u for DTLS UPD command line client/server examples
										
										
											2012-08-02 11:54:49 -07:00
+								        case -1:
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								            method = wolfDTLSv1_server_method_ex;
-											add -u for DTLS UPD command line client/server examples
										
										
											2012-08-02 11:54:49 -07:00
+								            break;
-											turn off DTLSv1 functions for disable old tls
										
										
											2015-04-08 13:29:25 -07:00
+								    #endif
-											added test cases and fixed a bug with AEAD ciphers with DTLSv1.2.
										
										
											2013-03-07 22:52:51 -08:00
-											Allow TLS 1.2 to be compiled out.
										
										
											2018-05-17 09:08:03 +10:00
+								    #ifndef WOLFSSL_NO_TLS12
-											added test cases and fixed a bug with AEAD ciphers with DTLSv1.2.
										
										
											2013-03-07 22:52:51 -08:00
+								        case -2:
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								            method = wolfDTLSv1_2_server_method_ex;
-											added test cases and fixed a bug with AEAD ciphers with DTLSv1.2.
										
										
											2013-03-07 22:52:51 -08:00
+								            break;
-											Allow TLS 1.2 to be compiled out.
										
										
											2018-05-17 09:08:03 +10:00
+								    #endif
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    #if defined(OPENSSL_EXTRA) || defined(WOLFSSL_EITHER_SIDE)
 								        case -3:
 								            method = wolfDTLSv1_2_method_ex;
 								            break;
 								    #endif
-											add -u for DTLS UPD command line client/server examples
										
										
											2012-08-02 11:54:49 -07:00
+								#endif
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        default:
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "Bad SSL version");
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								    }
-											better error checking on server example
										
										
											2012-07-30 18:15:08 -07:00
+								    if (method == NULL)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "unable to get method");
-											better error checking on server example
										
										
											2012-07-30 18:15:08 -07:00
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#ifdef WOLFSSL_STATIC_MEMORY
-											add helper functions for choosing static buffer size
										
										
											2016-07-21 12:11:15 -06:00
+								    #ifdef DEBUG_WOLFSSL
 								    /* print off helper buffer sizes for use with static memory
 								     * printing to stderr incase of debug mode turned on */
 								    fprintf(stderr, "static memory management size = %d\n",
 								            wolfSSL_MemoryPaddingSz());
 								    fprintf(stderr, "calculated optimum general buffer size = %d\n",
 								            wolfSSL_StaticBufferSz(memory, sizeof(memory), 0));
 								    fprintf(stderr, "calculated optimum IO buffer size      = %d\n",
 								            wolfSSL_StaticBufferSz(memoryIO, sizeof(memoryIO),
 								                                                  WOLFMEM_IO_POOL_FIXED));
 								    #endif /* DEBUG_WOLFSSL */
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								    if (wolfSSL_CTX_load_static_memory(&ctx, method, memory, sizeof(memory),0,1)
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "unable to load static memory and create ctx");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
 								    /* load in a buffer for IO */
 								    if (wolfSSL_CTX_load_static_memory(&ctx, NULL, memoryIO, sizeof(memoryIO),
 								                                 WOLFMEM_IO_POOL_FIXED | WOLFMEM_TRACK_STATS, 1)
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "unable to load static memory and create ctx");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#else
-											extended method function
										
										
											2016-06-09 23:41:51 -06:00
+								    ctx = SSL_CTX_new(method(NULL));
-											Added support for static memory with wolfCrypt. Adds new "wc_LoadStaticMemory" function and moves "wolfSSL_init_memory_heap" into wolfCrypt layer. Enhanced wolfCrypt test and benchmark to use the static memory tool if enabled. Added support for static memory with "WOLFSSL_DEBUG_MEMORY" defined. Fixed issue with have-iopool and XMALLOC/XFREE. Added check to prevent using WOLFSSL_STATIC_MEMORY with HAVE_IO_POOL, XMALLOC_USER or NO_WOLFSSL_MEMORY defined.
										
										
											2016-08-29 10:38:06 -07:00
+								#endif /* WOLFSSL_STATIC_MEMORY */
-											better error checking on server example
										
										
											2012-07-30 18:15:08 -07:00
+								    if (ctx == NULL)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "unable to get ctx");
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											initial server side session ticket support
										
										
											2015-05-15 12:51:44 -07:00
+								#if defined(HAVE_SESSION_TICKET) && defined(HAVE_CHACHA) && \
 								                                    defined(HAVE_POLY1305)
 								    if (TicketInit() != 0)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "unable to setup Session Ticket Key context");
-											initial server side session ticket support
										
										
											2015-05-15 12:51:44 -07:00
+								    wolfSSL_CTX_set_TicketEncCb(ctx, myTicketEncCb);
 								#endif
-											Added test for server to use the default cipher suite list using new “-U” option. This allows the InitSuites logic to be used for determining cipher suites instead of always overriding using the “-l” option. Now both versions are used, so tests are done with wolfSSL_CTX_set_cipher_list and InitSuites. Removed a few cipher suite tests from test.conf that are not valid with old TLS. These were not picked up as failures before because wolfSSL_CTX_set_cipher_list matched on name only, allowing older versions to use the suite.
										
										
											2017-04-04 14:31:47 -07:00
+								    if (cipherList && !useDefCipherList) {
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (SSL_CTX_set_cipher_list(ctx, cipherList) != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "server can't set cipher list 1");
-											Added test for server to use the default cipher suite list using new “-U” option. This allows the InitSuites logic to be used for determining cipher suites instead of always overriding using the “-l” option. Now both versions are used, so tests are done with wolfSSL_CTX_set_cipher_list and InitSuites. Removed a few cipher suite tests from test.conf that are not valid with old TLS. These were not picked up as failures before because wolfSSL_CTX_set_cipher_list matched on name only, allowing older versions to use the suite.
										
										
											2017-04-04 14:31:47 -07:00
+								    }
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifdef WOLFSSL_LEANPSK
-											scan-build warnings related to enable-psk, disable-asn,rsa,ecc
										
										
											2016-04-11 11:13:26 -06:00
+								    if (!usePsk) {
 								        usePsk = 1;
 								    }
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								#endif
-											Changes to build with X25519 and Ed25519 only
										
										
											2018-07-23 10:20:18 +10:00
+								#if defined(NO_RSA) && !defined(HAVE_ECC) && !defined(HAVE_ED25519)
-											scan-build warnings related to enable-psk, disable-asn,rsa,ecc
										
										
											2016-04-11 11:13:26 -06:00
+								    if (!usePsk) {
 								        usePsk = 1;
 								    }
-											fix normal psk no rsa examples
										
										
											2013-03-11 13:19:43 -07:00
+								#endif
-											add fewerPacket/group messages to example client/server and disalbe client cert/key load
										
										
											2013-04-19 13:10:19 -07:00
+								    if (fewerPackets)
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        wolfSSL_CTX_set_group_messages(ctx);
-											add fewerPacket/group messages to example client/server and disalbe client cert/key load
										
										
											2013-04-19 13:10:19 -07:00
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								#ifdef WOLFSSL_SCTP
 								    if (dtlsSCTP)
 								        wolfSSL_CTX_dtls_set_sctp(ctx);
 								#endif
-											Fixes for various build configurations. Added --enable-enckeys option to enable support for encrypted PEM private keys using password callback without having to use opensslextra. Moved ASN CryptKey function to wc_encrypt.c as wc_CryptKey. Fixup some missing heap args on XMALLOC/XFREE in asn.c.
										
										
											2018-03-30 15:48:15 -07:00
+								#ifdef WOLFSSL_ENCRYPTED_KEYS
-											make sure passwd_cb called before load private key in server example
										
										
											2013-12-23 11:19:21 -08:00
+								    SSL_CTX_set_default_passwd_cb(ctx, PasswordCallBack);
 								#endif
-											Added "wolfSSL_use_certificate_chain_buffer_format". Added  "wolfSSL_SESSION_CIPHER_get_name" to get cipher suite name using WOLFSSL_SESSION*. Moved the "wolfSSL_get_cipher_name_from_suite" function to internal.c. Added new server-cert-chain.der, which is combination of ca-cert.der and server-cert.der. Enhanced load_buffer to detect format using file extension. Can test use of DER cert chain with NO_FILESYSTEM defined using "./examples/server/server -c ./certs/server-cert-chain.der -k ./certs/server-key.der".
										
										
											2016-11-23 11:25:01 -08:00
+								#if !defined(NO_CERTS)
-											memory management with OCSP requests
										
										
											2019-01-14 09:49:50 -07:00
+								    if ((!usePsk || usePskPlus) && !useAnon && !(loadCertKeyIntoSSLObj == 1)) {
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    #ifndef TEST_LOAD_BUFFER
-											Merge branch 'csr'
										
										
											2015-12-28 19:38:04 -03:00
+								        if (SSL_CTX_use_certificate_chain_file(ctx, ourCert)
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                                         != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "can't load server cert file, check file and run from"
-											Error printouts name changed
										
										
											2015-01-20 12:36:20 -07:00
+								                    " wolfSSL home dir");
-											Added "wolfSSL_use_certificate_chain_buffer_format". Added  "wolfSSL_SESSION_CIPHER_get_name" to get cipher suite name using WOLFSSL_SESSION*. Moved the "wolfSSL_get_cipher_name_from_suite" function to internal.c. Added new server-cert-chain.der, which is combination of ca-cert.der and server-cert.der. Enhanced load_buffer to detect format using file extension. Can test use of DER cert chain with NO_FILESYSTEM defined using "./examples/server/server -c ./certs/server-cert-chain.der -k ./certs/server-key.der".
										
										
											2016-11-23 11:25:01 -08:00
+								    #else
 								        /* loads cert chain file using buffer API */
 								        load_buffer(ctx, ourCert, WOLFSSL_CERT_CHAIN);
 								    #endif
-											added build option for leanPSK
										
										
											2012-10-29 15:39:42 -07:00
+								    }
 								#endif
-											add ntru cipher suite tests
										
										
											2012-08-07 17:18:56 -07:00
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								#ifndef NO_DH
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								    if (wolfSSL_CTX_SetMinDhKey_Sz(ctx, (word16)minDhKeyBits) != WOLFSSL_SUCCESS) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "Error setting minimum DH key size");
-											add check for min RSA key size at TLS/SSL level
										
										
											2016-04-14 13:35:49 -06:00
+								    }
 								#endif
 								#ifndef NO_RSA
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								    if (wolfSSL_CTX_SetMinRsaKey_Sz(ctx, minRsaKeyBits) != WOLFSSL_SUCCESS){
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "Error setting minimum RSA key size");
-											add check for min RSA key size at TLS/SSL level
										
										
											2016-04-14 13:35:49 -06:00
+								    }
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
+								#endif
-											minimum ECC key size check at TLS/SSL level
										
										
											2016-04-19 15:50:25 -06:00
+								#ifdef HAVE_ECC
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								    if (wolfSSL_CTX_SetMinEccKey_Sz(ctx, minEccKeyBits) != WOLFSSL_SUCCESS){
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "Error setting minimum ECC key size");
-											minimum ECC key size check at TLS/SSL level
										
										
											2016-04-19 15:50:25 -06:00
+								    }
 								#endif
-											added check for allowed minimum DH key size
										
										
											2015-05-21 10:11:21 -07:00
-											NTRU suites from earlier code
										
										
											2015-07-11 12:52:22 -06:00
+								#ifdef HAVE_NTRU
 								    if (useNtruKey) {
-											Refactor the cert renewal scripts with error handling
										
										
											2018-09-19 14:03:10 -06:00
+								        if (wolfSSL_CTX_use_NTRUPrivateKey_file(ctx, ourKey)
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                                != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "can't load ntru key file, "
-											NTRU suites from earlier code
										
										
											2015-07-11 12:52:22 -06:00
+								                    "Please run from wolfSSL home dir");
 								    }
 								#endif
-											Added "wolfSSL_use_certificate_chain_buffer_format". Added  "wolfSSL_SESSION_CIPHER_get_name" to get cipher suite name using WOLFSSL_SESSION*. Moved the "wolfSSL_get_cipher_name_from_suite" function to internal.c. Added new server-cert-chain.der, which is combination of ca-cert.der and server-cert.der. Enhanced load_buffer to detect format using file extension. Can test use of DER cert chain with NO_FILESYSTEM defined using "./examples/server/server -c ./certs/server-cert-chain.der -k ./certs/server-key.der".
										
										
											2016-11-23 11:25:01 -08:00
+								#if !defined(NO_CERTS)
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    #ifdef HAVE_PK_CALLBACKS
 								        pkCbInfo.ourKey = ourKey;
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
+								    #endif
-											memory management with OCSP requests
										
										
											2019-01-14 09:49:50 -07:00
+								    if (!useNtruKey && (!usePsk || usePskPlus) && !useAnon
 								        && !(loadCertKeyIntoSSLObj == 1)
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    #if defined(HAVE_PK_CALLBACKS) && defined(TEST_PK_PRIVKEY)
 								        && !pkCallbacks
 								    #endif /* HAVE_PK_CALLBACKS && TEST_PK_PRIVKEY */
 								    ) {
 								    #ifndef TEST_LOAD_BUFFER
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (SSL_CTX_use_PrivateKey_file(ctx, ourKey, WOLFSSL_FILETYPE_PEM)
 								                                         != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "can't load server private key file, check file and run "
-											Error printouts name changed
										
										
											2015-01-20 12:36:20 -07:00
+								                "from wolfSSL home dir");
-											Added "wolfSSL_use_certificate_chain_buffer_format". Added  "wolfSSL_SESSION_CIPHER_get_name" to get cipher suite name using WOLFSSL_SESSION*. Moved the "wolfSSL_get_cipher_name_from_suite" function to internal.c. Added new server-cert-chain.der, which is combination of ca-cert.der and server-cert.der. Enhanced load_buffer to detect format using file extension. Can test use of DER cert chain with NO_FILESYSTEM defined using "./examples/server/server -c ./certs/server-cert-chain.der -k ./certs/server-key.der".
										
										
											2016-11-23 11:25:01 -08:00
+								    #else
 								        /* loads private key file using buffer API */
 								        load_buffer(ctx, ourKey, WOLFSSL_KEY);
 								    #endif
-											add ntru cipher suite tests
										
										
											2012-08-07 17:18:56 -07:00
+								    }
-											added build option for leanPSK
										
										
											2012-10-29 15:39:42 -07:00
+								#endif
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								    if (usePsk || usePskPlus) {
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								#ifndef NO_PSK
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
+								        SSL_CTX_set_psk_server_callback(ctx, my_psk_server_cb);
-											Separate PSK callback for TLS 1.3
										
										
											2018-08-14 08:55:57 +10:00
+								    #ifdef WOLFSSL_TLS13
 								        wolfSSL_CTX_set_psk_server_tls13_callback(ctx, my_psk_server_tls13_cb);
 								    #endif
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
-											fix psk no identify hint example logic
										
										
											2015-08-03 09:32:51 -07:00
+								        if (sendPskIdentityHint == 1)
-											Option for no PSK Id Hint and test cases
										
										
											2015-07-31 21:51:04 -06:00
+								            SSL_CTX_use_psk_identity_hint(ctx, "cyassl server");
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								        if (cipherList == NULL && !usePskPlus) {
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								            const char *defaultCipherList;
-											External PSK working in TLS13
										
										
											2017-06-07 08:29:08 +10:00
+								        #if defined(HAVE_AESGCM) && !defined(NO_DH)
 								            #ifdef WOLFSSL_TLS13
 								                defaultCipherList = "DHE-PSK-AES128-GCM-SHA256:"
 								                                    "TLS13-AES128-GCM-SHA256";
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								            #else
-											External PSK working in TLS13
										
										
											2017-06-07 08:29:08 +10:00
+								                defaultCipherList = "DHE-PSK-AES128-GCM-SHA256";
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								            #endif
-											External PSK working in TLS13
										
										
											2017-06-07 08:29:08 +10:00
+								                needDH = 1;
 								        #elif defined(HAVE_NULL_CIPHER)
 								                defaultCipherList = "PSK-NULL-SHA256";
 								        #else
 								                defaultCipherList = "PSK-AES128-CBC-SHA256";
 								        #endif
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            if (SSL_CTX_set_cipher_list(ctx, defaultCipherList) != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "server can't set cipher list 2");
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								        }
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								#endif
-											build test covers leanpsk
										
										
											2012-10-30 12:51:14 -07:00
+								    }
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											Fixes for key size detection when using PK callbacks (HSM) and no private key has been loaded (affects HAVE_PK_CALLBACKS on server side only when no dummy private key is loaded). Fix for possible leak during ECC min key size failure with small stack. Added new API wc_RsaPublicKeyDecode_ex for parsing an RSA public key for the modulus and exponent. Changed wolfSSL_CTX_SetTmpEC_DHE_Sz to support a size == 0 for using the long-term private key's size. Changed ECDHE_SIZE so it can be overridden and build-time. Added tests for wolfSSL_CTX_SetTmpEC_DHE_Sz and wolfSSL_SetTmpEC_DHE_Sz.
										
										
											2018-10-25 09:15:23 -07:00
 								#ifdef HAVE_ECC
 								    /* Use ECDHE key size that matches long term key.
 								     * Zero means use ctx->privateKeySz.
 								     * Default ECDHE_SIZE is 32 bytes
 								     */
 								    if (wolfSSL_CTX_SetTmpEC_DHE_Sz(ctx, 0) != WOLFSSL_SUCCESS){
 								        err_sys_ex(runWithErrors, "Error setting ECDHE size");
 								    }
 								#endif
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
+								    if (useAnon) {
 								#ifdef HAVE_ANON
-											Test Fixes
										
										
											2018-03-06 16:45:44 -08:00
+								        wolfSSL_CTX_allow_anon_cipher(ctx);
-											Fix to allow anonymous ciphers to work with the new default suite testing.
										
										
											2017-04-05 14:35:33 -07:00
+								        if (cipherList == NULL || (cipherList && useDefCipherList)) {
-											Added support for an anonymous cipher suite (#1267)
										
										
											2018-04-20 10:35:37 -07:00
+								            const char* defaultCipherList;
 								            defaultCipherList = "ADH-AES256-GCM-SHA384:"
 								                                "ADH-AES128-SHA";
 								            if (SSL_CTX_set_cipher_list(ctx, defaultCipherList)
 								                                                            != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "server can't set cipher list 4");
-											Merge in the ADH-AES128-SHA changes and add a check for it during the
										
										
											2014-12-01 11:44:32 -08:00
+								        }
 								#endif
 								    }
-											fix general NO_SHA NO_ASN NO_CERTS NO_SESSION_CACHE builds/examples
										
										
											2013-03-11 16:07:46 -07:00
+								#if !defined(NO_FILESYSTEM) && !defined(NO_CERTS)
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								    /* if not using PSK, verify peer with certs
 								       if using PSK Plus then verify peer certs except PSK suites */
 								    if (doCliCertCheck && (usePsk == 0 || usePskPlus) && useAnon == 0) {
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								        unsigned int verify_flags = 0;
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        SSL_CTX_set_verify(ctx, WOLFSSL_VERIFY_PEER |
-											Testing improvements for cert gen and TLS cert validation:
										
										
											2017-10-19 16:17:51 -07:00
+								                            (usePskPlus ? WOLFSSL_VERIFY_FAIL_EXCEPT_PSK :
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								                                WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT),
 								                            overrideDateErrors == 1 ? myDateCb : NULL);
 								    #ifdef TEST_BEFORE_DATE
 								        verify_flags |= WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY;
 								    #endif
 								        if (wolfSSL_CTX_load_verify_locations_ex(ctx, verifyCert, 0, verify_flags) != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
-											Trusted peer certificate use
										
										
											2016-02-24 15:51:29 -07:00
+								        #ifdef WOLFSSL_TRUST_PEER_CERT
-											automated test for trusted peer certs
										
										
											2016-03-01 16:35:32 -07:00
+								        if (trustCert) {
 								            if ((ret = wolfSSL_CTX_trust_peer_cert(ctx, trustCert,
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                                            WOLFSSL_FILETYPE_PEM)) != WOLFSSL_SUCCESS) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "can't load trusted peer cert file");
-											automated test for trusted peer certs
										
										
											2016-03-01 16:35:32 -07:00
+								            }
-											Trusted peer certificate use
										
										
											2016-02-24 15:51:29 -07:00
+								        }
 								        #endif /* WOLFSSL_TRUST_PEER_CERT */
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								   }
-											added build option for leanPSK
										
										
											2012-10-29 15:39:42 -07:00
+								#endif
-											make server example more generic with short command opts
										
										
											2012-07-30 11:58:57 -07:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#if defined(WOLFSSL_SNIFFER)
-											better error output for temp keys or compression on sniffer
										
										
											2012-06-29 10:59:48 -07:00
+								    /* don't use EDH, can't sniff tmp keys */
-											fix sniffer cipher suite tests with user override
										
										
											2012-08-31 13:28:07 -07:00
+								    if (cipherList == NULL) {
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (SSL_CTX_set_cipher_list(ctx, "AES128-SHA") != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "server can't set cipher list 3");
-											fix sniffer cipher suite tests with user override
										
										
											2012-08-31 13:28:07 -07:00
+								    }
-											better error output for temp keys or compression on sniffer
										
										
											2012-06-29 10:59:48 -07:00
+								#endif
-											merge in sni
										
										
											2013-05-21 14:37:50 -07:00
+								#ifdef HAVE_SNI
-											changed CYASSL_SNI_ABORT_ON_MISMATCH to CYASSL_SNI_CONTINUE_ON_MISMATCH
										
										
											2013-06-03 10:04:49 -03:00
+								    if (sniHostName)
-											Test Fixes
										
										
											2018-03-06 16:45:44 -08:00
+								        if (wolfSSL_CTX_UseSNI(ctx, WOLFSSL_SNI_HOST_NAME, sniHostName,
-											Added more of the requested changes & made an attempt to remove merge conflicts
										
										
											2017-11-14 15:05:32 -07:00
+								                    (word16) XSTRLEN(sniHostName)) != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "UseSNI failed");
-											merge in sni
										
										
											2013-05-21 14:37:50 -07:00
+								#endif
-											MinGW fixes, server port assigning cleanup and ping test cleanup. Fixes issue with visibility detection with MinGW. The visibility.m4 script was not actually trying to call the hidden function, which caused MinGW to detect improperly that visibility was supported. Fix for bogusFile on Windows build. Fixes to build warnings for unused variable 'res' and signed/unsigned comparison for sizeof min(). Cleanup of the server side port assignment to allow use with Windows/MinGW/Cygwin. If Windows uses new GetRandomPort() function in test.h to get port in in the 49152 - 65535 range. If *nix then uses the tcp_listen returned port. Otherwise uses the default wolfSSLPort. Refactor of the ping test code to use common file and properly handle ping count differences (Windows "-c" vs. *Nix style "-n"). Workaround for MinGW and cyassl/options.h getting file permissions error. Added non-fatal compile warning if using MinGW that "strtok_s" might be missing along with a link to public domain source that can be used.
										
										
											2016-04-01 15:45:53 -07:00
+								#ifdef USE_WINDOWS_API
 								    if (port == 0) {
 								        /* Generate random port for testing */
 								        port = GetRandomPort();
 								    }
 								#endif /* USE_WINDOWS_API */
-											Added asynchronous wolfCrypt RSA, TLS client and Cavium Nitrox V support. Asynchronous wolfSSL client support for "DoServerKeyExchange", "SendClientKeyExchange", "SendCertificateVerify" and "DoCertificateVerify". Fixes for async DTLS. Refactor of the wolf event and async handling for use in wolfCrypt. Refactor of the async device support so its hardware agnostic. Added Cavium Nitrox V support (Nitrox tested using SDK v0.2 CNN55XX-SDK with new configure "--with-cavium-v=/dir" option). Moved Nitrox specific functions to new port file "port/cavium/cavium_nitrox.c". RSA refactor to handle async with states. RSA optimization for using dpraw for private key decode. Use double linked list in wolf event for faster/cleaner code. Use typedef for wolf event flag. Cleanup of the async error codes. wolfCrypt test and benchmark support for async RSA. Asynchronous mode enabled using "./configure --enable-asynccrypt". If no async hardware is defined then the internal async simulator (WOLFSSL_ASYNC_CRYPT_TEST) is used. Note: Using async mode requires async.c/h files from wolfSSL. If interested in using asynchronous mode please send email to info@wolfssl.com.
										
										
											2016-08-15 13:59:41 -06:00
+								#ifdef WOLFSSL_ASYNC_CRYPT
 								    ret = wolfAsync_DevOpen(&devId);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								    if (ret < 0) {
 								        printf("Async device open failed\nRunning without async\n");
-											Added asynchronous wolfCrypt RSA, TLS client and Cavium Nitrox V support. Asynchronous wolfSSL client support for "DoServerKeyExchange", "SendClientKeyExchange", "SendCertificateVerify" and "DoCertificateVerify". Fixes for async DTLS. Refactor of the wolf event and async handling for use in wolfCrypt. Refactor of the async device support so its hardware agnostic. Added Cavium Nitrox V support (Nitrox tested using SDK v0.2 CNN55XX-SDK with new configure "--with-cavium-v=/dir" option). Moved Nitrox specific functions to new port file "port/cavium/cavium_nitrox.c". RSA refactor to handle async with states. RSA optimization for using dpraw for private key decode. Use double linked list in wolf event for faster/cleaner code. Use typedef for wolf event flag. Cleanup of the async error codes. wolfCrypt test and benchmark support for async RSA. Asynchronous mode enabled using "./configure --enable-asynccrypt". If no async hardware is defined then the internal async simulator (WOLFSSL_ASYNC_CRYPT_TEST) is used. Note: Using async mode requires async.c/h files from wolfSSL. If interested in using asynchronous mode please send email to info@wolfssl.com.
										
										
											2016-08-15 13:59:41 -06:00
+								    }
 								    wolfSSL_CTX_UseAsync(ctx, devId);
 								#endif /* WOLFSSL_ASYNC_CRYPT */
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								#ifdef WOLFSSL_TLS13
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								    if (noPskDheKe)
 								        wolfSSL_CTX_no_dhe_psk(ctx);
 								    if (noTicket)
 								        wolfSSL_CTX_no_ticket_TLSv13(ctx);
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								#endif
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    while (1) {
 								        /* allow resume option */
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								        if (resumeCount > 1) {
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								            if (dtlsUDP == 0) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                SOCKADDR_IN_T client;
 								                socklen_t client_len = sizeof(client);
 								                clientfd = accept(sockfd, (struct sockaddr*)&client,
 								                                 (ACCEPT_THIRD_T)&client_len);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            }
 								            else {
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								                tcp_listen(&sockfd, &port, useAnyAddr, dtlsUDP, dtlsSCTP);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                clientfd = sockfd;
 								            }
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            if (WOLFSSL_SOCKET_IS_INVALID(clientfd)) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "tcp accept failed");
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            }
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
+								        }
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#if defined(WOLFSSL_STATIC_MEMORY) && defined(DEBUG_WOLFSSL)
 								        fprintf(stderr, "Before creating SSL\n");
 								        if (wolfSSL_CTX_is_static_memory(ctx, &mem_stats) != 1)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "ctx not using static memory");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								        if (wolfSSL_PrintStats(&mem_stats) != 1) /* function in test.h */
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "error printing out memory stats");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#endif
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								    if (doMcast) {
 								#ifdef WOLFSSL_MULTICAST
 								        wolfSSL_CTX_mcast_set_member_id(ctx, mcastID);
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (wolfSSL_CTX_set_cipher_list(ctx, "WDM-NULL-SHA256") != WOLFSSL_SUCCESS)
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								            err_sys("Couldn't set multicast cipher list.");
 								#endif
 								    }
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								    if (doDTLS && dtlsUDP) {
 								#ifdef WOLFSSL_DTLS
 								        if (doBlockSeq) {
 								            wolfSSL_CTX_SetIOSend(ctx, TestEmbedSendTo);
 								        }
 								#endif
 								    }
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
+								#ifdef HAVE_PK_CALLBACKS
 								        if (pkCallbacks)
 								            SetupPkCallbacks(ctx);
 								#endif
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        ssl = SSL_new(ctx);
 								        if (ssl == NULL)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "unable to get SSL");
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								        #ifdef OPENSSL_EXTRA
 								        wolfSSL_KeepArrays(ssl);
 								        #endif
-											better error checking on server example
										
										
											2012-07-30 18:15:08 -07:00
-											Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL. Added load_ssl_buffer function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX API to always be exposed. Added TEST_LOAD_BUFFER build option to use the load_buffer and load_ssl_buffer calls for example client/server.
										
										
											2018-10-09 12:54:41 -07:00
+								    /* Support for loading private key and cert using WOLFSSL object */
 								#if !defined(NO_CERTS)
 								    if ((!usePsk || usePskPlus) && !useAnon && loadCertKeyIntoSSLObj) {
 								    #ifndef TEST_LOAD_BUFFER
 								        if (SSL_use_certificate_chain_file(ssl, ourCert)
 								                                         != WOLFSSL_SUCCESS)
 								            err_sys_ex(runWithErrors, "can't load server cert file, check file and run from"
 								                    " wolfSSL home dir");
 								    #else
 								        /* loads cert chain file using buffer API */
 								        load_ssl_buffer(ssl, ourCert, WOLFSSL_CERT_CHAIN);
 								    #endif
 								    }
 								    if (!useNtruKey && (!usePsk || usePskPlus) && !useAnon && loadCertKeyIntoSSLObj
 								    #if defined(HAVE_PK_CALLBACKS) && defined(TEST_PK_PRIVKEY)
 								        && !pkCallbacks
 								    #endif /* HAVE_PK_CALLBACKS && TEST_PK_PRIVKEY */
 								    ) {
 								    #ifndef TEST_LOAD_BUFFER
 								        if (SSL_use_PrivateKey_file(ssl, ourKey, WOLFSSL_FILETYPE_PEM)
 								                                         != WOLFSSL_SUCCESS)
 								            err_sys_ex(runWithErrors, "can't load server private key file, check file and run "
 								                "from wolfSSL home dir");
 								    #else
 								        /* loads private key file using buffer API */
 								        load_ssl_buffer(ssl, ourKey, WOLFSSL_KEY);
 								    #endif
 								    }
 								#endif /* !NO_CERTS */
-											Change define name for sending HRR Cookie
										
										
											2017-06-27 08:37:55 +10:00
+								#ifdef WOLFSSL_SEND_HRR_COOKIE
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (hrrCookie && wolfSSL_send_hrr_cookie(ssl, NULL, 0) != WOLFSSL_SUCCESS) {
-											Add TLS v1.3 Cookie extension support
										
										
											2017-06-23 16:26:54 +10:00
+								            err_sys("unable to set use of cookie with HRR msg");
 								        }
 								#endif
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#if defined(WOLFSSL_STATIC_MEMORY) && defined(DEBUG_WOLFSSL)
 								        fprintf(stderr, "After creating SSL\n");
 								        if (wolfSSL_CTX_is_static_memory(ctx, &mem_stats) != 1)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "ctx not using static memory");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								        if (wolfSSL_PrintStats(&mem_stats) != 1) /* function in test.h */
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "error printing out memory stats");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								#endif
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								    if (doMcast) {
 								#ifdef WOLFSSL_MULTICAST
 								        byte pms[512];
 								        byte cr[32];
 								        byte sr[32];
 								        const byte suite[2] = {0, 0xfe};  /* WDM_WITH_NULL_SHA256 */
 								        XMEMSET(pms, 0x23, sizeof(pms));
 								        XMEMSET(cr, 0xA5, sizeof(cr));
 								        XMEMSET(sr, 0x5A, sizeof(sr));
 								        if (wolfSSL_set_secret(ssl, 1, pms, sizeof(pms), cr, sr, suite)
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                != WOLFSSL_SUCCESS)
-											Multicast
										
										
											2016-12-15 11:43:15 -08:00
+								            err_sys("unable to set mcast secret");
 								#endif
 								    }
-											Server Side Secure Renegotiation
										
										
											2018-11-27 17:33:49 -08:00
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								#ifdef HAVE_SECURE_RENEGOTIATION
 								        if (scr) {
 								            if (wolfSSL_UseSecureRenegotiation(ssl) != WOLFSSL_SUCCESS) {
 								                err_sys_ex(runWithErrors, "can't enable secure renegotiation");
 								            }
 								        }
 								#endif /* HAVE_SECURE_RENEGOTIATION */
-											Server Side Secure Renegotiation
										
										
											2018-11-27 17:33:49 -08:00
-											add handshake done callback with ability to end connection
										
										
											2015-05-09 11:04:47 -07:00
+								#ifndef NO_HANDSHAKE_DONE_CB
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        wolfSSL_SetHsDoneCb(ssl, myHsDoneCb, NULL);
-											add handshake done callback with ability to end connection
										
										
											2015-05-09 11:04:47 -07:00
+								#endif
-											crl dir monitoring for linux and mac
										
										
											2012-05-22 17:25:15 -07:00
+								#ifdef HAVE_CRL
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								    if (!disableCRL) {
-											have calling thread wait for crl monitor thread to setup for simpler cleanup
										
										
											2015-11-23 14:15:12 -08:00
+								#ifdef HAVE_CRL_MONITOR
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        crlFlags = WOLFSSL_CRL_MONITOR | WOLFSSL_CRL_START_MON;
-											have calling thread wait for crl monitor thread to setup for simpler cleanup
										
										
											2015-11-23 14:15:12 -08:00
+								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        if (wolfSSL_EnableCRL(ssl, 0) != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "unable to enable CRL");
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        if (wolfSSL_LoadCRL(ssl, crlPemDir, WOLFSSL_FILETYPE_PEM, crlFlags)
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                                                                 != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "unable to load CRL");
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        if (wolfSSL_SetCRL_Cb(ssl, CRL_CallBack) != WOLFSSL_SUCCESS)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "unable to set CRL callback url");
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								    }
-											crl dir monitoring for linux and mac
										
										
											2012-05-22 17:25:15 -07:00
+								#endif
-											OCSP Updates
										
										
											2013-06-20 11:07:54 -07:00
+								#ifdef HAVE_OCSP
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        if (useOcsp) {
 								            if (ocspUrl != NULL) {
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								                wolfSSL_CTX_SetOCSP_OverrideURL(ctx, ocspUrl);
 								                wolfSSL_CTX_EnableOCSP(ctx, WOLFSSL_OCSP_NO_NONCE
 								                                                   | WOLFSSL_OCSP_URL_OVERRIDE);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            }
 								            else
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								                wolfSSL_CTX_EnableOCSP(ctx, WOLFSSL_OCSP_NO_NONCE);
-											Use OCSP override URL enable in both example client and server.
										
										
											2013-12-18 12:34:40 -08:00
+								        }
-											Configure Fixes
										
										
											2019-03-13 17:54:33 -07:00
+								#ifndef NO_RSA
-											Release Fixes
										
										
											2019-03-20 11:01:24 -07:00
+								    /* All the OSCP Stapling test certs are RSA. */
-											Merge branch 'csr'
										
										
											2015-12-28 19:38:04 -03:00
+								#if defined(HAVE_CERTIFICATE_STATUS_REQUEST) \
-											Release Fixes
										
										
											2019-03-20 11:01:24 -07:00
+								    || defined(HAVE_CERTIFICATE_STATUS_REQUEST_V2)
 								            if (wolfSSL_CTX_EnableOCSPStapling(ctx) != WOLFSSL_SUCCESS)
 								                err_sys_ex(runWithErrors, "can't enable OCSP Stapling Certificate Manager");
 								            if (SSL_CTX_load_verify_locations(ctx, "certs/ocsp/intermediate1-ca-cert.pem", 0) != WOLFSSL_SUCCESS)
 								                err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
 								            if (SSL_CTX_load_verify_locations(ctx, "certs/ocsp/intermediate2-ca-cert.pem", 0) != WOLFSSL_SUCCESS)
 								                err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
 								            if (SSL_CTX_load_verify_locations(ctx, "certs/ocsp/intermediate3-ca-cert.pem", 0) != WOLFSSL_SUCCESS)
 								                err_sys_ex(runWithErrors, "can't load ca file, Please run from wolfSSL home dir");
 								#endif /* HAVE_CERTIFICATE_STATUS_REQUEST HAVE_CERTIFICATE_STATUS_REQUEST_V2 */
 								#endif /* NO_RSA */
 								#endif /* HAVE_OCSP */
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
-											add Rsa Sign/Verify callbacks, client/server examples
										
										
											2013-08-26 16:27:29 -07:00
+								#ifdef HAVE_PK_CALLBACKS
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        if (pkCallbacks)
-											* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
										
										
											2018-03-21 11:27:08 -07:00
+								            SetupPkCallbackContexts(ssl, &pkCbInfo);
-											add Rsa Sign/Verify callbacks, client/server examples
										
										
											2013-08-26 16:27:29 -07:00
+								#endif
-											OCSP Updates
										
										
											2013-06-20 11:07:54 -07:00
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								    #ifdef WOLFSSL_TLS13
 								        if (version >= 4) {
 								            WOLFSSL_START(WC_FUNC_CLIENT_KEY_EXCHANGE_DO);
 								            if (onlyKeyShare == 2) {
 								                if (useX25519 == 1) {
 								        #ifdef HAVE_CURVE25519
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								                    int groups[1] = { WOLFSSL_ECC_X25519 };
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								                    if (wolfSSL_UseKeyShare(ssl, WOLFSSL_ECC_X25519)
 								                                                           != WOLFSSL_SUCCESS) {
 								                        err_sys("unable to use curve x25519");
 								                    }
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								                    if (wolfSSL_set_groups(ssl, groups, 1) != WOLFSSL_SUCCESS) {
 								                        err_sys("unable to set groups: x25519");
 								                    }
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								        #endif
 								                }
 								                else
 								                {
 								        #ifdef HAVE_ECC
-											Adds new wc_ecc_get_curve_params API for getting the ecc_set_type params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
										
										
											2019-07-24 10:35:33 -07:00
+								            #if !defined(NO_ECC256) || defined(HAVE_ALL_CURVES)
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								                    int groups[1] = { WOLFSSL_ECC_SECP256R1 };
 								                    if (wolfSSL_UseKeyShare(ssl, WOLFSSL_ECC_SECP256R1)
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								                                                           != WOLFSSL_SUCCESS) {
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								                        err_sys("unable to use curve secp256r1");
 								                    }
 								                    if (wolfSSL_set_groups(ssl, groups, 1) != WOLFSSL_SUCCESS) {
 								                        err_sys("unable to set groups: secp256r1");
 								                    }
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								            #endif
 								        #endif
 								                }
 								            }
 								            else if (onlyKeyShare == 1) {
 								        #ifdef HAVE_FFDHE_2048
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								                int groups[1] = { WOLFSSL_FFDHE_2048 };
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								                if (wolfSSL_UseKeyShare(ssl, WOLFSSL_FFDHE_2048)
 								                                                           != WOLFSSL_SUCCESS) {
 								                    err_sys("unable to use DH 2048-bit parameters");
 								                }
-											TLS 1.3 fixes/improvements
										
										
											2018-04-13 11:53:42 +10:00
+								                if (wolfSSL_set_groups(ssl, groups, 1) != WOLFSSL_SUCCESS) {
 								                    err_sys("unable to set groups: DH 2048-bit");
 								                }
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								        #endif
 								            }
 								            WOLFSSL_END(WC_FUNC_CLIENT_KEY_EXCHANGE_DO);
 								        }
 								    #endif
-											Add support for Encrypt-Then-MAC to TLS 1.2 and below
										
										
											2019-08-22 09:33:38 +10:00
+								    #ifdef HAVE_ENCRYPT_THEN_MAC
 								        if (disallowETM)
 								            wolfSSL_AllowEncryptThenMac(ssl, 0);
 								    #endif
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        /* do accept */
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								        readySignal = ((func_args*)args)->signal;
 								        if (readySignal) {
 								            readySignal->srfName = serverReadyFile;
 								        }
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
+								        tcp_accept(&sockfd, &clientfd, (func_args*)args, port, useAnyAddr,
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								                       dtlsUDP, dtlsSCTP, serverReadyFile ? 1 : 0, doListen);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        doListen = 0; /* Don't listen next time */
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (SSL_set_fd(ssl, clientfd) != WOLFSSL_SUCCESS) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "error in setting fd");
-											check return value of wolfSSL_set_fd
										
										
											2016-03-25 13:59:04 -06:00
+								        }
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
-											Trusted CA Key Indication Extension
										
										
											2018-09-28 09:05:59 -07:00
+								#ifdef HAVE_TRUSTED_CA
 								        if (trustedCaKeyId) {
 								            if (wolfSSL_UseTrustedCA(ssl, WOLFSSL_TRUSTED_CA_PRE_AGREED,
 								                        NULL, 0) != WOLFSSL_SUCCESS) {
 								                err_sys_ex(runWithErrors, "UseTrustedCA failed");
 								            }
 								        }
 								#endif /* HAVE_TRUSTED_CA */
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								#ifdef HAVE_ALPN
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        if (alpnList != NULL) {
 								            printf("ALPN accepted protocols list : %s\n", alpnList);
 								            wolfSSL_UseALPN(ssl, alpnList, (word32)XSTRLEN(alpnList), alpn_opt);
 								        }
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								#endif
-											update the example server and echoserver to correctly generate the DTLS cookie
										
										
											2015-09-15 17:23:52 -07:00
+								#ifdef WOLFSSL_DTLS
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								        if (doDTLS && dtlsUDP) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            SOCKADDR_IN_T cliaddr;
 								            byte          b[1500];
 								            int           n;
 								            socklen_t     len = sizeof(cliaddr);
-											update the example server and echoserver to correctly generate the DTLS cookie
										
										
											2015-09-15 17:23:52 -07:00
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            /* For DTLS, peek at the next datagram so we can get the client's
 								             * address and set it into the ssl object later to generate the
 								             * cookie. */
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								            n = (int)recvfrom(clientfd, (char*)b, sizeof(b), MSG_PEEK,
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                              (struct sockaddr*)&cliaddr, &len);
 								            if (n <= 0)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								                err_sys_ex(runWithErrors, "recvfrom failed");
-											update the example server and echoserver to correctly generate the DTLS cookie
										
										
											2015-09-15 17:23:52 -07:00
-											DTLS Nonblocking Updates
										
										
											2018-12-18 11:40:04 -08:00
+								            if (doBlockSeq) {
 								                XMEMCPY(&dtlsCtx.peer.sa, &cliaddr, len);
 								                dtlsCtx.peer.sz = len;
 								                dtlsCtx.wfd = clientfd;
 								                dtlsCtx.failOnce = 1;
 								                wolfSSL_SetIOWriteCtx(ssl, &dtlsCtx);
 								            }
 								            else {
 								                wolfSSL_dtls_set_peer(ssl, &cliaddr, len);
 								            }
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
-											update the example server and echoserver to correctly generate the DTLS cookie
										
										
											2015-09-15 17:23:52 -07:00
+								#endif
-											option for fail on no peer cert except PSK suites
										
										
											2016-02-08 14:52:56 -07:00
+								        if ((usePsk == 0 || usePskPlus) || useAnon == 1 || cipherList != NULL
 								                                                               || needDH == 1) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            #if !defined(NO_FILESYSTEM) && !defined(NO_DH) && !defined(NO_ASN)
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								                wolfSSL_SetTmpDH_file(ssl, ourDhParam, WOLFSSL_FILETYPE_PEM);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            #elif !defined(NO_DH)
 								                SetDH(ssl);  /* repick suites with DHE, higher priority than PSK */
 								            #endif
-											Make the skip DH test flag build-conditional.
										
										
											2018-11-30 09:19:11 -08:00
+								#if !defined(NO_DH) && !defined(WOLFSSL_OLD_PRIME_CHECK) && \
 								    !defined(HAVE_FIPS) && !defined(HAVE_SELFTEST)
-											DHE Speed Up
										
										
											2018-11-29 17:01:37 -08:00
+								            if (!doDhKeyCheck)
 								                wolfSSL_SetEnableDhKeyTest(ssl, 0);
 								#endif
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifndef WOLFSSL_CALLBACKS
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        if (nonBlocking) {
-											FIPS Revalidation
										
										
											2018-06-06 12:43:15 -07:00
+								            #ifdef WOLFSSL_DTLS
-											Fix TCP with Timeout
										
										
											2018-05-23 16:07:45 -07:00
+								            if (doDTLS) {
 								                wolfSSL_dtls_set_using_nonblock(ssl, 1);
 								            }
-											FIPS Revalidation
										
										
											2018-06-06 12:43:15 -07:00
+								            #endif
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            tcp_set_nonblocking(&clientfd);
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
+								        }
 								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifndef WOLFSSL_CALLBACKS
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								        if (nonBlocking) {
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
+								            ret = NonBlockingSSL_Accept(ssl);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								        }
 								        else {
-											TLS v1.3 0-RTT
										
										
											2017-06-19 11:37:10 +10:00
+								    #ifdef WOLFSSL_EARLY_DATA
 								            if (earlyData) {
 								                do {
 								                    int len;
 								                    err = 0; /* reset error */
 								                    ret = wolfSSL_read_early_data(ssl, input, sizeof(input)-1,
 								                                                                          &len);
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                    if (ret != WOLFSSL_SUCCESS) {
-											TLS v1.3 0-RTT
										
										
											2017-06-19 11:37:10 +10:00
+								                        err = SSL_get_error(ssl, 0);
 								                    #ifdef WOLFSSL_ASYNC_CRYPT
 								                        if (err == WC_PENDING_E) {
 								                            ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								                            if (ret < 0) break;
 								                        }
 								                    #endif
 								                    }
 								                    if (ret > 0) {
 								                        input[ret] = 0; /* null terminate message */
 								                        printf("Early Data Client message: %s\n", input);
 								                    }
 								                } while (err == WC_PENDING_E || ret > 0);
 								            }
 								    #endif
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            do {
 								                err = 0; /* reset error */
 								                ret = SSL_accept(ssl);
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								                if (ret != WOLFSSL_SUCCESS) {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								                    err = SSL_get_error(ssl, 0);
 								                #ifdef WOLFSSL_ASYNC_CRYPT
 								                    if (err == WC_PENDING_E) {
 								                        ret = wolfSSL_AsyncPoll(ssl, WOLF_POLL_FLAG_CHECK_HW);
 								                        if (ret < 0) break;
 								                    }
 								                #endif
 								                }
 								            } while (err == WC_PENDING_E);
 								        }
 								#else
 								        ret = NonBlockingSSL_Accept(ssl);
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
+								#endif
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								        if (ret != WOLFSSL_SUCCESS) {
-											fix c89 build on windows
										
										
											2016-04-06 11:16:40 -06:00
+								            err = SSL_get_error(ssl, 0);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            printf("SSL_accept error %d, %s\n", err,
 								                                                ERR_error_string(err, buffer));
-											Fix -x option in server to continue in event of error (R)
										
										
											2018-11-06 14:09:46 -07:00
+								            if (!exitWithRet) {
-											Minor fix for the expected failure case use of ssl after free. Renamed skipExit to exitWithRet.
										
										
											2018-05-03 10:02:59 -07:00
+								                err_sys_ex(runWithErrors, "SSL_accept failed");
-											Fix -x option in server to continue in event of error (R)
										
										
											2018-11-06 14:09:46 -07:00
+								            } else {
 								                /* cleanup */
 								                SSL_free(ssl); ssl = NULL;
 								                SSL_CTX_free(ctx); ctx = NULL;
 								                CloseSocket(clientfd);
 								                CloseSocket(sockfd);
 								                ((func_args*)args)->return_code = err;
 								                goto exit;
 								            }
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
-											Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
										
										
											2016-03-04 10:05:22 -08:00
-											Added Japanese message into the examples client and server
										
										
											2018-10-20 13:40:01 +09:00
+								        showPeerEx(ssl, lng_index);
-											add more compatiblity functions
										
										
											2016-11-10 19:34:27 -07:00
+								        if (SSL_state(ssl) != 0) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "SSL in error state");
-											add more compatiblity functions
										
										
											2016-11-10 19:34:27 -07:00
+								        }
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								#ifdef OPENSSL_EXTRA
 								    {
 								        byte*  rnd;
 								        byte*  pt;
 								        size_t size;
 								        /* get size of buffer then print */
 								        size = wolfSSL_get_server_random(NULL, NULL, 0);
 								        if (size == 0) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "error getting server random buffer size");
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								        }
 								        rnd = (byte*)XMALLOC(size, NULL, DYNAMIC_TYPE_TMP_BUFFER);
 								        if (rnd == NULL) {
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "error creating server random buffer");
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								        }
-											expanding compatibility layer
										
										
											2016-11-18 14:58:51 -07:00
+								        size = wolfSSL_get_server_random(ssl, rnd, size);
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								        if (size == 0) {
 								            XFREE(rnd, NULL, DYNAMIC_TYPE_TMP_BUFFER);
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "error getting server random buffer");
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								        }
 								        printf("Server Random : ");
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        pt = rnd;
 								        if (pt != NULL) {
 								            for (pt = rnd; pt < rnd + size; pt++) printf("%02X", *pt);
 								            printf("\n");
 								        } else {
 								            err_sys_ex(runWithErrors, "error: attempted to dereference null "
 								                                                                   "pointer");
 								        }
-											add bio.c to dist and implement wolfSSL_check_private_key , wolfSSL_get_server_random
										
										
											2016-11-11 13:39:36 -07:00
+								        XFREE(rnd, NULL, DYNAMIC_TYPE_TMP_BUFFER);
 								    }
 								#endif
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								#ifdef HAVE_ALPN
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        if (alpnList != NULL) {
 								            char *protocol_name = NULL, *list = NULL;
 								            word16 protocol_nameSz = 0, listSz = 0;
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            err = wolfSSL_ALPN_GetProtocol(ssl, &protocol_name, &protocol_nameSz);
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            if (err == WOLFSSL_SUCCESS)
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                printf("Sent ALPN protocol : %s (%d)\n",
 								                       protocol_name, protocol_nameSz);
-											Updated a few more old names. Added PR for new configs to Jenkins.
										
										
											2017-10-18 10:38:27 -07:00
+								            else if (err == WOLFSSL_ALPN_NOT_FOUND)
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                printf("No ALPN response sent (no match)\n");
 								            else
 								                printf("Getting ALPN protocol name failed\n");
-											ALPN : add function to get in a server the list of supported protocols sent by the client.
										
										
											2015-10-15 14:59:35 +02:00
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            err = wolfSSL_ALPN_GetPeerProtocol(ssl, &list, &listSz);
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            if (err == WOLFSSL_SUCCESS)
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                printf("List of protocol names sent by Client: %s (%d)\n",
 								                       list, listSz);
 								            else
 								                printf("Get list of client's protocol name failed\n");
-											ALPN : add function to get in a server the list of supported protocols sent by the client.
										
										
											2015-10-15 14:59:35 +02:00
-											example server to use cstd free for all build options
										
										
											2015-10-16 14:05:37 -07:00
+								            free(list);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
 								#endif
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
 								#if !defined(NO_FILESYSTEM) && !defined(NO_CERTS)
 								    #if defined(WOLFSSL_TLS13) && defined(WOLFSSL_POST_HANDSHAKE_AUTH)
 								        if (postHandAuth) {
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
+								            unsigned int verify_flags = 0;
-											Fix post authentication for TLS 1.3
										
										
											2018-06-08 17:34:03 +10:00
+								            SSL_set_verify(ssl, WOLFSSL_VERIFY_PEER |
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								                                ((usePskPlus) ? WOLFSSL_VERIFY_FAIL_EXCEPT_PSK :
 								                                WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT), 0);
-											Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
										
										
											2019-09-13 09:23:07 -07:00
 								        #ifdef TEST_BEFORE_DATE
 								            verify_flags |= WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY;
 								        #endif
 								            if (wolfSSL_CTX_load_verify_locations_ex(ctx, verifyCert, 0, verify_flags)
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								                                                           != WOLFSSL_SUCCESS) {
 								                err_sys_ex(runWithErrors, "can't load ca file, Please run from "
 								                                          "wolfSSL home dir");
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								            }
 								            #ifdef WOLFSSL_TRUST_PEER_CERT
 								            if (trustCert) {
-											Fix post authentication for TLS 1.3
										
										
											2018-06-08 17:34:03 +10:00
+								                if ((ret = wolfSSL_trust_peer_cert(ssl, trustCert,
-											Allow Ed25519 private-only keys to work in TLS
										
										
											2018-04-27 14:43:04 +10:00
+								                                    WOLFSSL_FILETYPE_PEM)) != WOLFSSL_SUCCESS) {
 								                    err_sys_ex(runWithErrors, "can't load trusted peer cert "
 								                                              "file");
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								                }
 								            }
 								            #endif /* WOLFSSL_TRUST_PEER_CERT */
 								       }
 								    #endif
 								#endif
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								        if (echoData == 0 && throughput == 0) {
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								            ServerRead(ssl, input, sizeof(input)-1);
 								            err = SSL_get_error(ssl, 0);
 								        }
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								#if defined(HAVE_SECURE_RENEGOTIATION) && \
 								    defined(HAVE_SERVER_RENEGOTIATION_INFO)
 								        if (scr && forceScr) {
 								            if (nonBlocking) {
 								                printf("not doing secure renegotiation on example with"
-											Server Side Secure Renegotiation
										
										
											2018-11-27 17:33:49 -08:00
+								                       " nonblocking yet\n");
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								            } else {
 								                if (wolfSSL_Rehandshake(ssl) != WOLFSSL_SUCCESS) {
-											Server Side Secure Renegotiation
										
										
											2018-11-27 17:33:49 -08:00
+								                    printf("not doing secure renegotiation\n");
-											Server Side Renegotiation
										
										
											2018-11-30 14:14:27 -08:00
+								                }
 								                else {
 								                    printf("RENEGOTIATION SUCCESSFUL\n");
-											Server Side Secure Renegotiation
										
										
											2018-10-02 15:38:45 -07:00
+								                }
 								            }
 								        }
 								#endif /* HAVE_SECURE_RENEGOTIATION */
-											Fixed example server to not try and write on failure.
										
										
											2019-04-11 11:30:41 -07:00
+								        if (err == 0 && echoData == 0 && throughput == 0) {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            const char* write_msg;
 								            int write_msg_sz;
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
+								#ifdef WOLFSSL_TLS13
 								            if (updateKeysIVs)
 								                wolfSSL_update_keys(ssl);
 								#endif
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								#if defined(WOLFSSL_TLS13) && defined(WOLFSSL_POST_HANDSHAKE_AUTH)
 								            if (postHandAuth)
 								                wolfSSL_request_certificate(ssl);
 								#endif
-											Add TLS v1.3 as an option
										
										
											2016-11-24 01:31:07 +10:00
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								            /* Write data */
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								            if (!useWebServerMsg) {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								                write_msg = msg;
 								                write_msg_sz = sizeof(msg);
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								            }
 								            else {
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
+								                write_msg = webServerMsg;
 								                write_msg_sz = sizeof(webServerMsg);
 								            }
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								            ServerWrite(ssl, write_msg, write_msg_sz);
-											Intel QuickAssist (QAT) support and async enhancements/fixes:
										
										
											2017-04-07 15:46:32 -07:00
-											Allow TLS 1.2 to be compiled out.
										
										
											2018-05-17 09:08:03 +10:00
+								#ifdef WOLFSSL_TLS13
-											Fix post authentication for TLS 1.3
										
										
											2018-06-08 17:34:03 +10:00
+								            if (updateKeysIVs || postHandAuth)
 								                ServerRead(ssl, input, sizeof(input)-1);
-											Improve PSK timeout checks
										
										
											2017-06-08 10:32:51 +10:00
+								#endif
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
-											Fixed example server to not try and write on failure.
										
										
											2019-04-11 11:30:41 -07:00
+								        else if (err == 0 || err == WOLFSSL_ERROR_ZERO_RETURN) {
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								            ServerEchoData(ssl, clientfd, echoData, block, throughput);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        }
 								#if defined(WOLFSSL_MDK_SHELL) && defined(HAVE_MDK_RTX)
 								        os_dly_wait(500) ;
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#elif defined (WOLFSSL_TIRTOS)
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								        Task_yield();
-											add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
										
										
											2015-10-09 15:18:41 +02:00
+								#endif
-											DTLS-SCTP example client and server
										
										
											2016-08-25 22:20:35 -07:00
+								        if (dtlsUDP == 0) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            ret = SSL_shutdown(ssl);
-											Refactor WOLF_SSL_ to WOLFSSL_ (much better).
										
										
											2017-10-11 09:09:52 -07:00
+								            if (wc_shutdown && ret == WOLFSSL_SHUTDOWN_NOT_DONE)
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								                SSL_shutdown(ssl);    /* bidirectional shutdown */
 								        }
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								        /* display collected statistics */
 								#ifdef WOLFSSL_STATIC_MEMORY
 								        if (wolfSSL_is_static_memory(ssl, &ssl_stats) != 1)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								            err_sys_ex(runWithErrors, "static memory was not used with ssl");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
 								        fprintf(stderr, "\nprint off SSL memory stats\n");
-											typdef gaurd / error out on bad mutex init / handle no maxHa or maxIO set
										
										
											2016-06-10 14:13:27 -06:00
+								        fprintf(stderr, "*** This is memory state before wolfSSL_free is called\n");
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
+								        fprintf(stderr, "peak connection memory = %d\n", ssl_stats.peakMem);
 								        fprintf(stderr, "current memory in use  = %d\n", ssl_stats.curMem);
 								        fprintf(stderr, "peak connection allocs = %d\n", ssl_stats.peakAlloc);
 								        fprintf(stderr, "current connection allocs = %d\n",ssl_stats.curAlloc);
 								        fprintf(stderr, "total connection allocs   = %d\n",ssl_stats.totalAlloc);
 								        fprintf(stderr, "total connection frees    = %d\n\n", ssl_stats.totalFr);
 								#endif
-											First pass at bugs found with ./scripts/memtest.sh. Fixes for NULL pointer checks, making sure free'd pointers are reset, making sure pointers are initialized and making sure memory is always free'd. Fix for TicketInit() which was using non-thread safe RNG and key_ctx. Fix for possible double free case in wolfSSL_PEM_read_X509_CRL.
										
										
											2018-07-27 10:19:04 -07:00
+								        SSL_free(ssl); ssl = NULL;
-											no DTLS streaming checks
										
										
											2012-12-28 17:54:19 -08:00
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
+								        CloseSocket(clientfd);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
 								        if (resume == 1 && resumeCount == 0) {
 								            resumeCount++;           /* only do one resume for testing */
 								            continue;
 								        }
 								        resumeCount = 0;
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								        cnt++;
-											Get Nginx working with wolfSSL
										
										
											2016-12-22 12:53:29 +10:00
+								        if (loops > 0 && --loops == 0) {
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								            break;  /* out of while loop, done with normal and resume option */
 								        }
 								    } /* while(1) */
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
+								    WOLFSSL_TIME(cnt);
-											WOLFSSL_FUNC_TIME changes
										
										
											2018-04-13 12:13:31 +10:00
+								    (void)cnt;
-											Changes for interop and performance
										
										
											2018-04-09 13:53:05 +10:00
-											Added missing API's for disabling OCSP stapling. Added OCSP stapling enable/disable for WOLFSSL.
										
										
											2017-10-17 13:52:05 -07:00
+								#if defined(HAVE_CERTIFICATE_STATUS_REQUEST) \
 								 || defined(HAVE_CERTIFICATE_STATUS_REQUEST_V2)
 								    wolfSSL_CTX_DisableOCSPStapling(ctx);
 								#endif
-											revise static memory and update heap hint
										
										
											2016-06-04 19:03:48 -06:00
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								    CloseSocket(sockfd);
-											First pass at bugs found with ./scripts/memtest.sh. Fixes for NULL pointer checks, making sure free'd pointers are reset, making sure pointers are initialized and making sure memory is always free'd. Fix for TicketInit() which was using non-thread safe RNG and key_ctx. Fix for possible double free case in wolfSSL_PEM_read_X509_CRL.
										
										
											2018-07-27 10:19:04 -07:00
+								    SSL_CTX_free(ctx); ctx = NULL;
-											add resume test to example server and script test
										
										
											2015-04-28 12:21:54 -07:00
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								    ((func_args*)args)->return_code = 0;
-											add memory tracker to example client and server if using default memory cbs
										
										
											2013-03-15 13:17:05 -07:00
-											Fix for example client/server with -H exitWithRet option to make sure all cleanup is performed. Resolves valgrind report due to TicketCleanup() not being called.
										
										
											2018-05-03 13:39:37 -07:00
+								exit:
-											cleanup fp cache on examples with thread local storage
										
										
											2014-09-09 10:14:32 -07:00
-											Various improvements for testing
										
										
											2019-02-22 17:14:19 +10:00
+								#if defined(HAVE_ECC) && defined(FP_ECC) && defined(HAVE_THREAD_LS) \
 								                      && (defined(NO_MAIN_DRIVER) || defined(HAVE_STACK_SIZE))
-											Test Fixes
										
										
											2018-03-06 16:45:44 -08:00
+								    wc_ecc_fp_free();  /* free per thread cache */
-											cleanup fp cache on examples with thread local storage
										
										
											2014-09-09 10:14:32 -07:00
+								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifdef WOLFSSL_TIRTOS
-											fix tirtos merge
										
										
											2014-09-08 19:40:03 -07:00
+								    fdCloseSession(Task_self());
-											Added TI-RTOS support for CyaSSL tests
										
										
											2014-05-08 15:52:20 -07:00
+								#endif
-											add tiket key cleanup to help valgrind
										
										
											2015-05-15 15:30:29 -07:00
+								#if defined(HAVE_SESSION_TICKET) && defined(HAVE_CHACHA) && \
 								                                    defined(HAVE_POLY1305)
 								    TicketCleanup();
 								#endif
-											Added asynchronous wolfCrypt RSA, TLS client and Cavium Nitrox V support. Asynchronous wolfSSL client support for "DoServerKeyExchange", "SendClientKeyExchange", "SendCertificateVerify" and "DoCertificateVerify". Fixes for async DTLS. Refactor of the wolf event and async handling for use in wolfCrypt. Refactor of the async device support so its hardware agnostic. Added Cavium Nitrox V support (Nitrox tested using SDK v0.2 CNN55XX-SDK with new configure "--with-cavium-v=/dir" option). Moved Nitrox specific functions to new port file "port/cavium/cavium_nitrox.c". RSA refactor to handle async with states. RSA optimization for using dpraw for private key decode. Use double linked list in wolf event for faster/cleaner code. Use typedef for wolf event flag. Cleanup of the async error codes. wolfCrypt test and benchmark support for async RSA. Asynchronous mode enabled using "./configure --enable-asynccrypt". If no async hardware is defined then the internal async simulator (WOLFSSL_ASYNC_CRYPT_TEST) is used. Note: Using async mode requires async.c/h files from wolfSSL. If interested in using asynchronous mode please send email to info@wolfssl.com.
										
										
											2016-08-15 13:59:41 -06:00
+								#ifdef WOLFSSL_ASYNC_CRYPT
 								    wolfAsync_DevClose(&devId);
 								#endif
-											consolidate handling of dead assignment warnings
										
										
											2016-04-11 13:39:44 -06:00
+								    /* There are use cases  when these assignments are not read. To avoid
 								     * potential confusion those warnings have been handled here.
 								     */
 								    (void) ourKey;
 								    (void) verifyCert;
 								    (void) doCliCertCheck;
 								    (void) useNtruKey;
 								    (void) ourDhParam;
 								    (void) ourCert;
-											static analysis fix on non default build and g++ warning
										
										
											2018-11-07 14:50:07 -07:00
+								    (void) useX25519;
-											fix warning with secure-renegotiation build and error with ntru build
										
										
											2018-12-19 15:47:43 -07:00
+								#ifdef HAVE_SECURE_RENEGOTIATION
 								    (void) forceScr;
 								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								#ifndef WOLFSSL_TIRTOS
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								    return 0;
-											Added TI-RTOS support for CyaSSL tests
										
										
											2014-05-08 15:52:20 -07:00
+								#endif
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								}
-											Fix build with either NO_WOLFSSL_SERVER or NO_WOLFSSL_CLIENT defined.
										
										
											2017-06-26 23:05:32 -07:00
+								#endif /* !NO_WOLFSSL_SERVER */
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
 								/* so overall tests can pull in test function */
 								#ifndef NO_MAIN_DRIVER
 								    int main(int argc, char** argv)
 								    {
 								        func_args args;
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								        tcp_ready ready;
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											add cavium ciphers to SSL, and example client
										
										
											2013-02-01 12:21:38 -08:00
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								        StartTCP();
 								        args.argc = argc;
 								        args.argv = argv;
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								        args.signal = &ready;
-											Allow NO_WOLFSSL_CLIENT/SERVER to compile and pass tests
										
										
											2018-06-13 11:42:16 +10:00
+								        args.return_code = 0;
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								        InitTcpReady(&ready);
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											Removed replaced the last two references to "CYASSL" macros with "WOLFSSL" in the example server.
										
										
											2018-06-06 13:14:06 -07:00
+								#if defined(DEBUG_WOLFSSL) && !defined(WOLFSSL_MDK_SHELL)
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        wolfSSL_Debugging_ON();
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        wolfSSL_Init();
-											Cleanup of the test code that looks for the WolfSSL root directory. Now it tries to open the certs/ntru-cert.pem file in each directory up (limited to 5) until it opens it.
										
										
											2015-10-28 23:54:08 -07:00
+								        ChangeToWolfRoot();
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
-											Fix build with either NO_WOLFSSL_SERVER or NO_WOLFSSL_CLIENT defined.
										
										
											2017-06-26 23:05:32 -07:00
+								#ifndef NO_WOLFSSL_SERVER
-											add --enable-stacksize to print out stack use info with pthreads for example client/server
										
										
											2013-03-28 11:28:38 -07:00
+								#ifdef HAVE_STACK_SIZE
 								        StackSizeCheck(&args, server_test);
-											Merge branch 'master' of https://github.com/wolfssl/wolfssl
										
										
											2015-10-16 07:46:51 +02:00
+								#else
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								        server_test(&args);
-											add --enable-stacksize to print out stack use info with pthreads for example client/server
										
										
											2013-03-28 11:28:38 -07:00
+								#endif
-											Fix build with either NO_WOLFSSL_SERVER or NO_WOLFSSL_CLIENT defined.
										
										
											2017-06-26 23:05:32 -07:00
+								#else
 								        printf("Server not compiled in!\n");
 								#endif
-											FIPS Update
										
										
											2018-02-01 11:02:35 -08:00
+								        wolfSSL_Cleanup();
-											add random ports for all make check scripts, unique ready file
										
										
											2015-12-22 14:35:34 -08:00
+								        FreeTcpReady(&ready);
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#ifdef HAVE_WNR
 								    if (wc_FreeNetRandom() < 0)
-											Added -x option to allow example server to continue running when errors occur.
										
										
											2017-06-22 22:19:59 -06:00
+								        err_sys_ex(runWithErrors, "Failed to free netRandom context");
-											add Whitewood netRandom client library support
										
										
											2016-05-05 15:31:25 -06:00
+								#endif /* HAVE_WNR */
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								        return args.return_code;
 								    }
-											fix windows build with command line examples
										
										
											2012-08-01 17:33:49 -07:00
+								    int myoptind = 0;
 								    char* myoptarg = NULL;
-.8.8 init
										
										
											2011-02-05 11:14:47 -08:00
+								#endif /* NO_MAIN_DRIVER */