2016-05-18 02:18:30 +08:00
|
|
|
/*
|
2024-03-20 20:07:54 +08:00
|
|
|
* Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
|
2017-06-20 22:14:36 +08:00
|
|
|
* Copyright 2005 Nokia. All rights reserved.
|
2006-01-03 11:27:19 +08:00
|
|
|
*
|
2018-12-06 20:08:51 +08:00
|
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
2016-05-18 02:18:30 +08:00
|
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
|
|
* in the file LICENSE in the source distribution or at
|
|
|
|
* https://www.openssl.org/source/license.html
|
2006-01-03 11:27:19 +08:00
|
|
|
*/
|
2016-05-18 02:18:30 +08:00
|
|
|
|
2021-03-26 20:34:49 +08:00
|
|
|
#if defined(__TANDEM) && defined(_SPT_MODEL_)
|
|
|
|
# include <spthread.h>
|
|
|
|
# include <spt_extensions.h> /* timeval */
|
|
|
|
#endif
|
1998-12-21 18:52:47 +08:00
|
|
|
#include <stdio.h>
|
1999-04-24 06:13:45 +08:00
|
|
|
#include <openssl/rand.h>
|
2016-03-19 02:30:20 +08:00
|
|
|
#include <openssl/engine.h>
|
2017-08-22 05:17:35 +08:00
|
|
|
#include "internal/refcount.h"
|
2018-06-13 22:57:39 +08:00
|
|
|
#include "internal/cryptlib.h"
|
2019-09-28 06:45:40 +08:00
|
|
|
#include "ssl_local.h"
|
|
|
|
#include "statem/statem_local.h"
|
1998-12-21 18:52:47 +08:00
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
static void SSL_SESSION_list_remove(SSL_CTX *ctx, SSL_SESSION *s);
|
|
|
|
static void SSL_SESSION_list_add(SSL_CTX *ctx, SSL_SESSION *s);
|
1999-04-30 06:25:52 +08:00
|
|
|
static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck);
|
1998-12-21 18:56:39 +08:00
|
|
|
|
2019-04-06 02:17:22 +08:00
|
|
|
DEFINE_STACK_OF(SSL_SESSION)
|
|
|
|
|
2022-08-29 12:17:25 +08:00
|
|
|
__owur static ossl_inline int sess_timedout(OSSL_TIME t, SSL_SESSION *ss)
|
2019-04-06 02:17:22 +08:00
|
|
|
{
|
2022-08-29 12:17:25 +08:00
|
|
|
return ossl_time_compare(t, ss->calc_timeout) > 0;
|
2019-04-06 02:17:22 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Returns -1/0/+1 as other XXXcmp-type functions
|
2022-08-11 21:58:52 +08:00
|
|
|
* Takes calculated timeout into consideration
|
2019-04-06 02:17:22 +08:00
|
|
|
*/
|
2022-08-11 21:58:52 +08:00
|
|
|
__owur static ossl_inline int timeoutcmp(SSL_SESSION *a, SSL_SESSION *b)
|
2019-04-06 02:17:22 +08:00
|
|
|
{
|
2022-08-11 21:58:52 +08:00
|
|
|
return ossl_time_compare(a->calc_timeout, b->calc_timeout);
|
2019-04-06 02:17:22 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
2022-08-11 21:58:52 +08:00
|
|
|
* Calculates effective timeout
|
2019-04-06 02:17:22 +08:00
|
|
|
* Locking must be done by the caller of this function
|
|
|
|
*/
|
|
|
|
void ssl_session_calculate_timeout(SSL_SESSION *ss)
|
|
|
|
{
|
2022-08-29 12:17:25 +08:00
|
|
|
ss->calc_timeout = ossl_time_add(ss->time, ss->timeout);
|
2019-04-06 02:17:22 +08:00
|
|
|
}
|
|
|
|
|
2017-01-13 21:34:49 +08:00
|
|
|
/*
|
2017-03-21 21:50:31 +08:00
|
|
|
* SSL_get_session() and SSL_get1_session() are problematic in TLS1.3 because,
|
|
|
|
* unlike in earlier protocol versions, the session ticket may not have been
|
|
|
|
* sent yet even though a handshake has finished. The session ticket data could
|
|
|
|
* come in sometime later...or even change if multiple session ticket messages
|
|
|
|
* are sent from the server. The preferred way for applications to obtain
|
|
|
|
* a resumable session is to use SSL_CTX_sess_set_new_cb().
|
2017-01-13 21:34:49 +08:00
|
|
|
*/
|
|
|
|
|
2005-03-30 18:26:02 +08:00
|
|
|
SSL_SESSION *SSL_get_session(const SSL *ssl)
|
2000-01-27 06:36:55 +08:00
|
|
|
/* aka SSL_get0_session; gets 0 objects, just returns a copy of the pointer */
|
1999-11-18 05:36:13 +08:00
|
|
|
{
|
2022-06-20 23:11:28 +08:00
|
|
|
const SSL_CONNECTION *sc = SSL_CONNECTION_FROM_SSL(ssl);
|
|
|
|
|
|
|
|
if (sc == NULL)
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
return sc->session;
|
1999-11-18 05:36:13 +08:00
|
|
|
}
|
2000-01-27 06:36:55 +08:00
|
|
|
|
|
|
|
SSL_SESSION *SSL_get1_session(SSL *ssl)
|
|
|
|
/* variant of SSL_get_session: caller really gets something */
|
1998-12-21 18:56:39 +08:00
|
|
|
{
|
1999-11-16 00:31:31 +08:00
|
|
|
SSL_SESSION *sess;
|
2022-06-20 23:11:28 +08:00
|
|
|
|
1999-11-16 00:31:31 +08:00
|
|
|
/*
|
|
|
|
* Need to lock this all up rather than just use CRYPTO_add so that
|
|
|
|
* somebody doesn't free ssl->session between when we check it's non-null
|
|
|
|
* and when we up the reference count.
|
|
|
|
*/
|
2021-02-19 04:31:56 +08:00
|
|
|
if (!CRYPTO_THREAD_read_lock(ssl->lock))
|
|
|
|
return NULL;
|
2022-06-20 23:11:28 +08:00
|
|
|
sess = SSL_get_session(ssl);
|
|
|
|
if (sess != NULL)
|
2016-03-01 01:26:07 +08:00
|
|
|
SSL_SESSION_up_ref(sess);
|
|
|
|
CRYPTO_THREAD_unlock(ssl->lock);
|
|
|
|
return sess;
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
int SSL_SESSION_set_ex_data(SSL_SESSION *s, int idx, void *arg)
|
1998-12-21 18:56:39 +08:00
|
|
|
{
|
2017-10-17 22:04:09 +08:00
|
|
|
return CRYPTO_set_ex_data(&s->ex_data, idx, arg);
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
|
|
|
|
2005-03-30 18:26:02 +08:00
|
|
|
void *SSL_SESSION_get_ex_data(const SSL_SESSION *s, int idx)
|
1998-12-21 18:56:39 +08:00
|
|
|
{
|
2017-10-17 22:04:09 +08:00
|
|
|
return CRYPTO_get_ex_data(&s->ex_data, idx);
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
SSL_SESSION *SSL_SESSION_new(void)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
|
|
|
SSL_SESSION *ss;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2017-01-19 23:01:55 +08:00
|
|
|
if (!OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL))
|
|
|
|
return NULL;
|
|
|
|
|
2015-08-26 01:25:58 +08:00
|
|
|
ss = OPENSSL_zalloc(sizeof(*ss));
|
2022-09-29 19:57:34 +08:00
|
|
|
if (ss == NULL)
|
2016-03-01 01:26:07 +08:00
|
|
|
return NULL;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2024-05-28 19:59:44 +08:00
|
|
|
ss->ext.max_fragment_len_mode = TLSEXT_max_fragment_length_UNSPECIFIED;
|
1999-11-17 07:15:41 +08:00
|
|
|
ss->verify_result = 1; /* avoid 0 (= X509_V_OK) just in case */
|
2022-08-29 12:17:25 +08:00
|
|
|
/* 5 minute timeout by default */
|
|
|
|
ss->timeout = ossl_seconds2time(60 * 5 + 4);
|
|
|
|
ss->time = ossl_time_now();
|
2019-04-06 02:17:22 +08:00
|
|
|
ssl_session_calculate_timeout(ss);
|
2023-06-22 07:39:36 +08:00
|
|
|
if (!CRYPTO_NEW_REF(&ss->references, 1)) {
|
2016-03-01 01:26:07 +08:00
|
|
|
OPENSSL_free(ss);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2016-02-14 02:29:34 +08:00
|
|
|
if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL_SESSION, ss, &ss->ex_data)) {
|
2023-06-22 07:39:36 +08:00
|
|
|
CRYPTO_FREE_REF(&ss->references);
|
2016-02-14 02:29:34 +08:00
|
|
|
OPENSSL_free(ss);
|
|
|
|
return NULL;
|
|
|
|
}
|
2016-03-01 01:26:07 +08:00
|
|
|
return ss;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2015-05-18 23:27:48 +08:00
|
|
|
/*
|
|
|
|
* Create a new SSL_SESSION and duplicate the contents of |src| into it. If
|
|
|
|
* ticket == 0 then no ticket information is duplicated, otherwise it is.
|
|
|
|
*/
|
2024-03-05 23:43:53 +08:00
|
|
|
static SSL_SESSION *ssl_session_dup_intern(const SSL_SESSION *src, int ticket)
|
2015-05-18 23:27:48 +08:00
|
|
|
{
|
|
|
|
SSL_SESSION *dest;
|
|
|
|
|
2020-10-02 07:04:06 +08:00
|
|
|
dest = OPENSSL_malloc(sizeof(*dest));
|
2023-07-02 15:19:17 +08:00
|
|
|
if (dest == NULL)
|
|
|
|
return NULL;
|
2024-06-18 22:43:26 +08:00
|
|
|
|
|
|
|
/*
|
2024-06-19 04:31:14 +08:00
|
|
|
* src is logically read-only but the prev/next pointers are not, they are
|
|
|
|
* part of the session cache and can be modified concurrently.
|
2024-06-18 22:43:26 +08:00
|
|
|
*/
|
|
|
|
memcpy(dest, src, offsetof(SSL_SESSION, prev));
|
2015-05-18 23:27:48 +08:00
|
|
|
|
2015-06-11 08:30:06 +08:00
|
|
|
/*
|
|
|
|
* Set the various pointers to NULL so that we can call SSL_SESSION_free in
|
|
|
|
* the case of an error whilst halfway through constructing dest
|
|
|
|
*/
|
|
|
|
#ifndef OPENSSL_NO_PSK
|
|
|
|
dest->psk_identity_hint = NULL;
|
|
|
|
dest->psk_identity = NULL;
|
|
|
|
#endif
|
2016-12-09 03:18:40 +08:00
|
|
|
dest->ext.hostname = NULL;
|
|
|
|
dest->ext.tick = NULL;
|
2017-06-26 21:21:20 +08:00
|
|
|
dest->ext.alpn_selected = NULL;
|
2015-06-11 08:30:06 +08:00
|
|
|
#ifndef OPENSSL_NO_SRP
|
|
|
|
dest->srp_username = NULL;
|
|
|
|
#endif
|
2017-04-27 02:05:49 +08:00
|
|
|
dest->peer_chain = NULL;
|
|
|
|
dest->peer = NULL;
|
2021-01-28 03:23:33 +08:00
|
|
|
dest->peer_rpk = NULL;
|
2017-03-16 01:25:55 +08:00
|
|
|
dest->ticket_appdata = NULL;
|
2017-07-07 18:21:29 +08:00
|
|
|
memset(&dest->ex_data, 0, sizeof(dest->ex_data));
|
2017-07-05 15:45:46 +08:00
|
|
|
|
2023-04-28 01:14:51 +08:00
|
|
|
/* As the copy is not in the cache, we remove the associated pointers */
|
2015-06-11 08:30:06 +08:00
|
|
|
dest->prev = NULL;
|
|
|
|
dest->next = NULL;
|
2023-04-28 01:14:51 +08:00
|
|
|
dest->owner = NULL;
|
2015-06-11 08:30:06 +08:00
|
|
|
|
2023-07-02 15:19:17 +08:00
|
|
|
if (!CRYPTO_NEW_REF(&dest->references, 1)) {
|
|
|
|
OPENSSL_free(dest);
|
|
|
|
return NULL;
|
|
|
|
}
|
2016-03-01 01:26:07 +08:00
|
|
|
|
2022-09-29 19:57:34 +08:00
|
|
|
if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL_SESSION, dest, &dest->ex_data)) {
|
|
|
|
ERR_raise(ERR_LIB_SSL, ERR_R_CRYPTO_LIB);
|
2017-04-27 02:05:49 +08:00
|
|
|
goto err;
|
2022-09-29 19:57:34 +08:00
|
|
|
}
|
2017-04-27 02:05:49 +08:00
|
|
|
|
|
|
|
if (src->peer != NULL) {
|
2022-09-29 19:57:34 +08:00
|
|
|
if (!X509_up_ref(src->peer)) {
|
|
|
|
ERR_raise(ERR_LIB_SSL, ERR_R_X509_LIB);
|
2017-04-27 02:05:49 +08:00
|
|
|
goto err;
|
2022-09-29 19:57:34 +08:00
|
|
|
}
|
2017-04-27 02:05:49 +08:00
|
|
|
dest->peer = src->peer;
|
|
|
|
}
|
2015-06-11 08:30:06 +08:00
|
|
|
|
2015-06-30 20:58:25 +08:00
|
|
|
if (src->peer_chain != NULL) {
|
|
|
|
dest->peer_chain = X509_chain_up_ref(src->peer_chain);
|
2022-09-29 19:57:34 +08:00
|
|
|
if (dest->peer_chain == NULL) {
|
|
|
|
ERR_raise(ERR_LIB_SSL, ERR_R_X509_LIB);
|
2015-06-30 20:58:25 +08:00
|
|
|
goto err;
|
2022-09-29 19:57:34 +08:00
|
|
|
}
|
2015-06-30 20:58:25 +08:00
|
|
|
}
|
2021-01-28 03:23:33 +08:00
|
|
|
|
|
|
|
if (src->peer_rpk != NULL) {
|
|
|
|
if (!EVP_PKEY_up_ref(src->peer_rpk))
|
|
|
|
goto err;
|
|
|
|
dest->peer_rpk = src->peer_rpk;
|
|
|
|
}
|
|
|
|
|
2015-05-18 23:27:48 +08:00
|
|
|
#ifndef OPENSSL_NO_PSK
|
|
|
|
if (src->psk_identity_hint) {
|
Rename some BUF_xxx to OPENSSL_xxx
Rename BUF_{strdup,strlcat,strlcpy,memdup,strndup,strnlen}
to OPENSSL_{strdup,strlcat,strlcpy,memdup,strndup,strnlen}
Add #define's for the old names.
Add CRYPTO_{memdup,strndup}, called by OPENSSL_{memdup,strndup} macros.
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-12-17 05:12:24 +08:00
|
|
|
dest->psk_identity_hint = OPENSSL_strdup(src->psk_identity_hint);
|
2022-09-29 19:57:34 +08:00
|
|
|
if (dest->psk_identity_hint == NULL)
|
2015-05-18 23:27:48 +08:00
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
if (src->psk_identity) {
|
Rename some BUF_xxx to OPENSSL_xxx
Rename BUF_{strdup,strlcat,strlcpy,memdup,strndup,strnlen}
to OPENSSL_{strdup,strlcat,strlcpy,memdup,strndup,strnlen}
Add #define's for the old names.
Add CRYPTO_{memdup,strndup}, called by OPENSSL_{memdup,strndup} macros.
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-12-17 05:12:24 +08:00
|
|
|
dest->psk_identity = OPENSSL_strdup(src->psk_identity);
|
2022-09-29 19:57:34 +08:00
|
|
|
if (dest->psk_identity == NULL)
|
2015-05-18 23:27:48 +08:00
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
|
|
|
if (!CRYPTO_dup_ex_data(CRYPTO_EX_INDEX_SSL_SESSION,
|
2016-08-06 01:03:17 +08:00
|
|
|
&dest->ex_data, &src->ex_data)) {
|
2022-09-29 19:57:34 +08:00
|
|
|
ERR_raise(ERR_LIB_SSL, ERR_R_CRYPTO_LIB);
|
2015-05-18 23:27:48 +08:00
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
2016-12-09 03:18:40 +08:00
|
|
|
if (src->ext.hostname) {
|
|
|
|
dest->ext.hostname = OPENSSL_strdup(src->ext.hostname);
|
2022-09-29 19:57:34 +08:00
|
|
|
if (dest->ext.hostname == NULL)
|
2015-05-18 23:27:48 +08:00
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
2017-04-27 02:05:49 +08:00
|
|
|
if (ticket != 0 && src->ext.tick != NULL) {
|
2016-12-09 03:18:40 +08:00
|
|
|
dest->ext.tick =
|
|
|
|
OPENSSL_memdup(src->ext.tick, src->ext.ticklen);
|
|
|
|
if (dest->ext.tick == NULL)
|
2015-05-18 23:27:48 +08:00
|
|
|
goto err;
|
2015-06-11 08:30:06 +08:00
|
|
|
} else {
|
2016-12-09 03:18:40 +08:00
|
|
|
dest->ext.tick_lifetime_hint = 0;
|
|
|
|
dest->ext.ticklen = 0;
|
2015-05-18 23:27:48 +08:00
|
|
|
}
|
|
|
|
|
2018-06-18 18:30:21 +08:00
|
|
|
if (src->ext.alpn_selected != NULL) {
|
|
|
|
dest->ext.alpn_selected = OPENSSL_memdup(src->ext.alpn_selected,
|
|
|
|
src->ext.alpn_selected_len);
|
|
|
|
if (dest->ext.alpn_selected == NULL)
|
2017-06-26 21:21:20 +08:00
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
2015-05-18 23:27:48 +08:00
|
|
|
#ifndef OPENSSL_NO_SRP
|
|
|
|
if (src->srp_username) {
|
Rename some BUF_xxx to OPENSSL_xxx
Rename BUF_{strdup,strlcat,strlcpy,memdup,strndup,strnlen}
to OPENSSL_{strdup,strlcat,strlcpy,memdup,strndup,strnlen}
Add #define's for the old names.
Add CRYPTO_{memdup,strndup}, called by OPENSSL_{memdup,strndup} macros.
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-12-17 05:12:24 +08:00
|
|
|
dest->srp_username = OPENSSL_strdup(src->srp_username);
|
2022-09-29 19:57:34 +08:00
|
|
|
if (dest->srp_username == NULL)
|
2015-05-18 23:27:48 +08:00
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2017-03-16 01:25:55 +08:00
|
|
|
if (src->ticket_appdata != NULL) {
|
|
|
|
dest->ticket_appdata =
|
|
|
|
OPENSSL_memdup(src->ticket_appdata, src->ticket_appdata_len);
|
|
|
|
if (dest->ticket_appdata == NULL)
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
2015-05-18 23:27:48 +08:00
|
|
|
return dest;
|
2016-08-06 01:03:17 +08:00
|
|
|
err:
|
2015-05-18 23:27:48 +08:00
|
|
|
SSL_SESSION_free(dest);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2024-03-05 23:43:53 +08:00
|
|
|
SSL_SESSION *SSL_SESSION_dup(const SSL_SESSION *src)
|
|
|
|
{
|
|
|
|
return ssl_session_dup_intern(src, 1);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Used internally when duplicating a session which might be already shared.
|
|
|
|
* We will have resumed the original session. Subsequently we might have marked
|
|
|
|
* it as non-resumable (e.g. in another thread) - but this copy should be ok to
|
|
|
|
* resume from.
|
|
|
|
*/
|
|
|
|
SSL_SESSION *ssl_session_dup(const SSL_SESSION *src, int ticket)
|
|
|
|
{
|
|
|
|
SSL_SESSION *sess = ssl_session_dup_intern(src, ticket);
|
|
|
|
|
|
|
|
if (sess != NULL)
|
|
|
|
sess->not_resumable = 0;
|
|
|
|
|
|
|
|
return sess;
|
|
|
|
}
|
|
|
|
|
2016-08-06 01:03:17 +08:00
|
|
|
const unsigned char *SSL_SESSION_get_id(const SSL_SESSION *s, unsigned int *len)
|
2003-02-16 04:38:57 +08:00
|
|
|
{
|
|
|
|
if (len)
|
2016-10-19 22:11:24 +08:00
|
|
|
*len = (unsigned int)s->session_id_length;
|
2003-02-16 04:38:57 +08:00
|
|
|
return s->session_id;
|
|
|
|
}
|
2024-03-01 21:12:21 +08:00
|
|
|
|
2016-08-06 18:54:29 +08:00
|
|
|
const unsigned char *SSL_SESSION_get0_id_context(const SSL_SESSION *s,
|
|
|
|
unsigned int *len)
|
|
|
|
{
|
|
|
|
if (len != NULL)
|
2016-10-19 22:11:24 +08:00
|
|
|
*len = (unsigned int)s->sid_ctx_length;
|
2016-08-06 18:54:29 +08:00
|
|
|
return s->sid_ctx;
|
|
|
|
}
|
2003-02-16 04:38:57 +08:00
|
|
|
|
2011-12-22 23:14:32 +08:00
|
|
|
unsigned int SSL_SESSION_get_compress_id(const SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
return s->compress_meth;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2014-11-30 22:35:22 +08:00
|
|
|
/*
|
|
|
|
* SSLv3/TLSv1 has 32 bytes (256 bits) of session ID space. As such, filling
|
|
|
|
* the ID with random junk repeatedly until we have no conflict is going to
|
2001-02-22 02:06:26 +08:00
|
|
|
* complete in one iteration pretty much "most" of the time (btw:
|
|
|
|
* understatement). So, if it takes us 10 iterations and we still can't avoid
|
|
|
|
* a conflict - well that's a reasonable point to call it quits. Either the
|
|
|
|
* RAND code is broken or someone is trying to open roughly very close to
|
2014-11-30 22:35:22 +08:00
|
|
|
* 2^256 SSL sessions to our server. How you might store that many sessions
|
2001-02-22 02:06:26 +08:00
|
|
|
* is perhaps a more interesting question ...
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define MAX_SESS_ID_ATTEMPTS 10
|
2017-08-03 22:24:03 +08:00
|
|
|
static int def_generate_session_id(SSL *ssl, unsigned char *id,
|
2001-02-22 02:06:26 +08:00
|
|
|
unsigned int *id_len)
|
|
|
|
{
|
|
|
|
unsigned int retry = 0;
|
2023-01-25 22:43:50 +08:00
|
|
|
do {
|
2021-05-28 12:45:57 +08:00
|
|
|
if (RAND_bytes_ex(ssl->ctx->libctx, id, *id_len, 0) <= 0)
|
2005-04-30 04:10:06 +08:00
|
|
|
return 0;
|
2023-01-25 22:43:50 +08:00
|
|
|
#ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
|
|
|
|
if (retry > 0) {
|
|
|
|
id[0]++;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
} while (SSL_has_matching_session_id(ssl, id, *id_len) &&
|
2001-02-22 02:06:26 +08:00
|
|
|
(++retry < MAX_SESS_ID_ATTEMPTS)) ;
|
|
|
|
if (retry < MAX_SESS_ID_ATTEMPTS)
|
|
|
|
return 1;
|
|
|
|
/* else - woops a session_id match */
|
|
|
|
/*
|
|
|
|
* XXX We should also check the external cache -- but the probability of
|
|
|
|
* a collision is negligible, and we could not prevent the concurrent
|
|
|
|
* creation of sessions with identical IDs since we currently don't have
|
|
|
|
* means to atomically check whether a session ID already exists and make
|
|
|
|
* a reservation for it if it does not (this problem applies to the
|
|
|
|
* internal cache as well).
|
|
|
|
*/
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
int ssl_generate_session_id(SSL_CONNECTION *s, SSL_SESSION *ss)
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
{
|
|
|
|
unsigned int tmp;
|
|
|
|
GEN_SESSION_CB cb = def_generate_session_id;
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL *ssl = SSL_CONNECTION_GET_SSL(s);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
|
|
|
|
switch (s->version) {
|
|
|
|
case SSL3_VERSION:
|
|
|
|
case TLS1_VERSION:
|
|
|
|
case TLS1_1_VERSION:
|
|
|
|
case TLS1_2_VERSION:
|
|
|
|
case TLS1_3_VERSION:
|
|
|
|
case DTLS1_BAD_VER:
|
|
|
|
case DTLS1_VERSION:
|
|
|
|
case DTLS1_2_VERSION:
|
|
|
|
ss->session_id_length = SSL3_SSL_SESSION_ID_LENGTH;
|
|
|
|
break;
|
|
|
|
default:
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_R_UNSUPPORTED_SSL_VERSION);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*-
|
|
|
|
* If RFC5077 ticket, use empty session ID (as server).
|
|
|
|
* Note that:
|
|
|
|
* (a) ssl_get_prev_session() does lookahead into the
|
|
|
|
* ClientHello extensions to find the session ticket.
|
|
|
|
* When ssl_get_prev_session() fails, statem_srvr.c calls
|
|
|
|
* ssl_get_new_session() in tls_process_client_hello().
|
|
|
|
* At that point, it has not yet parsed the extensions,
|
|
|
|
* however, because of the lookahead, it already knows
|
|
|
|
* whether a ticket is expected or not.
|
|
|
|
*
|
|
|
|
* (b) statem_clnt.c calls ssl_get_new_session() before parsing
|
|
|
|
* ServerHello extensions, and before recording the session
|
|
|
|
* ID received from the server, so this block is a noop.
|
|
|
|
*/
|
|
|
|
if (s->ext.ticket_expected) {
|
|
|
|
ss->session_id_length = 0;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Choose which callback will set the session ID */
|
2022-06-20 23:11:28 +08:00
|
|
|
if (!CRYPTO_THREAD_read_lock(SSL_CONNECTION_GET_SSL(s)->lock))
|
2021-02-19 04:31:56 +08:00
|
|
|
return 0;
|
|
|
|
if (!CRYPTO_THREAD_read_lock(s->session_ctx->lock)) {
|
2022-06-20 23:11:28 +08:00
|
|
|
CRYPTO_THREAD_unlock(ssl->lock);
|
2021-02-19 04:31:56 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR,
|
|
|
|
SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED);
|
|
|
|
return 0;
|
|
|
|
}
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
if (s->generate_session_id)
|
|
|
|
cb = s->generate_session_id;
|
|
|
|
else if (s->session_ctx->generate_session_id)
|
|
|
|
cb = s->session_ctx->generate_session_id;
|
|
|
|
CRYPTO_THREAD_unlock(s->session_ctx->lock);
|
2022-06-20 23:11:28 +08:00
|
|
|
CRYPTO_THREAD_unlock(ssl->lock);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
/* Choose a session ID */
|
|
|
|
memset(ss->session_id, 0, ss->session_id_length);
|
|
|
|
tmp = (int)ss->session_id_length;
|
2022-06-20 23:11:28 +08:00
|
|
|
if (!cb(ssl, ss->session_id, &tmp)) {
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
/* The callback failed */
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR,
|
2017-11-22 01:18:43 +08:00
|
|
|
SSL_R_SSL_SESSION_ID_CALLBACK_FAILED);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
/*
|
|
|
|
* Don't allow the callback to set the session length to zero. nor
|
|
|
|
* set it higher than it was.
|
|
|
|
*/
|
|
|
|
if (tmp == 0 || tmp > ss->session_id_length) {
|
|
|
|
/* The callback set an illegal length */
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR,
|
2017-11-22 01:18:43 +08:00
|
|
|
SSL_R_SSL_SESSION_ID_HAS_BAD_LENGTH);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
ss->session_id_length = tmp;
|
|
|
|
/* Finally, check for a conflict */
|
2022-06-20 23:11:28 +08:00
|
|
|
if (SSL_has_matching_session_id(ssl, ss->session_id,
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
(unsigned int)ss->session_id_length)) {
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_R_SSL_SESSION_ID_CONFLICT);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
int ssl_get_new_session(SSL_CONNECTION *s, int session)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
1999-05-13 23:09:38 +08:00
|
|
|
/* This gets used by clients and servers. */
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:52:47 +08:00
|
|
|
SSL_SESSION *ss = NULL;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2017-11-22 01:18:43 +08:00
|
|
|
if ((ss = SSL_SESSION_new()) == NULL) {
|
2022-09-29 19:57:34 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR, ERR_R_SSL_LIB);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 0;
|
2017-11-22 01:18:43 +08:00
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:52:47 +08:00
|
|
|
/* If the context has a default timeout, use it */
|
2022-08-29 12:17:25 +08:00
|
|
|
if (ossl_time_is_zero(s->session_ctx->session_timeout))
|
|
|
|
ss->timeout = SSL_CONNECTION_GET_SSL(s)->method->get_timeout();
|
Updates to the new SSL compression code
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
1999-02-16 17:22:21 +08:00
|
|
|
else
|
2006-01-10 03:49:05 +08:00
|
|
|
ss->timeout = s->session_ctx->session_timeout;
|
2021-07-23 21:25:09 +08:00
|
|
|
ssl_session_calculate_timeout(ss);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2015-04-11 22:22:36 +08:00
|
|
|
SSL_SESSION_free(s->session);
|
|
|
|
s->session = NULL;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:52:47 +08:00
|
|
|
if (session) {
|
2022-06-20 23:11:28 +08:00
|
|
|
if (SSL_CONNECTION_IS_TLS13(s)) {
|
2018-03-16 01:47:29 +08:00
|
|
|
/*
|
|
|
|
* We generate the session id while constructing the
|
|
|
|
* NewSessionTicket in TLSv1.3.
|
|
|
|
*/
|
|
|
|
ss->session_id_length = 0;
|
|
|
|
} else if (!ssl_generate_session_id(s, ss)) {
|
2017-11-22 01:18:43 +08:00
|
|
|
/* SSLfatal() already called */
|
2001-02-22 02:06:26 +08:00
|
|
|
SSL_SESSION_free(ss);
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 0;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
2015-05-15 17:49:56 +08:00
|
|
|
|
1998-12-21 18:52:47 +08:00
|
|
|
} else {
|
|
|
|
ss->session_id_length = 0;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2017-12-08 02:39:34 +08:00
|
|
|
if (s->sid_ctx_length > sizeof(ss->sid_ctx)) {
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR, ERR_R_INTERNAL_ERROR);
|
2002-08-02 19:48:15 +08:00
|
|
|
SSL_SESSION_free(ss);
|
|
|
|
return 0;
|
|
|
|
}
|
1999-03-22 20:22:14 +08:00
|
|
|
memcpy(ss->sid_ctx, s->sid_ctx, s->sid_ctx_length);
|
|
|
|
ss->sid_ctx_length = s->sid_ctx_length;
|
1998-12-21 18:52:47 +08:00
|
|
|
s->session = ss;
|
|
|
|
ss->ssl_version = s->version;
|
1999-11-17 07:15:41 +08:00
|
|
|
ss->verify_result = X509_V_OK;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2015-12-05 03:48:15 +08:00
|
|
|
/* If client supports extended master secret set it in session */
|
2018-12-13 02:09:50 +08:00
|
|
|
if (s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS)
|
2015-12-05 03:48:15 +08:00
|
|
|
ss->flags |= SSL_SESS_FLAG_EXTMS;
|
|
|
|
|
Session resume broken switching contexts
When an SSL's context is swtiched from a ticket-enabled context to
a ticket-disabled context in the servername callback, no session-id
is generated, so the session can't be resumed.
If a servername callback changes the SSL_OP_NO_TICKET option, check
to see if it's changed to disable, and whether a session ticket is
expected (i.e. the client indicated ticket support and the SSL had
tickets enabled at the time), and whether we already have a previous
session (i.e. s->hit is set).
In this case, clear the ticket-expected flag, remove any ticket data
and generate a session-id in the session.
If the SSL hit (resumed) and switched to a ticket-disabled context,
assume that the resumption was via session-id, and don't bother to
update the session.
Before this fix, the updated unit-tests in 06-sni-ticket.conf would
fail test #4 (server1 = SNI, server2 = no SNI).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/1529)
2016-09-01 20:40:54 +08:00
|
|
|
return 1;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_SESSION *lookup_sess_in_cache(SSL_CONNECTION *s,
|
|
|
|
const unsigned char *sess_id,
|
2018-06-13 22:57:39 +08:00
|
|
|
size_t sess_id_len)
|
|
|
|
{
|
|
|
|
SSL_SESSION *ret = NULL;
|
|
|
|
|
|
|
|
if ((s->session_ctx->session_cache_mode
|
|
|
|
& SSL_SESS_CACHE_NO_INTERNAL_LOOKUP) == 0) {
|
|
|
|
SSL_SESSION data;
|
|
|
|
|
|
|
|
data.ssl_version = s->version;
|
|
|
|
if (!ossl_assert(sess_id_len <= SSL_MAX_SSL_SESSION_ID_LENGTH))
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
memcpy(data.session_id, sess_id, sess_id_len);
|
|
|
|
data.session_id_length = sess_id_len;
|
|
|
|
|
2021-02-19 04:31:56 +08:00
|
|
|
if (!CRYPTO_THREAD_read_lock(s->session_ctx->lock))
|
|
|
|
return NULL;
|
2018-06-13 22:57:39 +08:00
|
|
|
ret = lh_SSL_SESSION_retrieve(s->session_ctx->sessions, &data);
|
|
|
|
if (ret != NULL) {
|
|
|
|
/* don't allow other threads to steal it: */
|
|
|
|
SSL_SESSION_up_ref(ret);
|
|
|
|
}
|
|
|
|
CRYPTO_THREAD_unlock(s->session_ctx->lock);
|
|
|
|
if (ret == NULL)
|
2022-01-13 09:19:23 +08:00
|
|
|
ssl_tsan_counter(s->session_ctx, &s->session_ctx->stats.sess_miss);
|
2018-06-13 22:57:39 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
if (ret == NULL && s->session_ctx->get_session_cb != NULL) {
|
|
|
|
int copy = 1;
|
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
ret = s->session_ctx->get_session_cb(SSL_CONNECTION_GET_SSL(s),
|
|
|
|
sess_id, sess_id_len, ©);
|
2018-06-13 22:57:39 +08:00
|
|
|
|
|
|
|
if (ret != NULL) {
|
2024-03-16 01:58:42 +08:00
|
|
|
if (ret->not_resumable) {
|
|
|
|
/* If its not resumable then ignore this session */
|
|
|
|
if (!copy)
|
|
|
|
SSL_SESSION_free(ret);
|
|
|
|
return NULL;
|
|
|
|
}
|
2022-01-13 09:19:23 +08:00
|
|
|
ssl_tsan_counter(s->session_ctx,
|
|
|
|
&s->session_ctx->stats.sess_cb_hit);
|
2018-06-13 22:57:39 +08:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Increment reference count now if the session callback asks us
|
|
|
|
* to do so (note that if the session structures returned by the
|
|
|
|
* callback are shared between threads, it must handle the
|
|
|
|
* reference count itself [i.e. copy == 0], or things won't be
|
|
|
|
* thread-safe).
|
|
|
|
*/
|
|
|
|
if (copy)
|
|
|
|
SSL_SESSION_up_ref(ret);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Add the externally cached session to the internal cache as
|
|
|
|
* well if and only if we are supposed to.
|
|
|
|
*/
|
|
|
|
if ((s->session_ctx->session_cache_mode &
|
|
|
|
SSL_SESS_CACHE_NO_INTERNAL_STORE) == 0) {
|
|
|
|
/*
|
|
|
|
* Either return value of SSL_CTX_add_session should not
|
|
|
|
* interrupt the session resumption process. The return
|
|
|
|
* value is intentionally ignored.
|
|
|
|
*/
|
|
|
|
(void)SSL_CTX_add_session(s->session_ctx, ret);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2015-01-05 08:34:00 +08:00
|
|
|
/*-
|
|
|
|
* ssl_get_prev attempts to find an SSL_SESSION to be used to resume this
|
2011-09-05 21:36:23 +08:00
|
|
|
* connection. It is only called by servers.
|
|
|
|
*
|
2016-10-31 21:20:03 +08:00
|
|
|
* hello: The parsed ClientHello data
|
2011-09-05 21:36:23 +08:00
|
|
|
*
|
|
|
|
* Returns:
|
2017-01-19 00:28:23 +08:00
|
|
|
* -1: fatal error
|
|
|
|
* 0: no session found
|
|
|
|
* 1: a session may have been found.
|
2011-09-05 21:36:23 +08:00
|
|
|
*
|
|
|
|
* Side effects:
|
|
|
|
* - If a session is found then s->session is pointed at it (after freeing an
|
|
|
|
* existing session if need be) and s->verify_result is set from the session.
|
2016-12-09 03:18:40 +08:00
|
|
|
* - Both for new and resumed sessions, s->ext.ticket_expected is set to 1
|
2011-09-05 21:36:23 +08:00
|
|
|
* if the server should issue a new session ticket (to 0 otherwise).
|
|
|
|
*/
|
2022-06-20 23:11:28 +08:00
|
|
|
int ssl_get_prev_session(SSL_CONNECTION *s, CLIENTHELLO_MSG *hello)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
1999-05-13 23:09:38 +08:00
|
|
|
/* This is used only by servers. */
|
|
|
|
|
2007-08-12 07:18:29 +08:00
|
|
|
SSL_SESSION *ret = NULL;
|
2018-07-29 20:12:53 +08:00
|
|
|
int fatal = 0;
|
2017-01-19 00:28:23 +08:00
|
|
|
int try_session_cache = 0;
|
2018-05-10 01:22:36 +08:00
|
|
|
SSL_TICKET_STATUS r;
|
1998-12-21 18:52:47 +08:00
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
if (SSL_CONNECTION_IS_TLS13(s)) {
|
2018-05-10 01:22:36 +08:00
|
|
|
/*
|
|
|
|
* By default we will send a new ticket. This can be overridden in the
|
|
|
|
* ticket processing.
|
|
|
|
*/
|
|
|
|
s->ext.ticket_expected = 1;
|
2017-04-04 18:40:02 +08:00
|
|
|
if (!tls_parse_extension(s, TLSEXT_IDX_psk_kex_modes,
|
|
|
|
SSL_EXT_CLIENT_HELLO, hello->pre_proc_exts,
|
2017-11-22 01:18:43 +08:00
|
|
|
NULL, 0)
|
2017-04-04 18:40:02 +08:00
|
|
|
|| !tls_parse_extension(s, TLSEXT_IDX_psk, SSL_EXT_CLIENT_HELLO,
|
2017-11-22 01:18:43 +08:00
|
|
|
hello->pre_proc_exts, NULL, 0))
|
2017-01-19 00:28:23 +08:00
|
|
|
return -1;
|
|
|
|
|
|
|
|
ret = s->session;
|
|
|
|
} else {
|
|
|
|
/* sets s->ext.ticket_expected */
|
|
|
|
r = tls_get_ticket_from_client(s, hello, &ret);
|
|
|
|
switch (r) {
|
2017-03-16 01:25:55 +08:00
|
|
|
case SSL_TICKET_FATAL_ERR_MALLOC:
|
|
|
|
case SSL_TICKET_FATAL_ERR_OTHER:
|
2017-01-19 00:28:23 +08:00
|
|
|
fatal = 1;
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR, ERR_R_INTERNAL_ERROR);
|
2017-01-19 00:28:23 +08:00
|
|
|
goto err;
|
2017-03-16 01:25:55 +08:00
|
|
|
case SSL_TICKET_NONE:
|
|
|
|
case SSL_TICKET_EMPTY:
|
2018-06-13 22:57:39 +08:00
|
|
|
if (hello->session_id_len > 0) {
|
2017-03-31 21:52:56 +08:00
|
|
|
try_session_cache = 1;
|
2018-06-13 22:57:39 +08:00
|
|
|
ret = lookup_sess_in_cache(s, hello->session_id,
|
|
|
|
hello->session_id_len);
|
|
|
|
}
|
2017-01-27 20:11:23 +08:00
|
|
|
break;
|
2017-03-16 01:25:55 +08:00
|
|
|
case SSL_TICKET_NO_DECRYPT:
|
|
|
|
case SSL_TICKET_SUCCESS:
|
|
|
|
case SSL_TICKET_SUCCESS_RENEW:
|
2017-01-19 00:28:23 +08:00
|
|
|
break;
|
|
|
|
}
|
2007-08-12 07:18:29 +08:00
|
|
|
}
|
2011-09-05 21:36:23 +08:00
|
|
|
|
|
|
|
if (ret == NULL)
|
|
|
|
goto err;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2011-09-05 21:36:23 +08:00
|
|
|
/* Now ret is non-NULL and we own one of its reference counts. */
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2017-01-19 18:46:53 +08:00
|
|
|
/* Check TLS version consistency */
|
|
|
|
if (ret->ssl_version != s->version)
|
|
|
|
goto err;
|
|
|
|
|
2007-03-21 22:33:16 +08:00
|
|
|
if (ret->sid_ctx_length != s->sid_ctx_length
|
|
|
|
|| memcmp(ret->sid_ctx, s->sid_ctx, ret->sid_ctx_length)) {
|
2011-09-05 21:36:23 +08:00
|
|
|
/*
|
|
|
|
* We have the session requested by the client, but we don't want to
|
1999-05-23 21:07:03 +08:00
|
|
|
* use it in this context.
|
|
|
|
*/
|
2007-03-21 22:33:16 +08:00
|
|
|
goto err; /* treat like cache miss */
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2007-03-21 22:33:16 +08:00
|
|
|
if ((s->verify_mode & SSL_VERIFY_PEER) && s->sid_ctx_length == 0) {
|
|
|
|
/*
|
|
|
|
* We can't be sure if this session is being used out of context,
|
|
|
|
* which is especially important for SSL_VERIFY_PEER. The application
|
|
|
|
* should have used SSL[_CTX]_set_session_id_context. For this error
|
|
|
|
* case, we generate an error instead of treating the event like a
|
|
|
|
* cache miss (otherwise it would be easy for applications to
|
|
|
|
* effectively disable the session cache by accident without anyone
|
|
|
|
* noticing).
|
|
|
|
*/
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_INTERNAL_ERROR,
|
2017-11-22 01:18:43 +08:00
|
|
|
SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED);
|
2007-03-21 22:33:16 +08:00
|
|
|
fatal = 1;
|
|
|
|
goto err;
|
1999-05-23 21:07:03 +08:00
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2022-08-29 12:17:25 +08:00
|
|
|
if (sess_timedout(ossl_time_now(), ret)) {
|
2022-01-13 09:19:23 +08:00
|
|
|
ssl_tsan_counter(s->session_ctx, &s->session_ctx->stats.sess_timeout);
|
2011-09-05 21:36:23 +08:00
|
|
|
if (try_session_cache) {
|
|
|
|
/* session was from the cache, so remove it */
|
|
|
|
SSL_CTX_remove_session(s->session_ctx, ret);
|
|
|
|
}
|
1999-05-23 21:07:03 +08:00
|
|
|
goto err;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2015-12-05 03:48:15 +08:00
|
|
|
/* Check extended master secret extension consistency */
|
|
|
|
if (ret->flags & SSL_SESS_FLAG_EXTMS) {
|
|
|
|
/* If old session includes extms, but new does not: abort handshake */
|
2018-12-13 02:09:50 +08:00
|
|
|
if (!(s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS)) {
|
2020-11-04 21:39:57 +08:00
|
|
|
SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_R_INCONSISTENT_EXTMS);
|
2015-12-05 03:48:15 +08:00
|
|
|
fatal = 1;
|
|
|
|
goto err;
|
|
|
|
}
|
2018-12-13 02:09:50 +08:00
|
|
|
} else if (s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS) {
|
2015-12-05 03:48:15 +08:00
|
|
|
/* If new session includes extms, but old does not: do not resume */
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
if (!SSL_CONNECTION_IS_TLS13(s)) {
|
2017-01-19 00:28:23 +08:00
|
|
|
/* We already did this for TLS1.3 */
|
|
|
|
SSL_SESSION_free(s->session);
|
|
|
|
s->session = ret;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2022-01-13 09:19:23 +08:00
|
|
|
ssl_tsan_counter(s->session_ctx, &s->session_ctx->stats.sess_hit);
|
1999-11-17 07:15:41 +08:00
|
|
|
s->verify_result = s->session->verify_result;
|
2011-09-05 21:36:23 +08:00
|
|
|
return 1;
|
1999-05-23 21:07:03 +08:00
|
|
|
|
|
|
|
err:
|
|
|
|
if (ret != NULL) {
|
|
|
|
SSL_SESSION_free(ret);
|
2017-01-21 00:02:07 +08:00
|
|
|
/* In TLSv1.3 s->session was already set to ret, so we NULL it out */
|
2022-06-20 23:11:28 +08:00
|
|
|
if (SSL_CONNECTION_IS_TLS13(s))
|
2017-01-19 18:46:53 +08:00
|
|
|
s->session = NULL;
|
2015-05-15 17:49:56 +08:00
|
|
|
|
2011-09-05 21:36:23 +08:00
|
|
|
if (!try_session_cache) {
|
|
|
|
/*
|
|
|
|
* The session was from a ticket, so we should issue a ticket for
|
|
|
|
* the new session
|
|
|
|
*/
|
2016-12-09 03:18:40 +08:00
|
|
|
s->ext.ticket_expected = 1;
|
2011-09-05 21:36:23 +08:00
|
|
|
}
|
|
|
|
}
|
2017-11-22 01:18:43 +08:00
|
|
|
if (fatal)
|
1999-05-23 21:07:03 +08:00
|
|
|
return -1;
|
2017-01-27 23:17:51 +08:00
|
|
|
|
|
|
|
return 0;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
int SSL_CTX_add_session(SSL_CTX *ctx, SSL_SESSION *c)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
2018-07-29 20:12:53 +08:00
|
|
|
int ret = 0;
|
1998-12-21 18:52:47 +08:00
|
|
|
SSL_SESSION *s;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1999-12-29 22:29:32 +08:00
|
|
|
/*
|
|
|
|
* add just 1 reference count for the SSL_CTX's session cache even though
|
|
|
|
* it has two ways of access: each session is in a doubly linked list and
|
|
|
|
* an lhash
|
|
|
|
*/
|
2016-03-01 01:26:07 +08:00
|
|
|
SSL_SESSION_up_ref(c);
|
1999-12-29 22:29:32 +08:00
|
|
|
/*
|
|
|
|
* if session c is in already in cache, we take back the increment later
|
|
|
|
*/
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2021-02-19 04:31:56 +08:00
|
|
|
if (!CRYPTO_THREAD_write_lock(ctx->lock)) {
|
|
|
|
SSL_SESSION_free(c);
|
|
|
|
return 0;
|
|
|
|
}
|
2008-05-26 19:24:29 +08:00
|
|
|
s = lh_SSL_SESSION_insert(ctx->sessions, c);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1999-12-29 22:29:32 +08:00
|
|
|
/*
|
|
|
|
* s != NULL iff we already had a session with the given PID. In this
|
|
|
|
* case, s == c should hold (then we did not really modify
|
|
|
|
* ctx->sessions), or we're in trouble.
|
|
|
|
*/
|
|
|
|
if (s != NULL && s != c) {
|
|
|
|
/* We *are* in trouble ... */
|
|
|
|
SSL_SESSION_list_remove(ctx, s);
|
|
|
|
SSL_SESSION_free(s);
|
|
|
|
/*
|
|
|
|
* ... so pretend the other session did not exist in cache (we cannot
|
|
|
|
* handle two SSL_SESSION structures with identical session ID in the
|
|
|
|
* same cache, which could happen e.g. when two threads concurrently
|
|
|
|
* obtain the same session from an external cache)
|
|
|
|
*/
|
|
|
|
s = NULL;
|
2016-12-23 03:17:29 +08:00
|
|
|
} else if (s == NULL &&
|
|
|
|
lh_SSL_SESSION_retrieve(ctx->sessions, c) == NULL) {
|
|
|
|
/* s == NULL can also mean OOM error in lh_SSL_SESSION_insert ... */
|
|
|
|
|
|
|
|
/*
|
|
|
|
* ... so take back the extra reference and also don't add
|
|
|
|
* the session to the SSL_SESSION_list at this time
|
|
|
|
*/
|
|
|
|
s = c;
|
1999-12-29 22:29:32 +08:00
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2019-04-06 02:17:22 +08:00
|
|
|
/* Adjust last used time, and add back into the cache at the appropriate spot */
|
|
|
|
if (ctx->session_cache_mode & SSL_SESS_CACHE_UPDATE_TIME) {
|
2022-08-29 12:17:25 +08:00
|
|
|
c->time = ossl_time_now();
|
2019-04-06 02:17:22 +08:00
|
|
|
ssl_session_calculate_timeout(c);
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2022-07-29 08:05:54 +08:00
|
|
|
if (s == NULL) {
|
1999-12-29 22:29:32 +08:00
|
|
|
/*
|
|
|
|
* new cache entry -- remove old ones if cache has become too large
|
2022-07-29 08:05:54 +08:00
|
|
|
* delete cache entry *before* add, so we don't remove the one we're adding!
|
1999-12-29 22:29:32 +08:00
|
|
|
*/
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
ret = 1;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
if (SSL_CTX_sess_get_cache_size(ctx) > 0) {
|
2022-07-29 08:05:54 +08:00
|
|
|
while (SSL_CTX_sess_number(ctx) >= SSL_CTX_sess_get_cache_size(ctx)) {
|
1999-04-30 06:25:52 +08:00
|
|
|
if (!remove_session_lock(ctx, ctx->session_cache_tail, 0))
|
1998-12-21 18:56:39 +08:00
|
|
|
break;
|
|
|
|
else
|
2022-01-13 09:19:23 +08:00
|
|
|
ssl_tsan_counter(ctx, &ctx->stats.sess_cache_full);
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2022-07-29 08:05:54 +08:00
|
|
|
|
|
|
|
SSL_SESSION_list_add(ctx, c);
|
|
|
|
|
|
|
|
if (s != NULL) {
|
|
|
|
/*
|
|
|
|
* existing cache entry -- decrement previously incremented reference
|
|
|
|
* count because it already takes into account the cache
|
|
|
|
*/
|
|
|
|
|
|
|
|
SSL_SESSION_free(s); /* s == c */
|
|
|
|
ret = 0;
|
|
|
|
}
|
2016-03-01 01:26:07 +08:00
|
|
|
CRYPTO_THREAD_unlock(ctx->lock);
|
|
|
|
return ret;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
|
1999-04-30 06:25:52 +08:00
|
|
|
{
|
|
|
|
return remove_session_lock(ctx, c, 1);
|
|
|
|
}
|
|
|
|
|
1999-05-01 08:18:54 +08:00
|
|
|
static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
|
|
|
SSL_SESSION *r;
|
|
|
|
int ret = 0;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
if ((c != NULL) && (c->session_id_length != 0)) {
|
2021-02-19 04:31:56 +08:00
|
|
|
if (lck) {
|
|
|
|
if (!CRYPTO_THREAD_write_lock(ctx->lock))
|
|
|
|
return 0;
|
|
|
|
}
|
2018-03-16 17:25:34 +08:00
|
|
|
if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) != NULL) {
|
1998-12-21 18:56:39 +08:00
|
|
|
ret = 1;
|
2018-03-16 17:25:34 +08:00
|
|
|
r = lh_SSL_SESSION_delete(ctx->sessions, r);
|
|
|
|
SSL_SESSION_list_remove(ctx, r);
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
2016-06-13 18:24:15 +08:00
|
|
|
c->not_resumable = 1;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1999-04-30 06:25:52 +08:00
|
|
|
if (lck)
|
2016-03-01 01:26:07 +08:00
|
|
|
CRYPTO_THREAD_unlock(ctx->lock);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2016-06-13 18:24:15 +08:00
|
|
|
if (ctx->remove_session_cb != NULL)
|
|
|
|
ctx->remove_session_cb(ctx, c);
|
Do not free a session before calling the remove_session_cb
If the remove_session_cb accesses the session's data (for instance,
via SSL_SESSION_get_protocol_version), a potential use after free
can occur. For this, consider the following scenario when adding
a new session via SSL_CTX_add_session:
- The session cache is full
(SSL_CTX_sess_number(ctx) > SSL_CTX_sess_get_cache_size(ctx))
- Only the session cache has a reference to ctx->session_cache_tail
(that is, ctx->session_cache_tail->references == 1)
Since the cache is full, remove_session_lock is called to remove
ctx->session_cache_tail from the cache. That is, it
SSL_SESSION_free()s the session, which free()s the data. Afterwards,
the free()d session is passed to the remove_session_cb. If the callback
accesses the session's data, we have a use after free.
The free before calling the callback behavior was introduced in
commit e4612d02c53cccd24fa97b08fc01250d1238cca1 ("Remove sessions
from external cache, even if internal cache not used.").
CLA: trivial
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6222)
2018-05-11 18:24:56 +08:00
|
|
|
|
|
|
|
if (ret)
|
|
|
|
SSL_SESSION_free(r);
|
2021-02-19 04:31:56 +08:00
|
|
|
}
|
2017-10-17 22:04:09 +08:00
|
|
|
return ret;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
void SSL_SESSION_free(SSL_SESSION *ss)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
2018-03-28 04:25:08 +08:00
|
|
|
if (ss == NULL)
|
|
|
|
return;
|
2023-06-22 07:39:36 +08:00
|
|
|
CRYPTO_DOWN_REF(&ss->references, &i);
|
2016-01-31 01:04:25 +08:00
|
|
|
REF_PRINT_COUNT("SSL_SESSION", ss);
|
1998-12-21 18:52:47 +08:00
|
|
|
if (i > 0)
|
|
|
|
return;
|
2016-01-31 01:04:25 +08:00
|
|
|
REF_ASSERT_ISNT(i < 0);
|
1998-12-21 18:52:47 +08:00
|
|
|
|
2001-09-02 04:02:13 +08:00
|
|
|
CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_SESSION, ss, &ss->ex_data);
|
1998-12-21 18:56:39 +08:00
|
|
|
|
2017-12-08 02:39:34 +08:00
|
|
|
OPENSSL_cleanse(ss->master_key, sizeof(ss->master_key));
|
|
|
|
OPENSSL_cleanse(ss->session_id, sizeof(ss->session_id));
|
2015-05-01 05:33:59 +08:00
|
|
|
X509_free(ss->peer);
|
2021-01-28 03:23:33 +08:00
|
|
|
EVP_PKEY_free(ss->peer_rpk);
|
2021-12-18 23:15:49 +08:00
|
|
|
OSSL_STACK_OF_X509_free(ss->peer_chain);
|
2016-12-09 03:18:40 +08:00
|
|
|
OPENSSL_free(ss->ext.hostname);
|
|
|
|
OPENSSL_free(ss->ext.tick);
|
2006-03-11 07:06:27 +08:00
|
|
|
#ifndef OPENSSL_NO_PSK
|
2015-05-02 02:37:16 +08:00
|
|
|
OPENSSL_free(ss->psk_identity_hint);
|
|
|
|
OPENSSL_free(ss->psk_identity);
|
2011-03-13 01:01:19 +08:00
|
|
|
#endif
|
|
|
|
#ifndef OPENSSL_NO_SRP
|
2015-05-02 02:37:16 +08:00
|
|
|
OPENSSL_free(ss->srp_username);
|
2006-01-03 07:14:37 +08:00
|
|
|
#endif
|
2017-02-24 20:45:37 +08:00
|
|
|
OPENSSL_free(ss->ext.alpn_selected);
|
2017-03-16 01:25:55 +08:00
|
|
|
OPENSSL_free(ss->ticket_appdata);
|
2023-06-22 07:39:36 +08:00
|
|
|
CRYPTO_FREE_REF(&ss->references);
|
2015-05-01 05:57:32 +08:00
|
|
|
OPENSSL_clear_free(ss, sizeof(*ss));
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2016-03-01 01:26:07 +08:00
|
|
|
int SSL_SESSION_up_ref(SSL_SESSION *ss)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
2023-06-22 07:39:36 +08:00
|
|
|
if (CRYPTO_UP_REF(&ss->references, &i) <= 0)
|
2016-03-01 01:26:07 +08:00
|
|
|
return 0;
|
|
|
|
|
|
|
|
REF_PRINT_COUNT("SSL_SESSION", ss);
|
|
|
|
REF_ASSERT_ISNT(i < 2);
|
|
|
|
return ((i > 1) ? 1 : 0);
|
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
int SSL_set_session(SSL *s, SSL_SESSION *session)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_CONNECTION *sc = SSL_CONNECTION_FROM_SSL(s);
|
|
|
|
|
|
|
|
if (sc == NULL)
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
ssl_clear_bad_session(sc);
|
2022-11-09 00:20:08 +08:00
|
|
|
if (s->defltmeth != s->method) {
|
|
|
|
if (!SSL_set_ssl_method(s, s->defltmeth))
|
2016-06-09 20:24:54 +08:00
|
|
|
return 0;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2016-06-09 20:24:54 +08:00
|
|
|
if (session != NULL) {
|
2016-03-01 01:26:07 +08:00
|
|
|
SSL_SESSION_up_ref(session);
|
2022-06-20 23:11:28 +08:00
|
|
|
sc->verify_result = session->verify_result;
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_SESSION_free(sc->session);
|
|
|
|
sc->session = session;
|
2016-06-09 20:24:54 +08:00
|
|
|
|
|
|
|
return 1;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2016-08-06 18:54:29 +08:00
|
|
|
int SSL_SESSION_set1_id(SSL_SESSION *s, const unsigned char *sid,
|
|
|
|
unsigned int sid_len)
|
|
|
|
{
|
|
|
|
if (sid_len > SSL_MAX_SSL_SESSION_ID_LENGTH) {
|
2020-11-04 19:18:33 +08:00
|
|
|
ERR_raise(ERR_LIB_SSL, SSL_R_SSL_SESSION_ID_TOO_LONG);
|
2016-08-06 18:54:29 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
s->session_id_length = sid_len;
|
2024-05-01 18:23:57 +08:00
|
|
|
if (sid != s->session_id && sid_len > 0)
|
2017-02-27 07:47:40 +08:00
|
|
|
memcpy(s->session_id, sid, sid_len);
|
2024-05-01 18:23:57 +08:00
|
|
|
|
2016-08-06 18:54:29 +08:00
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
long SSL_SESSION_set_timeout(SSL_SESSION *s, long t)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
2022-08-29 12:17:25 +08:00
|
|
|
OSSL_TIME new_timeout = ossl_seconds2time(t);
|
2019-04-06 02:17:22 +08:00
|
|
|
|
|
|
|
if (s == NULL || t < 0)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2019-04-06 02:17:22 +08:00
|
|
|
if (s->owner != NULL) {
|
|
|
|
if (!CRYPTO_THREAD_write_lock(s->owner->lock))
|
|
|
|
return 0;
|
|
|
|
s->timeout = new_timeout;
|
|
|
|
ssl_session_calculate_timeout(s);
|
|
|
|
SSL_SESSION_list_add(s->owner, s);
|
|
|
|
CRYPTO_THREAD_unlock(s->owner->lock);
|
|
|
|
} else {
|
|
|
|
s->timeout = new_timeout;
|
|
|
|
ssl_session_calculate_timeout(s);
|
|
|
|
}
|
2017-10-09 19:05:58 +08:00
|
|
|
return 1;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2005-03-30 18:26:02 +08:00
|
|
|
long SSL_SESSION_get_timeout(const SSL_SESSION *s)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
|
|
|
if (s == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2022-08-29 12:17:25 +08:00
|
|
|
return (long)ossl_time_to_time_t(s->timeout);
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2024-04-30 17:54:42 +08:00
|
|
|
#ifndef OPENSSL_NO_DEPRECATED_3_4
|
2005-03-30 18:26:02 +08:00
|
|
|
long SSL_SESSION_get_time(const SSL_SESSION *s)
|
2023-06-09 14:04:53 +08:00
|
|
|
{
|
|
|
|
return (long) SSL_SESSION_get_time_ex(s);
|
|
|
|
}
|
2024-04-30 17:54:42 +08:00
|
|
|
#endif
|
2023-06-09 14:04:53 +08:00
|
|
|
|
|
|
|
time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
|
|
|
if (s == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2023-06-09 14:04:53 +08:00
|
|
|
return ossl_time_to_time_t(s->time);
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2023-06-09 14:04:53 +08:00
|
|
|
time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
2023-06-09 14:04:53 +08:00
|
|
|
OSSL_TIME new_time = ossl_time_from_time_t(t);
|
2019-04-06 02:17:22 +08:00
|
|
|
|
1998-12-21 18:52:47 +08:00
|
|
|
if (s == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2019-04-06 02:17:22 +08:00
|
|
|
if (s->owner != NULL) {
|
|
|
|
if (!CRYPTO_THREAD_write_lock(s->owner->lock))
|
|
|
|
return 0;
|
|
|
|
s->time = new_time;
|
|
|
|
ssl_session_calculate_timeout(s);
|
|
|
|
SSL_SESSION_list_add(s->owner, s);
|
|
|
|
CRYPTO_THREAD_unlock(s->owner->lock);
|
|
|
|
} else {
|
|
|
|
s->time = new_time;
|
|
|
|
ssl_session_calculate_timeout(s);
|
|
|
|
}
|
2017-10-17 22:04:09 +08:00
|
|
|
return t;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2024-04-30 17:54:42 +08:00
|
|
|
#ifndef OPENSSL_NO_DEPRECATED_3_4
|
2023-06-09 14:04:53 +08:00
|
|
|
long SSL_SESSION_set_time(SSL_SESSION *s, long t)
|
|
|
|
{
|
|
|
|
return (long) SSL_SESSION_set_time_ex(s, (time_t) t);
|
|
|
|
}
|
2024-04-30 17:54:42 +08:00
|
|
|
#endif
|
2023-06-09 14:04:53 +08:00
|
|
|
|
2016-05-27 06:40:13 +08:00
|
|
|
int SSL_SESSION_get_protocol_version(const SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
return s->ssl_version;
|
|
|
|
}
|
|
|
|
|
2017-06-13 02:40:11 +08:00
|
|
|
int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version)
|
|
|
|
{
|
|
|
|
s->ssl_version = version;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
2016-08-13 03:02:00 +08:00
|
|
|
const SSL_CIPHER *SSL_SESSION_get0_cipher(const SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
return s->cipher;
|
|
|
|
}
|
2017-06-13 02:12:04 +08:00
|
|
|
|
|
|
|
int SSL_SESSION_set_cipher(SSL_SESSION *s, const SSL_CIPHER *cipher)
|
|
|
|
{
|
|
|
|
s->cipher = cipher;
|
|
|
|
return 1;
|
|
|
|
}
|
2016-08-13 03:02:00 +08:00
|
|
|
|
2016-04-11 22:08:00 +08:00
|
|
|
const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s)
|
|
|
|
{
|
2016-12-09 03:18:40 +08:00
|
|
|
return s->ext.hostname;
|
2016-04-11 22:08:00 +08:00
|
|
|
}
|
|
|
|
|
2017-08-03 17:13:31 +08:00
|
|
|
int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname)
|
|
|
|
{
|
|
|
|
OPENSSL_free(s->ext.hostname);
|
|
|
|
if (hostname == NULL) {
|
|
|
|
s->ext.hostname = NULL;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
s->ext.hostname = OPENSSL_strdup(hostname);
|
|
|
|
|
|
|
|
return s->ext.hostname != NULL;
|
|
|
|
}
|
|
|
|
|
2015-02-08 23:43:16 +08:00
|
|
|
int SSL_SESSION_has_ticket(const SSL_SESSION *s)
|
|
|
|
{
|
2016-12-09 03:18:40 +08:00
|
|
|
return (s->ext.ticklen > 0) ? 1 : 0;
|
2015-02-08 23:43:16 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s)
|
|
|
|
{
|
2016-12-09 03:18:40 +08:00
|
|
|
return s->ext.tick_lifetime_hint;
|
2015-02-08 23:43:16 +08:00
|
|
|
}
|
|
|
|
|
2016-08-13 21:29:41 +08:00
|
|
|
void SSL_SESSION_get0_ticket(const SSL_SESSION *s, const unsigned char **tick,
|
2016-08-06 01:03:17 +08:00
|
|
|
size_t *len)
|
2015-02-09 07:37:54 +08:00
|
|
|
{
|
2016-12-09 03:18:40 +08:00
|
|
|
*len = s->ext.ticklen;
|
2015-04-16 13:50:03 +08:00
|
|
|
if (tick != NULL)
|
2016-12-09 03:18:40 +08:00
|
|
|
*tick = s->ext.tick;
|
2015-02-09 07:37:54 +08:00
|
|
|
}
|
|
|
|
|
2017-02-24 22:08:06 +08:00
|
|
|
uint32_t SSL_SESSION_get_max_early_data(const SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
return s->ext.max_early_data;
|
|
|
|
}
|
|
|
|
|
2017-07-08 18:42:55 +08:00
|
|
|
int SSL_SESSION_set_max_early_data(SSL_SESSION *s, uint32_t max_early_data)
|
|
|
|
{
|
|
|
|
s->ext.max_early_data = max_early_data;
|
|
|
|
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
2017-08-03 17:13:31 +08:00
|
|
|
void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
|
|
|
|
const unsigned char **alpn,
|
|
|
|
size_t *len)
|
|
|
|
{
|
|
|
|
*alpn = s->ext.alpn_selected;
|
|
|
|
*len = s->ext.alpn_selected_len;
|
|
|
|
}
|
|
|
|
|
|
|
|
int SSL_SESSION_set1_alpn_selected(SSL_SESSION *s, const unsigned char *alpn,
|
|
|
|
size_t len)
|
|
|
|
{
|
|
|
|
OPENSSL_free(s->ext.alpn_selected);
|
|
|
|
if (alpn == NULL || len == 0) {
|
|
|
|
s->ext.alpn_selected = NULL;
|
|
|
|
s->ext.alpn_selected_len = 0;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
s->ext.alpn_selected = OPENSSL_memdup(alpn, len);
|
|
|
|
if (s->ext.alpn_selected == NULL) {
|
|
|
|
s->ext.alpn_selected_len = 0;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
s->ext.alpn_selected_len = len;
|
|
|
|
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
2011-04-30 06:37:12 +08:00
|
|
|
X509 *SSL_SESSION_get0_peer(SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
return s->peer;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2021-01-28 03:23:33 +08:00
|
|
|
EVP_PKEY *SSL_SESSION_get0_peer_rpk(SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
return s->peer_rpk;
|
|
|
|
}
|
|
|
|
|
2011-04-30 06:37:12 +08:00
|
|
|
int SSL_SESSION_set1_id_context(SSL_SESSION *s, const unsigned char *sid_ctx,
|
|
|
|
unsigned int sid_ctx_len)
|
|
|
|
{
|
2011-09-05 21:36:23 +08:00
|
|
|
if (sid_ctx_len > SSL_MAX_SID_CTX_LENGTH) {
|
2020-11-04 19:18:33 +08:00
|
|
|
ERR_raise(ERR_LIB_SSL, SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG);
|
2011-09-05 21:36:23 +08:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
s->sid_ctx_length = sid_ctx_len;
|
2017-02-27 07:47:40 +08:00
|
|
|
if (sid_ctx != s->sid_ctx)
|
|
|
|
memcpy(s->sid_ctx, sid_ctx, sid_ctx_len);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2011-09-05 21:36:23 +08:00
|
|
|
return 1;
|
|
|
|
}
|
2011-04-30 06:37:12 +08:00
|
|
|
|
2017-03-21 21:50:31 +08:00
|
|
|
int SSL_SESSION_is_resumable(const SSL_SESSION *s)
|
|
|
|
{
|
|
|
|
/*
|
|
|
|
* In the case of EAP-FAST, we can have a pre-shared "ticket" without a
|
|
|
|
* session ID.
|
|
|
|
*/
|
|
|
|
return !s->not_resumable
|
|
|
|
&& (s->session_id_length > 0 || s->ext.ticklen > 0);
|
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
long SSL_CTX_set_timeout(SSL_CTX *s, long t)
|
Updates to the new SSL compression code
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
1999-02-16 17:22:21 +08:00
|
|
|
{
|
|
|
|
long l;
|
2022-08-29 12:17:25 +08:00
|
|
|
|
Updates to the new SSL compression code
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
1999-02-16 17:22:21 +08:00
|
|
|
if (s == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2022-08-29 12:17:25 +08:00
|
|
|
l = (long)ossl_time2seconds(s->session_timeout);
|
|
|
|
s->session_timeout = ossl_seconds2time(t);
|
2017-10-17 22:04:09 +08:00
|
|
|
return l;
|
Updates to the new SSL compression code
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
1999-02-16 17:22:21 +08:00
|
|
|
}
|
|
|
|
|
2005-03-30 18:26:02 +08:00
|
|
|
long SSL_CTX_get_timeout(const SSL_CTX *s)
|
Updates to the new SSL compression code
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
1999-02-16 17:22:21 +08:00
|
|
|
{
|
|
|
|
if (s == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2022-08-29 12:17:25 +08:00
|
|
|
return (long)ossl_time2seconds(s->session_timeout);
|
Updates to the new SSL compression code
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
1999-02-16 17:22:21 +08:00
|
|
|
}
|
|
|
|
|
2008-11-16 01:18:12 +08:00
|
|
|
int SSL_set_session_secret_cb(SSL *s,
|
2016-12-09 03:18:40 +08:00
|
|
|
tls_session_secret_cb_fn tls_session_secret_cb,
|
2008-11-16 01:18:12 +08:00
|
|
|
void *arg)
|
|
|
|
{
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_CONNECTION *sc = SSL_CONNECTION_FROM_SSL(s);
|
|
|
|
|
|
|
|
if (sc == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2022-06-20 23:11:28 +08:00
|
|
|
|
|
|
|
sc->ext.session_secret_cb = tls_session_secret_cb;
|
|
|
|
sc->ext.session_secret_cb_arg = arg;
|
2017-10-09 19:05:58 +08:00
|
|
|
return 1;
|
2008-11-16 01:18:12 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
int SSL_set_session_ticket_ext_cb(SSL *s, tls_session_ticket_ext_cb_fn cb,
|
|
|
|
void *arg)
|
|
|
|
{
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_CONNECTION *sc = SSL_CONNECTION_FROM_SSL(s);
|
|
|
|
|
|
|
|
if (sc == NULL)
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
2022-06-20 23:11:28 +08:00
|
|
|
|
|
|
|
sc->ext.session_ticket_cb = cb;
|
|
|
|
sc->ext.session_ticket_cb_arg = arg;
|
2017-10-09 19:05:58 +08:00
|
|
|
return 1;
|
2008-11-16 01:18:12 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
int SSL_set_session_ticket_ext(SSL *s, void *ext_data, int ext_len)
|
|
|
|
{
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_CONNECTION *sc = SSL_CONNECTION_FROM_SSL(s);
|
|
|
|
|
|
|
|
if (sc == NULL)
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
if (sc->version >= TLS1_VERSION) {
|
|
|
|
OPENSSL_free(sc->ext.session_ticket);
|
|
|
|
sc->ext.session_ticket = NULL;
|
|
|
|
sc->ext.session_ticket =
|
2008-11-16 01:18:12 +08:00
|
|
|
OPENSSL_malloc(sizeof(TLS_SESSION_TICKET_EXT) + ext_len);
|
2022-09-29 19:57:34 +08:00
|
|
|
if (sc->ext.session_ticket == NULL)
|
2008-11-16 01:18:12 +08:00
|
|
|
return 0;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2017-01-10 01:42:15 +08:00
|
|
|
if (ext_data != NULL) {
|
2022-06-20 23:11:28 +08:00
|
|
|
sc->ext.session_ticket->length = ext_len;
|
|
|
|
sc->ext.session_ticket->data = sc->ext.session_ticket + 1;
|
|
|
|
memcpy(sc->ext.session_ticket->data, ext_data, ext_len);
|
2008-11-16 01:18:12 +08:00
|
|
|
} else {
|
2022-06-20 23:11:28 +08:00
|
|
|
sc->ext.session_ticket->length = 0;
|
|
|
|
sc->ext.session_ticket->data = NULL;
|
2008-11-16 01:18:12 +08:00
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2008-11-16 01:18:12 +08:00
|
|
|
return 1;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2008-11-16 01:18:12 +08:00
|
|
|
return 0;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2024-05-17 19:49:21 +08:00
|
|
|
#ifndef OPENSSL_NO_DEPRECATED_3_4
|
1999-04-20 05:31:43 +08:00
|
|
|
void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
|
2024-05-17 19:49:21 +08:00
|
|
|
{
|
|
|
|
SSL_CTX_flush_sessions_ex(s, (time_t) t);
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
|
|
|
void SSL_CTX_flush_sessions_ex(SSL_CTX *s, time_t t)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
2019-04-06 02:17:22 +08:00
|
|
|
STACK_OF(SSL_SESSION) *sk;
|
|
|
|
SSL_SESSION *current;
|
1998-12-21 18:52:47 +08:00
|
|
|
unsigned long i;
|
2022-08-29 12:17:25 +08:00
|
|
|
const OSSL_TIME timeout = ossl_time_from_time_t(t);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2021-02-19 04:31:56 +08:00
|
|
|
if (!CRYPTO_THREAD_write_lock(s->lock))
|
|
|
|
return;
|
2019-04-06 02:17:22 +08:00
|
|
|
|
|
|
|
sk = sk_SSL_SESSION_new_null();
|
2016-05-20 22:46:29 +08:00
|
|
|
i = lh_SSL_SESSION_get_down_load(s->sessions);
|
|
|
|
lh_SSL_SESSION_set_down_load(s->sessions, 0);
|
2019-04-06 02:17:22 +08:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Iterate over the list from the back (oldest), and stop
|
|
|
|
* when a session can no longer be removed.
|
|
|
|
* Add the session to a temporary list to be freed outside
|
|
|
|
* the SSL_CTX lock.
|
|
|
|
* But still do the remove_session_cb() within the lock.
|
|
|
|
*/
|
|
|
|
while (s->session_cache_tail != NULL) {
|
|
|
|
current = s->session_cache_tail;
|
2022-08-29 12:17:25 +08:00
|
|
|
if (t == 0 || sess_timedout(timeout, current)) {
|
2019-04-06 02:17:22 +08:00
|
|
|
lh_SSL_SESSION_delete(s->sessions, current);
|
|
|
|
SSL_SESSION_list_remove(s, current);
|
|
|
|
current->not_resumable = 1;
|
|
|
|
if (s->remove_session_cb != NULL)
|
|
|
|
s->remove_session_cb(s, current);
|
|
|
|
/*
|
|
|
|
* Throw the session on a stack, it's entirely plausible
|
|
|
|
* that while freeing outside the critical section, the
|
|
|
|
* session could be re-added, so avoid using the next/prev
|
|
|
|
* pointers. If the stack failed to create, or the session
|
|
|
|
* couldn't be put on the stack, just free it here
|
|
|
|
*/
|
|
|
|
if (sk == NULL || !sk_SSL_SESSION_push(sk, current))
|
|
|
|
SSL_SESSION_free(current);
|
|
|
|
} else {
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-05-20 22:46:29 +08:00
|
|
|
lh_SSL_SESSION_set_down_load(s->sessions, i);
|
2016-03-01 01:26:07 +08:00
|
|
|
CRYPTO_THREAD_unlock(s->lock);
|
2019-04-06 02:17:22 +08:00
|
|
|
|
|
|
|
sk_SSL_SESSION_pop_free(sk, SSL_SESSION_free);
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
|
|
|
|
2022-06-20 23:11:28 +08:00
|
|
|
int ssl_clear_bad_session(SSL_CONNECTION *s)
|
1998-12-21 18:52:47 +08:00
|
|
|
{
|
|
|
|
if ((s->session != NULL) &&
|
|
|
|
!(s->shutdown & SSL_SENT_SHUTDOWN) &&
|
2022-06-20 23:11:28 +08:00
|
|
|
!(SSL_in_init(SSL_CONNECTION_GET_SSL(s))
|
|
|
|
|| SSL_in_before(SSL_CONNECTION_GET_SSL(s)))) {
|
2016-05-27 01:49:36 +08:00
|
|
|
SSL_CTX_remove_session(s->session_ctx, s->session);
|
2017-10-09 19:05:58 +08:00
|
|
|
return 1;
|
1998-12-21 18:52:47 +08:00
|
|
|
} else
|
2017-10-17 22:04:09 +08:00
|
|
|
return 0;
|
1998-12-21 18:52:47 +08:00
|
|
|
}
|
1998-12-21 18:56:39 +08:00
|
|
|
|
|
|
|
/* locked by SSL_CTX in the calling function */
|
1999-04-20 05:31:43 +08:00
|
|
|
static void SSL_SESSION_list_remove(SSL_CTX *ctx, SSL_SESSION *s)
|
1998-12-21 18:56:39 +08:00
|
|
|
{
|
|
|
|
if ((s->next == NULL) || (s->prev == NULL))
|
|
|
|
return;
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
if (s->next == (SSL_SESSION *)&(ctx->session_cache_tail)) {
|
2015-01-21 19:09:58 +08:00
|
|
|
/* last element in list */
|
1998-12-21 18:56:39 +08:00
|
|
|
if (s->prev == (SSL_SESSION *)&(ctx->session_cache_head)) {
|
2015-01-21 19:09:58 +08:00
|
|
|
/* only one element in list */
|
1998-12-21 18:56:39 +08:00
|
|
|
ctx->session_cache_head = NULL;
|
|
|
|
ctx->session_cache_tail = NULL;
|
|
|
|
} else {
|
|
|
|
ctx->session_cache_tail = s->prev;
|
|
|
|
s->prev->next = (SSL_SESSION *)&(ctx->session_cache_tail);
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
if (s->prev == (SSL_SESSION *)&(ctx->session_cache_head)) {
|
2015-01-21 19:09:58 +08:00
|
|
|
/* first element in list */
|
1998-12-21 18:56:39 +08:00
|
|
|
ctx->session_cache_head = s->next;
|
|
|
|
s->next->prev = (SSL_SESSION *)&(ctx->session_cache_head);
|
|
|
|
} else {
|
2015-01-21 19:09:58 +08:00
|
|
|
/* middle of list */
|
1998-12-21 18:56:39 +08:00
|
|
|
s->next->prev = s->prev;
|
|
|
|
s->prev->next = s->next;
|
2015-01-22 11:40:55 +08:00
|
|
|
}
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
|
|
|
s->prev = s->next = NULL;
|
2019-04-06 02:17:22 +08:00
|
|
|
s->owner = NULL;
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
|
|
|
|
1999-04-20 05:31:43 +08:00
|
|
|
static void SSL_SESSION_list_add(SSL_CTX *ctx, SSL_SESSION *s)
|
1998-12-21 18:56:39 +08:00
|
|
|
{
|
2019-04-06 02:17:22 +08:00
|
|
|
SSL_SESSION *next;
|
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
if ((s->next != NULL) && (s->prev != NULL))
|
|
|
|
SSL_SESSION_list_remove(ctx, s);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
1998-12-21 18:56:39 +08:00
|
|
|
if (ctx->session_cache_head == NULL) {
|
|
|
|
ctx->session_cache_head = s;
|
|
|
|
ctx->session_cache_tail = s;
|
|
|
|
s->prev = (SSL_SESSION *)&(ctx->session_cache_head);
|
|
|
|
s->next = (SSL_SESSION *)&(ctx->session_cache_tail);
|
|
|
|
} else {
|
2019-04-06 02:17:22 +08:00
|
|
|
if (timeoutcmp(s, ctx->session_cache_head) >= 0) {
|
|
|
|
/*
|
|
|
|
* if we timeout after (or the same time as) the first
|
|
|
|
* session, put us first - usual case
|
|
|
|
*/
|
|
|
|
s->next = ctx->session_cache_head;
|
|
|
|
s->next->prev = s;
|
|
|
|
s->prev = (SSL_SESSION *)&(ctx->session_cache_head);
|
|
|
|
ctx->session_cache_head = s;
|
|
|
|
} else if (timeoutcmp(s, ctx->session_cache_tail) < 0) {
|
|
|
|
/* if we timeout before the last session, put us last */
|
|
|
|
s->prev = ctx->session_cache_tail;
|
|
|
|
s->prev->next = s;
|
|
|
|
s->next = (SSL_SESSION *)&(ctx->session_cache_tail);
|
|
|
|
ctx->session_cache_tail = s;
|
|
|
|
} else {
|
|
|
|
/*
|
|
|
|
* we timeout somewhere in-between - if there is only
|
|
|
|
* one session in the cache it will be caught above
|
|
|
|
*/
|
|
|
|
next = ctx->session_cache_head->next;
|
|
|
|
while (next != (SSL_SESSION*)&(ctx->session_cache_tail)) {
|
|
|
|
if (timeoutcmp(s, next) >= 0) {
|
|
|
|
s->next = next;
|
|
|
|
s->prev = next->prev;
|
|
|
|
next->prev->next = s;
|
|
|
|
next->prev = s;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
next = next->next;
|
|
|
|
}
|
|
|
|
}
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
2019-04-06 02:17:22 +08:00
|
|
|
s->owner = ctx;
|
1998-12-21 18:56:39 +08:00
|
|
|
}
|
|
|
|
|
2006-11-30 04:54:57 +08:00
|
|
|
void SSL_CTX_sess_set_new_cb(SSL_CTX *ctx,
|
2016-08-06 01:03:17 +08:00
|
|
|
int (*cb) (struct ssl_st *ssl, SSL_SESSION *sess))
|
2006-11-30 04:54:57 +08:00
|
|
|
{
|
|
|
|
ctx->new_session_cb = cb;
|
|
|
|
}
|
|
|
|
|
2006-11-30 21:39:34 +08:00
|
|
|
int (*SSL_CTX_sess_get_new_cb(SSL_CTX *ctx)) (SSL *ssl, SSL_SESSION *sess) {
|
2006-11-30 04:54:57 +08:00
|
|
|
return ctx->new_session_cb;
|
|
|
|
}
|
|
|
|
|
|
|
|
void SSL_CTX_sess_set_remove_cb(SSL_CTX *ctx,
|
2006-11-30 21:39:34 +08:00
|
|
|
void (*cb) (SSL_CTX *ctx, SSL_SESSION *sess))
|
2006-11-30 04:54:57 +08:00
|
|
|
{
|
|
|
|
ctx->remove_session_cb = cb;
|
|
|
|
}
|
|
|
|
|
2006-11-30 21:39:34 +08:00
|
|
|
void (*SSL_CTX_sess_get_remove_cb(SSL_CTX *ctx)) (SSL_CTX *ctx,
|
|
|
|
SSL_SESSION *sess) {
|
2006-11-30 04:54:57 +08:00
|
|
|
return ctx->remove_session_cb;
|
|
|
|
}
|
|
|
|
|
|
|
|
void SSL_CTX_sess_set_get_cb(SSL_CTX *ctx,
|
2022-06-20 23:11:28 +08:00
|
|
|
SSL_SESSION *(*cb) (SSL *ssl,
|
2016-02-01 22:26:18 +08:00
|
|
|
const unsigned char *data,
|
|
|
|
int len, int *copy))
|
2006-11-30 04:54:57 +08:00
|
|
|
{
|
|
|
|
ctx->get_session_cb = cb;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2006-11-30 21:39:34 +08:00
|
|
|
SSL_SESSION *(*SSL_CTX_sess_get_get_cb(SSL_CTX *ctx)) (SSL *ssl,
|
2016-08-06 01:03:17 +08:00
|
|
|
const unsigned char
|
|
|
|
*data, int len,
|
|
|
|
int *copy) {
|
2006-11-30 04:54:57 +08:00
|
|
|
return ctx->get_session_cb;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2006-11-30 04:54:57 +08:00
|
|
|
void SSL_CTX_set_info_callback(SSL_CTX *ctx,
|
|
|
|
void (*cb) (const SSL *ssl, int type, int val))
|
|
|
|
{
|
|
|
|
ctx->info_callback = cb;
|
|
|
|
}
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2006-11-30 21:39:34 +08:00
|
|
|
void (*SSL_CTX_get_info_callback(SSL_CTX *ctx)) (const SSL *ssl, int type,
|
|
|
|
int val) {
|
2006-11-30 04:54:57 +08:00
|
|
|
return ctx->info_callback;
|
|
|
|
}
|
|
|
|
|
|
|
|
void SSL_CTX_set_client_cert_cb(SSL_CTX *ctx,
|
|
|
|
int (*cb) (SSL *ssl, X509 **x509,
|
|
|
|
EVP_PKEY **pkey))
|
|
|
|
{
|
|
|
|
ctx->client_cert_cb = cb;
|
|
|
|
}
|
|
|
|
|
2006-11-30 21:39:34 +08:00
|
|
|
int (*SSL_CTX_get_client_cert_cb(SSL_CTX *ctx)) (SSL *ssl, X509 **x509,
|
|
|
|
EVP_PKEY **pkey) {
|
2006-11-30 04:54:57 +08:00
|
|
|
return ctx->client_cert_cb;
|
|
|
|
}
|
|
|
|
|
|
|
|
void SSL_CTX_set_cookie_generate_cb(SSL_CTX *ctx,
|
|
|
|
int (*cb) (SSL *ssl,
|
|
|
|
unsigned char *cookie,
|
|
|
|
unsigned int *cookie_len))
|
|
|
|
{
|
|
|
|
ctx->app_gen_cookie_cb = cb;
|
|
|
|
}
|
|
|
|
|
|
|
|
void SSL_CTX_set_cookie_verify_cb(SSL_CTX *ctx,
|
2016-08-06 01:03:17 +08:00
|
|
|
int (*cb) (SSL *ssl,
|
|
|
|
const unsigned char *cookie,
|
2006-11-30 04:54:57 +08:00
|
|
|
unsigned int cookie_len))
|
|
|
|
{
|
|
|
|
ctx->app_verify_cookie_cb = cb;
|
|
|
|
}
|
|
|
|
|
2017-03-16 01:25:55 +08:00
|
|
|
int SSL_SESSION_set1_ticket_appdata(SSL_SESSION *ss, const void *data, size_t len)
|
|
|
|
{
|
|
|
|
OPENSSL_free(ss->ticket_appdata);
|
|
|
|
ss->ticket_appdata_len = 0;
|
|
|
|
if (data == NULL || len == 0) {
|
|
|
|
ss->ticket_appdata = NULL;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
ss->ticket_appdata = OPENSSL_memdup(data, len);
|
|
|
|
if (ss->ticket_appdata != NULL) {
|
|
|
|
ss->ticket_appdata_len = len;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
int SSL_SESSION_get0_ticket_appdata(SSL_SESSION *ss, void **data, size_t *len)
|
|
|
|
{
|
|
|
|
*data = ss->ticket_appdata;
|
|
|
|
*len = ss->ticket_appdata_len;
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
2018-02-26 10:39:11 +08:00
|
|
|
void SSL_CTX_set_stateless_cookie_generate_cb(
|
|
|
|
SSL_CTX *ctx,
|
|
|
|
int (*cb) (SSL *ssl,
|
|
|
|
unsigned char *cookie,
|
|
|
|
size_t *cookie_len))
|
|
|
|
{
|
|
|
|
ctx->gen_stateless_cookie_cb = cb;
|
|
|
|
}
|
|
|
|
|
|
|
|
void SSL_CTX_set_stateless_cookie_verify_cb(
|
|
|
|
SSL_CTX *ctx,
|
|
|
|
int (*cb) (SSL *ssl,
|
|
|
|
const unsigned char *cookie,
|
|
|
|
size_t cookie_len))
|
|
|
|
{
|
|
|
|
ctx->verify_stateless_cookie_cb = cb;
|
|
|
|
}
|
|
|
|
|
2016-08-06 01:03:17 +08:00
|
|
|
IMPLEMENT_PEM_rw(SSL_SESSION, SSL_SESSION, PEM_STRING_SSL_SESSION, SSL_SESSION)
|