Welcome to wolfSSL!

/* tls_server.c * * Copyright (C) 2006-2022 wolfSSL Inc. * * This file is part of wolfTPM. * * wolfTPM is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * wolfTPM is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA */ #ifdef HAVE_CONFIG_H #include #endif #include #include #include #if !defined(WOLFTPM2_NO_WRAPPER) && !defined(WOLFTPM2_NO_WOLFCRYPT) && \ !defined(NO_WOLFSSL_SERVER) && !defined(WOLFCRYPT_ONLY) #include #include #include #include #include #include static int mStop = 0; #ifdef TLS_BENCH_MODE double benchStart; #endif /* * Generating the Server Certificate * * Run example for ./examples/csr/csr * Result is: ./certs/tpm-rsa-cert.csr and ./certs/tpm-ecc-cert.csr * * Run ./certs/certreq.sh * Result is: ./certs/server-rsa-cert.pem and ./certs/server-ecc-cert.pem * * This example server listens on port 11111 by default, but can be set at * build-time using `TLS_PORT`. * * By default this example will loads RSA keys unless RSA is disabled (NO_RSA) * or the TLS_USE_ECC build option is used. * * You can validate using the wolfSSL example client this like: * ./examples/client/client -h localhost -p 11111 -g -d * * To validate server certificate use the following: * ./examples/client/client -h localhost -p 11111 -g -A ./certs/tpm-ca-rsa-cert.pem * or * ./examples/client/client -h localhost -p 11111 -g -A ./certs/tpm-ca-ecc-cert.pem * * Or using your browser: https://localhost:11111 * * With browsers you will get certificate warnings until you load the test CA's * ./certs/ca-rsa-cert.pem and ./certs/ca-ecc-cert.pem into your OS key store. * With most browsers you can bypass the certificate warning. */ /******************************************************************************/ /* --- BEGIN TLS SERVER Example -- */ /******************************************************************************/ static void usage(void) { printf("Expected usage:\n"); printf("./examples/tls/tls_server [-ecc] [-aes/xor]\n"); printf("* -ecc: Use RSA or ECC key\n"); printf("* -aes/xor: Use Parameter Encryption\n"); printf("* -p=port: Supply a custom port number (default %d)\n", TLS_PORT); #if defined(WOLFTPM_CRYPTOCB) && defined(HAVE_PK_CALLBACKS) printf("* -pk: Use PK callbacks, not crypto callbacks\n"); #endif printf("* -i: Run in loop, keep serving connections until failure\n"); printf("* -self: Use self-signed certs (csr -cert)\n"); } int TPM2_TLS_Server(void* userCtx) { return TPM2_TLS_ServerArgs(userCtx, 0, NULL); } int TPM2_TLS_ServerArgs(void* userCtx, int argc, char *argv[]) { int rc; WOLFTPM2_DEV dev; WOLFTPM2_KEY storageKey; #ifndef NO_RSA WOLFTPM2_KEY rsaKey; #endif #ifdef HAVE_ECC WOLFTPM2_KEY eccKey; #ifndef WOLFTPM2_USE_SW_ECDHE WOLFTPM2_KEY ecdhKey; #endif #endif TpmCryptoDevCtx tpmCtx; SockIoCbCtx sockIoCtx; int tpmDevId = INVALID_DEVID; WOLFSSL_CTX* ctx = NULL; WOLFSSL* ssl = NULL; #ifndef TLS_BENCH_MODE const char webServerMsg[] = "HTTP/1.1 200 OK\n" "Content-Type: text/html\n" "Connection: close\n" "\n" "\n" "\n" "Welcome to wolfSSL!\n" "\n" "\n" "

wolfSSL has successfully performed handshake!

\n" "\n" "\n"; #endif char msg[MAX_MSG_SZ]; int msgSz = 0; #ifdef TLS_BENCH_MODE int total_size; #endif int useECC = 0; int usePK = 0; int runLoop = 0; int useSelfSign = 0; TPM_ALG_ID paramEncAlg = TPM_ALG_NULL; WOLFTPM2_SESSION tpmSession; TPMT_PUBLIC publicTemplate; word32 port = TLS_PORT; /* initialize variables */ XMEMSET(&storageKey, 0, sizeof(storageKey)); XMEMSET(&sockIoCtx, 0, sizeof(sockIoCtx)); sockIoCtx.fd = -1; sockIoCtx.listenFd = -1; XMEMSET(&tpmCtx, 0, sizeof(tpmCtx)); #ifndef NO_RSA XMEMSET(&rsaKey, 0, sizeof(rsaKey)); #endif #ifdef HAVE_ECC XMEMSET(&eccKey, 0, sizeof(eccKey)); #ifndef WOLFTPM2_USE_SW_ECDHE /* Ephemeral Key */ XMEMSET(&ecdhKey, 0, sizeof(ecdhKey)); #endif #endif XMEMSET(&tpmSession, 0, sizeof(tpmSession)); if (argc >= 2) { if (XSTRCMP(argv[1], "-?") == 0 || XSTRCMP(argv[1], "-h") == 0 || XSTRCMP(argv[1], "--help") == 0) { usage(); return 0; } } while (argc > 1) { if (XSTRCMP(argv[argc-1], "-ecc") == 0) { useECC = 1; } else if (XSTRCMP(argv[argc-1], "-rsa") == 0) { useECC = 0; } else if (XSTRCMP(argv[argc-1], "-aes") == 0) { paramEncAlg = TPM_ALG_CFB; } else if (XSTRCMP(argv[argc-1], "-xor") == 0) { paramEncAlg = TPM_ALG_XOR; } #if defined(WOLFTPM_CRYPTOCB) && defined(HAVE_PK_CALLBACKS) else if (XSTRCMP(argv[argc-1], "-pk") == 0) { usePK = 1; } #endif else if (XSTRCMP(argv[argc-1], "-i") == 0) { runLoop = 1; } else if (XSTRCMP(argv[argc-1], "-self") == 0) { useSelfSign = 1; } else if (XSTRNCMP(argv[argc-1], "-p=", XSTRLEN("-p=")) == 0) { const char* portStr = argv[argc-1] + XSTRLEN("-p="); port = (word32)XATOI(portStr); } else { printf("Warning: Unrecognized option: %s\n", argv[argc-1]); } argc--; } printf("TPM2 TLS Server Example\n"); printf("\tUse %s keys\n", useECC ? "ECC" : "RSA"); printf("\tUse Parameter Encryption: %s\n", TPM2_GetAlgName(paramEncAlg)); printf("\tUsing Port: %d\n", port); printf("\tUsing %s callbacks\n", usePK ? "PK" : "Crypto"); /* Init the TPM2 device */ rc = wolfTPM2_Init(&dev, TPM2_IoCb, userCtx); if (rc != 0) { wolfSSL_Cleanup(); return rc; } /* Setup the wolf crypto device callback */ tpmCtx.dev = &dev; #ifndef NO_RSA tpmCtx.rsaKey = &rsaKey; #endif #ifdef HAVE_ECC tpmCtx.eccKey = &eccKey; #endif tpmCtx.storageKey = &storageKey; #ifdef WOLFTPM_USE_SYMMETRIC tpmCtx.useSymmetricOnTPM = 1; #endif #ifdef WOLFTPM_CRYPTOCB if (!usePK) { rc = wolfTPM2_SetCryptoDevCb(&dev, wolfTPM2_CryptoDevCb, &tpmCtx, &tpmDevId); if (rc != 0) goto exit; } #endif /* See if primary storage key already exists */ rc = getPrimaryStoragekey(&dev, &storageKey, useECC ? TPM_ALG_ECC : TPM_ALG_RSA); if (rc != 0) goto exit; /* Start an authenticated session (salted / unbound) with parameter encryption */ if (paramEncAlg != TPM_ALG_NULL) { rc = wolfTPM2_StartSession(&dev, &tpmSession, &storageKey, NULL, TPM_SE_HMAC, paramEncAlg); if (rc != 0) goto exit; printf("TPM2_StartAuthSession: sessionHandle 0x%x\n", (word32)tpmSession.handle.hndl); /* set session for authorization of the storage key */ rc = wolfTPM2_SetAuthSession(&dev, 0, &tpmSession, (TPMA_SESSION_decrypt | TPMA_SESSION_encrypt | TPMA_SESSION_continueSession)); if (rc != 0) goto exit; } #ifndef NO_RSA if (!useECC) { /* Create/Load RSA key for TLS authentication */ rc = wolfTPM2_GetKeyTemplate_RSA(&publicTemplate, TPMA_OBJECT_sensitiveDataOrigin | TPMA_OBJECT_userWithAuth | TPMA_OBJECT_decrypt | TPMA_OBJECT_sign | TPMA_OBJECT_noDA); if (rc != 0) goto exit; rc = getRSAkey(&dev, &storageKey, &rsaKey, NULL, tpmDevId, (byte*)gKeyAuth, sizeof(gKeyAuth)-1, &publicTemplate); if (rc != 0) goto exit; } #endif /* !NO_RSA */ #ifdef HAVE_ECC if (useECC) { /* Create/Load ECC key for TLS authentication */ rc = wolfTPM2_GetKeyTemplate_ECC(&publicTemplate, TPMA_OBJECT_sensitiveDataOrigin | TPMA_OBJECT_userWithAuth | TPMA_OBJECT_sign | TPMA_OBJECT_noDA, TPM_ECC_NIST_P256, TPM_ALG_ECDSA); if (rc != 0) goto exit; rc = getECCkey(&dev, &storageKey, &eccKey, NULL, tpmDevId, (byte*)gKeyAuth, sizeof(gKeyAuth)-1, &publicTemplate); if (rc != 0) goto exit; } #ifndef WOLFTPM2_USE_SW_ECDHE /* Ephemeral Key */ tpmCtx.ecdhKey = &ecdhKey; #endif #endif /* HAVE_ECC */ /* Setup the WOLFSSL context (factory) * Use highest version, allow downgrade */ if ((ctx = wolfSSL_CTX_new(wolfSSLv23_server_method())) == NULL) { rc = MEMORY_E; goto exit; } /* Setup DevID */ wolfSSL_CTX_SetDevId(ctx, tpmDevId); /* Setup IO Callbacks */ wolfSSL_CTX_SetIORecv(ctx, SockIORecv); wolfSSL_CTX_SetIOSend(ctx, SockIOSend); /* Setup PK callbacks */ #ifdef HAVE_PK_CALLBACKS if (usePK) { wolfTPM_PK_SetCb(ctx); } #endif /* Server certificate validation */ #if 0 /* skip server cert validation for this test */ wolfSSL_CTX_set_verify(ctx, WOLFSSL_VERIFY_NONE, myVerify); #else wolfSSL_CTX_set_verify(ctx, WOLFSSL_VERIFY_PEER, myVerify); #ifdef NO_FILESYSTEM /* example loading from buffer */ #if 0 if (wolfSSL_CTX_load_verify(ctx, ca.buffer, (long)ca.size, WOLFSSL_FILETYPE_ASN1) != WOLFSSL_SUCCESS) } goto exit; } #endif #else /* Load CA Certificates */ if (!useECC) { #ifndef NO_RSA if (wolfSSL_CTX_load_verify_locations(ctx, "./certs/ca-rsa-cert.pem", 0) != WOLFSSL_SUCCESS) { printf("Error loading ca-rsa-cert.pem cert\n"); goto exit; } if (wolfSSL_CTX_load_verify_locations(ctx, "./certs/wolf-ca-rsa-cert.pem", 0) != WOLFSSL_SUCCESS) { printf("Error loading wolf-ca-rsa-cert.pem cert\n"); goto exit; } #else printf("Error: RSA not compiled in\n"); rc = -1; goto exit; #endif /* !NO_RSA */ } else { #ifdef HAVE_ECC if (wolfSSL_CTX_load_verify_locations(ctx, "./certs/ca-ecc-cert.pem", 0) != WOLFSSL_SUCCESS) { printf("Error loading ca-ecc-cert.pem cert\n"); goto exit; } if (wolfSSL_CTX_load_verify_locations(ctx, "./certs/wolf-ca-ecc-cert.pem", 0) != WOLFSSL_SUCCESS) { printf("Error loading wolf-ca-ecc-cert.pem cert\n"); goto exit; } #else printf("Error: ECC not compiled in\n"); rc = -1; goto exit; #endif /* HAVE_ECC */ } #endif /* !NO_FILESYSTEM */ #endif #ifdef NO_FILESYSTEM /* example loading from buffer */ #if 0 if (wolfSSL_CTX_use_certificate_buffer(ctx, cert.buffer, (long)cert.size, WOLFSSL_FILETYPE_ASN1) != WOLFSSL_SUCCESS) { goto exit; } #endif #else { /* Export TPM public key as DER */ byte der[1024]; word32 derSz = (word32)sizeof(der); rc = wolfTPM2_ExportPublicKeyBuffer(&dev, !useECC ? &rsaKey : &eccKey, ENCODING_TYPE_ASN1, der, &derSz); if (rc < 0) { printf("Failed to export TPM public key!\n"); goto exit; } /* Private key only exists on the TPM and crypto callbacks are used for * signing. Public key is required to enable TLS client (mutual auth). * This API accepts public keys when crypto callbacks are enabled */ if (wolfSSL_CTX_use_PrivateKey_buffer(ctx, der, derSz, WOLFSSL_FILETYPE_ASN1) != WOLFSSL_SUCCESS) { printf("Failed to set RSA key!\n"); goto exit; } } /* Server certificate */ if (!useECC) { #ifndef NO_RSA const char* useCert = "./certs/server-rsa-cert.pem"; if (useSelfSign) { useCert = "./certs/tpm-rsa-cert.pem"; } printf("Loading RSA certificate (%s) and public key\n", useCert); if ((rc = wolfSSL_CTX_use_certificate_file(ctx, useCert, WOLFSSL_FILETYPE_PEM)) != WOLFSSL_SUCCESS) { printf("Error loading RSA client cert\n"); goto exit; } #else printf("Error: RSA not compiled in\n"); rc = -1; goto exit; #endif /* !NO_RSA */ } else { #ifdef HAVE_ECC const char* useCert = "./certs/server-ecc-cert.pem"; if (useSelfSign) { useCert = "./certs/tpm-ecc-cert.pem"; } printf("Loading ECC certificate (%s) and public key\n", useCert); if ((rc = wolfSSL_CTX_use_certificate_file(ctx, useCert, WOLFSSL_FILETYPE_PEM)) != WOLFSSL_SUCCESS) { printf("Error loading ECC client cert\n"); goto exit; } #else printf("Error: ECC not compiled in\n"); rc = -1; goto exit; #endif /* HAVE_ECC */ } #endif /* !NO_FILESYSTEM */ #ifdef TLS_CIPHER_SUITE /* Optionally choose the cipher suite */ rc = wolfSSL_CTX_set_cipher_list(ctx, TLS_CIPHER_SUITE); if (rc != WOLFSSL_SUCCESS) { goto exit; } #endif /* Setup socket and connection */ rc = SetupSocketAndListen(&sockIoCtx, port); if (rc != 0) goto exit; while (rc == 0 && !mStop) { /* Create wolfSSL object/session */ if ((ssl = wolfSSL_new(ctx)) == NULL) { rc = wolfSSL_get_error(ssl, 0); goto exit; } /* Setup PK Callback context */ #ifdef HAVE_PK_CALLBACKS if (usePK) { wolfTPM_PK_SetCbCtx(ssl, &tpmCtx); } #endif /* Setup read/write callback contexts */ wolfSSL_SetIOReadCtx(ssl, &sockIoCtx); wolfSSL_SetIOWriteCtx(ssl, &sockIoCtx); /* Accept client connections */ rc = SocketWaitClient(&sockIoCtx); if (rc != 0) goto exit; /* perform accept */ #ifdef TLS_BENCH_MODE benchStart = gettime_secs(1); #endif do { rc = wolfSSL_accept(ssl); if (rc != WOLFSSL_SUCCESS) { rc = wolfSSL_get_error(ssl, 0); } } while (rc == WOLFSSL_ERROR_WANT_READ || rc == WOLFSSL_ERROR_WANT_WRITE); if (rc != WOLFSSL_SUCCESS) { goto exit; } #ifdef TLS_BENCH_MODE benchStart = gettime_secs(0) - benchStart; printf("Accept: %9.3f sec (%9.3f CPS)\n", benchStart, 1/benchStart); #endif printf("Cipher Suite: %s\n", wolfSSL_get_cipher(ssl)); #ifdef TLS_BENCH_MODE rc = 0; total_size = 0; while (rc == 0 && total_size < TOTAL_MSG_SZ) #endif { /* perform read */ #ifdef TLS_BENCH_MODE benchStart = 0; /* use the read callback to trigger timing */ #endif do { rc = wolfSSL_read(ssl, msg, sizeof(msg)); if (rc < 0) { rc = wolfSSL_get_error(ssl, 0); } } while (rc == WOLFSSL_ERROR_WANT_READ); if (rc >= 0) { msgSz = rc; #ifdef TLS_BENCH_MODE benchStart = gettime_secs(0) - benchStart; printf("Read: %d bytes in %9.3f sec (%9.3f KB/sec)\n", msgSz, benchStart, msgSz / benchStart / 1024); total_size += msgSz; #else /* null terminate */ if (msgSz >= (int)sizeof(msg)) msgSz = (int)sizeof(msg) - 1; msg[msgSz] = '\0'; printf("Read (%d): %s\n", msgSz, msg); #endif rc = 0; /* success */ } if (rc != 0) goto exit; /* perform write */ #ifdef TLS_BENCH_MODE benchStart = gettime_secs(1); #else msgSz = sizeof(webServerMsg); XMEMCPY(msg, webServerMsg, msgSz); #endif do { rc = wolfSSL_write(ssl, msg, msgSz); if (rc != msgSz) { rc = wolfSSL_get_error(ssl, 0); } } while (rc == WOLFSSL_ERROR_WANT_WRITE); if (rc >= 0) { msgSz = rc; #ifdef TLS_BENCH_MODE benchStart = gettime_secs(0) - benchStart; printf("Write: %d bytes in %9.3f sec (%9.3f KB/sec)\n", msgSz, benchStart, msgSz / benchStart / 1024); #else printf("Write (%d): %s\n", msgSz, msg); #endif rc = 0; /* success */ } } /* Bidirectional shutdown */ while (wolfSSL_shutdown(ssl) == SSL_SHUTDOWN_NOT_DONE) { printf("Shutdown not complete\n"); } wolfSSL_free(ssl); ssl = NULL; if (!runLoop) mStop = 1; } exit: if (rc != 0) { printf("Failure %d (0x%x): %s\n", rc, rc, wolfTPM2_GetRCString(rc)); } if (ssl != NULL) { /* Bidirectional shutdown */ while (wolfSSL_shutdown(ssl) == SSL_SHUTDOWN_NOT_DONE) { printf("Shutdown not complete\n"); } wolfSSL_free(ssl); } wolfSSL_CTX_free(ctx); CloseAndCleanupSocket(&sockIoCtx); wolfTPM2_UnloadHandle(&dev, &storageKey.handle); #ifndef NO_RSA wolfTPM2_UnloadHandle(&dev, &rsaKey.handle); #endif #ifdef HAVE_ECC wolfTPM2_UnloadHandle(&dev, &eccKey.handle); #ifndef WOLFTPM2_USE_SW_ECDHE wolfTPM2_UnloadHandle(&dev, &ecdhKey.handle); #endif #endif wolfTPM2_UnloadHandle(&dev, &tpmSession.handle); wolfTPM2_Cleanup(&dev); return rc; } /******************************************************************************/ /* --- END TLS Server Example -- */ /******************************************************************************/ #endif /* !WOLFTPM2_NO_WRAPPER && !WOLFTPM2_NO_WOLFCRYPT && !NO_WOLFSSL_SERVER \ * && !WOLFCRYPT_ONLY */ #ifndef NO_MAIN_DRIVER int main(int argc, char* argv[]) { int rc = -1; #if !defined(WOLFTPM2_NO_WRAPPER) && !defined(WOLFTPM2_NO_WOLFCRYPT) && \ !defined(NO_WOLFSSL_SERVER) && !defined(WOLFCRYPT_ONLY) rc = TPM2_TLS_ServerArgs(NULL, argc, argv); #else (void)argc; (void)argv; printf("TPM Wrapper or PK//Crypto callback or TLS support not compiled in\n"); printf("Build wolfssl with ./configure --enable-wolftpm\n"); #endif return rc; } #endif /* !NO_MAIN_DRIVER */