sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-12-05 00:01:49 -05:00
Code Issues Projects Releases Wiki Activity

tls-test: Add options to configure TLS versions

Browse Source
This commit is contained in:
Tobias Brunner 2020-08-26 15:00:30 +02:00
parent a7f2818832
commit 8e35b1f1a5
1 changed files with 46 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
scripts/tls_test.c
View File

@ -85,7 +85,8 @@ static identification_t *find_client_id()
* Client routine * Client routine
*/ */
static int run_client(host_t *host, identification_t *server, static int run_client(host_t *host, identification_t *server,
identification_t *client, int times, tls_cache_t *cache) identification_t *client, int times, tls_cache_t *cache,
tls_version_t min_version, tls_version_t max_version)
{ {
tls_socket_t *tls; tls_socket_t *tls;
int fd, res; int fd, res;
@ -106,8 +107,8 @@ static int run_client(host_t *host, identification_t *server,
close(fd); close(fd);
return 1; return 1;
} }
tls = tls_socket_create(FALSE, server, client, fd, cache, TLS_1_0, tls = tls_socket_create(FALSE, server, client, fd, cache, min_version,
TLS_1_3, TRUE); max_version, TRUE);
if (!tls) if (!tls)
{ {
close(fd); close(fd);
@ -128,7 +129,8 @@ static int run_client(host_t *host, identification_t *server,
* Server routine * Server routine
*/ */
static int serve(host_t *host, identification_t *server, static int serve(host_t *host, identification_t *server,
int times, tls_cache_t *cache) int times, tls_cache_t *cache, tls_version_t min_version,
tls_version_t max_version)
{ {
tls_socket_t *tls; tls_socket_t *tls;
int fd, cfd; int fd, cfd;
@ -164,8 +166,8 @@ static int serve(host_t *host, identification_t *server,
} }
DBG1(DBG_TLS, "%#H connected", host); DBG1(DBG_TLS, "%#H connected", host);
tls = tls_socket_create(TRUE, server, NULL, cfd, cache, TLS_1_0, tls = tls_socket_create(TRUE, server, NULL, cfd, cache, min_version,
TLS_1_2, TRUE); max_version, TRUE);
if (!tls) if (!tls)
{ {
close(fd); close(fd);
@ -266,12 +268,22 @@ static void init()
atexit(cleanup); atexit(cleanup);
} }
/**
* Used to parse TLS versions
*/
ENUM(numeric_version_names, TLS_1_0, TLS_1_3,
"1.0",
"1.1",
"1.2",
"1.3");
int main(int argc, char *argv[]) int main(int argc, char *argv[])
{ {
char *address = NULL; char *address = NULL;
bool listen = FALSE; bool listen = FALSE;
int port = 0, times = -1, res, family = AF_UNSPEC; int port = 0, times = -1, res, family = AF_UNSPEC;
identification_t *server, *client; identification_t *server, *client;
tls_version_t min_version = TLS_1_0, max_version = TLS_1_3;
tls_cache_t *cache; tls_cache_t *cache;
host_t *host; host_t *host;
@ -289,6 +301,9 @@ int main(int argc, char *argv[])
{"times", required_argument, NULL, 't' }, {"times", required_argument, NULL, 't' },
{"ipv4", no_argument, NULL, '4' }, {"ipv4", no_argument, NULL, '4' },
{"ipv6", no_argument, NULL, '6' }, {"ipv6", no_argument, NULL, '6' },
{"min-version", required_argument, NULL, 'm' },
{"max-version", required_argument, NULL, 'M' },
{"version", required_argument, NULL, 'v' },
{"debug", required_argument, NULL, 'd' }, {"debug", required_argument, NULL, 'd' },
{0,0,0,0 } {0,0,0,0 }
}; };
@ -337,6 +352,28 @@ int main(int argc, char *argv[])
case '6': case '6':
family = AF_INET6; family = AF_INET6;
continue; continue;
case 'm':
if (!enum_from_name(numeric_version_names, optarg, &min_version))
{
fprintf(stderr, "unknown minimum TLS version: %s\n", optarg);
return 1;
}
continue;
case 'M':
if (!enum_from_name(numeric_version_names, optarg, &max_version))
{
fprintf(stderr, "unknown maximum TLS version: %s\n", optarg);
return 1;
}
continue;
case 'v':
if (!enum_from_name(numeric_version_names, optarg, &min_version))
{
fprintf(stderr, "unknown TLS version: %s\n", optarg);
return 1;
}
max_version = min_version;
continue;
default: default:
usage(stderr, argv[0]); usage(stderr, argv[0]);
return 1; return 1;
@ -358,12 +395,13 @@ int main(int argc, char *argv[])
cache = tls_cache_create(100, 30); cache = tls_cache_create(100, 30);
if (listen) if (listen)
{ {
res = serve(host, server, times, cache); res = serve(host, server, times, cache, min_version, max_version);
} }
else else
{ {
client = find_client_id(); client = find_client_id();
res = run_client(host, server, client, times, cache); res = run_client(host, server, client, times, cache, min_version,
max_version);
DESTROY_IF(client); DESTROY_IF(client);
} }
cache->destroy(cache); cache->destroy(cache);