Dependents:   Nucleo

Embed: (wiki syntax)

« Back to documentation index

tls_server.c File Reference

tls_server.c File Reference

Handshake message processing (TLS server) More...

Go to the source code of this file.

Functions

error_t tlsServerHandshake (TlsContext *context)
 TLS server handshake.
error_t tlsParseClientMessage (TlsContext *context)
 Parse incoming handshake message.
error_t tlsSendServerHello (TlsContext *context)
 Send ServerHello message.
error_t tlsSendServerKeyExchange (TlsContext *context)
 Send ServerKeyExchange message.
error_t tlsSendCertificateRequest (TlsContext *context)
 Send CertificateRequest message.
error_t tlsSendServerHelloDone (TlsContext *context)
 Send ServerHelloDone message.
error_t tlsFormatServerHello (TlsContext *context, TlsServerHello *message, size_t *length)
 Format ServerHello message.
error_t tlsFormatServerKeyExchange (TlsContext *context, TlsServerKeyExchange *message, size_t *length)
 Format ServerKeyExchange message.
error_t tlsFormatCertificateRequest (TlsContext *context, TlsCertificateRequest *message, size_t *length)
 Format CertificateRequest message.
error_t tlsFormatServerHelloDone (TlsContext *context, TlsServerHelloDone *message, size_t *length)
 Format ServerHelloDone message.
error_t tlsParseClientHello (TlsContext *context, const TlsClientHello *message, size_t length)
 Parse ClientHello message.
error_t tlsParseClientKeyExchange (TlsContext *context, const TlsClientKeyExchange *message, size_t length)
 Parse ClientKeyExchange message.
error_t tlsParseCertificateVerify (TlsContext *context, const TlsCertificateVerify *message, size_t length)
 Parse CertificateVerify message.

Detailed Description

Handshake message processing (TLS server)

License

Copyright (C) 2010-2017 Oryx Embedded SARL. All rights reserved.

This file is part of CycloneSSL Open.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

Description

The TLS protocol provides communications security over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery

Author:
Oryx Embedded SARL (www.oryx-embedded.com)
Version:
1.7.6

Definition in file tls_server.c.


Function Documentation

error_t tlsFormatCertificateRequest ( TlsContext *  context,
TlsCertificateRequest *  message,
size_t *  length 
)

Format CertificateRequest message.

Parameters:
[in]contextPointer to the TLS context
[out]messageBuffer where to format the CertificateRequest message
[out]lengthLength of the resulting CertificateRequest message
Returns:
Error code

Definition at line 805 of file tls_server.c.

error_t tlsFormatServerHello ( TlsContext *  context,
TlsServerHello *  message,
size_t *  length 
)

Format ServerHello message.

Parameters:
[in]contextPointer to the TLS context
[out]messageBuffer where to format the ServerHello message
[out]lengthLength of the resulting ServerHello message
Returns:
Error code

Definition at line 577 of file tls_server.c.

error_t tlsFormatServerHelloDone ( TlsContext *  context,
TlsServerHelloDone *  message,
size_t *  length 
)

Format ServerHelloDone message.

Parameters:
[in]contextPointer to the TLS context
[out]messageBuffer where to format the ServerHelloDone message
[out]lengthLength of the resulting ServerHelloDone message
Returns:
Error code

Definition at line 1021 of file tls_server.c.

error_t tlsFormatServerKeyExchange ( TlsContext *  context,
TlsServerKeyExchange *  message,
size_t *  length 
)

Format ServerKeyExchange message.

Parameters:
[in]contextPointer to the TLS context
[out]messageBuffer where to format the ServerKeyExchange message
[out]lengthLength of the resulting ServerKeyExchange message
Returns:
Error code

Definition at line 707 of file tls_server.c.

error_t tlsParseCertificateVerify ( TlsContext *  context,
const TlsCertificateVerify *  message,
size_t  length 
)

Parse CertificateVerify message.

The CertificateVerify message is used to provide explicit verification of a client certificate. This message is only sent following a client certificate that has signing capability

Parameters:
[in]contextPointer to the TLS context
[in]messageIncoming CertificateVerify message to parse
[in]lengthMessage length
Returns:
Error code

Definition at line 1546 of file tls_server.c.

error_t tlsParseClientHello ( TlsContext *  context,
const TlsClientHello *  message,
size_t  length 
)

Parse ClientHello message.

When a client first connects to a server, it is required to send the ClientHello as its first message. The client can also send a ClientHello in response to a HelloRequest or on its own initiative in order to renegotiate the security parameters in an existing connection

Parameters:
[in]contextPointer to the TLS context
[in]messageIncoming ClientHello message to parse
[in]lengthMessage length
Returns:
Error code

Definition at line 1053 of file tls_server.c.

error_t tlsParseClientKeyExchange ( TlsContext *  context,
const TlsClientKeyExchange *  message,
size_t  length 
)

Parse ClientKeyExchange message.

This message is always sent by the client. It must immediately follow the client Certificate message, if it is sent. Otherwise, it must be the first message sent by the client after it receives the ServerHelloDone message

Parameters:
[in]contextPointer to the TLS context
[in]messageIncoming ClientKeyExchange message to parse
[in]lengthMessage length
Returns:
Error code

Definition at line 1420 of file tls_server.c.

error_t tlsParseClientMessage ( TlsContext *  context )

Parse incoming handshake message.

Parameters:
[in]contextPointer to the TLS context
Returns:
Error code

Definition at line 205 of file tls_server.c.

error_t tlsSendCertificateRequest ( TlsContext *  context )

Send CertificateRequest message.

A server can optionally request a certificate from the client, if appropriate for the selected cipher suite. This message will immediately follow the ServerKeyExchange message

Parameters:
[in]contextPointer to the TLS context
Returns:
Error code

Definition at line 467 of file tls_server.c.

error_t tlsSendServerHello ( TlsContext *  context )

Send ServerHello message.

The server will send this message in response to a ClientHello message when it was able to find an acceptable set of algorithms. If it cannot find such a match, it will respond with a handshake failure alert

Parameters:
[in]contextPointer to the TLS context
Returns:
Error code

Definition at line 312 of file tls_server.c.

error_t tlsSendServerHelloDone ( TlsContext *  context )

Send ServerHelloDone message.

The ServerHelloDone message is sent by the server to indicate the end of the ServerHello and associated messages. After sending this message, the server will wait for a client response

Parameters:
[in]contextPointer to the TLS context
Returns:
Error code

Definition at line 531 of file tls_server.c.

error_t tlsSendServerKeyExchange ( TlsContext *  context )

Send ServerKeyExchange message.

The ServerKeyExchange message is sent by the server only when the server Certificate message does not contain enough data to allow the client to exchange a premaster secret

Parameters:
[in]contextPointer to the TLS context
Returns:
Error code

Definition at line 385 of file tls_server.c.

error_t tlsServerHandshake ( TlsContext *  context )

TLS server handshake.

TLS handshake protocol is responsible for the authentication and key exchange necessary to establish a secure session

Parameters:
[in]contextPointer to the TLS context
Returns:
Error code

Definition at line 67 of file tls_server.c.