782 lines
35 KiB
Java
782 lines
35 KiB
Java
/*
|
|
* Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 8210918 8210334 8209916
|
|
* @summary Add test to exercise server-side client hello processing
|
|
* @run main/othervm ClientHelloProcessing noPskNoKexModes
|
|
* @run main/othervm ClientHelloProcessing noPskYesKexModes
|
|
* @run main/othervm ClientHelloProcessing yesPskNoKexModes
|
|
* @run main/othervm ClientHelloProcessing yesPskYesKexModes
|
|
* @run main/othervm ClientHelloProcessing supGroupsSect163k1
|
|
*/
|
|
|
|
/*
|
|
* SunJSSE does not support dynamic system properties, no way to re-use
|
|
* system properties in samevm/agentvm mode.
|
|
*/
|
|
|
|
import java.io.FileInputStream;
|
|
import javax.net.ssl.*;
|
|
import javax.net.ssl.SSLEngineResult.HandshakeStatus;
|
|
import java.io.IOException;
|
|
import java.nio.ByteBuffer;
|
|
import java.security.GeneralSecurityException;
|
|
import java.security.KeyStore;
|
|
import java.util.Map;
|
|
import java.util.HashMap;
|
|
import java.util.Objects;
|
|
|
|
/*
|
|
* If you wish to add test cases, the following must be done:
|
|
* 1. Add a @run line with the parameter being a name for the test case
|
|
* 2. Create the ClientHello as a byte[]. It should be a complete TLS
|
|
* record, but does not need upper layer headers like TCP, IP, Ethernet, etc.
|
|
* 3. Create a new TestCase instance, see "noPskNoKexModes" as an example
|
|
* 4. Create a mapping between the test case name in your @run line and the
|
|
* TestCase object you created in step #3. Add this to TESTMAP.
|
|
*/
|
|
|
|
public class ClientHelloProcessing {
|
|
|
|
private static final ByteBuffer SERVOUTBUF =
|
|
ByteBuffer.wrap("Server Side".getBytes());
|
|
|
|
private static final String pathToStores = "../etc";
|
|
private static final String keyStoreFile = "keystore";
|
|
private static final String trustStoreFile = "truststore";
|
|
private static final String passwd = "passphrase";
|
|
|
|
private static final String keyFilename =
|
|
System.getProperty("test.src", ".") + "/" + pathToStores +
|
|
"/" + keyStoreFile;
|
|
private static final String trustFilename =
|
|
System.getProperty("test.src", ".") + "/" + pathToStores +
|
|
"/" + trustStoreFile;
|
|
|
|
private static TrustManagerFactory trustMgrFac = null;
|
|
private static KeyManagerFactory keyMgrFac = null;
|
|
|
|
// Canned client hello messages
|
|
// These were created from packet captures using openssl 1.1.1's
|
|
// s_client utility. The captured TLS record containing the client
|
|
// hello was then manually edited to remove or add fields if the s_client
|
|
// utility could not be used to generate a message with the desired
|
|
// extensions. When manually altering the hello messages, care must
|
|
// be taken to change the lengths of the extensions themselves, the
|
|
// extensions vector length, the handshake message length, and the TLS
|
|
// record length.
|
|
|
|
// Client Hello with the pre_shared_key and psk_key_exchange_modes
|
|
// both absent. Required manual removal of the psk_key_exchange_modes
|
|
// extension. Similarly formed Client Hello messages may be generated
|
|
// by clients that don't support pre-shared keys.
|
|
//
|
|
// TLSv1.3 Record Layer: Handshake Protocol: Client Hello
|
|
// Content Type: Handshake (22)
|
|
// Version: TLS 1.0 (0x0301)
|
|
// Length: 256
|
|
// Handshake Protocol: Client Hello
|
|
// Handshake Type: Client Hello (1)
|
|
// Length: 252
|
|
// Version: TLS 1.2 (0x0303)
|
|
// Random: 9b796ad0cbd559fb48fc4ba32da5bb8c1ef9a7da85231860...
|
|
// Session ID Length: 32
|
|
// Session ID: fe8411205bc99a506952f5c28569facb96ff0f37621be072...
|
|
// Cipher Suites Length: 8
|
|
// Cipher Suites (4 suites)
|
|
// Compression Methods Length: 1
|
|
// Compression Methods (1 method)
|
|
// Extensions Length: 171
|
|
// Extension: server_name (len=14)
|
|
// Extension: ec_point_formats (len=4)
|
|
// Extension: supported_groups (len=4)
|
|
// Extension: SessionTicket TLS (len=0)
|
|
// Extension: status_request (len=5)
|
|
// Extension: encrypt_then_mac (len=0)
|
|
// Extension: extended_master_secret (len=0)
|
|
// Extension: signature_algorithms (len=30)
|
|
// Extension: supported_versions (len=3)
|
|
// Extension: key_share (len=71)
|
|
private static final byte[] CLIHELLO_NOPSK_NOPSKEXMODE = {
|
|
22, 3, 1, 1, 0, 1, 0, 0,
|
|
-4, 3, 3, -101, 121, 106, -48, -53,
|
|
-43, 89, -5, 72, -4, 75, -93, 45,
|
|
-91, -69, -116, 30, -7, -89, -38, -123,
|
|
35, 24, 96, 29, -93, -22, 10, -97,
|
|
-15, -11, 3, 32, -2, -124, 17, 32,
|
|
91, -55, -102, 80, 105, 82, -11, -62,
|
|
-123, 105, -6, -53, -106, -1, 15, 55,
|
|
98, 27, -32, 114, -126, -13, 42, -104,
|
|
-102, 37, -65, 52, 0, 8, 19, 2,
|
|
19, 3, 19, 1, 0, -1, 1, 0,
|
|
0, -85, 0, 0, 0, 14, 0, 12,
|
|
0, 0, 9, 108, 111, 99, 97, 108,
|
|
104, 111, 115, 116, 0, 11, 0, 4,
|
|
3, 0, 1, 2, 0, 10, 0, 4,
|
|
0, 2, 0, 23, 0, 35, 0, 0,
|
|
0, 5, 0, 5, 1, 0, 0, 0,
|
|
0, 0, 22, 0, 0, 0, 23, 0,
|
|
0, 0, 13, 0, 30, 0, 28, 4,
|
|
3, 5, 3, 6, 3, 8, 7, 8,
|
|
8, 8, 9, 8, 10, 8, 11, 8,
|
|
4, 8, 5, 8, 6, 4, 1, 5,
|
|
1, 6, 1, 0, 43, 0, 3, 2,
|
|
3, 4, 0, 51, 0, 71, 0, 69,
|
|
0, 23, 0, 65, 4, 125, -92, -50,
|
|
-91, -39, -55, -114, 0, 22, 2, -50,
|
|
123, -126, 0, -94, 100, -119, -106, 125,
|
|
-81, -24, 51, -84, 25, 25, -115, 13,
|
|
-17, -20, 93, 68, -97, -79, -98, 91,
|
|
86, 91, -114, 123, 119, -87, -12, 32,
|
|
63, -41, 50, 126, -70, 96, 33, -6,
|
|
94, -7, -68, 54, -47, 53, 0, 88,
|
|
40, -48, -102, -50, 88
|
|
};
|
|
|
|
// Client Hello with the pre_shared_key extension absent but
|
|
// containing the psk_key_exchange_modes extension asserted. No
|
|
// manual modification was necessary.
|
|
//
|
|
// TLSv1.3 Record Layer: Handshake Protocol: Client Hello
|
|
// Content Type: Handshake (22)
|
|
// Version: TLS 1.0 (0x0301)
|
|
// Length: 262
|
|
// Handshake Protocol: Client Hello
|
|
// Handshake Type: Client Hello (1)
|
|
// Length: 258
|
|
// Version: TLS 1.2 (0x0303)
|
|
// Random: 9b796ad0cbd559fb48fc4ba32da5bb8c1ef9a7da85231860...
|
|
// Session ID Length: 32
|
|
// Session ID: fe8411205bc99a506952f5c28569facb96ff0f37621be072...
|
|
// Cipher Suites Length: 8
|
|
// Cipher Suites (4 suites)
|
|
// Compression Methods Length: 1
|
|
// Compression Methods (1 method)
|
|
// Extensions Length: 177
|
|
// Extension: server_name (len=14)
|
|
// Extension: ec_point_formats (len=4)
|
|
// Extension: supported_groups (len=4)
|
|
// Extension: SessionTicket TLS (len=0)
|
|
// Extension: status_request (len=5)
|
|
// Extension: encrypt_then_mac (len=0)
|
|
// Extension: extended_master_secret (len=0)
|
|
// Extension: signature_algorithms (len=30)
|
|
// Extension: supported_versions (len=3)
|
|
// Extension: psk_key_exchange_modes (len=2)
|
|
// Type: psk_key_exchange_modes (45)
|
|
// Length: 2
|
|
// PSK Key Exchange Modes Length: 1
|
|
// PSK Key Exchange Mode: PSK with (EC)DHE key establishment (psk_dhe_ke) (1)
|
|
// Extension: key_share (len=71)
|
|
private static final byte[] CLIHELLO_NOPSK_YESPSKEXMODE = {
|
|
22, 3, 1, 1, 6, 1, 0, 1,
|
|
2, 3, 3, -101, 121, 106, -48, -53,
|
|
-43, 89, -5, 72, -4, 75, -93, 45,
|
|
-91, -69, -116, 30, -7, -89, -38, -123,
|
|
35, 24, 96, 29, -93, -22, 10, -97,
|
|
-15, -11, 3, 32, -2, -124, 17, 32,
|
|
91, -55, -102, 80, 105, 82, -11, -62,
|
|
-123, 105, -6, -53, -106, -1, 15, 55,
|
|
98, 27, -32, 114, -126, -13, 42, -104,
|
|
-102, 37, -65, 52, 0, 8, 19, 2,
|
|
19, 3, 19, 1, 0, -1, 1, 0,
|
|
0, -79, 0, 0, 0, 14, 0, 12,
|
|
0, 0, 9, 108, 111, 99, 97, 108,
|
|
104, 111, 115, 116, 0, 11, 0, 4,
|
|
3, 0, 1, 2, 0, 10, 0, 4,
|
|
0, 2, 0, 23, 0, 35, 0, 0,
|
|
0, 5, 0, 5, 1, 0, 0, 0,
|
|
0, 0, 22, 0, 0, 0, 23, 0,
|
|
0, 0, 13, 0, 30, 0, 28, 4,
|
|
3, 5, 3, 6, 3, 8, 7, 8,
|
|
8, 8, 9, 8, 10, 8, 11, 8,
|
|
4, 8, 5, 8, 6, 4, 1, 5,
|
|
1, 6, 1, 0, 43, 0, 3, 2,
|
|
3, 4, 0, 45, 0, 2, 1, 1,
|
|
0, 51, 0, 71, 0, 69, 0, 23,
|
|
0, 65, 4, 125, -92, -50, -91, -39,
|
|
-55, -114, 0, 22, 2, -50, 123, -126,
|
|
0, -94, 100, -119, -106, 125, -81, -24,
|
|
51, -84, 25, 25, -115, 13, -17, -20,
|
|
93, 68, -97, -79, -98, 91, 86, 91,
|
|
-114, 123, 119, -87, -12, 32, 63, -41,
|
|
50, 126, -70, 96, 33, -6, 94, -7,
|
|
-68, 54, -47, 53, 0, 88, 40, -48,
|
|
-102, -50, 88
|
|
};
|
|
|
|
// Client Hello with pre_shared_key asserted and psk_key_exchange_modes
|
|
// absent. This is a violation of RFC 8446. This required manual
|
|
// removal of the psk_key_exchange_modes extension.
|
|
//
|
|
// TLSv1.3 Record Layer: Handshake Protocol: Client Hello
|
|
// Content Type: Handshake (22)
|
|
// Version: TLS 1.0 (0x0301)
|
|
// Length: 318
|
|
// Handshake Protocol: Client Hello
|
|
// Handshake Type: Client Hello (1)
|
|
// Length: 314
|
|
// Version: TLS 1.2 (0x0303)
|
|
// Random: e730e42336a19ed9fdb42919c65769132e9e779a797f188c...
|
|
// Session ID Length: 32
|
|
// Session ID: 6c6ed31408042fabd0c47fdeee6d19de2d6795e37590f00e...
|
|
// Cipher Suites Length: 8
|
|
// Cipher Suites (4 suites)
|
|
// Compression Methods Length: 1
|
|
// Compression Methods (1 method)
|
|
// Extensions Length: 233
|
|
// Extension: server_name (len=14)
|
|
// Extension: ec_point_formats (len=4)
|
|
// Extension: supported_groups (len=4)
|
|
// Extension: SessionTicket TLS (len=0)
|
|
// Extension: status_request (len=5)
|
|
// Extension: encrypt_then_mac (len=0)
|
|
// Extension: extended_master_secret (len=0)
|
|
// Extension: signature_algorithms (len=30)
|
|
// Extension: supported_versions (len=3)
|
|
// Extension: key_share (len=71)
|
|
// Extension: pre_shared_key (len=58)
|
|
// Type: pre_shared_key (41)
|
|
// Length: 58
|
|
// Pre-Shared Key extension
|
|
// Identities Length: 21
|
|
// PSK Identity (length: 15)
|
|
// Identity Length: 15
|
|
// Identity: 436c69656e745f6964656e74697479
|
|
// Obfuscated Ticket Age: 0
|
|
// PSK Binders length: 33
|
|
// PSK Binders
|
|
private static final byte[] CLIHELLO_YESPSK_NOPSKEXMODE = {
|
|
22, 3, 1, 1, 62, 1, 0, 1,
|
|
58, 3, 3, -25, 48, -28, 35, 54,
|
|
-95, -98, -39, -3, -76, 41, 25, -58,
|
|
87, 105, 19, 46, -98, 119, -102, 121,
|
|
127, 24, -116, -9, -99, 22, 116, -97,
|
|
90, 73, -18, 32, 108, 110, -45, 20,
|
|
8, 4, 47, -85, -48, -60, 127, -34,
|
|
-18, 109, 25, -34, 45, 103, -107, -29,
|
|
117, -112, -16, 14, -5, -24, 24, 61,
|
|
-9, 28, -119, -73, 0, 8, 19, 2,
|
|
19, 3, 19, 1, 0, -1, 1, 0,
|
|
0, -23, 0, 0, 0, 14, 0, 12,
|
|
0, 0, 9, 108, 111, 99, 97, 108,
|
|
104, 111, 115, 116, 0, 11, 0, 4,
|
|
3, 0, 1, 2, 0, 10, 0, 4,
|
|
0, 2, 0, 23, 0, 35, 0, 0,
|
|
0, 5, 0, 5, 1, 0, 0, 0,
|
|
0, 0, 22, 0, 0, 0, 23, 0,
|
|
0, 0, 13, 0, 30, 0, 28, 4,
|
|
3, 5, 3, 6, 3, 8, 7, 8,
|
|
8, 8, 9, 8, 10, 8, 11, 8,
|
|
4, 8, 5, 8, 6, 4, 1, 5,
|
|
1, 6, 1, 0, 43, 0, 3, 2,
|
|
3, 4, 0, 51, 0, 71, 0, 69,
|
|
0, 23, 0, 65, 4, -6, 101, 105,
|
|
-2, -6, 85, -99, -37, 112, 90, 44,
|
|
-123, -107, 4, -12, -64, 92, 40, 100,
|
|
22, -53, -124, 54, 56, 102, 25, 76,
|
|
-86, -1, 6, 110, 95, 92, -86, -35,
|
|
-101, 115, 85, 99, 19, 6, -43, 105,
|
|
-37, -92, 53, -97, 84, -1, -53, 87,
|
|
-53, -107, -13, -14, 32, 101, -35, 39,
|
|
102, -17, -119, -25, -51, 0, 41, 0,
|
|
58, 0, 21, 0, 15, 67, 108, 105,
|
|
101, 110, 116, 95, 105, 100, 101, 110,
|
|
116, 105, 116, 121, 0, 0, 0, 0,
|
|
0, 33, 32, -113, -27, -44, -71, -68,
|
|
-26, -47, 57, -82, -29, -13, -61, 77,
|
|
52, -60, 27, 74, -120, -104, 102, 21,
|
|
121, 0, 48, 43, -40, -19, -67, 57,
|
|
-20, 97, 23
|
|
};
|
|
|
|
// Client Hello containing both pre_shared_key and psk_key_exchange_modes
|
|
// extensions. Generation of this hello was done by adding
|
|
// "-psk a1b2c3d4" to the s_client command.
|
|
//
|
|
// TLSv1.3 Record Layer: Handshake Protocol: Client Hello
|
|
// Content Type: Handshake (22)
|
|
// Version: TLS 1.0 (0x0301)
|
|
// Length: 324
|
|
// Handshake Protocol: Client Hello
|
|
// Handshake Type: Client Hello (1)
|
|
// Length: 320
|
|
// Version: TLS 1.2 (0x0303)
|
|
// Random: e730e42336a19ed9fdb42919c65769132e9e779a797f188c...
|
|
// Session ID Length: 32
|
|
// Session ID: 6c6ed31408042fabd0c47fdeee6d19de2d6795e37590f00e...
|
|
// Cipher Suites Length: 8
|
|
// Cipher Suites (4 suites)
|
|
// Compression Methods Length: 1
|
|
// Compression Methods (1 method)
|
|
// Extensions Length: 239
|
|
// Extension: server_name (len=14)
|
|
// Extension: ec_point_formats (len=4)
|
|
// Extension: supported_groups (len=4)
|
|
// Extension: SessionTicket TLS (len=0)
|
|
// Extension: status_request (len=5)
|
|
// Extension: encrypt_then_mac (len=0)
|
|
// Extension: extended_master_secret (len=0)
|
|
// Extension: signature_algorithms (len=30)
|
|
// Extension: supported_versions (len=3)
|
|
// Extension: psk_key_exchange_modes (len=2)
|
|
// Type: psk_key_exchange_modes (45)
|
|
// Length: 2
|
|
// PSK Key Exchange Modes Length: 1
|
|
// PSK Key Exchange Mode: PSK with (EC)DHE key establishment (psk_dhe_ke) (1)
|
|
// Extension: key_share (len=71)
|
|
// Extension: pre_shared_key (len=58)
|
|
// Type: pre_shared_key (41)
|
|
// Length: 58
|
|
// Pre-Shared Key extension
|
|
// Identities Length: 21
|
|
// PSK Identity (length: 15)
|
|
// Identity Length: 15
|
|
// Identity: 436c69656e745f6964656e74697479
|
|
// Obfuscated Ticket Age: 0
|
|
// PSK Binders length: 33
|
|
// PSK Binders
|
|
private static final byte[] CLIHELLO_YESPSK_YESPSKEXMODE = {
|
|
22, 3, 1, 1, 68, 1, 0, 1,
|
|
64, 3, 3, -25, 48, -28, 35, 54,
|
|
-95, -98, -39, -3, -76, 41, 25, -58,
|
|
87, 105, 19, 46, -98, 119, -102, 121,
|
|
127, 24, -116, -9, -99, 22, 116, -97,
|
|
90, 73, -18, 32, 108, 110, -45, 20,
|
|
8, 4, 47, -85, -48, -60, 127, -34,
|
|
-18, 109, 25, -34, 45, 103, -107, -29,
|
|
117, -112, -16, 14, -5, -24, 24, 61,
|
|
-9, 28, -119, -73, 0, 8, 19, 2,
|
|
19, 3, 19, 1, 0, -1, 1, 0,
|
|
0, -17, 0, 0, 0, 14, 0, 12,
|
|
0, 0, 9, 108, 111, 99, 97, 108,
|
|
104, 111, 115, 116, 0, 11, 0, 4,
|
|
3, 0, 1, 2, 0, 10, 0, 4,
|
|
0, 2, 0, 23, 0, 35, 0, 0,
|
|
0, 5, 0, 5, 1, 0, 0, 0,
|
|
0, 0, 22, 0, 0, 0, 23, 0,
|
|
0, 0, 13, 0, 30, 0, 28, 4,
|
|
3, 5, 3, 6, 3, 8, 7, 8,
|
|
8, 8, 9, 8, 10, 8, 11, 8,
|
|
4, 8, 5, 8, 6, 4, 1, 5,
|
|
1, 6, 1, 0, 43, 0, 3, 2,
|
|
3, 4, 0, 45, 0, 2, 1, 1,
|
|
0, 51, 0, 71, 0, 69, 0, 23,
|
|
0, 65, 4, -6, 101, 105, -2, -6,
|
|
85, -99, -37, 112, 90, 44, -123, -107,
|
|
4, -12, -64, 92, 40, 100, 22, -53,
|
|
-124, 54, 56, 102, 25, 76, -86, -1,
|
|
6, 110, 95, 92, -86, -35, -101, 115,
|
|
85, 99, 19, 6, -43, 105, -37, -92,
|
|
53, -97, 84, -1, -53, 87, -53, -107,
|
|
-13, -14, 32, 101, -35, 39, 102, -17,
|
|
-119, -25, -51, 0, 41, 0, 58, 0,
|
|
21, 0, 15, 67, 108, 105, 101, 110,
|
|
116, 95, 105, 100, 101, 110, 116, 105,
|
|
116, 121, 0, 0, 0, 0, 0, 33,
|
|
32, -113, -27, -44, -71, -68, -26, -47,
|
|
57, -82, -29, -13, -61, 77, 52, -60,
|
|
27, 74, -120, -104, 102, 21, 121, 0,
|
|
48, 43, -40, -19, -67, 57, -20, 97,
|
|
23
|
|
};
|
|
|
|
// Client Hello with sect163k1 and secp256r1 as supported groups. This
|
|
// test covers an error condition where a known, supported curve that is
|
|
// not in the default enabled set of curves would cause failures.
|
|
// Generation of this hello was done using "-curves sect163k1:prime256v1"
|
|
// as an option to s_client.
|
|
//
|
|
// TLSv1.2 Record Layer: Handshake Protocol: Client Hello
|
|
// Content Type: Handshake (22)
|
|
// Version: TLS 1.0 (0x0301)
|
|
// Length: 210
|
|
// Handshake Protocol: Client Hello
|
|
// Handshake Type: Client Hello (1)
|
|
// Length: 206
|
|
// Version: TLS 1.2 (0x0303)
|
|
// Random: 05cbae9b834851d856355b72601cb67b7cd4eb51f29ed50b...
|
|
// Session ID Length: 0
|
|
// Cipher Suites Length: 56
|
|
// Cipher Suites (28 suites)
|
|
// Compression Methods Length: 1
|
|
// Compression Methods (1 method)
|
|
// Extensions Length: 109
|
|
// Extension: server_name (len=14)
|
|
// Extension: ec_point_formats (len=4)
|
|
// Extension: supported_groups (len=6)
|
|
// Type: supported_groups (10)
|
|
// Length: 6
|
|
// Supported Groups List Length: 4
|
|
// Supported Groups (2 groups)
|
|
// Supported Group: sect163k1 (0x0001)
|
|
// Supported Group: secp256r1 (0x0017)
|
|
// Extension: SessionTicket TLS (len=0)
|
|
// Extension: status_request (len=5)
|
|
// Extension: encrypt_then_mac (len=0)
|
|
// Extension: extended_master_secret (len=0)
|
|
// Extension: signature_algorithms (len=48)
|
|
private static final byte[] CLIHELLO_SUPGRP_SECT163K1 = {
|
|
22, 3, 1, 0, -46, 1, 0, 0,
|
|
-50, 3, 3, 5, -53, -82, -101, -125,
|
|
72, 81, -40, 86, 53, 91, 114, 96,
|
|
28, -74, 123, 124, -44, -21, 81, -14,
|
|
-98, -43, 11, 90, -87, -106, 13, 63,
|
|
-62, 100, 111, 0, 0, 56, -64, 44,
|
|
-64, 48, 0, -97, -52, -87, -52, -88,
|
|
-52, -86, -64, 43, -64, 47, 0, -98,
|
|
-64, 36, -64, 40, 0, 107, -64, 35,
|
|
-64, 39, 0, 103, -64, 10, -64, 20,
|
|
0, 57, -64, 9, -64, 19, 0, 51,
|
|
0, -99, 0, -100, 0, 61, 0, 60,
|
|
0, 53, 0, 47, 0, -1, 1, 0,
|
|
0, 109, 0, 0, 0, 14, 0, 12,
|
|
0, 0, 9, 108, 111, 99, 97, 108,
|
|
104, 111, 115, 116, 0, 11, 0, 4,
|
|
3, 0, 1, 2, 0, 10, 0, 6,
|
|
0, 4, 0, 1, 0, 23, 0, 35,
|
|
0, 0, 0, 5, 0, 5, 1, 0,
|
|
0, 0, 0, 0, 22, 0, 0, 0,
|
|
23, 0, 0, 0, 13, 0, 48, 0,
|
|
46, 4, 3, 5, 3, 6, 3, 8,
|
|
7, 8, 8, 8, 9, 8, 10, 8,
|
|
11, 8, 4, 8, 5, 8, 6, 4,
|
|
1, 5, 1, 6, 1, 3, 3, 2,
|
|
3, 3, 1, 2, 1, 3, 2, 2,
|
|
2, 4, 2, 5, 2, 6, 2
|
|
};
|
|
|
|
public static interface TestCase {
|
|
void execTest() throws Exception;
|
|
}
|
|
|
|
private static final Map<String, TestCase> TESTMAP = new HashMap<>();
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
boolean allGood = true;
|
|
System.setProperty("javax.net.debug", "ssl:handshake");
|
|
trustMgrFac = makeTrustManagerFactory(trustFilename, passwd);
|
|
keyMgrFac = makeKeyManagerFactory(keyFilename, passwd);
|
|
|
|
// Populate the test map
|
|
TESTMAP.put("noPskNoKexModes", noPskNoKexModes);
|
|
TESTMAP.put("noPskYesKexModes", noPskYesKexModes);
|
|
TESTMAP.put("yesPskNoKexModes", yesPskNoKexModes);
|
|
TESTMAP.put("yesPskYesKexModes", yesPskYesKexModes);
|
|
TESTMAP.put("supGroupsSect163k1", supGroupsSect163k1);
|
|
|
|
if (args == null || args.length < 1) {
|
|
throw new Exception("FAIL: Test @run line is missing a test label");
|
|
}
|
|
|
|
// Pull the test to run from the test map.
|
|
TestCase test = Objects.requireNonNull(TESTMAP.get(args[0]),
|
|
"No TestCase found for test label " + args[0]);
|
|
test.execTest();
|
|
}
|
|
|
|
/**
|
|
* Test case to cover hellos with no pre_shared_key nor
|
|
* psk_key_exchange_modes extensions. Clients not supporting PSK at all
|
|
* may send hellos like this.
|
|
*/
|
|
private static final TestCase noPskNoKexModes = new TestCase() {
|
|
@Override
|
|
public void execTest() throws Exception {
|
|
System.out.println("\nTest: PSK = No, PSKEX = No");
|
|
processClientHello("TLS", CLIHELLO_NOPSK_NOPSKEXMODE);
|
|
System.out.println("PASS");
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Test case to cover hellos with no pre_shared_key but have the
|
|
* psk_key_exchange_modes extension. This kind of hello is seen from
|
|
* some popular browsers and test clients.
|
|
*/
|
|
private static final TestCase noPskYesKexModes = new TestCase() {
|
|
@Override
|
|
public void execTest() throws Exception {
|
|
System.out.println("\nTest: PSK = No, PSKEX = Yes");
|
|
processClientHello("TLS", CLIHELLO_NOPSK_YESPSKEXMODE);
|
|
System.out.println("PASS");
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Test case using a client hello with the pre_shared_key extension but
|
|
* no psk_key_exchange_modes extension present. This is a violation of
|
|
* 8446 and should cause an exception when unwrapped and processed by
|
|
* SSLEngine.
|
|
*/
|
|
private static final TestCase yesPskNoKexModes = new TestCase() {
|
|
@Override
|
|
public void execTest() throws Exception {
|
|
try {
|
|
System.out.println("\nTest: PSK = Yes, PSKEX = No");
|
|
processClientHello("TLS", CLIHELLO_YESPSK_NOPSKEXMODE);
|
|
throw new Exception(
|
|
"FAIL: Client Hello processed without expected error");
|
|
} catch (SSLHandshakeException sslhe) {
|
|
System.out.println("PASS: Caught expected exception: " + sslhe);
|
|
}
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Test case using a client hello asserting the pre_shared_key and
|
|
* psk_key_exchange_modes extensions.
|
|
*/
|
|
private static final TestCase yesPskYesKexModes = new TestCase() {
|
|
@Override
|
|
public void execTest() throws Exception {
|
|
System.out.println("\nTest: PSK = Yes, PSKEX = Yes");
|
|
processClientHello("TLS", CLIHELLO_YESPSK_YESPSKEXMODE);
|
|
System.out.println("PASS");
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Test case with a client hello asserting two named curves in the
|
|
* supported_groups extension: sect163k1 and secp256r1.
|
|
*/
|
|
private static final TestCase supGroupsSect163k1 = new TestCase() {
|
|
@Override
|
|
public void execTest() throws Exception {
|
|
System.out.println("\nTest: Use of non-default-enabled " +
|
|
"Supported Group (sect163k1)");
|
|
processClientHello("TLS", CLIHELLO_SUPGRP_SECT163K1);
|
|
System.out.println("PASS");
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Send a ClientHello message to an SSLEngine instance configured as a
|
|
* server.
|
|
*
|
|
* @param proto the protocol used to create the SSLContext. This will
|
|
* default to "TLS" if null is passed in.
|
|
* @param message the ClientHello as a complete TLS record.
|
|
*
|
|
* @throws Exception if any processing errors occur. The caller (TestCase)
|
|
* is expected to deal with the exception in whatever way appropriate
|
|
* for the test.
|
|
*/
|
|
private static void processClientHello(String proto, byte[] message)
|
|
throws Exception {
|
|
SSLEngine serverEng = makeServerEngine(proto, keyMgrFac, trustMgrFac);
|
|
ByteBuffer sTOc = makePacketBuf(serverEng);
|
|
SSLEngineResult serverResult;
|
|
|
|
ByteBuffer cTOs = ByteBuffer.wrap(message);
|
|
System.out.println("CLIENT-TO-SERVER\n" +
|
|
dumpHexBytes(cTOs, 16, "\n", " "));
|
|
serverResult = serverEng.unwrap(cTOs, SERVOUTBUF);
|
|
printResult("server unwrap: ", serverResult);
|
|
runDelegatedTasks(serverResult, serverEng);
|
|
serverEng.wrap(SERVOUTBUF, sTOc);
|
|
}
|
|
|
|
/**
|
|
* Create a TrustManagerFactory from a given keystore.
|
|
*
|
|
* @param tsPath the path to the trust store file.
|
|
* @param pass the password for the trust store.
|
|
*
|
|
* @return a new TrustManagerFactory built from the trust store provided.
|
|
*
|
|
* @throws GeneralSecurityException if any processing errors occur
|
|
* with the Keystore instantiation or TrustManagerFactory creation.
|
|
* @throws IOException if any loading error with the trust store occurs.
|
|
*/
|
|
private static TrustManagerFactory makeTrustManagerFactory(String tsPath,
|
|
String pass) throws GeneralSecurityException, IOException {
|
|
KeyStore ts = KeyStore.getInstance("JKS");
|
|
char[] passphrase = pass.toCharArray();
|
|
|
|
ts.load(new FileInputStream(tsPath), passphrase);
|
|
TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
|
|
tmf.init(ts);
|
|
return tmf;
|
|
}
|
|
|
|
/**
|
|
* Create a KeyManagerFactory from a given keystore.
|
|
*
|
|
* @param ksPath the path to the keystore file.
|
|
* @param pass the password for the keystore.
|
|
*
|
|
* @return a new TrustManagerFactory built from the keystore provided.
|
|
*
|
|
* @throws GeneralSecurityException if any processing errors occur
|
|
* with the Keystore instantiation or KeyManagerFactory creation.
|
|
* @throws IOException if any loading error with the keystore occurs
|
|
*/
|
|
private static KeyManagerFactory makeKeyManagerFactory(String ksPath,
|
|
String pass) throws GeneralSecurityException, IOException {
|
|
KeyStore ks = KeyStore.getInstance("JKS");
|
|
char[] passphrase = pass.toCharArray();
|
|
|
|
ks.load(new FileInputStream(ksPath), passphrase);
|
|
KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
|
|
kmf.init(ks, passphrase);
|
|
return kmf;
|
|
}
|
|
|
|
/**
|
|
* Create an SSLEngine instance from a given protocol specifier,
|
|
* KeyManagerFactory and TrustManagerFactory.
|
|
*
|
|
* @param proto the protocol specifier for the SSLContext. This will
|
|
* default to "TLS" if null is provided.
|
|
* @param kmf an initialized KeyManagerFactory. May be null.
|
|
* @param tmf an initialized TrustManagerFactory. May be null.
|
|
*
|
|
* @return an SSLEngine instance configured as a server and with client
|
|
* authentication disabled.
|
|
*
|
|
* @throws GeneralSecurityException if any errors occur during the
|
|
* creation of the SSLEngine.
|
|
*/
|
|
private static SSLEngine makeServerEngine(String proto,
|
|
KeyManagerFactory kmf, TrustManagerFactory tmf)
|
|
throws GeneralSecurityException {
|
|
SSLContext ctx = SSLContext.getInstance(proto != null ? proto : "TLS");
|
|
ctx.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
|
|
SSLEngine ssle = ctx.createSSLEngine();
|
|
ssle.setUseClientMode(false);
|
|
ssle.setNeedClientAuth(false);
|
|
return ssle;
|
|
}
|
|
|
|
/**
|
|
* Make a ByteBuffer sized for TLS records that can be used by an SSLEngine.
|
|
*
|
|
* @param engine the SSLEngine used to determine the packet buffer size.
|
|
*
|
|
* @return a ByteBuffer sized for TLS packets.
|
|
*/
|
|
private static ByteBuffer makePacketBuf(SSLEngine engine) {
|
|
SSLSession sess = engine.getSession();
|
|
ByteBuffer packetBuf = ByteBuffer.allocate(sess.getPacketBufferSize());
|
|
return packetBuf;
|
|
}
|
|
|
|
/**
|
|
* Runs any delegated tasks after unwrapping TLS records.
|
|
*
|
|
* @param result the most recent result from an unwrap operation on
|
|
* an SSLEngine.
|
|
* @param engine the SSLEngine used to unwrap the data.
|
|
*
|
|
* @throws Exception if any errors occur while running the delegated
|
|
* tasks.
|
|
*/
|
|
private static void runDelegatedTasks(SSLEngineResult result,
|
|
SSLEngine engine) throws Exception {
|
|
HandshakeStatus hsStatus = result.getHandshakeStatus();
|
|
if (hsStatus == HandshakeStatus.NEED_TASK) {
|
|
Runnable runnable;
|
|
while ((runnable = engine.getDelegatedTask()) != null) {
|
|
System.out.println("\trunning delegated task...");
|
|
runnable.run();
|
|
}
|
|
hsStatus = engine.getHandshakeStatus();
|
|
if (hsStatus == HandshakeStatus.NEED_TASK) {
|
|
throw new Exception(
|
|
"handshake shouldn't need additional tasks");
|
|
}
|
|
System.out.println("\tnew HandshakeStatus: " + hsStatus);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Display the results of a wrap or unwrap operation from an SSLEngine.
|
|
*
|
|
* @param str a label to be prefixed to the result display.
|
|
* @param result the result returned from the wrap/unwrap operation.
|
|
*/
|
|
private static void printResult(String str, SSLEngineResult result) {
|
|
System.out.println("The format of the SSLEngineResult is: \n" +
|
|
"\t\"getStatus() / getHandshakeStatus()\" +\n" +
|
|
"\t\"bytesConsumed() / bytesProduced()\"\n");
|
|
HandshakeStatus hsStatus = result.getHandshakeStatus();
|
|
System.out.println(str + result.getStatus() + "/" + hsStatus + ", " +
|
|
result.bytesConsumed() + "/" + result.bytesProduced() + " bytes");
|
|
if (hsStatus == HandshakeStatus.FINISHED) {
|
|
System.out.println("\t...ready for application data");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Dump the hex bytes of a buffer into string form.
|
|
*
|
|
* @param data The array of bytes to dump to stdout.
|
|
* @param itemsPerLine The number of bytes to display per line
|
|
* if the {@code lineDelim} character is blank then all bytes
|
|
* will be printed on a single line.
|
|
* @param lineDelim The delimiter between lines
|
|
* @param itemDelim The delimiter between bytes
|
|
*
|
|
* @return The hexdump of the byte array
|
|
*/
|
|
private static String dumpHexBytes(byte[] data, int itemsPerLine,
|
|
String lineDelim, String itemDelim) {
|
|
return dumpHexBytes(ByteBuffer.wrap(data), itemsPerLine, lineDelim,
|
|
itemDelim);
|
|
}
|
|
|
|
/**
|
|
* Dump the hex bytes of a buffer into string form.
|
|
*
|
|
* @param data The ByteBuffer to dump to stdout.
|
|
* @param itemsPerLine The number of bytes to display per line
|
|
* if the {@code lineDelim} character is blank then all bytes
|
|
* will be printed on a single line.
|
|
* @param lineDelim The delimiter between lines
|
|
* @param itemDelim The delimiter between bytes
|
|
*
|
|
* @return The hexdump of the byte array
|
|
*/
|
|
private static String dumpHexBytes(ByteBuffer data, int itemsPerLine,
|
|
String lineDelim, String itemDelim) {
|
|
StringBuilder sb = new StringBuilder();
|
|
if (data != null) {
|
|
data.mark();
|
|
int i = 0;
|
|
while (data.remaining() > 0) {
|
|
if (i % itemsPerLine == 0 && i != 0) {
|
|
sb.append(lineDelim);
|
|
}
|
|
sb.append(String.format("%02X", data.get())).append(itemDelim);
|
|
i++;
|
|
}
|
|
data.reset();
|
|
}
|
|
|
|
return sb.toString();
|
|
}
|
|
}
|