blob: f1bc77ed2f179e8b7d193a5609aa0cc56b866d47 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
/***************************************************************************
* Copyright (c) 2024 Microsoft Corporation
* Copyright (c) 2025-present Eclipse ThreadX Contributors
*
* This program and the accompanying materials are made available under the
* terms of the MIT License which is available at
* https://opensource.org/licenses/MIT.
*
* SPDX-License-Identifier: MIT
**************************************************************************/
/**************************************************************************/
/**************************************************************************/
/** */
/** NetX Secure Component */
/** */
/** Transport Layer Security (TLS) */
/** */
/**************************************************************************/
/**************************************************************************/
#define NX_SECURE_SOURCE_CODE
#include "nx_secure_tls.h"
/**************************************************************************/
/* */
/* FUNCTION RELEASE */
/* */
/* _nx_secure_tls_handshake_process PORTABLE C */
/* 6.4.3 */
/* AUTHOR */
/* */
/* Timothy Stapko, Microsoft Corporation */
/* */
/* DESCRIPTION */
/* */
/* This function processes a TLS handshake, whether at the beginning */
/* of a new TLS connection or during a session re-negotiation. The */
/* handshake state machine is implemented for each of TLS Client and */
/* Server in their own functions, this function is simply the entry */
/* point for handling the handshake messages. */
/* */
/* INPUT */
/* */
/* tls_session TLS control block */
/* wait_option Suspension option */
/* */
/* OUTPUT */
/* */
/* status Completion status */
/* */
/* CALLS */
/* */
/* _nx_secure_tls_session_receive_records */
/* Receive TLS records */
/* nx_secure_tls_packet_release Release packet */
/* */
/* CALLED BY */
/* */
/* _nx_secure_tls_session_start Start TLS session */
/* _nx_secure_tls_session_receive Receive TCP data */
/* */
/**************************************************************************/
UINT _nx_secure_tls_handshake_process(NX_SECURE_TLS_SESSION *tls_session, UINT wait_option)
{
UINT status = NX_NOT_SUCCESSFUL;
NX_PACKET *incoming_packet = NX_NULL;
/* Process the handshake depending on the TLS session type. */
#ifndef NX_SECURE_TLS_CLIENT_DISABLED
if (tls_session -> nx_secure_tls_socket_type == NX_SECURE_TLS_SESSION_TYPE_CLIENT)
{
/* Handle our incoming handshake messages. Continue processing until the handshake is complete
* or an error/timeout occurs. */
while (tls_session -> nx_secure_tls_client_state != NX_SECURE_TLS_CLIENT_STATE_HANDSHAKE_FINISHED)
{
status = _nx_secure_tls_session_receive_records(tls_session, &incoming_packet, wait_option);
/* Make sure we didn't have an error during the receive. */
if (status != NX_SUCCESS)
{
break;
}
}
if (tls_session -> nx_secure_tls_client_state == NX_SECURE_TLS_CLIENT_STATE_HANDSHAKE_FINISHED)
{
/* Release the incoming packet if we do receive it. */
nx_secure_tls_packet_release(incoming_packet);
}
}
#endif
#ifndef NX_SECURE_TLS_SERVER_DISABLED
if (tls_session -> nx_secure_tls_socket_type == NX_SECURE_TLS_SESSION_TYPE_SERVER)
{
/* Session is a TLS Server type. */
/* The client socket connection has already been accepted at this point, process the handshake. */
/* Now handle our incoming handshake messages. Continue processing until the handshake is complete
* or an error/timeout occurs. */
while (tls_session -> nx_secure_tls_server_state != NX_SECURE_TLS_SERVER_STATE_HANDSHAKE_FINISHED)
{
status = _nx_secure_tls_session_receive_records(tls_session, &incoming_packet, wait_option);
/* Make sure we didn't have an error during the receive. */
if (status != NX_SUCCESS)
{
break;
}
}
if (tls_session -> nx_secure_tls_server_state == NX_SECURE_TLS_SERVER_STATE_HANDSHAKE_FINISHED)
{
/* Release the incoming packet if we do receive it. */
nx_secure_tls_packet_release(incoming_packet);
}
}
#endif
if ((status == NX_NO_PACKET) && (wait_option == 0))
{
/* It is non blocking mode. */
status = NX_CONTINUE;
}
return(status);
}
|
