1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
|
/***************************************************************************/
/* Copyright (c) 2024 Microsoft Corporation */
/* Copyright (c) 2026 Eclipse ThreadX contributors */
/* */
/* This program and the accompanying materials are made available under */
/* the terms of the MIT License which is available at */
/* https://opensource.org/licenses/MIT. */
/* */
/* SPDX-License-Identifier: MIT */
/***************************************************************************/
#include "tls_test_frame.h"
/* Global demo emaphore. */
extern TLS_TEST_SEMAPHORE* demo_semaphore;
/* Define the ThreadX and NetX object control blocks... */
NX_PACKET_POOL pool_0;
NX_IP ip_0;
NX_SECURE_DTLS_SERVER dtls_server;
NX_SECURE_X509_CERT certificate;
UCHAR tls_packet_buffer[4000];
/* Session buffer for DTLS server. Must be equal to the size of NX_SECURE_DTLS_SESSION times the
number of desired DTLS sessions. */
static UCHAR session_buffer[sizeof(NX_SECURE_DTLS_SESSION)];
/* Define the IP thread's stack area. */
ULONG ip_thread_stack[3 * 1024 / sizeof(ULONG)];
/* Define packet pool for the demonstration. */
#define NX_PACKET_POOL_SIZE ((1536 + sizeof(NX_PACKET)) * 32)
ULONG packet_pool_area[NX_PACKET_POOL_SIZE/sizeof(ULONG) + 64 / sizeof(ULONG)];
/* Define the ARP cache area. */
ULONG arp_space_area[512 / sizeof(ULONG)];
/* Define the demo thread. */
ULONG demo_thread_stack[6 * 1024 / sizeof(ULONG)];
TX_THREAD demo_thread;
void server_thread_entry(ULONG thread_input);
extern const NX_SECURE_TLS_CRYPTO nx_crypto_tls_ciphers;
CHAR crypto_metadata[30000];
#include "ica_test_device_cert.c"
#include "ica_test_ica_cert.c"
CHAR *html_data = "HTTP/1.1 200 OK\r\n" \
"Date: Fri, 15 Sep 2016 23:59:59 GMT\r\n" \
"Content-Type: text/html\r\n" \
"Content-Length: 200\r\n\r\n" \
"<html>\r\n"\
"<body>\r\n"\
"<b>Hello NetX Secure User!</b>\r\n"\
"This is a simple webpage\r\n"\
"served up using NetX Secure!\r\n"\
"</body>\r\n"\
"</html>\r\n";
/* Define the pointer of current instance control block. */
static TLS_TEST_INSTANCE* demo_instance_ptr;
/* Define external references. */
VOID _nx_pcap_network_driver(NX_IP_DRIVER *driver_req_ptr);
/* Instance one test entry. */
INT demo_server_entry(TLS_TEST_INSTANCE* instance_ptr)
{
#if !defined(NX_SECURE_TLS_SERVER_DISABLED) && defined(NX_SECURE_ENABLE_DTLS)
/* Get instance pointer. */
demo_instance_ptr = instance_ptr;
/* Enter the ThreadX kernel. */
tx_kernel_enter();
#else /* ifndef NX_SECURE_TLS_SERVER_DISABLED */
exit(TLS_TEST_NOT_AVAILABLE);
#endif /* ifndef NX_SECURE_TLS_SERVER_DISABLED */
}
/* Define what the initial system looks like. */
void tx_application_define(void *first_unused_memory)
{
ULONG gateway_ipv4_address;
UINT status;
/* Initialize the NetX system. */
nx_system_initialize();
/* Create a packet pool. */
status = nx_packet_pool_create(&pool_0, "NetX Main Packet Pool", 1536, (ULONG*)(((int)packet_pool_area + 64) & ~63) , NX_PACKET_POOL_SIZE);
show_error_message_if_fail( status == NX_SUCCESS);
/* Create an IP instance. */
status = nx_ip_create(&ip_0, "NetX IP Instance 0", TLS_TEST_IP_ADDRESS_NUMBER, 0xFFFFFF00UL, &pool_0, _nx_pcap_network_driver, (UCHAR*)ip_thread_stack, sizeof(ip_thread_stack), 1);
print_error_message( "ip address number: %lu\n", TLS_TEST_IP_ADDRESS_NUMBER);
show_error_message_if_fail( status == NX_SUCCESS);
/* Enable ARP and supply ARP cache memory for IP Instance 0. */
status = nx_arp_enable(&ip_0, (void *)arp_space_area, sizeof(arp_space_area));
show_error_message_if_fail( status == NX_SUCCESS);
/* Enable UDP traffic. */
status = nx_udp_enable(&ip_0);
show_error_message_if_fail( status == NX_SUCCESS);
nx_secure_tls_initialize();
nx_secure_dtls_initialize();
tx_thread_create(&demo_thread, "demo thread", server_thread_entry, 0, demo_thread_stack, sizeof(demo_thread_stack), 16, 16, 4, TX_AUTO_START);
}
/* Notification flags for DTLS server connect/receive. */
UINT server_connect_count = 0;
UINT server_receive_count = 0;
NX_SECURE_DTLS_SESSION *connect_session;
NX_SECURE_DTLS_SESSION *receive_session;
/* Connect notify callback for DTLS server - notifies the application thread that
a DTLS connection is ready to kickoff a handshake. */
UINT server_connect_notify(NX_SECURE_DTLS_SESSION *dtls_session, NXD_ADDRESS *ip_address, UINT port)
{
connect_session = dtls_session;
server_connect_count++;
return(NX_SUCCESS);
}
/* Receive notify callback for DTLS server - notifies the application thread that
we have received a DTLS record over an established DTLS session. */
UINT server_receive_notify(NX_SECURE_DTLS_SESSION *dtls_session)
{
receive_session = dtls_session;
server_receive_count++;
return(NX_SUCCESS);
}
/* TLS Server example application thread. */
void server_thread_entry(ULONG thread_input)
{
INT i = 0, status = 0;
ULONG actual_status;
NX_PACKET *receive_packet;
NX_PACKET *send_packet;
UCHAR receive_buffer[100];
ULONG bytes;
/* Ensure the IP instance has been initialized. */
status = nx_ip_status_check(&ip_0, NX_IP_INITIALIZE_DONE, &actual_status, NX_IP_PERIODIC_RATE);
show_error_message_if_fail( NX_SUCCESS == status);
/* Create a socket. */
status = nx_secure_dtls_server_create(&dtls_server, &ip_0, DEVICE_SERVER_PORT, NX_IP_PERIODIC_RATE,
session_buffer, sizeof(session_buffer),
&nx_crypto_tls_ciphers, crypto_metadata, sizeof(crypto_metadata),
tls_packet_buffer, sizeof(tls_packet_buffer),
server_connect_notify, server_receive_notify);
show_error_message_if_fail( NX_SUCCESS == status);
memset(&certificate, 0, sizeof(certificate));
status = nx_secure_x509_certificate_initialize(&certificate,
test_device_cert_der, test_device_cert_der_len,
NX_NULL, 0, test_device_cert_key_der,
test_device_cert_key_der_len, NX_SECURE_X509_KEY_TYPE_RSA_PKCS1_DER);
show_error_message_if_fail( NX_SUCCESS == status);
status = nx_secure_dtls_server_local_certificate_add(&dtls_server, &certificate, 1);
show_error_message_if_fail( NX_SUCCESS == status);
status = nx_secure_dtls_server_start(&dtls_server);
show_error_message_if_fail( NX_SUCCESS == status);
for ( ; i < 1; i++)
{
/* Post semaphore before accept sockets. */
print_error_message("Server connection %d: server is prepared. Post the semaphore.\n", i);
tls_test_semaphore_post(demo_semaphore);
/* Accept a client socket connection. */
print_error_message("Server connection %d: wait for connections.\n", i);
while (!server_connect_count)
{
tx_thread_sleep(1);
}
server_connect_count = 0;
print_error_message("Server connection %d: server accept.\n", i);
/* Start the connected DTLS session. */
status = nx_secure_dtls_server_session_start(connect_session, 20 * NX_IP_PERIODIC_RATE);
exit_if_fail( NX_SUCCESS == status, 1);
/* Wait for records to be received. */
print_error_message("Server connection %d: wait for records.\n", i);
while (!server_receive_count)
{
tx_thread_sleep(1);
}
server_receive_count = 0;
/* Receive the HTTP request, and print it out. */
status = nx_secure_dtls_session_receive(receive_session, &receive_packet, 5 * NX_IP_PERIODIC_RATE);
exit_if_fail( NX_SUCCESS == status, 2);
/* Show received data. */
nx_packet_data_extract_offset(receive_packet, 0, receive_buffer, 100, &bytes);
receive_buffer[bytes] = 0;
print_error_message("Server received data: %s\n", receive_buffer);
/* Allocate a return packet and send our HTML data back to the client. */
status = nx_secure_dtls_packet_allocate(connect_session, &pool_0, &send_packet, NX_NO_WAIT);
exit_if_fail( NX_SUCCESS == status, 3);
/* Send the prepared html page. */
status = nx_packet_data_append(send_packet, html_data, strlen(html_data), &pool_0, NX_NO_WAIT);
exit_if_fail( NX_SUCCESS == status, 4);
/* DTLS send the HTML/HTTPS data back to the client. */
status = nx_secure_dtls_server_session_send(connect_session, send_packet);
exit_if_fail( NX_SUCCESS == status, 5);
/* End the DTLS session. */
nx_secure_dtls_session_end(connect_session, NX_NO_WAIT);
print_error_message("Server connection %d: server unaccept, sleeping...\n", i);
tx_thread_sleep(5 * NX_IP_PERIODIC_RATE);
}
exit(0);
}
|
