1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
|
/***************************************************************************/
/* Copyright (c) 2024 Microsoft Corporation */
/* Copyright (c) 2026 Eclipse ThreadX contributors */
/* */
/* This program and the accompanying materials are made available under */
/* the terms of the MIT License which is available at */
/* https://opensource.org/licenses/MIT. */
/* */
/* SPDX-License-Identifier: MIT */
/***************************************************************************/
/* This case tests the tcpserver on handling RST packet when TLS connection is failed.
*/
#include "nx_api.h"
#include "nx_tcpserver.h"
extern void test_control_return(UINT);
#if !defined(NX_DISABLE_IPV4) && defined(NX_WEB_HTTPS_ENABLE)
#include "test_device_cert.c"
#define DEMO_STACK_SIZE 2048
#define PACKET_SIZE 256
#define SERVER_ADDRESS IP_ADDRESS(1,2,3,4)
#define SERVER_PORT 1234
#define LOOP 100
static NX_TCP_SESSION session_buffer[2];
static NX_TCPSERVER tcpserver;
static TX_THREAD server_thread;
static TX_THREAD test_threads[4];
static NX_TCP_SOCKET test_sockets[4];
static NX_IP ip_0;
static NX_PACKET_POOL pool_0;
static UINT error_counter;
static UCHAR pool_area[(sizeof(NX_PACKET) + PACKET_SIZE) * 64];
static UCHAR tcpserver_stack[DEMO_STACK_SIZE];
static UCHAR test_thread_stack[4][DEMO_STACK_SIZE];
static TX_SEMAPHORE sema_0;
static NX_SECURE_TLS_SESSION test_session[4];
extern const NX_SECURE_TLS_CRYPTO nx_crypto_tls_ciphers;
static CHAR crypto_metadata_server[20000 * 2];
static CHAR crypto_metadata_client[20000 * 2];
static UCHAR tls_packet_buffer[18500];
static NX_SECURE_X509_CERT certificate;
static NX_SECURE_X509_CERT trusted_certificate;
static NX_SECURE_X509_CERT remote_certificate, remote_issuer;
static UCHAR remote_cert_buffer[2000];
static UCHAR remote_issuer_buffer[2000];
static void thread_test_entry(ULONG thread_input);
static void thread_server_entry(ULONG thread_input);
extern void _nx_ram_network_driver_1024(NX_IP_DRIVER *driver_req_ptr);
#ifdef CTEST
VOID test_application_define(void *first_unused_memory)
#else
void netx_web_tcpserver_tls_faile_rst_test_application_define(void *first_unused_memory)
#endif
{
CHAR *pointer;
UINT status;
error_counter = 0;
/* Setup the working pointer. */
pointer = (CHAR *) first_unused_memory;
/* Create a helper thread for the server. */
tx_thread_create(&server_thread, "Server thread", thread_server_entry, 0,
pointer, DEMO_STACK_SIZE,
3, 3, TX_NO_TIME_SLICE, TX_AUTO_START);
pointer = pointer + DEMO_STACK_SIZE;
/* Initialize the NetX system. */
nx_system_initialize();
/* Create the packet pool. */
status = nx_packet_pool_create(&pool_0, "Packet Pool", PACKET_SIZE,
pool_area, sizeof(pool_area));
if (status)
error_counter++;
/* Create an IP instance. */
status = nx_ip_create(&ip_0, "IP 0", SERVER_ADDRESS,
0xFFFFFF00UL, &pool_0, _nx_ram_network_driver_1024,
pointer, 4096, 1);
pointer = pointer + 4096;
if (status)
error_counter++;
/* Enable ARP and supply ARP cache memory for the server IP instance. */
status = nx_arp_enable(&ip_0, (void *) pointer, 1024);
pointer = pointer + 1024;
if (status)
error_counter++;
/* Enable TCP traffic. */
status = nx_tcp_enable(&ip_0);
if (status)
error_counter++;
status = tx_semaphore_create(&sema_0, "Semaphore", 0);
if (status)
error_counter++;
}
static void connection_end(NX_TCPSERVER *server_ptr, NX_TCP_SESSION *session_ptr)
{
nx_secure_tls_session_end(&(session_ptr -> nx_tcp_session_tls_session), NX_NO_WAIT);
nx_tcp_socket_disconnect(&session_ptr -> nx_tcp_session_socket, NX_NO_WAIT);
nx_tcp_server_socket_unaccept(&session_ptr -> nx_tcp_session_socket);
}
static void thread_test_entry(ULONG thread_input)
{
NX_TCP_SOCKET *socket_ptr = &test_sockets[thread_input];
NX_SECURE_TLS_SESSION *session_ptr = &test_session[thread_input];
UINT status;
/* Initialize and create TLS session. */
status = nx_secure_tls_session_create(session_ptr, &nx_crypto_tls_ciphers, crypto_metadata_client, sizeof(crypto_metadata_client));
/* Check status. */
if (status)
{
error_counter++;
}
/* Allocate space for packet reassembly. */
status = nx_secure_tls_session_packet_buffer_set(session_ptr, tls_packet_buffer, sizeof(tls_packet_buffer));
/* Check status. */
if (status)
{
error_counter++;
}
/* Need to allocate space for the certificate coming in from the remote host. */
nx_secure_tls_remote_certificate_allocate(session_ptr, &remote_certificate, remote_cert_buffer, sizeof(remote_cert_buffer));
nx_secure_tls_remote_certificate_allocate(session_ptr, &remote_issuer, remote_issuer_buffer, sizeof(remote_issuer_buffer));
/* Create Client socket. */
status = nx_tcp_socket_create(&ip_0, socket_ptr, "Client Socket",
NX_IP_NORMAL, NX_FRAGMENT_OKAY, NX_IP_TIME_TO_LIVE, 200,
NX_NULL, NX_NULL);
/* Check for error. */
if (status)
{
error_counter++;
return;
}
/* Bind the socket. */
status = nx_tcp_client_socket_bind(socket_ptr, NX_ANY_PORT, NX_IP_PERIODIC_RATE);
/* Check for error. */
if (status)
{
error_counter++;
}
status = nx_tcp_client_socket_connect(socket_ptr, SERVER_ADDRESS, SERVER_PORT, NX_WAIT_FOREVER);
/* Check for error. */
if (status)
{
error_counter++;
}
status = nx_secure_tls_session_start(session_ptr, socket_ptr, NX_IP_PERIODIC_RATE);
if (!status)
{
error_counter++;
}
tx_thread_sleep(NX_IP_PERIODIC_RATE);
nx_secure_tls_session_end(session_ptr, NX_IP_PERIODIC_RATE);
nx_secure_tls_session_delete(session_ptr);
nx_tcp_socket_disconnect(socket_ptr, NX_NO_WAIT);
/* Unbind the socket. */
status = nx_tcp_client_socket_unbind(socket_ptr);
/* Check for error. */
if (status)
{
error_counter++;
}
nx_tcp_socket_delete(socket_ptr);
tx_semaphore_put(&sema_0);
}
/* Define the server thread. */
static void thread_server_entry(ULONG thread_input)
{
UINT i;
UINT status;
/* Print out test information banner. */
printf("NetX Test: Web TCPServer TLS Fail RST Test...........................");
/* Check for earlier error. */
if(error_counter)
{
printf("ERROR!\n");
test_control_return(1);
}
status = nx_tcpserver_create(&ip_0, &tcpserver, "TCP server",
NX_IP_NORMAL, NX_FRAGMENT_OKAY, NX_IP_TIME_TO_LIVE,
200, NX_NULL, NX_NULL, connection_end, NX_NULL, 60 * NX_IP_PERIODIC_RATE,
tcpserver_stack, sizeof(tcpserver_stack), session_buffer,
sizeof(session_buffer), 4, 1);
if (status)
{
error_counter++;
}
/* Initialize device certificate (used for all sessions in HTTPS server). */
memset(&certificate, 0, sizeof(certificate));
nx_secure_x509_certificate_initialize(&certificate, test_device_cert_der, test_device_cert_der_len, NX_NULL, 0, test_device_cert_key_der, test_device_cert_key_der_len, NX_SECURE_X509_KEY_TYPE_RSA_PKCS1_DER);
status = nx_tcpserver_tls_setup(&tcpserver, &nx_crypto_tls_ciphers,
crypto_metadata_server, sizeof(crypto_metadata_server),
tls_packet_buffer, sizeof(tls_packet_buffer),
&certificate, NX_NULL, 0, NX_NULL, 0, NX_NULL, 0);
if (status)
{
error_counter++;
}
status = nx_tcpserver_start(&tcpserver, SERVER_PORT, 20);
if (status)
{
error_counter++;
}
for (i = 0; i < sizeof(test_threads) / sizeof(TX_THREAD); i++)
{
tx_thread_create(&test_threads[i], "Test thread", thread_test_entry, i,
test_thread_stack[i], DEMO_STACK_SIZE,
4, 4, TX_NO_TIME_SLICE, TX_AUTO_START);
}
for (i = 0; i < sizeof(test_threads) / sizeof(TX_THREAD); i++)
{
if (tx_semaphore_get(&sema_0, 30 * NX_IP_PERIODIC_RATE))
{
error_counter++;
break;
}
}
nx_tcpserver_stop(&tcpserver);
nx_tcpserver_delete(&tcpserver);
if(error_counter)
{
printf("ERROR!\n");
test_control_return(1);
}
else
{
printf("SUCCESS!\n");
test_control_return(0);
}
}
#else
#ifdef CTEST
VOID test_application_define(void *first_unused_memory)
#else
void netx_web_tcpserver_tls_faile_rst_test_application_define(void *first_unused_memory)
#endif
{
/* Print out test information banner. */
printf("NetX Test: Web TCPServer TLS Fail RST Test...........................N/A\n");
test_control_return(3);
}
#endif
|
