/src/openssl31/ssl/d1_srtp.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2011-2020 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | /* |
11 | | * DTLS code by Eric Rescorla <ekr@rtfm.com> |
12 | | * |
13 | | * Copyright (C) 2006, Network Resonance, Inc. Copyright (C) 2011, RTFM, Inc. |
14 | | */ |
15 | | |
16 | | #include <stdio.h> |
17 | | #include <openssl/objects.h> |
18 | | #include "ssl_local.h" |
19 | | |
20 | | #ifndef OPENSSL_NO_SRTP |
21 | | |
22 | | static SRTP_PROTECTION_PROFILE srtp_known_profiles[] = { |
23 | | { |
24 | | "SRTP_AES128_CM_SHA1_80", |
25 | | SRTP_AES128_CM_SHA1_80, |
26 | | }, |
27 | | { |
28 | | "SRTP_AES128_CM_SHA1_32", |
29 | | SRTP_AES128_CM_SHA1_32, |
30 | | }, |
31 | | { |
32 | | "SRTP_AEAD_AES_128_GCM", |
33 | | SRTP_AEAD_AES_128_GCM, |
34 | | }, |
35 | | { |
36 | | "SRTP_AEAD_AES_256_GCM", |
37 | | SRTP_AEAD_AES_256_GCM, |
38 | | }, |
39 | | {0} |
40 | | }; |
41 | | |
42 | | static int find_profile_by_name(char *profile_name, |
43 | | SRTP_PROTECTION_PROFILE **pptr, size_t len) |
44 | 0 | { |
45 | 0 | SRTP_PROTECTION_PROFILE *p; |
46 | |
|
47 | 0 | p = srtp_known_profiles; |
48 | 0 | while (p->name) { |
49 | 0 | if ((len == strlen(p->name)) |
50 | 0 | && strncmp(p->name, profile_name, len) == 0) { |
51 | 0 | *pptr = p; |
52 | 0 | return 0; |
53 | 0 | } |
54 | | |
55 | 0 | p++; |
56 | 0 | } |
57 | | |
58 | 0 | return 1; |
59 | 0 | } |
60 | | |
61 | | static int ssl_ctx_make_profiles(const char *profiles_string, |
62 | | STACK_OF(SRTP_PROTECTION_PROFILE) **out) |
63 | 0 | { |
64 | 0 | STACK_OF(SRTP_PROTECTION_PROFILE) *profiles; |
65 | |
|
66 | 0 | char *col; |
67 | 0 | char *ptr = (char *)profiles_string; |
68 | 0 | SRTP_PROTECTION_PROFILE *p; |
69 | |
|
70 | 0 | if ((profiles = sk_SRTP_PROTECTION_PROFILE_new_null()) == NULL) { |
71 | 0 | ERR_raise(ERR_LIB_SSL, SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES); |
72 | 0 | return 1; |
73 | 0 | } |
74 | | |
75 | 0 | do { |
76 | 0 | col = strchr(ptr, ':'); |
77 | |
|
78 | 0 | if (!find_profile_by_name(ptr, &p, col ? (size_t)(col - ptr) |
79 | 0 | : strlen(ptr))) { |
80 | 0 | if (sk_SRTP_PROTECTION_PROFILE_find(profiles, p) >= 0) { |
81 | 0 | ERR_raise(ERR_LIB_SSL, SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST); |
82 | 0 | goto err; |
83 | 0 | } |
84 | | |
85 | 0 | if (!sk_SRTP_PROTECTION_PROFILE_push(profiles, p)) { |
86 | 0 | ERR_raise(ERR_LIB_SSL, SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES); |
87 | 0 | goto err; |
88 | 0 | } |
89 | 0 | } else { |
90 | 0 | ERR_raise(ERR_LIB_SSL, SSL_R_SRTP_UNKNOWN_PROTECTION_PROFILE); |
91 | 0 | goto err; |
92 | 0 | } |
93 | | |
94 | 0 | if (col) |
95 | 0 | ptr = col + 1; |
96 | 0 | } while (col); |
97 | | |
98 | 0 | sk_SRTP_PROTECTION_PROFILE_free(*out); |
99 | |
|
100 | 0 | *out = profiles; |
101 | |
|
102 | 0 | return 0; |
103 | 0 | err: |
104 | 0 | sk_SRTP_PROTECTION_PROFILE_free(profiles); |
105 | 0 | return 1; |
106 | 0 | } |
107 | | |
108 | | int SSL_CTX_set_tlsext_use_srtp(SSL_CTX *ctx, const char *profiles) |
109 | 0 | { |
110 | 0 | return ssl_ctx_make_profiles(profiles, &ctx->srtp_profiles); |
111 | 0 | } |
112 | | |
113 | | int SSL_set_tlsext_use_srtp(SSL *s, const char *profiles) |
114 | 0 | { |
115 | 0 | return ssl_ctx_make_profiles(profiles, &s->srtp_profiles); |
116 | 0 | } |
117 | | |
118 | | STACK_OF(SRTP_PROTECTION_PROFILE) *SSL_get_srtp_profiles(SSL *s) |
119 | 14.5k | { |
120 | 14.5k | if (s != NULL) { |
121 | 14.5k | if (s->srtp_profiles != NULL) { |
122 | 0 | return s->srtp_profiles; |
123 | 14.5k | } else if ((s->ctx != NULL) && (s->ctx->srtp_profiles != NULL)) { |
124 | 0 | return s->ctx->srtp_profiles; |
125 | 0 | } |
126 | 14.5k | } |
127 | | |
128 | 14.5k | return NULL; |
129 | 14.5k | } |
130 | | |
131 | | SRTP_PROTECTION_PROFILE *SSL_get_selected_srtp_profile(SSL *s) |
132 | 0 | { |
133 | 0 | return s->srtp_profile; |
134 | 0 | } |
135 | | #endif |