@ -1,79 +1,171 @@
// Copyright (c) 2019-2020 The Hush developers
// Copyright (c) 2019-2020 The Hush developers
// Distributed under the GPLv3 software license, see the accompanying
// Distributed under the GPLv3 software license, see the accompanying
// file COPYING or https://www.gnu.org/licenses/gpl-3.0.en.html
// file COPYING or https://www.gnu.org/licenses/gpl-3.0.en.html
# include <openssl/conf.h> # include <wolfssl/options.h>
# include <openssl/ssl.h> # include <wolfssl/ssl.h>
# include <openssl/err.h> # include <wolfssl/openssl/dh.h>
# include "utiltls.h" # include <wolfssl/wolfcrypt/asn.h>
# include <boost/filesystem.hpp>
# include <boost/thread.hpp>
# include "../util.h"
# include "../protocol.h"
# include <boost/filesystem.hpp> # include <boost/filesystem.hpp>
# include <boost/thread.hpp> # include <boost/thread.hpp>
# include "tlsmanager.h" # include "tlsmanager.h"
# include "utiltls.h"
using namespace std ; using namespace std ;
namespace hush namespace hush
{ {
/**
static WOLFSSL_EVP_PKEY * mykey ;
* @ brief If verify_callback always returns 1 , the TLS / SSL handshake will not be terminated with respect to verification failures and the connection will be established . static WOLFSSL_X509 * mycert ;
*
* @ param preverify_ok // this is the 'dh crypto environment' to be shared between two peers and it is meant to be public, therefore
* @ param chainContext // it is OK to hard code it (or as an alternative to read it from a file)
* @ return int // ----
*/ // generated via: openssl dhparam -C 2048
int tlsCertVerificationCallback ( int preverify_ok , X509_STORE_CTX * chainContext ) static WOLFSSL_DH * get_dh2048 ( void )
{
static unsigned char dhp_2048 [ ] = {
0xFF , 0x4A , 0xA8 , 0x6C , 0x68 , 0xD4 , 0x4C , 0x41 , 0x73 , 0x8D ,
0xD8 , 0x14 , 0x57 , 0xF9 , 0x1C , 0x35 , 0x72 , 0x5F , 0xCD , 0x24 ,
0xCB , 0xD1 , 0x77 , 0x30 , 0xC2 , 0x9A , 0x69 , 0x01 , 0xCF , 0x01 ,
0xDE , 0xD4 , 0x67 , 0xD4 , 0xEE , 0x9A , 0x03 , 0x1C , 0x27 , 0x42 ,
0x06 , 0x3D , 0x1D , 0x91 , 0x27 , 0xCF , 0x1C , 0x17 , 0xB3 , 0xDC ,
0x9F , 0x6F , 0x12 , 0xC8 , 0x03 , 0x5C , 0x01 , 0xF3 , 0x27 , 0x7F ,
0x34 , 0x58 , 0xAE , 0xB9 , 0xA7 , 0xA9 , 0xCE , 0x5E , 0x25 , 0x7D ,
0x46 , 0x84 , 0xDD , 0xEE , 0x55 , 0xFB , 0xEA , 0x1C , 0xCD , 0x9B ,
0x96 , 0xC4 , 0x22 , 0x8C , 0x33 , 0x8B , 0xC7 , 0xE6 , 0xCC , 0x4C ,
0x77 , 0x1B , 0x7A , 0x46 , 0xDE , 0x33 , 0xAD , 0xBB , 0xFD , 0x2D ,
0xAD , 0x26 , 0xE1 , 0x27 , 0x48 , 0x94 , 0xA3 , 0x59 , 0xC5 , 0x10 ,
0x5A , 0x86 , 0x71 , 0x8D , 0xAA , 0x15 , 0x8B , 0xB2 , 0xCB , 0x70 ,
0xBE , 0x1F , 0x17 , 0xBD , 0xEB , 0x51 , 0xB1 , 0x76 , 0x0E , 0x24 ,
0x43 , 0xAA , 0x06 , 0xC0 , 0x97 , 0x01 , 0x25 , 0x52 , 0x30 , 0x7A ,
0x56 , 0x92 , 0x3D , 0x8A , 0x3A , 0xBC , 0xFA , 0x98 , 0x51 , 0x04 ,
0x1D , 0x9B , 0x05 , 0xB8 , 0x84 , 0x8C , 0x2F , 0x7A , 0x94 , 0x1E ,
0xAA , 0x51 , 0xF2 , 0x5D , 0x48 , 0x50 , 0x58 , 0x8D , 0x7E , 0xBA ,
0xD3 , 0xCC , 0xF2 , 0x92 , 0x28 , 0xB1 , 0x1C , 0x4B , 0x50 , 0x10 ,
0xFA , 0x7E , 0xDF , 0x8D , 0x23 , 0x1C , 0x8C , 0x65 , 0xE3 , 0x86 ,
0x16 , 0x67 , 0x88 , 0x9E , 0xFC , 0x8B , 0xC8 , 0x55 , 0x38 , 0x6E ,
0x79 , 0x06 , 0x6A , 0x6D , 0x72 , 0x75 , 0xA6 , 0xAC , 0x77 , 0x98 ,
0xDD , 0xB2 , 0x0B , 0xAA , 0x48 , 0x54 , 0xA9 , 0x07 , 0x7E , 0x8C ,
0x4C , 0x39 , 0x08 , 0x26 , 0x6D , 0x53 , 0xC2 , 0xDF , 0xE2 , 0xF0 ,
0xD6 , 0x8A , 0x4F , 0xB5 , 0x7A , 0x32 , 0xEE , 0x93 , 0x0E , 0x2A ,
0x81 , 0x2F , 0x3B , 0x1E , 0xE6 , 0x38 , 0xF8 , 0x3C , 0xF5 , 0x84 ,
0xB4 , 0xFB , 0x92 , 0x12 , 0x28 , 0xA3
} ;
static unsigned char dhg_2048 [ ] = {
0x02
} ;
WOLFSSL_DH * dh = wolfSSL_DH_new ( ) ;
if ( dh = = NULL ) {
return NULL ;
}
if ( wc_DhSetKey ( ( DhKey * ) dh - > internal , dhp_2048 , sizeof ( dhp_2048 ) , dhg_2048 , sizeof ( dhg_2048 ) ) ! = 0 ) {
wolfSSL_DH_free ( dh ) ;
return NULL ;
}
return dh ;
}
DH * tmp_dh_callback ( WOLFSSL * ssl , int is_export , int keylength )
{ {
return 1 ; LogPrint ( " tls " , " TLS: %s: %s():%d - Using Diffie-Hellman param for PFS: is_export=%d, keylength=%d \n " ,
__FILE__ , __func__ , __LINE__ , is_export , keylength ) ;
return get_dh2048 ( ) ;
} }
/**
* @ brief Wait for a given SSL connection event . int TLSManager : : waitFor ( SSLConnectionRoutine eRoutine , SOCKET hSocket , WOLFSSL * ssl , int timeoutSec , unsigned long & err_code )
*
* @ param eRoutine a SSLConnectionRoutine value which determines the type of the event .
* @ param hSocket
* @ param ssl pointer to an SSL instance .
* @ param timeoutSec timeout in seconds .
* @ return int returns nError corresponding to the connection event .
*/
int TLSManager : : waitFor ( SSLConnectionRoutine eRoutine , SOCKET hSocket , SSL * ssl , int timeoutSec )
{ {
int nErr = 0 ; int retOp = 0 ;
ERR_clear_error ( ) ; // clear the error queue
err_code = 0 ;
char err_buffer [ 1024 ] ;
while ( true )
{
// clear the current thread's error queue
wolfSSL_ERR_clear_error ( ) ;
while ( true ) {
switch ( eRoutine ) { switch ( eRoutine ) {
case SSL_CONNECT : case SSL_CONNECT :
nErr = SSL_connect ( ssl ) ; {
retOp = wolfSSL_connect ( ssl ) ;
if ( retOp = = 0 ) {
err_code = wolfSSL_ERR_get_error ( ) ;
const char * error_str = wolfSSL_ERR_error_string ( err_code , err_buffer ) ;
LogPrint ( " tls " , " TLS: WARNING: %s: %s():%d - SSL_CONNECT err: %s \n " ,
__FILE__ , __func__ , __LINE__ , err_buffer ) ;
return - 1 ;
}
}
break ; break ;
case SSL_ACCEPT : case SSL_ACCEPT :
nErr = SSL_accept ( ssl ) ; {
retOp = wolfSSL_accept ( ssl ) ;
if ( retOp = = 0 ) {
err_code = wolfSSL_ERR_get_error ( ) ;
const char * error_str = wolfSSL_ERR_error_string ( err_code , err_buffer ) ;
LogPrint ( " tls " , " TLS: WARNING: %s: %s():%d - SSL_ACCEPT err: %s \n " ,
__FILE__ , __func__ , __LINE__ , err_buffer ) ;
return - 1 ;
}
}
break ; break ;
case SSL_SHUTDOWN : case SSL_SHUTDOWN :
nErr = SSL_shutdown ( ssl ) ; {
if ( hSocket ! = INVALID_SOCKET ) {
std : : string disconnectedPeer ( " no info " ) ;
struct sockaddr_in addr ;
socklen_t serv_len = sizeof ( addr ) ;
int ret = getpeername ( hSocket , ( struct sockaddr * ) & addr , & serv_len ) ;
if ( ret = = 0 ) {
disconnectedPeer = std : : string ( inet_ntoa ( addr . sin_addr ) ) + " : " + std : : to_string ( ntohs ( addr . sin_port ) ) ;
}
LogPrint ( " tls " , " TLS: shutting down fd=%d, peer=%s \n " , hSocket , disconnectedPeer ) ;
}
retOp = wolfSSL_shutdown ( ssl ) ;
}
break ; break ;
default : default :
return - 1 ; return - 1 ;
} }
if ( eRoutine = = SSL_SHUTDOWN ) { if ( eRoutine = = SSL_SHUTDOWN ) {
if ( nErr > = 0 ) if ( retOp = = 0 ) {
LogPrint ( " tls " , " TLS: WARNING: %s: %s():%d - SSL_SHUTDOWN: The close_notify was sent but the peer did not send it back yet. \n " ,
__FILE__ , __func__ , __LINE__ ) ;
// do not call SSL_get_error() because it may misleadingly indicate an error even though no error occurred.
break ; break ;
} else if ( retOp = = 1 ) {
LogPrint ( " tls " , " TLS: %s: %s():%d - SSL_SHUTDOWN completed \n " , __FILE__ , __func__ , __LINE__ ) ;
break ;
} else {
LogPrint ( " tls " , " TLS: %s: %s():%d - SSL_SHUTDOWN failed \n " , __FILE__ , __func__ , __LINE__ ) ;
// the error will be read afterwards
}
} else { } else {
if ( nErr = = 1 ) if ( retOp = = 1 ) {
LogPrint ( " tls " , " TLS: %s: %s():%d - %s completed \n " , __FILE__ , __func__ , __LINE__ ,
eRoutine = = SSL_CONNECT ? " SSL_CONNECT " : " SSL_ACCEPT " ) ;
break ; break ;
}
} }
int sslErr = SSL_get_error ( ssl , nErr ) ; int sslErr = wolf SSL_get_error( ssl , retOp ) ;
if ( sslErr ! = SSL_ERROR_WANT_READ & & sslErr ! = SSL_ERROR_WANT_WRITE ) { if ( sslErr ! = WOLFSSL_ERROR_WANT_READ & & sslErr ! = WOLFSSL_ERROR_WANT_WRITE ) {
LogPrint ( " net " , " TLS: WARNING: %s: %s: ssl_err_code: %s; errno: %s \n " , __FILE__ , __func__ , ERR_error_string ( sslErr , NULL ) , strerror ( errno ) ) ; err_code = wolfSSL_ERR_get_error ( ) ;
nErr = - 1 ; const char * error_str = wolfSSL_ERR_error_string ( err_code , err_buffer ) ;
LogPrint ( " tls " , " TLS: WARNING: %s: %s():%d - routine(%d), sslErr[0x%x], retOp[%d], errno[0x%x], lib[0x%x], func[0x%x], reas[0x%x]-> err: %s \n " ,
__FILE__ , __func__ , __LINE__ ,
eRoutine , sslErr , retOp , errno , wolfSSL_ERR_GET_LIB ( err_code ) , ERR_GET_FUNC ( err_code ) , wolfSSL_ERR_GET_REASON ( err_code ) , err_buffer ) ;
retOp = - 1 ;
break ; break ;
} }
@ -83,66 +175,89 @@ int TLSManager::waitFor(SSLConnectionRoutine eRoutine, SOCKET hSocket, SSL* ssl,
struct timeval timeout = { timeoutSec , 0 } ; struct timeval timeout = { timeoutSec , 0 } ;
if ( sslErr = = SSL_ERROR_WANT_READ ) { if ( sslErr = = WOLF SSL_ERROR_WANT_READ) {
int result = select ( hSocket + 1 , & socketSet , NULL , NULL , & timeout ) ; int result = select ( hSocket + 1 , & socketSet , NULL , NULL , & timeout ) ;
if ( result = = 0 ) { if ( result = = 0 ) {
LogPrint ( " net " , " TLS: ERROR: %s: %s: WANT_READ timeout \n " , __FILE__ , __func__ ) ; LogPrint ( " tls " , " TLS: ERROR: %s: %s():%d - WANT_READ timeout on %s \n " , __FILE__ , __func__ , __LINE__ ,
nErr = - 1 ; ( eRoutine = = SSL_CONNECT ? " SSL_CONNECT " :
( eRoutine = = SSL_ACCEPT ? " SSL_ACCEPT " : " SSL_SHUTDOWN " ) ) ) ;
err_code = SELECT_TIMEDOUT ;
retOp = - 1 ;
break ; break ;
} else if ( result = = - 1 ) { } else if ( result = = - 1 ) {
LogPrint ( " net " , " TLS: ERROR: %s: %s: WANT_READ ssl_err_code: %s; errno: %s \n " , __FILE__ , __func__ , ERR_error_string ( sslErr , NULL ) , strerror ( errno ) ) ; LogPrint ( " tls " , " TLS: ERROR: %s: %s: WANT_READ ssl_err_code: 0x%x; errno: %s \n " ,
nErr = - 1 ; __FILE__ , __func__ , sslErr , strerror ( errno ) ) ;
retOp = - 1 ;
break ; break ;
} }
} else { } else {
int result = select ( hSocket + 1 , NULL , & socketSet , NULL , & timeout ) ; int result = select ( hSocket + 1 , NULL , & socketSet , NULL , & timeout ) ;
if ( result = = 0 ) { if ( result = = 0 ) {
LogPrint ( " net " , " TLS: ERROR: %s: %s: WANT_WRITE timeout \n " , __FILE__ , __func__ ) ; LogPrint ( " tls " , " TLS: ERROR: %s: %s():%d - WANT_WRITE timeout on %s \n " , __FILE__ , __func__ , __LINE__ ,
nErr = - 1 ; ( eRoutine = = SSL_CONNECT ? " SSL_CONNECT " :
( eRoutine = = SSL_ACCEPT ? " SSL_ACCEPT " : " SSL_SHUTDOWN " ) ) ) ;
err_code = SELECT_TIMEDOUT ;
retOp = - 1 ;
break ; break ;
} else if ( result = = - 1 ) { } else if ( result = = - 1 ) {
LogPrint ( " net " , " TLS: ERROR: %s: %s: WANT_WRITE ssl_err_code: %s; errno: %s \n " , __FILE__ , __func__ , ERR_error_string ( sslErr , NULL ) , strerror ( errno ) ) ; LogPrint ( " tls " , " TLS: ERROR: %s: %s: WANT_WRITE ssl_err_code: 0x%x; errno: %s \n " ,
nErr = - 1 ; __FILE__ , __func__ , sslErr , strerror ( errno ) ) ;
retOp = - 1 ;
break ; break ;
} }
} }
} }
return nErr ; return retOp ;
} }
/**
/**
* @ brief establish TLS connection to an address * @ brief establish TLS connection to an address
* *
* @ param hSocket socket * @ param hSocket socket
* @ param addrConnect the outgoing address * @ param addrConnect the outgoing address
* @ param tls_ctx_client TLS Client context * @ param tls_ctx_client TLS Client context
* @ return SSL * returns a ssl * if successful , otherwise returns NULL . * @ return WOLF SSL* returns a ssl * if successful , otherwise returns NULL .
*/ */
SSL * TLSManager : : connect ( SOCKET hSocket , const CAddress & addrConnect ) WOLF SSL* TLSManager : : connect ( SOCKET hSocket , const CAddress & addrConnect , unsigned long & err_code )
{ {
LogPrint ( " ne t" , " TLS: establishing connection tid=%X peerid=%s \n " , pthread_self ( ) , addrConnect . ToString ( ) ) ; LogPrint ( " tls " , " TLS: establishing connection ( tid = %X), ( peerid = %s) \n " , pthread_self ( ) , addrConnect . ToString ( ) ) ;
SSL * ssl = NULL ; err_code = 0 ;
char err_buffer [ 1024 ] ;
WOLFSSL * ssl = NULL ;
bool bConnectedTLS = false ; bool bConnectedTLS = false ;
if ( ( ssl = SSL_new ( tls_ctx_client ) ) ) { if ( ( ssl = wolfSSL_new ( tls_ctx_client ) ) ) {
if ( SSL_set_fd ( ssl , hSocket ) ) { if ( wolfSSL_set_fd ( ssl , hSocket ) ) {
if ( TLSManager : : waitFor ( SSL_CONNECT , hSocket , ssl , ( DEFAULT_CONNECT_TIMEOUT / 1000 ) ) = = 1 ) int ret = TLSManager : : waitFor ( SSL_CONNECT , hSocket , ssl , ( DEFAULT_CONNECT_TIMEOUT / 1000 ) , err_code ) ;
if ( ret = = 1 )
{
bConnectedTLS = true ; bConnectedTLS = true ;
}
} }
} }
else
{
err_code = wolfSSL_ERR_get_error ( ) ;
const char * error_str = wolfSSL_ERR_error_string ( err_code , err_buffer ) ;
LogPrint ( " tls " , " TLS: %s: %s():%d - SSL_new failed err: %s \n " ,
__FILE__ , __func__ , __LINE__ , err_buffer ) ;
}
if ( bConnectedTLS ) { if ( bConnectedTLS ) {
LogPrintf ( " TLS: connection to %s has been established. Using cipher: %s \n " , addrConnect . ToString ( ) , SSL_get_cipher ( ssl ) ) ; LogPrintf ( " TLS: connection to %s has been established (tlsv = %s 0x%04x / ssl = %s 0x%x ). Using cipher: %s \n " ,
addrConnect . ToString ( ) , wolfSSL_get_version ( ssl ) , wolfSSL_version ( ssl ) , wolfSSL_OpenSSL_version ( ) , wolfSSL_lib_version_hex ( ) , wolfSSL_get_cipher_name ( ssl ) ) ;
} else { } else {
LogPrintf ( " TLS: %s: TLS connection to %s failed \n " , __func__ , addrConnect . ToString ( ) ) ; LogPrintf ( " TLS: %s: %s():%d - TLS connection to %s failed (err_code 0x%X) \n " ,
__FILE__ , __func__ , __LINE__ , addrConnect . ToString ( ) , err_code ) ;
if ( ssl ) { if ( ssl ) {
SSL_free ( ssl ) ; wolf SSL_free( ssl ) ;
ssl = NULL ; ssl = NULL ;
} }
} }
return ssl ; return ssl ;
} }
/**
/**
@ -152,49 +267,84 @@ SSL* TLSManager::connect(SOCKET hSocket, const CAddress& addrConnect)
* @ param privateKeyFile private key file path * @ param privateKeyFile private key file path
* @ param certificateFile certificate key file path * @ param certificateFile certificate key file path
* @ param trustedDirs trusted directories * @ param trustedDirs trusted directories
* @ return SSL_CTX * returns the context . * @ return WOL SSL_CTX* returns the context .
*/ */
SSL_CTX * TLSManager : : initCtx ( WOLFSSL_CTX * TLSManager : : initCtx ( TLSContextType ctxType )
TLSContextType ctxType ,
const boost : : filesystem : : path & privateKeyFile ,
const boost : : filesystem : : path & certificateFile ,
const std : : vector < boost : : filesystem : : path > & trustedDirs )
{ {
if ( ! boost : : filesystem : : exists ( privateKeyFile ) | | LogPrintf ( " TLS: %s: %s():%d - Initializing %s context \n " ,
! boost : : filesystem : : exists ( certificateFile ) ) __FILE__ , __func__ , __LINE__ , ctxType = = SERVER_CONTEXT ? " server " : " client " ) ;
return NULL ;
if ( ! mykey | | ! mycert ) {
return NULL ;
}
bool bInitialized = false ; bool bInitialized = false ;
SSL_CTX * tlsCtx = NULL ; WOLF SSL_CTX* tlsCtx = NULL ;
if ( ( tlsCtx = SSL_CTX_new ( ctxType = = SERVER_CONTEXT ? TLS_server_method ( ) : TLS_client_method ( ) ) ) ) { byte * pem ;
SSL_CTX_set_mode ( tlsCtx , SSL_MODE_AUTO_RETRY ) ; int plen = 0 ;
int rootCertsNum = LoadDefaultRootCertificates ( tlsCtx ) ; if ( ( tlsCtx = wolfSSL_CTX_new ( ctxType = = SERVER_CONTEXT ? wolfTLSv1_3_server_method ( ) : wolfTLSv1_3_client_method ( ) ) ) ) {
int trustedPathsNum = 0 ; wolfSSL_CTX_set_mode ( tlsCtx , SSL_MODE_AUTO_RETRY ) ;
for ( boost : : filesystem : : path trustedDir : trustedDirs ) { // Disable TLS < 1.3 ... imho redundant, because v1.3 is required via method
if ( SSL_CTX_load_verify_locations ( tlsCtx , NULL , trustedDir . string ( ) . c_str ( ) ) = = 1 ) int ret = wolfSSL_CTX_set_min_proto_version ( tlsCtx , TLS1_3_VERSION ) ;
trustedPathsNum + + ; if ( ret = = 0 ) {
LogPrintf ( " TLS: WARNING: %s: %s():%d - failed to set min TLS version \n " , __FILE__ , __func__ , __LINE__ ) ;
} }
if ( rootCertsNum = = 0 & & trustedPathsNum = = 0 ) LogPrintf ( " TLS: %s: %s():%d - setting cipher list \n " , __FILE__ , __func__ , __LINE__ ) ;
LogPrintf ( " TLS: WARNING: %s: %s: failed to set up verified certificates. It will be impossible to verify peer certificates. \n " , __FILE__ , __func__ ) ;
SSL_CTX_set_verify ( tlsCtx , SSL_VERIFY_PEER , tlsCertVerificationCallback ) ; // Default TLSv1.3 cipher list is "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256"
// Nodes will randomly choose to prefer first cipher or the second, to create diversity on the network
// and not be in the situation where all nodes have the same list so the first is always used
if ( GetRand ( 100 ) > 50 ) {
if ( wolfSSL_CTX_set_cipher_list ( tlsCtx , " TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 " ) ) {
LogPrintf ( " %s: Preferring TLS_AES256-GCM-SHA384 \n " , __func__ ) ;
} else {
LogPrintf ( " %s: Setting preferred cipher failed !!! \n " , __func__ ) ;
}
} else {
if ( wolfSSL_CTX_set_cipher_list ( tlsCtx , " TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384 " ) ) {
LogPrintf ( " %s: Preferring TLS_AES256-GCM-SHA384 \n " , __func__ ) ;
} else {
LogPrintf ( " %s: Setting preferred cipher failed !!! \n " , __func__ ) ;
}
}
if ( ctxType = = SERVER_CONTEXT ) {
// In case server and client prefered ciphers are different, server preference has priority
wolfSSL_CTX_set_options ( tlsCtx , SSL_OP_CIPHER_SERVER_PREFERENCE ) ;
if ( SSL_CTX_use_certificate_file ( tlsCtx , certificateFile . string ( ) . c_str ( ) , SSL_FILETYPE_PEM ) > 0 ) { LogPrintf ( " TLS: %s: %s():%d - setting dh callback \n " , __FILE__ , __func__ , __LINE__ ) ;
if ( SSL_CTX_use_PrivateKey_file ( tlsCtx , privateKeyFile . string ( ) . c_str ( ) , SSL_FILETYPE_PEM ) > 0 ) { SSL_CTX_set_tmp_dh_callback ( tlsCtx , tmp_dh_callback ) ;
if ( SSL_CTX_check_private_key ( tlsCtx ) ) { }
bInitialized = true ;
// No certificate verification, all should be self-signed
wolfSSL_CTX_set_verify ( tlsCtx , WOLFSSL_VERIFY_NONE , NULL ) ;
WOLFSSL_EC_KEY * ec_key = NULL ;
ec_key = wolfSSL_EVP_PKEY_get0_EC_KEY ( mykey ) ;
if ( ec_key ! = NULL & & wolfSSL_PEM_write_mem_ECPrivateKey ( ec_key , NULL , NULL , 0 , & pem , & plen ) ) {
if ( wolfSSL_CTX_use_certificate ( tlsCtx , mycert ) > 0 ) {
if ( wolfSSL_CTX_use_PrivateKey_buffer ( tlsCtx , pem , plen , SSL_FILETYPE_PEM ) > 0 ) {
free ( pem ) ;
if ( wolfSSL_CTX_check_private_key ( tlsCtx ) ) {
bInitialized = true ;
} else {
LogPrintf ( " TLS: ERROR: %s: %s: private key does not match the certificate public key \n " , __FILE__ , __func__ ) ;
}
} else { } else {
LogPrintf ( " TLS: ERROR: %s: %s: private key does not match the certificate public key \n " , __FILE__ , __func__ ) ; LogPrintf ( " TLS: ERROR: %s: %s: failed to use private key file \n " , __FILE__ , __func__ ) ;
} }
} else } else {
LogPrintf ( " TLS: ERROR: %s: %s: failed to use privateKey file \n " , __FILE__ , __func__ ) ; LogPrintf ( " TLS: ERROR: %s: %s: failed to use certificate file \n " , __FILE__ , __func__ ) ;
} else { wolfSSL_ERR_dump_errors_fp ( stderr ) ;
LogPrintf ( " TLS: ERROR: %s: %s: failed to use certificate file \n " , __FILE__ , __func__ ) ; }
ERR_print_errors_fp ( stderr ) ;
} }
} else { } else {
LogPrintf ( " TLS: ERROR: %s: %s: failed to create TLS context \n " , __FILE__ , __func__ ) ; LogPrintf ( " TLS: ERROR: %s: %s: failed to create TLS context \n " , __FILE__ , __func__ ) ;
@ -202,97 +352,119 @@ SSL_CTX* TLSManager::initCtx(
if ( ! bInitialized ) { if ( ! bInitialized ) {
if ( tlsCtx ) { if ( tlsCtx ) {
SSL_CTX_free ( tlsCtx ) ; wolf SSL_CTX_free( tlsCtx ) ;
tlsCtx = NULL ; tlsCtx = NULL ;
} }
} }
SSL_CTX_set_cipher_list ( tlsCtx , " " ) ; // removes all <= TLS1.2 ciphers
// default is "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256"
// Nodes will randomly choose to prefer one suite or the other, to create diversity on the network
// and not be in the situation where all nodes have the same list so the first is always used
if ( GetRand ( 100 ) > 50 ) {
LogPrintf ( " %s: Preferring TLS_AES256-GCM-SHA384 \n " , __func__ ) ;
SSL_CTX_set_ciphersuites ( tlsCtx , " TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 " ) ;
} else {
LogPrintf ( " %s: Preferring TLS_CHACHA20-POLY1305 \n " , __func__ ) ;
SSL_CTX_set_ciphersuites ( tlsCtx , " TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384 " ) ;
}
/*
STACK_OF ( SSL_CIPHER ) * sk = SSL_CTX_get_ciphers ( tlsCtx ) ;
for ( int i = 0 ; i < sk_SSL_CIPHER_num ( sk ) ; i + + )
{
const SSL_CIPHER * c = sk_SSL_CIPHER_value ( sk , i ) ;
LogPrintf ( " %s: AVAILABLE CIPHER %s \n " , __func__ , SSL_CIPHER_get_name ( c ) ) ;
}
*/
return tlsCtx ; return tlsCtx ;
} }
/**
/**
* @ brief load the certificate credentials from file . * @ brief generates certificate credentials .
* *
* @ return true returns true is successful . * @ return true returns true is successful .
* @ return false returns false if an error has occured . * @ return false returns false if an error has occured .
*/ */
bool TLSManager : : prepareCredentials ( ) bool TLSManager : : prepareCredentials ( )
{ {
boost : : filesystem : : path mykey = NULL ;
defaultKeyPath ( GetDataDir ( ) / TLS_KEY_FILE_NAME ) , mycert = NULL ;
defaultCertPath ( GetDataDir ( ) / TLS_CERT_FILE_NAME ) ;
// Generating key and the self-signed certificate for it
CredentialsStatus credStatus = //
VerifyCredentials ( mykey = GenerateEcKey ( ) ;
boost : : filesystem : : path ( GetArg ( " -tlskeypath " , defaultKeyPath . string ( ) ) ) , if ( mykey ) {
boost : : filesystem : : path ( GetArg ( " -tlscertpath " , defaultCertPath . string ( ) ) ) , mycert = GenerateCertificate ( mykey ) ;
GetArg ( " -tlskeypwd " , " " ) ) ; if ( mycert ) {
if ( CheckKeyCert ( ) ) {
bool bPrepared = ( credStatus = = credOk ) ; LogPrintStr ( " TLS: New private key and self-signed certificate were generated successfully \n " ) ;
if ( ! bPrepared ) { return true ;
if ( ! mapArgs . count ( " -tlskeypath " ) & & ! mapArgs . count ( " -tlscertpath " ) ) {
// Default paths were used
if ( credStatus = = credAbsent ) {
// Generate new credentials (key and self-signed certificate on it) only if credentials were absent previously
//
bPrepared = GenerateCredentials (
defaultKeyPath ,
defaultCertPath ,
GetArg ( " -tlskeypwd " , " " ) ) ;
} }
//wolfSSL_X509_free(mycert);
} }
//wolfSSL_EVP_PKEY_free(mykey);
}
return false ;
}
bool TLSManager : : CheckKeyCert ( )
{
if ( ! mykey ) {
LogPrintf ( " Key is not generated!!! \n " ) ;
return false ;
}
if ( ! mycert ) {
LogPrintf ( " Certificate is not generated!!! \n " ) ;
return false ;
}
WOLFSSL_EC_KEY * eccKey = wolfSSL_EVP_PKEY_get1_EC_KEY ( mykey ) ;
if ( eccKey & & wc_ecc_check_key ( ( ecc_key * ) eccKey - > internal ) = = 0 ) {
wolfSSL_EC_KEY_free ( eccKey ) ;
} else {
LogPrintf ( " Generated ECC key check failed!!! \n " ) ;
return false ;
} }
return bPrepared ; if ( wolfSSL_X509_verify ( mycert , mykey ) = = WOLFSSL_SUCCESS ) {
return true ;
}
LogPrintf ( " Generated key and certificate do not match!!! \n " ) ;
return false ;
} }
/**
/**
* @ brief accept a TLS connection * @ brief accept a TLS connection
* *
* @ param hSocket the TLS socket . * @ param hSocket the TLS socket .
* @ param addr incoming address . * @ param addr incoming address .
* @ param tls_ctx_server TLS server context . * @ param tls_ctx_server TLS server context .
* @ return SSL * returns pointer to the ssl object if successful , otherwise returns NULL * @ return WOLF SSL* returns pointer to the ssl object if successful , otherwise returns NULL
*/ */
SSL * TLSManager : : accept ( SOCKET hSocket , const CAddress & addr ) WOLF SSL* TLSManager : : accept ( SOCKET hSocket , const CAddress & addr , unsigned long & err_code )
{ {
LogPrint ( " net " , " TLS: accepting connection from %s (tid = %X) \n " , addr . ToString ( ) , pthread_self ( ) ) ; LogPrint ( " tls " , " TLS: accepting connection from %s (tid = %X) \n " , addr . ToString ( ) , pthread_self ( ) ) ;
SSL * ssl = NULL ; err_code = 0 ;
char err_buffer [ 1024 ] ;
WOLFSSL * ssl = NULL ;
bool bAcceptedTLS = false ; bool bAcceptedTLS = false ;
if ( ( ssl = SSL_new ( tls_ctx_server ) ) ) { if ( ( ssl = wolfSSL_new ( tls_ctx_server ) ) ) {
if ( SSL_set_fd ( ssl , hSocket ) ) { if ( wolfSSL_set_fd ( ssl , hSocket ) ) {
if ( TLSManager : : waitFor ( SSL_ACCEPT , hSocket , ssl , ( DEFAULT_CONNECT_TIMEOUT / 1000 ) ) = = 1 ) int ret = TLSManager : : waitFor ( SSL_ACCEPT , hSocket , ssl , ( DEFAULT_CONNECT_TIMEOUT / 1000 ) , err_code ) ;
if ( ret = = 1 )
{
bAcceptedTLS = true ; bAcceptedTLS = true ;
}
} }
} }
else
{
err_code = wolfSSL_ERR_get_error ( ) ;
const char * error_str = wolfSSL_ERR_error_string ( err_code , err_buffer ) ;
LogPrint ( " tls " , " TLS: %s: %s():%d - SSL_new failed err: %s \n " ,
__FILE__ , __func__ , __LINE__ , err_buffer ) ;
}
if ( bAcceptedTLS ) { if ( bAcceptedTLS ) {
LogPrintf ( " TLS: connection from %s has been accepted. Using cipher: %s \n " , addr . ToString ( ) , SSL_get_cipher ( ssl ) ) ; LogPrintf ( " TLS: connection from %s has been accepted (tlsv = %s 0x%04x / ssl = %s 0x%x ). Using cipher: %s \n " ,
addr . ToString ( ) , wolfSSL_get_version ( ssl ) , wolfSSL_version ( ssl ) , wolfSSL_OpenSSL_version ( ) , wolfSSL_lib_version_hex ( ) , wolfSSL_get_cipher ( ssl ) ) ;
WOLFSSL_STACK * sk = wolfSSL_get_ciphers_compat ( ssl ) ;
for ( int i = 0 ; i < wolfSSL_sk_SSL_CIPHER_num ( sk ) ; i + + ) {
const WOLFSSL_CIPHER * c = wolfSSL_sk_SSL_CIPHER_value ( sk , i ) ;
LogPrint ( " tls " , " TLS: supporting cipher: %s \n " , wolfSSL_CIPHER_get_name ( c ) ) ;
}
} else { } else {
LogPrintf ( " TLS: ERROR: %s: %s: TLS connection from %s failed \n " , __FILE__ , __func__ , addr . ToString ( ) ) ; LogPrintf ( " TLS: %s: %s():%d - TLS connection from %s failed (err_code 0x%X) \n " ,
__FILE__ , __func__ , __LINE__ , addr . ToString ( ) , err_code ) ;
if ( ssl ) { if ( ssl ) {
SSL_free ( ssl ) ; SSL_free ( ssl ) ;
@ -302,6 +474,7 @@ SSL* TLSManager::accept(SOCKET hSocket, const CAddress& addr)
return ssl ; return ssl ;
} }
/**
/**
* @ brief Determines whether a string exists in the non - TLS address pool . * @ brief Determines whether a string exists in the non - TLS address pool .
* *
@ -316,6 +489,7 @@ bool TLSManager::isNonTLSAddr(const string& strAddr, const vector<NODE_ADDR>& vP
LOCK ( cs ) ; LOCK ( cs ) ;
return ( find ( vPool . begin ( ) , vPool . end ( ) , NODE_ADDR ( strAddr ) ) ! = vPool . end ( ) ) ; return ( find ( vPool . begin ( ) , vPool . end ( ) , NODE_ADDR ( strAddr ) ) ! = vPool . end ( ) ) ;
} }
/**
/**
* @ brief Removes non - TLS node addresses based on timeout . * @ brief Removes non - TLS node addresses based on timeout .
* *
@ -331,7 +505,7 @@ void TLSManager::cleanNonTLSPool(std::vector<NODE_ADDR>& vPool, CCriticalSection
BOOST_FOREACH ( NODE_ADDR nodeAddr , vPool ) { BOOST_FOREACH ( NODE_ADDR nodeAddr , vPool ) {
if ( ( GetTimeMillis ( ) - nodeAddr . time ) > = 900000 ) { if ( ( GetTimeMillis ( ) - nodeAddr . time ) > = 900000 ) {
vDeleted . push_back ( nodeAddr ) ; vDeleted . push_back ( nodeAddr ) ;
LogPrint ( " ne t" , " TLS: Node %s is deleted from the non-TLS pool \n " , nodeAddr . ipAddr ) ; LogPrint ( " tls " , " TLS: Node %s is deleted from the non-TLS pool \n " , nodeAddr . ipAddr ) ;
} }
} }
@ -386,16 +560,16 @@ int TLSManager::threadSocketHandler(CNode* pnode, fd_set& fdsetRecv, fd_set& fds
LOCK ( pnode - > cs_hSocket ) ; LOCK ( pnode - > cs_hSocket ) ;
if ( pnode - > hSocket = = INVALID_SOCKET ) { if ( pnode - > hSocket = = INVALID_SOCKET ) {
LogPrint ( " ne t" , " Receive: connection with %s is already closed \n " , pnode - > addr . ToString ( ) ) ; LogPrint ( " tls " , " Receive: connection with %s is already closed \n " , pnode - > addr . ToString ( ) ) ;
return - 1 ; return - 1 ;
} }
bIsSSL = ( pnode - > ssl ! = NULL ) ; bIsSSL = ( pnode - > ssl ! = NULL ) ;
if ( bIsSSL ) { if ( bIsSSL ) {
ERR_clear_error ( ) ; // clear the error queue, otherwise we may be reading an old error that occurred previously in the current thread
wolfSSL_ ERR_clear_error( ) ; // clear the error queue, otherwise we may be reading an old error that occurred previously in the current thread
nBytes = SSL_read ( pnode - > ssl , pchBuf , sizeof ( pchBuf ) ) ; nBytes = wolf SSL_read( pnode - > ssl , pchBuf , sizeof ( pchBuf ) ) ;
nRet = SSL_get_error ( pnode - > ssl , nBytes ) ; nRet = wolf SSL_get_error( pnode - > ssl , nBytes ) ;
} else { } else {
nBytes = recv ( pnode - > hSocket , pchBuf , sizeof ( pchBuf ) , MSG_DONTWAIT ) ; nBytes = recv ( pnode - > hSocket , pchBuf , sizeof ( pchBuf ) , MSG_DONTWAIT ) ;
nRet = WSAGetLastError ( ) ; nRet = WSAGetLastError ( ) ;
@ -409,20 +583,35 @@ int TLSManager::threadSocketHandler(CNode* pnode, fd_set& fdsetRecv, fd_set& fds
pnode - > nRecvBytes + = nBytes ; pnode - > nRecvBytes + = nBytes ;
pnode - > RecordBytesRecv ( nBytes ) ; pnode - > RecordBytesRecv ( nBytes ) ;
} else if ( nBytes = = 0 ) { } else if ( nBytes = = 0 ) {
if ( bIsSSL ) {
unsigned long error = ERR_get_error ( ) ;
const char * error_str = ERR_error_string ( error , NULL ) ;
LogPrint ( " tls " , " TLS: WARNING: %s: %s():%d - SSL_read err: %s \n " ,
__FILE__ , __func__ , __LINE__ , error_str ) ;
}
// socket closed gracefully (peer disconnected)
// socket closed gracefully (peer disconnected)
//
//
if ( ! pnode - > fDisconnect ) if ( ! pnode - > fDisconnect )
LogPrint ( " net " , " socket closed (%s) \n " , pnode - > addr . ToString ( ) ) ; LogPrint ( " tls " , " socket closed (%s) \n " , pnode - > addr . ToString ( ) ) ;
pnode - > CloseSocketDisconnect ( ) ; pnode - > CloseSocketDisconnect ( ) ;
} else if ( nBytes < 0 ) { } else if ( nBytes < 0 ) {
// error
// error
//
//
if ( bIsSSL ) { if ( bIsSSL ) {
if ( nRet ! = SSL_ERROR_WANT_READ & & nRet ! = SSL_ERROR_WANT_WRITE ) // SSL_read() operation has to be repeated because of SSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE (https://wiki.openssl.org/index.php/Manual:SSL_read(3)#NOTES)
if ( nRet ! = WOLF SSL_ERROR_WANT_READ& & nRet ! = WOLF SSL_ERROR_WANT_WRITE)
{ {
if ( ! pnode - > fDisconnect ) if ( ! pnode - > fDisconnect )
LogPrintf ( " ERROR: SSL_read %s \n " , ERR_error_string ( nRet , NULL ) ) ; LogPrintf ( " TSL: ERROR: SSL_read %s\n " , ERR_error_string ( nRet , NULL ) ) ;
pnode - > CloseSocketDisconnect ( ) ; pnode - > CloseSocketDisconnect ( ) ;
unsigned long error = ERR_get_error ( ) ;
const char * error_str = ERR_error_string ( error , NULL ) ;
LogPrint ( " tls " , " TLS: WARNING: %s: %s():%d - SSL_read - code[0x%x], err: %s \n " ,
__FILE__ , __func__ , __LINE__ , nRet , error_str ) ;
} else { } else {
// preventive measure from exhausting CPU usage
// preventive measure from exhausting CPU usage
//
//
@ -431,7 +620,7 @@ int TLSManager::threadSocketHandler(CNode* pnode, fd_set& fdsetRecv, fd_set& fds
} else { } else {
if ( nRet ! = WSAEWOULDBLOCK & & nRet ! = WSAEMSGSIZE & & nRet ! = WSAEINTR & & nRet ! = WSAEINPROGRESS ) { if ( nRet ! = WSAEWOULDBLOCK & & nRet ! = WSAEMSGSIZE & & nRet ! = WSAEINTR & & nRet ! = WSAEINPROGRESS ) {
if ( ! pnode - > fDisconnect ) if ( ! pnode - > fDisconnect )
LogPrintf ( " ERROR: socket recv %s \n " , NetworkErrorString ( nRet ) ) ; LogPrintf ( " TSL: ERROR: socket recv %s\n " , NetworkErrorString ( nRet ) ) ;
pnode - > CloseSocketDisconnect ( ) ; pnode - > CloseSocketDisconnect ( ) ;
} }
} }
@ -448,8 +637,10 @@ int TLSManager::threadSocketHandler(CNode* pnode, fd_set& fdsetRecv, fd_set& fds
if ( lockSend ) if ( lockSend )
SocketSendData ( pnode ) ; SocketSendData ( pnode ) ;
} }
return 0 ; return 0 ;
} }
/**
/**
* @ brief Initialization of the server and client contexts * @ brief Initialization of the server and client contexts
* *
@ -460,44 +651,23 @@ bool TLSManager::initialize()
{ {
bool bInitializationStatus = false ; bool bInitializationStatus = false ;
// Initialization routines for the OpenSSL library
// Initialization routines for the WolfSSL library
SSL_load_error_strings ( ) ; //
ERR_load_crypto_strings ( ) ; wolfSSL_load_error_strings ( ) ;
OpenSSL_add_ssl_algorithms ( ) ; // OpenSSL_add_ssl_algorithms() always returns "1", so it is safe to discard the return value.
wolfSSL_ERR_load_crypto_strings ( ) ;
wolfSSL_library_init ( ) ;
namespace fs = boost : : filesystem ;
fs : : path certFile = GetArg ( " -tlscertpath " , " " ) ;
if ( ! fs : : exists ( certFile ) )
certFile = ( GetDataDir ( ) / TLS_CERT_FILE_NAME ) ;
fs : : path privKeyFile = GetArg ( " -tlskeypath " , " " ) ;
if ( ! fs : : exists ( privKeyFile ) ) {
privKeyFile = ( GetDataDir ( ) / TLS_KEY_FILE_NAME ) ;
}
std : : vector < fs : : path > trustedDirs ;
fs : : path trustedDir = GetArg ( " -tlstrustdir " , " " ) ;
if ( fs : : exists ( trustedDir ) ) {
// Use only the specified trusted directory
trustedDirs . push_back ( trustedDir ) ;
} else {
// If specified directory can't be used, then setting the default trusted directories
trustedDirs = GetDefaultTrustedDirectories ( ) ;
}
for ( fs : : path dir : trustedDirs )
LogPrintf ( " TLS: trusted directory '%s' will be used \n " , dir . string ( ) . c_str ( ) ) ;
// Initialization of the server and client contexts
// Initialization of the server and client contexts
if ( ( tls_ctx_server = TLSManager : : initCtx ( SERVER_CONTEXT , privKeyFile , certFile , trustedDirs ) ) ) //
if ( ( tls_ctx_server = TLSManager : : initCtx ( SERVER_CONTEXT ) ) )
{ {
if ( ( tls_ctx_client = TLSManager : : initCtx ( CLIENT_CONTEXT , privKeyFile , certFile , trustedDirs ) ) ) if ( ( tls_ctx_client = TLSManager : : initCtx ( CLIENT_CONTEXT ) ) )
{ {
LogPrint ( " ne t" , " TLS: contexts are initialized \n " ) ; LogPrint ( " tls " , " TLS: contexts are initialized \n " ) ;
bInitializationStatus = true ; bInitializationStatus = true ;
} else { } else {
LogPrintf ( " TLS: ERROR: %s: %s: failed to initialize TLS client context \n " , __FILE__ , __func__ ) ; LogPrintf ( " TLS: ERROR: %s: %s: failed to initialize TLS client context \n " , __FILE__ , __func__ ) ;
SSL_CTX_free ( tls_ctx_server ) ; wolfSSL_CTX_free ( tls_ctx_server ) ;
} }
} else { } else {
LogPrintf ( " TLS: ERROR: %s: %s: failed to initialize TLS server context \n " , __FILE__ , __func__ ) ; LogPrintf ( " TLS: ERROR: %s: %s: failed to initialize TLS server context \n " , __FILE__ , __func__ ) ;
