nginx: src/event/quic/ngx_event_quic

annotate src/event/quic/ngx_event_quic_ssl.c @ 8782:b3f6ad181df4 quic

QUIC: refactored CRYPTO and STREAM buffer ordering. Generic function ngx_quic_order_bufs() is introduced. This function creates and maintains a chain of buffers with holes. Holes are marked with b->sync flag. Several buffers and holes in this chain may share the same underlying memory buffer. When processing STREAM frames with this function, frame data is copied only once to the right place in the stream input chain. Previously data could be copied twice. First when buffering an out-of-order frame data, and then when filling stream buffer from ordered frame queue. Now there's only one data chain for both tasks.

author	Roman Arutyunyan <arut@nginx.com>
date	Tue, 25 May 2021 13:55:12 +0300
parents	4117aa7fa38e
children	80d396fd8ee8

rev	line source
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	1
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	2 /*
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	3 * Copyright (C) Nginx, Inc.
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	4 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	5
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	6
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	7 #include <ngx_config.h>
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	8 #include <ngx_core.h>
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	9 #include <ngx_event.h>
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	10 #include <ngx_event_quic_connection.h>
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	11
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	12
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	13 /*
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	14 * 7.4. Cryptographic Message Buffering
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	15 * Implementations MUST support buffering at least 4096 bytes of data
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	16 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	17 #define NGX_QUIC_MAX_BUFFERED 65535
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	18
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	19
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	20 #if BORINGSSL_API_VERSION >= 10
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	21 static int ngx_quic_set_read_secret(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	22 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	23 const uint8_t *secret, size_t secret_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	24 static int ngx_quic_set_write_secret(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	25 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	26 const uint8_t *secret, size_t secret_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	27 #else
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	28 static int ngx_quic_set_encryption_secrets(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	29 enum ssl_encryption_level_t level, const uint8_t *read_secret,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	30 const uint8_t *write_secret, size_t secret_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	31 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	32
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	33 static int ngx_quic_add_handshake_data(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	34 enum ssl_encryption_level_t level, const uint8_t *data, size_t len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	35 static int ngx_quic_flush_flight(ngx_ssl_conn_t *ssl_conn);
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	36 static ngx_int_t ngx_quic_crypto_input(ngx_connection_t c, ngx_chain_t data);
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	37
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	38
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	39 static SSL_QUIC_METHOD quic_method = {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	40 #if BORINGSSL_API_VERSION >= 10
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	41 ngx_quic_set_read_secret,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	42 ngx_quic_set_write_secret,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	43 #else
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	44 ngx_quic_set_encryption_secrets,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	45 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	46 ngx_quic_add_handshake_data,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	47 ngx_quic_flush_flight,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	48 ngx_quic_send_alert,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	49 };
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	50
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	51
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	52 #if BORINGSSL_API_VERSION >= 10
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	53
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	54 static int
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	55 ngx_quic_set_read_secret(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	56 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	57 const uint8_t *rsecret, size_t secret_len)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	58 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	59 ngx_connection_t *c;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	60 ngx_quic_connection_t *qc;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	61
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	62 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	63 qc = ngx_quic_get_connection(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	64
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	65 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	66 "quic ngx_quic_set_read_secret() level:%d", level);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	67 #ifdef NGX_QUIC_DEBUG_CRYPTO
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	68 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	69 "quic read secret len:%uz %*xs", secret_len,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	70 secret_len, rsecret);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	71 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	72
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	73 return ngx_quic_keys_set_encryption_secret(c->pool, 0, qc->keys, level,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	74 cipher, rsecret, secret_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	75 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	76
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	77
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	78 static int
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	79 ngx_quic_set_write_secret(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	80 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	81 const uint8_t *wsecret, size_t secret_len)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	82 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	83 ngx_connection_t *c;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	84 ngx_quic_connection_t *qc;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	85
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	86 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	87 qc = ngx_quic_get_connection(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	88
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	89 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	90 "quic ngx_quic_set_write_secret() level:%d", level);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	91 #ifdef NGX_QUIC_DEBUG_CRYPTO
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	92 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	93 "quic write secret len:%uz %*xs", secret_len,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	94 secret_len, wsecret);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	95 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	96
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	97 return ngx_quic_keys_set_encryption_secret(c->pool, 1, qc->keys, level,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	98 cipher, wsecret, secret_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	99 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	100
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	101 #else
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	102
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	103 static int
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	104 ngx_quic_set_encryption_secrets(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	105 enum ssl_encryption_level_t level, const uint8_t *rsecret,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	106 const uint8_t *wsecret, size_t secret_len)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	107 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	108 ngx_connection_t *c;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	109 const SSL_CIPHER *cipher;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	110 ngx_quic_connection_t *qc;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	111
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	112 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	113 qc = ngx_quic_get_connection(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	114
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	115 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	116 "quic ngx_quic_set_encryption_secrets() level:%d", level);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	117 #ifdef NGX_QUIC_DEBUG_CRYPTO
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	118 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	119 "quic read secret len:%uz %*xs", secret_len,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	120 secret_len, rsecret);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	121 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	122
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	123 cipher = SSL_get_current_cipher(ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	124
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	125 if (ngx_quic_keys_set_encryption_secret(c->pool, 0, qc->keys, level,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	126 cipher, rsecret, secret_len)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	127 != 1)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	128 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	129 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	130 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	131
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	132 if (level == ssl_encryption_early_data) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	133 return 1;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	134 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	135
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	136 #ifdef NGX_QUIC_DEBUG_CRYPTO
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	137 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	138 "quic write secret len:%uz %*xs", secret_len,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	139 secret_len, wsecret);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	140 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	141
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	142 return ngx_quic_keys_set_encryption_secret(c->pool, 1, qc->keys, level,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	143 cipher, wsecret, secret_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	144 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	145
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	146 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	147
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	148
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	149 static int
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	150 ngx_quic_add_handshake_data(ngx_ssl_conn_t *ssl_conn,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	151 enum ssl_encryption_level_t level, const uint8_t *data, size_t len)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	152 {
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	153 u_char p, end;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	154 size_t client_params_len;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	155 const uint8_t *client_params;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	156 ngx_quic_tp_t ctp;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	157 ngx_quic_frame_t *frame;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	158 ngx_connection_t *c;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	159 ngx_quic_send_ctx_t *ctx;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	160 ngx_quic_connection_t *qc;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	161
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	162 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	163 qc = ngx_quic_get_connection(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	164
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	165 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	166 "quic ngx_quic_add_handshake_data");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	167
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	168 if (!qc->client_tp_done) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	169 /*
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	170 * things to do once during handshake: check ALPN and transport
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	171 * parameters; we want to break handshake if something is wrong
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	172 * here;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	173 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	174
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	175 #if defined(TLSEXT_TYPE_application_layer_protocol_negotiation)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	176 if (qc->conf->require_alpn) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	177 unsigned int len;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	178 const unsigned char *data;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	179
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	180 SSL_get0_alpn_selected(ssl_conn, &data, &len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	181
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	182 if (len == 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	183 qc->error = 0x100 + SSL_AD_NO_APPLICATION_PROTOCOL;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	184 qc->error_reason = "unsupported protocol in ALPN extension";
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	185
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	186 ngx_log_error(NGX_LOG_INFO, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	187 "quic unsupported protocol in ALPN extension");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	188 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	189 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	190 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	191 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	192
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	193 SSL_get_peer_quic_transport_params(ssl_conn, &client_params,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	194 &client_params_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	195
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	196 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	197 "quic SSL_get_peer_quic_transport_params():"
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	198 " params_len:%ui", client_params_len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	199
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	200 if (client_params_len == 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	201 /* quic-tls 8.2 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	202 qc->error = NGX_QUIC_ERR_CRYPTO(SSL_AD_MISSING_EXTENSION);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	203 qc->error_reason = "missing transport parameters";
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	204
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	205 ngx_log_error(NGX_LOG_INFO, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	206 "missing transport parameters");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	207 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	208 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	209
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	210 p = (u_char *) client_params;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	211 end = p + client_params_len;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	212
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	213 /* defaults for parameters not sent by client */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	214 ngx_memcpy(&ctp, &qc->ctp, sizeof(ngx_quic_tp_t));
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	215
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	216 if (ngx_quic_parse_transport_params(p, end, &ctp, c->log)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	217 != NGX_OK)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	218 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	219 qc->error = NGX_QUIC_ERR_TRANSPORT_PARAMETER_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	220 qc->error_reason = "failed to process transport parameters";
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	221
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	222 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	223 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	224
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	225 if (ngx_quic_apply_transport_params(c, &ctp) != NGX_OK) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	226 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	227 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	228
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	229 qc->client_tp_done = 1;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	230 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	231
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	232 ctx = ngx_quic_get_send_ctx(qc, level);
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	233
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	234 frame = ngx_quic_alloc_frame(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	235 if (frame == NULL) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	236 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	237 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	238
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	239 frame->data = ngx_quic_copy_buf(c, (u_char *) data, len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	240 if (frame->data == NGX_CHAIN_ERROR) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	241 return 0;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	242 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	243
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	244 frame->level = level;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	245 frame->type = NGX_QUIC_FT_CRYPTO;
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	246 frame->u.crypto.offset = ctx->crypto_sent;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	247 frame->u.crypto.length = len;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	248
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	249 ctx->crypto_sent += len;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	250
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	251 ngx_quic_queue_frame(qc, frame);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	252
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	253 return 1;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	254 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	255
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	256
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	257 static int
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	258 ngx_quic_flush_flight(ngx_ssl_conn_t *ssl_conn)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	259 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	260 #if (NGX_DEBUG)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	261 ngx_connection_t *c;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	262
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	263 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	264
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	265 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	266 "quic ngx_quic_flush_flight()");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	267 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	268 return 1;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	269 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	270
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	271
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	272 ngx_int_t
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	273 ngx_quic_handle_crypto_frame(ngx_connection_t c, ngx_quic_header_t pkt,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	274 ngx_quic_frame_t *frame)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	275 {
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	276 size_t len;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	277 uint64_t last;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	278 ngx_buf_t *b;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	279 ngx_chain_t cl, *ll;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	280 ngx_quic_send_ctx_t *ctx;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	281 ngx_quic_connection_t *qc;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	282 ngx_quic_crypto_frame_t *f;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	283
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	284 qc = ngx_quic_get_connection(c);
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	285 ctx = ngx_quic_get_send_ctx(qc, pkt->level);
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	286 f = &frame->u.crypto;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	287
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	288 /* no overflow since both values are 62-bit */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	289 last = f->offset + f->length;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	290
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	291 if (last > ctx->crypto_received + NGX_QUIC_MAX_BUFFERED) {
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	292 qc->error = NGX_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	293 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	294 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	295
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	296 if (last <= ctx->crypto_received) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	297 if (pkt->level == ssl_encryption_initial) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	298 /* speeding up handshake completion */
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	299
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	300 if (!ngx_queue_empty(&ctx->sent)) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	301 ngx_quic_resend_frames(c, ctx);
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	302
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	303 ctx = ngx_quic_get_send_ctx(qc, ssl_encryption_handshake);
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	304 while (!ngx_queue_empty(&ctx->sent)) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	305 ngx_quic_resend_frames(c, ctx);
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	306 }
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	307 }
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	308 }
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	309
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	310 return NGX_OK;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	311 }
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	312
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	313 if (f->offset > ctx->crypto_received) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	314 return ngx_quic_order_bufs(c, &ctx->crypto, frame->data,
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	315 f->offset - ctx->crypto_received);
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	316 }
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	317
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	318 ngx_quic_trim_bufs(frame->data, ctx->crypto_received - f->offset);
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	319
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	320 if (ngx_quic_crypto_input(c, frame->data) != NGX_OK) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	321 return NGX_ERROR;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	322 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	323
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	324 ngx_quic_trim_bufs(ctx->crypto, last - ctx->crypto_received);
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	325 ctx->crypto_received = last;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	326
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	327 cl = ctx->crypto;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	328 ll = &cl;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	329 len = 0;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	330
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	331 while (*ll) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	332 b = (*ll)->buf;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	333
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	334 if (b->sync && b->pos != b->last) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	335 /* hole */
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	336 break;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	337 }
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	338
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	339 len += b->last - b->pos;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	340 ll = &(*ll)->next;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	341 }
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	342
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	343 ctx->crypto_received += len;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	344 ctx->crypto = *ll;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	345 *ll = NULL;
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	346
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	347 if (cl) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	348 if (ngx_quic_crypto_input(c, cl) != NGX_OK) {
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	349 return NGX_ERROR;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	350 }
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	351
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	352 ngx_quic_free_bufs(c, cl);
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	353 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	354
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	355 return NGX_OK;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	356 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	357
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	358
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	359 static ngx_int_t
b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	360 ngx_quic_crypto_input(ngx_connection_t c, ngx_chain_t data)
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	361 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	362 int n, sslerr;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	363 ngx_buf_t *b;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	364 ngx_chain_t *cl;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	365 ngx_ssl_conn_t *ssl_conn;
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	366 ngx_quic_frame_t *frame;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	367 ngx_quic_connection_t *qc;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	368
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	369 qc = ngx_quic_get_connection(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	370
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	371 ssl_conn = c->ssl->connection;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	372
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	373 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	374 "quic SSL_quic_read_level:%d SSL_quic_write_level:%d",
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	375 (int) SSL_quic_read_level(ssl_conn),
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	376 (int) SSL_quic_write_level(ssl_conn));
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	377
8782 b3f6ad181df4 QUIC: refactored CRYPTO and STREAM buffer ordering. Roman Arutyunyan <arut@nginx.com> parents: 8763 diff changeset	378 for (cl = data; cl; cl = cl->next) {
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	379 b = cl->buf;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	380
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	381 if (!SSL_provide_quic_data(ssl_conn, SSL_quic_read_level(ssl_conn),
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	382 b->pos, b->last - b->pos))
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	383 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	384 ngx_ssl_error(NGX_LOG_INFO, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	385 "SSL_provide_quic_data() failed");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	386 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	387 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	388 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	389
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	390 n = SSL_do_handshake(ssl_conn);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	391
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	392 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	393 "quic SSL_quic_read_level:%d SSL_quic_write_level:%d",
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	394 (int) SSL_quic_read_level(ssl_conn),
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	395 (int) SSL_quic_write_level(ssl_conn));
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	396
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	397 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL_do_handshake: %d", n);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	398
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	399 if (n <= 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	400 sslerr = SSL_get_error(ssl_conn, n);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	401
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	402 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL_get_error: %d",
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	403 sslerr);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	404
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	405 if (sslerr != SSL_ERROR_WANT_READ) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	406 ngx_ssl_error(NGX_LOG_ERR, c->log, 0, "SSL_do_handshake() failed");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	407 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	408 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	409
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	410 return NGX_OK;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	411 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	412
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	413 if (SSL_in_init(ssl_conn)) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	414 return NGX_OK;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	415 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	416
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	417 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	418 "quic ssl cipher:%s", SSL_get_cipher(ssl_conn));
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	419
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	420 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	421 "quic handshake completed successfully");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	422
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	423 c->ssl->handshaked = 1;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	424
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	425 frame = ngx_quic_alloc_frame(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	426 if (frame == NULL) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	427 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	428 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	429
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	430 /* 12.4 Frames and frame types, figure 8 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	431 frame->level = ssl_encryption_application;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	432 frame->type = NGX_QUIC_FT_HANDSHAKE_DONE;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	433 ngx_quic_queue_frame(qc, frame);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	434
8763 4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	435 if (qc->conf->retry) {
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	436 if (ngx_quic_send_new_token(c, qc->socket->path) != NGX_OK) {
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	437 return NGX_ERROR;
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	438 }
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	439 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	440
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	441 /*
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	442 * Generating next keys before a key update is received.
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	443 * See quic-tls 9.4 Header Protection Timing Side-Channels.
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	444 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	445
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	446 if (ngx_quic_keys_update(c, qc->keys) != NGX_OK) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	447 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	448 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	449
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	450 /*
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	451 * 4.10.2 An endpoint MUST discard its handshake keys
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	452 * when the TLS handshake is confirmed
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	453 */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	454 ngx_quic_discard_ctx(c, ssl_encryption_handshake);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	455
8763 4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	456 /* start accepting clients on negotiated number of server ids */
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	457 if (ngx_quic_create_sockets(c) != NGX_OK) {
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	458 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	459 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	460
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	461 return NGX_OK;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	462 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	463
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	464
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	465 ngx_int_t
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	466 ngx_quic_init_connection(ngx_connection_t *c)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	467 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	468 u_char *p;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	469 size_t clen;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	470 ssize_t len;
8763 4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	471 ngx_str_t dcid;
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	472 ngx_ssl_conn_t *ssl_conn;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	473 ngx_quic_connection_t *qc;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	474
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	475 qc = ngx_quic_get_connection(c);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	476
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	477 if (ngx_ssl_create_connection(qc->conf->ssl, c, NGX_SSL_BUFFER) != NGX_OK) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	478 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	479 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	480
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	481 c->ssl->no_wait_shutdown = 1;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	482
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	483 ssl_conn = c->ssl->connection;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	484
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	485 if (SSL_set_quic_method(ssl_conn, &quic_method) == 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	486 ngx_log_error(NGX_LOG_INFO, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	487 "quic SSL_set_quic_method() failed");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	488 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	489 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	490
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	491 #ifdef SSL_READ_EARLY_DATA_SUCCESS
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	492 if (SSL_CTX_get_max_early_data(qc->conf->ssl->ctx)) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	493 SSL_set_quic_early_data_enabled(ssl_conn, 1);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	494 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	495 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	496
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	497 #if BORINGSSL_API_VERSION >= 13
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	498 SSL_set_quic_use_legacy_codepoint(ssl_conn, qc->version != 1);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	499 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	500
8763 4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	501 dcid.data = qc->socket->sid.id;
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	502 dcid.len = qc->socket->sid.len;
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	503
4117aa7fa38e QUIC: connection migration. Vladimir Homutov <vl@nginx.com> parents: 8753 diff changeset	504 if (ngx_quic_new_sr_token(c, &dcid, qc->conf->sr_token_key, qc->tp.sr_token)
8753 46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	505 != NGX_OK)
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	506 {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	507 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	508 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	509
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	510 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	511 "quic stateless reset token %*xs",
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	512 (size_t) NGX_QUIC_SR_TOKEN_LEN, qc->tp.sr_token);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	513
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	514 len = ngx_quic_create_transport_params(NULL, NULL, &qc->tp, &clen);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	515 /* always succeeds */
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	516
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	517 p = ngx_pnalloc(c->pool, len);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	518 if (p == NULL) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	519 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	520 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	521
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	522 len = ngx_quic_create_transport_params(p, p + len, &qc->tp, NULL);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	523 if (len < 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	524 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	525 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	526
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	527 #ifdef NGX_QUIC_DEBUG_PACKETS
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	528 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	529 "quic transport parameters len:%uz %*xs", len, len, p);
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	530 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	531
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	532 if (SSL_set_quic_transport_params(ssl_conn, p, len) == 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	533 ngx_log_error(NGX_LOG_INFO, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	534 "quic SSL_set_quic_transport_params() failed");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	535 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	536 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	537
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	538 #if NGX_OPENSSL_QUIC_ZRTT_CTX
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	539 if (SSL_set_quic_early_data_context(ssl_conn, p, clen) == 0) {
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	540 ngx_log_error(NGX_LOG_INFO, c->log, 0,
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	541 "quic SSL_set_quic_early_data_context() failed");
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	542 return NGX_ERROR;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	543 }
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	544 #endif
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	545
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	546 return NGX_OK;
46161c610919 QUIC: separate files for SSL library interfaces. Vladimir Homutov <vl@nginx.com> parents: diff changeset	547 }

Mercurial > hg > nginx

annotate src/event/quic/ngx_event_quic_ssl.c @ 8782:b3f6ad181df4 quic