s_cb.c 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684
  1. /* apps/s_cb.c - callback functions used by s_client, s_server, and s_time */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. /* ====================================================================
  59. * Copyright (c) 1998-2006 The OpenSSL Project. All rights reserved.
  60. *
  61. * Redistribution and use in source and binary forms, with or without
  62. * modification, are permitted provided that the following conditions
  63. * are met:
  64. *
  65. * 1. Redistributions of source code must retain the above copyright
  66. * notice, this list of conditions and the following disclaimer.
  67. *
  68. * 2. Redistributions in binary form must reproduce the above copyright
  69. * notice, this list of conditions and the following disclaimer in
  70. * the documentation and/or other materials provided with the
  71. * distribution.
  72. *
  73. * 3. All advertising materials mentioning features or use of this
  74. * software must display the following acknowledgment:
  75. * "This product includes software developed by the OpenSSL Project
  76. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77. *
  78. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79. * endorse or promote products derived from this software without
  80. * prior written permission. For written permission, please contact
  81. * openssl-core@openssl.org.
  82. *
  83. * 5. Products derived from this software may not be called "OpenSSL"
  84. * nor may "OpenSSL" appear in their names without prior written
  85. * permission of the OpenSSL Project.
  86. *
  87. * 6. Redistributions of any form whatsoever must retain the following
  88. * acknowledgment:
  89. * "This product includes software developed by the OpenSSL Project
  90. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91. *
  92. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  100. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  101. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  102. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  103. * OF THE POSSIBILITY OF SUCH DAMAGE.
  104. * ====================================================================
  105. *
  106. * This product includes cryptographic software written by Eric Young
  107. * (eay@cryptsoft.com). This product includes software written by Tim
  108. * Hudson (tjh@cryptsoft.com).
  109. *
  110. */
  111. #include <stdio.h>
  112. #include <stdlib.h>
  113. #define USE_SOCKETS
  114. #define NON_MAIN
  115. #include "apps.h"
  116. #undef NON_MAIN
  117. #undef USE_SOCKETS
  118. #include <openssl/err.h>
  119. #include <openssl/x509.h>
  120. #include <openssl/ssl.h>
  121. #include "s_apps.h"
  122. int verify_depth=0;
  123. int verify_error=X509_V_OK;
  124. int verify_return_error=0;
  125. int MS_CALLBACK verify_callback(int ok, X509_STORE_CTX *ctx)
  126. {
  127. X509 *err_cert;
  128. int err,depth;
  129. err_cert=X509_STORE_CTX_get_current_cert(ctx);
  130. err= X509_STORE_CTX_get_error(ctx);
  131. depth= X509_STORE_CTX_get_error_depth(ctx);
  132. BIO_printf(bio_err,"depth=%d ",depth);
  133. if (err_cert)
  134. {
  135. X509_NAME_print_ex(bio_err, X509_get_subject_name(err_cert),
  136. 0, XN_FLAG_ONELINE);
  137. BIO_puts(bio_err, "\n");
  138. }
  139. else
  140. BIO_puts(bio_err, "<no cert>\n");
  141. if (!ok)
  142. {
  143. BIO_printf(bio_err,"verify error:num=%d:%s\n",err,
  144. X509_verify_cert_error_string(err));
  145. if (verify_depth >= depth)
  146. {
  147. if (!verify_return_error)
  148. ok=1;
  149. verify_error=X509_V_OK;
  150. }
  151. else
  152. {
  153. ok=0;
  154. verify_error=X509_V_ERR_CERT_CHAIN_TOO_LONG;
  155. }
  156. }
  157. switch (err)
  158. {
  159. case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT:
  160. BIO_puts(bio_err,"issuer= ");
  161. X509_NAME_print_ex(bio_err, X509_get_issuer_name(err_cert),
  162. 0, XN_FLAG_ONELINE);
  163. BIO_puts(bio_err, "\n");
  164. break;
  165. case X509_V_ERR_CERT_NOT_YET_VALID:
  166. case X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD:
  167. BIO_printf(bio_err,"notBefore=");
  168. ASN1_TIME_print(bio_err,X509_get_notBefore(err_cert));
  169. BIO_printf(bio_err,"\n");
  170. break;
  171. case X509_V_ERR_CERT_HAS_EXPIRED:
  172. case X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD:
  173. BIO_printf(bio_err,"notAfter=");
  174. ASN1_TIME_print(bio_err,X509_get_notAfter(err_cert));
  175. BIO_printf(bio_err,"\n");
  176. break;
  177. case X509_V_ERR_NO_EXPLICIT_POLICY:
  178. policies_print(bio_err, ctx);
  179. break;
  180. }
  181. if (err == X509_V_OK && ok == 2)
  182. policies_print(bio_err, ctx);
  183. BIO_printf(bio_err,"verify return:%d\n",ok);
  184. return(ok);
  185. }
  186. int set_cert_stuff(SSL_CTX *ctx, char *cert_file, char *key_file)
  187. {
  188. if (cert_file != NULL)
  189. {
  190. /*
  191. SSL *ssl;
  192. X509 *x509;
  193. */
  194. if (SSL_CTX_use_certificate_file(ctx,cert_file,
  195. SSL_FILETYPE_PEM) <= 0)
  196. {
  197. BIO_printf(bio_err,"unable to get certificate from '%s'\n",cert_file);
  198. ERR_print_errors(bio_err);
  199. return(0);
  200. }
  201. if (key_file == NULL) key_file=cert_file;
  202. if (SSL_CTX_use_PrivateKey_file(ctx,key_file,
  203. SSL_FILETYPE_PEM) <= 0)
  204. {
  205. BIO_printf(bio_err,"unable to get private key from '%s'\n",key_file);
  206. ERR_print_errors(bio_err);
  207. return(0);
  208. }
  209. /*
  210. In theory this is no longer needed
  211. ssl=SSL_new(ctx);
  212. x509=SSL_get_certificate(ssl);
  213. if (x509 != NULL) {
  214. EVP_PKEY *pktmp;
  215. pktmp = X509_get_pubkey(x509);
  216. EVP_PKEY_copy_parameters(pktmp,
  217. SSL_get_privatekey(ssl));
  218. EVP_PKEY_free(pktmp);
  219. }
  220. SSL_free(ssl);
  221. */
  222. /* If we are using DSA, we can copy the parameters from
  223. * the private key */
  224. /* Now we know that a key and cert have been set against
  225. * the SSL context */
  226. if (!SSL_CTX_check_private_key(ctx))
  227. {
  228. BIO_printf(bio_err,"Private key does not match the certificate public key\n");
  229. return(0);
  230. }
  231. }
  232. return(1);
  233. }
  234. int set_cert_key_stuff(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key)
  235. {
  236. if (cert == NULL)
  237. return 1;
  238. if (SSL_CTX_use_certificate(ctx,cert) <= 0)
  239. {
  240. BIO_printf(bio_err,"error setting certificate\n");
  241. ERR_print_errors(bio_err);
  242. return 0;
  243. }
  244. if (SSL_CTX_use_PrivateKey(ctx,key) <= 0)
  245. {
  246. BIO_printf(bio_err,"error setting private key\n");
  247. ERR_print_errors(bio_err);
  248. return 0;
  249. }
  250. /* Now we know that a key and cert have been set against
  251. * the SSL context */
  252. if (!SSL_CTX_check_private_key(ctx))
  253. {
  254. BIO_printf(bio_err,"Private key does not match the certificate public key\n");
  255. return 0;
  256. }
  257. return 1;
  258. }
  259. long MS_CALLBACK bio_dump_callback(BIO *bio, int cmd, const char *argp,
  260. int argi, long argl, long ret)
  261. {
  262. BIO *out;
  263. out=(BIO *)BIO_get_callback_arg(bio);
  264. if (out == NULL) return(ret);
  265. if (cmd == (BIO_CB_READ|BIO_CB_RETURN))
  266. {
  267. BIO_printf(out,"read from %p [%p] (%lu bytes => %ld (0x%lX))\n",
  268. (void *)bio,argp,(unsigned long)argi,ret,ret);
  269. BIO_dump(out,argp,(int)ret);
  270. return(ret);
  271. }
  272. else if (cmd == (BIO_CB_WRITE|BIO_CB_RETURN))
  273. {
  274. BIO_printf(out,"write to %p [%p] (%lu bytes => %ld (0x%lX))\n",
  275. (void *)bio,argp,(unsigned long)argi,ret,ret);
  276. BIO_dump(out,argp,(int)ret);
  277. }
  278. return(ret);
  279. }
  280. void MS_CALLBACK apps_ssl_info_callback(const SSL *s, int where, int ret)
  281. {
  282. const char *str;
  283. int w;
  284. w=where& ~SSL_ST_MASK;
  285. if (w & SSL_ST_CONNECT) str="SSL_connect";
  286. else if (w & SSL_ST_ACCEPT) str="SSL_accept";
  287. else str="undefined";
  288. if (where & SSL_CB_LOOP)
  289. {
  290. BIO_printf(bio_err,"%s:%s\n",str,SSL_state_string_long(s));
  291. }
  292. else if (where & SSL_CB_ALERT)
  293. {
  294. str=(where & SSL_CB_READ)?"read":"write";
  295. BIO_printf(bio_err,"SSL3 alert %s:%s:%s\n",
  296. str,
  297. SSL_alert_type_string_long(ret),
  298. SSL_alert_desc_string_long(ret));
  299. }
  300. else if (where & SSL_CB_EXIT)
  301. {
  302. if (ret == 0)
  303. BIO_printf(bio_err,"%s:failed in %s\n",
  304. str,SSL_state_string_long(s));
  305. else if (ret < 0)
  306. {
  307. BIO_printf(bio_err,"%s:error in %s\n",
  308. str,SSL_state_string_long(s));
  309. }
  310. }
  311. }
  312. void MS_CALLBACK msg_cb(int write_p, int version, int content_type, const void *buf, size_t len, SSL *ssl, void *arg)
  313. {
  314. BIO *bio = arg;
  315. const char *str_write_p, *str_version, *str_content_type = "", *str_details1 = "", *str_details2= "";
  316. str_write_p = write_p ? ">>>" : "<<<";
  317. switch (version)
  318. {
  319. case SSL2_VERSION:
  320. str_version = "SSL 2.0";
  321. break;
  322. case SSL3_VERSION:
  323. str_version = "SSL 3.0 ";
  324. break;
  325. case TLS1_VERSION:
  326. str_version = "TLS 1.0 ";
  327. break;
  328. case DTLS1_VERSION:
  329. str_version = "DTLS 1.0 ";
  330. break;
  331. case DTLS1_BAD_VER:
  332. str_version = "DTLS 1.0 (bad) ";
  333. break;
  334. default:
  335. str_version = "???";
  336. }
  337. if (version == SSL2_VERSION)
  338. {
  339. str_details1 = "???";
  340. if (len > 0)
  341. {
  342. switch (((const unsigned char*)buf)[0])
  343. {
  344. case 0:
  345. str_details1 = ", ERROR:";
  346. str_details2 = " ???";
  347. if (len >= 3)
  348. {
  349. unsigned err = (((const unsigned char*)buf)[1]<<8) + ((const unsigned char*)buf)[2];
  350. switch (err)
  351. {
  352. case 0x0001:
  353. str_details2 = " NO-CIPHER-ERROR";
  354. break;
  355. case 0x0002:
  356. str_details2 = " NO-CERTIFICATE-ERROR";
  357. break;
  358. case 0x0004:
  359. str_details2 = " BAD-CERTIFICATE-ERROR";
  360. break;
  361. case 0x0006:
  362. str_details2 = " UNSUPPORTED-CERTIFICATE-TYPE-ERROR";
  363. break;
  364. }
  365. }
  366. break;
  367. case 1:
  368. str_details1 = ", CLIENT-HELLO";
  369. break;
  370. case 2:
  371. str_details1 = ", CLIENT-MASTER-KEY";
  372. break;
  373. case 3:
  374. str_details1 = ", CLIENT-FINISHED";
  375. break;
  376. case 4:
  377. str_details1 = ", SERVER-HELLO";
  378. break;
  379. case 5:
  380. str_details1 = ", SERVER-VERIFY";
  381. break;
  382. case 6:
  383. str_details1 = ", SERVER-FINISHED";
  384. break;
  385. case 7:
  386. str_details1 = ", REQUEST-CERTIFICATE";
  387. break;
  388. case 8:
  389. str_details1 = ", CLIENT-CERTIFICATE";
  390. break;
  391. }
  392. }
  393. }
  394. if (version == SSL3_VERSION ||
  395. version == TLS1_VERSION ||
  396. version == DTLS1_VERSION ||
  397. version == DTLS1_BAD_VER)
  398. {
  399. switch (content_type)
  400. {
  401. case 20:
  402. str_content_type = "ChangeCipherSpec";
  403. break;
  404. case 21:
  405. str_content_type = "Alert";
  406. break;
  407. case 22:
  408. str_content_type = "Handshake";
  409. break;
  410. }
  411. if (content_type == 21) /* Alert */
  412. {
  413. str_details1 = ", ???";
  414. if (len == 2)
  415. {
  416. switch (((const unsigned char*)buf)[0])
  417. {
  418. case 1:
  419. str_details1 = ", warning";
  420. break;
  421. case 2:
  422. str_details1 = ", fatal";
  423. break;
  424. }
  425. str_details2 = " ???";
  426. switch (((const unsigned char*)buf)[1])
  427. {
  428. case 0:
  429. str_details2 = " close_notify";
  430. break;
  431. case 10:
  432. str_details2 = " unexpected_message";
  433. break;
  434. case 20:
  435. str_details2 = " bad_record_mac";
  436. break;
  437. case 21:
  438. str_details2 = " decryption_failed";
  439. break;
  440. case 22:
  441. str_details2 = " record_overflow";
  442. break;
  443. case 30:
  444. str_details2 = " decompression_failure";
  445. break;
  446. case 40:
  447. str_details2 = " handshake_failure";
  448. break;
  449. case 42:
  450. str_details2 = " bad_certificate";
  451. break;
  452. case 43:
  453. str_details2 = " unsupported_certificate";
  454. break;
  455. case 44:
  456. str_details2 = " certificate_revoked";
  457. break;
  458. case 45:
  459. str_details2 = " certificate_expired";
  460. break;
  461. case 46:
  462. str_details2 = " certificate_unknown";
  463. break;
  464. case 47:
  465. str_details2 = " illegal_parameter";
  466. break;
  467. case 48:
  468. str_details2 = " unknown_ca";
  469. break;
  470. case 49:
  471. str_details2 = " access_denied";
  472. break;
  473. case 50:
  474. str_details2 = " decode_error";
  475. break;
  476. case 51:
  477. str_details2 = " decrypt_error";
  478. break;
  479. case 60:
  480. str_details2 = " export_restriction";
  481. break;
  482. case 70:
  483. str_details2 = " protocol_version";
  484. break;
  485. case 71:
  486. str_details2 = " insufficient_security";
  487. break;
  488. case 80:
  489. str_details2 = " internal_error";
  490. break;
  491. case 90:
  492. str_details2 = " user_canceled";
  493. break;
  494. case 100:
  495. str_details2 = " no_renegotiation";
  496. break;
  497. case 110:
  498. str_details2 = " unsupported_extension";
  499. break;
  500. case 111:
  501. str_details2 = " certificate_unobtainable";
  502. break;
  503. case 112:
  504. str_details2 = " unrecognized_name";
  505. break;
  506. case 113:
  507. str_details2 = " bad_certificate_status_response";
  508. break;
  509. case 114:
  510. str_details2 = " bad_certificate_hash_value";
  511. break;
  512. }
  513. }
  514. }
  515. if (content_type == 22) /* Handshake */
  516. {
  517. str_details1 = "???";
  518. if (len > 0)
  519. {
  520. switch (((const unsigned char*)buf)[0])
  521. {
  522. case 0:
  523. str_details1 = ", HelloRequest";
  524. break;
  525. case 1:
  526. str_details1 = ", ClientHello";
  527. break;
  528. case 2:
  529. str_details1 = ", ServerHello";
  530. break;
  531. case 3:
  532. str_details1 = ", HelloVerifyRequest";
  533. break;
  534. case 11:
  535. str_details1 = ", Certificate";
  536. break;
  537. case 12:
  538. str_details1 = ", ServerKeyExchange";
  539. break;
  540. case 13:
  541. str_details1 = ", CertificateRequest";
  542. break;
  543. case 14:
  544. str_details1 = ", ServerHelloDone";
  545. break;
  546. case 15:
  547. str_details1 = ", CertificateVerify";
  548. break;
  549. case 16:
  550. str_details1 = ", ClientKeyExchange";
  551. break;
  552. case 20:
  553. str_details1 = ", Finished";
  554. break;
  555. }
  556. }
  557. }
  558. }
  559. BIO_printf(bio, "%s %s%s [length %04lx]%s%s\n", str_write_p, str_version, str_content_type, (unsigned long)len, str_details1, str_details2);
  560. if (len > 0)
  561. {
  562. size_t num, i;
  563. BIO_printf(bio, " ");
  564. num = len;
  565. #if 0
  566. if (num > 16)
  567. num = 16;
  568. #endif
  569. for (i = 0; i < num; i++)
  570. {
  571. if (i % 16 == 0 && i > 0)
  572. BIO_printf(bio, "\n ");
  573. BIO_printf(bio, " %02x", ((const unsigned char*)buf)[i]);
  574. }
  575. if (i < len)
  576. BIO_printf(bio, " ...");
  577. BIO_printf(bio, "\n");
  578. }
  579. (void)BIO_flush(bio);
  580. }
  581. void MS_CALLBACK tlsext_cb(SSL *s, int client_server, int type,
  582. unsigned char *data, int len,
  583. void *arg)
  584. {
  585. BIO *bio = arg;
  586. char *extname;
  587. switch(type)
  588. {
  589. case TLSEXT_TYPE_server_name:
  590. extname = "server name";
  591. break;
  592. case TLSEXT_TYPE_max_fragment_length:
  593. extname = "max fragment length";
  594. break;
  595. case TLSEXT_TYPE_client_certificate_url:
  596. extname = "client certificate URL";
  597. break;
  598. case TLSEXT_TYPE_trusted_ca_keys:
  599. extname = "trusted CA keys";
  600. break;
  601. case TLSEXT_TYPE_truncated_hmac:
  602. extname = "truncated HMAC";
  603. break;
  604. case TLSEXT_TYPE_status_request:
  605. extname = "status request";
  606. break;
  607. case TLSEXT_TYPE_elliptic_curves:
  608. extname = "elliptic curves";
  609. break;
  610. case TLSEXT_TYPE_ec_point_formats:
  611. extname = "EC point formats";
  612. break;
  613. case TLSEXT_TYPE_session_ticket:
  614. extname = "server ticket";
  615. break;
  616. #ifdef TLSEXT_TYPE_opaque_prf_input
  617. case TLSEXT_TYPE_opaque_prf_input:
  618. extname = "opaque PRF input";
  619. break;
  620. #endif
  621. default:
  622. extname = "unknown";
  623. break;
  624. }
  625. BIO_printf(bio, "TLS %s extension \"%s\" (id=%d), len=%d\n",
  626. client_server ? "server": "client",
  627. extname, type, len);
  628. BIO_dump(bio, (char *)data, len);
  629. (void)BIO_flush(bio);
  630. }