net/handshake/tlshd.c

48 	struct tls_handshake_req *treq = handshake_req_private(req);
50 	treq->th_timeout_ms = args->ta_timeout_ms;
51 	treq->th_consumer_done = args->ta_done;
52 	treq->th_consumer_data = args->ta_data;
53 	treq->th_peername = args->ta_peername;
54 	treq->th_keyring = args->ta_keyring;
55 	treq->th_num_peerids = 0;
56 	treq->th_certificate = TLS_NO_CERT;
57 	treq->th_privkey = TLS_NO_PRIVKEY;
58 	return treq;
61 static void tls_handshake_remote_peerids(struct tls_handshake_req *treq,
76 	treq->th_num_peerids = min_t(unsigned int, i,
77 				     ARRAY_SIZE(treq->th_peerid));
82 			treq->th_peerid[i++] = nla_get_u32(nla);
83 		if (i >= treq->th_num_peerids)
98 	struct tls_handshake_req *treq = handshake_req_private(req);
100 	treq->th_peerid[0] = TLS_NO_PEERID;
102 		tls_handshake_remote_peerids(treq, info);
107 	treq->th_consumer_done(treq->th_consumer_data, -status,
108 			       treq->th_peerid[0]);
112 static int tls_handshake_private_keyring(struct tls_handshake_req *treq)
117 	if (treq->th_keyring == TLS_NO_KEYRING)
128 	keyring_ref = lookup_user_key(treq->th_keyring, KEY_LOOKUP_CREATE,
145 static int tls_handshake_private_keyring(struct tls_handshake_req *treq)
152 					   struct tls_handshake_req *treq)
156 	for (i = 0; i < treq->th_num_peerids; i++)
158 				treq->th_peerid[i]) < 0)
164 					 struct tls_handshake_req *treq)
168 	if (treq->th_certificate == TLS_NO_CERT &&
169 	    treq->th_privkey == TLS_NO_PRIVKEY)
177 			treq->th_certificate) ||
179 			treq->th_privkey)) {
199 	struct tls_handshake_req *treq = handshake_req_private(req);
204 	ret = tls_handshake_private_keyring(treq);
220 	ret = nla_put_u32(msg, HANDSHAKE_A_ACCEPT_MESSAGE_TYPE, treq->th_type);
223 	if (treq->th_peername) {
225 				     treq->th_peername);
229 	if (treq->th_timeout_ms) {
230 		ret = nla_put_u32(msg, HANDSHAKE_A_ACCEPT_TIMEOUT, treq->th_timeout_ms);
236 			  treq->th_auth_mode);
239 	switch (treq->th_auth_mode) {
241 		ret = tls_handshake_put_peer_identity(msg, treq);
246 		ret = tls_handshake_put_certificate(msg, treq);
282 	struct tls_handshake_req *treq;
288 	treq = tls_handshake_req_init(req, args);
289 	treq->th_type = HANDSHAKE_MSG_TYPE_CLIENTHELLO;
290 	treq->th_auth_mode = HANDSHAKE_AUTH_UNAUTH;
308 	struct tls_handshake_req *treq;
314 	treq = tls_handshake_req_init(req, args);
315 	treq->th_type = HANDSHAKE_MSG_TYPE_CLIENTHELLO;
316 	treq->th_auth_mode = HANDSHAKE_AUTH_X509;
317 	treq->th_certificate = args->ta_my_cert;
318 	treq->th_privkey = args->ta_my_privkey;
337 	struct tls_handshake_req *treq;
342 	    args->ta_num_peerids > ARRAY_SIZE(treq->th_peerid))
348 	treq = tls_handshake_req_init(req, args);
349 	treq->th_type = HANDSHAKE_MSG_TYPE_CLIENTHELLO;
350 	treq->th_auth_mode = HANDSHAKE_AUTH_PSK;
351 	treq->th_num_peerids = args->ta_num_peerids;
353 		treq->th_peerid[i] = args->ta_my_peerids[i];
371 	struct tls_handshake_req *treq;
377 	treq = tls_handshake_req_init(req, args);
378 	treq->th_type = HANDSHAKE_MSG_TYPE_SERVERHELLO;
379 	treq->th_auth_mode = HANDSHAKE_AUTH_X509;
380 	treq->th_certificate = args->ta_my_cert;
381 	treq->th_privkey = args->ta_my_privkey;
399 	struct tls_handshake_req *treq;
405 	treq = tls_handshake_req_init(req, args);
406 	treq->th_type = HANDSHAKE_MSG_TYPE_SERVERHELLO;
407 	treq->th_auth_mode = HANDSHAKE_AUTH_PSK;
408 	treq->th_num_peerids = 1;
409 	treq->th_peerid[0] = args->ta_my_peerids[0];