wt/mongoose
1
0 Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-11-10 16:31:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3236 from cesanta/tls

Browse Source 
Verify host against CN, too
This commit is contained in:
Sergio R. Caprile authored and GitHub committed 2025-08-12 12:09:23 -03:00
2 parents 9f76ea8030 9fd87060f9
commit c1fa067a1f
2 files changed
+56 -36
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

mongoose.c
+28 -18
View File
@@ -11315,7 +11315,7 @@ static void mg_tls_encrypt(struct mg_connection *c, const uint8_t *msg,
nonce[8] ^= (uint8_t) ((seq >> 24) & 255U); nonce[8] ^= (uint8_t) ((seq >> 24) & 255U);
nonce[9] ^= (uint8_t) ((seq >> 16) & 255U); nonce[9] ^= (uint8_t) ((seq >> 16) & 255U);
nonce[10] ^= (uint8_t) ((seq >> 8) & 255U); nonce[10] ^= (uint8_t) ((seq >> 8) & 255U);
nonce[11] ^= (uint8_t) ((seq) &255U); nonce[11] ^= (uint8_t) ((seq) & 255U);
mg_iobuf_add(wio, wio->len, hdr, sizeof(hdr)); mg_iobuf_add(wio, wio->len, hdr, sizeof(hdr));
mg_iobuf_resize(wio, wio->len + encsz); mg_iobuf_resize(wio, wio->len + encsz);
@@ -11394,7 +11394,7 @@ static int mg_tls_recv_record(struct mg_connection *c) {
nonce[8] ^= (uint8_t) ((seq >> 24) & 255U); nonce[8] ^= (uint8_t) ((seq >> 24) & 255U);
nonce[9] ^= (uint8_t) ((seq >> 16) & 255U); nonce[9] ^= (uint8_t) ((seq >> 16) & 255U);
nonce[10] ^= (uint8_t) ((seq >> 8) & 255U); nonce[10] ^= (uint8_t) ((seq >> 8) & 255U);
nonce[11] ^= (uint8_t) ((seq) &255U); nonce[11] ^= (uint8_t) ((seq) & 255U);
#if MG_ENABLE_CHACHA20 #if MG_ENABLE_CHACHA20
{ {
uint8_t *dec = (uint8_t *) mg_calloc(1, msgsz); uint8_t *dec = (uint8_t *) mg_calloc(1, msgsz);
@@ -11880,6 +11880,7 @@ struct mg_tls_cert {
int is_ec_pubkey; int is_ec_pubkey;
struct mg_str sn; struct mg_str sn;
struct mg_str pubkey; struct mg_str pubkey;
struct mg_der_tlv subj;
struct mg_str sig; // signature struct mg_str sig; // signature
uint8_t tbshash[48]; // 32b for sha256/secp256, 48b for sha384/secp384 uint8_t tbshash[48]; // 32b for sha256/secp256, 48b for sha384/secp384
size_t tbshashsz; // actual TBS hash size size_t tbshashsz; // actual TBS hash size
@@ -11985,6 +11986,7 @@ static int mg_tls_parse_cert_der(void *buf, size_t dersz,
// subject // subject
if (mg_der_next(&tbs_cert, &field) <= 0 || field.type != 0x30) return -1; if (mg_der_next(&tbs_cert, &field) <= 0 || field.type != 0x30) return -1;
cert->subj = field;
mg_der_debug_cert_name("subject", &field); mg_der_debug_cert_name("subject", &field);
// subject public key info // subject public key info
@@ -12045,19 +12047,22 @@ static int mg_tls_parse_cert_der(void *buf, size_t dersz,
static int mg_tls_verify_cert_san(const uint8_t *der, size_t dersz, static int mg_tls_verify_cert_san(const uint8_t *der, size_t dersz,
const char *server_name) { const char *server_name) {
struct mg_der_tlv root, field, name; struct mg_der_tlv root, field, name;
if (mg_der_parse((uint8_t *) der, dersz, &root) < 0 || if (mg_der_parse((uint8_t *) der, dersz, &root) < 0) {
mg_der_find_oid(&root, (uint8_t *) "\x55\x1d\x11", 3, &field) < 0) { MG_ERROR(("failed to parse certificate"));
MG_ERROR(("failed to parse certificate to extract SAN")); return -1;
}
if (mg_der_find_oid(&root, (uint8_t *) "\x55\x1d\x11", 3, &field) <= 0) {
MG_ERROR(("failed to extract SAN"));
return -1; return -1;
} }
if (mg_der_parse(field.value, field.len, &field) < 0) { if (mg_der_parse(field.value, field.len, &field) < 0) {
MG_ERROR( MG_ERROR(("SAN is not a constructed object"));
("certificate subject alternative names is not a constructed object"));
return -1; return -1;
} }
while (mg_der_next(&field, &name) > 0) { while (mg_der_next(&field, &name) > 0) {
if (mg_match(mg_str(server_name), MG_DEBUG(("Found SAN: %.*s", name.len, name.value));
mg_str_n((const char *) name.value, name.len), NULL)) { if (mg_match(mg_str(server_name), mg_str_n((char *) name.value, name.len),
NULL)) {
// Found SAN that matches the host name // Found SAN that matches the host name
return 1; return 1;
} }
@@ -12113,11 +12118,19 @@ static int mg_tls_verify_cert_signature(const struct mg_tls_cert *cert,
} }
} }
static int mg_tls_verify_cert_cn(struct mg_der_tlv *subj, const char *host) {
struct mg_der_tlv v;
int matched = 0;
if (mg_der_find_oid(subj, (uint8_t *) "\x55\x04\x03", 3, &v) > 0) {
MG_DEBUG(("using CN: %.*s <-> %s", v.len, v.value, host));
matched = mg_match(mg_str(host), mg_str_n((char *) v.value, v.len), NULL);
}
return matched;
}
static int mg_tls_client_recv_cert(struct mg_connection *c) { static int mg_tls_client_recv_cert(struct mg_connection *c) {
int subj_match = 0;
struct tls_data *tls = (struct tls_data *) c->tls; struct tls_data *tls = (struct tls_data *) c->tls;
unsigned char *recv_buf; unsigned char *recv_buf;
(void) subj_match;
if (mg_tls_recv_record(c) < 0) { if (mg_tls_recv_record(c) < 0) {
return -1; return -1;
@@ -12190,7 +12203,8 @@ static int mg_tls_client_recv_cert(struct mg_connection *c) {
if (ci == certs) { if (ci == certs) {
// First certificate in the chain is peer cert, check SAN and store // First certificate in the chain is peer cert, check SAN and store
// public key for further CertVerify step // public key for further CertVerify step
if (mg_tls_verify_cert_san(cert, certsz, tls->hostname) <= 0) { if (mg_tls_verify_cert_san(cert, certsz, tls->hostname) <= 0 &&
mg_tls_verify_cert_cn(&ci->subj, tls->hostname) <= 0) {
mg_error(c, "failed to verify hostname"); mg_error(c, "failed to verify hostname");
return -1; return -1;
} }
@@ -12417,9 +12431,7 @@ static void mg_tls_client_handshake(struct mg_connection *c) {
c->is_tls_hs = 0; c->is_tls_hs = 0;
mg_call(c, MG_EV_TLS_HS, NULL); mg_call(c, MG_EV_TLS_HS, NULL);
break; break;
default: default: mg_error(c, "unexpected client state: %d", tls->state); break;
mg_error(c, "unexpected client state: %d", tls->state);
break;
} }
} }
@@ -12446,9 +12458,7 @@ static void mg_tls_server_handshake(struct mg_connection *c) {
tls->state = MG_TLS_STATE_SERVER_CONNECTED; tls->state = MG_TLS_STATE_SERVER_CONNECTED;
c->is_tls_hs = 0; c->is_tls_hs = 0;
return; return;
default: default: mg_error(c, "unexpected server state: %d", tls->state); break;
mg_error(c, "unexpected server state: %d", tls->state);
break;
} }
} }
src/tls_builtin.c
+28 -18
View File
@@ -424,7 +424,7 @@ static void mg_tls_encrypt(struct mg_connection *c, const uint8_t *msg,
nonce[8] ^= (uint8_t) ((seq >> 24) & 255U); nonce[8] ^= (uint8_t) ((seq >> 24) & 255U);
nonce[9] ^= (uint8_t) ((seq >> 16) & 255U); nonce[9] ^= (uint8_t) ((seq >> 16) & 255U);
nonce[10] ^= (uint8_t) ((seq >> 8) & 255U); nonce[10] ^= (uint8_t) ((seq >> 8) & 255U);
nonce[11] ^= (uint8_t) ((seq) &255U); nonce[11] ^= (uint8_t) ((seq) & 255U);
mg_iobuf_add(wio, wio->len, hdr, sizeof(hdr)); mg_iobuf_add(wio, wio->len, hdr, sizeof(hdr));
mg_iobuf_resize(wio, wio->len + encsz); mg_iobuf_resize(wio, wio->len + encsz);
@@ -503,7 +503,7 @@ static int mg_tls_recv_record(struct mg_connection *c) {
nonce[8] ^= (uint8_t) ((seq >> 24) & 255U); nonce[8] ^= (uint8_t) ((seq >> 24) & 255U);
nonce[9] ^= (uint8_t) ((seq >> 16) & 255U); nonce[9] ^= (uint8_t) ((seq >> 16) & 255U);
nonce[10] ^= (uint8_t) ((seq >> 8) & 255U); nonce[10] ^= (uint8_t) ((seq >> 8) & 255U);
nonce[11] ^= (uint8_t) ((seq) &255U); nonce[11] ^= (uint8_t) ((seq) & 255U);
#if MG_ENABLE_CHACHA20 #if MG_ENABLE_CHACHA20
{ {
uint8_t *dec = (uint8_t *) mg_calloc(1, msgsz); uint8_t *dec = (uint8_t *) mg_calloc(1, msgsz);
@@ -989,6 +989,7 @@ struct mg_tls_cert {
int is_ec_pubkey; int is_ec_pubkey;
struct mg_str sn; struct mg_str sn;
struct mg_str pubkey; struct mg_str pubkey;
struct mg_der_tlv subj;
struct mg_str sig; // signature struct mg_str sig; // signature
uint8_t tbshash[48]; // 32b for sha256/secp256, 48b for sha384/secp384 uint8_t tbshash[48]; // 32b for sha256/secp256, 48b for sha384/secp384
size_t tbshashsz; // actual TBS hash size size_t tbshashsz; // actual TBS hash size
@@ -1094,6 +1095,7 @@ static int mg_tls_parse_cert_der(void *buf, size_t dersz,
// subject // subject
if (mg_der_next(&tbs_cert, &field) <= 0 || field.type != 0x30) return -1; if (mg_der_next(&tbs_cert, &field) <= 0 || field.type != 0x30) return -1;
cert->subj = field;
mg_der_debug_cert_name("subject", &field); mg_der_debug_cert_name("subject", &field);
// subject public key info // subject public key info
@@ -1154,19 +1156,22 @@ static int mg_tls_parse_cert_der(void *buf, size_t dersz,
static int mg_tls_verify_cert_san(const uint8_t *der, size_t dersz, static int mg_tls_verify_cert_san(const uint8_t *der, size_t dersz,
const char *server_name) { const char *server_name) {
struct mg_der_tlv root, field, name; struct mg_der_tlv root, field, name;
if (mg_der_parse((uint8_t *) der, dersz, &root) < 0 || if (mg_der_parse((uint8_t *) der, dersz, &root) < 0) {
mg_der_find_oid(&root, (uint8_t *) "\x55\x1d\x11", 3, &field) < 0) { MG_ERROR(("failed to parse certificate"));
MG_ERROR(("failed to parse certificate to extract SAN")); return -1;
}
if (mg_der_find_oid(&root, (uint8_t *) "\x55\x1d\x11", 3, &field) <= 0) {
MG_ERROR(("failed to extract SAN"));
return -1; return -1;
} }
if (mg_der_parse(field.value, field.len, &field) < 0) { if (mg_der_parse(field.value, field.len, &field) < 0) {
MG_ERROR( MG_ERROR(("SAN is not a constructed object"));
("certificate subject alternative names is not a constructed object"));
return -1; return -1;
} }
while (mg_der_next(&field, &name) > 0) { while (mg_der_next(&field, &name) > 0) {
if (mg_match(mg_str(server_name), MG_DEBUG(("Found SAN: %.*s", name.len, name.value));
mg_str_n((const char *) name.value, name.len), NULL)) { if (mg_match(mg_str(server_name), mg_str_n((char *) name.value, name.len),
NULL)) {
// Found SAN that matches the host name // Found SAN that matches the host name
return 1; return 1;
} }
@@ -1222,11 +1227,19 @@ static int mg_tls_verify_cert_signature(const struct mg_tls_cert *cert,
} }
} }
static int mg_tls_verify_cert_cn(struct mg_der_tlv *subj, const char *host) {
struct mg_der_tlv v;
int matched = 0;
if (mg_der_find_oid(subj, (uint8_t *) "\x55\x04\x03", 3, &v) > 0) {
MG_DEBUG(("using CN: %.*s <-> %s", v.len, v.value, host));
matched = mg_match(mg_str(host), mg_str_n((char *) v.value, v.len), NULL);
}
return matched;
}
static int mg_tls_client_recv_cert(struct mg_connection *c) { static int mg_tls_client_recv_cert(struct mg_connection *c) {
int subj_match = 0;
struct tls_data *tls = (struct tls_data *) c->tls; struct tls_data *tls = (struct tls_data *) c->tls;
unsigned char *recv_buf; unsigned char *recv_buf;
(void) subj_match;
if (mg_tls_recv_record(c) < 0) { if (mg_tls_recv_record(c) < 0) {
return -1; return -1;
@@ -1299,7 +1312,8 @@ static int mg_tls_client_recv_cert(struct mg_connection *c) {
if (ci == certs) { if (ci == certs) {
// First certificate in the chain is peer cert, check SAN and store // First certificate in the chain is peer cert, check SAN and store
// public key for further CertVerify step // public key for further CertVerify step
if (mg_tls_verify_cert_san(cert, certsz, tls->hostname) <= 0) { if (mg_tls_verify_cert_san(cert, certsz, tls->hostname) <= 0 &&
mg_tls_verify_cert_cn(&ci->subj, tls->hostname) <= 0) {
mg_error(c, "failed to verify hostname"); mg_error(c, "failed to verify hostname");
return -1; return -1;
} }
@@ -1526,9 +1540,7 @@ static void mg_tls_client_handshake(struct mg_connection *c) {
c->is_tls_hs = 0; c->is_tls_hs = 0;
mg_call(c, MG_EV_TLS_HS, NULL); mg_call(c, MG_EV_TLS_HS, NULL);
break; break;
default: default: mg_error(c, "unexpected client state: %d", tls->state); break;
mg_error(c, "unexpected client state: %d", tls->state);
break;
} }
} }
@@ -1555,9 +1567,7 @@ static void mg_tls_server_handshake(struct mg_connection *c) {
tls->state = MG_TLS_STATE_SERVER_CONNECTED; tls->state = MG_TLS_STATE_SERVER_CONNECTED;
c->is_tls_hs = 0; c->is_tls_hs = 0;
return; return;
default: default: mg_error(c, "unexpected server state: %d", tls->state); break;
mg_error(c, "unexpected server state: %d", tls->state);
break;
} }
} }