mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-18 14:42:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

change time unit of ticket to milliseconds

Browse Source 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
This commit is contained in:
Jerry Yu 2022-12-15 18:00:05 +08:00
parent 8b1a124126
commit cebffc3446
6 changed files with 47 additions and 53 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
include/mbedtls/ssl.h
View File

@ -1217,7 +1217,7 @@ struct mbedtls_ssl_session {
mbedtls_ssl_protocol_version MBEDTLS_PRIVATE(tls_version); mbedtls_ssl_protocol_version MBEDTLS_PRIVATE(tls_version);
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
mbedtls_time_t MBEDTLS_PRIVATE(start); /*!< starting time */ mbedtls_ms_time_t MBEDTLS_PRIVATE(start); /*!< starting time */
#endif #endif
int MBEDTLS_PRIVATE(ciphersuite); /*!< chosen ciphersuite */ int MBEDTLS_PRIVATE(ciphersuite); /*!< chosen ciphersuite */
size_t MBEDTLS_PRIVATE(id_len); /*!< session id length */ size_t MBEDTLS_PRIVATE(id_len); /*!< session id length */
@ -1255,7 +1255,7 @@ struct mbedtls_ssl_session {
#endif /* MBEDTLS_SSL_SERVER_NAME_INDICATION && MBEDTLS_SSL_CLI_C */ #endif /* MBEDTLS_SSL_SERVER_NAME_INDICATION && MBEDTLS_SSL_CLI_C */
#if defined(MBEDTLS_HAVE_TIME) && defined(MBEDTLS_SSL_CLI_C) #if defined(MBEDTLS_HAVE_TIME) && defined(MBEDTLS_SSL_CLI_C)
mbedtls_time_t MBEDTLS_PRIVATE(ticket_received); /*!< time ticket was received */ mbedtls_ms_time_t MBEDTLS_PRIVATE(ticket_received); /*!< time ticket was received */
#endif /* MBEDTLS_HAVE_TIME && MBEDTLS_SSL_CLI_C */ #endif /* MBEDTLS_HAVE_TIME && MBEDTLS_SSL_CLI_C */
#endif /* MBEDTLS_SSL_PROTO_TLS1_3 && MBEDTLS_SSL_SESSION_TICKETS */ #endif /* MBEDTLS_SSL_PROTO_TLS1_3 && MBEDTLS_SSL_SESSION_TICKETS */

7
library/ssl_client.c
View File

@ -756,10 +756,9 @@ static int ssl_prepare_client_hello(mbedtls_ssl_context *ssl)
if (ssl->handshake->resume != 0 && if (ssl->handshake->resume != 0 &&
session_negotiate->tls_version == MBEDTLS_SSL_VERSION_TLS1_3 && session_negotiate->tls_version == MBEDTLS_SSL_VERSION_TLS1_3 &&
session_negotiate->ticket != NULL) { session_negotiate->ticket != NULL) {
mbedtls_time_t now = mbedtls_time(NULL); mbedtls_ms_time_t now = mbedtls_ms_time();
uint64_t age = (uint64_t) (now - session_negotiate->ticket_received); mbedtls_ms_time_t age = now - session_negotiate->ticket_received;
if (session_negotiate->ticket_received > now || if (age < 0 || age > session_negotiate->ticket_lifetime * 1000) {
age > session_negotiate->ticket_lifetime) {
/* Without valid ticket, disable session resumption.*/ /* Without valid ticket, disable session resumption.*/
MBEDTLS_SSL_DEBUG_MSG( MBEDTLS_SSL_DEBUG_MSG(
3, ("Ticket expired, disable session resumption")); 3, ("Ticket expired, disable session resumption"));

14
library/ssl_ticket.c
View File

@ -495,6 +495,18 @@ int mbedtls_ssl_ticket_parse(void *p_ticket,
} }
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
#if defined(MBEDTLS_SSL_PROTO_TLS1_3)
if (session->tls_version == MBEDTLS_SSL_VERSION_TLS1_3) {
/* Check for expiration */
mbedtls_ms_time_t ticket_age = mbedtls_ms_time() - session->start;
mbedtls_ms_time_t ticket_lifetime = ctx->ticket_lifetime * 1000;
if (ticket_age < 0 || ticket_age > ticket_lifetime) {
ret = MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED;
goto cleanup;
}
} else
#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */
{ {
/* Check for expiration */ /* Check for expiration */
mbedtls_time_t current_time = mbedtls_time(NULL); mbedtls_time_t current_time = mbedtls_time(NULL);
@ -505,7 +517,7 @@ int mbedtls_ssl_ticket_parse(void *p_ticket,
goto cleanup; goto cleanup;
} }
} }
#endif #endif /* MBEDTLS_HAVE_TIME */
cleanup: cleanup:
#if defined(MBEDTLS_THREADING_C) #if defined(MBEDTLS_THREADING_C)

22
library/ssl_tls13_client.c
View File

@ -931,28 +931,10 @@ int mbedtls_ssl_tls13_write_identities_of_pre_shared_key_ext(
if (ssl_tls13_ticket_get_identity( if (ssl_tls13_ticket_get_identity(
ssl, &hash_alg, &identity, &identity_len) == 0) { ssl, &hash_alg, &identity, &identity_len) == 0) {
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
mbedtls_time_t now = mbedtls_time(NULL); mbedtls_ms_time_t now = mbedtls_ms_time();
mbedtls_ssl_session *session = ssl->session_negotiate; mbedtls_ssl_session *session = ssl->session_negotiate;
uint32_t obfuscated_ticket_age = uint32_t obfuscated_ticket_age =
(uint32_t) (now - session->ticket_received); (uint32_t) (now - session->ticket_received);
/*
* The ticket timestamp is in seconds but the ticket age is in
* milliseconds. If the ticket was received at the end of a second and
* re-used here just at the beginning of the next second, the computed
* age `now - session->ticket_received` is equal to 1s thus 1000 ms
* while the actual age could be just a few milliseconds or tens of
* milliseconds. If the server has more accurate ticket timestamps
* (typically timestamps in milliseconds), as part of the processing of
* the ClientHello, it may compute a ticket lifetime smaller than the
* one computed here and potentially reject the ticket. To avoid that,
* remove one second to the ticket age if possible.
*/
if (obfuscated_ticket_age > 0) {
obfuscated_ticket_age -= 1;
}
obfuscated_ticket_age *= 1000;
obfuscated_ticket_age += session->ticket_age_add; obfuscated_ticket_age += session->ticket_age_add;
ret = ssl_tls13_write_identity(ssl, p, end, ret = ssl_tls13_write_identity(ssl, p, end,
@ -2837,7 +2819,7 @@ static int ssl_tls13_postprocess_new_session_ticket(mbedtls_ssl_context *ssl,
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
/* Store ticket creation time */ /* Store ticket creation time */
session->ticket_received = mbedtls_time(NULL); session->ticket_received = mbedtls_ms_time();
#endif #endif
ciphersuite_info = mbedtls_ssl_ciphersuite_from_id(session->ciphersuite); ciphersuite_info = mbedtls_ssl_ciphersuite_from_id(session->ciphersuite);

45
library/ssl_tls13_server.c
View File

@ -111,9 +111,10 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
unsigned char *ticket_buffer; unsigned char *ticket_buffer;
unsigned int key_exchanges; unsigned int key_exchanges;
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
mbedtls_time_t now; mbedtls_ms_time_t now;
uint64_t age_in_s; mbedtls_ms_time_t server_age;
int64_t age_diff_in_ms; mbedtls_ms_time_t client_age;
mbedtls_ms_time_t age_diff;
#endif #endif
((void) obfuscated_ticket_age); ((void) obfuscated_ticket_age);
@ -190,17 +191,16 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
ret = MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED; ret = MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED;
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
now = mbedtls_time(NULL); now = mbedtls_ms_time();
if (now < session->start) { if (now < session->start) {
MBEDTLS_SSL_DEBUG_MSG( MBEDTLS_SSL_DEBUG_MSG(
3, ("Invalid ticket start time ( now=%" MBEDTLS_PRINTF_LONGLONG 3, ("Invalid ticket start time ( now=%" MBEDTLS_PRINTF_MS_TIME
", start=%" MBEDTLS_PRINTF_LONGLONG " )", ", start=%" MBEDTLS_PRINTF_MS_TIME " )", now, session->start));
(long long) now, (long long) session->start));
goto exit; goto exit;
} }
age_in_s = (uint64_t) (now - session->start); server_age = now - session->start;
/* RFC 8446 section 4.6.1 /* RFC 8446 section 4.6.1
* *
@ -213,10 +213,10 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
* *
* For time being, the age MUST be less than 604800 seconds (7 days). * For time being, the age MUST be less than 604800 seconds (7 days).
*/ */
if (age_in_s > 604800) { if (server_age > 604800*1000) {
MBEDTLS_SSL_DEBUG_MSG( MBEDTLS_SSL_DEBUG_MSG(
3, ("Ticket age exceeds limitation ticket_age=%lu", 3, ("Ticket age exceeds limitation ticket_age=%" MBEDTLS_PRINTF_MS_TIME,
(long unsigned int) age_in_s)); server_age));
goto exit; goto exit;
} }
@ -227,18 +227,19 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
* ticket_age_add from PskIdentity.obfuscated_ticket_age modulo 2^32) is * ticket_age_add from PskIdentity.obfuscated_ticket_age modulo 2^32) is
* within a small tolerance of the time since the ticket was issued. * within a small tolerance of the time since the ticket was issued.
* *
* NOTE: When `now == session->start`, `age_diff_in_ms` may be negative * NOTE: Typical crystal RTC accuracy specifications are from ±100 to ±20
* as the age units are different on the server (s) and in the * parts per million (360 to 72 million seconds per hour). Defualt
* client (ms) side. Add a -1000 ms tolerance window to take this * tolerance windows is 6000 millionsections, that means client host
* into account. * MUST sync up system time every 16 hours. Otherwise, the ticket will
* be invalid.
*/ */
age_diff_in_ms = age_in_s * 1000; client_age = obfuscated_ticket_age - session->ticket_age_add;
age_diff_in_ms -= (obfuscated_ticket_age - session->ticket_age_add); age_diff = server_age - client_age;
if (age_diff_in_ms <= -1000 || if (age_diff < -1000 ||
age_diff_in_ms > MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE) { age_diff > MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE) {
MBEDTLS_SSL_DEBUG_MSG( MBEDTLS_SSL_DEBUG_MSG(
3, ("Ticket age outside tolerance window ( diff=%d )", 3, ("Ticket age outside tolerance window ( diff=%" MBEDTLS_PRINTF_MS_TIME ")",
(int) age_diff_in_ms)); age_diff));
goto exit; goto exit;
} }
@ -2877,7 +2878,7 @@ static int ssl_tls13_prepare_new_session_ticket(mbedtls_ssl_context *ssl,
MBEDTLS_SSL_DEBUG_MSG(2, ("=> prepare NewSessionTicket msg")); MBEDTLS_SSL_DEBUG_MSG(2, ("=> prepare NewSessionTicket msg"));
#if defined(MBEDTLS_HAVE_TIME) #if defined(MBEDTLS_HAVE_TIME)
session->start = mbedtls_time(NULL); session->start = mbedtls_ms_time();
#endif #endif
/* Set ticket_flags depends on the advertised psk key exchange mode */ /* Set ticket_flags depends on the advertised psk key exchange mode */

8
programs/ssl/ssl_server2.c
View File

@ -1420,16 +1420,16 @@ int dummy_ticket_parse(void *p_ticket, mbedtls_ssl_session *session,
case 2: case 2:
return MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED; return MBEDTLS_ERR_SSL_SESSION_TICKET_EXPIRED;
case 3: case 3:
session->start = mbedtls_time(NULL) + 10; session->start = mbedtls_ms_time() + 10 * 1000;
break; break;
case 4: case 4:
session->start = mbedtls_time(NULL) - 10 - 7 * 24 * 3600; session->start = mbedtls_ms_time() - 10 * 1000 - 7 * 24 * 3600 * 1000;
break; break;
case 5: case 5:
session->start = mbedtls_time(NULL) - 10; session->start = mbedtls_ms_time() - 10 * 1000;
break; break;
case 6: case 6:
session->start = mbedtls_time(NULL); session->start = mbedtls_ms_time();
#if defined(MBEDTLS_SSL_PROTO_TLS1_3) #if defined(MBEDTLS_SSL_PROTO_TLS1_3)
session->ticket_age_add -= 1000; session->ticket_age_add -= 1000;
#endif #endif