ASR_BASE
Change-Id: Icf3719cc0afe3eeb3edc7fa80a2eb5199ca9dda1
diff --git a/package/kernel/asr-wl/asr-hostapd/asr-hostapd-2023-06-22/tests/test-https_server.c b/package/kernel/asr-wl/asr-hostapd/asr-hostapd-2023-06-22/tests/test-https_server.c
new file mode 100644
index 0000000..9dcca55
--- /dev/null
+++ b/package/kernel/asr-wl/asr-hostapd/asr-hostapd-2023-06-22/tests/test-https_server.c
@@ -0,0 +1,283 @@
+/*
+ * Testing tool for TLSv1 server routines using HTTPS
+ * Copyright (c) 2011-2019, Jouni Malinen <j@w1.fi>
+ *
+ * This software may be distributed under the terms of the BSD license.
+ * See README for more details.
+ */
+
+#include "includes.h"
+
+#include "common.h"
+#include "crypto/tls.h"
+
+
+static void https_tls_event_cb(void *ctx, enum tls_event ev,
+ union tls_event_data *data)
+{
+ wpa_printf(MSG_DEBUG, "HTTPS: TLS event %d", ev);
+}
+
+
+static struct wpabuf * https_recv(int s, int timeout_ms)
+{
+ struct wpabuf *in;
+ int len, ret;
+ fd_set rfds;
+ struct timeval tv;
+
+ in = wpabuf_alloc(20000);
+ if (in == NULL)
+ return NULL;
+
+ FD_ZERO(&rfds);
+ FD_SET(s, &rfds);
+ tv.tv_sec = timeout_ms / 1000;
+ tv.tv_usec = timeout_ms % 1000;
+
+ wpa_printf(MSG_DEBUG, "Waiting for more data");
+ ret = select(s + 1, &rfds, NULL, NULL, &tv);
+ if (ret < 0) {
+ wpa_printf(MSG_ERROR, "select: %s", strerror(errno));
+ wpabuf_free(in);
+ return NULL;
+ }
+ if (ret == 0) {
+ /* timeout */
+ wpa_printf(MSG_INFO, "Timeout on waiting for data");
+ wpabuf_free(in);
+ return NULL;
+ }
+
+ len = recv(s, wpabuf_put(in, 0), wpabuf_tailroom(in), 0);
+ if (len < 0) {
+ wpa_printf(MSG_ERROR, "recv: %s", strerror(errno));
+ wpabuf_free(in);
+ return NULL;
+ }
+ if (len == 0) {
+ wpa_printf(MSG_DEBUG, "No more data available");
+ wpabuf_free(in);
+ return NULL;
+ }
+ wpa_printf(MSG_DEBUG, "Received %d bytes", len);
+ wpabuf_put(in, len);
+
+ return in;
+}
+
+
+#ifdef CONFIG_TLS_INTERNAL_SERVER
+static void https_tls_log_cb(void *ctx, const char *msg)
+{
+ wpa_printf(MSG_DEBUG, "TLS: %s", msg);
+}
+#endif
+
+
+static int https_server(int s)
+{
+ struct tls_config conf;
+ void *tls;
+ struct tls_connection_params params;
+ struct tls_connection *conn;
+ struct wpabuf *in = NULL, *out = NULL, *appl = NULL;
+ int res = -1;
+
+ os_memset(&conf, 0, sizeof(conf));
+ conf.event_cb = https_tls_event_cb;
+ tls = tls_init(&conf);
+ if (!tls)
+ return -1;
+
+ os_memset(¶ms, 0, sizeof(params));
+ params.ca_cert = "hwsim/auth_serv/ca.pem";
+ params.client_cert = "hwsim/auth_serv/server.pem";
+ params.private_key = "hwsim/auth_serv/server.key";
+ params.dh_file = "hwsim/auth_serv/dh.conf";
+
+ if (tls_global_set_params(tls, ¶ms)) {
+ wpa_printf(MSG_ERROR, "Failed to set TLS parameters");
+ tls_deinit(tls);
+ return -1;
+ }
+
+ conn = tls_connection_init(tls);
+ if (!conn) {
+ tls_deinit(tls);
+ return -1;
+ }
+
+#ifdef CONFIG_TLS_INTERNAL_SERVER
+ tls_connection_set_log_cb(conn, https_tls_log_cb, NULL);
+#endif
+
+ for (;;) {
+ in = https_recv(s, 5000);
+ if (!in)
+ goto done;
+
+ appl = NULL;
+ out = tls_connection_server_handshake(tls, conn, in, &appl);
+ wpabuf_free(in);
+ in = NULL;
+ if (!out) {
+ if (!tls_connection_get_failed(tls, conn) &&
+ !tls_connection_established(tls, conn))
+ continue;
+ goto done;
+ }
+ wpa_printf(MSG_DEBUG, "Sending %d bytes",
+ (int) wpabuf_len(out));
+ if (send(s, wpabuf_head(out), wpabuf_len(out), 0) < 0) {
+ wpa_printf(MSG_ERROR, "send: %s", strerror(errno));
+ goto done;
+ }
+ wpabuf_free(out);
+ out = NULL;
+ if (tls_connection_get_failed(tls, conn)) {
+ wpa_printf(MSG_ERROR, "TLS handshake failed");
+ goto done;
+ }
+ if (tls_connection_established(tls, conn))
+ break;
+ }
+ wpabuf_free(out);
+ out = NULL;
+
+ wpa_printf(MSG_INFO, "TLS connection established");
+ if (appl)
+ wpa_hexdump_buf(MSG_DEBUG, "Received application data", appl);
+
+ wpa_printf(MSG_INFO, "Reading HTTP request");
+ for (;;) {
+ int need_more_data = 0;
+
+ in = https_recv(s, 5000);
+ if (!in)
+ goto done;
+#ifdef CONFIG_TLS_INTERNAL_SERVER
+ out = tls_connection_decrypt2(tls, conn, in, &need_more_data);
+#else
+ out = tls_connection_decrypt(tls, conn, in);
+#endif
+ wpabuf_free(in);
+ in = NULL;
+ if (need_more_data) {
+ wpa_printf(MSG_DEBUG, "HTTP: Need more data");
+ continue;
+ }
+ if (!out)
+ goto done;
+ wpa_hexdump_ascii(MSG_INFO, "Request",
+ wpabuf_head(out), wpabuf_len(out));
+ wpabuf_free(out);
+ out = NULL;
+ break;
+ }
+
+ in = wpabuf_alloc(1000);
+ if (!in)
+ goto done;
+ wpabuf_put_str(in, "HTTP/1.1 200 OK\r\n"
+ "Server: test-https_server\r\n"
+ "\r\n"
+ "<HTML><BODY>HELLO</BODY></HTML>\n");
+ wpa_hexdump_ascii(MSG_DEBUG, "Response",
+ wpabuf_head(in), wpabuf_len(in));
+ out = tls_connection_encrypt(tls, conn, in);
+ wpabuf_free(in);
+ in = NULL;
+ wpa_hexdump_buf(MSG_DEBUG, "Encrypted response", out);
+ if (!out)
+ goto done;
+
+ wpa_printf(MSG_INFO, "Sending HTTP response: %d bytes",
+ (int) wpabuf_len(out));
+ if (send(s, wpabuf_head(out), wpabuf_len(out), 0) < 0) {
+ wpa_printf(MSG_ERROR, "send: %s", strerror(errno));
+ goto done;
+ }
+ wpabuf_free(out);
+ out = NULL;
+
+ res = 0;
+done:
+ wpabuf_free(out);
+ wpabuf_free(in);
+ wpabuf_free(appl);
+ tls_connection_deinit(tls, conn);
+ tls_deinit(tls);
+ close(s);
+
+ return res;
+}
+
+
+int main(int argc, char *argv[])
+{
+ struct sockaddr_in sin;
+ int port, s, conn;
+ int on = 1;
+
+ wpa_debug_level = 0;
+ wpa_debug_show_keys = 1;
+
+ if (argc < 2) {
+ wpa_printf(MSG_INFO, "usage: test-https_server port");
+ return -1;
+ }
+
+ port = atoi(argv[1]);
+
+ s = socket(AF_INET, SOCK_STREAM, 0);
+ if (s < 0) {
+ perror("socket");
+ return -1;
+ }
+
+ if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on)) < 0) {
+ wpa_printf(MSG_DEBUG,
+ "HTTP: setsockopt(SO_REUSEADDR) failed: %s",
+ strerror(errno));
+ /* try to continue anyway */
+ }
+
+ os_memset(&sin, 0, sizeof(sin));
+ sin.sin_family = AF_INET;
+ sin.sin_port = htons(port);
+ if (bind(s, (struct sockaddr *) &sin, sizeof(sin)) < 0) {
+ perror("bind");
+ close(s);
+ return -1;
+ }
+
+ if (listen(s, 10) < 0) {
+ perror("listen");
+ close(s);
+ return -1;
+ }
+
+ for (;;) {
+ struct sockaddr_in addr;
+ socklen_t addr_len = sizeof(addr);
+
+ conn = accept(s, (struct sockaddr *) &addr, &addr_len);
+ if (conn < 0) {
+ perror("accept");
+ break;
+ }
+
+ wpa_printf(MSG_DEBUG, "-------------------------------------");
+ wpa_printf(MSG_DEBUG, "Connection from %s:%d",
+ inet_ntoa(addr.sin_addr), ntohs(addr.sin_port));
+
+ https_server(conn);
+ wpa_printf(MSG_DEBUG, "Done with the connection");
+ wpa_printf(MSG_DEBUG, "-------------------------------------");
+ }
+
+ close(s);
+
+ return 0;
+}