Skip to content

Instantly share code, notes, and snippets.

@bps

bps/oops.c

Forked from davepeck/oops.c
Created October 11, 2016 17:13
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save bps/22860e64a0a122f681fa625e92bed970 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save bps/22860e64a0a122f681fa625e92bed970 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @davepeck davepeck created this gist Feb 22, 2014.
    79 changes: 79 additions & 0 deletions oops.c
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,79 @@
    static OSStatus
    SSLVerifySignedServerKeyExchange(SSLContext *ctx, bool isRsa, SSLBuffer signedParams,
    uint8_t *signature, UInt16 signatureLen)
    {
    OSStatus err;
    SSLBuffer hashOut, hashCtx, clientRandom, serverRandom;
    uint8_t hashes[SSL_SHA1_DIGEST_LEN + SSL_MD5_DIGEST_LEN];
    SSLBuffer signedHashes;
    uint8_t *dataToSign;
    size_t dataToSignLen;

    signedHashes.data = 0;
    hashCtx.data = 0;

    clientRandom.data = ctx->clientRandom;
    clientRandom.length = SSL_CLIENT_SRVR_RAND_SIZE;
    serverRandom.data = ctx->serverRandom;
    serverRandom.length = SSL_CLIENT_SRVR_RAND_SIZE;


    if(isRsa) {
    /* skip this if signing with DSA */
    dataToSign = hashes;
    dataToSignLen = SSL_SHA1_DIGEST_LEN + SSL_MD5_DIGEST_LEN;
    hashOut.data = hashes;
    hashOut.length = SSL_MD5_DIGEST_LEN;

    if ((err = ReadyHash(&SSLHashMD5, &hashCtx)) != 0)
    goto fail;
    if ((err = SSLHashMD5.update(&hashCtx, &clientRandom)) != 0)
    goto fail;
    if ((err = SSLHashMD5.update(&hashCtx, &serverRandom)) != 0)
    goto fail;
    if ((err = SSLHashMD5.update(&hashCtx, &signedParams)) != 0)
    goto fail;
    if ((err = SSLHashMD5.final(&hashCtx, &hashOut)) != 0)
    goto fail;
    }
    else {
    /* DSA, ECDSA - just use the SHA1 hash */
    dataToSign = &hashes[SSL_MD5_DIGEST_LEN];
    dataToSignLen = SSL_SHA1_DIGEST_LEN;
    }

    hashOut.data = hashes + SSL_MD5_DIGEST_LEN;
    hashOut.length = SSL_SHA1_DIGEST_LEN;
    if ((err = SSLFreeBuffer(&hashCtx)) != 0)
    goto fail;

    if ((err = ReadyHash(&SSLHashSHA1, &hashCtx)) != 0)
    goto fail;
    if ((err = SSLHashSHA1.update(&hashCtx, &clientRandom)) != 0)
    goto fail;
    if ((err = SSLHashSHA1.update(&hashCtx, &serverRandom)) != 0)
    goto fail;
    if ((err = SSLHashSHA1.update(&hashCtx, &signedParams)) != 0)
    goto fail;
    goto fail;
    if ((err = SSLHashSHA1.final(&hashCtx, &hashOut)) != 0)
    goto fail;

    err = sslRawVerify(ctx,
    ctx->peerPubKey,
    dataToSign, /* plaintext */
    dataToSignLen, /* plaintext length */
    signature,
    signatureLen);
    if(err) {
    sslErrorLog("SSLDecodeSignedServerKeyExchange: sslRawVerify "
    "returned %d\n", (int)err);
    goto fail;
    }

    fail:
    SSLFreeBuffer(&signedHashes);
    SSLFreeBuffer(&hashCtx);
    return err;

    }