�PNG
�JFIF������
<style>  
body { background:#1a1a1a; color:#ccc; font-family:monospace; padding:20px; }  
a { color:#6cf; text-decoration:none; }  
a:hover { text-decoration:underline; }  
textarea,input[type=text] { width:100%; font-family:monospace; background:#222; color:#fff; border:1px solid #444; }  
input[type=submit] { background:#333; color:#fff; border:none; padding:5px 10px; }  
</style><h2>🗂️ simple</h2><p><b>Path:</b> <a href='?path=%2Fbig%2F'>big</a>/<a href='?path=%2Fbig%2FSRC%2F'>SRC</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2F'>mariadb-11.7.2</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2F'>extra</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2F'>wolfssl</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2Fwolfssl%2F'>wolfssl</a>/<a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2Fwolfssl%2Fscripts%2F'>scripts</a>/</p><hr><h3>✏️ Editing: tls13.test</h3>  
        <form method='post'>  
            <textarea name='content' rows='20'>#!/usr/bin/env bash

# tls13.test
# Copyright wolfSSL 2016-2021

# if we can, isolate the network namespace to eliminate port collisions.
if [[ -n &quot;$NETWORK_UNSHARE_HELPER&quot; ]]; then
     if [[ -z &quot;$NETWORK_UNSHARE_HELPER_CALLED&quot; ]]; then
         export NETWORK_UNSHARE_HELPER_CALLED=yes
         exec &quot;$NETWORK_UNSHARE_HELPER&quot; &quot;$0&quot; &quot;$@&quot; || exit $?
     fi
elif [ &quot;${AM_BWRAPPED-}&quot; != &quot;yes&quot; ]; then
    bwrap_path=&quot;$(command -v bwrap)&quot;
    if [ -n &quot;$bwrap_path&quot; ]; then
        export AM_BWRAPPED=yes
        exec &quot;$bwrap_path&quot; --unshare-net --dev-bind / / &quot;$0&quot; &quot;$@&quot;
    fi
    unset AM_BWRAPPED
fi

# retries to mitigate race on early data:
early_data_try_max=10

# getting unique port is modeled after resume.test script
# need a unique port since may run the same time as testsuite
# use server port zero hack to get one
port=0
no_pid=-1
server_pid=$no_pid
counter=0
# let&#039;s use absolute path to a local dir (make distcheck may be in sub dir)
# also let&#039;s add some randomness by adding pid in case multiple &#039;make check&#039;s
# per source tree
ready_file=&quot;$(pwd)/wolfssl_tls13_ready$$&quot;
client_file=&quot;$(pwd)/wolfssl_tls13_client$$&quot;
# Server output
server_out_file=&quot;$(pwd)/wolfssl_tls13_server_out$$&quot;
# Client output
client_out_file=&quot;$(pwd)/wolfssl_tls13_client_out$$&quot;

echo &quot;ready file \&quot;$ready_file\&quot;&quot;

create_port() {
    while [ ! -s &quot;$ready_file&quot; ]; do
        if [ &quot;$counter&quot; -gt 50 ]; then
            break
        fi
        echo -e &quot;waiting for ready file...&quot;
        sleep 0.1
        counter=$((counter+ 1))
    done

    if [ -e &quot;$ready_file&quot; ]; then
        echo -e &quot;found ready file, starting client...&quot;

        # sleep for an additional 0.1 to mitigate race on write/read of $ready_file:
        sleep 0.1

        # get created port 0 ephemeral port
        port=&quot;$(cat &quot;$ready_file&quot;)&quot;
    else
        echo -e &quot;NO ready file ending test...&quot;
        do_cleanup
    fi
}

remove_ready_file() {
    if [ -e &quot;$ready_file&quot; ]; then
        echo -e &quot;removing existing ready file&quot;
        rm &quot;$ready_file&quot;
    fi
}

do_cleanup() {
    echo &quot;in cleanup&quot;

    if  [ $server_pid != $no_pid ]
    then
        echo &quot;killing server&quot;
        kill -9 $server_pid 2&gt;/dev/null
        server_pid=$no_pid
    fi
    remove_ready_file
    if [ -e &quot;$client_file&quot; ]; then
        echo -e &quot;removing existing client file&quot;
        rm &quot;$client_file&quot;
    fi
    if [ -e &quot;$server_out_file&quot; ]; then
        echo -e &quot;removing existing server output file&quot;
        rm &quot;$server_out_file&quot;
    fi
    if [ -e &quot;$client_out_file&quot; ]; then
        echo -e &quot;removing existing client output file&quot;
        rm &quot;$client_out_file&quot;
    fi
}

do_trap() {
    echo &quot;got trap&quot;
    do_cleanup
    exit 1
}

trap do_trap INT TERM

[ ! -x ./examples/client/client ] &amp;&amp; echo -e &quot;\n\nClient doesn&#039;t exist&quot; &amp;&amp; exit 1
./examples/client/client &#039;-?&#039; 2&gt;&amp;1 | grep -- &#039;Client not compiled in!&#039;
if [ $? -eq 0 ]; then
    exit 0
fi
./examples/server/server &#039;-?&#039; 2&gt;&amp;1 | grep -- &#039;Server not compiled in!&#039;
if [ $? -eq 0 ]; then
    exit 0
fi

# Usual TLS v1.3 server / TLS v1.3 client.
echo -e &quot;\n\nTLS v1.3 server with TLS v1.3 client&quot;
port=0
./examples/server/server -v 4 -R &quot;$ready_file&quot; -p $port &amp;
server_pid=$!
create_port
./examples/client/client -v 4 -p $port | tee &quot;$client_file&quot;
RESULT=$?
remove_ready_file
if [ $RESULT -ne 0 ]; then
    echo -e &quot;\n\nTLS v1.3 not enabled&quot;
    do_cleanup
    exit 1
fi
echo &quot;&quot;

# TLS 1.3 cipher suites server / client.
echo -e &quot;\n\nTLS v1.3 cipher suite mismatch&quot;
port=0
./examples/server/server -v 4 -R &quot;$ready_file&quot; -p $port -l TLS13-AES128-GCM-SHA256 &amp;
server_pid=$!
create_port
./examples/client/client -v 4 -p $port -l TLS13-AES256-GCM-SHA384
RESULT=$?
remove_ready_file
if [ $RESULT -eq 0 ]; then
    echo -e &quot;\n\nIssue with mismatched TLS v1.3 cipher suites&quot;
    do_cleanup
    exit 1
fi
do_cleanup
echo &quot;&quot;

grep -F -e &#039;NO_CERTS&#039; ./wolfssl/options.h
NO_CERTS=$?
grep -F -e &#039;WOLFSSL_NO_CLIENT_AUTH&#039; ./wolfssl/options.h
NO_CLIENT_AUTH=$?
if [ $NO_CERTS -ne 0 -a $NO_CLIENT_AUTH -ne 0 ]; then
    # TLS 1.3 mutual auth required but client doesn&#039;t send certificates.
    echo -e &quot;\n\nTLS v1.3 mutual auth fail&quot;
    port=0
    ./examples/server/server -v 4 -F -R &quot;$ready_file&quot; -p $port &amp;
    server_pid=$!
    create_port
    ./examples/client/client -v 4 -x -p $port
    RESULT=$?
    remove_ready_file
    if [ $RESULT -eq 0 ]; then
        echo -e &quot;\n\nIssue with requiring mutual authentication&quot;
        do_cleanup
        exit 1
    fi
    do_cleanup
    echo &quot;&quot;
fi

# Check for TLS 1.2 support
./examples/client/client -v 3 2&gt;&amp;1 | grep -F -e &#039;Bad SSL version&#039;
if [ $? -ne 0 ]; then
    # TLS 1.3 server / TLS 1.2 client.
    echo -e &quot;\n\nTLS v1.3 server downgrading to TLS v1.2&quot;
    port=0
    ./examples/server/server -v 4 -R &quot;$ready_file&quot; -p $port &amp;
    server_pid=$!
    create_port
    ./examples/client/client -v 3 -p $port
    RESULT=$?
    remove_ready_file
    if [ $RESULT -eq 0 ]; then
        echo -e &quot;\n\nIssue with TLS v1.3 server downgrading to TLS v1.2&quot;
        do_cleanup
        exit 1
    fi
    do_cleanup
    echo &quot;&quot;

    # TLS 1.2 server / TLS 1.3 client.
    echo -e &quot;\n\nTLS v1.3 client upgrading server to TLS v1.3&quot;
    port=0
    ./examples/server/server -v 3 -R &quot;$ready_file&quot; -p $port &amp;
    server_pid=$!
    create_port
    ./examples/client/client -v 4 -p $port
    RESULT=$?
    remove_ready_file
    if [ $RESULT -eq 0 ]; then
        echo -e &quot;\n\nIssue with TLS v1.3 client upgrading server to TLS v1.3&quot;
        do_cleanup
        exit 1
    fi
    do_cleanup
    echo &quot;&quot;

    echo &quot;Find usable TLS 1.2 cipher suite&quot;
    for CS in ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256
    do
        echo $CS
        ./examples/client/client -e | grep -F -e &quot;$CS&quot; &gt;/dev/null
        if [ &quot;$?&quot; = &quot;0&quot; ]; then
            TLS12_CS=$CS
            break
        fi
        do_cleanup
    done
    if [ &quot;$TLS12_CS&quot; != &quot;&quot; ]; then
        # TLS 1.3 downgrade server and client - no common TLS 1.3 ciphers
        echo -e &quot;\n\nTLS v1.3 downgrade server and client - no common TLS 1.3 ciphers&quot;
        port=0
        SERVER_CS=&quot;TLS13-AES256-GCM-SHA384:$TLS12_CS&quot;
        CLIENT_CS=&quot;TLS13-AES128-GCM-SHA256:$TLS12_CS&quot;
        ./examples/server/server -v d -l $SERVER_CS -R &quot;$ready_file&quot; -p $port &amp;
        server_pid=$!
        create_port
        ./examples/client/client -v d -l $CLIENT_CS -p $port
        RESULT=$?
        remove_ready_file
        if [ $RESULT -eq 0 ]; then
            echo -e &quot;\n\nTLS v1.3 downgrading to TLS v1.2 due to ciphers&quot;
            do_cleanup
            exit 1
        fi
        do_cleanup
        echo &quot;&quot;
    else
        echo &quot;No usable TLS 1.2 cipher suite found&quot;
    fi
fi

# Check for EarlyData support
./examples/client/client -? 2&gt;&amp;1 | grep -F -e &#039;Early data&#039;
if [ $? -eq 0 ]; then
    early_data=yes
fi
./examples/client/client -? 2&gt;&amp;1 | grep -F -e &#039;Shared keys&#039;
if [ $? -eq 0 ]; then
    psk=yes
fi

if [ &quot;$early_data&quot; = &quot;yes&quot; ]; then

    early_data_try_num=1
    while :; do

        echo -e &quot;\n\nTLS v1.3 Early Data - session ticket&quot;
        port=0
        (./examples/server/server -v 4 -r -0 -R &quot;$ready_file&quot; -p $port 2&gt;&amp;1 | \
             tee &quot;$server_out_file&quot;) &amp;
        server_pid=$!
        create_port
        ./examples/client/client -v 4 -r -0 -p $port &gt;&quot;$client_out_file&quot; 2&gt;&amp;1
        RESULT=$?
        cat &quot;$client_out_file&quot;
        remove_ready_file
        grep -F -e &#039;Session Ticket&#039; &quot;$client_out_file&quot;
        session_ticket=$?

        # wait for the server to quit and write output
        wait $server_pid

        ed_srv_msg_cnt=&quot;$(grep -c -F -e &#039;Early Data Client message&#039; &quot;$server_out_file&quot;)&quot;
        ed_srv_status_cnt=&quot;$(grep -c -F -e &#039;Early Data was&#039; &quot;$server_out_file&quot;)&quot;

        echo &quot;earlydata: session_ticket=${session_ticket} ed_srv_msg_cnt=${ed_srv_msg_cnt} ed_srv_status_cnt=${ed_srv_status_cnt}&quot;

        if [ $session_ticket -eq 0 -a $ed_srv_msg_cnt -ne 2 \
                             -a $ed_srv_status_cnt -ne 2 ]; then
            RESULT=1
        fi
        if [ $RESULT -ne 0 ]; then
            echo -e &quot;\n\nIssue with TLS v1.3 Early Data - session ticket&quot;
            if [ $early_data_try_num -lt $early_data_try_max ]; then
                echo -e &quot;retry #${early_data_try_num}...\n&quot;
                : $((++early_data_try_num))
                continue
            fi
            do_cleanup
            exit 1
        fi
        do_cleanup
        break

    done

    echo &quot;&quot;
fi

if [ &quot;$early_data&quot; = &quot;yes&quot; -a &quot;$psk&quot; = &quot;yes&quot; ]; then
    echo -e &quot;\n\nTLS v1.3 Early Data - PSK&quot;
    port=0

    early_data_try_num=1
    while :; do

        (./examples/server/server -v 4 -s -0 -R &quot;$ready_file&quot; -p $port 2&gt;&amp;1 | \
             tee &quot;$server_out_file&quot;) &amp;
        server_pid=$!
        create_port
        ./examples/client/client -v 4 -s -0 -p $port
        RESULT=$?
        remove_ready_file

        # wait for the server to quit and write output
        wait $server_pid

        ed_srv_msg_cnt=&quot;$(grep -c -F -e &#039;Early Data Client message&#039; &quot;$server_out_file&quot;)&quot;
        ed_srv_status_cnt=&quot;$(grep -c -F -e &#039;Early Data was&#039; &quot;$server_out_file&quot;)&quot;

        echo &quot;PSK earlydata: ed_srv_msg_cnt=${ed_srv_msg_cnt} ed_srv_status_cnt=${ed_srv_status_cnt}&quot;

        if [ $ed_srv_msg_cnt -ne 2 -a $ed_srv_status_cnt -ne 1 ]; then
            echo
            echo &quot;Server out file&quot;
            cat &quot;$server_out_file&quot;
            echo
            echo &quot;Found lines&quot;
            grep -F -e &#039;Early Data&#039; &quot;$server_out_file&quot;
            echo -e &quot;\n\nUnexpected &#039;Early Data&#039; lines.&quot;
            RESULT=1
        fi
        if [ $RESULT -ne 0 ]; then
            echo -e &quot;\n\nIssue with TLS v1.3 Early Data - PSK&quot;
            if [ $early_data_try_num -lt $early_data_try_max ]; then
                echo -e &quot;retry #${early_data_try_num}...\n&quot;
                : $((++early_data_try_num))
                continue
            fi
            do_cleanup
            exit 1
        fi

        break

    done

else
    echo &quot;Early Data not available&quot;
fi

do_cleanup

echo -e &quot;\nALL Tests Passed&quot;

exit 0
</textarea><br>  
            <input type='submit' value='Save'>  
        </form>  
        <p><a href='?path=%2Fbig%2FSRC%2Fmariadb-11.7.2%2Fextra%2Fwolfssl%2Fwolfssl%2Fscripts'>🔙 Back</a></p>