;/* * TLS Server Hello and Server Hello Done * (C) 2004-2011 Jack Lloyd * * Released under the terms of the Botan license */ #include #include #include #include #include #include namespace Botan { namespace TLS { /* * Create a new Server Hello message */ Server_Hello::Server_Hello(Handshake_IO& io, Handshake_Hash& hash, const std::vector& session_id, Protocol_Version ver, u16bit ciphersuite, byte compression, size_t max_fragment_size, bool client_has_secure_renegotiation, const std::vector& reneg_info, bool offer_session_ticket, bool client_has_npn, const std::vector& next_protocols, bool client_has_heartbeat, RandomNumberGenerator& rng) : m_version(ver), m_session_id(session_id), m_random(make_hello_random(rng)), m_ciphersuite(ciphersuite), m_comp_method(compression), m_fragment_size(max_fragment_size), m_secure_renegotiation(client_has_secure_renegotiation), m_renegotiation_info(reneg_info), m_next_protocol(client_has_npn), m_next_protocols(next_protocols), m_supports_session_ticket(offer_session_ticket), m_supports_heartbeats(client_has_heartbeat), m_peer_can_send_heartbeats(true) { hash.update(io.send(*this)); } /* * Deserialize a Server Hello message */ Server_Hello::Server_Hello(const std::vector& buf) { if(buf.size() < 38) throw Decoding_Error("Server_Hello: Packet corrupted"); TLS_Data_Reader reader(buf); const byte major_version = reader.get_byte(); const byte minor_version = reader.get_byte(); m_version = Protocol_Version(major_version, minor_version); m_random = reader.get_fixed(32); m_session_id = reader.get_range(1, 0, 32); m_ciphersuite = reader.get_u16bit(); m_comp_method = reader.get_byte(); Extensions extensions(reader); if(Renegotation_Extension* reneg = extensions.get()) { // checked by Client / Server as they know the handshake state m_secure_renegotiation = true; m_renegotiation_info = reneg->renegotiation_info(); } if(Next_Protocol_Notification* npn = extensions.get()) { m_next_protocols = npn->protocols(); m_next_protocol = true; } if(Session_Ticket* ticket = extensions.get()) { if(!ticket->contents().empty()) throw Decoding_Error("TLS server sent non-empty session ticket extension"); m_supports_session_ticket = true; } if(Heartbeat_Support_Indicator* hb = extensions.get()) { m_supports_heartbeats = true; m_peer_can_send_heartbeats = hb->peer_allowed_to_send(); } } /* * Serialize a Server Hello message */ std::vector Server_Hello::serialize() const { std::vector buf; buf.push_back(m_version.major_version()); buf.push_back(m_version.minor_version()); buf += m_random; append_tls_length_value(buf, m_session_id, 1); buf.push_back(get_byte(0, m_ciphersuite)); buf.push_back(get_byte(1, m_ciphersuite)); buf.push_back(m_comp_method); Extensions extensions; if(m_supports_heartbeats) extensions.add(new Heartbeat_Support_Indicator(m_peer_can_send_heartbeats)); if(m_secure_renegotiation) extensions.add(new Renegotation_Extension(m_renegotiation_info)); if(m_fragment_size != 0) extensions.add(new Maximum_Fragment_Length(m_fragment_size)); if(m_next_protocol) extensions.add(new Next_Protocol_Notification(m_next_protocols)); if(m_supports_session_ticket) extensions.add(new Session_Ticket()); buf += extensions.serialize(); return buf; } /* * Create a new Server Hello Done message */ Server_Hello_Done::Server_Hello_Done(Handshake_IO& io, Handshake_Hash& hash) { hash.update(io.send(*this)); } /* * Deserialize a Server Hello Done message */ Server_Hello_Done::Server_Hello_Done(const std::vector& buf) { if(buf.size()) throw Decoding_Error("Server_Hello_Done: Must be empty, and is not"); } /* * Serialize a Server Hello Done message */ std::vector Server_Hello_Done::serialize() const { return std::vector(); } } }