sysadmin/ipxe
1
0
Fork 0
mirror of https://github.com/ipxe/ipxe synced 2026-05-18 10:00:30 +03:00
Code Issues Packages Projects Releases Wiki Activity

[tls] Transmit a closure alert when closing the connection

Browse Source 
Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2026-02-27 13:25:45 +00:00
parent 4d0b0cd4c7
commit fa993d5242
1 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/net/tls.c
+28
View File
@@ -198,6 +198,8 @@ static LIST_HEAD ( tls_sessions );
static void tls_tx_resume_all ( struct tls_session *session ); static void tls_tx_resume_all ( struct tls_session *session );
static struct io_buffer * tls_alloc_iob ( struct tls_connection *tls, static struct io_buffer * tls_alloc_iob ( struct tls_connection *tls,
size_t len ); size_t len );
static int tls_send_alert ( struct tls_connection *tls, unsigned int level,
unsigned int description );
static int tls_send_record ( struct tls_connection *tls, unsigned int type, static int tls_send_record ( struct tls_connection *tls, unsigned int type,
struct io_buffer *iobuf ); struct io_buffer *iobuf );
static int tls_send_plaintext ( struct tls_connection *tls, unsigned int type, static int tls_send_plaintext ( struct tls_connection *tls, unsigned int type,
@@ -420,6 +422,9 @@ static void free_tls ( struct refcnt *refcnt ) {
*/ */
static void tls_close ( struct tls_connection *tls, int rc ) { static void tls_close ( struct tls_connection *tls, int rc ) {
/* Send closure alert */
tls_send_alert ( tls, TLS_ALERT_WARNING, TLS_ALERT_CLOSE_NOTIFY );
/* Remove pending operations, if applicable */ /* Remove pending operations, if applicable */
pending_put ( &tls->client.negotiation ); pending_put ( &tls->client.negotiation );
pending_put ( &tls->server.negotiation ); pending_put ( &tls->server.negotiation );
@@ -1998,6 +2003,29 @@ static int tls_send_finished ( struct tls_connection *tls ) {
return 0; return 0;
} }
/**
* Transmit Alert record
*
* @v tls TLS connection
* @v level Alert level
* @v description Alert description
* @ret rc Return status code
*/
static int tls_send_alert ( struct tls_connection *tls, unsigned int level,
unsigned int description ) {
const struct {
uint8_t level;
uint8_t description;
} __attribute__ (( packed )) alert = {
.level = level,
.description = description,
};
/* Send record */
return tls_send_plaintext ( tls, TLS_TYPE_ALERT, &alert,
sizeof ( alert ) );
}
/** /**
* Receive new Change Cipher record * Receive new Change Cipher record
* *