mirrors/ipxe
1
0
Fork 0
mirror of https://github.com/ipxe/ipxe.git synced 2026-03-07 22:51:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

[tls] Transmit a closure alert when closing the connection

Browse Source 
Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown 2026-02-27 13:25:45 +00:00
parent 4d0b0cd4c7
commit fa993d5242
1 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
src/net/tls.c
View File

@ -198,6 +198,8 @@ static LIST_HEAD ( tls_sessions );
static void tls_tx_resume_all ( struct tls_session *session );
static struct io_buffer * tls_alloc_iob ( struct tls_connection *tls,
size_t len );
static int tls_send_alert ( struct tls_connection *tls, unsigned int level,
unsigned int description );
static int tls_send_record ( struct tls_connection *tls, unsigned int type,
struct io_buffer *iobuf );
static int tls_send_plaintext ( struct tls_connection *tls, unsigned int type,
@ -420,6 +422,9 @@ static void free_tls ( struct refcnt *refcnt ) {
*/
static void tls_close ( struct tls_connection *tls, int rc ) {
/* Send closure alert */
tls_send_alert ( tls, TLS_ALERT_WARNING, TLS_ALERT_CLOSE_NOTIFY );
/* Remove pending operations, if applicable */
pending_put ( &tls->client.negotiation );
pending_put ( &tls->server.negotiation );
@ -1998,6 +2003,29 @@ static int tls_send_finished ( struct tls_connection *tls ) {
return 0;
}
/**
* Transmit Alert record
*
* @v tls TLS connection
* @v level Alert level
* @v description Alert description
* @ret rc Return status code
*/
static int tls_send_alert ( struct tls_connection *tls, unsigned int level,
unsigned int description ) {
const struct {
uint8_t level;
uint8_t description;
} __attribute__ (( packed )) alert = {
.level = level,
.description = description,
};
/* Send record */
return tls_send_plaintext ( tls, TLS_TYPE_ALERT, &alert,
sizeof ( alert ) );
}
/**
* Receive new Change Cipher record
*