HttpsSupport.c 55 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877
  1. /** @file
  2. Miscellaneous routines specific to Https for HttpDxe driver.
  3. Copyright (c) 2016 - 2018, Intel Corporation. All rights reserved.<BR>
  4. (C) Copyright 2016 Hewlett Packard Enterprise Development LP<BR>
  5. SPDX-License-Identifier: BSD-2-Clause-Patent
  6. **/
  7. #include "HttpDriver.h"
  8. /**
  9. Returns the first occurrence of a Null-terminated ASCII sub-string in a Null-terminated
  10. ASCII string and ignore case during the search process.
  11. This function scans the contents of the ASCII string specified by String
  12. and returns the first occurrence of SearchString and ignore case during the search process.
  13. If SearchString is not found in String, then NULL is returned. If the length of SearchString
  14. is zero, then String is returned.
  15. If String is NULL, then ASSERT().
  16. If SearchString is NULL, then ASSERT().
  17. @param[in] String A pointer to a Null-terminated ASCII string.
  18. @param[in] SearchString A pointer to a Null-terminated ASCII string to search for.
  19. @retval NULL If the SearchString does not appear in String.
  20. @retval others If there is a match return the first occurrence of SearchingString.
  21. If the length of SearchString is zero,return String.
  22. **/
  23. CHAR8 *
  24. AsciiStrCaseStr (
  25. IN CONST CHAR8 *String,
  26. IN CONST CHAR8 *SearchString
  27. )
  28. {
  29. CONST CHAR8 *FirstMatch;
  30. CONST CHAR8 *SearchStringTmp;
  31. CHAR8 Src;
  32. CHAR8 Dst;
  33. //
  34. // ASSERT both strings are less long than PcdMaximumAsciiStringLength
  35. //
  36. ASSERT (AsciiStrSize (String) != 0);
  37. ASSERT (AsciiStrSize (SearchString) != 0);
  38. if (*SearchString == '\0') {
  39. return (CHAR8 *) String;
  40. }
  41. while (*String != '\0') {
  42. SearchStringTmp = SearchString;
  43. FirstMatch = String;
  44. while ((*SearchStringTmp != '\0')
  45. && (*String != '\0')) {
  46. Src = *String;
  47. Dst = *SearchStringTmp;
  48. if ((Src >= 'A') && (Src <= 'Z')) {
  49. Src += ('a' - 'A');
  50. }
  51. if ((Dst >= 'A') && (Dst <= 'Z')) {
  52. Dst += ('a' - 'A');
  53. }
  54. if (Src != Dst) {
  55. break;
  56. }
  57. String++;
  58. SearchStringTmp++;
  59. }
  60. if (*SearchStringTmp == '\0') {
  61. return (CHAR8 *) FirstMatch;
  62. }
  63. String = FirstMatch + 1;
  64. }
  65. return NULL;
  66. }
  67. /**
  68. The callback function to free the net buffer list.
  69. @param[in] Arg The opaque parameter.
  70. **/
  71. VOID
  72. EFIAPI
  73. FreeNbufList (
  74. IN VOID *Arg
  75. )
  76. {
  77. ASSERT (Arg != NULL);
  78. NetbufFreeList ((LIST_ENTRY *) Arg);
  79. FreePool (Arg);
  80. }
  81. /**
  82. Check whether the Url is from Https.
  83. @param[in] Url The pointer to a HTTP or HTTPS URL string.
  84. @retval TRUE The Url is from HTTPS.
  85. @retval FALSE The Url is from HTTP.
  86. **/
  87. BOOLEAN
  88. IsHttpsUrl (
  89. IN CHAR8 *Url
  90. )
  91. {
  92. CHAR8 *Tmp;
  93. Tmp = NULL;
  94. Tmp = AsciiStrCaseStr (Url, HTTPS_FLAG);
  95. if (Tmp != NULL && Tmp == Url) {
  96. return TRUE;
  97. }
  98. return FALSE;
  99. }
  100. /**
  101. Creates a Tls child handle, open EFI_TLS_PROTOCOL and EFI_TLS_CONFIGURATION_PROTOCOL.
  102. @param[in] ImageHandle The firmware allocated handle for the UEFI image.
  103. @param[out] TlsSb Pointer to the TLS SERVICE_BINDING_PROTOCOL.
  104. @param[out] TlsProto Pointer to the EFI_TLS_PROTOCOL instance.
  105. @param[out] TlsConfiguration Pointer to the EFI_TLS_CONFIGURATION_PROTOCOL instance.
  106. @return The child handle with opened EFI_TLS_PROTOCOL and EFI_TLS_CONFIGURATION_PROTOCOL.
  107. **/
  108. EFI_HANDLE
  109. EFIAPI
  110. TlsCreateChild (
  111. IN EFI_HANDLE ImageHandle,
  112. OUT EFI_SERVICE_BINDING_PROTOCOL **TlsSb,
  113. OUT EFI_TLS_PROTOCOL **TlsProto,
  114. OUT EFI_TLS_CONFIGURATION_PROTOCOL **TlsConfiguration
  115. )
  116. {
  117. EFI_STATUS Status;
  118. EFI_HANDLE TlsChildHandle;
  119. TlsChildHandle = 0;
  120. //
  121. // Locate TlsServiceBinding protocol.
  122. //
  123. gBS->LocateProtocol (
  124. &gEfiTlsServiceBindingProtocolGuid,
  125. NULL,
  126. (VOID **) TlsSb
  127. );
  128. if (*TlsSb == NULL) {
  129. return NULL;
  130. }
  131. Status = (*TlsSb)->CreateChild (*TlsSb, &TlsChildHandle);
  132. if (EFI_ERROR (Status)) {
  133. return NULL;
  134. }
  135. Status = gBS->OpenProtocol (
  136. TlsChildHandle,
  137. &gEfiTlsProtocolGuid,
  138. (VOID **) TlsProto,
  139. ImageHandle,
  140. TlsChildHandle,
  141. EFI_OPEN_PROTOCOL_GET_PROTOCOL
  142. );
  143. if (EFI_ERROR (Status)) {
  144. (*TlsSb)->DestroyChild (*TlsSb, TlsChildHandle);
  145. return NULL;
  146. }
  147. Status = gBS->OpenProtocol (
  148. TlsChildHandle,
  149. &gEfiTlsConfigurationProtocolGuid,
  150. (VOID **) TlsConfiguration,
  151. ImageHandle,
  152. TlsChildHandle,
  153. EFI_OPEN_PROTOCOL_GET_PROTOCOL
  154. );
  155. if (EFI_ERROR (Status)) {
  156. (*TlsSb)->DestroyChild (*TlsSb, TlsChildHandle);
  157. return NULL;
  158. }
  159. return TlsChildHandle;
  160. }
  161. /**
  162. Create event for the TLS receive and transmit tokens which are used to receive and
  163. transmit TLS related messages.
  164. @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
  165. @retval EFI_SUCCESS The events are created successfully.
  166. @retval others Other error as indicated.
  167. **/
  168. EFI_STATUS
  169. EFIAPI
  170. TlsCreateTxRxEvent (
  171. IN OUT HTTP_PROTOCOL *HttpInstance
  172. )
  173. {
  174. EFI_STATUS Status;
  175. if (!HttpInstance->LocalAddressIsIPv6) {
  176. //
  177. // For Tcp4TlsTxToken.
  178. //
  179. Status = gBS->CreateEvent (
  180. EVT_NOTIFY_SIGNAL,
  181. TPL_NOTIFY,
  182. HttpCommonNotify,
  183. &HttpInstance->TlsIsTxDone,
  184. &HttpInstance->Tcp4TlsTxToken.CompletionToken.Event
  185. );
  186. if (EFI_ERROR (Status)) {
  187. goto ERROR;
  188. }
  189. HttpInstance->Tcp4TlsTxData.Push = TRUE;
  190. HttpInstance->Tcp4TlsTxData.Urgent = FALSE;
  191. HttpInstance->Tcp4TlsTxData.DataLength = 0;
  192. HttpInstance->Tcp4TlsTxData.FragmentCount = 1;
  193. HttpInstance->Tcp4TlsTxData.FragmentTable[0].FragmentLength = HttpInstance->Tcp4TlsTxData.DataLength;
  194. HttpInstance->Tcp4TlsTxData.FragmentTable[0].FragmentBuffer = NULL;
  195. HttpInstance->Tcp4TlsTxToken.Packet.TxData = &HttpInstance->Tcp4TlsTxData;
  196. HttpInstance->Tcp4TlsTxToken.CompletionToken.Status = EFI_NOT_READY;
  197. //
  198. // For Tcp4TlsRxToken.
  199. //
  200. Status = gBS->CreateEvent (
  201. EVT_NOTIFY_SIGNAL,
  202. TPL_NOTIFY,
  203. HttpCommonNotify,
  204. &HttpInstance->TlsIsRxDone,
  205. &HttpInstance->Tcp4TlsRxToken.CompletionToken.Event
  206. );
  207. if (EFI_ERROR (Status)) {
  208. goto ERROR;
  209. }
  210. HttpInstance->Tcp4TlsRxData.DataLength = 0;
  211. HttpInstance->Tcp4TlsRxData.FragmentCount = 1;
  212. HttpInstance->Tcp4TlsRxData.FragmentTable[0].FragmentLength = HttpInstance->Tcp4TlsRxData.DataLength ;
  213. HttpInstance->Tcp4TlsRxData.FragmentTable[0].FragmentBuffer = NULL;
  214. HttpInstance->Tcp4TlsRxToken.Packet.RxData = &HttpInstance->Tcp4TlsRxData;
  215. HttpInstance->Tcp4TlsRxToken.CompletionToken.Status = EFI_NOT_READY;
  216. } else {
  217. //
  218. // For Tcp6TlsTxToken.
  219. //
  220. Status = gBS->CreateEvent (
  221. EVT_NOTIFY_SIGNAL,
  222. TPL_NOTIFY,
  223. HttpCommonNotify,
  224. &HttpInstance->TlsIsTxDone,
  225. &HttpInstance->Tcp6TlsTxToken.CompletionToken.Event
  226. );
  227. if (EFI_ERROR (Status)) {
  228. goto ERROR;
  229. }
  230. HttpInstance->Tcp6TlsTxData.Push = TRUE;
  231. HttpInstance->Tcp6TlsTxData.Urgent = FALSE;
  232. HttpInstance->Tcp6TlsTxData.DataLength = 0;
  233. HttpInstance->Tcp6TlsTxData.FragmentCount = 1;
  234. HttpInstance->Tcp6TlsTxData.FragmentTable[0].FragmentLength = HttpInstance->Tcp6TlsTxData.DataLength;
  235. HttpInstance->Tcp6TlsTxData.FragmentTable[0].FragmentBuffer = NULL;
  236. HttpInstance->Tcp6TlsTxToken.Packet.TxData = &HttpInstance->Tcp6TlsTxData;
  237. HttpInstance->Tcp6TlsTxToken.CompletionToken.Status = EFI_NOT_READY;
  238. //
  239. // For Tcp6TlsRxToken.
  240. //
  241. Status = gBS->CreateEvent (
  242. EVT_NOTIFY_SIGNAL,
  243. TPL_NOTIFY,
  244. HttpCommonNotify,
  245. &HttpInstance->TlsIsRxDone,
  246. &HttpInstance->Tcp6TlsRxToken.CompletionToken.Event
  247. );
  248. if (EFI_ERROR (Status)) {
  249. goto ERROR;
  250. }
  251. HttpInstance->Tcp6TlsRxData.DataLength = 0;
  252. HttpInstance->Tcp6TlsRxData.FragmentCount = 1;
  253. HttpInstance->Tcp6TlsRxData.FragmentTable[0].FragmentLength = HttpInstance->Tcp6TlsRxData.DataLength ;
  254. HttpInstance->Tcp6TlsRxData.FragmentTable[0].FragmentBuffer = NULL;
  255. HttpInstance->Tcp6TlsRxToken.Packet.RxData = &HttpInstance->Tcp6TlsRxData;
  256. HttpInstance->Tcp6TlsRxToken.CompletionToken.Status = EFI_NOT_READY;
  257. }
  258. return Status;
  259. ERROR:
  260. //
  261. // Error handling
  262. //
  263. TlsCloseTxRxEvent (HttpInstance);
  264. return Status;
  265. }
  266. /**
  267. Close events in the TlsTxToken and TlsRxToken.
  268. @param[in] HttpInstance Pointer to HTTP_PROTOCOL structure.
  269. **/
  270. VOID
  271. EFIAPI
  272. TlsCloseTxRxEvent (
  273. IN HTTP_PROTOCOL *HttpInstance
  274. )
  275. {
  276. ASSERT (HttpInstance != NULL);
  277. if (!HttpInstance->LocalAddressIsIPv6) {
  278. if (NULL != HttpInstance->Tcp4TlsTxToken.CompletionToken.Event) {
  279. gBS->CloseEvent(HttpInstance->Tcp4TlsTxToken.CompletionToken.Event);
  280. HttpInstance->Tcp4TlsTxToken.CompletionToken.Event = NULL;
  281. }
  282. if (NULL != HttpInstance->Tcp4TlsRxToken.CompletionToken.Event) {
  283. gBS->CloseEvent (HttpInstance->Tcp4TlsRxToken.CompletionToken.Event);
  284. HttpInstance->Tcp4TlsRxToken.CompletionToken.Event = NULL;
  285. }
  286. } else {
  287. if (NULL != HttpInstance->Tcp6TlsTxToken.CompletionToken.Event) {
  288. gBS->CloseEvent(HttpInstance->Tcp6TlsTxToken.CompletionToken.Event);
  289. HttpInstance->Tcp6TlsTxToken.CompletionToken.Event = NULL;
  290. }
  291. if (NULL != HttpInstance->Tcp6TlsRxToken.CompletionToken.Event) {
  292. gBS->CloseEvent (HttpInstance->Tcp6TlsRxToken.CompletionToken.Event);
  293. HttpInstance->Tcp6TlsRxToken.CompletionToken.Event = NULL;
  294. }
  295. }
  296. }
  297. /**
  298. Read the TlsCaCertificate variable and configure it.
  299. @param[in, out] HttpInstance The HTTP instance private data.
  300. @retval EFI_SUCCESS TlsCaCertificate is configured.
  301. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  302. @retval EFI_NOT_FOUND Fail to get 'TlsCaCertificate' variable.
  303. @retval Others Other error as indicated.
  304. **/
  305. EFI_STATUS
  306. TlsConfigCertificate (
  307. IN OUT HTTP_PROTOCOL *HttpInstance
  308. )
  309. {
  310. EFI_STATUS Status;
  311. UINT8 *CACert;
  312. UINTN CACertSize;
  313. UINT32 Index;
  314. EFI_SIGNATURE_LIST *CertList;
  315. EFI_SIGNATURE_DATA *Cert;
  316. UINTN CertArraySizeInBytes;
  317. UINTN CertCount;
  318. UINT32 ItemDataSize;
  319. CACert = NULL;
  320. CACertSize = 0;
  321. //
  322. // Try to read the TlsCaCertificate variable.
  323. //
  324. Status = gRT->GetVariable (
  325. EFI_TLS_CA_CERTIFICATE_VARIABLE,
  326. &gEfiTlsCaCertificateGuid,
  327. NULL,
  328. &CACertSize,
  329. NULL
  330. );
  331. if (EFI_ERROR (Status) && Status != EFI_BUFFER_TOO_SMALL) {
  332. return Status;
  333. }
  334. //
  335. // Allocate buffer and read the config variable.
  336. //
  337. CACert = AllocatePool (CACertSize);
  338. if (CACert == NULL) {
  339. return EFI_OUT_OF_RESOURCES;
  340. }
  341. Status = gRT->GetVariable (
  342. EFI_TLS_CA_CERTIFICATE_VARIABLE,
  343. &gEfiTlsCaCertificateGuid,
  344. NULL,
  345. &CACertSize,
  346. CACert
  347. );
  348. if (EFI_ERROR (Status)) {
  349. //
  350. // GetVariable still error or the variable is corrupted.
  351. //
  352. goto FreeCACert;
  353. }
  354. ASSERT (CACert != NULL);
  355. //
  356. // Sanity check
  357. //
  358. Status = EFI_INVALID_PARAMETER;
  359. CertCount = 0;
  360. ItemDataSize = (UINT32) CACertSize;
  361. while (ItemDataSize > 0) {
  362. if (ItemDataSize < sizeof (EFI_SIGNATURE_LIST)) {
  363. DEBUG ((DEBUG_ERROR, "%a: truncated EFI_SIGNATURE_LIST header\n",
  364. __FUNCTION__));
  365. goto FreeCACert;
  366. }
  367. CertList = (EFI_SIGNATURE_LIST *) (CACert + (CACertSize - ItemDataSize));
  368. if (CertList->SignatureListSize < sizeof (EFI_SIGNATURE_LIST)) {
  369. DEBUG ((DEBUG_ERROR,
  370. "%a: SignatureListSize too small for EFI_SIGNATURE_LIST\n",
  371. __FUNCTION__));
  372. goto FreeCACert;
  373. }
  374. if (CertList->SignatureListSize > ItemDataSize) {
  375. DEBUG ((DEBUG_ERROR, "%a: truncated EFI_SIGNATURE_LIST body\n",
  376. __FUNCTION__));
  377. goto FreeCACert;
  378. }
  379. if (!CompareGuid (&CertList->SignatureType, &gEfiCertX509Guid)) {
  380. DEBUG ((DEBUG_ERROR, "%a: only X509 certificates are supported\n",
  381. __FUNCTION__));
  382. Status = EFI_UNSUPPORTED;
  383. goto FreeCACert;
  384. }
  385. if (CertList->SignatureHeaderSize != 0) {
  386. DEBUG ((DEBUG_ERROR, "%a: SignatureHeaderSize must be 0 for X509\n",
  387. __FUNCTION__));
  388. goto FreeCACert;
  389. }
  390. if (CertList->SignatureSize < sizeof (EFI_SIGNATURE_DATA)) {
  391. DEBUG ((DEBUG_ERROR,
  392. "%a: SignatureSize too small for EFI_SIGNATURE_DATA\n", __FUNCTION__));
  393. goto FreeCACert;
  394. }
  395. CertArraySizeInBytes = (CertList->SignatureListSize -
  396. sizeof (EFI_SIGNATURE_LIST));
  397. if (CertArraySizeInBytes % CertList->SignatureSize != 0) {
  398. DEBUG ((DEBUG_ERROR,
  399. "%a: EFI_SIGNATURE_DATA array not a multiple of SignatureSize\n",
  400. __FUNCTION__));
  401. goto FreeCACert;
  402. }
  403. CertCount += CertArraySizeInBytes / CertList->SignatureSize;
  404. ItemDataSize -= CertList->SignatureListSize;
  405. }
  406. if (CertCount == 0) {
  407. DEBUG ((DEBUG_ERROR, "%a: no X509 certificates provided\n", __FUNCTION__));
  408. goto FreeCACert;
  409. }
  410. //
  411. // Enumerate all data and erasing the target item.
  412. //
  413. ItemDataSize = (UINT32) CACertSize;
  414. CertList = (EFI_SIGNATURE_LIST *) CACert;
  415. while ((ItemDataSize > 0) && (ItemDataSize >= CertList->SignatureListSize)) {
  416. Cert = (EFI_SIGNATURE_DATA *) ((UINT8 *) CertList + sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize);
  417. CertCount = (CertList->SignatureListSize - sizeof (EFI_SIGNATURE_LIST) - CertList->SignatureHeaderSize) / CertList->SignatureSize;
  418. for (Index = 0; Index < CertCount; Index++) {
  419. //
  420. // EfiTlsConfigDataTypeCACertificate
  421. //
  422. Status = HttpInstance->TlsConfiguration->SetData (
  423. HttpInstance->TlsConfiguration,
  424. EfiTlsConfigDataTypeCACertificate,
  425. Cert->SignatureData,
  426. CertList->SignatureSize - sizeof (Cert->SignatureOwner)
  427. );
  428. if (EFI_ERROR (Status)) {
  429. goto FreeCACert;
  430. }
  431. Cert = (EFI_SIGNATURE_DATA *) ((UINT8 *) Cert + CertList->SignatureSize);
  432. }
  433. ItemDataSize -= CertList->SignatureListSize;
  434. CertList = (EFI_SIGNATURE_LIST *) ((UINT8 *) CertList + CertList->SignatureListSize);
  435. }
  436. FreeCACert:
  437. FreePool (CACert);
  438. return Status;
  439. }
  440. /**
  441. Read the HttpTlsCipherList variable and configure it for HTTPS session.
  442. @param[in, out] HttpInstance The HTTP instance private data.
  443. @retval EFI_SUCCESS The prefered HTTP TLS CipherList is configured.
  444. @retval EFI_NOT_FOUND Fail to get 'HttpTlsCipherList' variable.
  445. @retval EFI_INVALID_PARAMETER The contents of variable are invalid.
  446. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  447. @retval Others Other error as indicated.
  448. **/
  449. EFI_STATUS
  450. TlsConfigCipherList (
  451. IN OUT HTTP_PROTOCOL *HttpInstance
  452. )
  453. {
  454. EFI_STATUS Status;
  455. UINT8 *CipherList;
  456. UINTN CipherListSize;
  457. CipherList = NULL;
  458. CipherListSize = 0;
  459. //
  460. // Try to read the HttpTlsCipherList variable.
  461. //
  462. Status = gRT->GetVariable (
  463. EDKII_HTTP_TLS_CIPHER_LIST_VARIABLE,
  464. &gEdkiiHttpTlsCipherListGuid,
  465. NULL,
  466. &CipherListSize,
  467. NULL
  468. );
  469. ASSERT (EFI_ERROR (Status));
  470. if (Status != EFI_BUFFER_TOO_SMALL) {
  471. return Status;
  472. }
  473. if (CipherListSize % sizeof (EFI_TLS_CIPHER) != 0) {
  474. return EFI_INVALID_PARAMETER;
  475. }
  476. //
  477. // Allocate buffer and read the config variable.
  478. //
  479. CipherList = AllocatePool (CipherListSize);
  480. if (CipherList == NULL) {
  481. return EFI_OUT_OF_RESOURCES;
  482. }
  483. Status = gRT->GetVariable (
  484. EDKII_HTTP_TLS_CIPHER_LIST_VARIABLE,
  485. &gEdkiiHttpTlsCipherListGuid,
  486. NULL,
  487. &CipherListSize,
  488. CipherList
  489. );
  490. if (EFI_ERROR (Status)) {
  491. //
  492. // GetVariable still error or the variable is corrupted.
  493. //
  494. goto ON_EXIT;
  495. }
  496. ASSERT (CipherList != NULL);
  497. Status = HttpInstance->Tls->SetSessionData (
  498. HttpInstance->Tls,
  499. EfiTlsCipherList,
  500. CipherList,
  501. CipherListSize
  502. );
  503. ON_EXIT:
  504. FreePool (CipherList);
  505. return Status;
  506. }
  507. /**
  508. Configure TLS session data.
  509. @param[in, out] HttpInstance The HTTP instance private data.
  510. @retval EFI_SUCCESS TLS session data is configured.
  511. @retval Others Other error as indicated.
  512. **/
  513. EFI_STATUS
  514. EFIAPI
  515. TlsConfigureSession (
  516. IN OUT HTTP_PROTOCOL *HttpInstance
  517. )
  518. {
  519. EFI_STATUS Status;
  520. //
  521. // TlsConfigData initialization
  522. //
  523. HttpInstance->TlsConfigData.ConnectionEnd = EfiTlsClient;
  524. HttpInstance->TlsConfigData.VerifyMethod = EFI_TLS_VERIFY_PEER;
  525. HttpInstance->TlsConfigData.SessionState = EfiTlsSessionNotStarted;
  526. //
  527. // EfiTlsConnectionEnd,
  528. // EfiTlsVerifyMethod
  529. // EfiTlsSessionState
  530. //
  531. Status = HttpInstance->Tls->SetSessionData (
  532. HttpInstance->Tls,
  533. EfiTlsConnectionEnd,
  534. &(HttpInstance->TlsConfigData.ConnectionEnd),
  535. sizeof (EFI_TLS_CONNECTION_END)
  536. );
  537. if (EFI_ERROR (Status)) {
  538. return Status;
  539. }
  540. Status = HttpInstance->Tls->SetSessionData (
  541. HttpInstance->Tls,
  542. EfiTlsVerifyMethod,
  543. &HttpInstance->TlsConfigData.VerifyMethod,
  544. sizeof (EFI_TLS_VERIFY)
  545. );
  546. if (EFI_ERROR (Status)) {
  547. return Status;
  548. }
  549. Status = HttpInstance->Tls->SetSessionData (
  550. HttpInstance->Tls,
  551. EfiTlsSessionState,
  552. &(HttpInstance->TlsConfigData.SessionState),
  553. sizeof (EFI_TLS_SESSION_STATE)
  554. );
  555. if (EFI_ERROR (Status)) {
  556. return Status;
  557. }
  558. //
  559. // Tls Cipher List
  560. //
  561. Status = TlsConfigCipherList (HttpInstance);
  562. if (EFI_ERROR (Status) && Status != EFI_NOT_FOUND) {
  563. DEBUG ((EFI_D_ERROR, "TlsConfigCipherList: return %r error.\n", Status));
  564. return Status;
  565. }
  566. //
  567. // Tls Config Certificate
  568. //
  569. Status = TlsConfigCertificate (HttpInstance);
  570. if (EFI_ERROR (Status)) {
  571. DEBUG ((EFI_D_ERROR, "TLS Certificate Config Error!\n"));
  572. return Status;
  573. }
  574. //
  575. // TlsCreateTxRxEvent
  576. //
  577. Status = TlsCreateTxRxEvent (HttpInstance);
  578. if (EFI_ERROR (Status)) {
  579. goto ERROR;
  580. }
  581. return Status;
  582. ERROR:
  583. TlsCloseTxRxEvent (HttpInstance);
  584. return Status;
  585. }
  586. /**
  587. Transmit the Packet by processing the associated HTTPS token.
  588. @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
  589. @param[in] Packet The packet to transmit.
  590. @retval EFI_SUCCESS The packet is transmitted.
  591. @retval EFI_INVALID_PARAMETER HttpInstance is NULL or Packet is NULL.
  592. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  593. @retval EFI_DEVICE_ERROR An unexpected system or network error occurred.
  594. @retval Others Other errors as indicated.
  595. **/
  596. EFI_STATUS
  597. EFIAPI
  598. TlsCommonTransmit (
  599. IN OUT HTTP_PROTOCOL *HttpInstance,
  600. IN NET_BUF *Packet
  601. )
  602. {
  603. EFI_STATUS Status;
  604. VOID *Data;
  605. UINTN Size;
  606. if ((HttpInstance == NULL) || (Packet == NULL)) {
  607. return EFI_INVALID_PARAMETER;
  608. }
  609. if (!HttpInstance->LocalAddressIsIPv6) {
  610. Size = sizeof (EFI_TCP4_TRANSMIT_DATA) +
  611. (Packet->BlockOpNum - 1) * sizeof (EFI_TCP4_FRAGMENT_DATA);
  612. } else {
  613. Size = sizeof (EFI_TCP6_TRANSMIT_DATA) +
  614. (Packet->BlockOpNum - 1) * sizeof (EFI_TCP6_FRAGMENT_DATA);
  615. }
  616. Data = AllocatePool (Size);
  617. if (Data == NULL) {
  618. return EFI_OUT_OF_RESOURCES;
  619. }
  620. if (!HttpInstance->LocalAddressIsIPv6) {
  621. ((EFI_TCP4_TRANSMIT_DATA *) Data)->Push = TRUE;
  622. ((EFI_TCP4_TRANSMIT_DATA *) Data)->Urgent = FALSE;
  623. ((EFI_TCP4_TRANSMIT_DATA *) Data)->DataLength = Packet->TotalSize;
  624. //
  625. // Build the fragment table.
  626. //
  627. ((EFI_TCP4_TRANSMIT_DATA *) Data)->FragmentCount = Packet->BlockOpNum;
  628. NetbufBuildExt (
  629. Packet,
  630. (NET_FRAGMENT *) &((EFI_TCP4_TRANSMIT_DATA *) Data)->FragmentTable[0],
  631. &((EFI_TCP4_TRANSMIT_DATA *) Data)->FragmentCount
  632. );
  633. HttpInstance->Tcp4TlsTxToken.Packet.TxData = (EFI_TCP4_TRANSMIT_DATA *) Data;
  634. Status = EFI_DEVICE_ERROR;
  635. //
  636. // Transmit the packet.
  637. //
  638. Status = HttpInstance->Tcp4->Transmit (HttpInstance->Tcp4, &HttpInstance->Tcp4TlsTxToken);
  639. if (EFI_ERROR (Status)) {
  640. goto ON_EXIT;
  641. }
  642. while (!HttpInstance->TlsIsTxDone) {
  643. HttpInstance->Tcp4->Poll (HttpInstance->Tcp4);
  644. }
  645. HttpInstance->TlsIsTxDone = FALSE;
  646. Status = HttpInstance->Tcp4TlsTxToken.CompletionToken.Status;
  647. } else {
  648. ((EFI_TCP6_TRANSMIT_DATA *) Data)->Push = TRUE;
  649. ((EFI_TCP6_TRANSMIT_DATA *) Data)->Urgent = FALSE;
  650. ((EFI_TCP6_TRANSMIT_DATA *) Data)->DataLength = Packet->TotalSize;
  651. //
  652. // Build the fragment table.
  653. //
  654. ((EFI_TCP6_TRANSMIT_DATA *) Data)->FragmentCount = Packet->BlockOpNum;
  655. NetbufBuildExt (
  656. Packet,
  657. (NET_FRAGMENT *) &((EFI_TCP6_TRANSMIT_DATA *) Data)->FragmentTable[0],
  658. &((EFI_TCP6_TRANSMIT_DATA *) Data)->FragmentCount
  659. );
  660. HttpInstance->Tcp6TlsTxToken.Packet.TxData = (EFI_TCP6_TRANSMIT_DATA *) Data;
  661. Status = EFI_DEVICE_ERROR;
  662. //
  663. // Transmit the packet.
  664. //
  665. Status = HttpInstance->Tcp6->Transmit (HttpInstance->Tcp6, &HttpInstance->Tcp6TlsTxToken);
  666. if (EFI_ERROR (Status)) {
  667. goto ON_EXIT;
  668. }
  669. while (!HttpInstance->TlsIsTxDone) {
  670. HttpInstance->Tcp6->Poll (HttpInstance->Tcp6);
  671. }
  672. HttpInstance->TlsIsTxDone = FALSE;
  673. Status = HttpInstance->Tcp6TlsTxToken.CompletionToken.Status;
  674. }
  675. ON_EXIT:
  676. FreePool (Data);
  677. return Status;
  678. }
  679. /**
  680. Receive the Packet by processing the associated HTTPS token.
  681. @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
  682. @param[in] Packet The packet to transmit.
  683. @param[in] Timeout The time to wait for connection done.
  684. @retval EFI_SUCCESS The Packet is received.
  685. @retval EFI_INVALID_PARAMETER HttpInstance is NULL or Packet is NULL.
  686. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  687. @retval EFI_TIMEOUT The operation is time out.
  688. @retval Others Other error as indicated.
  689. **/
  690. EFI_STATUS
  691. EFIAPI
  692. TlsCommonReceive (
  693. IN OUT HTTP_PROTOCOL *HttpInstance,
  694. IN NET_BUF *Packet,
  695. IN EFI_EVENT Timeout
  696. )
  697. {
  698. EFI_TCP4_RECEIVE_DATA *Tcp4RxData;
  699. EFI_TCP6_RECEIVE_DATA *Tcp6RxData;
  700. EFI_STATUS Status;
  701. NET_FRAGMENT *Fragment;
  702. UINT32 FragmentCount;
  703. UINT32 CurrentFragment;
  704. Tcp4RxData = NULL;
  705. Tcp6RxData = NULL;
  706. if ((HttpInstance == NULL) || (Packet == NULL)) {
  707. return EFI_INVALID_PARAMETER;
  708. }
  709. FragmentCount = Packet->BlockOpNum;
  710. Fragment = AllocatePool (FragmentCount * sizeof (NET_FRAGMENT));
  711. if (Fragment == NULL) {
  712. Status = EFI_OUT_OF_RESOURCES;
  713. goto ON_EXIT;
  714. }
  715. //
  716. // Build the fragment table.
  717. //
  718. NetbufBuildExt (Packet, Fragment, &FragmentCount);
  719. if (!HttpInstance->LocalAddressIsIPv6) {
  720. Tcp4RxData = HttpInstance->Tcp4TlsRxToken.Packet.RxData;
  721. if (Tcp4RxData == NULL) {
  722. return EFI_INVALID_PARAMETER;
  723. }
  724. Tcp4RxData->FragmentCount = 1;
  725. } else {
  726. Tcp6RxData = HttpInstance->Tcp6TlsRxToken.Packet.RxData;
  727. if (Tcp6RxData == NULL) {
  728. return EFI_INVALID_PARAMETER;
  729. }
  730. Tcp6RxData->FragmentCount = 1;
  731. }
  732. CurrentFragment = 0;
  733. Status = EFI_SUCCESS;
  734. while (CurrentFragment < FragmentCount) {
  735. if (!HttpInstance->LocalAddressIsIPv6) {
  736. Tcp4RxData->DataLength = Fragment[CurrentFragment].Len;
  737. Tcp4RxData->FragmentTable[0].FragmentLength = Fragment[CurrentFragment].Len;
  738. Tcp4RxData->FragmentTable[0].FragmentBuffer = Fragment[CurrentFragment].Bulk;
  739. Status = HttpInstance->Tcp4->Receive (HttpInstance->Tcp4, &HttpInstance->Tcp4TlsRxToken);
  740. } else {
  741. Tcp6RxData->DataLength = Fragment[CurrentFragment].Len;
  742. Tcp6RxData->FragmentTable[0].FragmentLength = Fragment[CurrentFragment].Len;
  743. Tcp6RxData->FragmentTable[0].FragmentBuffer = Fragment[CurrentFragment].Bulk;
  744. Status = HttpInstance->Tcp6->Receive (HttpInstance->Tcp6, &HttpInstance->Tcp6TlsRxToken);
  745. }
  746. if (EFI_ERROR (Status)) {
  747. goto ON_EXIT;
  748. }
  749. while (!HttpInstance->TlsIsRxDone && ((Timeout == NULL) || EFI_ERROR (gBS->CheckEvent (Timeout)))) {
  750. //
  751. // Poll until some data is received or an error occurs.
  752. //
  753. if (!HttpInstance->LocalAddressIsIPv6) {
  754. HttpInstance->Tcp4->Poll (HttpInstance->Tcp4);
  755. } else {
  756. HttpInstance->Tcp6->Poll (HttpInstance->Tcp6);
  757. }
  758. }
  759. if (!HttpInstance->TlsIsRxDone) {
  760. //
  761. // Timeout occurs, cancel the receive request.
  762. //
  763. if (!HttpInstance->LocalAddressIsIPv6) {
  764. HttpInstance->Tcp4->Cancel (HttpInstance->Tcp4, &HttpInstance->Tcp4TlsRxToken.CompletionToken);
  765. } else {
  766. HttpInstance->Tcp6->Cancel (HttpInstance->Tcp6, &HttpInstance->Tcp6TlsRxToken.CompletionToken);
  767. }
  768. Status = EFI_TIMEOUT;
  769. goto ON_EXIT;
  770. } else {
  771. HttpInstance->TlsIsRxDone = FALSE;
  772. }
  773. if (!HttpInstance->LocalAddressIsIPv6) {
  774. Status = HttpInstance->Tcp4TlsRxToken.CompletionToken.Status;
  775. if (EFI_ERROR (Status)) {
  776. goto ON_EXIT;
  777. }
  778. Fragment[CurrentFragment].Len -= Tcp4RxData->FragmentTable[0].FragmentLength;
  779. if (Fragment[CurrentFragment].Len == 0) {
  780. CurrentFragment++;
  781. } else {
  782. Fragment[CurrentFragment].Bulk += Tcp4RxData->FragmentTable[0].FragmentLength;
  783. }
  784. } else {
  785. Status = HttpInstance->Tcp6TlsRxToken.CompletionToken.Status;
  786. if (EFI_ERROR (Status)) {
  787. goto ON_EXIT;
  788. }
  789. Fragment[CurrentFragment].Len -= Tcp6RxData->FragmentTable[0].FragmentLength;
  790. if (Fragment[CurrentFragment].Len == 0) {
  791. CurrentFragment++;
  792. } else {
  793. Fragment[CurrentFragment].Bulk += Tcp6RxData->FragmentTable[0].FragmentLength;
  794. }
  795. }
  796. }
  797. ON_EXIT:
  798. if (Fragment != NULL) {
  799. FreePool (Fragment);
  800. }
  801. return Status;
  802. }
  803. /**
  804. Receive one TLS PDU. An TLS PDU contains an TLS record header and it's
  805. corresponding record data. These two parts will be put into two blocks of buffers in the
  806. net buffer.
  807. @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
  808. @param[out] Pdu The received TLS PDU.
  809. @param[in] Timeout The time to wait for connection done.
  810. @retval EFI_SUCCESS An TLS PDU is received.
  811. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  812. @retval EFI_PROTOCOL_ERROR An unexpected TLS packet was received.
  813. @retval Others Other errors as indicated.
  814. **/
  815. EFI_STATUS
  816. EFIAPI
  817. TlsReceiveOnePdu (
  818. IN OUT HTTP_PROTOCOL *HttpInstance,
  819. OUT NET_BUF **Pdu,
  820. IN EFI_EVENT Timeout
  821. )
  822. {
  823. EFI_STATUS Status;
  824. LIST_ENTRY *NbufList;
  825. UINT32 Len;
  826. NET_BUF *PduHdr;
  827. UINT8 *Header;
  828. TLS_RECORD_HEADER RecordHeader;
  829. NET_BUF *DataSeg;
  830. NbufList = NULL;
  831. PduHdr = NULL;
  832. Header = NULL;
  833. DataSeg = NULL;
  834. NbufList = AllocatePool (sizeof (LIST_ENTRY));
  835. if (NbufList == NULL) {
  836. return EFI_OUT_OF_RESOURCES;
  837. }
  838. InitializeListHead (NbufList);
  839. //
  840. // Allocate buffer to receive one TLS header.
  841. //
  842. Len = TLS_RECORD_HEADER_LENGTH;
  843. PduHdr = NetbufAlloc (Len);
  844. if (PduHdr == NULL) {
  845. Status = EFI_OUT_OF_RESOURCES;
  846. goto ON_EXIT;
  847. }
  848. Header = NetbufAllocSpace (PduHdr, Len, NET_BUF_TAIL);
  849. if (Header == NULL) {
  850. Status = EFI_OUT_OF_RESOURCES;
  851. goto ON_EXIT;
  852. }
  853. //
  854. // First step, receive one TLS header.
  855. //
  856. Status = TlsCommonReceive (HttpInstance, PduHdr, Timeout);
  857. if (EFI_ERROR (Status)) {
  858. goto ON_EXIT;
  859. }
  860. RecordHeader = *(TLS_RECORD_HEADER *) Header;
  861. if ((RecordHeader.ContentType == TlsContentTypeHandshake ||
  862. RecordHeader.ContentType == TlsContentTypeAlert ||
  863. RecordHeader.ContentType == TlsContentTypeChangeCipherSpec ||
  864. RecordHeader.ContentType == TlsContentTypeApplicationData) &&
  865. (RecordHeader.Version.Major == 0x03) && /// Major versions are same.
  866. (RecordHeader.Version.Minor == TLS10_PROTOCOL_VERSION_MINOR ||
  867. RecordHeader.Version.Minor ==TLS11_PROTOCOL_VERSION_MINOR ||
  868. RecordHeader.Version.Minor == TLS12_PROTOCOL_VERSION_MINOR)
  869. ) {
  870. InsertTailList (NbufList, &PduHdr->List);
  871. } else {
  872. Status = EFI_PROTOCOL_ERROR;
  873. goto ON_EXIT;
  874. }
  875. Len = SwapBytes16(RecordHeader.Length);
  876. if (Len == 0) {
  877. //
  878. // No TLS payload.
  879. //
  880. goto FORM_PDU;
  881. }
  882. //
  883. // Allocate buffer to receive one TLS payload.
  884. //
  885. DataSeg = NetbufAlloc (Len);
  886. if (DataSeg == NULL) {
  887. Status = EFI_OUT_OF_RESOURCES;
  888. goto ON_EXIT;
  889. }
  890. NetbufAllocSpace (DataSeg, Len, NET_BUF_TAIL);
  891. //
  892. // Second step, receive one TLS payload.
  893. //
  894. Status = TlsCommonReceive (HttpInstance, DataSeg, Timeout);
  895. if (EFI_ERROR (Status)) {
  896. goto ON_EXIT;
  897. }
  898. InsertTailList (NbufList, &DataSeg->List);
  899. FORM_PDU:
  900. //
  901. // Form the PDU from a list of PDU.
  902. //
  903. *Pdu = NetbufFromBufList (NbufList, 0, 0, FreeNbufList, NbufList);
  904. if (*Pdu == NULL) {
  905. Status = EFI_OUT_OF_RESOURCES;
  906. }
  907. ON_EXIT:
  908. if (EFI_ERROR (Status)) {
  909. //
  910. // Free the Nbufs in this NbufList and the NbufList itself.
  911. //
  912. FreeNbufList (NbufList);
  913. }
  914. return Status;
  915. }
  916. /**
  917. Connect one TLS session by finishing the TLS handshake process.
  918. @param[in] HttpInstance The HTTP instance private data.
  919. @param[in] Timeout The time to wait for connection done.
  920. @retval EFI_SUCCESS The TLS session is established.
  921. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  922. @retval EFI_ABORTED TLS session state is incorrect.
  923. @retval Others Other error as indicated.
  924. **/
  925. EFI_STATUS
  926. EFIAPI
  927. TlsConnectSession (
  928. IN HTTP_PROTOCOL *HttpInstance,
  929. IN EFI_EVENT Timeout
  930. )
  931. {
  932. EFI_STATUS Status;
  933. UINT8 *BufferOut;
  934. UINTN BufferOutSize;
  935. NET_BUF *PacketOut;
  936. UINT8 *DataOut;
  937. NET_BUF *Pdu;
  938. UINT8 *BufferIn;
  939. UINTN BufferInSize;
  940. UINT8 *GetSessionDataBuffer;
  941. UINTN GetSessionDataBufferSize;
  942. BufferOut = NULL;
  943. PacketOut = NULL;
  944. DataOut = NULL;
  945. Pdu = NULL;
  946. BufferIn = NULL;
  947. //
  948. // Initialize TLS state.
  949. //
  950. HttpInstance->TlsSessionState = EfiTlsSessionNotStarted;
  951. Status = HttpInstance->Tls->SetSessionData (
  952. HttpInstance->Tls,
  953. EfiTlsSessionState,
  954. &(HttpInstance->TlsSessionState),
  955. sizeof (EFI_TLS_SESSION_STATE)
  956. );
  957. if (EFI_ERROR (Status)) {
  958. return Status;
  959. }
  960. //
  961. // Create ClientHello
  962. //
  963. BufferOutSize = DEF_BUF_LEN;
  964. BufferOut = AllocateZeroPool (BufferOutSize);
  965. if (BufferOut == NULL) {
  966. Status = EFI_OUT_OF_RESOURCES;
  967. return Status;
  968. }
  969. Status = HttpInstance->Tls->BuildResponsePacket (
  970. HttpInstance->Tls,
  971. NULL,
  972. 0,
  973. BufferOut,
  974. &BufferOutSize
  975. );
  976. if (Status == EFI_BUFFER_TOO_SMALL) {
  977. FreePool (BufferOut);
  978. BufferOut = AllocateZeroPool (BufferOutSize);
  979. if (BufferOut == NULL) {
  980. Status = EFI_OUT_OF_RESOURCES;
  981. return Status;
  982. }
  983. Status = HttpInstance->Tls->BuildResponsePacket (
  984. HttpInstance->Tls,
  985. NULL,
  986. 0,
  987. BufferOut,
  988. &BufferOutSize
  989. );
  990. }
  991. if (EFI_ERROR (Status)) {
  992. FreePool (BufferOut);
  993. return Status;
  994. }
  995. //
  996. // Transmit ClientHello
  997. //
  998. PacketOut = NetbufAlloc ((UINT32) BufferOutSize);
  999. DataOut = NetbufAllocSpace (PacketOut, (UINT32) BufferOutSize, NET_BUF_TAIL);
  1000. if (DataOut == NULL) {
  1001. FreePool (BufferOut);
  1002. return EFI_OUT_OF_RESOURCES;
  1003. }
  1004. CopyMem (DataOut, BufferOut, BufferOutSize);
  1005. Status = TlsCommonTransmit (HttpInstance, PacketOut);
  1006. FreePool (BufferOut);
  1007. NetbufFree (PacketOut);
  1008. if (EFI_ERROR (Status)) {
  1009. return Status;
  1010. }
  1011. while(HttpInstance->TlsSessionState != EfiTlsSessionDataTransferring && \
  1012. ((Timeout == NULL) || EFI_ERROR (gBS->CheckEvent (Timeout)))) {
  1013. //
  1014. // Receive one TLS record.
  1015. //
  1016. Status = TlsReceiveOnePdu (HttpInstance, &Pdu, Timeout);
  1017. if (EFI_ERROR (Status)) {
  1018. return Status;
  1019. }
  1020. BufferInSize = Pdu->TotalSize;
  1021. BufferIn = AllocateZeroPool (BufferInSize);
  1022. if (BufferIn == NULL) {
  1023. NetbufFree (Pdu);
  1024. Status = EFI_OUT_OF_RESOURCES;
  1025. return Status;
  1026. }
  1027. NetbufCopy (Pdu, 0, (UINT32)BufferInSize, BufferIn);
  1028. NetbufFree (Pdu);
  1029. //
  1030. // Handle Receive data.
  1031. //
  1032. BufferOutSize = DEF_BUF_LEN;
  1033. BufferOut = AllocateZeroPool (BufferOutSize);
  1034. if (BufferOut == NULL) {
  1035. Status = EFI_OUT_OF_RESOURCES;
  1036. return Status;
  1037. }
  1038. Status = HttpInstance->Tls->BuildResponsePacket (
  1039. HttpInstance->Tls,
  1040. BufferIn,
  1041. BufferInSize,
  1042. BufferOut,
  1043. &BufferOutSize
  1044. );
  1045. if (Status == EFI_BUFFER_TOO_SMALL) {
  1046. FreePool (BufferOut);
  1047. BufferOut = AllocateZeroPool (BufferOutSize);
  1048. if (BufferOut == NULL) {
  1049. FreePool (BufferIn);
  1050. Status = EFI_OUT_OF_RESOURCES;
  1051. return Status;
  1052. }
  1053. Status = HttpInstance->Tls->BuildResponsePacket (
  1054. HttpInstance->Tls,
  1055. BufferIn,
  1056. BufferInSize,
  1057. BufferOut,
  1058. &BufferOutSize
  1059. );
  1060. }
  1061. FreePool (BufferIn);
  1062. if (EFI_ERROR (Status)) {
  1063. FreePool (BufferOut);
  1064. return Status;
  1065. }
  1066. if (BufferOutSize != 0) {
  1067. //
  1068. // Transmit the response packet.
  1069. //
  1070. PacketOut = NetbufAlloc ((UINT32) BufferOutSize);
  1071. DataOut = NetbufAllocSpace (PacketOut, (UINT32) BufferOutSize, NET_BUF_TAIL);
  1072. if (DataOut == NULL) {
  1073. FreePool (BufferOut);
  1074. return EFI_OUT_OF_RESOURCES;
  1075. }
  1076. CopyMem (DataOut, BufferOut, BufferOutSize);
  1077. Status = TlsCommonTransmit (HttpInstance, PacketOut);
  1078. NetbufFree (PacketOut);
  1079. if (EFI_ERROR (Status)) {
  1080. FreePool (BufferOut);
  1081. return Status;
  1082. }
  1083. }
  1084. FreePool (BufferOut);
  1085. //
  1086. // Get the session state, then decide whether need to continue handle received packet.
  1087. //
  1088. GetSessionDataBufferSize = DEF_BUF_LEN;
  1089. GetSessionDataBuffer = AllocateZeroPool (GetSessionDataBufferSize);
  1090. if (GetSessionDataBuffer == NULL) {
  1091. Status = EFI_OUT_OF_RESOURCES;
  1092. return Status;
  1093. }
  1094. Status = HttpInstance->Tls->GetSessionData (
  1095. HttpInstance->Tls,
  1096. EfiTlsSessionState,
  1097. GetSessionDataBuffer,
  1098. &GetSessionDataBufferSize
  1099. );
  1100. if (Status == EFI_BUFFER_TOO_SMALL) {
  1101. FreePool (GetSessionDataBuffer);
  1102. GetSessionDataBuffer = AllocateZeroPool (GetSessionDataBufferSize);
  1103. if (GetSessionDataBuffer == NULL) {
  1104. Status = EFI_OUT_OF_RESOURCES;
  1105. return Status;
  1106. }
  1107. Status = HttpInstance->Tls->GetSessionData (
  1108. HttpInstance->Tls,
  1109. EfiTlsSessionState,
  1110. GetSessionDataBuffer,
  1111. &GetSessionDataBufferSize
  1112. );
  1113. }
  1114. if (EFI_ERROR (Status)) {
  1115. FreePool(GetSessionDataBuffer);
  1116. return Status;
  1117. }
  1118. ASSERT(GetSessionDataBufferSize == sizeof (EFI_TLS_SESSION_STATE));
  1119. HttpInstance->TlsSessionState = *(EFI_TLS_SESSION_STATE *) GetSessionDataBuffer;
  1120. FreePool (GetSessionDataBuffer);
  1121. if(HttpInstance->TlsSessionState == EfiTlsSessionError) {
  1122. return EFI_ABORTED;
  1123. }
  1124. }
  1125. if (HttpInstance->TlsSessionState != EfiTlsSessionDataTransferring) {
  1126. Status = EFI_ABORTED;
  1127. }
  1128. return Status;
  1129. }
  1130. /**
  1131. Close the TLS session and send out the close notification message.
  1132. @param[in] HttpInstance The HTTP instance private data.
  1133. @retval EFI_SUCCESS The TLS session is closed.
  1134. @retval EFI_INVALID_PARAMETER HttpInstance is NULL.
  1135. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  1136. @retval Others Other error as indicated.
  1137. **/
  1138. EFI_STATUS
  1139. EFIAPI
  1140. TlsCloseSession (
  1141. IN HTTP_PROTOCOL *HttpInstance
  1142. )
  1143. {
  1144. EFI_STATUS Status;
  1145. UINT8 *BufferOut;
  1146. UINTN BufferOutSize;
  1147. NET_BUF *PacketOut;
  1148. UINT8 *DataOut;
  1149. Status = EFI_SUCCESS;
  1150. BufferOut = NULL;
  1151. PacketOut = NULL;
  1152. DataOut = NULL;
  1153. if (HttpInstance == NULL) {
  1154. return EFI_INVALID_PARAMETER;
  1155. }
  1156. HttpInstance->TlsSessionState = EfiTlsSessionClosing;
  1157. Status = HttpInstance->Tls->SetSessionData (
  1158. HttpInstance->Tls,
  1159. EfiTlsSessionState,
  1160. &(HttpInstance->TlsSessionState),
  1161. sizeof (EFI_TLS_SESSION_STATE)
  1162. );
  1163. if (EFI_ERROR (Status)) {
  1164. return Status;
  1165. }
  1166. BufferOutSize = DEF_BUF_LEN;
  1167. BufferOut = AllocateZeroPool (BufferOutSize);
  1168. if (BufferOut == NULL) {
  1169. Status = EFI_OUT_OF_RESOURCES;
  1170. return Status;
  1171. }
  1172. Status = HttpInstance->Tls->BuildResponsePacket (
  1173. HttpInstance->Tls,
  1174. NULL,
  1175. 0,
  1176. BufferOut,
  1177. &BufferOutSize
  1178. );
  1179. if (Status == EFI_BUFFER_TOO_SMALL) {
  1180. FreePool (BufferOut);
  1181. BufferOut = AllocateZeroPool (BufferOutSize);
  1182. if (BufferOut == NULL) {
  1183. Status = EFI_OUT_OF_RESOURCES;
  1184. return Status;
  1185. }
  1186. Status = HttpInstance->Tls->BuildResponsePacket (
  1187. HttpInstance->Tls,
  1188. NULL,
  1189. 0,
  1190. BufferOut,
  1191. &BufferOutSize
  1192. );
  1193. }
  1194. if (EFI_ERROR (Status)) {
  1195. FreePool (BufferOut);
  1196. return Status;
  1197. }
  1198. PacketOut = NetbufAlloc ((UINT32) BufferOutSize);
  1199. DataOut = NetbufAllocSpace (PacketOut, (UINT32) BufferOutSize, NET_BUF_TAIL);
  1200. if (DataOut == NULL) {
  1201. FreePool (BufferOut);
  1202. return EFI_OUT_OF_RESOURCES;
  1203. }
  1204. CopyMem (DataOut, BufferOut, BufferOutSize);
  1205. Status = TlsCommonTransmit (HttpInstance, PacketOut);
  1206. FreePool (BufferOut);
  1207. NetbufFree (PacketOut);
  1208. return Status;
  1209. }
  1210. /**
  1211. Process one message according to the CryptMode.
  1212. @param[in] HttpInstance Pointer to HTTP_PROTOCOL structure.
  1213. @param[in] Message Pointer to the message buffer needed to processed.
  1214. If ProcessMode is EfiTlsEncrypt, the message contain the TLS
  1215. header and plain text TLS APP payload.
  1216. If ProcessMode is EfiTlsDecrypt, the message contain the TLS
  1217. header and cipher text TLS APP payload.
  1218. @param[in] MessageSize Pointer to the message buffer size.
  1219. @param[in] ProcessMode Process mode.
  1220. @param[in, out] Fragment Only one Fragment returned after the Message is
  1221. processed successfully.
  1222. If ProcessMode is EfiTlsEncrypt, the fragment contain the TLS
  1223. header and cipher text TLS APP payload.
  1224. If ProcessMode is EfiTlsDecrypt, the fragment contain the TLS
  1225. header and plain text TLS APP payload.
  1226. @retval EFI_SUCCESS Message is processed successfully.
  1227. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  1228. @retval Others Other errors as indicated.
  1229. **/
  1230. EFI_STATUS
  1231. EFIAPI
  1232. TlsProcessMessage (
  1233. IN HTTP_PROTOCOL *HttpInstance,
  1234. IN UINT8 *Message,
  1235. IN UINTN MessageSize,
  1236. IN EFI_TLS_CRYPT_MODE ProcessMode,
  1237. IN OUT NET_FRAGMENT *Fragment
  1238. )
  1239. {
  1240. EFI_STATUS Status;
  1241. UINT8 *Buffer;
  1242. UINT32 BufferSize;
  1243. UINT32 BytesCopied;
  1244. EFI_TLS_FRAGMENT_DATA *FragmentTable;
  1245. UINT32 FragmentCount;
  1246. EFI_TLS_FRAGMENT_DATA *OriginalFragmentTable;
  1247. UINTN Index;
  1248. Status = EFI_SUCCESS;
  1249. Buffer = NULL;
  1250. BufferSize = 0;
  1251. BytesCopied = 0;
  1252. FragmentTable = NULL;
  1253. OriginalFragmentTable = NULL;
  1254. //
  1255. // Rebuild fragment table from BufferIn.
  1256. //
  1257. FragmentCount = 1;
  1258. FragmentTable = AllocateZeroPool (FragmentCount * sizeof (EFI_TLS_FRAGMENT_DATA));
  1259. if (FragmentTable == NULL) {
  1260. Status = EFI_OUT_OF_RESOURCES;
  1261. goto ON_EXIT;
  1262. }
  1263. FragmentTable->FragmentLength = (UINT32) MessageSize;
  1264. FragmentTable->FragmentBuffer = Message;
  1265. //
  1266. // Record the original FragmentTable.
  1267. //
  1268. OriginalFragmentTable = FragmentTable;
  1269. //
  1270. // Process the Message.
  1271. //
  1272. Status = HttpInstance->Tls->ProcessPacket (
  1273. HttpInstance->Tls,
  1274. &FragmentTable,
  1275. &FragmentCount,
  1276. ProcessMode
  1277. );
  1278. if (EFI_ERROR (Status)) {
  1279. goto ON_EXIT;
  1280. }
  1281. //
  1282. // Calculate the size according to FragmentTable.
  1283. //
  1284. for (Index = 0; Index < FragmentCount; Index++) {
  1285. BufferSize += FragmentTable[Index].FragmentLength;
  1286. }
  1287. //
  1288. // Allocate buffer for processed data.
  1289. //
  1290. Buffer = AllocateZeroPool (BufferSize);
  1291. if (Buffer == NULL) {
  1292. Status = EFI_OUT_OF_RESOURCES;
  1293. goto ON_EXIT;
  1294. }
  1295. //
  1296. // Copy the new FragmentTable buffer into Buffer.
  1297. //
  1298. for (Index = 0; Index < FragmentCount; Index++) {
  1299. CopyMem (
  1300. (Buffer + BytesCopied),
  1301. FragmentTable[Index].FragmentBuffer,
  1302. FragmentTable[Index].FragmentLength
  1303. );
  1304. BytesCopied += FragmentTable[Index].FragmentLength;
  1305. //
  1306. // Free the FragmentBuffer since it has been copied.
  1307. //
  1308. FreePool (FragmentTable[Index].FragmentBuffer);
  1309. }
  1310. Fragment->Len = BufferSize;
  1311. Fragment->Bulk = Buffer;
  1312. ON_EXIT:
  1313. if (OriginalFragmentTable != NULL) {
  1314. if( FragmentTable == OriginalFragmentTable) {
  1315. FragmentTable = NULL;
  1316. }
  1317. FreePool (OriginalFragmentTable);
  1318. OriginalFragmentTable = NULL;
  1319. }
  1320. //
  1321. // Caller has the responsibility to free the FragmentTable.
  1322. //
  1323. if (FragmentTable != NULL) {
  1324. FreePool (FragmentTable);
  1325. FragmentTable = NULL;
  1326. }
  1327. return Status;
  1328. }
  1329. /**
  1330. Receive one fragment decrypted from one TLS record.
  1331. @param[in] HttpInstance Pointer to HTTP_PROTOCOL structure.
  1332. @param[in, out] Fragment The received Fragment.
  1333. @param[in] Timeout The time to wait for connection done.
  1334. @retval EFI_SUCCESS One fragment is received.
  1335. @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
  1336. @retval EFI_ABORTED Something wrong decryption the message.
  1337. @retval Others Other errors as indicated.
  1338. **/
  1339. EFI_STATUS
  1340. EFIAPI
  1341. HttpsReceive (
  1342. IN HTTP_PROTOCOL *HttpInstance,
  1343. IN OUT NET_FRAGMENT *Fragment,
  1344. IN EFI_EVENT Timeout
  1345. )
  1346. {
  1347. EFI_STATUS Status;
  1348. NET_BUF *Pdu;
  1349. TLS_RECORD_HEADER RecordHeader;
  1350. UINT8 *BufferIn;
  1351. UINTN BufferInSize;
  1352. NET_FRAGMENT TempFragment;
  1353. UINT8 *BufferOut;
  1354. UINTN BufferOutSize;
  1355. NET_BUF *PacketOut;
  1356. UINT8 *DataOut;
  1357. UINT8 *GetSessionDataBuffer;
  1358. UINTN GetSessionDataBufferSize;
  1359. Status = EFI_SUCCESS;
  1360. Pdu = NULL;
  1361. BufferIn = NULL;
  1362. BufferInSize = 0;
  1363. BufferOut = NULL;
  1364. BufferOutSize = 0;
  1365. PacketOut = NULL;
  1366. DataOut = NULL;
  1367. GetSessionDataBuffer = NULL;
  1368. GetSessionDataBufferSize = 0;
  1369. //
  1370. // Receive only one TLS record
  1371. //
  1372. Status = TlsReceiveOnePdu (HttpInstance, &Pdu, Timeout);
  1373. if (EFI_ERROR (Status)) {
  1374. return Status;
  1375. }
  1376. BufferInSize = Pdu->TotalSize;
  1377. BufferIn = AllocateZeroPool (BufferInSize);
  1378. if (BufferIn == NULL) {
  1379. Status = EFI_OUT_OF_RESOURCES;
  1380. NetbufFree (Pdu);
  1381. return Status;
  1382. }
  1383. NetbufCopy (Pdu, 0, (UINT32) BufferInSize, BufferIn);
  1384. NetbufFree (Pdu);
  1385. //
  1386. // Handle Receive data.
  1387. //
  1388. RecordHeader = *(TLS_RECORD_HEADER *) BufferIn;
  1389. if ((RecordHeader.ContentType == TlsContentTypeApplicationData) &&
  1390. (RecordHeader.Version.Major == 0x03) &&
  1391. (RecordHeader.Version.Minor == TLS10_PROTOCOL_VERSION_MINOR ||
  1392. RecordHeader.Version.Minor == TLS11_PROTOCOL_VERSION_MINOR ||
  1393. RecordHeader.Version.Minor == TLS12_PROTOCOL_VERSION_MINOR)
  1394. ) {
  1395. //
  1396. // Decrypt Packet.
  1397. //
  1398. Status = TlsProcessMessage (
  1399. HttpInstance,
  1400. BufferIn,
  1401. BufferInSize,
  1402. EfiTlsDecrypt,
  1403. &TempFragment
  1404. );
  1405. FreePool (BufferIn);
  1406. if (EFI_ERROR (Status)) {
  1407. if (Status == EFI_ABORTED) {
  1408. //
  1409. // Something wrong decryption the message.
  1410. // BuildResponsePacket() will be called to generate Error Alert message and send it out.
  1411. //
  1412. BufferOutSize = DEF_BUF_LEN;
  1413. BufferOut = AllocateZeroPool (BufferOutSize);
  1414. if (BufferOut == NULL) {
  1415. Status = EFI_OUT_OF_RESOURCES;
  1416. return Status;
  1417. }
  1418. Status = HttpInstance->Tls->BuildResponsePacket (
  1419. HttpInstance->Tls,
  1420. NULL,
  1421. 0,
  1422. BufferOut,
  1423. &BufferOutSize
  1424. );
  1425. if (Status == EFI_BUFFER_TOO_SMALL) {
  1426. FreePool (BufferOut);
  1427. BufferOut = AllocateZeroPool (BufferOutSize);
  1428. if (BufferOut == NULL) {
  1429. Status = EFI_OUT_OF_RESOURCES;
  1430. return Status;
  1431. }
  1432. Status = HttpInstance->Tls->BuildResponsePacket (
  1433. HttpInstance->Tls,
  1434. NULL,
  1435. 0,
  1436. BufferOut,
  1437. &BufferOutSize
  1438. );
  1439. }
  1440. if (EFI_ERROR (Status)) {
  1441. FreePool(BufferOut);
  1442. return Status;
  1443. }
  1444. if (BufferOutSize != 0) {
  1445. PacketOut = NetbufAlloc ((UINT32)BufferOutSize);
  1446. DataOut = NetbufAllocSpace (PacketOut, (UINT32) BufferOutSize, NET_BUF_TAIL);
  1447. if (DataOut == NULL) {
  1448. FreePool (BufferOut);
  1449. return EFI_OUT_OF_RESOURCES;
  1450. }
  1451. CopyMem (DataOut, BufferOut, BufferOutSize);
  1452. Status = TlsCommonTransmit (HttpInstance, PacketOut);
  1453. NetbufFree (PacketOut);
  1454. }
  1455. FreePool(BufferOut);
  1456. if (EFI_ERROR (Status)) {
  1457. return Status;
  1458. }
  1459. return EFI_ABORTED;
  1460. }
  1461. return Status;
  1462. }
  1463. //
  1464. // Parsing buffer.
  1465. //
  1466. ASSERT (((TLS_RECORD_HEADER *) (TempFragment.Bulk))->ContentType == TlsContentTypeApplicationData);
  1467. BufferInSize = ((TLS_RECORD_HEADER *) (TempFragment.Bulk))->Length;
  1468. BufferIn = AllocateZeroPool (BufferInSize);
  1469. if (BufferIn == NULL) {
  1470. Status = EFI_OUT_OF_RESOURCES;
  1471. return Status;
  1472. }
  1473. CopyMem (BufferIn, TempFragment.Bulk + TLS_RECORD_HEADER_LENGTH, BufferInSize);
  1474. //
  1475. // Free the buffer in TempFragment.
  1476. //
  1477. FreePool (TempFragment.Bulk);
  1478. } else if ((RecordHeader.ContentType == TlsContentTypeAlert) &&
  1479. (RecordHeader.Version.Major == 0x03) &&
  1480. (RecordHeader.Version.Minor == TLS10_PROTOCOL_VERSION_MINOR ||
  1481. RecordHeader.Version.Minor == TLS11_PROTOCOL_VERSION_MINOR ||
  1482. RecordHeader.Version.Minor == TLS12_PROTOCOL_VERSION_MINOR)
  1483. ) {
  1484. BufferOutSize = DEF_BUF_LEN;
  1485. BufferOut = AllocateZeroPool (BufferOutSize);
  1486. if (BufferOut == NULL) {
  1487. FreePool (BufferIn);
  1488. Status = EFI_OUT_OF_RESOURCES;
  1489. return Status;
  1490. }
  1491. Status = HttpInstance->Tls->BuildResponsePacket (
  1492. HttpInstance->Tls,
  1493. BufferIn,
  1494. BufferInSize,
  1495. BufferOut,
  1496. &BufferOutSize
  1497. );
  1498. if (Status == EFI_BUFFER_TOO_SMALL) {
  1499. FreePool (BufferOut);
  1500. BufferOut = AllocateZeroPool (BufferOutSize);
  1501. if (BufferOut == NULL) {
  1502. FreePool (BufferIn);
  1503. Status = EFI_OUT_OF_RESOURCES;
  1504. return Status;
  1505. }
  1506. Status = HttpInstance->Tls->BuildResponsePacket (
  1507. HttpInstance->Tls,
  1508. BufferIn,
  1509. BufferInSize,
  1510. BufferOut,
  1511. &BufferOutSize
  1512. );
  1513. }
  1514. FreePool (BufferIn);
  1515. if (EFI_ERROR (Status)) {
  1516. FreePool (BufferOut);
  1517. return Status;
  1518. }
  1519. if (BufferOutSize != 0) {
  1520. PacketOut = NetbufAlloc ((UINT32) BufferOutSize);
  1521. DataOut = NetbufAllocSpace (PacketOut, (UINT32) BufferOutSize, NET_BUF_TAIL);
  1522. if (DataOut == NULL) {
  1523. FreePool (BufferOut);
  1524. return EFI_OUT_OF_RESOURCES;
  1525. }
  1526. CopyMem (DataOut, BufferOut, BufferOutSize);
  1527. Status = TlsCommonTransmit (HttpInstance, PacketOut);
  1528. NetbufFree (PacketOut);
  1529. }
  1530. FreePool (BufferOut);
  1531. //
  1532. // Get the session state.
  1533. //
  1534. GetSessionDataBufferSize = DEF_BUF_LEN;
  1535. GetSessionDataBuffer = AllocateZeroPool (GetSessionDataBufferSize);
  1536. if (GetSessionDataBuffer == NULL) {
  1537. Status = EFI_OUT_OF_RESOURCES;
  1538. return Status;
  1539. }
  1540. Status = HttpInstance->Tls->GetSessionData (
  1541. HttpInstance->Tls,
  1542. EfiTlsSessionState,
  1543. GetSessionDataBuffer,
  1544. &GetSessionDataBufferSize
  1545. );
  1546. if (Status == EFI_BUFFER_TOO_SMALL) {
  1547. FreePool (GetSessionDataBuffer);
  1548. GetSessionDataBuffer = AllocateZeroPool (GetSessionDataBufferSize);
  1549. if (GetSessionDataBuffer == NULL) {
  1550. Status = EFI_OUT_OF_RESOURCES;
  1551. return Status;
  1552. }
  1553. Status = HttpInstance->Tls->GetSessionData (
  1554. HttpInstance->Tls,
  1555. EfiTlsSessionState,
  1556. GetSessionDataBuffer,
  1557. &GetSessionDataBufferSize
  1558. );
  1559. }
  1560. if (EFI_ERROR (Status)) {
  1561. FreePool (GetSessionDataBuffer);
  1562. return Status;
  1563. }
  1564. ASSERT(GetSessionDataBufferSize == sizeof (EFI_TLS_SESSION_STATE));
  1565. HttpInstance->TlsSessionState = *(EFI_TLS_SESSION_STATE *) GetSessionDataBuffer;
  1566. FreePool (GetSessionDataBuffer);
  1567. if(HttpInstance->TlsSessionState == EfiTlsSessionError) {
  1568. DEBUG ((EFI_D_ERROR, "TLS Session State Error!\n"));
  1569. return EFI_ABORTED;
  1570. }
  1571. BufferIn = NULL;
  1572. BufferInSize = 0;
  1573. }
  1574. Fragment->Bulk = BufferIn;
  1575. Fragment->Len = (UINT32) BufferInSize;
  1576. return Status;
  1577. }