2 Miscellaneous routines specific to Https for HttpDxe driver.
4 Copyright (c) 2016 - 2018, Intel Corporation. All rights reserved.<BR>
5 (C) Copyright 2016 Hewlett Packard Enterprise Development LP<BR>
6 SPDX-License-Identifier: BSD-2-Clause-Patent
10 #include "HttpDriver.h"
13 Returns the first occurrence of a Null-terminated ASCII sub-string in a Null-terminated
14 ASCII string and ignore case during the search process.
16 This function scans the contents of the ASCII string specified by String
17 and returns the first occurrence of SearchString and ignore case during the search process.
18 If SearchString is not found in String, then NULL is returned. If the length of SearchString
19 is zero, then String is returned.
21 If String is NULL, then ASSERT().
22 If SearchString is NULL, then ASSERT().
24 @param[in] String A pointer to a Null-terminated ASCII string.
25 @param[in] SearchString A pointer to a Null-terminated ASCII string to search for.
27 @retval NULL If the SearchString does not appear in String.
28 @retval others If there is a match return the first occurrence of SearchingString.
29 If the length of SearchString is zero,return String.
34 IN CONST CHAR8
*String
,
35 IN CONST CHAR8
*SearchString
38 CONST CHAR8
*FirstMatch
;
39 CONST CHAR8
*SearchStringTmp
;
45 // ASSERT both strings are less long than PcdMaximumAsciiStringLength
47 ASSERT (AsciiStrSize (String
) != 0);
48 ASSERT (AsciiStrSize (SearchString
) != 0);
50 if (*SearchString
== '\0') {
51 return (CHAR8
*) String
;
54 while (*String
!= '\0') {
55 SearchStringTmp
= SearchString
;
58 while ((*SearchStringTmp
!= '\0')
59 && (*String
!= '\0')) {
61 Dst
= *SearchStringTmp
;
63 if ((Src
>= 'A') && (Src
<= 'Z')) {
67 if ((Dst
>= 'A') && (Dst
<= 'Z')) {
79 if (*SearchStringTmp
== '\0') {
80 return (CHAR8
*) FirstMatch
;
83 String
= FirstMatch
+ 1;
90 The callback function to free the net buffer list.
92 @param[in] Arg The opaque parameter.
101 ASSERT (Arg
!= NULL
);
103 NetbufFreeList ((LIST_ENTRY
*) Arg
);
108 Check whether the Url is from Https.
110 @param[in] Url The pointer to a HTTP or HTTPS URL string.
112 @retval TRUE The Url is from HTTPS.
113 @retval FALSE The Url is from HTTP.
125 Tmp
= AsciiStrCaseStr (Url
, HTTPS_FLAG
);
126 if (Tmp
!= NULL
&& Tmp
== Url
) {
134 Creates a Tls child handle, open EFI_TLS_PROTOCOL and EFI_TLS_CONFIGURATION_PROTOCOL.
136 @param[in] ImageHandle The firmware allocated handle for the UEFI image.
137 @param[out] TlsSb Pointer to the TLS SERVICE_BINDING_PROTOCOL.
138 @param[out] TlsProto Pointer to the EFI_TLS_PROTOCOL instance.
139 @param[out] TlsConfiguration Pointer to the EFI_TLS_CONFIGURATION_PROTOCOL instance.
141 @return The child handle with opened EFI_TLS_PROTOCOL and EFI_TLS_CONFIGURATION_PROTOCOL.
147 IN EFI_HANDLE ImageHandle
,
148 OUT EFI_SERVICE_BINDING_PROTOCOL
**TlsSb
,
149 OUT EFI_TLS_PROTOCOL
**TlsProto
,
150 OUT EFI_TLS_CONFIGURATION_PROTOCOL
**TlsConfiguration
154 EFI_HANDLE TlsChildHandle
;
159 // Locate TlsServiceBinding protocol.
161 gBS
->LocateProtocol (
162 &gEfiTlsServiceBindingProtocolGuid
,
166 if (*TlsSb
== NULL
) {
170 Status
= (*TlsSb
)->CreateChild (*TlsSb
, &TlsChildHandle
);
171 if (EFI_ERROR (Status
)) {
175 Status
= gBS
->OpenProtocol (
177 &gEfiTlsProtocolGuid
,
181 EFI_OPEN_PROTOCOL_GET_PROTOCOL
183 if (EFI_ERROR (Status
)) {
184 (*TlsSb
)->DestroyChild (*TlsSb
, TlsChildHandle
);
188 Status
= gBS
->OpenProtocol (
190 &gEfiTlsConfigurationProtocolGuid
,
191 (VOID
**) TlsConfiguration
,
194 EFI_OPEN_PROTOCOL_GET_PROTOCOL
196 if (EFI_ERROR (Status
)) {
197 (*TlsSb
)->DestroyChild (*TlsSb
, TlsChildHandle
);
201 return TlsChildHandle
;
205 Create event for the TLS receive and transmit tokens which are used to receive and
206 transmit TLS related messages.
208 @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
210 @retval EFI_SUCCESS The events are created successfully.
211 @retval others Other error as indicated.
217 IN OUT HTTP_PROTOCOL
*HttpInstance
222 if (!HttpInstance
->LocalAddressIsIPv6
) {
224 // For Tcp4TlsTxToken.
226 Status
= gBS
->CreateEvent (
230 &HttpInstance
->TlsIsTxDone
,
231 &HttpInstance
->Tcp4TlsTxToken
.CompletionToken
.Event
233 if (EFI_ERROR (Status
)) {
237 HttpInstance
->Tcp4TlsTxData
.Push
= TRUE
;
238 HttpInstance
->Tcp4TlsTxData
.Urgent
= FALSE
;
239 HttpInstance
->Tcp4TlsTxData
.DataLength
= 0;
240 HttpInstance
->Tcp4TlsTxData
.FragmentCount
= 1;
241 HttpInstance
->Tcp4TlsTxData
.FragmentTable
[0].FragmentLength
= HttpInstance
->Tcp4TlsTxData
.DataLength
;
242 HttpInstance
->Tcp4TlsTxData
.FragmentTable
[0].FragmentBuffer
= NULL
;
243 HttpInstance
->Tcp4TlsTxToken
.Packet
.TxData
= &HttpInstance
->Tcp4TlsTxData
;
244 HttpInstance
->Tcp4TlsTxToken
.CompletionToken
.Status
= EFI_NOT_READY
;
247 // For Tcp4TlsRxToken.
249 Status
= gBS
->CreateEvent (
253 &HttpInstance
->TlsIsRxDone
,
254 &HttpInstance
->Tcp4TlsRxToken
.CompletionToken
.Event
256 if (EFI_ERROR (Status
)) {
260 HttpInstance
->Tcp4TlsRxData
.DataLength
= 0;
261 HttpInstance
->Tcp4TlsRxData
.FragmentCount
= 1;
262 HttpInstance
->Tcp4TlsRxData
.FragmentTable
[0].FragmentLength
= HttpInstance
->Tcp4TlsRxData
.DataLength
;
263 HttpInstance
->Tcp4TlsRxData
.FragmentTable
[0].FragmentBuffer
= NULL
;
264 HttpInstance
->Tcp4TlsRxToken
.Packet
.RxData
= &HttpInstance
->Tcp4TlsRxData
;
265 HttpInstance
->Tcp4TlsRxToken
.CompletionToken
.Status
= EFI_NOT_READY
;
268 // For Tcp6TlsTxToken.
270 Status
= gBS
->CreateEvent (
274 &HttpInstance
->TlsIsTxDone
,
275 &HttpInstance
->Tcp6TlsTxToken
.CompletionToken
.Event
277 if (EFI_ERROR (Status
)) {
281 HttpInstance
->Tcp6TlsTxData
.Push
= TRUE
;
282 HttpInstance
->Tcp6TlsTxData
.Urgent
= FALSE
;
283 HttpInstance
->Tcp6TlsTxData
.DataLength
= 0;
284 HttpInstance
->Tcp6TlsTxData
.FragmentCount
= 1;
285 HttpInstance
->Tcp6TlsTxData
.FragmentTable
[0].FragmentLength
= HttpInstance
->Tcp6TlsTxData
.DataLength
;
286 HttpInstance
->Tcp6TlsTxData
.FragmentTable
[0].FragmentBuffer
= NULL
;
287 HttpInstance
->Tcp6TlsTxToken
.Packet
.TxData
= &HttpInstance
->Tcp6TlsTxData
;
288 HttpInstance
->Tcp6TlsTxToken
.CompletionToken
.Status
= EFI_NOT_READY
;
291 // For Tcp6TlsRxToken.
293 Status
= gBS
->CreateEvent (
297 &HttpInstance
->TlsIsRxDone
,
298 &HttpInstance
->Tcp6TlsRxToken
.CompletionToken
.Event
300 if (EFI_ERROR (Status
)) {
304 HttpInstance
->Tcp6TlsRxData
.DataLength
= 0;
305 HttpInstance
->Tcp6TlsRxData
.FragmentCount
= 1;
306 HttpInstance
->Tcp6TlsRxData
.FragmentTable
[0].FragmentLength
= HttpInstance
->Tcp6TlsRxData
.DataLength
;
307 HttpInstance
->Tcp6TlsRxData
.FragmentTable
[0].FragmentBuffer
= NULL
;
308 HttpInstance
->Tcp6TlsRxToken
.Packet
.RxData
= &HttpInstance
->Tcp6TlsRxData
;
309 HttpInstance
->Tcp6TlsRxToken
.CompletionToken
.Status
= EFI_NOT_READY
;
318 TlsCloseTxRxEvent (HttpInstance
);
324 Close events in the TlsTxToken and TlsRxToken.
326 @param[in] HttpInstance Pointer to HTTP_PROTOCOL structure.
332 IN HTTP_PROTOCOL
*HttpInstance
335 ASSERT (HttpInstance
!= NULL
);
336 if (!HttpInstance
->LocalAddressIsIPv6
) {
337 if (NULL
!= HttpInstance
->Tcp4TlsTxToken
.CompletionToken
.Event
) {
338 gBS
->CloseEvent(HttpInstance
->Tcp4TlsTxToken
.CompletionToken
.Event
);
339 HttpInstance
->Tcp4TlsTxToken
.CompletionToken
.Event
= NULL
;
342 if (NULL
!= HttpInstance
->Tcp4TlsRxToken
.CompletionToken
.Event
) {
343 gBS
->CloseEvent (HttpInstance
->Tcp4TlsRxToken
.CompletionToken
.Event
);
344 HttpInstance
->Tcp4TlsRxToken
.CompletionToken
.Event
= NULL
;
347 if (NULL
!= HttpInstance
->Tcp6TlsTxToken
.CompletionToken
.Event
) {
348 gBS
->CloseEvent(HttpInstance
->Tcp6TlsTxToken
.CompletionToken
.Event
);
349 HttpInstance
->Tcp6TlsTxToken
.CompletionToken
.Event
= NULL
;
352 if (NULL
!= HttpInstance
->Tcp6TlsRxToken
.CompletionToken
.Event
) {
353 gBS
->CloseEvent (HttpInstance
->Tcp6TlsRxToken
.CompletionToken
.Event
);
354 HttpInstance
->Tcp6TlsRxToken
.CompletionToken
.Event
= NULL
;
360 Read the TlsCaCertificate variable and configure it.
362 @param[in, out] HttpInstance The HTTP instance private data.
364 @retval EFI_SUCCESS TlsCaCertificate is configured.
365 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
366 @retval EFI_NOT_FOUND Fail to get 'TlsCaCertificate' variable.
367 @retval Others Other error as indicated.
371 TlsConfigCertificate (
372 IN OUT HTTP_PROTOCOL
*HttpInstance
379 EFI_SIGNATURE_LIST
*CertList
;
380 EFI_SIGNATURE_DATA
*Cert
;
381 UINTN CertArraySizeInBytes
;
389 // Try to read the TlsCaCertificate variable.
391 Status
= gRT
->GetVariable (
392 EFI_TLS_CA_CERTIFICATE_VARIABLE
,
393 &gEfiTlsCaCertificateGuid
,
399 if (EFI_ERROR (Status
) && Status
!= EFI_BUFFER_TOO_SMALL
) {
404 // Allocate buffer and read the config variable.
406 CACert
= AllocatePool (CACertSize
);
407 if (CACert
== NULL
) {
408 return EFI_OUT_OF_RESOURCES
;
411 Status
= gRT
->GetVariable (
412 EFI_TLS_CA_CERTIFICATE_VARIABLE
,
413 &gEfiTlsCaCertificateGuid
,
418 if (EFI_ERROR (Status
)) {
420 // GetVariable still error or the variable is corrupted.
425 ASSERT (CACert
!= NULL
);
430 Status
= EFI_INVALID_PARAMETER
;
432 ItemDataSize
= (UINT32
) CACertSize
;
433 while (ItemDataSize
> 0) {
434 if (ItemDataSize
< sizeof (EFI_SIGNATURE_LIST
)) {
435 DEBUG ((DEBUG_ERROR
, "%a: truncated EFI_SIGNATURE_LIST header\n",
440 CertList
= (EFI_SIGNATURE_LIST
*) (CACert
+ (CACertSize
- ItemDataSize
));
442 if (CertList
->SignatureListSize
< sizeof (EFI_SIGNATURE_LIST
)) {
444 "%a: SignatureListSize too small for EFI_SIGNATURE_LIST\n",
449 if (CertList
->SignatureListSize
> ItemDataSize
) {
450 DEBUG ((DEBUG_ERROR
, "%a: truncated EFI_SIGNATURE_LIST body\n",
455 if (!CompareGuid (&CertList
->SignatureType
, &gEfiCertX509Guid
)) {
456 DEBUG ((DEBUG_ERROR
, "%a: only X509 certificates are supported\n",
458 Status
= EFI_UNSUPPORTED
;
462 if (CertList
->SignatureHeaderSize
!= 0) {
463 DEBUG ((DEBUG_ERROR
, "%a: SignatureHeaderSize must be 0 for X509\n",
468 if (CertList
->SignatureSize
< sizeof (EFI_SIGNATURE_DATA
)) {
470 "%a: SignatureSize too small for EFI_SIGNATURE_DATA\n", __FUNCTION__
));
474 CertArraySizeInBytes
= (CertList
->SignatureListSize
-
475 sizeof (EFI_SIGNATURE_LIST
));
476 if (CertArraySizeInBytes
% CertList
->SignatureSize
!= 0) {
478 "%a: EFI_SIGNATURE_DATA array not a multiple of SignatureSize\n",
483 CertCount
+= CertArraySizeInBytes
/ CertList
->SignatureSize
;
484 ItemDataSize
-= CertList
->SignatureListSize
;
486 if (CertCount
== 0) {
487 DEBUG ((DEBUG_ERROR
, "%a: no X509 certificates provided\n", __FUNCTION__
));
492 // Enumerate all data and erasing the target item.
494 ItemDataSize
= (UINT32
) CACertSize
;
495 CertList
= (EFI_SIGNATURE_LIST
*) CACert
;
496 while ((ItemDataSize
> 0) && (ItemDataSize
>= CertList
->SignatureListSize
)) {
497 Cert
= (EFI_SIGNATURE_DATA
*) ((UINT8
*) CertList
+ sizeof (EFI_SIGNATURE_LIST
) + CertList
->SignatureHeaderSize
);
498 CertCount
= (CertList
->SignatureListSize
- sizeof (EFI_SIGNATURE_LIST
) - CertList
->SignatureHeaderSize
) / CertList
->SignatureSize
;
499 for (Index
= 0; Index
< CertCount
; Index
++) {
501 // EfiTlsConfigDataTypeCACertificate
503 Status
= HttpInstance
->TlsConfiguration
->SetData (
504 HttpInstance
->TlsConfiguration
,
505 EfiTlsConfigDataTypeCACertificate
,
507 CertList
->SignatureSize
- sizeof (Cert
->SignatureOwner
)
509 if (EFI_ERROR (Status
)) {
513 Cert
= (EFI_SIGNATURE_DATA
*) ((UINT8
*) Cert
+ CertList
->SignatureSize
);
516 ItemDataSize
-= CertList
->SignatureListSize
;
517 CertList
= (EFI_SIGNATURE_LIST
*) ((UINT8
*) CertList
+ CertList
->SignatureListSize
);
526 Read the HttpTlsCipherList variable and configure it for HTTPS session.
528 @param[in, out] HttpInstance The HTTP instance private data.
530 @retval EFI_SUCCESS The prefered HTTP TLS CipherList is configured.
531 @retval EFI_NOT_FOUND Fail to get 'HttpTlsCipherList' variable.
532 @retval EFI_INVALID_PARAMETER The contents of variable are invalid.
533 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
535 @retval Others Other error as indicated.
539 TlsConfigCipherList (
540 IN OUT HTTP_PROTOCOL
*HttpInstance
545 UINTN CipherListSize
;
551 // Try to read the HttpTlsCipherList variable.
553 Status
= gRT
->GetVariable (
554 EDKII_HTTP_TLS_CIPHER_LIST_VARIABLE
,
555 &gEdkiiHttpTlsCipherListGuid
,
560 ASSERT (EFI_ERROR (Status
));
561 if (Status
!= EFI_BUFFER_TOO_SMALL
) {
565 if (CipherListSize
% sizeof (EFI_TLS_CIPHER
) != 0) {
566 return EFI_INVALID_PARAMETER
;
570 // Allocate buffer and read the config variable.
572 CipherList
= AllocatePool (CipherListSize
);
573 if (CipherList
== NULL
) {
574 return EFI_OUT_OF_RESOURCES
;
577 Status
= gRT
->GetVariable (
578 EDKII_HTTP_TLS_CIPHER_LIST_VARIABLE
,
579 &gEdkiiHttpTlsCipherListGuid
,
584 if (EFI_ERROR (Status
)) {
586 // GetVariable still error or the variable is corrupted.
591 ASSERT (CipherList
!= NULL
);
593 Status
= HttpInstance
->Tls
->SetSessionData (
601 FreePool (CipherList
);
607 Configure TLS session data.
609 @param[in, out] HttpInstance The HTTP instance private data.
611 @retval EFI_SUCCESS TLS session data is configured.
612 @retval Others Other error as indicated.
617 TlsConfigureSession (
618 IN OUT HTTP_PROTOCOL
*HttpInstance
624 // TlsConfigData initialization
626 HttpInstance
->TlsConfigData
.ConnectionEnd
= EfiTlsClient
;
627 HttpInstance
->TlsConfigData
.VerifyMethod
= EFI_TLS_VERIFY_PEER
;
628 HttpInstance
->TlsConfigData
.SessionState
= EfiTlsSessionNotStarted
;
631 // EfiTlsConnectionEnd,
632 // EfiTlsVerifyMethod
633 // EfiTlsSessionState
635 Status
= HttpInstance
->Tls
->SetSessionData (
638 &(HttpInstance
->TlsConfigData
.ConnectionEnd
),
639 sizeof (EFI_TLS_CONNECTION_END
)
641 if (EFI_ERROR (Status
)) {
645 Status
= HttpInstance
->Tls
->SetSessionData (
648 &HttpInstance
->TlsConfigData
.VerifyMethod
,
649 sizeof (EFI_TLS_VERIFY
)
651 if (EFI_ERROR (Status
)) {
655 Status
= HttpInstance
->Tls
->SetSessionData (
658 &(HttpInstance
->TlsConfigData
.SessionState
),
659 sizeof (EFI_TLS_SESSION_STATE
)
661 if (EFI_ERROR (Status
)) {
668 Status
= TlsConfigCipherList (HttpInstance
);
669 if (EFI_ERROR (Status
) && Status
!= EFI_NOT_FOUND
) {
670 DEBUG ((EFI_D_ERROR
, "TlsConfigCipherList: return %r error.\n", Status
));
675 // Tls Config Certificate
677 Status
= TlsConfigCertificate (HttpInstance
);
678 if (EFI_ERROR (Status
)) {
679 DEBUG ((EFI_D_ERROR
, "TLS Certificate Config Error!\n"));
684 // TlsCreateTxRxEvent
686 Status
= TlsCreateTxRxEvent (HttpInstance
);
687 if (EFI_ERROR (Status
)) {
694 TlsCloseTxRxEvent (HttpInstance
);
700 Transmit the Packet by processing the associated HTTPS token.
702 @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
703 @param[in] Packet The packet to transmit.
705 @retval EFI_SUCCESS The packet is transmitted.
706 @retval EFI_INVALID_PARAMETER HttpInstance is NULL or Packet is NULL.
707 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
708 @retval EFI_DEVICE_ERROR An unexpected system or network error occurred.
709 @retval Others Other errors as indicated.
715 IN OUT HTTP_PROTOCOL
*HttpInstance
,
723 if ((HttpInstance
== NULL
) || (Packet
== NULL
)) {
724 return EFI_INVALID_PARAMETER
;
727 if (!HttpInstance
->LocalAddressIsIPv6
) {
728 Size
= sizeof (EFI_TCP4_TRANSMIT_DATA
) +
729 (Packet
->BlockOpNum
- 1) * sizeof (EFI_TCP4_FRAGMENT_DATA
);
731 Size
= sizeof (EFI_TCP6_TRANSMIT_DATA
) +
732 (Packet
->BlockOpNum
- 1) * sizeof (EFI_TCP6_FRAGMENT_DATA
);
735 Data
= AllocatePool (Size
);
737 return EFI_OUT_OF_RESOURCES
;
740 if (!HttpInstance
->LocalAddressIsIPv6
) {
741 ((EFI_TCP4_TRANSMIT_DATA
*) Data
)->Push
= TRUE
;
742 ((EFI_TCP4_TRANSMIT_DATA
*) Data
)->Urgent
= FALSE
;
743 ((EFI_TCP4_TRANSMIT_DATA
*) Data
)->DataLength
= Packet
->TotalSize
;
746 // Build the fragment table.
748 ((EFI_TCP4_TRANSMIT_DATA
*) Data
)->FragmentCount
= Packet
->BlockOpNum
;
752 (NET_FRAGMENT
*) &((EFI_TCP4_TRANSMIT_DATA
*) Data
)->FragmentTable
[0],
753 &((EFI_TCP4_TRANSMIT_DATA
*) Data
)->FragmentCount
756 HttpInstance
->Tcp4TlsTxToken
.Packet
.TxData
= (EFI_TCP4_TRANSMIT_DATA
*) Data
;
758 Status
= EFI_DEVICE_ERROR
;
761 // Transmit the packet.
763 Status
= HttpInstance
->Tcp4
->Transmit (HttpInstance
->Tcp4
, &HttpInstance
->Tcp4TlsTxToken
);
764 if (EFI_ERROR (Status
)) {
768 while (!HttpInstance
->TlsIsTxDone
) {
769 HttpInstance
->Tcp4
->Poll (HttpInstance
->Tcp4
);
772 HttpInstance
->TlsIsTxDone
= FALSE
;
773 Status
= HttpInstance
->Tcp4TlsTxToken
.CompletionToken
.Status
;
775 ((EFI_TCP6_TRANSMIT_DATA
*) Data
)->Push
= TRUE
;
776 ((EFI_TCP6_TRANSMIT_DATA
*) Data
)->Urgent
= FALSE
;
777 ((EFI_TCP6_TRANSMIT_DATA
*) Data
)->DataLength
= Packet
->TotalSize
;
780 // Build the fragment table.
782 ((EFI_TCP6_TRANSMIT_DATA
*) Data
)->FragmentCount
= Packet
->BlockOpNum
;
786 (NET_FRAGMENT
*) &((EFI_TCP6_TRANSMIT_DATA
*) Data
)->FragmentTable
[0],
787 &((EFI_TCP6_TRANSMIT_DATA
*) Data
)->FragmentCount
790 HttpInstance
->Tcp6TlsTxToken
.Packet
.TxData
= (EFI_TCP6_TRANSMIT_DATA
*) Data
;
792 Status
= EFI_DEVICE_ERROR
;
795 // Transmit the packet.
797 Status
= HttpInstance
->Tcp6
->Transmit (HttpInstance
->Tcp6
, &HttpInstance
->Tcp6TlsTxToken
);
798 if (EFI_ERROR (Status
)) {
802 while (!HttpInstance
->TlsIsTxDone
) {
803 HttpInstance
->Tcp6
->Poll (HttpInstance
->Tcp6
);
806 HttpInstance
->TlsIsTxDone
= FALSE
;
807 Status
= HttpInstance
->Tcp6TlsTxToken
.CompletionToken
.Status
;
817 Receive the Packet by processing the associated HTTPS token.
819 @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
820 @param[in] Packet The packet to transmit.
821 @param[in] Timeout The time to wait for connection done.
823 @retval EFI_SUCCESS The Packet is received.
824 @retval EFI_INVALID_PARAMETER HttpInstance is NULL or Packet is NULL.
825 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
826 @retval EFI_TIMEOUT The operation is time out.
827 @retval Others Other error as indicated.
833 IN OUT HTTP_PROTOCOL
*HttpInstance
,
838 EFI_TCP4_RECEIVE_DATA
*Tcp4RxData
;
839 EFI_TCP6_RECEIVE_DATA
*Tcp6RxData
;
841 NET_FRAGMENT
*Fragment
;
842 UINT32 FragmentCount
;
843 UINT32 CurrentFragment
;
848 if ((HttpInstance
== NULL
) || (Packet
== NULL
)) {
849 return EFI_INVALID_PARAMETER
;
852 FragmentCount
= Packet
->BlockOpNum
;
853 Fragment
= AllocatePool (FragmentCount
* sizeof (NET_FRAGMENT
));
854 if (Fragment
== NULL
) {
855 Status
= EFI_OUT_OF_RESOURCES
;
860 // Build the fragment table.
862 NetbufBuildExt (Packet
, Fragment
, &FragmentCount
);
864 if (!HttpInstance
->LocalAddressIsIPv6
) {
865 Tcp4RxData
= HttpInstance
->Tcp4TlsRxToken
.Packet
.RxData
;
866 if (Tcp4RxData
== NULL
) {
867 return EFI_INVALID_PARAMETER
;
869 Tcp4RxData
->FragmentCount
= 1;
871 Tcp6RxData
= HttpInstance
->Tcp6TlsRxToken
.Packet
.RxData
;
872 if (Tcp6RxData
== NULL
) {
873 return EFI_INVALID_PARAMETER
;
875 Tcp6RxData
->FragmentCount
= 1;
879 Status
= EFI_SUCCESS
;
881 while (CurrentFragment
< FragmentCount
) {
882 if (!HttpInstance
->LocalAddressIsIPv6
) {
883 Tcp4RxData
->DataLength
= Fragment
[CurrentFragment
].Len
;
884 Tcp4RxData
->FragmentTable
[0].FragmentLength
= Fragment
[CurrentFragment
].Len
;
885 Tcp4RxData
->FragmentTable
[0].FragmentBuffer
= Fragment
[CurrentFragment
].Bulk
;
886 Status
= HttpInstance
->Tcp4
->Receive (HttpInstance
->Tcp4
, &HttpInstance
->Tcp4TlsRxToken
);
888 Tcp6RxData
->DataLength
= Fragment
[CurrentFragment
].Len
;
889 Tcp6RxData
->FragmentTable
[0].FragmentLength
= Fragment
[CurrentFragment
].Len
;
890 Tcp6RxData
->FragmentTable
[0].FragmentBuffer
= Fragment
[CurrentFragment
].Bulk
;
891 Status
= HttpInstance
->Tcp6
->Receive (HttpInstance
->Tcp6
, &HttpInstance
->Tcp6TlsRxToken
);
893 if (EFI_ERROR (Status
)) {
897 while (!HttpInstance
->TlsIsRxDone
&& ((Timeout
== NULL
) || EFI_ERROR (gBS
->CheckEvent (Timeout
)))) {
899 // Poll until some data is received or an error occurs.
901 if (!HttpInstance
->LocalAddressIsIPv6
) {
902 HttpInstance
->Tcp4
->Poll (HttpInstance
->Tcp4
);
904 HttpInstance
->Tcp6
->Poll (HttpInstance
->Tcp6
);
908 if (!HttpInstance
->TlsIsRxDone
) {
910 // Timeout occurs, cancel the receive request.
912 if (!HttpInstance
->LocalAddressIsIPv6
) {
913 HttpInstance
->Tcp4
->Cancel (HttpInstance
->Tcp4
, &HttpInstance
->Tcp4TlsRxToken
.CompletionToken
);
915 HttpInstance
->Tcp6
->Cancel (HttpInstance
->Tcp6
, &HttpInstance
->Tcp6TlsRxToken
.CompletionToken
);
918 Status
= EFI_TIMEOUT
;
921 HttpInstance
->TlsIsRxDone
= FALSE
;
924 if (!HttpInstance
->LocalAddressIsIPv6
) {
925 Status
= HttpInstance
->Tcp4TlsRxToken
.CompletionToken
.Status
;
926 if (EFI_ERROR (Status
)) {
930 Fragment
[CurrentFragment
].Len
-= Tcp4RxData
->FragmentTable
[0].FragmentLength
;
931 if (Fragment
[CurrentFragment
].Len
== 0) {
934 Fragment
[CurrentFragment
].Bulk
+= Tcp4RxData
->FragmentTable
[0].FragmentLength
;
937 Status
= HttpInstance
->Tcp6TlsRxToken
.CompletionToken
.Status
;
938 if (EFI_ERROR (Status
)) {
942 Fragment
[CurrentFragment
].Len
-= Tcp6RxData
->FragmentTable
[0].FragmentLength
;
943 if (Fragment
[CurrentFragment
].Len
== 0) {
946 Fragment
[CurrentFragment
].Bulk
+= Tcp6RxData
->FragmentTable
[0].FragmentLength
;
953 if (Fragment
!= NULL
) {
961 Receive one TLS PDU. An TLS PDU contains an TLS record header and it's
962 corresponding record data. These two parts will be put into two blocks of buffers in the
965 @param[in, out] HttpInstance Pointer to HTTP_PROTOCOL structure.
966 @param[out] Pdu The received TLS PDU.
967 @param[in] Timeout The time to wait for connection done.
969 @retval EFI_SUCCESS An TLS PDU is received.
970 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
971 @retval EFI_PROTOCOL_ERROR An unexpected TLS packet was received.
972 @retval Others Other errors as indicated.
978 IN OUT HTTP_PROTOCOL
*HttpInstance
,
985 LIST_ENTRY
*NbufList
;
991 TLS_RECORD_HEADER RecordHeader
;
1000 NbufList
= AllocatePool (sizeof (LIST_ENTRY
));
1001 if (NbufList
== NULL
) {
1002 return EFI_OUT_OF_RESOURCES
;
1005 InitializeListHead (NbufList
);
1008 // Allocate buffer to receive one TLS header.
1010 Len
= TLS_RECORD_HEADER_LENGTH
;
1011 PduHdr
= NetbufAlloc (Len
);
1012 if (PduHdr
== NULL
) {
1013 Status
= EFI_OUT_OF_RESOURCES
;
1017 Header
= NetbufAllocSpace (PduHdr
, Len
, NET_BUF_TAIL
);
1018 if (Header
== NULL
) {
1019 Status
= EFI_OUT_OF_RESOURCES
;
1024 // First step, receive one TLS header.
1026 Status
= TlsCommonReceive (HttpInstance
, PduHdr
, Timeout
);
1027 if (EFI_ERROR (Status
)) {
1031 RecordHeader
= *(TLS_RECORD_HEADER
*) Header
;
1032 if ((RecordHeader
.ContentType
== TlsContentTypeHandshake
||
1033 RecordHeader
.ContentType
== TlsContentTypeAlert
||
1034 RecordHeader
.ContentType
== TlsContentTypeChangeCipherSpec
||
1035 RecordHeader
.ContentType
== TlsContentTypeApplicationData
) &&
1036 (RecordHeader
.Version
.Major
== 0x03) && /// Major versions are same.
1037 (RecordHeader
.Version
.Minor
== TLS10_PROTOCOL_VERSION_MINOR
||
1038 RecordHeader
.Version
.Minor
==TLS11_PROTOCOL_VERSION_MINOR
||
1039 RecordHeader
.Version
.Minor
== TLS12_PROTOCOL_VERSION_MINOR
)
1041 InsertTailList (NbufList
, &PduHdr
->List
);
1043 Status
= EFI_PROTOCOL_ERROR
;
1047 Len
= SwapBytes16(RecordHeader
.Length
);
1056 // Allocate buffer to receive one TLS payload.
1058 DataSeg
= NetbufAlloc (Len
);
1059 if (DataSeg
== NULL
) {
1060 Status
= EFI_OUT_OF_RESOURCES
;
1064 NetbufAllocSpace (DataSeg
, Len
, NET_BUF_TAIL
);
1067 // Second step, receive one TLS payload.
1069 Status
= TlsCommonReceive (HttpInstance
, DataSeg
, Timeout
);
1070 if (EFI_ERROR (Status
)) {
1074 InsertTailList (NbufList
, &DataSeg
->List
);
1078 // Form the PDU from a list of PDU.
1080 *Pdu
= NetbufFromBufList (NbufList
, 0, 0, FreeNbufList
, NbufList
);
1082 Status
= EFI_OUT_OF_RESOURCES
;
1087 if (EFI_ERROR (Status
)) {
1089 // Free the Nbufs in this NbufList and the NbufList itself.
1091 FreeNbufList (NbufList
);
1098 Connect one TLS session by finishing the TLS handshake process.
1100 @param[in] HttpInstance The HTTP instance private data.
1101 @param[in] Timeout The time to wait for connection done.
1103 @retval EFI_SUCCESS The TLS session is established.
1104 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
1105 @retval EFI_ABORTED TLS session state is incorrect.
1106 @retval Others Other error as indicated.
1112 IN HTTP_PROTOCOL
*HttpInstance
,
1113 IN EFI_EVENT Timeout
1118 UINTN BufferOutSize
;
1124 UINT8
*GetSessionDataBuffer
;
1125 UINTN GetSessionDataBufferSize
;
1134 // Initialize TLS state.
1136 HttpInstance
->TlsSessionState
= EfiTlsSessionNotStarted
;
1137 Status
= HttpInstance
->Tls
->SetSessionData (
1140 &(HttpInstance
->TlsSessionState
),
1141 sizeof (EFI_TLS_SESSION_STATE
)
1143 if (EFI_ERROR (Status
)) {
1148 // Create ClientHello
1150 BufferOutSize
= DEF_BUF_LEN
;
1151 BufferOut
= AllocateZeroPool (BufferOutSize
);
1152 if (BufferOut
== NULL
) {
1153 Status
= EFI_OUT_OF_RESOURCES
;
1157 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1164 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1165 FreePool (BufferOut
);
1166 BufferOut
= AllocateZeroPool (BufferOutSize
);
1167 if (BufferOut
== NULL
) {
1168 Status
= EFI_OUT_OF_RESOURCES
;
1172 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1180 if (EFI_ERROR (Status
)) {
1181 FreePool (BufferOut
);
1186 // Transmit ClientHello
1188 PacketOut
= NetbufAlloc ((UINT32
) BufferOutSize
);
1189 DataOut
= NetbufAllocSpace (PacketOut
, (UINT32
) BufferOutSize
, NET_BUF_TAIL
);
1190 if (DataOut
== NULL
) {
1191 FreePool (BufferOut
);
1192 return EFI_OUT_OF_RESOURCES
;
1195 CopyMem (DataOut
, BufferOut
, BufferOutSize
);
1196 Status
= TlsCommonTransmit (HttpInstance
, PacketOut
);
1198 FreePool (BufferOut
);
1199 NetbufFree (PacketOut
);
1201 if (EFI_ERROR (Status
)) {
1205 while(HttpInstance
->TlsSessionState
!= EfiTlsSessionDataTransferring
&& \
1206 ((Timeout
== NULL
) || EFI_ERROR (gBS
->CheckEvent (Timeout
)))) {
1208 // Receive one TLS record.
1210 Status
= TlsReceiveOnePdu (HttpInstance
, &Pdu
, Timeout
);
1211 if (EFI_ERROR (Status
)) {
1215 BufferInSize
= Pdu
->TotalSize
;
1216 BufferIn
= AllocateZeroPool (BufferInSize
);
1217 if (BufferIn
== NULL
) {
1219 Status
= EFI_OUT_OF_RESOURCES
;
1223 NetbufCopy (Pdu
, 0, (UINT32
)BufferInSize
, BufferIn
);
1228 // Handle Receive data.
1230 BufferOutSize
= DEF_BUF_LEN
;
1231 BufferOut
= AllocateZeroPool (BufferOutSize
);
1232 if (BufferOut
== NULL
) {
1233 Status
= EFI_OUT_OF_RESOURCES
;
1237 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1244 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1245 FreePool (BufferOut
);
1246 BufferOut
= AllocateZeroPool (BufferOutSize
);
1247 if (BufferOut
== NULL
) {
1248 FreePool (BufferIn
);
1249 Status
= EFI_OUT_OF_RESOURCES
;
1253 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1262 FreePool (BufferIn
);
1264 if (EFI_ERROR (Status
)) {
1265 FreePool (BufferOut
);
1269 if (BufferOutSize
!= 0) {
1271 // Transmit the response packet.
1273 PacketOut
= NetbufAlloc ((UINT32
) BufferOutSize
);
1274 DataOut
= NetbufAllocSpace (PacketOut
, (UINT32
) BufferOutSize
, NET_BUF_TAIL
);
1275 if (DataOut
== NULL
) {
1276 FreePool (BufferOut
);
1277 return EFI_OUT_OF_RESOURCES
;
1280 CopyMem (DataOut
, BufferOut
, BufferOutSize
);
1282 Status
= TlsCommonTransmit (HttpInstance
, PacketOut
);
1284 NetbufFree (PacketOut
);
1286 if (EFI_ERROR (Status
)) {
1287 FreePool (BufferOut
);
1292 FreePool (BufferOut
);
1295 // Get the session state, then decide whether need to continue handle received packet.
1297 GetSessionDataBufferSize
= DEF_BUF_LEN
;
1298 GetSessionDataBuffer
= AllocateZeroPool (GetSessionDataBufferSize
);
1299 if (GetSessionDataBuffer
== NULL
) {
1300 Status
= EFI_OUT_OF_RESOURCES
;
1304 Status
= HttpInstance
->Tls
->GetSessionData (
1307 GetSessionDataBuffer
,
1308 &GetSessionDataBufferSize
1310 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1311 FreePool (GetSessionDataBuffer
);
1312 GetSessionDataBuffer
= AllocateZeroPool (GetSessionDataBufferSize
);
1313 if (GetSessionDataBuffer
== NULL
) {
1314 Status
= EFI_OUT_OF_RESOURCES
;
1318 Status
= HttpInstance
->Tls
->GetSessionData (
1321 GetSessionDataBuffer
,
1322 &GetSessionDataBufferSize
1325 if (EFI_ERROR (Status
)) {
1326 FreePool(GetSessionDataBuffer
);
1330 ASSERT(GetSessionDataBufferSize
== sizeof (EFI_TLS_SESSION_STATE
));
1331 HttpInstance
->TlsSessionState
= *(EFI_TLS_SESSION_STATE
*) GetSessionDataBuffer
;
1333 FreePool (GetSessionDataBuffer
);
1335 if(HttpInstance
->TlsSessionState
== EfiTlsSessionError
) {
1340 if (HttpInstance
->TlsSessionState
!= EfiTlsSessionDataTransferring
) {
1341 Status
= EFI_ABORTED
;
1348 Close the TLS session and send out the close notification message.
1350 @param[in] HttpInstance The HTTP instance private data.
1352 @retval EFI_SUCCESS The TLS session is closed.
1353 @retval EFI_INVALID_PARAMETER HttpInstance is NULL.
1354 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
1355 @retval Others Other error as indicated.
1361 IN HTTP_PROTOCOL
*HttpInstance
1367 UINTN BufferOutSize
;
1372 Status
= EFI_SUCCESS
;
1377 if (HttpInstance
== NULL
) {
1378 return EFI_INVALID_PARAMETER
;
1381 HttpInstance
->TlsSessionState
= EfiTlsSessionClosing
;
1383 Status
= HttpInstance
->Tls
->SetSessionData (
1386 &(HttpInstance
->TlsSessionState
),
1387 sizeof (EFI_TLS_SESSION_STATE
)
1389 if (EFI_ERROR (Status
)) {
1393 BufferOutSize
= DEF_BUF_LEN
;
1394 BufferOut
= AllocateZeroPool (BufferOutSize
);
1395 if (BufferOut
== NULL
) {
1396 Status
= EFI_OUT_OF_RESOURCES
;
1400 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1407 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1408 FreePool (BufferOut
);
1409 BufferOut
= AllocateZeroPool (BufferOutSize
);
1410 if (BufferOut
== NULL
) {
1411 Status
= EFI_OUT_OF_RESOURCES
;
1415 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1424 if (EFI_ERROR (Status
)) {
1425 FreePool (BufferOut
);
1429 PacketOut
= NetbufAlloc ((UINT32
) BufferOutSize
);
1430 DataOut
= NetbufAllocSpace (PacketOut
, (UINT32
) BufferOutSize
, NET_BUF_TAIL
);
1431 if (DataOut
== NULL
) {
1432 FreePool (BufferOut
);
1433 return EFI_OUT_OF_RESOURCES
;
1436 CopyMem (DataOut
, BufferOut
, BufferOutSize
);
1438 Status
= TlsCommonTransmit (HttpInstance
, PacketOut
);
1440 FreePool (BufferOut
);
1441 NetbufFree (PacketOut
);
1447 Process one message according to the CryptMode.
1449 @param[in] HttpInstance Pointer to HTTP_PROTOCOL structure.
1450 @param[in] Message Pointer to the message buffer needed to processed.
1451 If ProcessMode is EfiTlsEncrypt, the message contain the TLS
1452 header and plain text TLS APP payload.
1453 If ProcessMode is EfiTlsDecrypt, the message contain the TLS
1454 header and cipher text TLS APP payload.
1455 @param[in] MessageSize Pointer to the message buffer size.
1456 @param[in] ProcessMode Process mode.
1457 @param[in, out] Fragment Only one Fragment returned after the Message is
1458 processed successfully.
1459 If ProcessMode is EfiTlsEncrypt, the fragment contain the TLS
1460 header and cipher text TLS APP payload.
1461 If ProcessMode is EfiTlsDecrypt, the fragment contain the TLS
1462 header and plain text TLS APP payload.
1464 @retval EFI_SUCCESS Message is processed successfully.
1465 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
1466 @retval Others Other errors as indicated.
1472 IN HTTP_PROTOCOL
*HttpInstance
,
1474 IN UINTN MessageSize
,
1475 IN EFI_TLS_CRYPT_MODE ProcessMode
,
1476 IN OUT NET_FRAGMENT
*Fragment
1483 EFI_TLS_FRAGMENT_DATA
*FragmentTable
;
1484 UINT32 FragmentCount
;
1485 EFI_TLS_FRAGMENT_DATA
*OriginalFragmentTable
;
1488 Status
= EFI_SUCCESS
;
1492 FragmentTable
= NULL
;
1493 OriginalFragmentTable
= NULL
;
1496 // Rebuild fragment table from BufferIn.
1499 FragmentTable
= AllocateZeroPool (FragmentCount
* sizeof (EFI_TLS_FRAGMENT_DATA
));
1500 if (FragmentTable
== NULL
) {
1501 Status
= EFI_OUT_OF_RESOURCES
;
1505 FragmentTable
->FragmentLength
= (UINT32
) MessageSize
;
1506 FragmentTable
->FragmentBuffer
= Message
;
1509 // Record the original FragmentTable.
1511 OriginalFragmentTable
= FragmentTable
;
1514 // Process the Message.
1516 Status
= HttpInstance
->Tls
->ProcessPacket (
1522 if (EFI_ERROR (Status
)) {
1527 // Calculate the size according to FragmentTable.
1529 for (Index
= 0; Index
< FragmentCount
; Index
++) {
1530 BufferSize
+= FragmentTable
[Index
].FragmentLength
;
1534 // Allocate buffer for processed data.
1536 Buffer
= AllocateZeroPool (BufferSize
);
1537 if (Buffer
== NULL
) {
1538 Status
= EFI_OUT_OF_RESOURCES
;
1543 // Copy the new FragmentTable buffer into Buffer.
1545 for (Index
= 0; Index
< FragmentCount
; Index
++) {
1547 (Buffer
+ BytesCopied
),
1548 FragmentTable
[Index
].FragmentBuffer
,
1549 FragmentTable
[Index
].FragmentLength
1551 BytesCopied
+= FragmentTable
[Index
].FragmentLength
;
1554 // Free the FragmentBuffer since it has been copied.
1556 FreePool (FragmentTable
[Index
].FragmentBuffer
);
1559 Fragment
->Len
= BufferSize
;
1560 Fragment
->Bulk
= Buffer
;
1564 if (OriginalFragmentTable
!= NULL
) {
1565 if( FragmentTable
== OriginalFragmentTable
) {
1566 FragmentTable
= NULL
;
1568 FreePool (OriginalFragmentTable
);
1569 OriginalFragmentTable
= NULL
;
1573 // Caller has the responsibility to free the FragmentTable.
1575 if (FragmentTable
!= NULL
) {
1576 FreePool (FragmentTable
);
1577 FragmentTable
= NULL
;
1584 Receive one fragment decrypted from one TLS record.
1586 @param[in] HttpInstance Pointer to HTTP_PROTOCOL structure.
1587 @param[in, out] Fragment The received Fragment.
1588 @param[in] Timeout The time to wait for connection done.
1590 @retval EFI_SUCCESS One fragment is received.
1591 @retval EFI_OUT_OF_RESOURCES Can't allocate memory resources.
1592 @retval EFI_ABORTED Something wrong decryption the message.
1593 @retval Others Other errors as indicated.
1599 IN HTTP_PROTOCOL
*HttpInstance
,
1600 IN OUT NET_FRAGMENT
*Fragment
,
1601 IN EFI_EVENT Timeout
1606 TLS_RECORD_HEADER RecordHeader
;
1609 NET_FRAGMENT TempFragment
;
1611 UINTN BufferOutSize
;
1614 UINT8
*GetSessionDataBuffer
;
1615 UINTN GetSessionDataBufferSize
;
1617 Status
= EFI_SUCCESS
;
1625 GetSessionDataBuffer
= NULL
;
1626 GetSessionDataBufferSize
= 0;
1629 // Receive only one TLS record
1631 Status
= TlsReceiveOnePdu (HttpInstance
, &Pdu
, Timeout
);
1632 if (EFI_ERROR (Status
)) {
1636 BufferInSize
= Pdu
->TotalSize
;
1637 BufferIn
= AllocateZeroPool (BufferInSize
);
1638 if (BufferIn
== NULL
) {
1639 Status
= EFI_OUT_OF_RESOURCES
;
1644 NetbufCopy (Pdu
, 0, (UINT32
) BufferInSize
, BufferIn
);
1649 // Handle Receive data.
1651 RecordHeader
= *(TLS_RECORD_HEADER
*) BufferIn
;
1653 if ((RecordHeader
.ContentType
== TlsContentTypeApplicationData
) &&
1654 (RecordHeader
.Version
.Major
== 0x03) &&
1655 (RecordHeader
.Version
.Minor
== TLS10_PROTOCOL_VERSION_MINOR
||
1656 RecordHeader
.Version
.Minor
== TLS11_PROTOCOL_VERSION_MINOR
||
1657 RecordHeader
.Version
.Minor
== TLS12_PROTOCOL_VERSION_MINOR
)
1662 Status
= TlsProcessMessage (
1670 FreePool (BufferIn
);
1672 if (EFI_ERROR (Status
)) {
1673 if (Status
== EFI_ABORTED
) {
1675 // Something wrong decryption the message.
1676 // BuildResponsePacket() will be called to generate Error Alert message and send it out.
1678 BufferOutSize
= DEF_BUF_LEN
;
1679 BufferOut
= AllocateZeroPool (BufferOutSize
);
1680 if (BufferOut
== NULL
) {
1681 Status
= EFI_OUT_OF_RESOURCES
;
1685 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1692 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1693 FreePool (BufferOut
);
1694 BufferOut
= AllocateZeroPool (BufferOutSize
);
1695 if (BufferOut
== NULL
) {
1696 Status
= EFI_OUT_OF_RESOURCES
;
1700 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1708 if (EFI_ERROR (Status
)) {
1709 FreePool(BufferOut
);
1713 if (BufferOutSize
!= 0) {
1714 PacketOut
= NetbufAlloc ((UINT32
)BufferOutSize
);
1715 DataOut
= NetbufAllocSpace (PacketOut
, (UINT32
) BufferOutSize
, NET_BUF_TAIL
);
1716 if (DataOut
== NULL
) {
1717 FreePool (BufferOut
);
1718 return EFI_OUT_OF_RESOURCES
;
1721 CopyMem (DataOut
, BufferOut
, BufferOutSize
);
1723 Status
= TlsCommonTransmit (HttpInstance
, PacketOut
);
1725 NetbufFree (PacketOut
);
1728 FreePool(BufferOut
);
1730 if (EFI_ERROR (Status
)) {
1743 ASSERT (((TLS_RECORD_HEADER
*) (TempFragment
.Bulk
))->ContentType
== TlsContentTypeApplicationData
);
1745 BufferInSize
= ((TLS_RECORD_HEADER
*) (TempFragment
.Bulk
))->Length
;
1746 BufferIn
= AllocateZeroPool (BufferInSize
);
1747 if (BufferIn
== NULL
) {
1748 Status
= EFI_OUT_OF_RESOURCES
;
1752 CopyMem (BufferIn
, TempFragment
.Bulk
+ TLS_RECORD_HEADER_LENGTH
, BufferInSize
);
1755 // Free the buffer in TempFragment.
1757 FreePool (TempFragment
.Bulk
);
1759 } else if ((RecordHeader
.ContentType
== TlsContentTypeAlert
) &&
1760 (RecordHeader
.Version
.Major
== 0x03) &&
1761 (RecordHeader
.Version
.Minor
== TLS10_PROTOCOL_VERSION_MINOR
||
1762 RecordHeader
.Version
.Minor
== TLS11_PROTOCOL_VERSION_MINOR
||
1763 RecordHeader
.Version
.Minor
== TLS12_PROTOCOL_VERSION_MINOR
)
1765 BufferOutSize
= DEF_BUF_LEN
;
1766 BufferOut
= AllocateZeroPool (BufferOutSize
);
1767 if (BufferOut
== NULL
) {
1768 FreePool (BufferIn
);
1769 Status
= EFI_OUT_OF_RESOURCES
;
1773 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1780 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1781 FreePool (BufferOut
);
1782 BufferOut
= AllocateZeroPool (BufferOutSize
);
1783 if (BufferOut
== NULL
) {
1784 FreePool (BufferIn
);
1785 Status
= EFI_OUT_OF_RESOURCES
;
1789 Status
= HttpInstance
->Tls
->BuildResponsePacket (
1798 FreePool (BufferIn
);
1800 if (EFI_ERROR (Status
)) {
1801 FreePool (BufferOut
);
1805 if (BufferOutSize
!= 0) {
1806 PacketOut
= NetbufAlloc ((UINT32
) BufferOutSize
);
1807 DataOut
= NetbufAllocSpace (PacketOut
, (UINT32
) BufferOutSize
, NET_BUF_TAIL
);
1808 if (DataOut
== NULL
) {
1809 FreePool (BufferOut
);
1810 return EFI_OUT_OF_RESOURCES
;
1813 CopyMem (DataOut
, BufferOut
, BufferOutSize
);
1815 Status
= TlsCommonTransmit (HttpInstance
, PacketOut
);
1817 NetbufFree (PacketOut
);
1820 FreePool (BufferOut
);
1823 // Get the session state.
1825 GetSessionDataBufferSize
= DEF_BUF_LEN
;
1826 GetSessionDataBuffer
= AllocateZeroPool (GetSessionDataBufferSize
);
1827 if (GetSessionDataBuffer
== NULL
) {
1828 Status
= EFI_OUT_OF_RESOURCES
;
1832 Status
= HttpInstance
->Tls
->GetSessionData (
1835 GetSessionDataBuffer
,
1836 &GetSessionDataBufferSize
1838 if (Status
== EFI_BUFFER_TOO_SMALL
) {
1839 FreePool (GetSessionDataBuffer
);
1840 GetSessionDataBuffer
= AllocateZeroPool (GetSessionDataBufferSize
);
1841 if (GetSessionDataBuffer
== NULL
) {
1842 Status
= EFI_OUT_OF_RESOURCES
;
1846 Status
= HttpInstance
->Tls
->GetSessionData (
1849 GetSessionDataBuffer
,
1850 &GetSessionDataBufferSize
1853 if (EFI_ERROR (Status
)) {
1854 FreePool (GetSessionDataBuffer
);
1858 ASSERT(GetSessionDataBufferSize
== sizeof (EFI_TLS_SESSION_STATE
));
1859 HttpInstance
->TlsSessionState
= *(EFI_TLS_SESSION_STATE
*) GetSessionDataBuffer
;
1861 FreePool (GetSessionDataBuffer
);
1863 if(HttpInstance
->TlsSessionState
== EfiTlsSessionError
) {
1864 DEBUG ((EFI_D_ERROR
, "TLS Session State Error!\n"));
1872 Fragment
->Bulk
= BufferIn
;
1873 Fragment
->Len
= (UINT32
) BufferInSize
;