SSL(四)

客户端代码如下:

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105

#include <stdio.h> #include <errno.h> #include <unistd.h> #include <malloc.h> #include <string.h> #include <sys/socket.h> #include <resolv.h> #include <netdb.h> #include <openssl/ssl.h> #include <openssl/err.h> #define FAIL    -1 int  OpenConnection( const  char  *hostname,  int  port) {    int  sd; struct  hostent *host; struct  sockaddr_in addr; if  ( (host = gethostbyname(hostname)) == NULL ) {      printf ( 'Eroor: %s\n' ,hostname);      perror (hostname);      abort (); } sd = socket(PF_INET, SOCK_STREAM, 0); bzero(&addr,  sizeof (addr)); addr.sin_family = AF_INET; addr.sin_port = htons(port); addr.sin_addr.s_addr = *( long *)(host->h_addr); if  ( connect(sd, ( struct  sockaddr*)&addr,  sizeof (addr)) != 0 ) {      close(sd);      perror (hostname);      abort (); } return  sd; } SSL_CTX* InitCTX( void ) {   SSL_METHOD *method; SSL_CTX *ctx; OpenSSL_add_all_algorithms();   /* Load cryptos, et.al. */ SSL_load_error_strings();    /* Bring in and register error messages */ method = SSLv2_client_method();   /* Create new client-method instance */ ctx = SSL_CTX_new(method);    /* Create new context */ if  ( ctx == NULL ) {      ERR_print_errors_fp(stderr);      printf ( 'Eroor: %s\n' ,stderr);      abort (); } return  ctx; } void  ShowCerts(SSL* ssl) {   X509 *cert;      char  *line;      cert = SSL_get_peer_certificate(ssl);  /* get the server's certificate */      if  ( cert != NULL )      {      printf ( "Server certificates:\n" );      line = X509_NAME_oneline(X509_get_subject_name(cert), 0, 0);      printf ( "Subject: %s\n" , line);      free (line);        /* free the malloc'ed string */      line = X509_NAME_oneline(X509_get_issuer_name(cert), 0, 0);      printf ( "Issuer: %s\n" , line);      free (line);        /* free the malloc'ed string */      X509_free(cert);      /* free the malloc'ed certificate copy */ } else      printf ( "No certificates.\n" ); } int  main( int  count,  char  *strings[]) {   SSL_CTX *ctx; int  server; SSL *ssl; char  buf[1024]; int  bytes; char  *hostname, *portnum; if  ( count != 3 ) {      printf ( "usage: %s <hostname> <portnum>\n" , strings[0]);      exit (0); } SSL_library_init(); hostname=strings[1]; portnum=strings[2]; ctx = InitCTX(); server = OpenConnection(hostname,  atoi (portnum)); ssl = SSL_new(ctx);       /* create new SSL connection state */ SSL_set_fd(ssl, server);     /* attach the socket descriptor */ if  ( SSL_connect(ssl) == FAIL )    /* perform the connection */ {      printf ( 'Eroor: %s\n' ,stderr);      ERR_print_errors_fp(stderr); } else {    char  *msg =  "HelloWorld" ;      printf ( "Connected with %s encryption\n" , SSL_get_cipher(ssl));      ShowCerts(ssl);         /* get any certs */      SSL_write(ssl, msg,  strlen (msg));    /* encrypt & send message */      bytes = SSL_read(ssl, buf,  sizeof (buf));  /* get reply & decrypt */      buf[bytes] = 0;      printf ( "Received: \"%s\"\n" , buf);      SSL_free(ssl);         /* release connection state */ } close(server);          /* close socket */ SSL_CTX_free(ctx);         /* release context */ return  0; }

服务端代码如下:

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155

#include <errno.h> #include <unistd.h> #include <malloc.h> #include <string.h> #include <arpa/inet.h> #include <sys/socket.h> #include <sys/types.h> #include <netinet/in.h> #include <resolv.h> #include "openssl/ssl.h" #include "openssl/err.h" #define FAIL    -1 using  namespace  std; int  OpenListener( int  port) {    int  sd; struct  sockaddr_in addr; sd = socket(PF_INET, SOCK_STREAM, 0); bzero(&addr,  sizeof (addr)); addr.sin_family = AF_INET; addr.sin_port = htons(port); addr.sin_addr.s_addr = INADDR_ANY; if  ( bind(sd, ( struct  sockaddr*)&addr,  sizeof (addr)) != 0 ) {      perror ( "can't bind port" );      abort (); } if  ( listen(sd, 10) != 0 ) {      perror ( "Can't configure listening port" );      abort (); } return  sd; } SSL_CTX* InitServerCTX( void ) { SSL_CTX *ctx = NULL;      #if OPENSSL_VERSION_NUMBER >= 0x10000000L             const  SSL_METHOD *method;      #else              SSL_METHOD *method;      #endif      SSL_library_init();      OpenSSL_add_all_algorithms();   /* load & register all cryptos, etc. */      SSL_load_error_strings();    /* load all error messages */      method = SSLv23_client_method();  /* create new server-method instance */      ctx = SSL_CTX_new(method);    /* create new context from method */      if  ( ctx == NULL )      {          ERR_print_errors_fp(stderr);          abort ();      }      return  ctx; } void  LoadCertificates(SSL_CTX* ctx,  char * CertFile,  char * KeyFile) { //New lines      if  (SSL_CTX_load_verify_locations(ctx, CertFile, KeyFile) != 1)          ERR_print_errors_fp(stderr);      if  (SSL_CTX_set_default_verify_paths(ctx) != 1)          ERR_print_errors_fp(stderr);      //End new lines /* set the local certificate from CertFile */ if  ( SSL_CTX_use_certificate_file(ctx, CertFile, SSL_FILETYPE_PEM) <= 0 ) {      ERR_print_errors_fp(stderr);      abort (); } /* set the private key from KeyFile (may be the same as CertFile) */ if  ( SSL_CTX_use_PrivateKey_file(ctx, KeyFile, SSL_FILETYPE_PEM) <= 0 ) {      ERR_print_errors_fp(stderr);      abort (); } /* verify private key */ if  ( !SSL_CTX_check_private_key(ctx) ) {      fprintf (stderr,  "Private key does not match the public certificate\n" );      abort (); } printf ( "LoadCertificates Compleate Successfully.....\n" ); } void  ShowCerts(SSL* ssl) {   X509 *cert; char  *line; cert = SSL_get_peer_certificate(ssl);  /* Get certificates (if available) */ if  ( cert != NULL ) {      printf ( "Server certificates:\n" );      line = X509_NAME_oneline(X509_get_subject_name(cert), 0, 0);      printf ( "Subject: %s\n" , line);      free (line);      line = X509_NAME_oneline(X509_get_issuer_name(cert), 0, 0);      printf ( "Issuer: %s\n" , line);      free (line);      X509_free(cert); } else      printf ( "No certificates.\n" ); } void  Servlet(SSL* ssl)  /* Serve the connection -- threadable */ {    char  buf[1024]; char  reply[1024]; int  sd, bytes; const  char * HTMLecho= "<html><body><pre>%s</pre></body></html>\n\n" ; if  ( SSL_accept(ssl) == FAIL )      /* do SSL-protocol accept */      ERR_print_errors_fp(stderr); else {      ShowCerts(ssl);         /* get any certificates */      bytes = SSL_read(ssl, buf,  sizeof (buf));  /* get request */      if  ( bytes > 0 )      {          buf[bytes] = 0;          printf ( "Client msg: \"%s\"\n" , buf);          sprintf (reply, HTMLecho, buf);    /* construct reply */          SSL_write(ssl, reply,  strlen (reply));  /* send reply */      }      else          ERR_print_errors_fp(stderr); } sd = SSL_get_fd(ssl);        /* get socket connection */ SSL_free(ssl);          /* release SSL state */ close(sd);           /* close connection */ } int  main( int  count,  char  *strings[]) {   SSL_CTX *ctx; int  server; char  *portnum; if  ( count != 2 ) {      printf ( "Usage: %s <portnum>\n" , strings[0]);      exit (0); } else {      printf ( "Usage: %s <portnum>\n" , strings[1]); } SSL_library_init(); portnum = strings[1]; ctx = InitServerCTX();         /* initialize SSL */ LoadCertificates(ctx,  "/home/stud/kawsar/mycert.pem" ,  "/home/stud/kawsar/mycert.pem" );   /* load certs */ server = OpenListener( atoi (portnum));     /* create server socket */ while  (1) {    struct  sockaddr_in addr;      socklen_t len =  sizeof (addr);      SSL *ssl;      int  client = accept(server, ( struct  sockaddr*)&addr, &len);   /* accept connection   as usual */      printf ( "Connection: %s:%d\n" ,inet_ntoa(addr.sin_addr), ntohs(addr.sin_port));      ssl = SSL_new(ctx);               /* get new SSL state with context */      SSL_set_fd(ssl, client);       /* set connection socket to SSL state */      Servlet(ssl);          /* service connection */ } close(server);           /* close server socket */ SSL_CTX_free(ctx);          /* release context */ }