diff options
| author | Wilmer van der Gaast <wilmer@gaast.net> | 2006-06-25 14:15:42 +0200 | 
|---|---|---|
| committer | Wilmer van der Gaast <wilmer@gaast.net> | 2006-06-25 14:15:42 +0200 | 
| commit | df1694b9559d4abec748b0506b5f44e684d022a8 (patch) | |
| tree | 4a86737f6edc6a72c0cf8ddf6c946c64c36572b4 /protocols/ssl_openssl.c | |
| parent | 812a41362a9316da1734fdaa8b1aad36bde9cb5c (diff) | |
Moving all generic files to lib/ instead of having some in / and some in
protocols/, and adding RC4 code.
Diffstat (limited to 'protocols/ssl_openssl.c')
| -rw-r--r-- | protocols/ssl_openssl.c | 221 | 
1 files changed, 0 insertions, 221 deletions
| diff --git a/protocols/ssl_openssl.c b/protocols/ssl_openssl.c deleted file mode 100644 index b6f6c520..00000000 --- a/protocols/ssl_openssl.c +++ /dev/null @@ -1,221 +0,0 @@ -  /********************************************************************\ -  * BitlBee -- An IRC to other IM-networks gateway                     * -  *                                                                    * -  * Copyright 2002-2004 Wilmer van der Gaast and others                * -  \********************************************************************/ - -/* SSL module - OpenSSL version                                         */ - -/* -  This program is free software; you can redistribute it and/or modify -  it under the terms of the GNU General Public License as published by -  the Free Software Foundation; either version 2 of the License, or -  (at your option) any later version. - -  This program is distributed in the hope that it will be useful, -  but WITHOUT ANY WARRANTY; without even the implied warranty of -  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the -  GNU General Public License for more details. - -  You should have received a copy of the GNU General Public License with -  the Debian GNU/Linux distribution in /usr/share/common-licenses/GPL; -  if not, write to the Free Software Foundation, Inc., 59 Temple Place, -  Suite 330, Boston, MA  02111-1307  USA -*/ - -#include <openssl/crypto.h> -#include <openssl/rand.h> -#include <openssl/x509.h> -#include <openssl/pem.h> -#include <openssl/ssl.h> -#include <openssl/err.h> - -#include "proxy.h" -#include "ssl_client.h" -#include "sock.h" - -int ssl_errno = 0; - -static gboolean initialized = FALSE; - -struct scd -{ -	ssl_input_function func; -	gpointer data; -	int fd; -	gboolean established; -	 -	int inpa; -	int lasterr;		/* Necessary for SSL_get_error */ -	SSL *ssl; -	SSL_CTX *ssl_ctx; -}; - -static gboolean ssl_connected( gpointer data, gint source, b_input_condition cond ); - - -void *ssl_connect( char *host, int port, ssl_input_function func, gpointer data ) -{ -	struct scd *conn = g_new0( struct scd, 1 ); -	SSL_METHOD *meth; -	 -	conn->fd = proxy_connect( host, port, ssl_connected, conn ); -	conn->func = func; -	conn->data = data; -	 -	if( conn->fd < 0 ) -	{ -		g_free( conn ); -		return( NULL ); -	} -	 -	if( !initialized ) -	{ -		initialized = TRUE; -		SSLeay_add_ssl_algorithms(); -	} -	 -	meth = TLSv1_client_method(); -	conn->ssl_ctx = SSL_CTX_new( meth ); -	if( conn->ssl_ctx == NULL ) -	{ -		conn->fd = -1; -		return( NULL ); -	} -	 -	conn->ssl = SSL_new( conn->ssl_ctx ); -	if( conn->ssl == NULL ) -	{ -		conn->fd = -1; -		return( NULL ); -	} -	 -	return( conn ); -} - -static gboolean ssl_handshake( gpointer data, gint source, b_input_condition cond ); - -static gboolean ssl_connected( gpointer data, gint source, b_input_condition cond ) -{ -	struct scd *conn = data; -	 -	if( source == -1 ) -		return ssl_handshake( data, -1, cond ); -	 -	/* We can do at least the handshake with non-blocking I/O */ -	sock_make_nonblocking( conn->fd ); -	SSL_set_fd( conn->ssl, conn->fd ); -	 -	return ssl_handshake( data, source, cond ); -}	 - -static gboolean ssl_handshake( gpointer data, gint source, b_input_condition cond ) -{ -	struct scd *conn = data; -	int st; -	 -	if( ( st = SSL_connect( conn->ssl ) ) < 0 ) -	{ -		conn->lasterr = SSL_get_error( conn->ssl, st ); -		if( conn->lasterr != SSL_ERROR_WANT_READ && conn->lasterr != SSL_ERROR_WANT_WRITE ) -			goto ssl_connected_failure; -		 -		conn->inpa = b_input_add( conn->fd, ssl_getdirection( conn ), ssl_handshake, data ); -		return FALSE; -	} -	 -	conn->established = TRUE; -	sock_make_blocking( conn->fd );		/* For now... */ -	conn->func( conn->data, conn, cond ); -	return FALSE; -	 -ssl_connected_failure: -	conn->func( conn->data, NULL, cond ); -	 -	if( conn->ssl ) -	{ -		SSL_shutdown( conn->ssl ); -		SSL_free( conn->ssl ); -	} -	if( conn->ssl_ctx ) -	{ -		SSL_CTX_free( conn->ssl_ctx ); -	} -	if( source >= 0 ) closesocket( source ); -	g_free( conn ); -	 -	return FALSE; -} - -int ssl_read( void *conn, char *buf, int len ) -{ -	int st; -	 -	if( !((struct scd*)conn)->established ) -	{ -		ssl_errno = SSL_NOHANDSHAKE; -		return -1; -	} -	 -	st = SSL_read( ((struct scd*)conn)->ssl, buf, len ); -	 -	ssl_errno = SSL_OK; -	if( st <= 0 ) -	{ -		((struct scd*)conn)->lasterr = SSL_get_error( ((struct scd*)conn)->ssl, st ); -		if( ((struct scd*)conn)->lasterr == SSL_ERROR_WANT_READ || ((struct scd*)conn)->lasterr == SSL_ERROR_WANT_WRITE ) -			ssl_errno = SSL_AGAIN; -	} -	 -	return st; -} - -int ssl_write( void *conn, const char *buf, int len ) -{ -	int st; -	 -	if( !((struct scd*)conn)->established ) -	{ -		ssl_errno = SSL_NOHANDSHAKE; -		return -1; -	} -	 -	st = SSL_write( ((struct scd*)conn)->ssl, buf, len ); -	 -	ssl_errno = SSL_OK; -	if( st <= 0 ) -	{ -		((struct scd*)conn)->lasterr = SSL_get_error( ((struct scd*)conn)->ssl, st ); -		if( ((struct scd*)conn)->lasterr == SSL_ERROR_WANT_READ || ((struct scd*)conn)->lasterr == SSL_ERROR_WANT_WRITE ) -			ssl_errno = SSL_AGAIN; -	} -	 -	return st; -} - -void ssl_disconnect( void *conn_ ) -{ -	struct scd *conn = conn_; -	 -	if( conn->inpa != -1 ) -		b_event_remove( conn->inpa ); -	 -	if( conn->established ) -		SSL_shutdown( conn->ssl ); -	 -	closesocket( conn->fd ); -	 -	SSL_free( conn->ssl ); -	SSL_CTX_free( conn->ssl_ctx ); -	g_free( conn ); -} - -int ssl_getfd( void *conn ) -{ -	return( ((struct scd*)conn)->fd ); -} - -b_input_condition ssl_getdirection( void *conn ) -{ -	return( ((struct scd*)conn)->lasterr == SSL_ERROR_WANT_WRITE ? GAIM_INPUT_WRITE : GAIM_INPUT_READ ); -} | 
