1 files changed, 34 insertions, 37 deletions

diff --git a/lib/ssl_openssl.c b/lib/ssl_openssl.c
index c1aa6b1b..3486f044 100644
--- a/lib/ssl_openssl.c
+++ b/lib/ssl_openssl.c
@@ -1,7 +1,7 @@
   /********************************************************************\
   * BitlBee -- An IRC to other IM-networks gateway                     *
   *                                                                    *
-  * Copyright 2002-2004 Wilmer van der Gaast and others                *
+  * Copyright 2002-2012 Wilmer van der Gaast and others                *
   \********************************************************************/
 
 /* SSL module - OpenSSL version                                         */
@@ -46,13 +46,16 @@ struct scd
 	int fd;
 	gboolean established;
 	gboolean verify;
+	char *hostname;
 	
 	int inpa;
 	int lasterr;		/* Necessary for SSL_get_error */
 	SSL *ssl;
-	SSL_CTX *ssl_ctx;
 };
 
+static SSL_CTX *ssl_ctx;
+
+static void ssl_conn_free( struct scd *conn );
 static gboolean ssl_connected( gpointer data, gint source, b_input_condition cond );
 static gboolean ssl_starttls_real( gpointer data, gint source, b_input_condition cond );
 static gboolean ssl_handshake( gpointer data, gint source, b_input_condition cond );
@@ -60,9 +63,14 @@ static gboolean ssl_handshake( gpointer data, gint source, b_input_condition con
 
 void ssl_init( void )
 {
-	initialized = TRUE;
+	const SSL_METHOD *meth;
+	
 	SSL_library_init();
-	// SSLeay_add_ssl_algorithms();
+	
+	meth = TLSv1_client_method();
+	ssl_ctx = SSL_CTX_new( meth );
+	
+	initialized = TRUE;
 }
 
 void *ssl_connect( char *host, int port, gboolean verify, ssl_input_function func, gpointer data )
@@ -72,13 +80,14 @@ void *ssl_connect( char *host, int port, gboolean verify, ssl_input_function fun
 	conn->fd = proxy_connect( host, port, ssl_connected, conn );
 	if( conn->fd < 0 )
 	{
-		g_free( conn );
+		ssl_conn_free( conn );
 		return NULL;
 	}
 	
 	conn->func = func;
 	conn->data = data;
 	conn->inpa = -1;
+	conn->hostname = g_strdup( host );
 	
 	return conn;
 }
@@ -92,6 +101,7 @@ void *ssl_starttls( int fd, char *hostname, gboolean verify, ssl_input_function
 	conn->data = data;
 	conn->inpa = -1;
 	conn->verify = verify && global.conf->cafile;
+	conn->hostname = g_strdup( hostname );
 	
 	/* This function should be called via a (short) timeout instead of
 	   directly from here, because these SSL calls are *supposed* to be
@@ -117,15 +127,13 @@ static gboolean ssl_starttls_real( gpointer data, gint source, b_input_condition
 static gboolean ssl_connected( gpointer data, gint source, b_input_condition cond )
 {
 	struct scd *conn = data;
-	const SSL_METHOD *meth;
 	
-	/* Right now we don't have any verification functionality for OpenSSL. */
-
 	if( conn->verify )
 	{
+		/* Right now we don't have any verification functionality for OpenSSL. */
 		conn->func( conn->data, 1, NULL, cond );
 		if( source >= 0 ) closesocket( source );
-		g_free( conn );
+		ssl_conn_free( conn );
 
 		return FALSE;
 	}
@@ -138,12 +146,11 @@ static gboolean ssl_connected( gpointer data, gint source, b_input_condition con
 		ssl_init();
 	}
 	
-	meth = TLSv1_client_method();
-	conn->ssl_ctx = SSL_CTX_new( meth );
-	if( conn->ssl_ctx == NULL )
+	
+	if( ssl_ctx == NULL )
 		goto ssl_connected_failure;
 	
-	conn->ssl = SSL_new( conn->ssl_ctx );
+	conn->ssl = SSL_new( ssl_ctx );
 	if( conn->ssl == NULL )
 		goto ssl_connected_failure;
 	
@@ -151,23 +158,14 @@ static gboolean ssl_connected( gpointer data, gint source, b_input_condition con
 	sock_make_nonblocking( conn->fd );
 	SSL_set_fd( conn->ssl, conn->fd );
 	
+	if( conn->hostname && !isdigit( conn->hostname[0] ) )
+		SSL_set_tlsext_host_name( conn->ssl, conn->hostname );
+	
 	return ssl_handshake( data, source, cond );
 
 ssl_connected_failure:
 	conn->func( conn->data, 0, NULL, cond );
-	
-	if( conn->ssl )
-	{
-		SSL_shutdown( conn->ssl );
-		SSL_free( conn->ssl );
-	}
-	if( conn->ssl_ctx )
-	{
-		SSL_CTX_free( conn->ssl_ctx );
-	}
-	if( source >= 0 ) closesocket( source );
-	g_free( conn );
-	
+	ssl_disconnect( conn );
 	return FALSE;
 
 }	
@@ -183,14 +181,7 @@ static gboolean ssl_handshake( gpointer data, gint source, b_input_condition con
 		if( conn->lasterr != SSL_ERROR_WANT_READ && conn->lasterr != SSL_ERROR_WANT_WRITE )
 		{
 			conn->func( conn->data, 0, NULL, cond );
-			
-			SSL_shutdown( conn->ssl );
-			SSL_free( conn->ssl );
-			SSL_CTX_free( conn->ssl_ctx );
-			
-			if( source >= 0 ) closesocket( source );
-			g_free( conn );
-			
+			ssl_disconnect( conn );
 			return FALSE;
 		}
 		
@@ -260,6 +251,14 @@ int ssl_pending( void *conn )
 	       SSL_pending( ((struct scd*)conn)->ssl ) > 0 : 0;
 }
 
+static void ssl_conn_free( struct scd *conn )
+{
+	SSL_free( conn->ssl );
+	g_free( conn->hostname );
+	g_free( conn );
+	
+}
+
 void ssl_disconnect( void *conn_ )
 {
 	struct scd *conn = conn_;
@@ -272,9 +271,7 @@ void ssl_disconnect( void *conn_ )
 	
 	closesocket( conn->fd );
 	
-	SSL_free( conn->ssl );
-	SSL_CTX_free( conn->ssl_ctx );
-	g_free( conn );
+	ssl_conn_free( conn );
 }
 
 int ssl_getfd( void *conn )