diff options
Diffstat (limited to 'protocols/ssl_openssl.c')
| -rw-r--r-- | protocols/ssl_openssl.c | 158 | 
1 files changed, 158 insertions, 0 deletions
diff --git a/protocols/ssl_openssl.c b/protocols/ssl_openssl.c new file mode 100644 index 00000000..d2a7e1fe --- /dev/null +++ b/protocols/ssl_openssl.c @@ -0,0 +1,158 @@ +  /********************************************************************\ +  * BitlBee -- An IRC to other IM-networks gateway                     * +  *                                                                    * +  * Copyright 2002-2004 Wilmer van der Gaast and others                * +  \********************************************************************/ + +/* SSL module - GnuTLS version                                          */ + +/* +  This program is free software; you can redistribute it and/or modify +  it under the terms of the GNU General Public License as published by +  the Free Software Foundation; either version 2 of the License, or +  (at your option) any later version. + +  This program is distributed in the hope that it will be useful, +  but WITHOUT ANY WARRANTY; without even the implied warranty of +  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the +  GNU General Public License for more details. + +  You should have received a copy of the GNU General Public License with +  the Debian GNU/Linux distribution in /usr/share/common-licenses/GPL; +  if not, write to the Free Software Foundation, Inc., 59 Temple Place, +  Suite 330, Boston, MA  02111-1307  USA +*/ + +#include <openssl/crypto.h> +#include <openssl/rand.h> +#include <openssl/x509.h> +#include <openssl/pem.h> +#include <openssl/ssl.h> +#include <openssl/err.h> + +#include "proxy.h" +#include "ssl_client.h" +#include "sock.h" + +static gboolean initialized = FALSE; + +struct scd +{ +	SslInputFunction func; +	gpointer data; +	int fd; +	gboolean established; +	 +	SSL *ssl; +	SSL_CTX *ssl_ctx; +}; + +static void ssl_connected( gpointer data, gint source, GaimInputCondition cond ); + + + +void *ssl_connect( char *host, int port, SslInputFunction func, gpointer data ) +{ +	struct scd *conn = g_new0( struct scd, 1 ); +	SSL_METHOD *meth; +	 +	conn->fd = proxy_connect( host, port, ssl_connected, conn ); +	conn->func = func; +	conn->data = data; +	 +	if( conn->fd < 0 ) +	{ +		g_free( conn ); +		return( NULL ); +	} +	 +	if( !initialized ) +	{ +		initialized = TRUE; +		SSLeay_add_ssl_algorithms(); +	} +	 +	meth = TLSv1_client_method(); +	conn->ssl_ctx = SSL_CTX_new( meth ); +	if( conn->ssl_ctx == NULL ) +	{ +		conn->fd = -1; +		return( NULL ); +	} +	 +	conn->ssl = SSL_new( conn->ssl_ctx ); +	if( conn->ssl == NULL ) +	{ +		conn->fd = -1; +		return( NULL ); +	} +	 +	return( conn ); +} + +static void ssl_connected( gpointer data, gint source, GaimInputCondition cond ) +{ +	struct scd *conn = data; +	 +	if( source == -1 ) +		goto ssl_connected_failure; +	 +	SSL_set_fd( conn->ssl, conn->fd ); +	 +	if( SSL_connect( conn->ssl ) < 0 ) +		goto ssl_connected_failure; +	 +	conn->established = TRUE; +	conn->func( conn->data, conn, cond ); +	return; +	 +ssl_connected_failure: +	conn->func( conn->data, NULL, cond ); +	 +	if( conn->ssl ) +	{ +		SSL_shutdown( conn->ssl ); +		SSL_free( conn->ssl ); +	} +	if( conn->ssl_ctx ) +	{ +		SSL_CTX_free( conn->ssl_ctx ); +	} +	if( source >= 0 ) closesocket( source ); +	g_free( conn ); +} + +int ssl_read( void *conn, char *buf, int len ) +{ +	if( !((struct scd*)conn)->established ) +		return( 0 ); +	 +	return( SSL_read( ((struct scd*)conn)->ssl, buf, len ) ); +} + +int ssl_write( void *conn, const char *buf, int len ) +{ +	if( !((struct scd*)conn)->established ) +		return( 0 ); +	 +	return( SSL_write( ((struct scd*)conn)->ssl, buf, len ) ); +} + +void ssl_disconnect( void *conn_ ) +{ +	struct scd *conn = conn_; +	 +	if( conn->established ) +		SSL_shutdown( conn->ssl ); +	 +	closesocket( conn->fd ); +	 +	SSL_free( conn->ssl ); +	SSL_CTX_free( conn->ssl_ctx ); +	g_free( conn ); +} + +int ssl_getfd( void *conn ) +{ +	return( ((struct scd*)conn)->fd ); +}  | 
