source: protocols/ssl_openssl.c @ bb556db

  /********************************************************************\
  * BitlBee -- An IRC to other IM-networks gateway                     *
  *                                                                    *
  * Copyright 2002-2004 Wilmer van der Gaast and others                *
  \********************************************************************/

/* SSL module - GnuTLS version                                          */

/*
  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
  the Free Software Foundation; either version 2 of the License, or
  (at your option) any later version.

  This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License with
  the Debian GNU/Linux distribution in /usr/share/common-licenses/GPL;
  if not, write to the Free Software Foundation, Inc., 59 Temple Place,
  Suite 330, Boston, MA  02111-1307  USA
*/

#include <openssl/crypto.h>
#include <openssl/rand.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/ssl.h>
#include <openssl/err.h>

#include "proxy.h"
#include "ssl_client.h"
#include "sock.h"

static gboolean initialized = FALSE;

struct scd
{
        SslInputFunction func;
        gpointer data;
        int fd;
        gboolean established;
        
        SSL *ssl;
        SSL_CTX *ssl_ctx;
};

static void ssl_connected( gpointer data, gint source, GaimInputCondition cond );



void *ssl_connect( char *host, int port, SslInputFunction func, gpointer data )
{
        struct scd *conn = g_new0( struct scd, 1 );
        SSL_METHOD *meth;
        
        conn->fd = proxy_connect( host, port, ssl_connected, conn );
        conn->func = func;
        conn->data = data;
        
        if( conn->fd < 0 )
        {
                g_free( conn );
                return( NULL );
        }
        
        if( !initialized )
        {
                initialized = TRUE;
                SSLeay_add_ssl_algorithms();
        }
        
        meth = TLSv1_client_method();
        conn->ssl_ctx = SSL_CTX_new( meth );
        if( conn->ssl_ctx == NULL )
        {
                conn->fd = -1;
                return( NULL );
        }
        
        conn->ssl = SSL_new( conn->ssl_ctx );
        if( conn->ssl == NULL )
        {
                conn->fd = -1;
                return( NULL );
        }
        
        return( conn );
}

static void ssl_connected( gpointer data, gint source, GaimInputCondition cond )
{
        struct scd *conn = data;
        
        if( source == -1 )
                goto ssl_connected_failure;
        
        SSL_set_fd( conn->ssl, conn->fd );
        
        if( SSL_connect( conn->ssl ) < 0 )
                goto ssl_connected_failure;
        
        conn->established = TRUE;
        conn->func( conn->data, conn, cond );
        return;
        
ssl_connected_failure:
        conn->func( conn->data, NULL, cond );
        
        if( conn->ssl )
        {
                SSL_shutdown( conn->ssl );
                SSL_free( conn->ssl );
        }
        if( conn->ssl_ctx )
        {
                SSL_CTX_free( conn->ssl_ctx );
        }
        if( source >= 0 ) closesocket( source );
        g_free( conn );
}

int ssl_read( void *conn, char *buf, int len )
{
        if( !((struct scd*)conn)->established )
                return( 0 );
        
        return( SSL_read( ((struct scd*)conn)->ssl, buf, len ) );
}

int ssl_write( void *conn, const char *buf, int len )
{
        if( !((struct scd*)conn)->established )
                return( 0 );
        
        return( SSL_write( ((struct scd*)conn)->ssl, buf, len ) );
}

void ssl_disconnect( void *conn_ )
{
        struct scd *conn = conn_;
        
        if( conn->established )
                SSL_shutdown( conn->ssl );
        
        closesocket( conn->fd );
        
        SSL_free( conn->ssl );
        SSL_CTX_free( conn->ssl_ctx );
        g_free( conn );
}

int ssl_getfd( void *conn )
{
        return( ((struct scd*)conn)->fd );
}