sconnect.c 3.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129
  1. /*
  2. * Copyright 1998-2017 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. /*-
  10. * A minimal program to do SSL to a passed host and port.
  11. * It is actually using non-blocking IO but in a very simple manner
  12. * sconnect host:port - it does a 'GET / HTTP/1.0'
  13. *
  14. * cc -I../../include sconnect.c -L../.. -lssl -lcrypto
  15. */
  16. #include <stdio.h>
  17. #include <stdlib.h>
  18. #include <unistd.h>
  19. #include <string.h>
  20. #include <errno.h>
  21. #include <openssl/err.h>
  22. #include <openssl/ssl.h>
  23. #define HOSTPORT "localhost:4433"
  24. #define CAFILE "root.pem"
  25. int main(int argc, char *argv[])
  26. {
  27. const char *hostport = HOSTPORT;
  28. const char *CAfile = CAFILE;
  29. char *hostname;
  30. char *cp;
  31. BIO *out = NULL;
  32. char buf[1024 * 10], *p;
  33. SSL_CTX *ssl_ctx = NULL;
  34. SSL *ssl;
  35. BIO *ssl_bio;
  36. int i, len, off, ret = EXIT_FAILURE;
  37. if (argc > 1)
  38. hostport = argv[1];
  39. if (argc > 2)
  40. CAfile = argv[2];
  41. hostname = OPENSSL_strdup(hostport);
  42. if ((cp = strchr(hostname, ':')) != NULL)
  43. *cp = 0;
  44. #ifdef WATT32
  45. dbug_init();
  46. sock_init();
  47. #endif
  48. ssl_ctx = SSL_CTX_new(TLS_client_method());
  49. /* Enable trust chain verification */
  50. SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER, NULL);
  51. SSL_CTX_load_verify_locations(ssl_ctx, CAfile, NULL);
  52. /* Lets make a SSL structure */
  53. ssl = SSL_new(ssl_ctx);
  54. SSL_set_connect_state(ssl);
  55. /* Enable peername verification */
  56. if (SSL_set1_host(ssl, hostname) <= 0)
  57. goto err;
  58. /* Use it inside an SSL BIO */
  59. ssl_bio = BIO_new(BIO_f_ssl());
  60. BIO_set_ssl(ssl_bio, ssl, BIO_CLOSE);
  61. /* Lets use a connect BIO under the SSL BIO */
  62. out = BIO_new(BIO_s_connect());
  63. BIO_set_conn_hostname(out, hostport);
  64. BIO_set_nbio(out, 1);
  65. out = BIO_push(ssl_bio, out);
  66. p = "GET / HTTP/1.0\r\n\r\n";
  67. len = strlen(p);
  68. off = 0;
  69. for (;;) {
  70. i = BIO_write(out, &(p[off]), len);
  71. if (i <= 0) {
  72. if (BIO_should_retry(out)) {
  73. fprintf(stderr, "write DELAY\n");
  74. sleep(1);
  75. continue;
  76. } else {
  77. goto err;
  78. }
  79. }
  80. off += i;
  81. len -= i;
  82. if (len <= 0)
  83. break;
  84. }
  85. for (;;) {
  86. i = BIO_read(out, buf, sizeof(buf));
  87. if (i == 0)
  88. break;
  89. if (i < 0) {
  90. if (BIO_should_retry(out)) {
  91. fprintf(stderr, "read DELAY\n");
  92. sleep(1);
  93. continue;
  94. }
  95. goto err;
  96. }
  97. fwrite(buf, 1, i, stdout);
  98. }
  99. ret = EXIT_SUCCESS;
  100. goto done;
  101. err:
  102. if (ERR_peek_error() == 0) { /* system call error */
  103. fprintf(stderr, "errno=%d ", errno);
  104. perror("error");
  105. } else {
  106. ERR_print_errors_fp(stderr);
  107. }
  108. done:
  109. BIO_free_all(out);
  110. SSL_CTX_free(ssl_ctx);
  111. return ret;
  112. }