| 
									
										
										
										
											2016-05-18 21:16:36 +08:00
										 |  |  | /*
 | 
					
						
							| 
									
										
										
										
											2017-07-12 12:18:00 +08:00
										 |  |  |  * Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved. | 
					
						
							| 
									
										
										
										
											2016-05-18 21:16:36 +08:00
										 |  |  |  * | 
					
						
							| 
									
										
										
										
											2018-12-06 21:08:15 +08:00
										 |  |  |  * Licensed under the Apache License 2.0 (the "License").  You may not use | 
					
						
							| 
									
										
										
										
											2016-05-18 21:16:36 +08:00
										 |  |  |  * this file except in compliance with the License.  You can obtain a copy | 
					
						
							|  |  |  |  * in the file LICENSE in the source distribution or at | 
					
						
							|  |  |  |  * https://www.openssl.org/source/license.html
 | 
					
						
							|  |  |  |  */ | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  | /*
 | 
					
						
							|  |  |  |  * A minimal TLS server it ses SSL_CTX_config and a configuration file to | 
					
						
							|  |  |  |  * set most server parameters. | 
					
						
							|  |  |  |  */ | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | #include <stdio.h>
 | 
					
						
							|  |  |  | #include <signal.h>
 | 
					
						
							| 
									
										
										
										
											2017-07-12 12:18:00 +08:00
										 |  |  | #include <stdlib.h>
 | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  | #include <openssl/err.h>
 | 
					
						
							|  |  |  | #include <openssl/ssl.h>
 | 
					
						
							|  |  |  | #include <openssl/conf.h>
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | int main(int argc, char *argv[]) | 
					
						
							|  |  |  | { | 
					
						
							|  |  |  |     unsigned char buf[512]; | 
					
						
							|  |  |  |     char *port = "*:4433"; | 
					
						
							|  |  |  |     BIO *in = NULL; | 
					
						
							|  |  |  |     BIO *ssl_bio, *tmp; | 
					
						
							|  |  |  |     SSL_CTX *ctx; | 
					
						
							| 
									
										
										
										
											2017-07-12 12:18:00 +08:00
										 |  |  |     int ret = EXIT_FAILURE, i; | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-09-09 15:32:00 +08:00
										 |  |  |     ctx = SSL_CTX_new(TLS_server_method()); | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  |     if (CONF_modules_load_file("cmod.cnf", "testapp", 0) <= 0) { | 
					
						
							|  |  |  |         fprintf(stderr, "Error processing config file\n"); | 
					
						
							|  |  |  |         goto err; | 
					
						
							|  |  |  |     } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |     if (SSL_CTX_config(ctx, "server") == 0) { | 
					
						
							|  |  |  |         fprintf(stderr, "Error configuring server.\n"); | 
					
						
							|  |  |  |         goto err; | 
					
						
							|  |  |  |     } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |     /* Setup server side SSL bio */ | 
					
						
							|  |  |  |     ssl_bio = BIO_new_ssl(ctx, 0); | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |     if ((in = BIO_new_accept(port)) == NULL) | 
					
						
							|  |  |  |         goto err; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |     /*
 | 
					
						
							|  |  |  |      * This means that when a new connection is accepted on 'in', The ssl_bio | 
					
						
							|  |  |  |      * will be 'duplicated' and have the new socket BIO push into it. | 
					
						
							|  |  |  |      * Basically it means the SSL BIO will be automatically setup | 
					
						
							|  |  |  |      */ | 
					
						
							|  |  |  |     BIO_set_accept_bios(in, ssl_bio); | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |  again: | 
					
						
							|  |  |  |     /*
 | 
					
						
							|  |  |  |      * The first call will setup the accept socket, and the second will get a | 
					
						
							|  |  |  |      * socket.  In this loop, the first actual accept will occur in the | 
					
						
							|  |  |  |      * BIO_read() function. | 
					
						
							|  |  |  |      */ | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |     if (BIO_do_accept(in) <= 0) | 
					
						
							|  |  |  |         goto err; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |     for (;;) { | 
					
						
							|  |  |  |         i = BIO_read(in, buf, sizeof(buf)); | 
					
						
							|  |  |  |         if (i == 0) { | 
					
						
							|  |  |  |             /*
 | 
					
						
							|  |  |  |              * If we have finished, remove the underlying BIO stack so the | 
					
						
							|  |  |  |              * next time we call any function for this BIO, it will attempt | 
					
						
							|  |  |  |              * to do an accept | 
					
						
							|  |  |  |              */ | 
					
						
							|  |  |  |             printf("Done\n"); | 
					
						
							|  |  |  |             tmp = BIO_pop(in); | 
					
						
							|  |  |  |             BIO_free_all(tmp); | 
					
						
							|  |  |  |             goto again; | 
					
						
							|  |  |  |         } | 
					
						
							|  |  |  |         if (i < 0) { | 
					
						
							|  |  |  |             if (BIO_should_retry(in)) | 
					
						
							|  |  |  |                 continue; | 
					
						
							|  |  |  |             goto err; | 
					
						
							|  |  |  |         } | 
					
						
							|  |  |  |         fwrite(buf, 1, i, stdout); | 
					
						
							|  |  |  |         fflush(stdout); | 
					
						
							|  |  |  |     } | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-07-12 12:18:00 +08:00
										 |  |  |     ret = EXIT_SUCCESS; | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  |  err: | 
					
						
							| 
									
										
										
										
											2017-07-12 12:18:00 +08:00
										 |  |  |     if (ret != EXIT_SUCCESS) | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  |         ERR_print_errors_fp(stderr); | 
					
						
							|  |  |  |     BIO_free(in); | 
					
						
							| 
									
										
										
										
											2017-07-12 12:18:00 +08:00
										 |  |  |     return ret; | 
					
						
							| 
									
										
										
										
											2015-07-10 01:24:24 +08:00
										 |  |  | } |