2 * Copyright (C) 2004, 2005, 2008, 2009, 2010 Free Software Foundation,
5 * Author: Simon Josefsson
7 * This file is part of GnuTLS.
9 * GnuTLS is free software; you can redistribute it and/or modify it
10 * under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 3 of the License, or
12 * (at your option) any later version.
14 * GnuTLS is distributed in the hope that it will be useful, but
15 * WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with GnuTLS; if not, write to the Free Software Foundation,
21 * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
24 /* Parts copied from GnuTLS example programs. */
33 #include <sys/types.h>
34 #include <sys/socket.h>
37 #include <netinet/in.h>
38 #include <arpa/inet.h>
41 #include <gnutls/gnutls.h>
47 /* A very basic TLS client, with PSK authentication.
51 #define MSG "Hello TLS"
54 tls_log_func (int level, const char *str)
56 fprintf (stderr, "|<%d>| %s", level, str);
63 gnutls_session_t session;
64 char buffer[MAX_BUF + 1];
65 gnutls_psk_client_credentials_t pskcred;
66 const gnutls_datum_t key = { (char *) "DEADBEEF", 8 };
68 gnutls_global_init ();
70 gnutls_global_set_log_function (tls_log_func);
72 gnutls_global_set_log_level (5);
74 gnutls_psk_allocate_client_credentials (&pskcred);
75 gnutls_psk_set_client_credentials (pskcred, "test", &key,
78 /* Initialize TLS session
80 gnutls_init (&session, GNUTLS_CLIENT);
82 /* Use default priorities */
83 gnutls_priority_set_direct (session, "NORMAL:+DHE-PSK", NULL);
85 /* put the anonymous credentials to the current session
87 gnutls_credentials_set (session, GNUTLS_CRD_PSK, pskcred);
89 /* connect to the peer
93 gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) sd);
95 /* Perform the TLS handshake
97 ret = gnutls_handshake (session);
101 fail ("client: Handshake failed\n");
108 success ("client: Handshake was completed\n");
111 gnutls_record_send (session, MSG, strlen (MSG));
113 ret = gnutls_record_recv (session, buffer, MAX_BUF);
117 success ("client: Peer has closed the TLS connection\n");
122 fail ("client: Error: %s\n", gnutls_strerror (ret));
128 printf ("- Received %d bytes: ", ret);
129 for (ii = 0; ii < ret; ii++)
130 fputc (buffer[ii], stdout);
131 fputs ("\n", stdout);
134 gnutls_bye (session, GNUTLS_SHUT_RDWR);
140 gnutls_deinit (session);
142 gnutls_psk_free_client_credentials (pskcred);
144 gnutls_global_deinit ();
147 /* This is a sample TLS 1.0 echo server, for PSK authentication.
150 #define SA struct sockaddr
152 #define PORT 5556 /* listen to 5556 port */
154 /* These are global */
155 gnutls_psk_server_credentials_t server_pskcred;
157 static gnutls_session_t
158 initialize_tls_session (void)
160 gnutls_session_t session;
162 gnutls_init (&session, GNUTLS_SERVER);
164 /* avoid calling all the priority functions, since the defaults
167 gnutls_priority_set_direct(session, "NORMAL:+DHE-PSK", NULL);
169 gnutls_credentials_set (session, GNUTLS_CRD_PSK, server_pskcred);
174 static gnutls_dh_params_t dh_params;
177 generate_dh_params (void)
179 const gnutls_datum_t p3 = { (char *) pkcs3, strlen (pkcs3) };
180 /* Generate Diffie-Hellman parameters - for use with DHE
181 * kx algorithms. These should be discarded and regenerated
182 * once a day, once a week or once a month. Depending on the
183 * security requirements.
185 gnutls_dh_params_init (&dh_params);
186 return gnutls_dh_params_import_pkcs3 (dh_params, &p3, GNUTLS_X509_FMT_PEM);
190 pskfunc (gnutls_session_t session, const char *username, gnutls_datum_t * key)
193 printf ("psk callback to get %s's password\n", username);
194 key->data = gnutls_malloc (4);
203 int err, listen_sd, i;
205 struct sockaddr_in sa_serv;
206 struct sockaddr_in sa_cli;
209 gnutls_session_t session;
210 char buffer[MAX_BUF + 1];
217 success ("Launched, generating DH parameters...\n");
221 listen_sd = socket (AF_INET, SOCK_STREAM, 0);
225 fail ("server: socket failed\n");
229 memset (&sa_serv, '\0', sizeof (sa_serv));
230 sa_serv.sin_family = AF_INET;
231 sa_serv.sin_addr.s_addr = INADDR_ANY;
232 sa_serv.sin_port = htons (PORT); /* Server Port number */
234 setsockopt (listen_sd, SOL_SOCKET, SO_REUSEADDR, (void *) &optval,
237 err = bind (listen_sd, (SA *) & sa_serv, sizeof (sa_serv));
241 fail ("server: bind failed\n");
245 err = listen (listen_sd, 1024);
249 fail ("server: listen failed\n");
254 success ("server: ready. Listening to port '%d'.\n", PORT);
260 /* this must be called once in the program
262 gnutls_global_init ();
264 gnutls_global_set_log_function (tls_log_func);
266 gnutls_global_set_log_level (4711);
268 generate_dh_params ();
270 gnutls_psk_allocate_server_credentials (&server_pskcred);
271 gnutls_psk_set_server_credentials_function (server_pskcred, pskfunc);
272 gnutls_psk_set_server_dh_params (server_pskcred, dh_params);
274 client_len = sizeof (sa_cli);
276 session = initialize_tls_session ();
278 sd = accept (listen_sd, (SA *) & sa_cli, &client_len);
281 success ("server: connection from %s, port %d\n",
282 inet_ntop (AF_INET, &sa_cli.sin_addr, topbuf,
283 sizeof (topbuf)), ntohs (sa_cli.sin_port));
285 gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) sd);
286 ret = gnutls_handshake (session);
290 gnutls_deinit (session);
291 fail ("server: Handshake has failed (%s)\n\n", gnutls_strerror (ret));
295 success ("server: Handshake was completed\n");
297 /* see the Getting peer's information example */
298 /* print_info(session); */
303 memset (buffer, 0, MAX_BUF + 1);
304 ret = gnutls_record_recv (session, buffer, MAX_BUF);
309 success ("server: Peer has closed the GnuTLS connection\n");
314 fail ("server: Received corrupted data(%d). Closing...\n", ret);
319 /* echo data back to the client
321 gnutls_record_send (session, buffer, strlen (buffer));
324 /* do not wait for the peer to close the connection.
326 gnutls_bye (session, GNUTLS_SHUT_WR);
329 gnutls_deinit (session);
333 gnutls_psk_free_server_credentials (server_pskcred);
335 gnutls_dh_params_deinit (dh_params);
337 gnutls_global_deinit ();
340 success ("server: finished\n");