OpenSSL客户端服务器源码实例

#include "SSLServer.h" int main () { int err; int listen_sd; int sd; struct sockaddr_in sa_serv; struct sockaddr_in sa_cli; int client_len; SSL_CTX *ctx; SSL* ssl; X509* client_cert; char* str; char buf[4096]; SSL_METHOD *meth; WSADATA wsadata; if(WSAStartup(MAKEWORD(2,2),&wsadata) != 0){ printf("wsastartup()fail:%d\n",GetLastError()); return -1; } SSL_load_error_strings(); /*为打印调试信息作准备*/ OpenSSL_add_ssl_algorithms(); /*初始化*/ //meth = TLSv1_server_method(); /*采用什么协议(sslv2/sslv3/tlsv1)在此指定*/ #if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3) meth=SSLv23_server_method(); #elif !defined(OPENSSL_NO_SSL3) meth=SSLv3_server_method(); #elif !defined(OPENSSL_NO_SSL2) meth=SSLv2_server_method(); #endif ctx = SSL_CTX_new (meth); CHK_NULL(ctx); // SSL_CTX_set_verify(ctx,SSL_VERIFY_PEER,NULL); /*验证与否*/ // SSL_CTX_load_verify_locations(ctx,cacert,NULL); /*若验证,则放置ca证书*/ if (SSL_CTX_use_certificate_file(ctx, certf, SSL_FILETYPE_PEM) <= 0) { ERR_print_errors_fp(stderr); exit(3); } if (SSL_CTX_use_PrivateKey_file(ctx, keyf, SSL_FILETYPE_PEM) <= 0) { ERR_print_errors_fp(stderr); exit(4); } if (!SSL_CTX_check_private_key(ctx)) { printf("private key does not match the certificate public key\n"); exit(5); } //SSL_CTX_set_cipher_list(ctx,"rc4-md5"); /* 客户端连接时提示 SSL3_GET_CLIENT_HELLO:no shared cipher，所以去掉指定算法，让他们协商 */ /*开始正常的tcp socket过程.................................*/ printf("begin tcp socket...\n"); listen_sd = socket (AF_INET, SOCK_STREAM, 0); CHK_ERR(listen_sd, "socket"); memset (&sa_serv, 0, sizeof(sa_serv)); sa_serv.sin_family = AF_INET; sa_serv.sin_addr.s_addr = INADDR_ANY; sa_serv.sin_port = htons (port); err = bind(listen_sd, (struct sockaddr*) &sa_serv, sizeof (sa_serv)); CHK_ERR(err, "bind"); /*接受tcp链接*/ err = listen (listen_sd, 5); CHK_ERR(err, "listen"); client_len = sizeof(sa_cli); sd = accept (listen_sd, (struct sockaddr*) &sa_cli, &client_len); CHK_ERR(sd, "accept"); closesocket (listen_sd); printf ("connection from %lx, port %x\n", sa_cli.sin_addr.s_addr, sa_cli.sin_port); /*tcp连接已建立,进行服务端的ssl过程. */ printf("begin server side ssl\n"); ssl = SSL_new (ctx); CHK_NULL(ssl); SSL_set_fd (ssl, sd); err = SSL_accept (ssl); printf("ssl_accept finished\n"); CHK_SSL(err); /*打印所有加密算法的信息(可选)*/ printf ("ssl connection using %s\n", SSL_get_cipher (ssl)); /*得到客户端的证书并打印些信息(可选) */ client_cert = SSL_get_peer_certificate (ssl); if ((char *)client_cert != NULL) { printf ("client certificate:\n"); str = X509_NAME_oneline(X509_get_subject_name (client_cert), 0, 0); CHK_NULL(str); printf ("\t subject: %s\n", str); free (str); str = X509_NAME_oneline(X509_get_issuer_name (client_cert), 0, 0); CHK_NULL(str); printf ("\t issuer: %s\n", str); free (str); X509_free (client_cert);//如不再需要,需将证书释放 } else printf ("client does not have certificate.\n"); /* 数据交换开始,用ssl_write,ssl_read代替write,read */ err = SSL_read (ssl, buf, sizeof(buf) - 1); CHK_SSL(err); buf[err] = '\0'; printf ("got %d chars:%s\n", err, buf); err = SSL_write (ssl, "i hear you.", strlen("i hear you.")); CHK_SSL(err); /* 收尾工作*/ shutdown (sd,2); SSL_free (ssl); SSL_CTX_free (ctx); return 0; } /***************************************************************** * eof - serv.cpp *****************************************************************/