Initial commit

FossilOrigin-Name: c53d95729c009f8f80a7d63847cef7668ff73f8af0523ab65f7734696f85399c

src/capwap/dtls_openssl_accept.c

@@ -0,0 +1,160 @@
+#include <openssl/err.h>
+
+#include "dtls_openssl.h"
+#include "conn.h"
+
+#include "cw_log.h"
+
+
+
+static BIO_METHOD bio_methods = {
+	BIO_TYPE_DGRAM,
+	"cw packet",
+	dtls_openssl_bio_write,
+	dtls_openssl_bio_read,
+	dtls_openssl_bio_puts,
+	NULL, 			// dgram_gets
+	dtls_openssl_bio_ctrl,
+	dtls_openssl_bio_new,
+	dtls_openssl_bio_free,
+	NULL,
+};
+
+
+
+static unsigned int psk_server_cb(SSL *ssl,const char *identity, unsigned char * psk, unsigned int max_psk_len)
+{
+	BIO * b = SSL_get_rbio(ssl);
+	struct conn * conn = b->ptr;
+
+//	printf("PSK_CB: %s\n",identity);
+//	printf("Conn psk : %s\n",conn->dtls_psk);
+//	printf("Max dtls psk len %i\n",max_psk_len);
+
+
+//	return dtls_openssl_psk_key2bn(conn->dtls_psk, psk, max_psk_len);
+
+
+	int l = conn->dtls_psk_len < max_psk_len ? conn->dtls_psk_len : max_psk_len;
+
+//	printf("PSK return l %d\n",l);
+	memcpy(psk,conn->dtls_psk,l);
+	return l;
+}
+
+
+
+int dtls_openssl_accept(struct conn * conn)
+{
+	if (!conn->dtls_data)
+		conn->dtls_data = dtls_openssl_data_create(conn,DTLSv1_server_method(),&bio_methods);
+
+	struct dtls_openssl_data * d = (struct dtls_openssl_data*)conn->dtls_data;
+	if (!d)
+		return 0;
+
+	SSL_set_psk_server_callback( d->ssl, psk_server_cb);
+
+	int rc; 
+//	do{ 
+	int i;
+	for (i=0; i<5; i++){	
+		rc = SSL_accept(d->ssl);
+		if (rc==0){
+			int e;
+			e = SSL_get_error(d->ssl,rc);
+			switch (e){
+				case SSL_ERROR_SYSCALL:
+					printf("syscall EOF!\n");
+					break;
+			}
+
+
+
+			char errstr[256];
+
+			e = ERR_get_error();
+			while (e!=0){
+				ERR_error_string(e,errstr);
+				cw_log(LOG_ERR,"SSL_accept (e) - %s",e,errstr);
+				e = ERR_get_error();
+			}
+
+
+			continue;
+		}		
+		if (rc == 1)
+		{
+//			printf("Juhu!\n");
+			conn->read = dtls_openssl_read;
+			conn->write = dtls_openssl_write;
+			return 1;
+		}
+
+
+	}
+
+	return 0;
+	       
+//	} while (rc == 0 );
+
+	if (rc != 1){
+		char errstr[256];
+		int e = ERR_get_error();
+		ERR_error_string(e,errstr);
+		cw_log(LOG_ERR,"SSL_accept %s",errstr);
+		return 0;
+	}
+
+
+	return 1;
+
+/*	
+	struct dtls_openssl_data * data = dtls_openssl_data_new();
+	if (!data)
+		return 0;
+
+	SSL_CTX * ctx = dtls_openssl_create_ctx(DTLSv1_server_method());
+	if (!ctx){
+		free (data);
+		return 0;
+	}
+
+
+
+
+
+//	dtls_init(conn,DTLSv1_server_method());
+
+	struct dtls_data * dtls_data = conn->dtls_data;
+	SSL * ssl = dtls_data->ssl;
+
+//i	printf("bio connected\n");
+//	BIO_ctrl(SSL_get_rbio(ssl), BIO_CTRL_DGRAM_SET_CONNECTED, 0, NULLi //&pinfo->client_addr.ss);
+//	printf("bio connected done\n");
+	int rc;
+	printf("doing accepz\n");
+//	do {
+		rc = SSL_accept(ssl);
+		printf("accept again\n");
+//	} while(rc==0);		
+	perror ("ERRP");
+
+	printf("SSL accept rc %i\n",rc);
+	int e = ERR_get_error();
+	printf ("THE E: %i\n",e);
+
+
+	char es[499];
+	ERR_error_string(e,es);
+	printf ("ES: %s\n",es);
+
+
+	rc = SSL_get_error(ssl,rc);
+	printf("ERROR RC: %08X\n",rc);
+
+	exit(9);
+*/
+}
+
+