planix.org/actube
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Working on implementation.

Browse Source 
FossilOrigin-Name: 57e7198be32db9a240bed881f3dc0760395637693673babb8e52b28189a7f639
This commit is contained in:
7u83@mail.ru 2015-02-07 09:54:32 +00:00
parent 9897bd578f
commit 64fe08312c
1 changed files with 98 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

104
src/capwap/dtls_gnutls_accept.c
View File

@ -16,30 +16,122 @@
*/ */
#include <stdlib.h>
#include <gnutls/gnutls.h> #include <gnutls/gnutls.h>
//#include <gnutls/dtls.h>
#include "dtls_gnutls.h" #include "dtls_gnutls.h"
#include "conn.h" #include "conn.h"
#include "cw_log.h" #include "cw_log.h"
struct gnutls_data{ struct dtls_gnutls_data{
// gnutls_session_t session; gnutls_session_t session;
//gnutls_certificate_credentials_t x509_cred; gnutls_certificate_credentials_t x509_cred;
int x; gnutls_priority_t priority_cache;
}; };
void dtls_gnutls_data_destroy(struct dtls_gnutls_data *d)
{
free(d);
}
struct dtls_gnutls_data * dtls_gnutls_data_create(struct conn * conn)
{
struct dtls_gnutls_data * d = malloc(sizeof(struct dtls_gnutls_data));
if (!d)
return 0;
gnutls_certificate_allocate_credentials(&d->x509_cred);
int rc;
/* Set credentials */
rc = gnutls_certificate_set_x509_key_file(d->x509_cred, conn->dtls_cert_file,
conn->dtls_key_file,
GNUTLS_X509_FMT_PEM);
if (rc<0){
cw_log(LOG_ERR,"DTLS - Can't set cert/key: %s",gnutls_strerror(rc));
dtls_gnutls_data_destroy(d);
return 0;
}
/* Set ciphers */
const char * errpos;
rc = gnutls_priority_init(&d->priority_cache,
conn->dtls_cipher,
&errpos);
if (rc<0){
cw_log(LOG_ERR,"DTLS - Can't init ciphers '%s' at '%s' : %s",conn->dtls_cipher,errpos,gnutls_strerror(rc));
dtls_gnutls_data_destroy(d);
return 0;
}
rc = gnutls_init(&d->session, GNUTLS_SERVER );
if (rc<0){
cw_log(LOG_ERR,"DTLS - Can't init session: %s",gnutls_strerror(rc));
dtls_gnutls_data_destroy(d);
return 0;
}
gnutls_transport_set_ptr(d->session,conn);
rc = gnutls_priority_set(d->session, d->priority_cache);
if (rc<0){
cw_log(LOG_ERR,"DTLS - Can't set priority: %s",gnutls_strerror(rc));
dtls_gnutls_data_destroy(d);
return 0;
}
rc = gnutls_credentials_set(d->session, GNUTLS_CRD_CERTIFICATE,
d->x509_cred);
if (rc<0){
cw_log(LOG_ERR,"DTLS - Can't set credentials: %s",gnutls_strerror(rc));
dtls_gnutls_data_destroy(d);
return 0;
}
gnutls_transport_set_pull_function(d->session,dtls_gnutls_bio_read);
gnutls_transport_set_push_function(d->session,dtls_gnutls_bio_write);
return d;
}
int dtls_gnutls_accept(struct conn * conn) int dtls_gnutls_accept(struct conn * conn)
{ {
struct dtls_gnutls_data *d;
d = dtls_gnutls_data_create(conn);
if (!d)
return 0;
int rc;
do {
rc = gnutls_handshake(d->session);
}while(rc == GNUTLS_E_AGAIN);
cw_log(LOG_ERR,"DTLS - Can't set credentials: %s",gnutls_strerror(rc));
// gnutls_certificate_allocate_credentials(&x509_cred); // gnutls_certificate_allocate_credentials(&x509_cred);
return 0;
return 1; return 1;
} }