/* client-tls.c * * Copyright (C) 2006-2023 wolfSSL Inc. * * This file is part of wolfSSL. (formerly known as CyaSSL) * * wolfSSL is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * wolfSSL is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA */ /* the usual suspects */ #include #include #include /* socket includes */ #include #include #include #include /* wolfSSL */ #include #include #include #define DEFAULT_PORT 11111 #define ERR_MSG_LEN 80 #define CERT_FILE "../certs/ca-cert.pem" static void ShowCiphers(void) { static char ciphers[WOLFSSL_CIPHER_LIST_MAX_SIZE]; int ret = wolfSSL_get_ciphers(ciphers, (int)sizeof(ciphers)); if (ret == WOLFSSL_SUCCESS) { printf("%s\n", ciphers); } } int main(int argc, char** argv) { int sockfd; struct sockaddr_in servAddr; char buff[256]; size_t len; int ret; int err; char buffer[ERR_MSG_LEN]; char* cipherList = NULL; /* declare wolfSSL objects */ WOLFSSL_CTX* ctx; WOLFSSL* ssl = NULL; /* Check for proper calling convention */ switch (argc) { case 2: if (XSTRCMP("-e", argv[1]) == 0) { ShowCiphers(); return 0; } break; case 4: if (XSTRCMP("-l", argv[2]) == 0) { cipherList = argv[3]; } break; default: printf("usage:\n"); printf("\t%s \n", argv[0]); printf("\t%s -e\n", argv[0]); printf("\t%s -l \n", argv[0]); return 0; } /* Create a socket that uses an internet IPv4 address, * Sets the socket to be stream based (TCP), * 0 means choose the default protocol. */ if ((sockfd = socket(AF_INET, SOCK_STREAM, 0)) == -1) { ret = -1; err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto end; } /* Initialize the server address struct with zeros */ memset(&servAddr, 0, sizeof(servAddr)); /* Fill in the server address */ servAddr.sin_family = AF_INET; /* using IPv4 */ servAddr.sin_port = htons(DEFAULT_PORT); /* on DEFAULT_PORT */ /* Get the server IPv4 address from the command line call */ if (inet_pton(AF_INET, argv[1], &servAddr.sin_addr) != 1) { ret = -1; err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto end; } /* Connect to the server */ if ((ret = connect(sockfd, (struct sockaddr*) &servAddr, sizeof(servAddr))) == -1) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto end; } /*---------------------------------*/ /* Start of wolfSSL initialization and configuration */ /*---------------------------------*/ /* Initialize wolfSSL */ if ((ret = wolfSSL_Init()) != WOLFSSL_SUCCESS) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto socket_cleanup; } /* Create and initialize WOLFSSL_CTX */ if ((ctx = wolfSSL_CTX_new(wolfTLSv1_2_client_method())) == NULL) { ret = -1; err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto socket_cleanup; } /* Set cipher suite */ if (cipherList != NULL) { if (wolfSSL_CTX_set_cipher_list(ctx, cipherList) != WOLFSSL_SUCCESS) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto ctx_cleanup; } } /* Load client certificates into WOLFSSL_CTX */ if ((ret = wolfSSL_CTX_load_verify_locations(ctx, CERT_FILE, NULL)) != SSL_SUCCESS) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto ctx_cleanup; } /* Create a WOLFSSL object */ if ((ssl = wolfSSL_new(ctx)) == NULL) { ret = -1; err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto ctx_cleanup; } /* Attach wolfSSL to the socket */ if ((ret = wolfSSL_set_fd(ssl, sockfd)) != WOLFSSL_SUCCESS) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto cleanup; } /* Connect to wolfSSL on the server side */ if ((ret = wolfSSL_connect(ssl)) != SSL_SUCCESS) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto cleanup; } /* Show Description of cipher suite */ static int lng_index = 0; showPeerEx(ssl, lng_index); /* Get a message for the server from stdin */ printf("Message for server: "); memset(buff, 0, sizeof(buff)); if (fgets(buff, sizeof(buff), stdin) == NULL) { ret = -1; err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto cleanup; } len = strnlen(buff, sizeof(buff)); /* Send the message to the server */ if ((ret = wolfSSL_write(ssl, buff, len)) != len) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto cleanup; } /* Read the server data into our buff array */ memset(buff, 0, sizeof(buff)); if ((ret = wolfSSL_read(ssl, buff, sizeof(buff)-1)) == -1) { err = wolfSSL_get_error(ssl, ret); printf("error = %d, %s\n", err, wolfSSL_ERR_error_string(err, buffer)); goto cleanup; } /* Print to stdout any data the server sends */ printf("Server: %s\n", buff); /* Bidirectional shutdown */ while (wolfSSL_shutdown(ssl) == SSL_SHUTDOWN_NOT_DONE) { printf("Shutdown not complete\n"); } printf("Shutdown complete\n"); ret = 0; /* Cleanup and return */ cleanup: wolfSSL_free(ssl); /* Free the wolfSSL object */ ctx_cleanup: wolfSSL_CTX_free(ctx); /* Free the wolfSSL context object */ wolfSSL_Cleanup(); /* Cleanup the wolfSSL environment */ socket_cleanup: close(sockfd); /* Close the connection to the server */ end: return ret; /* Return reporting a success */ }