5 static gnutls_dh_params_t dhParameters;
6 static gnutls_certificate_credentials_t certificate;
8 static const char * ciphers = "SECURE128:-VERS-DTLS-ALL:-VERS-SSL3.0:-VERS-TLS1.0:+COMP_ALL";
9 static gnutls_priority_t cipherCache;
11 void initializeCertificate()
13 char* certificatePath = (char*) getStrConf(CERTIFICATE);
15 if(!certificatePath) {
16 Log_fatal("No certificate file specified.");
19 char* keyPath = (char*) getStrConf(KEY);
22 Log_fatal("No key file specified");
25 gnutls_certificate_allocate_credentials(&certificate);
27 int error = gnutls_certificate_set_x509_key_file(certificate, certificatePath, keyPath, GNUTLS_X509_FMT_PEM);
29 if( error != GNUTLS_E_SUCCESS ) {
30 Log_fatal("Could not open key (%s) or certificate (%s).", keyPath, certificatePath);
37 unsigned const bitCount = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, GNUTLS_SEC_PARAM_MEDIUM);
39 gnutls_dh_params_init(&dhParameters);
40 gnutls_dh_params_generate2(dhParameters, bitCount);
42 #if GNUTLS_VERSION_NUMBER < 0x030300
46 gnutls_priority_init(&cipherCache, ciphers, NULL);
48 initializeCertificate();
50 Log_info("Sucessfully initialized GNUTLS version %s", gnutls_check_version(NULL));
56 gnutls_certificate_free_credentials(certificate);
57 gnutls_priority_deinit(cipherCache);
58 gnutls_global_deinit();
61 SSL_handle_t * SSLi_newconnection( int * fileDescriptor, bool_t * isSSLReady )
63 gnutls_session_t * session; // Maybe we need to calloc here
65 gnutls_init(session, GNUTLS_SERVER);
66 gnutls_priority_set(*session, cipherCache);
67 gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE, certificate);
69 gnutls_certificate_server_set_request(*session, GNUTLS_CERT_REQUIRE);
71 gnutls_transport_set_int(*session, *fileDescriptor);
78 bool_t SSLi_getSHA1Hash(SSL_handle_t *ssl, uint8_t *hash)
84 int SSLi_nonblockaccept( SSL_handle_t *session, bool_t * isSSLReady )
88 gnutls_handshake(*session);
89 } while(error < GNUTLS_E_SUCCESS && !gnutls_error_is_fatal(error));
91 if ( error < GNUTLS_E_SUCCESS ) {
92 Log_fatal("TLS handshake failed with error %i (%s).", error, gnutls_strerror(error));
98 int SSLi_read(SSL_handle_t *session, uint8_t *buffer, int length)
100 return gnutls_record_recv(*session, buffer, length);
103 int SSLi_write(SSL_handle_t *session, uint8_t *buffer, int length)
105 return gnutls_record_send(*session, buffer, length);
108 void SSLi_shutdown(SSL_handle_t *ssl)
112 void SSLi_free(SSL_handle_t *ssl) {}