X-Git-Url: http://git.code-monkey.de/?a=blobdiff_plain;f=src%2Fssli_gnutls.c;h=1d2a153d3aadefbdb41bd8ca56c1a2dcf2e66c94;hb=2ce6ed74386fed43113e71193a22bb9d0b9ebbd5;hp=938678697fadf8b9ee753f0a2101b2c0a23ee625;hpb=cb1c5a3fb9bd38f05601b93d1ddc35b828a270de;p=umurmur.git diff --git a/src/ssli_gnutls.c b/src/ssli_gnutls.c index 9386786..1d2a153 100644 --- a/src/ssli_gnutls.c +++ b/src/ssli_gnutls.c @@ -54,5 +54,38 @@ void SSLi_init() void SSLi_deinit() { gnutls_certificate_free_credentials(certificate); + gnutls_priority_deinit(cipherCache); gnutls_global_deinit(); } + +SSL_handle_t * SSLi_newconnection( int * fileDescriptor, bool_t * isSSLReady ) + { + gnutls_session_t * session; // Maybe we need to calloc here + + gnutls_init(session, GNUTLS_SERVER); + gnutls_priority_set(*session, cipherCache); + gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE, certificate); + + gnutls_certificate_server_set_request(*session, GNUTLS_CERT_REQUIRE); + + gnutls_transport_set_int(*session, *fileDescriptor); + + int error; + do { + gnutls_handshake(*session); + } while(error < GNUTLS_E_SUCCESS && !gnutls_error_is_fatal(error)); + + if ( error < GNUTLS_E_SUCCESS ) { + Log_fatal("TLS handshake failed with error %i (%s).", error, gnutls_strerror(error)); + } + + *isSSLReady = true; + + return session; + } + +bool_t SSLi_getSHA1Hash(SSL_handle_t *ssl, uint8_t *hash) + { + *hash = 0; + return true; + }