X-Git-Url: http://git.code-monkey.de/?a=blobdiff_plain;f=src%2Fssli_gnutls.c;h=bfadca71404613fb34204844be5b5faa8ee40f1a;hb=557fb1412d6fe0e0525b5ae0fee1337821bfe658;hp=e69de29bb2d1d6434b8b29ae775ad8c2e48c5391;hpb=f6d844d1999080359046790022dc820cb247cc23;p=umurmur.git

diff --git a/src/ssli_gnutls.c b/src/ssli_gnutls.c
index e69de29..bfadca7 100644
--- a/src/ssli_gnutls.c
+++ b/src/ssli_gnutls.c
@@ -0,0 +1,52 @@
+#include "ssl.h"
+#include "conf.h"
+
+static gnutls_dh_params_t dhParameters;
+static gnutls_certificate_credentials certificate;
+
+void initiliazeCertificate()
+  {
+  char* certificatePath = (char*) getStrConf(CERTIFICATE);
+
+  if(!certificatePath) {
+    Log_fatal("No certificate file specified.");
+  }
+
+  char* keyPath = (char*) getStrConf(KEY);
+
+  if(!keyPath) {
+    Log_fatal("No key file specified");
+  }
+
+  gnutls_certificate_allocate_credentials(&certificate);
+
+  int error = gnutls_certificate_set_x509_key_file(certificate, certificatePath, keyPath, GNUTLS_X509_FMT_PEM);
+
+  if( error != GNUTLS_E_SUCCESS ) {
+    Log_fatal("Could not open key (%s) or certificate (%s).", keyPath, certificatePath);
+  }
+
+  }
+
+void SSLi_init()
+  {
+  unsigned const bitCount = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, GNUTLS_SEC_PARAM_MEDIUM);
+
+  gnutls_dh_params_init(&dhParameters);
+  gnutls_dh_params_generate2(dhParameters, bitCount);
+
+#if GNUTLS_VERSION_NUMBER < 0x030300
+  gnutls_global_init();
+#endif
+
+  initializeCertificate();
+
+  Log_info("Sucessfully initialized GNUTLS version %s", gnutls_check_version(NULL));
+
+  }
+
+void SSLi_deinit()
+  {
+  gnutls_certificate_free_credentials(certificate);
+  gnutls_global_deinit();
+  }