From: Felix Morgner Date: Fri, 30 Jan 2015 12:32:18 +0000 (+0100) Subject: added GNUTLS initialization code X-Git-Url: http://git.code-monkey.de/?p=umurmur.git;a=commitdiff_plain;h=df93d4e9a7be423740ca2f050ebc5b1492405e8d added GNUTLS initialization code --- diff --git a/src/ssli_gnutls.c b/src/ssli_gnutls.c index e69de29..95e96a5 100644 --- a/src/ssli_gnutls.c +++ b/src/ssli_gnutls.c @@ -0,0 +1,47 @@ +#include "ssl.h" +#include "conf.h" + +static gnutls_dh_params_t dhParameters; +static gnutls_certificate_credentials certificate; + +void initiliazeCertificate() + { + char* certificatePath = (char*) getStrConf(CERTIFICATE); + + if(!certificatePath) { + Log_fatal("No certificate file specified."); + } + + char* keyPath = (char*) getStrConf(KEY); + + if(!keyPath) { + Log_fatal("No key file specified"); + } + + gnutls_certificate_allocate_credentials(&certificate); + + int error = gnutls_certificate_set_x509_key_file(certificate, certificatePath, keyPath, GNUTLS_X509_FMT_PEM); + + if( error != GNUTLS_E_SUCCESS ) { + Log_fatal("Could not open key (%s) or certificate (%s).", keyPath, certificatePath); + } + + } + +void SSLi_init() + { + unsigned const bitCount = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, GNUTLS_SEC_PARAM_MEDIUM); + + gnutls_dh_params_init(&dhParameters); + gnutls_dh_params_generate2(dhParameters, bitCount); + +#if GNUTLS_VERSION_NUMBER < 0x030300 + gnutls_global_init(); +#endif + + initializeCertificate(); + + Log_info("Sucessfully initialized GNUTLS version %s", gnutls_check_version(NULL)); + + } +