102 lines
2.8 KiB
C++
102 lines
2.8 KiB
C++
|
/*
|
||
|
|
Copyright (c) 2005-2009 by Jakob Schroeter <js@camaya.net>
|
||
|
|
This file is part of the gloox library. http://camaya.net/gloox
|
||
|
|
|
||
|
|
This software is distributed under a license. The full license
|
||
|
|
agreement can be found in the file LICENSE in this distribution.
|
||
|
|
This software may not be copied, modified, sold or distributed
|
||
|
|
other than expressed in the named license agreement.
|
||
|
|
|
||
|
|
This software is distributed without any warranty.
|
||
|
|
*/
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
#include "tlsgnutlsclientanon.h"
|
||
|
|
|
||
|
|
#ifdef HAVE_GNUTLS
|
||
|
|
|
||
|
|
#include <errno.h>
|
||
|
|
|
||
|
|
namespace gloox
|
||
|
|
{
|
||
|
|
|
||
|
|
GnuTLSClientAnon::GnuTLSClientAnon( TLSHandler* th )
|
||
|
|
: GnuTLSBase( th )
|
||
|
|
{
|
||
|
|
}
|
||
|
|
|
||
|
|
GnuTLSClientAnon::~GnuTLSClientAnon()
|
||
|
|
{
|
||
|
|
gnutls_anon_free_client_credentials( m_anoncred );
|
||
|
|
}
|
||
|
|
|
||
|
|
void GnuTLSClientAnon::cleanup()
|
||
|
|
{
|
||
|
|
GnuTLSBase::cleanup();
|
||
|
|
init();
|
||
|
|
}
|
||
|
|
|
||
|
|
bool GnuTLSClientAnon::init( const std::string&,
|
||
|
|
const std::string&,
|
||
|
|
const StringList& )
|
||
|
|
{
|
||
|
|
const int protocolPriority[] = { GNUTLS_TLS1, 0 };
|
||
|
|
const int kxPriority[] = { GNUTLS_KX_ANON_DH, 0 };
|
||
|
|
const int cipherPriority[] = { GNUTLS_CIPHER_AES_256_CBC, GNUTLS_CIPHER_AES_128_CBC,
|
||
|
|
GNUTLS_CIPHER_3DES_CBC, GNUTLS_CIPHER_ARCFOUR, 0 };
|
||
|
|
const int compPriority[] = { GNUTLS_COMP_ZLIB, GNUTLS_COMP_NULL, 0 };
|
||
|
|
const int macPriority[] = { GNUTLS_MAC_SHA, GNUTLS_MAC_MD5, 0 };
|
||
|
|
|
||
|
|
if( m_initLib && gnutls_global_init() != 0 )
|
||
|
|
return false;
|
||
|
|
|
||
|
|
if( gnutls_anon_allocate_client_credentials( &m_anoncred ) < 0 )
|
||
|
|
return false;
|
||
|
|
|
||
|
|
if( gnutls_init( m_session, GNUTLS_CLIENT ) != 0 )
|
||
|
|
return false;
|
||
|
|
|
||
|
|
gnutls_protocol_set_priority( *m_session, protocolPriority );
|
||
|
|
gnutls_cipher_set_priority( *m_session, cipherPriority );
|
||
|
|
gnutls_compression_set_priority( *m_session, compPriority );
|
||
|
|
gnutls_kx_set_priority( *m_session, kxPriority );
|
||
|
|
gnutls_mac_set_priority( *m_session, macPriority );
|
||
|
|
gnutls_credentials_set( *m_session, GNUTLS_CRD_ANON, m_anoncred );
|
||
|
|
|
||
|
|
gnutls_transport_set_ptr( *m_session, (gnutls_transport_ptr_t)this );
|
||
|
|
gnutls_transport_set_push_function( *m_session, pushFunc );
|
||
|
|
gnutls_transport_set_pull_function( *m_session, pullFunc );
|
||
|
|
|
||
|
|
m_valid = true;
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
void GnuTLSClientAnon::getCertInfo()
|
||
|
|
{
|
||
|
|
m_certInfo.status = CertOk;
|
||
|
|
|
||
|
|
const char* info;
|
||
|
|
info = gnutls_compression_get_name( gnutls_compression_get( *m_session ) );
|
||
|
|
if( info )
|
||
|
|
m_certInfo.compression = info;
|
||
|
|
|
||
|
|
info = gnutls_mac_get_name( gnutls_mac_get( *m_session ) );
|
||
|
|
if( info )
|
||
|
|
m_certInfo.mac = info;
|
||
|
|
|
||
|
|
info = gnutls_cipher_get_name( gnutls_cipher_get( *m_session ) );
|
||
|
|
if( info )
|
||
|
|
m_certInfo.cipher = info;
|
||
|
|
|
||
|
|
info = gnutls_protocol_get_name( gnutls_protocol_get_version( *m_session ) );
|
||
|
|
if( info )
|
||
|
|
m_certInfo.protocol = info;
|
||
|
|
|
||
|
|
m_valid = true;
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
#endif // HAVE_GNUTLS
|