mariadb/vio/viotest-ssl.c

/* Copyright (C) 2000 MySQL AB

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 of the License, or
   (at your option) any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA */

#include <my_global.h>
#ifdef HAVE_OPENSSL
#include <my_sys.h>
#include <m_string.h>
#include <m_ctype.h>
#include "mysql.h"
#include "errmsg.h"
#include <my_dir.h>
#ifndef __GNU_LIBRARY__
#define __GNU_LIBRARY__               // Skip warnings in getopt.h
#endif
#include <my_getopt.h>
//#include "my_readline.h"
#include <signal.h>
#include <violite.h>

const char *VER="0.2";


#ifndef DBUG_OFF
const char *default_dbug_option="d:t:O,/tmp/viotest-ssl.trace";
#endif

void
fatal_error(	const char*	r)
{
	perror(r);
	exit(0);
}

void
print_usage()
{
	printf("viossl-test: testing SSL virtual IO. Usage:\n");
	printf("viossl-test server-key server-cert client-key client-cert [CAfile] [CApath]\n");
}

int
main(	int	argc,
	char**	argv)
{
	char*	server_key = 0;
	char*	server_cert = 0;
	char*	client_key = 0;
	char*	client_cert = 0;
	char*	ca_file = 0;
	char*	ca_path = 0;
	int	child_pid,sv[2];
	struct st_VioSSLAcceptorFd* ssl_acceptor=0;
	struct st_VioSSLConnectorFd* ssl_connector=0; 
	Vio* client_vio=0;
	Vio* server_vio=0;
	MY_INIT(argv[0]);
//        DBUG_ENTER("main");
        DBUG_PROCESS(argv[0]);
        DBUG_PUSH(default_dbug_option);



	if (argc<5)
	{
		print_usage();
		return 1;
	}

	server_key = argv[1];
	server_cert = argv[2];
	client_key = argv[3];
	client_cert = argv[4];
	if (argc>5)
		ca_file = argv[5];
	if (argc>6)
		ca_path = argv[6];
	printf("Server key/cert : %s/%s\n", server_key, server_cert);
	printf("Client key/cert : %s/%s\n", client_key, client_cert);
	if (ca_file!=0)
		printf("CAfile          : %s\n", ca_file);
	if (ca_path!=0)
		printf("CApath          : %s\n", ca_path);


	if (socketpair(PF_UNIX, SOCK_STREAM, IPPROTO_IP, sv)==-1)
		fatal_error("socketpair");

        ssl_acceptor = new_VioSSLAcceptorFd(server_key, server_cert, ca_file, ca_path);
	ssl_connector = new_VioSSLConnectorFd(client_key, client_cert, ca_file, ca_path);

	client_vio = (Vio*)my_malloc(sizeof(struct st_vio),MYF(0));
        client_vio->sd = sv[0];
        sslconnect(ssl_connector,client_vio);
	server_vio = (Vio*)my_malloc(sizeof(struct st_vio),MYF(0));
        server_vio->sd = sv[1];
        sslaccept(ssl_acceptor,server_vio);

	printf("Socketpair: %d , %d\n", client_vio->sd, server_vio->sd);

	child_pid = fork();
	if (child_pid==-1) {
		my_free((gptr)ssl_acceptor,MYF(0));
		my_free((gptr)ssl_connector,MYF(0));
		fatal_error("fork");
	}
	if (child_pid==0) {
		//child, therefore, client
		char	xbuf[100];
		int	r = vio_ssl_read(client_vio,xbuf, sizeof(xbuf));
		if (r<=0) {
        		my_free((gptr)ssl_acceptor,MYF(0));
	      		my_free((gptr)ssl_connector,MYF(0));
			fatal_error("client:SSL_read");
		}
//        printf("*** client cipher %s\n",client_vio->cipher_description());
		xbuf[r] = 0;
		printf("client:got %s\n", xbuf);
		my_free((gptr)client_vio,MYF(0));
		my_free((gptr)ssl_acceptor,MYF(0));
		my_free((gptr)ssl_connector,MYF(0));
		sleep(1);
	} else {
		const char*	s = "Huhuhuh";
		int		r = vio_ssl_write(server_vio,(gptr)s, strlen(s));
		if (r<=0) {
  	 		my_free((gptr)ssl_acceptor,MYF(0));
			my_free((gptr)ssl_connector,MYF(0));
			fatal_error("server:SSL_write");
		}
//        printf("*** server cipher %s\n",server_vio->cipher_description());
		my_free((gptr)server_vio,MYF(0));
		my_free((gptr)ssl_acceptor,MYF(0));
		my_free((gptr)ssl_connector,MYF(0));
		sleep(1);
	}
	return 0;
}
#else /* HAVE_OPENSSL */

int main() {
return 0;
}
#endif /* HAVE_OPENSSL */