source: trunk/instant_messenger/socket/BKP_20071105/BKP_20071026/BKP_20071019/BKP_20071018/BKP_20071009/BKP_20071008/BKP/BKP/client_tls.c_bkp @ 151

/*#include <stdio.h>
#include <stdlib.h>
#include <string.h>

#include <sys/socket.h>
#include <sys/types.h>

#include <netinet/in.h>
#include <netdb.h>
#include <unistd.h>

#include <openssl/ssl.h>
#include <openssl/err.h>
#include <openssl/crypto.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/ssl.h>
#include <openssl/err.h>
*/
/* define HOME to be dir for key and certificate files... */
//#define HOME "/usr/local/ssl/"
/* Make these what you want for certificate & key files */
//#define CERT_FILE "mycert.pem"
//#define KEY_FILE  "mycert.pem"

/*Cipher list to be used*/
//#define CIPHER_LIST "RC4-MD5"

/*Trusted CAs location*/
//#define CA_FILE CERT_FILE
//#define CA_DIR  NULL

/*Password for the key file*/
//#define KEY_PASSWD ""

//#define IP "im.celepar.parana"

//#define PORT "5222"

#include "server.h"


int main(void)
{
        int jabber_fd       = (int)NULL,
                jabber_port     = (int)NULL,
                jabber_error    = (int)NULL;

        struct sockaddr_in jabber_addr;

        jabber_port = __DEFAULT_JABBER_PORT__;
        jabber_fd = socket(AF_INET, SOCK_STREAM, 0);

        fcntl(jabber_fd, F_SETFL, fcntl(jabber_fd, F_GETFL, 0) | O_NDELAY);

        jabber_addr.sin_family = AF_INET;
        inet_aton(__DEFAULT_JABBER_IP__, &jabber_addr.sin_addr);
        jabber_addr.sin_port = htons(jabber_port);

        jabber_error = connect(jabber_fd, (struct sockaddr *) &(jabber_addr), sizeof(jabber_addr));

        printf("Socket returned error #%d,program terminated\n", jabber_error);

        exit(0);













int socketfd, nHostPort;
   int err;
   char buff[32];
struct sockaddr_in socketaddr;

/*SSL PART*/
SSL_METHOD *meth;
SSL_CTX  *ctx;
SSL  *myssl;
/*SSL PART*/

    if ( (nHostPort = strtol(PORT, 0, 10)) == 0 )
    {
       printf("\n<port>\n\n");
       printf("\ncould not make a socket\n");
       return 0;
    }

   socketfd=socket(AF_INET,SOCK_STREAM,0);

socketaddr.sin_family=AF_INET;
inet_aton("im.celepar.parana", &socketaddr.sin_addr);
socketaddr.sin_port=htons(5222);

/* Connect to the server, TCP/IP layer,*/
   err=connect(socketfd,(struct sockaddr*)&socketaddr,sizeof(socketaddr));
   if(err<0){
      printf("Socket returned error #%d,program terminated\n", err);
      exit(0);
   }
    exit(0);

   /* SSL Part*/
SSL_library_init();
SSL_load_error_strings();

   meth=TLSv1_client_method();
  
   ctx=SSL_CTX_new(meth);
   if (!ctx) {
    printf("Error creating the context.\n");
    exit(0);
}

/*
   if (SSL_CTX_set_cipher_list(ctx,CIPHER_LIST) <= 0) {
printf("Error setting the cipher list.\n");
exit(0);
}
*/
   /*Indicate the certificate file to be used*/
  /* if (SSL_CTX_use_certificate_file(ctx,CERT_FILE, SSL_FILETYPE_PEM) <= 0) {
   printf("Error setting the certificate file.\n");
   exit(0);
}*/



/*Load the password for the Private Key*/
   //SSL_CTX_set_default_passwd_cb_userdata(ctx,KEY_PASSWD);


/*Indicate the key file to be used*/
/*if (SSL_CTX_use_PrivateKey_file(ctx, KEY_FILE, SSL_FILETYPE_PEM) <= 0) {
printf("Error setting the key file.\n");
exit(0);
}*/

/*Make sure the key and certificate file match*/
/*if (!SSL_CTX_check_private_key(ctx)) {
    printf("Private key does not match the certificate public key\n");
    exit(0);
}*/

/* Set the list of trusted CAs based on the file and/or directory provided*/
/*   if(SSL_CTX_load_verify_locations(ctx,CA_FILE,CA_DIR)<1){
            printf("Error setting verify location\n");
            exit(0);
   }*/

/* Set for server verification*/
//   SSL_CTX_set_verify(ctx,SSL_VERIFY_PEER,NULL);

/*Create new ssl object*/
myssl=SSL_new(ctx);

   if(!myssl){
      printf("Error creating SSL structure.\n");
      exit(0);
   }

/*Bind the socket to the SSL structure*/
SSL_set_fd(myssl,socketfd);

/*Connect to the server, SSL layer.*/
err=SSL_connect(myssl);
   /*Check for error in connect.*/
if (err<1) {

      err=SSL_get_error(myssl,err);
      printf("SSL error #%d in accept,program terminated\n",err);

      if(err==5){printf("sockerrno is:\n");}

      close(socketfd);
      SSL_CTX_free(ctx);
      exit(0);
   }

/*Print out connection details*/
   printf("SSL connection on socket %x,Version: %s, Cipher: %s\n",
      socketfd,
   SSL_get_version(myssl),
SSL_get_cipher(myssl));

puts("_________OK_______________");
exit(0);
/*Send message to the server.*/
   err=SSL_write(myssl,"Hello there!!!!",sizeof("Hello there!!!!")+1);
   /*Check for error in write.*/
   if(err<1){
      err=SSL_get_error(myssl,err);
      printf("Error #%d in write,program terminated\n",err);
      /********************************/
      /* If err=6 it means the client */
      /* issued an SSL_shutdown. You  */
      /* must respond with a shutdown */
      /* to complete a graceful       */
      /* shutdown                     */
      /********************************/
      if(err==6){
         SSL_shutdown(myssl);
      }
      SSL_free(myssl);
      close(socketfd);
      SSL_CTX_free(ctx);
      exit(0);
   }

/*Read servers response.*/
   err = SSL_read (myssl, buff, sizeof(buff));
   /*Check for error in read.*/
   if(err<1){
      err=SSL_get_error(myssl,err);
      printf("Error #%d in read,program terminated\n",err);
      /********************************/
      /* If err=6 it means the client */
      /* issued an SSL_shutdown. You  */
      /* must respond with a shutdown */
      /* to complete a graceful       */
      /* shutdown                     */
      /********************************/
      if(err==6){
         SSL_shutdown(myssl);
      }
      SSL_free(myssl);
      close(socketfd);
      SSL_CTX_free(ctx);
      exit(0);
   }
   printf("Server said: %s\n",buff);
   err=SSL_shutdown(myssl);
        buff[0] = '\0';
   SSL_read (myssl, buff, sizeof(buff));
   /*********************************/
   /* If err is equal to 0 you are  */
   /* issuing the shutdown first.   */
   /* If its 1 then you are         */
   /* responding to a previously    */
   /* issued shutdown message       */
   /*********************************/
   if(err==0)
        {
      err=SSL_shutdown(myssl);
                buff[0] = '\0';
           SSL_read (myssl, buff, sizeof(buff));
      if(err<1){
         printf("#1 Error in shutdown\n");
      }else if(err==1){
         printf("Client exited gracefully\n");
      }
   }else if(err<0){
         printf("Error in shutdown\n");

   }else if(err==1){
      printf("Client exited gracefully\n");
   }
   close(socketfd);
SSL_free(myssl);
SSL_CTX_free(ctx);
   exit(0);

}