tlsgnutlsclientanon.cpp
/*
Copyright (c) 2005-2023 by Jakob Schröter <js@camaya.net>
This file is part of the gloox library. http://camaya.net/gloox
This software is distributed under a license. The full license
agreement can be found in the file LICENSE in this distribution.
This software may not be copied, modified, sold or distributed
other than expressed in the named license agreement.
This software is distributed without any warranty.
*/
#include "tlsgnutlsclientanon.h"
#ifdef HAVE_GNUTLS
#include <errno.h>
namespace gloox
{
GnuTLSClientAnon::GnuTLSClientAnon( TLSHandler* th )
: GnuTLSBase( th )
{
}
GnuTLSClientAnon::~GnuTLSClientAnon()
{
gnutls_anon_free_client_credentials( m_anoncred );
}
void GnuTLSClientAnon::cleanup()
{
GnuTLSBase::cleanup();
init();
}
bool GnuTLSClientAnon::init( const std::string&,
const std::string&,
const StringList& )
{
if( m_initLib && gnutls_global_init() != 0 )
return false;
if( gnutls_anon_allocate_client_credentials( &m_anoncred ) < 0 )
return false;
if( gnutls_init( m_session, GNUTLS_CLIENT ) != 0 )
return false;
#if GNUTLS_VERSION_NUMBER >= 0x020600
int ret = gnutls_priority_set_direct( *m_session, "SECURE128:+PFS:+COMP-ALL:+VERS-TLS-ALL:-VERS-SSL3.0:+SIGN-ALL:+CURVE-ALL:+ANON-ECDH:+ANON-DH", 0 );
if( ret != GNUTLS_E_SUCCESS )
return false;
#else
const int protocolPriority[] = {
#ifdef GNUTLS_TLS1_2
GNUTLS_TLS1_2,
#endif
GNUTLS_TLS1_1, GNUTLS_TLS1, 0 };
const int protocolPriority[] = { GNUTLS_TLS1, 0 };
const int kxPriority[] = { GNUTLS_KX_ANON_DH, 0 };
const int cipherPriority[] = { GNUTLS_CIPHER_AES_256_CBC, GNUTLS_CIPHER_AES_128_CBC,
GNUTLS_CIPHER_3DES_CBC, GNUTLS_CIPHER_ARCFOUR, 0 };
const int compPriority[] = { GNUTLS_COMP_ZLIB, GNUTLS_COMP_NULL, 0 };
const int macPriority[] = { GNUTLS_MAC_SHA, GNUTLS_MAC_MD5, 0 };
gnutls_protocol_set_priority( *m_session, protocolPriority );
gnutls_cipher_set_priority( *m_session, cipherPriority );
gnutls_compression_set_priority( *m_session, compPriority );
gnutls_kx_set_priority( *m_session, kxPriority );
gnutls_mac_set_priority( *m_session, macPriority );
#endif
gnutls_credentials_set( *m_session, GNUTLS_CRD_ANON, m_anoncred );
gnutls_transport_set_ptr( *m_session, static_cast<gnutls_transport_ptr_t>( this ) );
gnutls_transport_set_push_function( *m_session, pushFunc );
gnutls_transport_set_pull_function( *m_session, pullFunc );
m_valid = true;
return true;
}
void GnuTLSClientAnon::getCertInfo()
{
m_certInfo.status = CertOk;
getCommonCertInfo();
m_valid = true;
}
}
#endif // HAVE_GNUTLS
gloox::GnuTLSBase::cleanup
virtual void cleanup()
Definition tlsgnutlsbase.cpp:98
gloox::GnuTLSBase::GnuTLSBase
GnuTLSBase(TLSHandler *th, const std::string &server=EmptyString)
Definition tlsgnutlsbase.cpp:27
gloox::GnuTLSClientAnon::cleanup
virtual void cleanup()
Definition tlsgnutlsclientanon.cpp:34
gloox::GnuTLSClientAnon::~GnuTLSClientAnon
virtual ~GnuTLSClientAnon()
Definition tlsgnutlsclientanon.cpp:29
gloox::GnuTLSClientAnon::init
virtual bool init(const std::string &clientKey=EmptyString, const std::string &clientCerts=EmptyString, const StringList &cacerts=StringList())
Definition tlsgnutlsclientanon.cpp:40
gloox::GnuTLSClientAnon::GnuTLSClientAnon
GnuTLSClientAnon(TLSHandler *th)
Definition tlsgnutlsclientanon.cpp:24
gloox::TLSHandler
An interface that allows for interacting with TLS implementations derived from TLSBase.
Definition tlshandler.h:35
gloox
The namespace for the gloox library.
Definition adhoc.cpp:28
gloox::StringList
std::list< std::string > StringList
Definition gloox.h:1251
gloox::CertOk
@ CertOk
Definition gloox.h:975
gloox::CertInfo::status
int status
Definition gloox.h:991