public void Connect(string address, string identity, byte[] psk)
{
IntPtr tls, web, ssl;
OpenSSL.OpenSSLCheck((tls = OpenSSL.TLSv1_2_method()) != IntPtr.Zero, "TLS_method");
OpenSSL.OpenSSLCheck((ctx = OpenSSL.SSL_CTX_new(tls)) != IntPtr.Zero, "SSL_CTX_new");
OpenSSL.OpenSSLCheck((web = OpenSSL.BIO_new_ssl_connect(ctx)) != IntPtr.Zero, "BIO_new_ssl_connect");
OpenSSL.OpenSSLCheck(OpenSSL.BIO_set_conn_hostname(web, address) == 1, "BIO_set_conn_hostname");
OpenSSL.BIO_get_ssl(web, out ssl);
OpenSSL.OpenSSLCheck(ssl != IntPtr.Zero, "BIO_get_ssl");
OpenSSL.SSL_set_psk_client_callback(ssl, (ssl_, hint, identityOut, max_identity_len, pskOut, max_psk_len) =>
{
byte[] identityBuf = Encoding.ASCII.GetBytes(identity);
Marshal.Copy(identityBuf, 0, identityOut, (int)Math.Min(identityBuf.Length, max_identity_len));
Marshal.Copy(psk, 0, pskOut, (int)Math.Min(psk.Length, max_psk_len));
return((uint)psk.Length);
});
OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(web) == 1, "BIO_do_handshake");
base.Connect(web);
}
public override void Write(byte[] buffer, int offset, int count)
{
IntPtr buf = Marshal.AllocHGlobal(count);
Marshal.Copy(buffer, offset, buf, count);
int writeCount;
do
{
writeCount = OpenSSL.BIO_write(bio, buf, count);
} while (writeCount <= 0 && OpenSSL.BIO_should_retry(bio));
OpenSSL.OpenSSLCheck(writeCount == count, "BIO_write");
Marshal.FreeHGlobal(buf);
}
public override int Read(byte[] buffer, int offset, int count)
{
IntPtr buf = Marshal.AllocHGlobal(count);
int readCount;
do
{
readCount = OpenSSL.BIO_read(bio, buf, count);
} while (readCount <= 0 && OpenSSL.BIO_should_retry(bio));
OpenSSL.OpenSSLCheck(readCount > 0, "BIO_write");
Marshal.Copy(buf, buffer, offset, readCount);
Marshal.FreeHGlobal(buf);
return(readCount);
}
public void Listen(string port, string identityHint, byte[] psk)
{
this.identityHint = identityHint;
this.psk = psk;
IntPtr tls;
OpenSSL.OpenSSLCheck((tls = OpenSSL.TLSv1_2_server_method()) != IntPtr.Zero, "TLS_server_method");
OpenSSL.OpenSSLCheck((ctx = OpenSSL.SSL_CTX_new(tls)) != IntPtr.Zero, "SSL_CTX_new");
IntPtr ssl_bio;
OpenSSL.OpenSSLCheck((ssl_bio = OpenSSL.BIO_new_ssl(ctx, 0)) != IntPtr.Zero, "BIO_new_ssl");
OpenSSL.OpenSSLCheck((in_bio = OpenSSL.BIO_new_accept(port)) != IntPtr.Zero, "BIO_new_accept");
OpenSSL.BIO_set_accept_bios(in_bio, ssl_bio);
OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(in_bio) == 1, "BIO_do_handshake"); // first call sets up the accept socket, subsequent get the connections
}
public TlsPskConnection Accept()
{
OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(in_bio) == 1, "BIO_do_handshake");
IntPtr conn = OpenSSL.BIO_pop(in_bio);
IntPtr ssl;
OpenSSL.BIO_get_ssl(conn, out ssl);
OpenSSL.OpenSSLCheck(ssl != IntPtr.Zero, "BIO_get_ssl");
OpenSSL.SSL_use_psk_identity_hint(ssl, identityHint);
OpenSSL.SSL_set_psk_server_callback(ssl, (ssl_, identity, pskOut, max_psk_len) =>
{
Marshal.Copy(psk, 0, pskOut, (int)Math.Min(psk.Length, max_psk_len));
return((uint)psk.Length);
});
OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(conn) == 1, "BIO_do_handshake");
return(new TlsPskConnection(conn));
}
public override void Flush()
{
OpenSSL.OpenSSLCheck(OpenSSL.BIO_flush(bio) == 1, "BIO_flush");
}
