public void Connect(string address, string identity, byte[] psk) { IntPtr tls, web, ssl; OpenSSL.OpenSSLCheck((tls = OpenSSL.TLSv1_2_method()) != IntPtr.Zero, "TLS_method"); OpenSSL.OpenSSLCheck((ctx = OpenSSL.SSL_CTX_new(tls)) != IntPtr.Zero, "SSL_CTX_new"); OpenSSL.OpenSSLCheck((web = OpenSSL.BIO_new_ssl_connect(ctx)) != IntPtr.Zero, "BIO_new_ssl_connect"); OpenSSL.OpenSSLCheck(OpenSSL.BIO_set_conn_hostname(web, address) == 1, "BIO_set_conn_hostname"); OpenSSL.BIO_get_ssl(web, out ssl); OpenSSL.OpenSSLCheck(ssl != IntPtr.Zero, "BIO_get_ssl"); OpenSSL.SSL_set_psk_client_callback(ssl, (ssl_, hint, identityOut, max_identity_len, pskOut, max_psk_len) => { byte[] identityBuf = Encoding.ASCII.GetBytes(identity); Marshal.Copy(identityBuf, 0, identityOut, (int)Math.Min(identityBuf.Length, max_identity_len)); Marshal.Copy(psk, 0, pskOut, (int)Math.Min(psk.Length, max_psk_len)); return((uint)psk.Length); }); OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(web) == 1, "BIO_do_handshake"); base.Connect(web); }
public override void Write(byte[] buffer, int offset, int count) { IntPtr buf = Marshal.AllocHGlobal(count); Marshal.Copy(buffer, offset, buf, count); int writeCount; do { writeCount = OpenSSL.BIO_write(bio, buf, count); } while (writeCount <= 0 && OpenSSL.BIO_should_retry(bio)); OpenSSL.OpenSSLCheck(writeCount == count, "BIO_write"); Marshal.FreeHGlobal(buf); }
public override int Read(byte[] buffer, int offset, int count) { IntPtr buf = Marshal.AllocHGlobal(count); int readCount; do { readCount = OpenSSL.BIO_read(bio, buf, count); } while (readCount <= 0 && OpenSSL.BIO_should_retry(bio)); OpenSSL.OpenSSLCheck(readCount > 0, "BIO_write"); Marshal.Copy(buf, buffer, offset, readCount); Marshal.FreeHGlobal(buf); return(readCount); }
public void Listen(string port, string identityHint, byte[] psk) { this.identityHint = identityHint; this.psk = psk; IntPtr tls; OpenSSL.OpenSSLCheck((tls = OpenSSL.TLSv1_2_server_method()) != IntPtr.Zero, "TLS_server_method"); OpenSSL.OpenSSLCheck((ctx = OpenSSL.SSL_CTX_new(tls)) != IntPtr.Zero, "SSL_CTX_new"); IntPtr ssl_bio; OpenSSL.OpenSSLCheck((ssl_bio = OpenSSL.BIO_new_ssl(ctx, 0)) != IntPtr.Zero, "BIO_new_ssl"); OpenSSL.OpenSSLCheck((in_bio = OpenSSL.BIO_new_accept(port)) != IntPtr.Zero, "BIO_new_accept"); OpenSSL.BIO_set_accept_bios(in_bio, ssl_bio); OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(in_bio) == 1, "BIO_do_handshake"); // first call sets up the accept socket, subsequent get the connections }
public TlsPskConnection Accept() { OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(in_bio) == 1, "BIO_do_handshake"); IntPtr conn = OpenSSL.BIO_pop(in_bio); IntPtr ssl; OpenSSL.BIO_get_ssl(conn, out ssl); OpenSSL.OpenSSLCheck(ssl != IntPtr.Zero, "BIO_get_ssl"); OpenSSL.SSL_use_psk_identity_hint(ssl, identityHint); OpenSSL.SSL_set_psk_server_callback(ssl, (ssl_, identity, pskOut, max_psk_len) => { Marshal.Copy(psk, 0, pskOut, (int)Math.Min(psk.Length, max_psk_len)); return((uint)psk.Length); }); OpenSSL.OpenSSLCheck(OpenSSL.BIO_do_handshake(conn) == 1, "BIO_do_handshake"); return(new TlsPskConnection(conn)); }
public override void Flush() { OpenSSL.OpenSSLCheck(OpenSSL.BIO_flush(bio) == 1, "BIO_flush"); }