Changeset b1f7f11 in mod_gnutls

Timestamp:

Dec 2, 2004, 4:43:34 AM (15 years ago)

Author:

Paul Querna <chip@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, upstream

Children:

01d15c2

Parents:

dae0aec

Message:

hey hey, this is working code!

Location:

src

Files:

• gnutls_io.c (modified) (7 diffs)
• mod_gnutls.c (modified) (4 diffs)

src/gnutls_io.c

@@ -224 +224 @@
 
     while (1) {
-
-        if (ctxt->status < 0) {
-            /* Ensure a non-zero error code is returned */
-            if (ctxt->input_rc == APR_SUCCESS) {
-                ctxt->input_rc = APR_EGENERAL;
-            }
-            break;
-        }
 
         rc = gnutls_record_recv(ctxt->session, buf + bytes, wanted - bytes);
@@ -349 +341 @@
     if (ctxt->status != 0)
         return;
+#if 0
 
     for (i = GNUTLS_HANDSHAKE_ATTEMPTS; i > 0; i--) {
@@ -365 +358 @@
             }
 
-            if (gnutls_error_is_fatal(ret) != 0) {
-                gnutls_deinit(ctxt->session);
-                ap_log_error(APLOG_MARK, APLOG_ERR, 0, ctxt->c->base_server,
+            gnutls_deinit(ctxt->session);
+            ap_log_error(APLOG_MARK, APLOG_ERR, 0, ctxt->c->base_server,
                              "GnuTLS: Handshake Failed (%d) '%s'", ret,
                              gnutls_strerror(ret));
                 ctxt->status = -1;
                 return;
-            }
         }
         else {
@@ -381 +372 @@
     ctxt->status = -1;
     return;
+#else
+ret = gnutls_handshake(ctxt->session);
+        if (ret < 0) {
+            if (ret == GNUTLS_E_WARNING_ALERT_RECEIVED
+                || ret == GNUTLS_E_FATAL_ALERT_RECEIVED) {
+                ret = gnutls_alert_get(ctxt->session);
+                ap_log_error(APLOG_MARK, APLOG_ERR, 0, ctxt->c->base_server,
+                             "GnuTLS: Hanshake Alert (%d) '%s'.\n", ret,
+                             gnutls_alert_get_name(ret));
+            }
+    
+            gnutls_deinit(ctxt->session);
+            ap_log_error(APLOG_MARK, APLOG_ERR, 0, ctxt->c->base_server,
+                             "GnuTLS: Handshake Failed (%d) '%s'", ret,
+                             gnutls_strerror(ret));
+                ctxt->status = -1;
+                return;
+        }
+        else {
+            ctxt->status = 1;
+            return;             /* all done with the handshake */
+        }
+
+#endif
 }
 
@@ -405 +420 @@
 
     if (ctxt->status < 0) {
-        return ap_get_brigade(f->next, bb, mode, block, readbytes);
+//        return ap_get_brigade(f->next, bb, mode, block, readbytes);
     }
 
@@ -644 +659 @@
     mod_gnutls_handle_t *ctxt = ptr;
 
-    if (!ctxt->output_length
-        && (len + ctxt->output_blen < sizeof(ctxt->output_buffer))) {
-        /* the first two SSL_writes (of 1024 and 261 bytes)
-         * need to be in the same packet (vec[0].iov_base)
-         */
-        /* XXX: could use apr_brigade_write() to make code look cleaner  
-         * but this way we avoid the malloc(APR_BUCKET_BUFF_SIZE)
-         * and free() of it later
-         */
-        memcpy(&ctxt->output_buffer[ctxt->output_blen], buffer, len);
-        ctxt->output_blen += len;
-    }
-    else {
         /* pass along the encrypted data
          * need to flush since we're using SSL's malloc-ed buffer
@@ -671 +673 @@
             return -1;
         }
-    }
-
     return len;
 }

src/mod_gnutls.c

@@ -150 +150 @@
     gnutls_certificate_server_set_request(ctxt->session, GNUTLS_CERT_IGNORE);
 
-//    gnutls_dh_set_prime_bits(ctxt->session, DH_BITS);
+    gnutls_dh_set_prime_bits(ctxt->session, DH_BITS);
 
     return ctxt;
@@ -189 +189 @@
                                                         module_config,
                                                         &gnutls_module);
-    sc->cert_file = apr_pstrdup(parms->pool, arg);
+    sc->cert_file = ap_server_root_relative(parms->pool, arg);
     return NULL;
 }
@@ -200 +200 @@
                                                         module_config,
                                                         &gnutls_module);
-    sc->key_file = apr_pstrdup(parms->pool, arg);
+    sc->key_file = ap_server_root_relative(parms->pool, arg);
     return NULL;
 }
@@ -292 +292 @@
 
     i = 0;
+    sc->key_exchange[i++] = GNUTLS_KX_DHE_DSS;
     sc->key_exchange[i++] = GNUTLS_KX_RSA;
+    sc->key_exchange[i++] = GNUTLS_KX_DHE_RSA;
     sc->key_exchange[i++] = GNUTLS_KX_RSA_EXPORT;
-    sc->key_exchange[i++] = GNUTLS_KX_DHE_RSA;
     sc->key_exchange[i++] = GNUTLS_KX_DHE_DSS;
     sc->key_exchange[i] = 0;