| | 244 | | static GIOChannel *(GIOChannel *handle, const char *mycert, const char *mypkey, const char *cafile, const char *capath, gboolean verify) |
| | 245 | | { |
| | 246 | | GIOSSLChannel *chan; |
| | 247 | | GIOChannel *gchan; |
| | 248 | | int fd; |
| | 249 | | SSL *ssl; |
| | 250 | | SSL_CTX *ctx = NULL;
|
| | 251 | | |
| | 252 | | g_return_val_if_fail(handle != NULL, NULL);
|
| | 253 | | |
| Always True: irssi_ssl_init$result86 != 0 | 254 | | if(!ssl_ctx && !()) |
| | 255 | | return NULL;
|
| | 256 | | |
| | 257 | | if(!(fd = g_io_channel_unix_get_fd(handle))) |
| | 258 | | return NULL;
|
| | 259 | | |
| | 260 | | if (mycert && *mycert) { |
| | 261 | | char *scert = NULL, *spkey = NULL;
|
| | 262 | | if ((ctx = SSL_CTX_new(SSLv23_client_method())) == NULL) {
|
| | 263 | | g_error("Could not allocate memory for SSL context");
|
| | 264 | | return NULL;
|
| | 265 | | } |
| | 266 | | scert = convert_home(mycert); |
| | 267 | | if (mypkey && *mypkey) |
| | 268 | | spkey = convert_home(mypkey); |
| | 269 | | if (! SSL_CTX_use_certificate_file(ctx, scert, SSL_FILETYPE_PEM))
|
| | 270 | | g_warning("Loading of client certificate '%s' failed", mycert);
|
| | 271 | | else if (! SSL_CTX_use_PrivateKey_file(ctx, spkey ? spkey : scert, SSL_FILETYPE_PEM))
|
| | 272 | | g_warning("Loading of private key '%s' failed", mypkey ? mypkey : mycert);
|
| | 273 | | else if (! SSL_CTX_check_private_key(ctx)) |
| | 274 | | g_warning("Private key does not match the certificate");
|
| | 275 | | g_free(scert); |
| | 276 | | g_free(spkey); |
| | 277 | | } |
| | 278 | | |
| | 279 | | if ((cafile && *cafile) || (capath && *capath)) { |
| | 280 | | char *scafile = NULL;
|
| | 281 | | char *scapath = NULL;
|
| | 282 | | if (! ctx && (ctx = SSL_CTX_new(SSLv23_client_method())) == NULL) {
|
| | 283 | | g_error("Could not allocate memory for SSL context");
|
| | 284 | | return NULL;
|
| | 285 | | } |
| | 286 | | if (cafile && *cafile) |
| | 287 | | scafile = convert_home(cafile); |
| | 288 | | if (capath && *capath) |
| | 289 | | scapath = convert_home(capath); |
| | 290 | | if (! SSL_CTX_load_verify_locations(ctx, scafile, scapath)) { |
| | 291 | | g_warning("Could not load CA list for verifying SSL server certificate");
|
| | 292 | | g_free(scafile); |
| | 293 | | g_free(scapath); |
| | 294 | | SSL_CTX_free(ctx); |
| | 295 | | return NULL;
|
| | 296 | | } |
| | 297 | | g_free(scafile); |
| | 298 | | g_free(scapath); |
| | 299 | | verify = TRUE;
|
| | 300 | | } |
| | 301 | | |
| | 302 | | if (ctx == NULL)
|
| | 303 | | ctx = ssl_ctx; |
| | 304 | | |
| | 305 | | if(!(ssl = SSL_new(ctx))) |
| | 306 | | { |
| | 307 | | g_warning("Failed to allocate SSL structure");
|
| | 308 | | return NULL;
|
| | 309 | | } |
| | 310 | | |
| | 311 | | if(!SSL_set_fd(ssl, fd)) |
| | 312 | | { |
| | 313 | | g_warning("Failed to associate socket to SSL stream");
|
| | 314 | | SSL_free(ssl); |
| | 315 | | if (ctx != ssl_ctx) |
| | 316 | | SSL_CTX_free(ctx); |
| | 317 | | return NULL;
|
| | 318 | | } |
| | 319 | | |
| | 320 | | chan = g_new0(GIOSSLChannel, 1);
|
| | 321 | | chan->fd = fd; |
| | 322 | | chan->giochan = handle; |
| | 323 | | chan->ssl = ssl; |
| | 324 | | chan->ctx = ctx; |
| | 325 | | chan->verify = verify; |
| | 326 | | |
| | 327 | | gchan = (GIOChannel *)chan; |
| | 328 | | gchan->funcs = &; |
| | 329 | | g_io_channel_init(gchan); |
| | 330 | | gchan->is_readable = gchan->is_writeable = TRUE;
|
| | 331 | | gchan->use_buffer = FALSE;
|
| | 332 | | |
| | 333 | | return gchan; |
| | 334 | | } |
