// gcc -o s https.c -lssl -lcrypto
#include <stdio.h>
#include <memory.h>
#include <errno.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <netdb.h>
#include <unistd.h>
#include <openssl/crypto.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/ssl.h>
#include <openssl/err.h>
void main(int argc, char **argv)
{
SSL *ssl = NULL;
SSL_CTX *ctx = NULL;
const SSL_METHOD *client_method;
X509 *server_cert;
int sd,err;
char *str,*hostname,outbuf[4096],inbuf[4096],host_header[512];
struct hostent *host_entry;
struct sockaddr_in server_socket_address;
struct in_addr ip;
/* (1) 初始化openssl库 */
SSL_library_init();
ERR_load_crypto_strings();
SSL_load_error_strings();
OpenSSL_add_all_algorithms();
client_method = SSLv23_client_method( );
ctx = SSL_CTX_new(client_method);
if (!ctx) {
fprintf (stderr, "SSL_CTX_new 失败:\n");
ERR_print_errors_fp (stderr);
return;
}
printf("(1) SSL上下文已初始化\n\n");
/* (2) 把域名转换成ip地址 */
hostname = argv[1];
host_entry = gethostbyname(hostname);
bcopy(host_entry->h_addr, &(ip.s_addr), host_entry->h_length);
printf("(2) '%s' 具有IP地址 '%s'\n\n", hostname, inet_ntoa(ip));
/* (3) 用tcp连接到server的443端口 */
sd = socket(AF_INET, SOCK_STREAM, 0);
memset(&server_socket_address, '\0', sizeof(server_socket_address));
server_socket_address.sin_family = AF_INET;
server_socket_address.sin_port = htons(443);
memcpy(&(server_socket_address.sin_addr.s_addr),
host_entry->h_addr, host_entry->h_length);
err = connect(sd, (struct sockaddr*) &server_socket_address,
sizeof(server_socket_address));
if (err < 0) { perror("无法连接到服务器端口"); exit(1); }
printf("(3) 主机的TCP连接打开 '%s', 端口 %d\n\n",
hostname, server_socket_address.sin_port);
/* (4) 在tcp连接上进行ssl握手 */
ssl = SSL_new(ctx); /* 创建ssl句柄 ，之后的send，recv都在ssl句柄上进行 */
if (!ssl) {
fprintf (stderr, "SSL_new 失败:\n");
ERR_print_errors_fp (stderr);
return;
}
SSL_set_fd(ssl, sd); /* 把ssl句柄绑定到scoket */
err = SSL_connect(ssl); /* 启动ssl握手 */
printf("(4) 已创建SSL端点并完成握手\n\n");
/* (5) 打印出协商的好的加密密文 */
printf("(5) SSL与密码连接: %s\n\n", SSL_get_cipher(ssl));
/* (6) 打印服务器的证书 */
server_cert = SSL_get_peer_certificate(ssl);
printf("(6) 已收到服务器的证书:\n\n");
str = X509_NAME_oneline(X509_get_subject_name(server_cert), 0, 0);
printf(" 主题subject: %s\n", str);
str = X509_NAME_oneline(X509_get_issuer_name(server_cert), 0, 0);
printf(" 发行者issuer: %s\n\n", str);
/* 这里对证书进行验证 */
X509_free(server_cert);
/* (7) 握手完成 --- 开始在ssl上发送http请求 */
sprintf(host_header,"Host: %s\r\n",hostname);
strcpy(outbuf,"GET / HTTP/1.1\r\n");
strcat(outbuf,host_header);
// strcat(outbuf,"Connection: close\r\n");
strcat(outbuf,"\r\n");
err = SSL_write(ssl, outbuf, strlen(outbuf));
shutdown (sd, 1); /* send EOF to server */
printf("(7) 通过加密通道发送HTTP请求:\n\n%s\n",outbuf);
/* (8) 通过ssl句柄读取服务器响应 */
printf ("(8) 返回了%d字节的HTTP响应:\n");
do{
memset(inbuf, 0, sizeof(inbuf));
err = SSL_read(ssl, inbuf, sizeof(inbuf) - 1);
printf ("%s",inbuf);
inbuf[err] = '\0';
}while(err > 0);
/* (9) 释放连接，句柄 */
SSL_shutdown(ssl);
close(sd);
SSL_free(ssl);
SSL_CTX_free(ctx);
printf("(9) 全部完成、清理并关闭连接\n\n");
}
发表于 2023-1-3 15:39
