{"id":603,"date":"2008-07-31T16:30:42","date_gmt":"2008-07-31T16:30:42","guid":{"rendered":"http:\/\/pchero21.com\/?p=603"},"modified":"2008-07-31T16:30:42","modified_gmt":"2008-07-31T16:30:42","slug":"openssl%ec%9d%84-%ec%9d%b4%ec%9a%a9%ed%95%9c-%ec%95%94%ed%98%b8%ed%99%94-%ed%86%b5%ec%8b%a0","status":"publish","type":"post","link":"http:\/\/pchero21.com\/?p=603","title":{"rendered":"Openssl\uc744 \uc774\uc6a9\ud55c \uc554\ud638\ud654 \ud1b5\uc2e0"},"content":{"rendered":"

 Openssl\uc744 \uc774\uc6a9\ud55c \uc554\ud638\ud654 \ud1b5\uc2e0<\/p>\n

 \uc11c\ubc84\ub294 \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud558\uc5ec \uac00\uc7a5 \uba3c\uc800 SSL_CTX\uc640 SSL \uad6c\uc870\uccb4\ub97c \uc120\uc5b8\ud558\uc5ec \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud55c \uc815\ubcf4\ub97c \uad00\ub9ac\ud560 \uc218 \uc788\ub3c4\ub85d \ud55c\ub2e4. \uadf8\ub9ac\uace0, SSL \uc138\uc158\uc744 \uc2dc\uc791\ud558\uae30 \uc704\ud55c \ucd08\uae30\uac12\uc744 \uc124\uc815\ud558\uace0, SSL_CTX_new() \ud568\uc218\ub97c \uc774\uc6a9\ud558\uc5ec SSL \ucee8\ud14d\uc2a4\ud2b8\ub97c \uc0dd\uc131\ud55c\ub2e4.<\/p>\n

 \ub2e4\uc74c \ub2e8\uacc4\ub294 \uc778\uc99d\uc11c\ub97c \uc774\uc6a9\ud558\uc5ec \uc11c\ubc84\uc640 \ud074\ub77c\uc774\uc5b8\ud2b8 \uac04\uc758 \uc778\uc99d\uc744 \uc218\ud589\ud560 \uacbd\uc6b0 SS_CTX_use_certificate_file()\ub97c \uc774\uc694\ud558\uc5ec \uc778\uc99d\uc11c \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uba70, SSL_CTX_use_PrivateKey_file()\ub97c \uc774\uc6a9\ud558\uc5ec \uac1c\uc778 \ud0a4\ub97c \uc0dd\uc131\ud55c\ub2e4.<\/p>\n

 \uc774\ub7f0 \uc900\ube44 \ub2e8\uacc4 \ud6c4\uc5d0 SSL_new() \ud568\uc218\ub97c \uc774\uc6a9\ud558\uc5ec SSL \uc138\uc158\uc744 \uc0dd\uc131\ud558\uace0, \uc774\ud6c4\uc758 \ub2e8\uacc4\ub294 \uae30\uc874\uc758 \uc18c\ucf13 \uc11c\ubc84\uc640 \uc720\uc0ac\ud55c \ubc29\ubc95\uc73c\ub85c \ucc98\ub9ac\ub97c \uc218\ud589\ud560 \uc218 \uc788\ub2e4. SSL\uc744 \uc774\uc6a9\ud55c \uc1a1\uc218\uc2e0\uc740 SSL_accept(), SSL_read(), SSL_write() \ub4f1\uc758 \ud568\uc218\ub97c \uc774\uc6a9\ud560 \uc218 \uc788\uc73c\uba70, \uc774 \uacfc\uc815\uc740 \uae30\uc885\uc758 \uc18c\ucf13 \ud504\ub85c\uadf8\ub798\ubc0d\uacfc \uc720\uc0ac\ud55c \ubc29\ubc95\uc73c\ub85c \uc218\ud589\ub41c\ub2e4.<\/p>\n

<\/p>\n

\nserv.c<\/span> (Language : c)<\/span><\/legend>\n
    \n
  1. \n
    \/*<\/span><\/div>\n<\/li>\n
  2. \n
    *      serv.c<\/span><\/div>\n<\/li>\n
  3. \n
    *      <\/span><\/div>\n<\/li>\n
  4. \n
    *      Copyright 2008 Kim Sung-tae <pchero21@gmail.com><\/span><\/div>\n<\/li>\n
  5. \n
    *      <\/span><\/div>\n<\/li>\n
  6. \n
    *      This program is free software; you can redistribute it and\/or modify<\/span><\/div>\n<\/li>\n
  7. \n
    *      it under the terms of the GNU General Public License as published by<\/span><\/div>\n<\/li>\n
  8. \n
    *      the Free Software Foundation; either version 2 of the License, or<\/span><\/div>\n<\/li>\n
  9. \n
    *      (at your option) any later version.<\/span><\/div>\n<\/li>\n
  10. \n
    *      <\/span><\/div>\n<\/li>\n
  11. \n
    *      This program is distributed in the hope that it will be useful,<\/span><\/div>\n<\/li>\n
  12. \n
    *      but WITHOUT ANY WARRANTY; without even the implied warranty of<\/span><\/div>\n<\/li>\n
  13. \n
    *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the<\/span><\/div>\n<\/li>\n
  14. \n
    *      GNU General Public License for more details.<\/span><\/div>\n<\/li>\n
  15. \n
    *      <\/span><\/div>\n<\/li>\n
  16. \n
    *      You should have received a copy of the GNU General Public License<\/span><\/div>\n<\/li>\n
  17. \n
    *      along with this program; if not, write to the Free Software<\/span><\/div>\n<\/li>\n
  18. \n
    *      Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,<\/span><\/div>\n<\/li>\n
  19. \n
    *      MA 02110-1301, USA.<\/span><\/div>\n<\/li>\n
  20. \n
    *\/<\/span><\/div>\n<\/li>\n
  21. \n
     <\/div>\n<\/li>\n
  22. \n
     <\/div>\n<\/li>\n
  23. \n
    #include <stdio.h><\/span><\/div>\n<\/li>\n
  24. \n
    #include <unistd.h><\/span><\/div>\n<\/li>\n
  25. \n
    #include <stdlib.h><\/span><\/div>\n<\/li>\n
  26. \n
    #include <memory.h><\/span><\/div>\n<\/li>\n
  27. \n
    #include <errno.h><\/span><\/div>\n<\/li>\n
  28. \n
    #include <sys\/types.h><\/span><\/div>\n<\/li>\n
  29. \n
    #include <sys\/socket.h><\/span><\/div>\n<\/li>\n
  30. \n
    #include <netinet\/in.h><\/span><\/div>\n<\/li>\n
  31. \n
    #include <arpa\/inet.h><\/span><\/div>\n<\/li>\n
  32. \n
    #include <netdb.h><\/span><\/div>\n<\/li>\n
  33. \n
     <\/div>\n<\/li>\n
  34. \n
    \/*<\/span><\/div>\n<\/li>\n
  35. \n
    * openssl \uad00\ub828 \ud5e4\ub354 \ud30c\uc77c\uc744 include \ud55c\ub2e4.<\/span><\/div>\n<\/li>\n
  36. \n
    *\/<\/span><\/div>\n<\/li>\n
  37. \n
    #include <openssl\/rsa.h>        \/* SSLeay stuff *\/<\/span><\/div>\n<\/li>\n
  38. \n
    #include <openssl\/crypto.h><\/span><\/div>\n<\/li>\n
  39. \n
    #include <openssl\/x509.h><\/span><\/div>\n<\/li>\n
  40. \n
    #include <openssl\/pem.h><\/span><\/div>\n<\/li>\n
  41. \n
    #include <openssl\/ssl.h><\/span><\/div>\n<\/li>\n
  42. \n
    #include <openssl\/err.h><\/span><\/div>\n<\/li>\n
  43. \n
     <\/div>\n<\/li>\n
  44. \n
    \/* define HOME to be dir for key and cert files…. *\/<\/span><\/div>\n<\/li>\n
  45. \n
    #define HOME “.\/”<\/span><\/div>\n<\/li>\n
  46. \n
     <\/div>\n<\/li>\n
  47. \n
    \/* Make these what you want for cert & key files *\/<\/span><\/div>\n<\/li>\n
  48. \n
    #define CERTF HOME “server.crt”<\/span><\/div>\n<\/li>\n
  49. \n
    #define KEYF HOME “server.key”<\/span><\/div>\n<\/li>\n
  50. \n
     <\/div>\n<\/li>\n
  51. \n
    #define CHK_NULL(x) if((x) == NULL) exit(1);<\/span><\/div>\n<\/li>\n
  52. \n
    #define CHK_ERR(err, s) if((err) == -1) { perror(s); exit(1); }<\/span><\/div>\n<\/li>\n
  53. \n
    #define CHK_SSL(err) if((err) == -1) { ERR_print_errors_fp(stderr); exit(2); }<\/span><\/div>\n<\/li>\n
  54. \n
     <\/div>\n<\/li>\n
  55. \n
     <\/div>\n<\/li>\n
  56. \n
    int<\/span> main(<\/span>void<\/span>)<\/span><\/div>\n<\/li>\n
  57. \n
    {<\/span><\/div>\n<\/li>\n
  58. \n
        int<\/span> err;<\/div>\n<\/li>\n
  59. \n
        int<\/span> listen_sd;<\/div>\n<\/li>\n
  60. \n
        int<\/span> sd;<\/div>\n<\/li>\n
  61. \n
        struct<\/span> sockaddr_in sa_serv;<\/div>\n<\/li>\n
  62. \n
        struct<\/span> sockaddr_in sa_cli;<\/div>\n<\/li>\n
  63. \n
        size_t client_len;<\/div>\n<\/li>\n
  64. \n
        <\/div>\n<\/li>\n
  65. \n
        \/* SSL Context \ubc0f \uad00\ub828 \uad6c\uc870\uccb4\ub97c \uc120\uc5b8\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  66. \n
        SSL_CTX  *ctx;<\/div>\n<\/li>\n
  67. \n
        SSL    *ssl;<\/div>\n<\/li>\n
  68. \n
        X509                *client_cert;<\/div>\n<\/li>\n
  69. \n
        char<\/span>                *str;<\/div>\n<\/li>\n
  70. \n
        char<\/span>                buf[<\/span>4096<\/span>]<\/span>;<\/div>\n<\/li>\n
  71. \n
        SSL_METHOD  *meth;<\/div>\n<\/li>\n
  72. \n
        <\/div>\n<\/li>\n
  73. \n
        \/* SSL \uad00\ub828 \ucd08\uae30\ud654 \uc791\uc5c5\uc744 \uc218\ud589\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  74. \n
        SSL_load_error_strings(<\/span>)<\/span>;<\/div>\n<\/li>\n
  75. \n
        SSLeay_add_ssl_algorithms(<\/span>)<\/span>;<\/div>\n<\/li>\n
  76. \n
        meth = SSLv23_server_method(<\/span>)<\/span>;    \/\/ \uc11c\ubc84 \uba54\uc18c\ub4dc.<\/span><\/div>\n<\/li>\n
  77. \n
        ctx = SSL_CTX_new(<\/span>meth)<\/span>;                \/\/ \uc9c0\uc815\ub41c \ucd08\uae30 \uac12\uc744 \uc774\uc6a9\ud558\uc5ec SSL Context\ub97c \uc0dd\uc131\ud55c\ub2e4.<\/span><\/div>\n<\/li>\n
  78. \n
        <\/div>\n<\/li>\n
  79. \n
        if<\/span>(<\/span>!ctx)<\/span> {<\/span><\/div>\n<\/li>\n
  80. \n
            ERR_print_errors_fp(<\/span>stderr)<\/span>;<\/div>\n<\/li>\n
  81. \n
            exit(<\/span>2<\/span>)<\/span>;<\/div>\n<\/li>\n
  82. \n
        }<\/span><\/div>\n<\/li>\n
  83. \n
        <\/div>\n<\/li>\n
  84. \n
        \/* \uc0ac\uc6a9\ud558\uac8c \ub418\ub294 \uc778\uc99d\uc11c \ud30c\uc77c\uc744 \uc124\uc815\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  85. \n
        if<\/span>(<\/span>SSL_CTX_use_certificate_file(<\/span>ctx, CERTF, SSL_FILETYPE_PEM)<\/span> <= 0<\/span>)<\/span> {<\/span>      \/\/ \uc778\uc99d\uc11c\ub97c \ud30c\uc77c\ub85c \ubd80\ud130 \ub85c\ub529\ud560\ub54c \uc0ac\uc6a9\ud568.<\/span><\/div>\n<\/li>\n
  86. \n
            ERR_print_errors_fp(<\/span>stderr)<\/span>;<\/div>\n<\/li>\n
  87. \n
            exit(<\/span>3<\/span>)<\/span>;<\/div>\n<\/li>\n
  88. \n
        }<\/span><\/div>\n<\/li>\n
  89. \n
        <\/div>\n<\/li>\n
  90. \n
        \/* \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud574\uc11c \uc774\uc6a9\ud558\ub294 \uac1c\uc778 \ud0a4\ub97c \uc124\uc815\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  91. \n
        if<\/span>(<\/span>SSL_CTX_use_PrivateKey_file(<\/span>ctx, KEYF, SSL_FILETYPE_PEM)<\/span> <= 0<\/span>)<\/span> {<\/span><\/div>\n<\/li>\n
  92. \n
            ERR_print_errors_fp(<\/span>stderr)<\/span>;<\/div>\n<\/li>\n
  93. \n
            exit(<\/span>4<\/span>)<\/span>;<\/div>\n<\/li>\n
  94. \n
        }<\/span><\/div>\n<\/li>\n
  95. \n
        <\/div>\n<\/li>\n
  96. \n
        \/* \uac1c\uc778 \ud0a4\uac00 \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uac83\uc778\uc9c0 \ud655\uc778\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  97. \n
        if<\/span>(<\/span>!SSL_CTX_check_private_key(<\/span>ctx)<\/span>)<\/span> {<\/span><\/div>\n<\/li>\n
  98. \n
            fprintf(<\/span>stderr, “Private key does not match the certificate public keyn<\/span>“<\/span>)<\/span>;<\/div>\n<\/li>\n
  99. \n
            exit(<\/span>5<\/span>)<\/span>;<\/div>\n<\/li>\n
  100. \n
        }<\/span><\/div>\n<\/li>\n
  101. \n
        <\/div>\n<\/li>\n
  102. \n
        \/* Prepare TCP socket for receiving connections *\/<\/span><\/div>\n<\/li>\n
  103. \n
        listen_sd = socket(<\/span>AF_INET, SOCK_STREAM, 0<\/span>)<\/span>;<\/div>\n<\/li>\n
  104. \n
        CHK_ERR(<\/span>listen_sd, “socket”<\/span>)<\/span>;<\/div>\n<\/li>\n
  105. \n
        <\/div>\n<\/li>\n
  106. \n
        memset(<\/span>&sa_serv, ‘\u0000<\/span>‘<\/span>, sizeof<\/span>(<\/span>sa_serv)<\/span>)<\/span>;<\/div>\n<\/li>\n
  107. \n
        sa_serv.sin_family<\/span> = AF_INET;<\/div>\n<\/li>\n
  108. \n
        sa_serv.sin_addr<\/span>.s_addr<\/span> = INADDR_ANY;<\/div>\n<\/li>\n
  109. \n
        sa_serv.sin_port<\/span> = htons(<\/span>1111<\/span>)<\/span>; \/* Server Port number *\/<\/span><\/div>\n<\/li>\n
  110. \n
     <\/div>\n<\/li>\n
  111. \n
        err = bind(<\/span>listen_sd, (<\/span>struct<\/span> sockaddr*)<\/span>&sa_serv, sizeof<\/span>(<\/span>sa_serv)<\/span>)<\/span>;<\/div>\n<\/li>\n
  112. \n
        CHK_ERR(<\/span>err, “bimd”<\/span>)<\/span>;<\/div>\n<\/li>\n
  113. \n
        <\/div>\n<\/li>\n
  114. \n
        \/* Receive a TCP connection. *\/<\/span><\/div>\n<\/li>\n
  115. \n
         err = listen(<\/span>listen_sd, 5<\/span>)<\/span>;<\/div>\n<\/li>\n
  116. \n
         CHK_ERR(<\/span>err, “listen”<\/span>)<\/span>;<\/div>\n<\/li>\n
  117. \n
         <\/div>\n<\/li>\n
  118. \n
         client_len = sizeof<\/span>(<\/span>sa_cli)<\/span>;<\/div>\n<\/li>\n
  119. \n
         sd = accept(<\/span>listen_sd, (<\/span>struct<\/span> sockaddr*)<\/span>&sa_cli, &client_len)<\/span>;<\/div>\n<\/li>\n
  120. \n
         CHK_ERR(<\/span>sd, “accept”<\/span>)<\/span>;<\/div>\n<\/li>\n
  121. \n
         close(<\/span>listen_sd)<\/span>;<\/div>\n<\/li>\n
  122. \n
         <\/div>\n<\/li>\n
  123. \n
         printf<\/span><\/a>(<\/span>“Connection from %1x, port %xn<\/span>“<\/span>, sa_cli.sin_addr<\/span>.s_addr<\/span>, sa_cli.sin_port<\/span>)<\/span>;<\/div>\n<\/li>\n
  124. \n
         <\/div>\n<\/li>\n
  125. \n
         \/* TCP connection is ready. Do server side SSL. *\/<\/span><\/div>\n<\/li>\n
  126. \n
        ssl = SSL_new(<\/span>ctx)<\/span>; \/\/ \uc124\uc815\ub41c Context\ub97c \uc774\uc6a9\ud558\uc5ec SSL \uc138\uc158\uc758 \ucd08\uae30\ud654 \uc791\uc5c5\uc744 \uc218\ud589\ud55c\ub2e4.<\/span><\/div>\n<\/li>\n
  127. \n
        CHK_NULL(<\/span>ssl)<\/span>;<\/div>\n<\/li>\n
  128. \n
        SSL_set_fd(<\/span>ssl, sd)<\/span>;<\/div>\n<\/li>\n
  129. \n
        err = SSL_accept(<\/span>ssl)<\/span>;    \/\/ SSL \uc138\uc158\uc744 \ud1b5\ud574 \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc811\uc18d\uc744 \ub300\uae30\ud55c\ub2e4.<\/span><\/div>\n<\/li>\n
  130. \n
        CHK_SSL(<\/span>err)<\/span>;<\/div>\n<\/li>\n
  131. \n
        <\/div>\n<\/li>\n
  132. \n
        \/* Get the cipher – opt *\/<\/span><\/div>\n<\/li>\n
  133. \n
        printf<\/span><\/a>(<\/span>“SSL connection using %sn<\/span>“<\/span>, SSL_get_cipher(<\/span>ssl)<\/span>)<\/span>;<\/div>\n<\/li>\n
  134. \n
        <\/div>\n<\/li>\n
  135. \n
        \/* \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc778\uc99d\uc11c\ub97c \ubc1b\uc74c – opt *\/<\/span><\/div>\n<\/li>\n
  136. \n
        client_cert = SSL_get_peer_certificate(<\/span>ssl)<\/span>;<\/div>\n<\/li>\n
  137. \n
        if<\/span>(<\/span>client_cert != NULL<\/span>)<\/span> {<\/span><\/div>\n<\/li>\n
  138. \n
            printf<\/span><\/a>(<\/span>“Client certificate:n<\/span>“<\/span>)<\/span>;<\/div>\n<\/li>\n
  139. \n
            <\/div>\n<\/li>\n
  140. \n
            str = X509_NAME_oneline(<\/span>X509_get_subject_name(<\/span>client_cert)<\/span>, 0<\/span>, 0<\/span>)<\/span>;<\/div>\n<\/li>\n
  141. \n
            CHK_NULL(<\/span>str)<\/span>;<\/div>\n<\/li>\n
  142. \n
            printf<\/span><\/a>(<\/span>“t<\/span> subject: %sn<\/span>“<\/span>, str)<\/span>;<\/div>\n<\/li>\n
  143. \n
            OPENSSL_free(<\/span>str)<\/span>;<\/div>\n<\/li>\n
  144. \n
            <\/div>\n<\/li>\n
  145. \n
            str = X509_NAME_oneline(<\/span>X509_get_issuer_name(<\/span>client_cert)<\/span>, 0<\/span>, 0<\/span>)<\/span>;<\/div>\n<\/li>\n
  146. \n
            CHK_NULL(<\/span>str)<\/span>;<\/div>\n<\/li>\n
  147. \n
            printf<\/span><\/a>(<\/span>“t<\/span> issuer: %sn<\/span>“<\/span>, str)<\/span>;<\/div>\n<\/li>\n
  148. \n
            OPENSSL_free(<\/span>str)<\/span>;<\/div>\n<\/li>\n
  149. \n
            <\/div>\n<\/li>\n
  150. \n
            \/* We could do all sorts of certificate verification stuff here before deallocating the certificate. *\/<\/span><\/div>\n<\/li>\n
  151. \n
            X509_free(<\/span>client_cert)<\/span>;<\/div>\n<\/li>\n
  152. \n
        }<\/span> else<\/span> {<\/span><\/div>\n<\/li>\n
  153. \n
            printf<\/span><\/a>(<\/span>“Client does not have certificate.n<\/span>“<\/span>)<\/span>;<\/div>\n<\/li>\n
  154. \n
        }<\/span><\/div>\n<\/li>\n
  155. \n
        <\/div>\n<\/li>\n
  156. \n
        \/* SSL \uc138\uc158\uc744 \ud1b5\ud574\uc11c \ud074\ub77c\uc774\uc5b8\ud2b8\uc640 \ub370\uc774\ud130\ub97c \uc1a1\uc218\uc2e0\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  157. \n
        err = SSL_read(<\/span>ssl, buf, sizeof<\/span>(<\/span>buf)<\/span> – 1<\/span>)<\/span>;<\/div>\n<\/li>\n
  158. \n
        CHK_SSL(<\/span>err)<\/span>;<\/div>\n<\/li>\n
  159. \n
        buf[<\/span>err]<\/span> = ‘\u0000<\/span>‘<\/span>;<\/div>\n<\/li>\n
  160. \n
        printf<\/span><\/a>(<\/span>“Got %d chars: ‘%s’n<\/span>“<\/span>, err, buf)<\/span>;<\/div>\n<\/li>\n
  161. \n
        <\/div>\n<\/li>\n
  162. \n
        err = SSL_write(<\/span>ssl, “I hear you\/”<\/span>, strlen(<\/span>“I hear you.”<\/span>)<\/span>)<\/span>;<\/div>\n<\/li>\n
  163. \n
        CHK_SSL(<\/span>err)<\/span>;<\/div>\n<\/li>\n
  164. \n
        <\/div>\n<\/li>\n
  165. \n
        \/* \uc124\uc815\ud55c \uc790\uc6d0\uc744 \ubc18\ud658\ud558\uace0 \uc885\ub8cc\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
  166. \n
        close(<\/span>sd)<\/span>;<\/div>\n<\/li>\n
  167. \n
        SSL_free(<\/span>ssl)<\/span>;<\/div>\n<\/li>\n
  168. \n
        SSL_CTX_free(<\/span>ctx)<\/span>;<\/div>\n<\/li>\n
  169. \n
        <\/div>\n<\/li>\n
  170. \n
        return<\/span>(<\/span>0<\/span>)<\/span>;<\/div>\n<\/li>\n
  171. \n
    }<\/span><\/div>\n<\/li>\n
  172. \n
     <\/div>\n<\/li>\n<\/ol>\n<\/fieldset>\n

    <\/p>\n

    \ncli.c<\/span> (Language : c)<\/span><\/legend>\n
      \n
    1. \n
      \/*<\/span><\/div>\n<\/li>\n
    2. \n
      *      cli.c<\/span><\/div>\n<\/li>\n
    3. \n
      *      <\/span><\/div>\n<\/li>\n
    4. \n
      *      Copyright 2008 Kim Sung-tae <pchero21@gmail.com><\/span><\/div>\n<\/li>\n
    5. \n
      *      <\/span><\/div>\n<\/li>\n
    6. \n
      *      This program is free software; you can redistribute it and\/or modify<\/span><\/div>\n<\/li>\n
    7. \n
      *      it under the terms of the GNU General Public License as published by<\/span><\/div>\n<\/li>\n
    8. \n
      *      the Free Software Foundation; either version 2 of the License, or<\/span><\/div>\n<\/li>\n
    9. \n
      *      (at your option) any later version.<\/span><\/div>\n<\/li>\n
    10. \n
      *      <\/span><\/div>\n<\/li>\n
    11. \n
      *      This program is distributed in the hope that it will be useful,<\/span><\/div>\n<\/li>\n
    12. \n
      *      but WITHOUT ANY WARRANTY; without even the implied warranty of<\/span><\/div>\n<\/li>\n
    13. \n
      *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the<\/span><\/div>\n<\/li>\n
    14. \n
      *      GNU General Public License for more details.<\/span><\/div>\n<\/li>\n
    15. \n
      *      <\/span><\/div>\n<\/li>\n
    16. \n
      *      You should have received a copy of the GNU General Public License<\/span><\/div>\n<\/li>\n
    17. \n
      *      along with this program; if not, write to the Free Software<\/span><\/div>\n<\/li>\n
    18. \n
      *      Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,<\/span><\/div>\n<\/li>\n
    19. \n
      *      MA 02110-1301, USA.<\/span><\/div>\n<\/li>\n
    20. \n
      *\/<\/span><\/div>\n<\/li>\n
    21. \n
       <\/div>\n<\/li>\n
    22. \n
       <\/div>\n<\/li>\n
    23. \n
      #include <stdio.h><\/span><\/div>\n<\/li>\n
    24. \n
      #include <memory.h><\/span><\/div>\n<\/li>\n
    25. \n
      #include <errno.h><\/span><\/div>\n<\/li>\n
    26. \n
      #include <sys\/types.h><\/span><\/div>\n<\/li>\n
    27. \n
      #include <sys\/socket.h><\/span><\/div>\n<\/li>\n
    28. \n
      #include <netinet\/in.h><\/span><\/div>\n<\/li>\n
    29. \n
      #include <arpa\/inet.h><\/span><\/div>\n<\/li>\n
    30. \n
      #include <netdb.h><\/span><\/div>\n<\/li>\n
    31. \n
       <\/div>\n<\/li>\n
    32. \n
      #include <openssl\/crypto.h><\/span><\/div>\n<\/li>\n
    33. \n
      #include <openssl\/x509.h><\/span><\/div>\n<\/li>\n
    34. \n
      #include <openssl\/pem.h><\/span><\/div>\n<\/li>\n
    35. \n
      #include <openssl\/ssl.h><\/span><\/div>\n<\/li>\n
    36. \n
      #include <openssl\/err.h><\/span><\/div>\n<\/li>\n
    37. \n
       <\/div>\n<\/li>\n
    38. \n
      #define CHK_NULL(x) if((x) == NULL) exit(1);<\/span><\/div>\n<\/li>\n
    39. \n
      #define CHK_ERR(err, s) if((err) == -1) { perror(s); exit(1); }<\/span><\/div>\n<\/li>\n
    40. \n
      #define CHK_SSL(err) if((err) == -1) { ERR_print_errors_fp(stderr); exit(2); }<\/span><\/div>\n<\/li>\n
    41. \n
       <\/div>\n<\/li>\n
    42. \n
       <\/div>\n<\/li>\n
    43. \n
      int<\/span> main(<\/span>void<\/span>)<\/span><\/div>\n<\/li>\n
    44. \n
      {<\/span><\/div>\n<\/li>\n
    45. \n
          int<\/span> err;<\/div>\n<\/li>\n
    46. \n
          int<\/span> sd;<\/div>\n<\/li>\n
    47. \n
          struct<\/span> sockaddr_in sa;<\/div>\n<\/li>\n
    48. \n
          <\/div>\n<\/li>\n
    49. \n
          \/* SSL \uad00\ub828 \uc815\ubcf4\ub97c \uad00\ub9ac\ud560 \uad6c\uc870\uccb4\ub97c \uc120\uc5b8\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    50. \n
          SSL_CTX   *ctx;<\/div>\n<\/li>\n
    51. \n
          SSL     *ssl;<\/div>\n<\/li>\n
    52. \n
          X509                    *server_cert;<\/div>\n<\/li>\n
    53. \n
          char<\/span>                    *str;<\/div>\n<\/li>\n
    54. \n
          char<\/span>                    buf[<\/span>4096<\/span>]<\/span>;<\/div>\n<\/li>\n
    55. \n
          SSL_METHOD    *meth;<\/div>\n<\/li>\n
    56. \n
          <\/div>\n<\/li>\n
    57. \n
          \/* \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud55c \ucd08\uae30\ud654 \uc791\uc5c5\uc744 \uc218\ud589\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    58. \n
          SSL_load_error_strings(<\/span>)<\/span>;<\/div>\n<\/li>\n
    59. \n
          SSLeay_add_ssl_algorithms(<\/span>)<\/span>;<\/div>\n<\/li>\n
    60. \n
          meth = SSLv3_client_method(<\/span>)<\/span>;<\/div>\n<\/li>\n
    61. \n
          ctx = SSL_CTX_new(<\/span>meth)<\/span>;<\/div>\n<\/li>\n
    62. \n
          CHK_NULL(<\/span>ctx)<\/span>;<\/div>\n<\/li>\n
    63. \n
          <\/div>\n<\/li>\n
    64. \n
          \/* \uc0ac\uc6a9\ud558\uac8c \ub418\ub294 \uc778\uc99d\uc11c \ud30c\uc77c\uc744 \uc124\uc815\ud55c\ub2e4. – opt*\/<\/span><\/div>\n<\/li>\n
    65. \n
          if<\/span>(<\/span>SSL_CTX_use_certificate_file(<\/span>ctx, “.\/client.crt”<\/span>, SSL_FILETYPE_PEM)<\/span> <= 0<\/span>)<\/span> {<\/span>    \/\/ \uc778\uc99d\uc11c\ub97c \ud30c\uc77c\ub85c \ubd80\ud130 \ub85c\ub529\ud560\ub54c \uc0ac\uc6a9\ud568.<\/span><\/div>\n<\/li>\n
    66. \n
              ERR_print_errors_fp(<\/span>stderr)<\/span>;<\/div>\n<\/li>\n
    67. \n
              exit(<\/span>3<\/span>)<\/span>;<\/div>\n<\/li>\n
    68. \n
          }<\/span><\/div>\n<\/li>\n
    69. \n
          <\/div>\n<\/li>\n
    70. \n
          \/* \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud574\uc11c \uc774\uc6a9\ud558\ub294 \uac1c\uc778 \ud0a4\ub97c \uc124\uc815\ud55c\ub2e4. – opt *\/<\/span><\/div>\n<\/li>\n
    71. \n
          if<\/span>(<\/span>SSL_CTX_use_PrivateKey_file(<\/span>ctx, “.\/client.key”<\/span>, SSL_FILETYPE_PEM)<\/span> <= 0<\/span>)<\/span> {<\/span><\/div>\n<\/li>\n
    72. \n
              ERR_print_errors_fp(<\/span>stderr)<\/span>;<\/div>\n<\/li>\n
    73. \n
              exit(<\/span>4<\/span>)<\/span>;<\/div>\n<\/li>\n
    74. \n
          }<\/span><\/div>\n<\/li>\n
    75. \n
          <\/div>\n<\/li>\n
    76. \n
          \/* \uac1c\uc778 \ud0a4\uac00 \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uac83\uc778\uc9c0 \ud655\uc778\ud55c\ub2e4. – opt *\/<\/span><\/div>\n<\/li>\n
    77. \n
          if<\/span>(<\/span>!SSL_CTX_check_private_key(<\/span>ctx)<\/span>)<\/span> {<\/span><\/div>\n<\/li>\n
    78. \n
              fprintf(<\/span>stderr, “Private key does not match the certificate public keyn<\/span>“<\/span>)<\/span>;<\/div>\n<\/li>\n
    79. \n
              exit(<\/span>5<\/span>)<\/span>;<\/div>\n<\/li>\n
    80. \n
          }<\/span><\/div>\n<\/li>\n
    81. \n
          <\/div>\n<\/li>\n
    82. \n
          \/\/CHK_SSL(err);<\/span><\/div>\n<\/li>\n
    83. \n
          <\/div>\n<\/li>\n
    84. \n
          \/* Create a socket and connect to server using normal socket calls. *\/<\/span><\/div>\n<\/li>\n
    85. \n
          sd = socket(<\/span>AF_INET, SOCK_STREAM, 0<\/span>)<\/span>;<\/div>\n<\/li>\n
    86. \n
          CHK_ERR(<\/span>sd, “socket”<\/span>)<\/span>;<\/div>\n<\/li>\n
    87. \n
          <\/div>\n<\/li>\n
    88. \n
          memset(<\/span>&sa, ‘\u0000<\/span>‘<\/span>, sizeof<\/span>(<\/span>sa)<\/span>)<\/span>;<\/div>\n<\/li>\n
    89. \n
          sa.sin_family<\/span> = AF_INET;<\/div>\n<\/li>\n
    90. \n
          sa.sin_addr<\/span>.s_addr<\/span> = inet_addr(<\/span>“127.0.0.1”<\/span>)<\/span>;        \/\/ Server IP Address <\/span><\/div>\n<\/li>\n
    91. \n
          sa.sin_port<\/span> = htons(<\/span>1111<\/span>)<\/span>;                \/\/ Server Port Number<\/span><\/div>\n<\/li>\n
    92. \n
          <\/div>\n<\/li>\n
    93. \n
          err = connect(<\/span>sd, (<\/span>struct<\/span> sockaddr*)<\/span>&sa, sizeof<\/span>(<\/span>sa)<\/span>)<\/span>;<\/div>\n<\/li>\n
    94. \n
          CHK_ERR(<\/span>err, “connect”<\/span>)<\/span>;<\/div>\n<\/li>\n
    95. \n
          <\/div>\n<\/li>\n
    96. \n
          \/* Now we have TCP connection. Start SSL negotiation. *\/<\/span><\/div>\n<\/li>\n
    97. \n
          ssl = SSL_new(<\/span>ctx)<\/span>;  \/\/ \uc138\uc158\uc744 \uc704\ud55c \uc790\uc6d0\uc744 \ud560\ub2f9\ubc1b\ub294\ub2e4.<\/span><\/div>\n<\/li>\n
    98. \n
          CHK_NULL(<\/span>ssl)<\/span>;<\/div>\n<\/li>\n
    99. \n
          <\/div>\n<\/li>\n
    100. \n
          SSL_set_fd(<\/span>ssl, sd)<\/span>;<\/div>\n<\/li>\n
    101. \n
          err = SSL_connect(<\/span>ssl)<\/span>; \/\/ \uae30\uc874\uc758 connect() \ud568\uc218 \ub300\uc2e0 \uc0ac\uc6a9\ud558\uc5ec \uc11c\ubc84\ub85c \uc811\uc18d\ud55c\ub2e4.<\/span><\/div>\n<\/li>\n
    102. \n
          CHK_NULL(<\/span>err)<\/span>;<\/div>\n<\/li>\n
    103. \n
          <\/div>\n<\/li>\n
    104. \n
          \/* Following two steps are optional and not required for data exchange to be successful. *\/<\/span><\/div>\n<\/li>\n
    105. \n
          <\/div>\n<\/li>\n
    106. \n
          \/* Get the Cipher – opt *\/<\/span><\/div>\n<\/li>\n
    107. \n
          printf<\/span><\/a>(<\/span>“SSL connection using %sn<\/span>“<\/span>, SSL_get_cipher(<\/span>ssl)<\/span>)<\/span>;<\/div>\n<\/li>\n
    108. \n
          <\/div>\n<\/li>\n
    109. \n
          \/* Get server’s certificate (note: beware of dynamic allocation) – opt *\/<\/span><\/div>\n<\/li>\n
    110. \n
          \/* \uc11c\ubc84\uc758 \uc778\uc99d\uc11c\ub97c \ubc1b\ub294\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    111. \n
          server_cert = SSL_get_peer_certificate(<\/span>ssl)<\/span>;<\/div>\n<\/li>\n
    112. \n
          CHK_NULL(<\/span>server_cert)<\/span>;<\/div>\n<\/li>\n
    113. \n
          printf<\/span><\/a>(<\/span>“Server certificate:n<\/span>“<\/span>)<\/span>;<\/div>\n<\/li>\n
    114. \n
          <\/div>\n<\/li>\n
    115. \n
          \/* \uc778\uc99d\uc11c\uc758 \uc774\ub984\uc744 \ucd9c\ub825\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    116. \n
          str = X509_NAME_oneline(<\/span>X509_get_subject_name(<\/span>server_cert)<\/span>, 0<\/span>, 0<\/span>)<\/span>;<\/div>\n<\/li>\n
    117. \n
          CHK_NULL(<\/span>str)<\/span>;<\/div>\n<\/li>\n
    118. \n
          printf<\/span><\/a>(<\/span>“t<\/span> subject: %sn<\/span>“<\/span>, str)<\/span>;<\/div>\n<\/li>\n
    119. \n
          OPENSSL_free(<\/span>str)<\/span>;<\/div>\n<\/li>\n
    120. \n
          <\/div>\n<\/li>\n
    121. \n
          \/* \uc778\uc99d\uc11c\uc758 issuer\ub97c \ucd9c\ub825\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    122. \n
          str = X509_NAME_oneline(<\/span>X509_get_issuer_name(<\/span>server_cert)<\/span>, 0<\/span>, 0<\/span>)<\/span>;<\/div>\n<\/li>\n
    123. \n
          CHK_NULL(<\/span>str)<\/span>;<\/div>\n<\/li>\n
    124. \n
          printf<\/span><\/a>(<\/span>“t<\/span> issuer: %sn<\/span>“<\/span>, str)<\/span>;<\/div>\n<\/li>\n
    125. \n
          OPENSSL_free(<\/span>str)<\/span>;<\/div>\n<\/li>\n
    126. \n
          <\/div>\n<\/li>\n
    127. \n
          \/* We could do all sorts of certificate verification stuff here before deallocating the certificate *\/<\/span><\/div>\n<\/li>\n
    128. \n
          X509_free(<\/span>server_cert)<\/span>;<\/div>\n<\/li>\n
    129. \n
          <\/div>\n<\/li>\n
    130. \n
          \/* \uc11c\ubc84\uc640 \ub370\uc774\ud130\ub97c \uc1a1\uc218\uc2e0 \ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    131. \n
          err = SSL_write(<\/span>ssl, “Hello World!”<\/span>, strlen(<\/span>“Hello World!”<\/span>)<\/span>)<\/span>;<\/div>\n<\/li>\n
    132. \n
          CHK_SSL(<\/span>err)<\/span>;<\/div>\n<\/li>\n
    133. \n
          <\/div>\n<\/li>\n
    134. \n
          err = SSL_read(<\/span>ssl, buf, sizeof<\/span>(<\/span>buf)<\/span> – 1<\/span>)<\/span>;<\/div>\n<\/li>\n
    135. \n
          CHK_SSL(<\/span>err)<\/span>;<\/div>\n<\/li>\n
    136. \n
          buf[<\/span>err]<\/span> = ‘\u0000<\/span>‘<\/span>;<\/div>\n<\/li>\n
    137. \n
          printf<\/span><\/a>(<\/span>“Got %d chars: ‘%s’n<\/span>“<\/span>, err, buf)<\/span>;<\/div>\n<\/li>\n
    138. \n
          SSL_shutdown(<\/span>ssl)<\/span>;    \/\/ SSL\ub85c \uc5f0\uacb0\ub41c \uc811\uc18d\uc744 \ud574\uc9c0\ud55c\ub2e4.<\/span><\/div>\n<\/li>\n
    139. \n
          <\/div>\n<\/li>\n
    140. \n
          \/* \ud560\ub2f9\ub41c \uc790\uc6d0\uc744 \ubc18\ud658\ud558\uace0 \uc885\ub8cc\ud55c\ub2e4. *\/<\/span><\/div>\n<\/li>\n
    141. \n
          close(<\/span>sd)<\/span>;<\/div>\n<\/li>\n
    142. \n
          SSL_free(<\/span>ssl)<\/span>;<\/div>\n<\/li>\n
    143. \n
          SSL_CTX_free(<\/span>ctx)<\/span>;<\/div>\n<\/li>\n
    144. \n
          <\/div>\n<\/li>\n
    145. \n
          return<\/span> 0<\/span>;<\/div>\n<\/li>\n
    146. \n
      }<\/span><\/div>\n<\/li>\n
    147. \n
       <\/div>\n<\/li>\n
    148. \n
       <\/div>\n<\/li>\n<\/ol>\n<\/fieldset>\n

      <\/p>\n","protected":false},"excerpt":{"rendered":"

       Openssl\uc744 \uc774\uc6a9\ud55c \uc554\ud638\ud654 \ud1b5\uc2e0  \uc11c\ubc84\ub294 \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud558\uc5ec \uac00\uc7a5 \uba3c\uc800 SSL_CTX\uc640 SSL \uad6c\uc870\uccb4\ub97c \uc120\uc5b8\ud558\uc5ec \uc554\ud638\ud654 \ud1b5\uc2e0\uc744 \uc704\ud55c \uc815\ubcf4\ub97c \uad00\ub9ac\ud560 \uc218 \uc788\ub3c4\ub85d \ud55c\ub2e4. \uadf8\ub9ac\uace0, SSL \uc138\uc158\uc744 \uc2dc\uc791\ud558\uae30 \uc704\ud55c \ucd08\uae30\uac12\uc744 \uc124\uc815\ud558\uace0, SSL_CTX_new() \ud568\uc218\ub97c \uc774\uc6a9\ud558\uc5ec SSL \ucee8\ud14d\uc2a4\ud2b8\ub97c \uc0dd\uc131\ud55c\ub2e4.  \ub2e4\uc74c \ub2e8\uacc4\ub294 \uc778\uc99d\uc11c\ub97c \uc774\uc6a9\ud558\uc5ec \uc11c\ubc84\uc640 … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[48],"tags":[362,363,364],"_links":{"self":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts\/603"}],"collection":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=603"}],"version-history":[{"count":0,"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts\/603\/revisions"}],"wp:attachment":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=603"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}