request.c

The Stanford IBE library is a C implementation of the Boneh-Franklin identity-based encryption sche

/* frontend to IBE_request() in ibe_lib.cc
 * (requests private keys)
 * Ben Lynn
 */
/*
Copyright (C) 2001 Benjamin Lynn ([e-mail])

See LICENSE for license
*/
#include <openssl/err.h>
#include <openssl/ssl.h>
#include <stdio.h>
#include <string.h>

#include "netstuff.h"

#include "config.h"
#include "ibe_progs.h"

static SSL *ssl;
static void write_string(char *s);
static char *emailaddr;
static int single_request(char *hostname, int port);

static char password[128];
SSL_CTX *ssl_ctx;

int myssl_readline(SSL *ssl, void *vptr, int maxlen)
//slow; faster versions will require trickery to keep them thread-safe
//from UNP1
{
    int n, rc;
    char c, *ptr;

    ptr = vptr;
    for (n=1; n<maxlen; n++) {
	if ((rc = SSL_read(ssl, &c, 1)) == 1) {
	    *ptr++ = c;
	    if (c == '\n') break;
	} else if (rc == 0) {
	    if (n == 1) return 0;
	    else break;
	} else {
	    return rc;
	}
    }

    *ptr = '\0';
    return n;
}

void write_string(char *s)
{
//cout << "Writing " << s << endl;
    int status;
    status = SSL_write(ssl, s, strlen(s));
//cout << "status = " << status << endl;
    if (status <= 0) {
	fprintf(stderr, "write_string: failure\n");
	exit(1);
    }
}

int single_request(char *hostname, int port)
{
    int sockfd;
    int status;

    struct sockaddr_in server_addr;
    struct hostent *hostp = NULL;
    //Linux manpage says socklen_t, Solaris says size_t
    //socklen_t sockaddrsize = sizeof(struct sockaddr);
    size_t sockaddrsize = sizeof(struct sockaddr);

    char buf[1024];
    int buflen = 1024;
    int len;
    char *servername;
    char *ptr;
    int i;

    printf("opening socket...\n");
    sockfd = socket(PF_INET, SOCK_STREAM, 0);
    if (sockfd == -1) {
	perror("socket");
	return(-1);
    }

    server_addr.sin_family = AF_INET;
    server_addr.sin_port = htons(port);

    hostp = gethostbyname(hostname);
    if (NULL == hostp) {
	hostp = gethostbyaddr(hostname, strlen(hostname), AF_INET);
	if (NULL == hostp) {
	    perror("Error resolving server address");
	    return(-1);
	}
    }

    server_addr.sin_addr = *((struct in_addr *)hostp->h_addr);

    printf("connecting...\n");
    status = connect(sockfd, (struct sockaddr *) &server_addr, sockaddrsize);
    if (-1 == status) {
        perror("connect");
	return(-1);
    }

    ssl = SSL_new(ssl_ctx);
    if (!ssl) {
	fprintf(stderr, "SSL_new: failure\n");
	return(-1);
    }

    status = SSL_set_fd(ssl, sockfd);
    if (!status) {
	fprintf(stderr, "SSL_set_fd: failure\n");
	return(-1);
    }

    status = SSL_connect(ssl);
    if (status != 1) {
	fprintf(stderr, "SSL_connect: failure\n");

	printf("status %d\n", status);
	SSL_load_error_strings();
	printf("%d: ", SSL_get_error(ssl, status));
	printf("%s\n", ERR_error_string(SSL_get_error(ssl, status), NULL));

	return(-1);
    }

    //XXX: odd hack
    write_string("GET /\n");
	
    for (;;) {
	char marker[] = "<!-- PKG: ";
	i = strlen(marker);
	len = myssl_readline(ssl, buf, buflen);
	if (len <= 0) {
	    fprintf(stderr, "Doesn't seem to be a PKG\n");
	    return(-1);
	}
	if (!strncmp(buf, marker, i)) break;
    }

    servername = &buf[i];
    ptr = strstr(servername, " -->");
    if (ptr) ptr[0] = 0;

    SSL_shutdown(ssl);
    shutdown(sockfd, 2);

    printf("server name: %s\n", servername);
    sockfd = socket(PF_INET, SOCK_STREAM, 0);
    if (sockfd == -1) {
	perror("socket");
	return(-1);
    }

    status = connect(sockfd, (struct sockaddr *) &server_addr, sockaddrsize);
    if (-1 == status) {
        perror("connect");
	return(-1);
    }

    status = SSL_set_fd(ssl, sockfd);
    if (!status) {
	fprintf(stderr, "SSL_set_fd: failure\n");
	return(-1);
    }

    status = SSL_connect(ssl);
    if (status != 1) {
	fprintf(stderr, "SSL_connect: failure\n");
	return(-1);
    }

    status = EVP_read_pw_string(password, 100, "share password: ", 1);
    if (status) {
	fprintf(stderr, "error reading password\n");
	return 1;
    }

    write_string("POST /\n");
    write_string("Content-Length: ");

    //Windows doesn't have snprintf?

    sprintf(buf, "%d\n\n", 16 + strlen(emailaddr) + strlen(password));

    write_string(buf);

    sprintf(buf, "mail=%s&password=%s\n", emailaddr, password);

    write_string(buf);

    for (;;) {
	len = myssl_readline(ssl, buf, buflen);
	if (len <= 0) break;
	printf("server: %s", buf);
    }
    status = SSL_shutdown(ssl);
    if (status != 1) {
	fprintf(stderr, "SSL_shutdown: failure\n");
	printf("status %d\n", status);
	SSL_load_error_strings();
	printf("%d: ", SSL_get_error(ssl, status));
	printf("%s\n", ERR_error_string(SSL_get_error(ssl, status), NULL));
    }

    return 1;
}

int request(int argc, char **argv)
{
    int default_port;
    char **servers;
    int status;
    int t = IBE_threshold(params);

    char *hostname[t];
    int port[t];

    int i;
    int success;

    netstartupjunk();

    if (argc < 2) {
	fprintf(stderr, "Usage: request ID\n");
	return(1);
    }

    SSL_library_init();

    ssl_ctx = SSL_CTX_new(SSLv3_method());
    if (!ssl_ctx) {
	fprintf(stderr, "SSL_CTX_new: failure\n");
	return(-1);
    }

    emailaddr = argv[1];
    default_port = GetIntParam(cnfctx, "default_port", 0, 31831);

    printf("Threshold: %d\n", t);
    servers = GetListParam(cnfctx, "servers", 0, NULL);
    if (!servers) {
	fprintf(stderr, "no servers given in config file\n");
	return(1);
    }

    SSL_library_init();
    for (i=success=0; success<t; i++) {
	int len;
	int j;
	if (!servers[i]) {
	    fprintf(stderr, "not enough working servers\n");
	    return(1);
	}
	len = strlen(servers[i]);
	for (j=0; j<len && servers[i][j] != ':'; j++);
	hostname[i] = (char *) malloc(j + 1);
	memcpy(hostname[i], servers[i], j);
	hostname[i][j] = 0;
	if (j >= len - 1) {
	    port[i] = default_port;
	} else {
	    port[i] = atoi(&servers[i][j+1]);
	}
	printf("trying: %s:%d\n", hostname[i], port[i]);
	status = single_request(hostname[i], port[i]);
	if (status == 1) success++;
    }

    for (i=0; i<t; i++) {
	free(hostname[i]);
    }

    return(0);
}