comparison src/gnutls.c @ 110606:b4f4c3e9b976

Add debugging to the gnutls library, and finish handshaking when it's done.

110605:5bd3c6bdbcb0

  global_initialized = 0;

  return gnutls_make_error (GNUTLS_E_SUCCESS);
}

DEFUN ("gnutls-boot", Fgnutls_boot, Sgnutls_boot, 3, 6, 0,
       doc: /* Initializes client-mode GnuTLS for process PROC.
Currently only client mode is supported.  Returns a success/failure
value you can check with `gnutls-errorp'.

  CHECK_SYMBOL (type);
  CHECK_STRING (priority_string);

  state = XPROCESS (proc)->gnutls_state;

  /* always initialize globals.  */
  global_init = gnutls_emacs_global_init ();
  if (! NILP (Fgnutls_errorp (global_init)))
    return global_init;

  /* deinit and free resources.  */
  if (GNUTLS_INITSTAGE (proc) >= GNUTLS_STAGE_CRED_ALLOC)
  {
      message ("gnutls: deallocating certificates");

      if (EQ (type, Qgnutls_x509pki))
      {
          message ("gnutls: deallocating x509 certificates");

          x509_cred = XPROCESS (proc)->x509_cred;
          gnutls_certificate_free_credentials (x509_cred);
      }
      else if (EQ (type, Qgnutls_anon))
      {
          message ("gnutls: deallocating anon certificates");

          anon_cred = XPROCESS (proc)->anon_cred;
          gnutls_anon_free_client_credentials (anon_cred);
      }
      else
      {

          ret = GNUTLS_EMACS_ERROR_INVALID_TYPE;
      }

      if (GNUTLS_INITSTAGE (proc) >= GNUTLS_STAGE_INIT)
      {
          message ("gnutls: deinitializing");

          Fgnutls_deinit (proc);
      }
  }

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_EMPTY;

  message ("gnutls: allocating credentials");

  if (EQ (type, Qgnutls_x509pki))
  {
      message ("gnutls: allocating x509 credentials");

      x509_cred = XPROCESS (proc)->x509_cred;
      if (gnutls_certificate_allocate_credentials (&x509_cred) < 0)
        memory_full ();
  }
  else if (EQ (type, Qgnutls_anon))
  {
      message ("gnutls: allocating anon credentials");

      anon_cred = XPROCESS (proc)->anon_cred;
      if (gnutls_anon_allocate_client_credentials (&anon_cred) < 0)
        memory_full ();
  }
  else

  if (ret < GNUTLS_E_SUCCESS)
      return gnutls_make_error (ret);

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_CRED_ALLOC;

  message ("gnutls: setting the trustfile");

  if (EQ (type, Qgnutls_x509pki))
  {
      if (STRINGP (trustfile))
      {

             XSTRING (trustfile)->data,
             file_format);

          if (ret < GNUTLS_E_SUCCESS)
            return gnutls_make_error (ret);

          message ("gnutls: processed %d CA certificates", ret);
      }

      message ("gnutls: setting the keyfile");

      if (STRINGP (keyfile))
      {
          ret = gnutls_certificate_set_x509_crl_file
            (x509_cred,
             XSTRING (keyfile)->data,
             file_format);

          if (ret < GNUTLS_E_SUCCESS)
            return gnutls_make_error (ret);

          message ("gnutls: processed %d CRL(s)", ret);
      }
  }

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_FILES;

  message ("gnutls: gnutls_init");

  ret = gnutls_init (&state, GNUTLS_CLIENT);

  if (ret < GNUTLS_E_SUCCESS)
      return gnutls_make_error (ret);

  XPROCESS (proc)->gnutls_state = state;

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_INIT;

  message ("gnutls: setting the priority string");

  ret = gnutls_priority_set_direct(state,
                                   (char*) SDATA (priority_string),
                                   NULL);

                               XPROCESS (proc)->outfd);

    GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_TRANSPORT_POINTERS_SET;
  }

  message ("gnutls: handshake: handshaking");
  ret = gnutls_handshake (state);

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_HANDSHAKE_TRIED;

  if (GNUTLS_E_SUCCESS == ret)
  {
    /* here we're finally done.  */
    GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_READY;
  }

  return gnutls_make_error (ret);
}

110606:b4f4c3e9b976

  global_initialized = 0;

  return gnutls_make_error (GNUTLS_E_SUCCESS);
}

static void gnutls_log_function (int level, const char* string) {
  message("debug: %s", string);
}

DEFUN ("gnutls-boot", Fgnutls_boot, Sgnutls_boot, 3, 6, 0,
       doc: /* Initializes client-mode GnuTLS for process PROC.
Currently only client mode is supported.  Returns a success/failure
value you can check with `gnutls-errorp'.

  CHECK_SYMBOL (type);
  CHECK_STRING (priority_string);

  state = XPROCESS (proc)->gnutls_state;

  gnutls_global_set_log_level(4);
  gnutls_global_set_log_function(gnutls_log_function);
  
  /* always initialize globals.  */
  global_init = gnutls_emacs_global_init ();
  if (! NILP (Fgnutls_errorp (global_init)))
    return global_init;

  /* deinit and free resources.  */
  if (GNUTLS_INITSTAGE (proc) >= GNUTLS_STAGE_CRED_ALLOC)
  {
      if (EQ (type, Qgnutls_x509pki))
      {
          x509_cred = XPROCESS (proc)->x509_cred;
          gnutls_certificate_free_credentials (x509_cred);
      }
      else if (EQ (type, Qgnutls_anon))
      {
          anon_cred = XPROCESS (proc)->anon_cred;
          gnutls_anon_free_client_credentials (anon_cred);
      }
      else
      {

          ret = GNUTLS_EMACS_ERROR_INVALID_TYPE;
      }

      if (GNUTLS_INITSTAGE (proc) >= GNUTLS_STAGE_INIT)
      {
          Fgnutls_deinit (proc);
      }
  }

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_EMPTY;

  if (EQ (type, Qgnutls_x509pki))
  {
      x509_cred = XPROCESS (proc)->x509_cred;
      if (gnutls_certificate_allocate_credentials (&x509_cred) < 0)
        memory_full ();
  }
  else if (EQ (type, Qgnutls_anon))
  {
      anon_cred = XPROCESS (proc)->anon_cred;
      if (gnutls_anon_allocate_client_credentials (&anon_cred) < 0)
        memory_full ();
  }
  else

  if (ret < GNUTLS_E_SUCCESS)
      return gnutls_make_error (ret);

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_CRED_ALLOC;

  if (EQ (type, Qgnutls_x509pki))
  {
      if (STRINGP (trustfile))
      {

             XSTRING (trustfile)->data,
             file_format);

          if (ret < GNUTLS_E_SUCCESS)
            return gnutls_make_error (ret);
      }

      if (STRINGP (keyfile))
      {
          ret = gnutls_certificate_set_x509_crl_file
            (x509_cred,
             XSTRING (keyfile)->data,
             file_format);

          if (ret < GNUTLS_E_SUCCESS)
            return gnutls_make_error (ret);
      }
  }

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_FILES;

  ret = gnutls_init (&state, GNUTLS_CLIENT);

  if (ret < GNUTLS_E_SUCCESS)
      return gnutls_make_error (ret);

  XPROCESS (proc)->gnutls_state = state;

  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_INIT;

  ret = gnutls_priority_set_direct(state,
                                   (char*) SDATA (priority_string),
                                   NULL);

                               XPROCESS (proc)->outfd);

    GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_TRANSPORT_POINTERS_SET;
  }

  ret = gnutls_handshake (state);
  GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_HANDSHAKE_TRIED;

  if (GNUTLS_E_SUCCESS == ret || ret == 0)
  {
    /* here we're finally done.  */
    GNUTLS_INITSTAGE (proc) = GNUTLS_STAGE_READY;
    return Qt;
  }

  return gnutls_make_error (ret);
}