/* $OpenBSD: util.c,v 1.1.1.1 2018/11/07 01:08:49 bluhm Exp $ */ /* * Copyright (c) 2018 Alexander Bluhm * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include #include #include #include #include #include #include #include "util.h" void print_ciphers(STACK_OF(SSL_CIPHER) *cstack) { SSL_CIPHER *cipher; int i; for (i = 0; (cipher = sk_SSL_CIPHER_value(cstack, i)) != NULL; i++) printf("cipher %s\n", SSL_CIPHER_get_name(cipher)); if (fflush(stdout) != 0) err(1, "fflush stdout"); } void print_sockname(BIO *bio) { struct sockaddr_storage ss; socklen_t slen; char host[NI_MAXHOST], port[NI_MAXSERV]; int fd; if (BIO_get_fd(bio, &fd) <= 0) err_ssl(1, "BIO_get_fd"); slen = sizeof(ss); if (getsockname(fd, (struct sockaddr *)&ss, &slen) == -1) err(1, "getsockname"); if (getnameinfo((struct sockaddr *)&ss, ss.ss_len, host, sizeof(host), port, sizeof(port), NI_NUMERICHOST | NI_NUMERICSERV)) errx(1, "getnameinfo"); printf("sock: %s %s\n", host, port); if (fflush(stdout) != 0) err(1, "fflush stdout"); } void print_peername(BIO *bio) { struct sockaddr_storage ss; socklen_t slen; char host[NI_MAXHOST], port[NI_MAXSERV]; int fd; if (BIO_get_fd(bio, &fd) <= 0) err_ssl(1, "BIO_get_fd"); slen = sizeof(ss); if (getpeername(fd, (struct sockaddr *)&ss, &slen) == -1) err(1, "getpeername"); if (getnameinfo((struct sockaddr *)&ss, ss.ss_len, host, sizeof(host), port, sizeof(port), NI_NUMERICHOST | NI_NUMERICSERV)) errx(1, "getnameinfo"); printf("peer: %s %s\n", host, port); if (fflush(stdout) != 0) err(1, "fflush stdout"); } void err_ssl(int eval, const char *fmt, ...) { va_list ap; ERR_print_errors_fp(stderr); va_start(ap, fmt); verrx(eval, fmt, ap); va_end(ap); }