如何进行非阻塞的OpenSSL连接?

时间:2015-06-23 14:03:47

标签: c openssl nonblocking

我想创建一个非阻塞的OpenSSL连接

在此连接上 - 如果没有可用于读取的数据,则整个程序执行流程将在SSL_read()上停止。我希望如果没有可用于读取的数据,它会给我像WANT_READ这样的返回值,而且我知道没有更多的数据可用。

char *sslRead (connection *c)
{
const int readSize = 1024;
char *rc = NULL;
int r;
int received, count = 0;
int ReallocSize = 0;
char buffer[1024];

if (c)
{
    while (1)
    {
        if (!rc)
        {
            rc = malloc (readSize + 1); 
            if (rc == NULL)
                printf("the major error have happen. leave program\n");
        }
        else
        {
            ReallocSize = (count + 1) * (readSize + 1);
            rc = realloc (rc, ReallocSize);
        }

        // if i have no data available for read after reading data, 
        // this call will not return anything and wait for more data

        // i want change this non blocking connections
        received = SSL_read (c->sslHandle, buffer, readSize);

        buffer[received] = '\0';


        if (received <= 0)
        {
            printf(" received equal to or less than 0\n");
            switch (SSL_get_error(c->sslHandle, r))
            {
            case SSL_ERROR_NONE:
                printf("SSL_ERROR_NONE\n");
                break;   
            case SSL_ERROR_ZERO_RETURN: 
                printf("SSL_ERROR_ZERO_RETURN\n");
                break;   
            case SSL_ERROR_WANT_READ: 
                printf("SSL_ERROR_WANT_READ\n");
                break;
            default:
                printf("error happens %i\n", r); 
            }     
            break;
        }

        count++;
    }
}
return rc;

}

这是我如何建立连接

connection *sslConnect (void)
{
   connection *c;

   c = malloc (sizeof (connection));
   c->sslHandle = NULL;
   c->sslContext = NULL;

   c->socket = tcpConnect ();
   if (c->socket)
   {
    // Register the error strings for libcrypto & libssl
    SSL_load_error_strings ();
    // Register the available ciphers and digests
    SSL_library_init ();

    // New context saying we are a client, and using SSL 2 or 3
    c->sslContext = SSL_CTX_new (SSLv23_client_method ());
    if (c->sslContext == NULL)
    ERR_print_errors_fp (stderr);

    // Create an SSL struct for the connection
    c->sslHandle = SSL_new (c->sslContext);
    if (c->sslHandle == NULL)
    ERR_print_errors_fp (stderr);

    // Connect the SSL struct to our connection
    if (!SSL_set_fd (c->sslHandle, c->socket))
    ERR_print_errors_fp (stderr);

    // Initiate SSL handshake
    if (SSL_connect (c->sslHandle) != 1)
    ERR_print_errors_fp (stderr);
    }
    else
    {
     perror ("Connect failed");
    }

    return c;
}
非常感谢你。

1 个答案:

答案 0 :(得分:2)

创建非阻塞套接字是非阻塞连接的先决条件......

以下步骤总结:(请参阅下面链接的网站中的完整说明)

1) 调用fcntl()API将套接字描述符的当前标志设置检索到本地变量中。

2) 在我们的局部变量中,设置O_NONBLOCK(非阻塞)标志。 (小心,当然,不要篡改其他旗帜)

3) 调用fcntl()API将描述符的标志设置为局部变量中的值。

middleware

假设现有套接字,以下实现上述步骤:

BOOL SetSocketBlockingEnabled(SOCKET fd, BOOL blocking)
{
     if (fd < 0) return FALSE;  
   #ifdef WIN32
       unsigned long mode = blocking ? 0 : 1;
       return (ioctlsocket(fd, FIONBIO, &mode) == 0) ? TRUE : FALSE;
   #else
       int flags = fcntl(fd, F_GETFL, 0);
       if (flags < 0) return false;
       flags = blocking ? (flags&~O_NONBLOCK) : (flags|O_NONBLOCK);
       return (fcntl(fd, F_SETFL, flags) == 0) ? TRUE : FALSE;
   #endif
}

获得非阻塞套接字后,请参阅 read more on non-blocking sockets techniques here ,说明如何进行非阻塞连接