/* serv.cpp  -  Minimal ssleay server for Unix   30.9.1996, Sampo Kellomaki <sampo@iki.fi> *//* mangled to work with SSLeay-0.9.0b and OpenSSL 0.9.2b   Simplified to be even more minimal   12/98 - 4/99 Wade Scholine <wades@mail.cybg.com> *//*
【版權(quán)聲明】
本openssl的VC軟件包由王志海（DragonKing）根據(jù)openssl整理提供，Eric Young's擁有對(duì)所有源代碼的最終版權(quán)，一切應(yīng)用應(yīng)該遵照openssl的聲明。該版本為openssl-0.9.6h
歡迎聯(lián)系本人或提意見(jiàn)：
Email：wzhah@263.net
HomePage: http://openssl.126.com  openssl中文專(zhuān)業(yè)論壇，提供大量中文資料]
*/#include <stdio.h>//#include <unistd.h>#include <stdlib.h>#include <memory.h>#include <errno.h>#include <sys/types.h>#include <winsock.h>//#include <netinet/in.h>//#include <arpa/inet.h>//#include <netdb.h>#include <openssl/rsa.h>       /* SSLeay stuff */#include <openssl/crypto.h>#include <openssl/x509.h>#include <openssl/pem.h>#include <openssl/ssl.h>#include <openssl/err.h>/* define HOME to be dir for key and cert files... */
#ifndef _DEBUG#define HOME "../../"
#else
#define HOME "../"
#endif/* Make these what you want for cert & key files */#define CERTF  HOME "chcert.pem"#define KEYF  HOME  "chkey.pem"#define CHK_NULL(x) if ((x)==NULL) exit (1)#define CHK_ERR(err,s) if ((err)==-1) { perror(s); exit(1); }#define CHK_SSL(err) if ((err)==-1) { ERR_print_errors_fp(stderr); exit(2); }void main (){  int err;  int listen_sd;  int sd;  size_t client_len;  SSL_CTX* ctx;  SSL*     ssl;  X509*    client_cert;  char*    str;  char     buf [4096];  SSL_METHOD *meth;  WSADATA wsaData;
  struct sockaddr_in sa_serv;
  struct sockaddr_in sa_cli;
 if(::WSAStartup(0x202,&wsaData)!=0)
	{
		//sprintf(str,"\nError in Startup session.\n");
		//m_dlg->WPrintf(str);
		WSACleanup();
		exit(0);
	};  /* SSL preliminaries. We keep the certificate and key with the context. */  SSL_load_error_strings();  SSLeay_add_ssl_algorithms();  meth = SSLv23_server_method();  ctx = SSL_CTX_new (meth);  if (!ctx) {    printf("創(chuàng)建SSL_CTX失敗!\n");    exit(2);  }    if (SSL_CTX_use_certificate_file(ctx, CERTF, SSL_FILETYPE_PEM) <= 0) {    printf("加載證書(shū)失敗!\n");    exit(3);  }  if (SSL_CTX_use_PrivateKey_file(ctx, KEYF, SSL_FILETYPE_PEM) <= 0) {    printf("加載私鑰失敗!\n");    exit(4);  }  if (!SSL_CTX_check_private_key(ctx)) {    printf("密鑰證書(shū)不匹配！\n");    exit(5);  }  /* ----------------------------------------------- */  /* Prepare TCP socket for receiving connections */  listen_sd = socket (AF_INET, SOCK_STREAM, 0);   
  CHK_ERR(listen_sd, "socket");    memset (&sa_serv, '\0', sizeof(sa_serv));  sa_serv.sin_family      = AF_INET;  sa_serv.sin_addr.s_addr = INADDR_ANY;  sa_serv.sin_port        = htons (1111);          /* Server Port number */    err = bind(listen_sd, (struct sockaddr*) &sa_serv, sizeof (sa_serv));                   
  CHK_ERR(err, "bind");	       /* Receive a TCP connection. */	       err = listen (listen_sd, 5);                    
  CHK_ERR(err, "listen");    client_len = sizeof(sa_cli);  sd = accept (listen_sd, (struct sockaddr*) &sa_cli, (int*)&client_len);  CHK_ERR(sd, "accept");  closesocket (listen_sd);  printf ("Connection from %lx, port %x\n",	  sa_cli.sin_addr.s_addr, sa_cli.sin_port);    /* ----------------------------------------------- */  /* TCP connection is ready. Do server side SSL. */  ssl = SSL_new (ctx);                           CHK_NULL(ssl);  SSL_set_fd (ssl, sd);  err = SSL_accept (ssl);                        CHK_SSL(err);    /* Get the cipher - opt */    printf ("SSL connection using %s\n", SSL_get_cipher (ssl));    /* Get client's certificate (note: beware of dynamic allocation) - opt */  client_cert = SSL_get_peer_certificate (ssl);  if (client_cert != NULL) {    printf ("Client certificate:\n");        str = X509_NAME_oneline (X509_get_subject_name (client_cert), 0, 0);    CHK_NULL(str);    printf ("\t subject: %s\n", str);    OPENSSL_free (str);        str = X509_NAME_oneline (X509_get_issuer_name  (client_cert), 0, 0);    CHK_NULL(str);    printf ("\t issuer: %s\n", str);    OPENSSL_free (str);        /* We could do all sorts of certificate verification stuff here before       deallocating the certificate. */        X509_free (client_cert);  } else    printf ("Client does not have certificate.\n");  /* DATA EXCHANGE - Receive message and send reply. */  err = SSL_read (ssl, buf, sizeof(buf) - 1);                   CHK_SSL(err);  buf[err] = '\0';  printf ("Got %d chars:'%s'\n", err, buf);    err = SSL_write (ssl, "I hear you.", strlen("I hear you."));  CHK_SSL(err);  /* Clean up. */  closesocket (sd);  SSL_free (ssl);  SSL_CTX_free (ctx);}/* EOF - serv.cpp */