add bps project
This commit is contained in:
josi
parent
e05eede82f
commit
41db2659c8
@ -0,0 +1,27 @@
|
||||
# JS 2024-02-08
|
||||
# - doplnenie rozsirujucich parametrov pre CA certifikaty podla standardu
|
||||
# x509v3, ktory sa v OpenSSL 3.2 vyuzíva by default
|
||||
# - parameter 'basicConstraints = CA:true' musi byt definovany!
|
||||
#
|
||||
# Viac informacii:
|
||||
# https://www.openssl.org/docs/manmaster/man5/x509v3_config.html
|
||||
|
||||
[req]
|
||||
prompt = no
|
||||
distinguished_name = req_distinguished_name
|
||||
x509_extensions = v3_ca
|
||||
|
||||
[req_distinguished_name]
|
||||
C = US
|
||||
ST = Fake State
|
||||
L = Fake Locality
|
||||
O = Fake Company
|
||||
# OU = Org Unit Name
|
||||
# emailAddress = info@example.com
|
||||
CN = local.dev
|
||||
|
||||
[ v3_ca ]
|
||||
basicConstraints = critical, CA:true
|
||||
#subjectKeyIdentifier = hash
|
||||
#authorityKeyIdentifier = keyid:always,issuer
|
||||
#keyUsage = critical, digitalSignature, cRLSign, keyCertSign
|
||||
@ -0,0 +1,8 @@
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
subjectAltName = @alt_names
|
||||
|
||||
[alt_names]
|
||||
DNS.1 = dev.mergebot.com
|
||||
DNS.2 = dev.mergebot.com.192.168.1.19.xip.io
|
||||
@ -0,0 +1,30 @@
|
||||
:: Meno: Martin Janitor
|
||||
:: Datum: 26.2.2023
|
||||
:: Verzia: 1.0
|
||||
:: Uprava: Modifikacia suboru postup pre uspesne
|
||||
:: generovanie ECC certifikatov s vyuzitim
|
||||
:: predpripravenych konfiguracnych suborov
|
||||
|
||||
|
||||
rem Priklad postupu na vytvorenie ECC certifikatov
|
||||
::----------------------------------------------
|
||||
|
||||
::1. Generovanie certifikatu autority
|
||||
:: 1.1 Vygenerovanie sukromneho kluca autority pomocou krivky prime256v1
|
||||
openssl ecparam -genkey -name prime256v1 -out myCA.key
|
||||
:: 1.2 Vygenerovanie certifikatu autority s dobou platnosti 1 rok
|
||||
openssl req -x509 -config certificate-authority-options.conf -new -nodes -key myCA.key -sha256 -days 365 -out myCA.pem
|
||||
::2. Generovanie certifikatu servera
|
||||
:: 2.1 Vygenerovanie sukromneho kluca servera pomocou krivky prime256v1
|
||||
openssl ecparam -genkey -name prime256v1 -out server.key
|
||||
:: 2.2 Vytvorenie ziadosti servera o podpis certifikatu autoritou
|
||||
openssl req -config options.conf -new -key server.key -out server_ziadost.csr
|
||||
:: 2.3 Vygenerovanie podpisaneho certifikatu autoritou s dobou platnosti 1 rok
|
||||
openssl x509 -req -in server_ziadost.csr -CA myCA.pem -CAkey myCA.key -CAcreateserial -out server.pem -days 365 -sha256 -extfile server.ext
|
||||
::3. Generovanie certifikatu klienta
|
||||
:: 3.1 Vygenerovanie sukromneho kluca klienta pomocou krivky prime256v1
|
||||
openssl ecparam -genkey -name prime256v1 -out client.key
|
||||
:: 3.2 Vytvorenie ziadosti klienta o podpis certifikatu autoritou
|
||||
openssl req -config options.conf -new -key client.key -out klient_ziadost.csr
|
||||
:: 3.3 Vygenerovanie podpisaneho certifikatu autoritou s dobou platnosti 1 rok
|
||||
openssl x509 -req -in klient_ziadost.csr -CA myCA.pem -CAkey myCA.key -CAcreateserial -out client.pem -days 365 -sha256 -extfile client.ext
|
||||
@ -0,0 +1,12 @@
|
||||
[req]
|
||||
prompt = no
|
||||
distinguished_name = req_distinguished_name
|
||||
|
||||
[req_distinguished_name]
|
||||
C = US
|
||||
ST = Fake State
|
||||
L = Fake Locality
|
||||
O = Fake Company
|
||||
# OU = Org Unit Name
|
||||
# emailAddress = info@example.com
|
||||
CN = local.dev
|
||||
@ -0,0 +1,8 @@
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
subjectAltName = @alt_names
|
||||
|
||||
[alt_names]
|
||||
DNS.1 = dev.mergebot.com
|
||||
DNS.2 = dev.mergebot.com.192.168.1.19.xip.io
|
||||
@ -0,0 +1,27 @@
|
||||
Tento priecinok obsahuje konfiguracne subory spolu so skriptom, ktory umoznuje
|
||||
generovanie PQ algoritmov.
|
||||
|
||||
Na generovanie PQ algoritmov je nutne aktivovat oqsprovidera. Navod na aktivaciu
|
||||
sa nachadza v zlozke /oqsprovider/
|
||||
|
||||
Dostupne PQ algoritmy (20.02.2024)
|
||||
- zalezi tiez na nastaveniach kniznic liboqs a oqs-provider viď https://github.com/open-quantum-safe/oqs-provider/blob/main/ALGORITHMS.md
|
||||
dilithium2
|
||||
dilithium3
|
||||
dilithium5
|
||||
falcon512
|
||||
falcon1024
|
||||
sphincssha2128fsimple
|
||||
sphincssha2128ssimple
|
||||
sphincssha2192fsimple
|
||||
sphincssha2192ssimple
|
||||
sphincssha2256fsimple
|
||||
sphincssha2256ssimple
|
||||
sphincsshake128fsimple
|
||||
|
||||
Nepodporovane algoritmy pri defaultnom nastaveni kniznice
|
||||
sphincsshake128ssimple
|
||||
sphincsshake192fsimple
|
||||
sphincsshake192ssimple
|
||||
sphincsshake256fsimple
|
||||
sphincsshake256ssimple
|
||||
@ -0,0 +1,27 @@
|
||||
# JS 2024-02-08
|
||||
# - doplnenie rozsirujucich parametrov pre CA certifikaty podla standardu
|
||||
# x509v3, ktory sa v OpenSSL 3.2 vyuzíva by default
|
||||
# - parameter 'basicConstraints = CA:true' musi byt definovany!
|
||||
#
|
||||
# Viac informacii:
|
||||
# https://www.openssl.org/docs/manmaster/man5/x509v3_config.html
|
||||
|
||||
[req]
|
||||
prompt = no
|
||||
distinguished_name = req_distinguished_name
|
||||
x509_extensions = v3_ca
|
||||
|
||||
[req_distinguished_name]
|
||||
C = US
|
||||
ST = Fake State
|
||||
L = Fake Locality
|
||||
O = Fake Company
|
||||
# OU = Org Unit Name
|
||||
# emailAddress = info@example.com
|
||||
CN = local.dev
|
||||
|
||||
[ v3_ca ]
|
||||
basicConstraints = critical, CA:true
|
||||
#subjectKeyIdentifier = hash
|
||||
#authorityKeyIdentifier = keyid:always,issuer
|
||||
#keyUsage = critical, digitalSignature, cRLSign, keyCertSign
|
||||
@ -0,0 +1,8 @@
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
subjectAltName = @alt_names
|
||||
|
||||
[alt_names]
|
||||
DNS.1 = dev.mergebot.com
|
||||
DNS.2 = dev.mergebot.com.192.168.1.19.xip.io
|
||||
@ -0,0 +1,30 @@
|
||||
:: JS 2024-02-19
|
||||
:: Skript na generovanie PQ certifikatov
|
||||
:: Dostupne PQ algoritmy, ktore je mozne doplnat za prepinac -algorithm, sa nachadzaju v README
|
||||
|
||||
rem myCA
|
||||
rem .....
|
||||
openssl genpkey -algorithm dilithium5 -out myCA.key
|
||||
openssl req -x509 -config certificate-authority-options.conf -new -nodes -key myCA.key -sha256 -days 1825 -out myCA.pem
|
||||
|
||||
rem server
|
||||
rem ......
|
||||
openssl genpkey -algorithm dilithium5 -out client.key
|
||||
openssl req -config options.conf -new -key client.key -out client.csr
|
||||
openssl x509 -req -in client.csr -CA myCA.pem -CAkey myCA.key -CAcreateserial -out client.pem -days 1825
|
||||
|
||||
rem client
|
||||
rem .......
|
||||
openssl genpkey -algorithm dilithium5 -out server.key
|
||||
openssl req -config options.conf -new -key server.key -out server.csr
|
||||
openssl x509 -req -in server.csr -CA myCA.pem -CAkey myCA.key -CAcreateserial -out server.pem -days 1825
|
||||
|
||||
openssl verify -CAfile ./myCA.pem ./client.pem
|
||||
openssl verify -CAfile ./myCA.pem ./server.pem
|
||||
|
||||
del *.csr
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -0,0 +1,12 @@
|
||||
[req]
|
||||
prompt = no
|
||||
distinguished_name = req_distinguished_name
|
||||
|
||||
[req_distinguished_name]
|
||||
C = US
|
||||
ST = Fake State
|
||||
L = Fake Locality
|
||||
O = Fake Company
|
||||
# OU = Org Unit Name
|
||||
# emailAddress = info@example.com
|
||||
CN = local.dev
|
||||
@ -0,0 +1,8 @@
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
subjectAltName = @alt_names
|
||||
|
||||
[alt_names]
|
||||
DNS.1 = dev.mergebot.com
|
||||
DNS.2 = dev.mergebot.com.192.168.1.19.xip.io
|
||||
@ -0,0 +1,27 @@
|
||||
# JS 2024-02-08
|
||||
# - doplnenie rozsirujucich parametrov pre CA certifikaty podla standardu
|
||||
# x509v3, ktory sa v OpenSSL 3.2 vyuzíva by default
|
||||
# - parameter 'basicConstraints = CA:true' musi byt definovany!
|
||||
#
|
||||
# Viac informacii:
|
||||
# https://www.openssl.org/docs/manmaster/man5/x509v3_config.html
|
||||
|
||||
[req]
|
||||
prompt = no
|
||||
distinguished_name = req_distinguished_name
|
||||
x509_extensions = v3_ca
|
||||
|
||||
[req_distinguished_name]
|
||||
C = US
|
||||
ST = Fake State
|
||||
L = Fake Locality
|
||||
O = Fake Company
|
||||
# OU = Org Unit Name
|
||||
# emailAddress = info@example.com
|
||||
CN = local.dev
|
||||
|
||||
[ v3_ca ]
|
||||
basicConstraints = critical, CA:true
|
||||
#subjectKeyIdentifier = hash
|
||||
#authorityKeyIdentifier = keyid:always,issuer
|
||||
#keyUsage = critical, digitalSignature, cRLSign, keyCertSign
|
||||
@ -0,0 +1,8 @@
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
subjectAltName = @alt_names
|
||||
|
||||
[alt_names]
|
||||
DNS.1 = dev.mergebot.com
|
||||
DNS.2 = dev.mergebot.com.192.168.1.19.xip.io
|
||||
@ -0,0 +1,24 @@
|
||||
:: JS 2024-02-08
|
||||
:: Zmena velkosti klucov z 1024 ma 2048 podla novych standardov OpenSSL 3.2
|
||||
:: OpenSSL 3.2: The default SSL/TLS security level has been changed from 1 to 2
|
||||
:: https://www.openssl.org/docs/man3.1/man3/SSL_CTX_set_security_level.html
|
||||
|
||||
|
||||
rem myCA
|
||||
rem .....
|
||||
openssl genrsa -out myCA.key 2048
|
||||
openssl req -x509 -config certificate-authority-options.conf -new -nodes -key myCA.key -sha256 -days 1825 -out myCA.pem
|
||||
|
||||
rem server
|
||||
rem ......
|
||||
openssl genrsa -out server.key 2048
|
||||
openssl req -config options.conf -new -key server.key -out server.csr
|
||||
openssl x509 -req -in server.csr -CA myCA.pem -CAkey myCA.key -CAcreateserial -out server.pem -days 1825 -sha256 -extfile server.ext
|
||||
|
||||
rem client
|
||||
rem .......
|
||||
openssl genrsa -out client.key 2048
|
||||
openssl req -config options.conf -new -key client.key -out client.csr
|
||||
openssl x509 -req -in client.csr -CA myCA.pem -CAkey myCA.key -CAcreateserial -out client.pem -days 1825 -sha256 -extfile client.ext
|
||||
|
||||
del *.csr
|
||||
@ -0,0 +1,12 @@
|
||||
[req]
|
||||
prompt = no
|
||||
distinguished_name = req_distinguished_name
|
||||
|
||||
[req_distinguished_name]
|
||||
C = US
|
||||
ST = Fake State
|
||||
L = Fake Locality
|
||||
O = Fake Company
|
||||
# OU = Org Unit Name
|
||||
# emailAddress = info@example.com
|
||||
CN = local.dev
|
||||
@ -0,0 +1,8 @@
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
subjectAltName = @alt_names
|
||||
|
||||
[alt_names]
|
||||
DNS.1 = dev.mergebot.com
|
||||
DNS.2 = dev.mergebot.com.192.168.1.19.xip.io
|
||||
@ -0,0 +1,385 @@
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.6.0
|
||||
*/
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-03-04 - doplnenie funkcii pre uvolnenie nacitanych providerov
|
||||
*/
|
||||
|
||||
/*
|
||||
JS 2024-02-24 - funkcia initSSLContext() rozsirena o nacitanie OQS-providera
|
||||
pre plne funkcne PQ algoritmy na kazdej platforme
|
||||
- doplnene priklady nastavenia premennej DEFAULT_GROUPS
|
||||
- testovane s oqsprovider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-02-18 - testovanie PQ algoritmov s pouzitim oqs-providera
|
||||
- uprava vypisu o pripojeni klienta
|
||||
- pridane vypisy s informaciami o pouzivanych algoritmoch
|
||||
pre KEX a certifikaty
|
||||
- oprava kontroly navratovej hodnoty funkcii
|
||||
SSL_CTX_use_certificate_file() a SSL_CTX_use_PrivateKey_file
|
||||
*/
|
||||
|
||||
/*
|
||||
JS 2024-02-08 testovane s aktualnou najnovsou verziou OpenSSL 3.2.1
|
||||
*/
|
||||
|
||||
/*
|
||||
MJ 2023-05-18 - Uprava funkcie printHeader()
|
||||
-> Zmazanie SSL metody
|
||||
-> Upraveny vypis ako spustit program
|
||||
- Uprava funkcie initSSLContext() aby realizovala fixne iba TLS spojenie
|
||||
-> pridanie argumentov do funkcie na nacitanie client.key, client.pem
|
||||
- Uprava hlavnej funkcie main() na zaklade predoslej upravy (nastavenie fixne TLS)
|
||||
-> Zmazanie premennej ctxMethod
|
||||
-> Uprava argumentov [argv] - zmazanie TLS metody, pridanie suborov s klucmi
|
||||
-> Pridanie premennych na nacitanie klucov: client_key, client_pem
|
||||
(vid. komentare MJ)
|
||||
*/
|
||||
|
||||
/*
|
||||
MD 2021-03-29 testovane s aktualne najnovsou verziou OpenSSL v 1.1.1k
|
||||
MD 2018-11-06 upravene pre linkovanie s OpenSSL 1.1.1
|
||||
(pouzita metoda TLS_client_method)
|
||||
MD 2018-11-02 vlozene upravy na odstraneie varovania a autentizaciu servera
|
||||
vlozene upravy na realizaciu autentizacie klienta (nacitanie potrebnych certifikatov
|
||||
a kluca)
|
||||
odstranenie varovania o poradi hlavickovych suborov
|
||||
(vid. komentare // MD)
|
||||
*/
|
||||
|
||||
/** SSL/TLS Client
|
||||
* SSL/TLS client demonstration. This source code is cross-plateforme Windows and Linux.
|
||||
*/
|
||||
|
||||
// __unix__ is usually defined by compilers targeting Unix systems
|
||||
#ifdef __unix__
|
||||
# include <unistd.h>
|
||||
# include <sys/socket.h>
|
||||
# include <resolv.h>
|
||||
# include <netdb.h>
|
||||
# define SOCKLEN_T socklen_t
|
||||
# define CLOSESOCKET close
|
||||
// _Win32 is usually defined by compilers targeting 32 or 64 bit Windows systems
|
||||
#elif defined _WIN32
|
||||
// MD odstrani varovanie o potrebe prehodit poradie hlavickovych suborov
|
||||
# define WIN32_LEAN_AND_MEAN
|
||||
# include <windows.h>
|
||||
# include <winsock2.h>
|
||||
# define SOCKLEN_T int
|
||||
# define CLOSESOCKET closesocket
|
||||
#endif
|
||||
|
||||
#include <stdio.h>
|
||||
#include <errno.h>
|
||||
#include <malloc.h>
|
||||
#include <string.h>
|
||||
|
||||
#include <openssl/crypto.h>
|
||||
#include <openssl/x509.h>
|
||||
#include <openssl/pem.h>
|
||||
#include <openssl/ssl.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/provider.h>
|
||||
|
||||
#ifdef _WIN32
|
||||
WSADATA wsa; // Winsock data
|
||||
#endif
|
||||
|
||||
/* JS
|
||||
Premenna na definovanie "exchange groups", algoritmov na vymenu klucov
|
||||
Server moze podporovat viacero KEX/KEM algoritmov, v premennej musi byt kazdy
|
||||
algoritmus oddeleny dvojbodkou, napr. "kyber512:bikel1"
|
||||
Podporovane algoritmy je mozne ziskat prikazom "openssl list -kem-algorithms"
|
||||
Prazdna premenna alebo naplnena neplatnymi protokolmi sposobi prerusenie aplikacie
|
||||
|
||||
Ak server a klient nenajdu spolocny KEX/KEM protokol, tak
|
||||
SSL vyhodi chybu SSL routines:final_key_share:no suitable key share
|
||||
|
||||
Priklad pouzitia:
|
||||
- klasicke algoritmy: "x25519:x448:prime256v1:secp521r1:secp384r1:ffdhe2048:ffdhe3072"
|
||||
- PQ algoritmy: "kyber512:kyber768:kyber1024:bikel1:bikel3:bikel5:hqc128:hqc192:hqc256:frodo640aes:frodo640shake:frodo976aes:frodo976shake:frodo1344aes:frodo1344shake"
|
||||
- hybrid algoritmy: "x25519_kyber768:x25519_frodo640aes:x25519_hqc128:x448_bikel3:x448_kyber768:p256_kyber768"
|
||||
|
||||
Podporovane algoritmy OQS-providerom: https://github.com/open-quantum-safe/oqs-provider/blob/0.6.0/ALGORITHMS.md
|
||||
|
||||
POZOR - BIKE protokol nefunguje na Windows platforme (liboqs 0.10.0, oqs-provider 0.6.0)
|
||||
|
||||
*/
|
||||
#define DEFAULT_GROUPS "kyber512:X25519:kyber768"
|
||||
|
||||
#define DEFAULT_PORT 443
|
||||
|
||||
/**
|
||||
* printUsage function who describe the utilisation of this script.
|
||||
* @param char* bin : the name of the current binary.
|
||||
*/
|
||||
void printHeader(char* bin){
|
||||
// JS update
|
||||
printf("[?] Usage : %s <hostname> <port> <client_private_key> <client_public_key>\n", bin);
|
||||
return;
|
||||
}
|
||||
|
||||
/** JS update navratove hodnoty pri chybe
|
||||
* makeClientSocket function who create a traditionnal client socket to the hostname throught the port.
|
||||
* @param char* hostname : the target to connect to
|
||||
* @param int port : the port to connect throught
|
||||
* @return int socket ; the socket number created
|
||||
*/
|
||||
int makeClientSocket(const char *hostname, int port){
|
||||
int sock;
|
||||
struct hostent *host;
|
||||
struct sockaddr_in addr;
|
||||
#ifdef _WIN32
|
||||
WSAStartup(MAKEWORD(2,0),&wsa);
|
||||
#endif
|
||||
if((host = gethostbyname(hostname)) == NULL ){
|
||||
perror(hostname);
|
||||
return -1;
|
||||
}
|
||||
sock = socket(PF_INET, SOCK_STREAM, 0);
|
||||
memset(&addr, 0, sizeof(addr));
|
||||
addr.sin_family = AF_INET;
|
||||
addr.sin_port = htons(port);
|
||||
addr.sin_addr.s_addr = *(long*)(host->h_addr);
|
||||
if(connect(sock, (struct sockaddr*)&addr, sizeof(addr)) != 0){
|
||||
CLOSESOCKET(sock);
|
||||
perror(hostname);
|
||||
return -1;
|
||||
}
|
||||
return sock;
|
||||
}
|
||||
|
||||
/** JS update
|
||||
* initSSLContext function who initialize the SSL/TLS engine with right method/protocol
|
||||
* @param client_key name of file where is stored private key of client
|
||||
* @param client_pem name of file where is stored public key of client
|
||||
* @return SSL_CTX *ctx ; a pointer to the SSL context created
|
||||
*/
|
||||
SSL_CTX* initSSLContext(char* client_key, char* client_pem){
|
||||
const SSL_METHOD *method;
|
||||
SSL_CTX *ctx;
|
||||
|
||||
// initialize the SSL library
|
||||
SSL_library_init();
|
||||
SSL_load_error_strings();
|
||||
OpenSSL_add_all_algorithms();
|
||||
|
||||
// MJ only TLS connection
|
||||
method = TLS_client_method();
|
||||
|
||||
// create new context from selected method
|
||||
ctx = SSL_CTX_new(method);
|
||||
if(ctx == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
abort();
|
||||
}
|
||||
|
||||
// MD zabezpecienie overenia certifikatu servera pomocou CA
|
||||
if (SSL_CTX_load_verify_locations(ctx, "myCA.pem", 0)) {
|
||||
printf("CA certificate loaded\n");
|
||||
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
|
||||
}
|
||||
|
||||
else {
|
||||
printf("\nCA certificate not loaded! Abort ...\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
// MD nacitanie dat pre autentizaciu klineta
|
||||
// MJ Update [Define Macro]
|
||||
#ifdef AUTHENTICATION
|
||||
int res = 0;
|
||||
|
||||
res = SSL_CTX_use_certificate_file(ctx, client_pem, SSL_FILETYPE_PEM);
|
||||
if (res <= 0) {
|
||||
// handle error
|
||||
printf("\nCLIENT certificate not loaded! Abort ...\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
res = SSL_CTX_use_PrivateKey_file(ctx, client_key, SSL_FILETYPE_PEM);
|
||||
if (res <= 0) {
|
||||
// handle error
|
||||
|
||||
printf("\nCLIENT key not loaded! Abort ...\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
/* verify private key */
|
||||
if ( !SSL_CTX_check_private_key(ctx) )
|
||||
{
|
||||
fprintf(stderr, "Private key does not match the public certificate\n");
|
||||
abort();
|
||||
}
|
||||
printf("Certificate attached\n");
|
||||
printf("\n");
|
||||
#endif
|
||||
|
||||
return ctx;
|
||||
}
|
||||
|
||||
/**
|
||||
* showCerts function who catch and print out certificat's data from the server
|
||||
* @param SSL* ssl : the SSL/TLS connection
|
||||
*/
|
||||
void showCerts(SSL* ssl){
|
||||
X509 *cert;
|
||||
char *subject, *issuer;
|
||||
|
||||
// get the server's certificate
|
||||
cert = SSL_get_peer_certificate(ssl);
|
||||
if(cert != NULL){
|
||||
|
||||
// JS get server's certificate algorithm name
|
||||
int nid;
|
||||
SSL_get_peer_signature_type_nid(ssl, &nid);
|
||||
printf("Server signature algorithm: %s\n", OBJ_nid2sn(nid));
|
||||
|
||||
// get certificat's subject
|
||||
subject = X509_NAME_oneline(X509_get_subject_name(cert), 0, 0);
|
||||
|
||||
// get certificat's issuer
|
||||
issuer = X509_NAME_oneline(X509_get_issuer_name(cert), 0, 0);
|
||||
|
||||
printf("[+] Server certificates :\n");
|
||||
printf("\tSubject: %s\n", subject);
|
||||
printf("\tIssuer: %s\n", issuer);
|
||||
|
||||
// Free memory
|
||||
free(subject);
|
||||
free(issuer);
|
||||
X509_free(cert);
|
||||
|
||||
// check certificat's trust
|
||||
if(SSL_get_verify_result(ssl) == X509_V_OK)
|
||||
printf("[+] Server certificates X509 is trust!\n");
|
||||
else
|
||||
printf("[-] Server certificates X509 is not trust...\n");
|
||||
}
|
||||
else
|
||||
printf("[-] No server's certificates\n");
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* main function who coordinate the socket and SSL connection creation, then receive and emit
|
||||
data to and from the server.
|
||||
*/
|
||||
int main(int argc, char **argv){
|
||||
int sock, bytes, port;
|
||||
SSL_CTX *ctx;
|
||||
SSL *ssl;
|
||||
char buf[1024];
|
||||
char *hostname;
|
||||
|
||||
if(argc != 5){
|
||||
printHeader(argv[0]);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// MJ Add keys for communication
|
||||
char *client_key = argv[3];
|
||||
char *client_pem = argv[4];
|
||||
|
||||
hostname = argv[1];
|
||||
|
||||
// Assign correct port number
|
||||
port = (atoi(argv[2]) > 0 && atoi(argv[2]) < 65535) ? atoi(argv[2]) : DEFAULT_PORT;
|
||||
|
||||
// JS update
|
||||
// Load default and OQS providers
|
||||
// Default provider must be loaded before OQS provider
|
||||
// Providers have to loaded before SSL/TLS engine initSSLContext()
|
||||
OSSL_PROVIDER* provider;
|
||||
provider = OSSL_PROVIDER_load(NULL, "default");
|
||||
if (provider == NULL) {
|
||||
printf("Failed to load Default provider\n");
|
||||
exit(0);
|
||||
}
|
||||
|
||||
OSSL_PROVIDER* custom_provider = OSSL_PROVIDER_load(NULL, "oqsprovider");
|
||||
if (custom_provider == NULL){
|
||||
printf("Failed to load OQS-provider\n");
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// load SSL library and dependances
|
||||
ctx = initSSLContext(client_key, client_pem);
|
||||
|
||||
// make a classic socket to the hostname throught the port
|
||||
sock = makeClientSocket(hostname, port);
|
||||
|
||||
// create new SSL connection state
|
||||
ssl = SSL_new(ctx);
|
||||
|
||||
// JS set key exchange/encapsulation protocols supported by server
|
||||
// Without this function, client will use default X25519 protocol
|
||||
// First protocol supported by both server and client will be used for KEX/KEM
|
||||
// Empty DEFAULT_GROUPS or list of unsupported protocol by server will fail communication
|
||||
if (SSL_set1_groups_list(ssl, DEFAULT_GROUPS) != 1){
|
||||
printf("KEX/KEM algorithms undefined - check DEFAULT_GROUPS variable\n");
|
||||
ERR_print_errors_fp(stderr);
|
||||
SSL_free(ssl);
|
||||
SSL_CTX_free(ctx);
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
OSSL_PROVIDER_unload(custom_provider);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// attach the socket descriptor
|
||||
SSL_set_fd(ssl, sock);
|
||||
|
||||
// make the SSL connection
|
||||
if(SSL_connect(ssl) == -1)
|
||||
ERR_print_errors_fp(stderr);
|
||||
else{
|
||||
|
||||
// JS get chosen (negotiated) key exchange/encapsulation algorithm name
|
||||
printf("Used group (KEM): %s\n", SSL_group_to_name(ssl, SSL_get_negotiated_group(ssl)));
|
||||
|
||||
/*
|
||||
if the server suddenly wants a new handshake,
|
||||
OpenSSL handles it in the background. Without this
|
||||
option, any read or write operation will return an
|
||||
error if the server wants a new handshake.
|
||||
*/
|
||||
SSL_set_mode(ssl, SSL_MODE_AUTO_RETRY);
|
||||
|
||||
char msg[] = "ClientName";
|
||||
printf("[+] Cipher used : %s\n", SSL_get_cipher(ssl));
|
||||
|
||||
// Show certificats data
|
||||
showCerts(ssl);
|
||||
|
||||
// encrypt and send message
|
||||
SSL_write(ssl, msg, strlen(msg));
|
||||
|
||||
// get response and decrypt content
|
||||
bytes = SSL_read(ssl, buf, sizeof(buf));
|
||||
buf[bytes] = 0;
|
||||
printf("[+] Server data received : %s\n", buf);
|
||||
|
||||
// release SSL connection state
|
||||
SSL_shutdown(ssl);
|
||||
SSL_free(ssl);
|
||||
|
||||
}
|
||||
|
||||
// close socket
|
||||
CLOSESOCKET(sock);
|
||||
#ifdef _WIN32
|
||||
WSACleanup();
|
||||
#endif
|
||||
|
||||
// release SSL's context
|
||||
SSL_CTX_free(ctx);
|
||||
// JS Unload both providers
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
OSSL_PROVIDER_unload(custom_provider);
|
||||
return 0;
|
||||
}
|
||||
@ -0,0 +1,158 @@
|
||||
-----BEGIN PRIVATE KEY-----
|
||||
MIIdOgIBADANBgsrBgEEAQKCCwcIBwSCHSQEgh0gZp18fUGtbxJx3z9zyHS1mAE4
|
||||
HKZ08Z+mFY/KFU+uog6t1Bar7tHIQvlRcQnaId2g7wgYymC8XmoBCbz2FRMsfPNJ
|
||||
HVlC4xiFMajG62Vd5ykGDYQRMU14FFva0Xpms7ZzwMhhpIBIWaaEiESRCJNRJIJE
|
||||
kBhwZBgtEiVIFLNlCyJAWSBiGpWFEjggkzINEoZFCyMyG0GNmLaEowSAFBRIYBJq
|
||||
SMJR08hx47Bw0xgSTAJSWiaNmUJq4QKRCyZFjCZuEiKSGzIgnARpJAaR3EBOCJJJ
|
||||
CRkApEIJWgRSlBhxETIizDQI2iZEgSBKGScKiiggoUIMgCJg4JaNIjZS0KhEAzNE
|
||||
SAYGggSEVLRoYkQMIhBtw7KImQIQIQNRSThuhJRgoARBEjMwFBEGjMhxi0BqG4OJ
|
||||
HDZRmMZABDmBC6IRwSQtAsgE4wIEHBJC4bYwCZSRmDBxC5QpFEVFBKNFpEIg3EIJ
|
||||
i5YsyKYhU6ZsCydxoySGw0BqGKNNRMAwECRs0TAGHEYBgqKFEbKA2YYM0ZBkAqOM
|
||||
2xAlSkhiyggikRJOCbQhWSAiHCktkSZyXCJOYiZS0KJlS0QgBLdJBAZSIiiOyJBk
|
||||
iUaEWDQFmkAt0JiRlBZhQzgpozRlVLIxIokQgpCQUSIKIKkN0DZgmxYQYQYKJEgJ
|
||||
hDSFIDCGDMZMUygqwwIFjDQMAZQQWiQuGqaJoiKEWsYRkDRJpDJtgSRy2KBp0sRo
|
||||
I5kRyRABCYFRm0YAWpBRIsRBE5AMySRqhJgx1IhlEJltI6CJIcFNIzguyzQOmbYh
|
||||
iqiBCClQQDiJ4gAwTAZR4IBIlAIimIABFEVlArQIDJQAAUkBgjYMGQIomAIJXEhm
|
||||
gAYCBMlNjCAiIRNgA7mB4zAFCzQuDCYulEhKEygkyCSBGqhA0hAt2IgB1MSEVLYA
|
||||
gBZNJBQAUBRxiDCGIJiRCAUk2ChECcRxnEKKgZBFBIEwksKAW7hMAIFBIicGiSAE
|
||||
ADAsIJgIiZYQS6CMUpJtIUZAI7hB2kgQGCJFpMCJ2CAKE8WRESMmCpNBHLQJixhS
|
||||
ExgiiJBlG5YgExJSI6AMwSIsGBIhGgJBBKAgCiIAw0CGSRJSk4AtApGIHJEgIgCG
|
||||
S0INy4BwmjAC2zKFm6ghnJRNCpNow4Yg1KSN4ARyECQioIBBwQCRoTgmJMWMIkOE
|
||||
AZSR40hyCMJJCzRNRBRMBCMqgjIy5KANIAMO4qZBlCCGQSIu08BkGoRpkEhCG0Is
|
||||
lIaN4igBpIQICCWBEZNFAjAlo0SCIkglIMkl2gRIE5aAIaiBC4VRUsgRIikRCwJA
|
||||
0wIQQMAsTBKRZIYoiRAEG0BMVJIFUBJm0SRiIhlGJClyYxgw2bhwhMApRMAgI6BE
|
||||
IEeMQjJMFICQCUGA4xBNjMQpW5gEmqQRYSgOJJUwEpYpU5YEJImRw0CKI7OMYUIx
|
||||
0ZAtmqSFmLAEmbAFALaAFJBMGzAuISRu2hZF4ZaBwwZk5DZJAiYsAyIFEjNliMBN
|
||||
4iIO4SZK2MYFwwIFGDGMSDQwyUgEohZBYoYhC4UB5DYwYQYxBCRoSwgyy8REQySF
|
||||
mRhKIoAoosQhoDAAIsQloTCJQsZoIkcSlDZOE5VlCDKCA7UxGDMJC4cRQIZsWCRo
|
||||
JMlMCzMw4gYGUkQwIKZkyyANIjZsDJIJGpFAJBRg0pBgkAJxEyICkSICGseA26gp
|
||||
GASFJJEBAEMmISUOYUBAoSBQYrJJWQQCFMMglDQABBGA4hQFIqNsoBBtE8IBGJdM
|
||||
ERkq2iaFRIYpgaCMUwhk4IhECiIu5EiMWhZE27ZxhCAxkkRlAAkoCSKQiAhMGikw
|
||||
2yBu26Qx1CAwCJaB0ygyCLRkYMQsI6iNzDRmiqRhURBq0Rhh27YkiZIwYECA2Lgs
|
||||
HCYC40SRHKNE0DQBUJiFGhFyhBRSVCQhICcO4AIhnKYQJLRtAwgp20KFFElNIrYl
|
||||
BLIMDCeQkYBsk7RgUKgpAUElAcRwGkgCVBJqkagwI0MBAigs4IghmEZIggiBIDNs
|
||||
GzANAzMtwraQSMJM4BZyBLMQ4AIIGQVwzEaCHMEpoE3SW3leDi1viwTBYqogAIbG
|
||||
9p+DgOf4iTkDAaqdD0vXuPjfeL2RgHLaaMN97MZhOPNdFbfoj+ko9whBd9agXCMA
|
||||
UFrkpOsINCUeUZ+/ix2CPrfdWdWMIX6gKnFW3e0SluHeN0+vXopMN/ktHaH5TAyg
|
||||
8XDvCG3XGC+18LdRo6ScAHkwZqwYHP5ylXakN7USxujWXzJeEl6FwlDEqZj1m8Tx
|
||||
enf31juWeNzFB/lwKZl+bb8zZ6mQOa8rVO6uOAjRhYb7OSaHVbktu8StqiBHD/5S
|
||||
tqoY3q0lsELb/DGFLrT8sMWI2krpvtvhCdRDDCo9UVtDzsD4EFqvgsaBV7o2tw/p
|
||||
F04TvT4Z4QDvG0LAH28uMz93bAdc8UOKa2TFcFSg1Fn539UZTRwKopdExppZVPpU
|
||||
USgVslL9jd9F/e0sbpjoHIL4es/JPIt4ErF9p6oQgXLfasDnvdBQlW4WZ41a/T6S
|
||||
/iawArA7gc7o8oi1K7A8m8YM49oP++6OWb2wn4vMGKwYBZnpc5kPx0UUHNONhNQd
|
||||
BChY1uwobmCMRDtVZY1bdNcjuGwMxPJCx2bxpqHW2rOykgLa1FE2QlLbwFx9p7b4
|
||||
K0WCK9X3iAXv0//dx0nV9SwllBlu2wc+D4sfvLUDrjnzHJAMSUux0ASfylS6jBgf
|
||||
ic1kQDX7cHSrsjWZRayUOgNdwhritxDe5ICqPQH5bPFBSgCIO3e+s+rVsPE3M2VV
|
||||
f59zadtFJWAAGcBkx2iI0FqgPHbfqAyISEFDMX9jk3+dnCDxqLEeO78RLNsArqhs
|
||||
o3OYdPkGmR58UiN03fSQyVBjICP7lTYvQzIn4ojnqj/HwLF8RsTEzqGE9hExGab5
|
||||
diwp1uep0Lhp3o+/DBbMjDWjRMv6KTSUnmTg7S+uPpI6ZaEL/YqvBYl8qRRl3FUO
|
||||
dukMgW3xoJGrrN2hvvAeUKq7H4Mft/p/ZXgrLyvGwSwUN/k/MKCam2r1BvX/TfBR
|
||||
iHKHBOBBGBZS6TT3D3RzR7YzAFezCjc/xaDIcErA/ifriSxrbtzWAXCCmxcSB/F0
|
||||
y/g7XEUd+7HK1oT6LHHzonqLhslLMetJLjufOop1yL+xuXQjve/xIVU9DRNv35eW
|
||||
hjlFBtAL2JSqN9oEbpAVjo9sXE9VCtHIS/lz8DbTQqJHITe4twMzGxzSW594g02Y
|
||||
L/hsLdJocCiN7RpLoMQ43/MEX6R6cIttUzQ5bK959Pfm0PbbNgywXq/Ba87Y41Sc
|
||||
vgnCcAl9QTX6Dqywkw1/oFNSDK7q8QarfCJ3weVjmxbUgfnDL6rV5/+Cw1Z14uu5
|
||||
lYfOIrmEJb0MZ0+fFAmaBKGiCnKVhpiKUPapbrln4QJmMZYcng4ZsN6EGlFvlWJk
|
||||
2h+Hg972bGkj6qTH9GxZV81qGZXduIKW2/v18Ib6sbrQWT4W7AM7dy8WFjyCpE7B
|
||||
LVSLcBEiRyURbGwUIoU+NxO48a0jHM+czygD1ePQ7fRrXO6YWFK7ax7chuuAZAwT
|
||||
CfJDhgc/5O0XmgtxVPeiwRjibegsoTov8BFxULz4hPxxewEPCsBCvRPCunC/1uYR
|
||||
FvYNKjC9a8d8XRrVNkaXPkr/y8dSRmSEA0OYbHyi5gC6k6sV3e6jkwCKGOOT/EFM
|
||||
rm9RwU1WAWLJYiTy/ZoqWvMziA2xmLhOq13Cy/iOuAz1ExfyhBHTdF76FH4keoGq
|
||||
umZ4exRx+TrdwJenz/ao/DAxxtC+zx/aJKQkhdhpfKeJIGOjRBf07XLhMTh1HGOw
|
||||
AIVvpmczZWa40uZ3gFqznpZgvjIfOAGmfMMjuQm7Q+xLF3GiY63ihYlFLDn8W9+8
|
||||
DCMlhq1NZdm0nHRGwI/JzdigQ/F5iATQfZKSiYXC9isizLv2mK9Hq0mvUsm8BKym
|
||||
/gXgKy4MF/XzpvNYKNO6wW/wOX/DREkHTOIPfuQVUTDXoVCm0DFrZlH3HqxXrjCl
|
||||
SmBsX91O/TABotKDkqP7Bvu+2J0kIQvmB+ovcJV1ryd/mAfH/sIgodrhAgNJrEBE
|
||||
k08QoFxctPdW1wSRt6fDpvvCKWCzvBhZKQHCnewV2mysNlvzH4hQS0N+Zg9NVLHK
|
||||
2lmm8u/Eii+0ymvQ2BF5z3ip1Q216ZyGsB476zpm8c6BZPwH192eUedilpq7k/i8
|
||||
dMbYdDSdpAYD65MRWSExF+sDSSxX9PMv3Z5Ldu1EjyV3OaJeWgjnTYvoFDakG094
|
||||
qsYIU+UbglTRHTibAS375CF4WwAiEhCfgI6e2KM5Vf6TNbgPFgWEWM8XaSS45Ou+
|
||||
oEfDu2Fuhdy1o6QXMXXCHjO0B6UirK1RjB9lm9A8+izCLLMk378NIu+LqPU3JobG
|
||||
lyGUApROo+BpRmOfbRY71Dr0DJNQBAWnJKOSmTjWpQNwI6Pd20vY8N6ns/LBYcZ/
|
||||
ma7Bxr3oc2csQ/jtmlG4we6cScgzzQ/+yjPOrnkXf+W+0aXn5C/sv2JLyqvytDXp
|
||||
KMv/12Y7l64kd+fJ5OaoczD+WZmSFB/mbUJqqUmeA1NOCb72T9QH4YgEW3xJ6EUx
|
||||
yauQVS2nUfIQqC9taLsH5gHqFjypmcryvZ/lqmxL7gDhletZ04oHV1O1uXGdoBEZ
|
||||
tEJJmOKLAL1b+SNj7t+ssXDrPMhykvpD442BDarGQREwz8ZCHRHURvyMO6w00uyi
|
||||
5msnXd4Iy42di8UoK4zkCYSsiugpFuAHNRc/vFFHxFInykAdI0oVGLJHA4xrqdOn
|
||||
sEdAOq58qqacC3CsZaIc9QEYApJxl2q+wxq5tcH7Dm1Ix3hC0B2hDI4DIUjx+1RR
|
||||
tfBHwuS6lqromJ7L8GS3FxJaWc9VhH48Cd6dN0H7kG0U74Epy90aeVpAYH6L3QbK
|
||||
5zNHDn46d/CwVOJtJJu1eHwGLl/1wrVdhaH0wW7L4QL1s9noIoNA7X0DqT6wZ5mm
|
||||
1zE3Pw0qqlWYzp97BlYJi+bgvpqvOKrOghtshSIe6WaFyxIcLZxT1u65G9fwJXFJ
|
||||
g/i2IkCAHLKmTjuUk/2xtQ6o/WgEozY8U3tZAoEhcWp/EuoQ0hswZFOpQtk/a+6d
|
||||
b8MDbOrpa8wV1D9DH7//GX/1oR3xnN7Ft2kFrQloAII7uutjtPfSrr9JpijqdONo
|
||||
10GbJ4sANTgKpDc1sRLdAGeJJ7FbSqj1+tlOOohkCYjdyUK46pQ+SpvubYG5eXjS
|
||||
b414J98o9hCbNOI4pGJiYHfxAoA7kknMruW2wqbP3szYjZt8vyM0GU1X0UfSEKQS
|
||||
Ui5LY55qQsVhk+l45eXrSmy9nAMXXYnE8+GRrx1o+vfY8z7RYw1D6D6XtmT+wTto
|
||||
exAmNiZvIaJIiAHkZysrToixag46Y6QFv6EGkKCVRMhzH1FCMI2MVWIabbwaNdA/
|
||||
L8FLv5YgWtPk8H+Jxn0xUIAm/CsxML/I7QxEmO5FpnRlrjeZHqCP1LLB5kcan/mZ
|
||||
3XkYBC4ogCxYcL+sjuO8SjtZ0gTEdA3ii5XpmNwAw4/CGZou3/r+jc3sZHCYm6sm
|
||||
zN5mUkmQF/y3An7U0pMU15O7siV1cyq/+Y7WaJHMsC/Rkkp5H/rRE48H3G4FgBnk
|
||||
1236yufmebkYgTzt5A4lNg5yTXeAOwA/eS4OZ0ZNJ7cIwU7nu1F4be/N3lqCyRUr
|
||||
yDcrFOAtL7fVLFyhCXipua9qCo8RDtRbUBWZTG1ObiDTHLR5fpSq0IrECc1v9jvo
|
||||
F1ja/YzzvdfZN3t4ZAiEzQLBXUgiMtfwN7c+zot6V/LTaDk+gWMLaE7nnFMS5Leg
|
||||
SRehg04Z64RK9rXXJFBvMZDO1Q1tvoi2oNMAHixkyOqq7PhHTF4Cxrx3gMeY8tIt
|
||||
lDij6ZiwY5SdhjzrWePX5jbM4RW69ntZJUa/LJ/QVb8ALcMI+fAUftJnDpitbGRE
|
||||
mqMVmllZNdzRzvgxh2Dp9uhmcxqNhbLwdWZdghRFcsXAYydQIQLOvZEenEAjCOFX
|
||||
Rn/Isde7qmWcFHHrrazfetl/DRmK7IPvhe9r7SYNPHsLknCzT7vDwrc9fLDiHtMB
|
||||
4oe0ykM7r32ZKeby1L+BLBl9ESQPt5dxpE1/f2tlxfuFEJSK1+NBoxpMSRxHNQ6D
|
||||
iudsp1cs4lODXzz53+Zju2Q0maP5Fd9oCRoGrotADW84ZmY/KtWgh2d3908JF8OJ
|
||||
QMwc1bGTNttdexHNq/JUciOGN8fcfTP6h3WphTgqXsT2gmTOk3UfXIYJyf3tN81P
|
||||
NNQSBAkwmNgW21k4ubkFbcZepcidpKLyYA+oF4wW8zkT5PIQdDzs4YFyfjCUhyKK
|
||||
j1sog+lyAhfZDa1jEvZP+cNaMckCGESJO7a0ndLL1s5+t6cSNSRWkZba6C+gtqQw
|
||||
QA+nGPY9wtQpyRE+qyrXy8HI+5ySNLXjlv2cxHvgH3UIXvWF+BCrZp28ViryTORn
|
||||
T8aBQkxGiSH4Z2D74gONENfhPL+PalI11mDeL22gdNavU1YKCOiUcxQNHyOrTGad
|
||||
fH1BrW8Scd8/c8h0tZgBOBymdPGfphWPyhVPrqIOtaElsEr5Mrv8CAHzey1mhyq5
|
||||
KMGzQWm05liILYp10S9rQpfrA1nrGfUoTzuKGjIK/tlyy9CqmO8rTYlD+cHvk/P4
|
||||
0W99QyNt/Z8qBQlG4uTePPkGG4gT1GDZNFZMDDdyVMZiZRreZNsQzf5N6l3dH4Iw
|
||||
ZFuFtSk3YFLuKqPB3OBaqLx28VxMzT0oiXlhdZzP26wC2t+6R2nJFM0HNBFVAFEB
|
||||
0WheaXUJMvm5A/64iQYZt5/vGc40feSXj6G2rhjAq7TUO34j+/InQe/fxks/+1Jm
|
||||
JjzoM/xlSFpXjy8haLtt7NuE9pIZUt48ff0648gc/jS+JcYCq09prAES5Eqimyo6
|
||||
uBTnLx8NXIX2FJUPGOA36qL/+tkb8uHxSTbvqU3DOOiEWhNpdjC8z5AVrA4G827G
|
||||
is8ebw/4h5AhlAtE8BL+Ke1x0ft1bGgdu1inJ1Is8hZWil0GSOGg9JKeCN+Eb4S5
|
||||
tDrKq+zZVIj+/tZDEyHg3uuuFxqXBiIIHieiJ2qxfAL0YJ/ydT5SaSVjT+HM0y7d
|
||||
u/OdVjOAv98f8iNhyAWN9Nh1fqB28Z0zbVs1+hGpduQT/uUFIyrMukFTkOH4uWlL
|
||||
VU3y5MDdy5gB5K1bFZE5VtggdmjgOvRP6PitS2e2NoI0LQZB2fZ1b4qrh1WoBHUi
|
||||
BSiXcqaYNIOh1ODw8cYQI+4UkX/L3CxRBVwNqXyZGCSXL8nqpDP19Qkd1Sgoq36b
|
||||
pm8wDV5Pt4QjSFSg+dD+teg345yszulrcccFoeyuqVJtwfeJmcGXcSwgK1WR3g71
|
||||
PHZtHAHqqOSd/ZoddB6p/HpzVgMZYJmbDuwuUlUq9qMlzg9NFh/U4hqaKWno/Ejk
|
||||
o+09geQ80nILmgNqCUjWEGJVFb2aPJeeHTKAF1abkZhp6PCzlbvPnHI6OF1kFDGt
|
||||
6x4D51sHW4pBFOo26L8S1pEeNiaXwWVLcWt8gg6nsnzQ2SilfcNXUA8kId0TDpEv
|
||||
5Lf6B5XFiXvjWq+oSYTgBEhHiYg1QQ3xi43KSNanmYdTUPlCWtfurclsihP1uVRn
|
||||
8kFZDn2R77Mtv/M6Nw152XaN3Rsmcm7tGsdsyNFBEwFEhZYG3dw6T8At+kA5AQe0
|
||||
5eW1QnBZRllTxDuP7EZ1afPAhknmT6zKLeuMd+z4ljVI9CBsy9fYRIHAuFuacicT
|
||||
Il59tl0N5PUmEchhsD6doD6r7RVTA5XqMtkP6QNrLq7f+q4fLfRizE6Eqj5PE40S
|
||||
TL+xhungduvxfcjHVKwpwuoYL3lnSt6CnEBBrAEG0ase1MGkW67KqRa6ltV0i9Mz
|
||||
bl0fU5ShqwGJuqqXHh9e0yymVZkKWlY09aXayeBnwCisz2Q4kPgeBYjEYyJGJpDj
|
||||
Y3KIOZNGpWJXYRECgFkU+/QBVBz+4rdUTBEzaD1uYFQ20WKX+afpi/7M//+DSYDk
|
||||
oZadRR7j0B0B3yFVcz2/n8uPEK+zWSEhJ6teJYEz7VUdpJpCIlKLIw8sGdYrtCQ9
|
||||
qwhJLjXBFfmaGdVqKlbjlVdpbTGMd3qwOmhYKvsZcbtVBficAn4Fm6WXf6CitRlM
|
||||
0lODSuK0zB0AWvSGDver2/upMEDPtkJ4AKVu0MLfIliYBKoGZiQeAxapDfE88daz
|
||||
5AkNw+zXKGDrUveED1khfN62hKdOhlQjmUm2y1oqbe+PbvGd04Tg43DOX5fTFeTS
|
||||
0mL8N6OQplEt/5VU5Zedj1kvYW8YnNvWtCRc7RLAOvrpX+jrdAbs4l2qvX/IGS9f
|
||||
FVokitMG+fV56KRAgS3YLBPe7sTazMJCZ1LhHK1fbuB/iqMHX3LwnEKTi3yec3Nc
|
||||
2GO5USQvfZCguY55MzC4iDBTj9U7z8yYGpK1k3Gx1IwXsqOON/VIXrQqY9FAZLuY
|
||||
P7yJ+Nqd2JcdjYSBIVO4nNx2l7fwvtJFfsxt20Hxg/dt0xkL8EiNNTDA8E3NLDSV
|
||||
fiUXuWlm1fVYL07BJcvvQL58R9deAXMt/ErJs3H+DScdRuCk8ep037kuLnVFwVAy
|
||||
OeEKkzb+MiZf63yGSswLR7vG8+xiZaSi0XFvRKJ61ihjOHCPUxDeLN7397Uuz2US
|
||||
EZfaiDmh/c4Kw9JLISmZi2XbLCT3EEMH1mKX1sJQALzS1hHyqy08NilMb3UadCXu
|
||||
IFCVdIZkVHr2KzrIW3mcbpV2FhiBKNGEO0UBA7cxehGMSLHEtNZXlctIsixqLeXV
|
||||
3cW7AG0ZvNmIxJdL89g6OEOxeYcUhVzMsSXXGx8zA43HW+gvEp6ThUBqIbTBmze7
|
||||
zNdT7xSyyD5O1KFgQA72zge/NLzZDo4GjH5nbD0zlRLkRJgVyi8VXZD5aujSX+X+
|
||||
elR5LsSqN1r9mMPdqHtTz9cyidkg+XUxpVtRPJHm+woJF45ByYyv7pQBD8LuVEu5
|
||||
gCnIjjxqhWfmVsVpJh4SvSpFGocy6tn4AJXMERN7eU0j0y8fJAoijJQblYpILAN8
|
||||
qtIBa+Wv/Tbn9f2CtnkGn5MRfbM/v4U4FMP3H43m1Envh1YoiN5dN1PW10U+YkHk
|
||||
30UjBs0xGin6PvgqM8ZP4X40v+MsbKO4uC0e0CT7SBeEgMesDU/xA7I8sxquQJ+6
|
||||
u4sWbUOi70zY+QfhwuLceNk7fVsjZ/SEfallBbtxFQihApGSHmbLqrp4UD4qxtP+
|
||||
QG0Kt8eB1BdwdfqzlFFi2QUWwKcQwYamNzKzARmDNMbM9PqG2XUIgduRdjjTbdLX
|
||||
JoFoPhVzFQM+p9ISMfQXP9gH5xa38Y1hRUdMjpWSqThRRJ4CHGn8zW+N3C2L6KGa
|
||||
yhKcFXxzi1sHhvplfFWlPzIEUPQ4mKvPvM7ya+Vqk2YrgrqpgxYZbd/2Z46cPHk8
|
||||
OZAnseVFN9f+IIQp1Jv0FNXqctMIp7FLKLrxqIgwCORCkuBQeNF0CnxyBHr+ERyz
|
||||
nJm3JKlAs+dOQ5IyV0fZa1feNWF3AW9gm/su5YTZQBRZQEG6tovwBQNIDp0k/u8g
|
||||
C7vaODHE5/opXJNP/wwBIbVN1louLGY0LRuA+hNwW+dNgChARUu8aS3jpgaHMIm4
|
||||
tDQ/MI10NdjJ/lgiZTGg0SgNtMu16Z/4+34BZXUYFK7eL0jXrFN6+FrxiPXCXGtI
|
||||
6FUy7WtWFE+Qwzmcnwn30dL0CepqhtW8v7PIwXYQQrSkqpBls0bgMIHRzRJSMk15
|
||||
KQuKQqOCOXHfmMOQRl1M1Bm+Q3S78yWsJwG8luTX96px/w81U8XWgafi3eo6dxAP
|
||||
Ype3fHXIwNnxpbVbaLEnQRR17r9OcbUNowS6HE0yf8Bt/6eEHtKvgqSWiOuKQAqF
|
||||
EspmOlWZA+g2RLbSYvDKddHD+LJklbpjWZti+ozWyipKZVCwc9zMVKQwmqsQ3gDQ
|
||||
4NmurjIFqrwfhWgDOgtGAJn2DzktJJr/4mZPYwet13ZG/HKzAV1H28B5Kj+OFw==
|
||||
-----END PRIVATE KEY-----
|
||||
@ -0,0 +1,161 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIdnzCCC5SgAwIBAgIUJ85yF8KSw0QrCNIkQdmFpQeyNiUwDQYLKwYBBAECggsH
|
||||
CAcwZTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcM
|
||||
DUZha2UgTG9jYWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJ
|
||||
bG9jYWwuZGV2MB4XDTI0MDIyMzEyMTMxNVoXDTI5MDIyMTEyMTMxNVowZTELMAkG
|
||||
A1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2UgTG9j
|
||||
YWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwuZGV2
|
||||
MIIKNDANBgsrBgEEAQKCCwcIBwOCCiEAZp18fUGtbxJx3z9zyHS1mAE4HKZ08Z+m
|
||||
FY/KFU+uog61oSWwSvkyu/wIAfN7LWaHKrkowbNBabTmWIgtinXRL2tCl+sDWesZ
|
||||
9ShPO4oaMgr+2XLL0KqY7ytNiUP5we+T8/jRb31DI239nyoFCUbi5N48+QYbiBPU
|
||||
YNk0VkwMN3JUxmJlGt5k2xDN/k3qXd0fgjBkW4W1KTdgUu4qo8Hc4FqovHbxXEzN
|
||||
PSiJeWF1nM/brALa37pHackUzQc0EVUAUQHRaF5pdQky+bkD/riJBhm3n+8ZzjR9
|
||||
5JePobauGMCrtNQ7fiP78idB79/GSz/7UmYmPOgz/GVIWlePLyFou23s24T2khlS
|
||||
3jx9/TrjyBz+NL4lxgKrT2msARLkSqKbKjq4FOcvHw1chfYUlQ8Y4Dfqov/62Rvy
|
||||
4fFJNu+pTcM46IRaE2l2MLzPkBWsDgbzbsaKzx5vD/iHkCGUC0TwEv4p7XHR+3Vs
|
||||
aB27WKcnUizyFlaKXQZI4aD0kp4I34RvhLm0Osqr7NlUiP7+1kMTIeDe664XGpcG
|
||||
IggeJ6InarF8AvRgn/J1PlJpJWNP4czTLt27851WM4C/3x/yI2HIBY302HV+oHbx
|
||||
nTNtWzX6Eal25BP+5QUjKsy6QVOQ4fi5aUtVTfLkwN3LmAHkrVsVkTlW2CB2aOA6
|
||||
9E/o+K1LZ7Y2gjQtBkHZ9nVviquHVagEdSIFKJdyppg0g6HU4PDxxhAj7hSRf8vc
|
||||
LFEFXA2pfJkYJJcvyeqkM/X1CR3VKCirfpumbzANXk+3hCNIVKD50P616DfjnKzO
|
||||
6WtxxwWh7K6pUm3B94mZwZdxLCArVZHeDvU8dm0cAeqo5J39mh10Hqn8enNWAxlg
|
||||
mZsO7C5SVSr2oyXOD00WH9TiGpopaej8SOSj7T2B5DzScguaA2oJSNYQYlUVvZo8
|
||||
l54dMoAXVpuRmGno8LOVu8+ccjo4XWQUMa3rHgPnWwdbikEU6jbovxLWkR42JpfB
|
||||
ZUtxa3yCDqeyfNDZKKV9w1dQDyQh3RMOkS/kt/oHlcWJe+Nar6hJhOAESEeJiDVB
|
||||
DfGLjcpI1qeZh1NQ+UJa1+6tyWyKE/W5VGfyQVkOfZHvsy2/8zo3DXnZdo3dGyZy
|
||||
bu0ax2zI0UETAUSFlgbd3DpPwC36QDkBB7Tl5bVCcFlGWVPEO4/sRnVp88CGSeZP
|
||||
rMot64x37PiWNUj0IGzL19hEgcC4W5pyJxMiXn22XQ3k9SYRyGGwPp2gPqvtFVMD
|
||||
leoy2Q/pA2surt/6rh8t9GLMToSqPk8TjRJMv7GG6eB26/F9yMdUrCnC6hgveWdK
|
||||
3oKcQEGsAQbRqx7UwaRbrsqpFrqW1XSL0zNuXR9TlKGrAYm6qpceH17TLKZVmQpa
|
||||
VjT1pdrJ4GfAKKzPZDiQ+B4FiMRjIkYmkONjcog5k0alYldhEQKAWRT79AFUHP7i
|
||||
t1RMETNoPW5gVDbRYpf5p+mL/sz//4NJgOShlp1FHuPQHQHfIVVzPb+fy48Qr7NZ
|
||||
ISEnq14lgTPtVR2kmkIiUosjDywZ1iu0JD2rCEkuNcEV+ZoZ1WoqVuOVV2ltMYx3
|
||||
erA6aFgq+xlxu1UF+JwCfgWbpZd/oKK1GUzSU4NK4rTMHQBa9IYO96vb+6kwQM+2
|
||||
QngApW7Qwt8iWJgEqgZmJB4DFqkN8Tzx1rPkCQ3D7NcoYOtS94QPWSF83raEp06G
|
||||
VCOZSbbLWipt749u8Z3ThODjcM5fl9MV5NLSYvw3o5CmUS3/lVTll52PWS9hbxic
|
||||
29a0JFztEsA6+ulf6Ot0BuziXaq9f8gZL18VWiSK0wb59XnopECBLdgsE97uxNrM
|
||||
wkJnUuEcrV9u4H+KowdfcvCcQpOLfJ5zc1zYY7lRJC99kKC5jnkzMLiIMFOP1TvP
|
||||
zJgakrWTcbHUjBeyo4439UhetCpj0UBku5g/vIn42p3Ylx2NhIEhU7ic3HaXt/C+
|
||||
0kV+zG3bQfGD923TGQvwSI01MMDwTc0sNJV+JRe5aWbV9VgvTsEly+9AvnxH114B
|
||||
cy38Ssmzcf4NJx1G4KTx6nTfuS4udUXBUDI54QqTNv4yJl/rfIZKzAtHu8bz7GJl
|
||||
pKLRcW9EonrWKGM4cI9TEN4s3vf3tS7PZRIRl9qIOaH9zgrD0kshKZmLZdssJPcQ
|
||||
QwfWYpfWwlAAvNLWEfKrLTw2KUxvdRp0Je4gUJV0hmRUevYrOshbeZxulXYWGIEo
|
||||
0YQ7RQEDtzF6EYxIscS01leVy0iyLGot5dXdxbsAbRm82YjEl0vz2Do4Q7F5hxSF
|
||||
XMyxJdcbHzMDjcdb6C8SnpOFQGohtMGbN7vM11PvFLLIPk7UoWBADvbOB780vNkO
|
||||
jgaMfmdsPTOVEuREmBXKLxVdkPlq6NJf5f56VHkuxKo3Wv2Yw92oe1PP1zKJ2SD5
|
||||
dTGlW1E8keb7CgkXjkHJjK/ulAEPwu5US7mAKciOPGqFZ+ZWxWkmHhK9KkUahzLq
|
||||
2fgAlcwRE3t5TSPTLx8kCiKMlBuVikgsA3yq0gFr5a/9Nuf1/YK2eQafkxF9sz+/
|
||||
hTgUw/cfjebUSe+HViiI3l03U9bXRT5iQeTfRSMGzTEaKfo++Cozxk/hfjS/4yxs
|
||||
o7i4LR7QJPtIF4SAx6wNT/EDsjyzGq5An7q7ixZtQ6LvTNj5B+HC4tx42Tt9WyNn
|
||||
9IR9qWUFu3EVCKECkZIeZsuqunhQPirG0/5AbQq3x4HUF3B1+rOUUWLZBRbApxDB
|
||||
hqY3MrMBGYM0xsz0+obZdQiB25F2ONNt0tcmgWg+FXMVAz6n0hIx9Bc/2AfnFrfx
|
||||
jWFFR0yOlZKpOFFEngIcafzNb43cLYvooZrKEpwVfHOLWweG+mV8VaU/MgRQ9DiY
|
||||
q8+8zvJr5WqTZiuCuqmDFhlt3/Znjpw8eTw5kCex5UU31/4ghCnUm/QU1epy0win
|
||||
sUsouvGoiDAI5EKS4FB40XQKfHIEev4RHLOcmbckqUCz505DkjJXR9lrV941YXcB
|
||||
b2Cb+y7lhNlAFFlAQbq2i/AFA0gOnST+7yALu9o4McTn+ilck0//DAEhtU3WWi4s
|
||||
ZjQtG4D6E3Bb502AKEBFS7xpLeOmBocwibi0ND8wjXQ12Mn+WCJlMaDRKA20y7Xp
|
||||
n/j7fgFldRgUrt4vSNesU3r4WvGI9cJca0joVTLta1YUT5DDOZyfCffR0vQJ6mqG
|
||||
1by/s8jBdhBCtKSqkGWzRuAwgdHNElIyTXkpC4pCo4I5cd+Yw5BGXUzUGb5DdLvz
|
||||
JawnAbyW5Nf3qnH/DzVTxdaBp+Ld6jp3EA9il7d8dcjA2fGltVtosSdBFHXuv05x
|
||||
tQ2jBLocTTJ/wG3/p4Qe0q+CpJaI64pACoUSymY6VZkD6DZEttJi8Mp10cP4smSV
|
||||
umNZm2L6jNbKKkplULBz3MxUpDCaqxDeANDg2a6uMgWqvB+FaAM6C0YAmfYPOS0k
|
||||
mv/iZk9jB63Xdkb8crMBXUfbwHkqP44Xo0IwQDAdBgNVHQ4EFgQUfwycYoZUFi62
|
||||
NP6OlzPieGnT7dgwHwYDVR0jBBgwFoAUhYbPRDALyI1ALGoCVaAj4E8o8WcwDQYL
|
||||
KwYBBAECggsHCAcDghH0AMax/S4g9OeWs5GQoOJfFEuAhyKcWkH7UMpuxvxjT5ES
|
||||
GWG8bEH99QeSCOsV9VyzHpD1YFJj9mC/gZWf/nd8YxixJZHmZHdXzY622Mdfc04O
|
||||
OILiQg27yjYBGOfXB5lg4xkB61uFGVfJ/d+4BVL1VrYbnUZxAbTS9Vu1kspSkmYd
|
||||
PhyhWx7TvzvPuO2lX5PVSobSwDAKq5YVpeNbzJoMvOXNhCnY/r+QGMCiw9B6hYlW
|
||||
DQ+YaQWtTBNDI0619MaltmKdbqT1glexvi6vg2NTtZV4qgdNYkpS7DwvpjE0G2Y2
|
||||
ZTRjUfAhzc3uD/Q5nFqUzIjeTyFt/+KM3S7yWfarEreKekc9Nb9w2WZWsZEy2QbN
|
||||
KTTw5O1D4Hyp0YTBvfWyEMbLhI4j3eXn5tobqKf71aIhAI5eMxxeFymL2+fxQW2j
|
||||
hJ4H15kCYWtenerBszwWYdV0+wBraSTWlU382WdfrA9RC/wjw7+DpDr1c42uQkJT
|
||||
uxoBAxf5RUC10x+/SDY7Nk07rAzJuQm1WT9LdQ9/hLhgKp9axBO33ihrrA+QTrPt
|
||||
kRQCItrdSOjHQCT/yjgoR81C/k9quGPFrpbYJsRhrBEWv6Re2OrRqM+S+z1bEsKy
|
||||
0xCEp/dYxmFHQG4j0yx95Zud48AxwM5Aa+WHBQhoLg/mKegYsMhSlcc8WZp3LP0z
|
||||
w9/VydD/0NRLrJNO9QRKTubO7nkSQLJTIsIlSOkIEkhKXjdZcPEkbwKBx1Hg5N0n
|
||||
kytz3akjKTqRAj+yB1HsveLZ1qL/K/qZwo1gKCX/52VfFcq4HKSEZKxyqQgpp7aS
|
||||
NMqjrBU6QzI8L1yLbCqqRJHK3QmMwKpu+ejMciPfxAM4Gbjc7Ew+6Vr6aGiqFko1
|
||||
4QP2VhvLGDQDzOPs1bYmyLX+IS1tbUUeYW01fOnrsIEPNHai6xz4CpLtwD/SF8fq
|
||||
8Ycl+HcjUcAdHiM1Ho/5jIhiI8NxAFLX3mvEoyaS9/XMP43nknWiYeZ3iwigOpQ1
|
||||
EU0sBeTzk/FLdKf7Qlz/8ia7USbPE+N40+VOL82xLw6nergRtB8z31iO/B1keJEH
|
||||
E68tL1xXGf+klk+cAbxXbEfDX6t+l67rVBZW8pZUz7tytG3UpwbNAEYE93tcjDB7
|
||||
5jpTuwXtbzVWAUHdD7iHUDXvYix37dBHggqLIkIMZ1EhisRPp44HrBgO8ssR1/bI
|
||||
zGKmBr8C3vMMuYpKwFval5g2zy+jxhxRsiQlPJIs5dz1d0m3n3DOe1qpUWUe1AM1
|
||||
SYcixMCRr/L8gz++ioQEj6wUi57wqyYnwT6b05uqLG4rrSNvIseCAnwIYhTj/fdc
|
||||
gfsULbmD/3XtALGyvgcuCtiCks5N25EqRW01V/tKWZ0dOfy/Ffix3/PZYmjjv7te
|
||||
f/pyYeAk3c/hklaJ2PTzJD8x0LYk5YEVg7pbPaNfqzLLPAcz1d3ZJ73UYHybsElY
|
||||
oWCoKD4fM9BmXYaLTTJoxA8C2ve3OUszM9WRtZI25N9QnGJiUOxqur8F6svHjAjN
|
||||
o9W3gW9ZRkhn2Z/rM20qNLIInr3WhYqBGJUUBgd/b1r3VaP2vMZvKqNKl4Zw5LmE
|
||||
VcnYWOlSzBnZ1sr3XyEdErYUGAaKLDCpFNJZc4d7d4eysaw8OB5jzMyKNc+aBR1e
|
||||
0ro1RsLv9C9+A2oUK+sHc7MLiywlTKfmUlZ4EUQfJARITB+rdfQpqk+njS9BuDmi
|
||||
kCAliRc1DFGJlKLKPdUVek5GQwWw2NEfiq87Nqt37vWbY6WNykHjrNynfLnKA3Wl
|
||||
wK9Bs7OOKz3IFPo06R+eMYr+S3mQEmzGBC8Tq4CZaW1HJDfPM/271/DovuUmQNDH
|
||||
xMMpPeRYx/6yvSo/WAnPZONyRSJW2daLfOPyL63F9v9LNEQgBT2DtWD9/SaTKIe9
|
||||
CG29y54pIyn874wCwMYo3v4XLQ24BPMAtyKtCkkKsZStC0ByqYTrDZ8gvE6a7A5U
|
||||
Xz7/deo9BIMFiMexHfrfXcRsbM3GoQkzXd7Lha9OMVu69+urSvqTPFSIzRXL/qDW
|
||||
n8pIyxiRtLkUTKryCLgVHI99DbgVpthfBe7rpMXkOoeWtf9i64LG5D4yFhH/5Ney
|
||||
sY/cm0eBLer2TEqN8G9KTYBQFcokUr+b6bx9kHMs9p+8iABZejDthxPZtqxQafNW
|
||||
3DRjl+NEpoFYXx6o7RaR/YYSnKqcI6hHJGbmLNEsw44d0qhXnhP201hc0p8+aY9s
|
||||
ex0tQsMpEM4oVckbUPpNLj34hvEgpzhPFMAUqbv34ggZlN+esap6MhbLkKVZNbu1
|
||||
KzV7CWvC5o6sUtscSGG5rmWOLh7mj9yPkhZ81D48xbfttx3t/H9iyrus0YyrPBXi
|
||||
fzkfQFyWFaFKqUP42uYxx7mLsjR4iEPsgqCdvRWKJ1keSN87PKiUF0T388XQndOI
|
||||
KlUUpWR6jJQZ/ex4idKtXRD0mvZ5N61UxUoARqKfKlYMMudvoWUd+boMNzMxoXgD
|
||||
CTJbjTLoFRLzFCVEF3wcowHj00wJ8OOua53NuX5rCYiJJEnFpwBLfS1l9cGfdfk2
|
||||
dyUGT2g1v6KSQv0Bn4uxOoiVlrQDcg2lMr+EyJkhmKhBNiF9r0aKypXU13WCOmXZ
|
||||
CGowVrdeDe1XKgMU1N70NY4kv+ZKFHIF2WRKqE+/pvv/WV3Ve7P9HwNBCinMUkr6
|
||||
Qw99WzIpdM74BbIUTw4YnULbPYknPdmDF79JezdoCppBI/3IWuWIHPrnnC52RRKX
|
||||
YZmfHU4zkDdebwNh1ZvvaABqh3h7db6oevvVyxnWVbyo6qiybArTE2zHttTha+pj
|
||||
PAGQtdYGvqXQl4qsWWuIwALuehZ8AF4x0Y5POBXxHDoTM5uj+4EqLfiFG4yqqoTY
|
||||
Zeg4NVYpXWVTqgn/B32qeg2fxUgDjnoJw25yKWEiIFgiz0gheyTSitLmNWl6IK3s
|
||||
kcx94zp72jqRYUT1Sq/bG3zThzN0YC5SOL49FZEUTjSVQp/VF7tSRQIhzcGIAgqu
|
||||
gYVknDCn+VY4seR5KsATjAUPK2rvn1US0k1jqhhDhX5Z3F52q8LWfWThV2AImJkF
|
||||
r4BBjp8zcVBxxCzvM6rCQ0l8gNHOrb4DqcsSw2FYxhDLUsBbfjRny7xEom1KOdj0
|
||||
+/JdjEb9Nc6Bv5hjeU9fvr3kzb5ar6qQltjE3sEe0+e547u/D4f4WUruKvKvKvPa
|
||||
6zVXRbTxWyZ/zORxnXGCXrfXuANlC4u+9mjvo6OKUSJ93Y2M9TIkmYXztW1f+Qzw
|
||||
e830cjA0Un5+3V2B7jlVlJEqJd513I2H1HljuyFdnW9E0WP4wmZ63Y/S0CX5+6F7
|
||||
MV4pkPzT1Ewgm1nkxizfk/u2QsMtiE2p5FgQytMBeiMcYFEJVG3mbBOUgcvc0UYs
|
||||
Iqc1p0edq5rZ7dLBKP+23sbda3P2Zd1k6hU0qJOKpCctZA0lA7B4rDHz9yXxXfvf
|
||||
z7pjdPGpN704MAWa9KQpjP/iHakHdMJZgOh0IEEFynhsnREw1IfbQkIa2gQrnmcy
|
||||
QC1/UfF2i/K8K6mygK096xpqVDA1O61pMiQxCmrvIeuDK15HAyCziP4ggqm1j+Hp
|
||||
zEBtX2V1xCBCtFYwV4SI1LtJsJrc0BZyzhtbQyVNmESn0HBLCrtZWnK9la561Z7H
|
||||
maUchZeYnoZ4ije19Kc5543g+rU0nSetgUnIY5tbPGiHVQ52GLivmpXyPoGcJYSW
|
||||
mMda+qLa/SMhyf3vjzfnu5a3jJRH9aVN8fnfn4q91LpHohbYwMgoQ7XYo3/HhFxe
|
||||
Jpddt9Ej5Iy8A+yOc1NFKbr4jscyY4Me0E8+Jr2/Xa0niHDdzPkyzE4xuHTzKVwN
|
||||
hpXWPSAN+b0e2OqH45opR8b2Snm2e1hJdsg2UkJZvbHxWZvBiWlQcR0Q5vPiJD23
|
||||
OxeGoE79N4wUYe0crtxpABlfUL/gSx7ySPYyICF1hP6rKWa2LVxcqkxq7QRutT9+
|
||||
GOZ5M6McbMVeYdxeh81Y4FZkfl+ljNX8MS4ofdmj2BlZw5OMouJ+AAuV3HR2PBvc
|
||||
wJ/H0ZNM/zavr98Zy7IWZFiTG+f2c1jWKUwt/8VL6LlrRjUB5KyOd538jIJgO+BU
|
||||
bv8KDDTyG6L0gVqYIsrh8qaKL4391XlTxG0aZ9s5zMPUKZU9z7R3M2t4b+B8/5sQ
|
||||
OWlpIUWZVG+e3cpOBwQh81jhpyCUabJPSAlkUMLkinqX/lZm3hBSVX+pGLSuFCzi
|
||||
edQBFxMkRuT+jG4xk8gT81Dx5E8MIzfFXbx/kS6Voki7OTS7K84K/J4ymMwz+DF9
|
||||
Ew6PcQtU+mmBS678i1rC84XqmWaNGcE3aSGhj5/w/+TGvtg51QtSUIp0sL7cfksw
|
||||
MbterlXqAMREk/n73X0EdFJRmFo2VmqWP1Tj/+cHGs6ECof6mhxHK0l1zmO/knWW
|
||||
LevwxwDvFK1HO9QvXMsq3lmeiQ6jkfekmE8w5wfyUFGIL8Ks/sc0cyuBw6UBOs3G
|
||||
eqGnAPtnb7qkjwMF6/e8rwFuhplUPph/4U6QI2ektoMC/lIZwP7edu/nUAkNQBCx
|
||||
1rwb4SFT3MSVNE4ka42Uxhxk8IZ/GPosrSqPHhy9V2jS+nIGxjOVRPsKC1ktKAjF
|
||||
/tDgPR/7eboIA8QZtsYCC/V/wjV53hYJk+SYT2hyrjqP+QGwJpz+566Nh++X5quN
|
||||
oTLtiwsmV2WBKuGj/T7SwE+VhDMRsarzUNWJj3FLjmt6+f4l+it39IusdpN6QrCA
|
||||
LfifmWgvJx0jzo4dy5HU4BYZ+/S6LNdblwrSADvx4a/i7BqHYDid++/nEb4BTFco
|
||||
3aMy5V9iU803tbVIgoVqHlZiKOFJ8/itBhYdQrQPQODYj9Pr+3ed1Pv0/z30qume
|
||||
h7qWsJq1Qub5jS2MkIlH3cVUCeST6YVCwMhccNQh3aQQW7ycGXzH0PdMnNVUet9n
|
||||
z3W1aKVtZO0hH4IhOB7PRIGpVK97o5ZUVSMmfLDkk0RenAxWsS8TQtZZS+0ELvOF
|
||||
V5fpvSVvN7HNk651PLyPGmPfPkdTb7hR1uAWQtI6o88IjfOS4KdZTMCdsatpbeg5
|
||||
GGKejhMWxAQecC8ngMY55YwsFqDbJj3SeBwqfGCqHJz5kh0qRiBxTiO2KQEaddBQ
|
||||
pcSIBSlD7jzQF5lQi9YjWJJxbxmFqAbzAgHIqPHf1N1D+pAvYUGcCD5MVeNaPHMq
|
||||
ixEvYjbl8Xw62Dq8S4I6RFWsEh7E5geGNIvIxqbBEAK3q699Pj20hLYhOy4N/iBa
|
||||
5m4A3K0Zz3aNERrVNVdnKNTITO1X162U5rRIjEEA/Hfmzf4g0ba88ipzQlUOteKU
|
||||
9B2EHlJwkfRCaMM+tJnuZljsDs2Xcgu18YMHsjAtnIWHXolOEDLGoTI2y43FaOR4
|
||||
RKUTAWgH0UA8/XTOl/gy0r16KkmyYMAHeLUCAGyD9ssJnlRZqzPp2q+RusgVmAJD
|
||||
ZTJn96AJjxWX7h4e4QIYmdwAdqcMhKreTTj8Gd6dSsMrSz0/qmNCYE+XOk03pKJK
|
||||
JUEmxBEyG+/ZZANDazsEdPkGYbUGUEA5aHCy//ubqh5IIdOpahgndG7O6W5TcmpW
|
||||
dumnBG0eRPQAZVPPzZI2ZitYykgwCKEzatUmRgP6Ke5wgLF4zM/n2roJJ5ocw35/
|
||||
UwgJ85eCGgtDz6K2/DtHx4o50f3ioqXb5wF+xIhLn6mfrtkEfMkeFMGD0KVHiZK/
|
||||
4Ry2mh41i1Fw45oNRfd55j/tYaZmHG5vl9RZ0TuzM6muPmWNpiafNV60cjxa2Bvz
|
||||
cZg/jPBwRLTmHiI2pDkTbQF4C/GORMC9cUsl7vwwF+KQwClFSy5F1AekCkIe74CZ
|
||||
J/YvZuZ+PY3XXyMs5yXijr0bEV1GmzKDK9Qp5W8OPG6OlzMdL8aBudJCFVUy73oL
|
||||
N7UHwbKc8awUs8i8A1xchzM/v/3ysIafjlFw9kXpOC1FpHIhBqvk295bv8tn+MlL
|
||||
vaHwHedrxnB23D3lavs54snXqAoq0FaWa8/neXfKLKiHIOGWGhNxBS9Wzrgg4pP0
|
||||
jUHWcm5jd2QDqUpsA38fhDpjZ+LlG0dcnswiPlJew+TlXoHAws0FEVXF4CgwQlxk
|
||||
tM7ZOkNYanmL6ys/X2VmkaKz1Nvi6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKERYb
|
||||
Iyo2
|
||||
-----END CERTIFICATE-----
|
||||
@ -0,0 +1,453 @@
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.6.0
|
||||
*/
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-03-04 - doplnenie funkcii pre uvolnenie nacitanych providerov
|
||||
*/
|
||||
|
||||
/*
|
||||
JS 2024-02-24 - funkcia initSSLContext() rozsirena o nacitanie OQS-providera
|
||||
pre plne funkcne PQ algoritmy na kazdej platforme
|
||||
- doplnene priklady nastavenia premennej DEFAULT_GROUPS
|
||||
- testovane s oqsprovider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-02-18 - testovanie PQ algoritmov s pouzitim oqs-providera
|
||||
- uprava vypisu o pripojeni klienta
|
||||
- pridane vypisy s informaciami o pouzivanych algoritmoch
|
||||
pre KEX a certifikaty
|
||||
- oprava kontroly navratovej hodnoty funkcii
|
||||
SSL_CTX_use_certificate_file() a SSL_CTX_use_PrivateKey_file
|
||||
*/
|
||||
|
||||
/*
|
||||
JS 2024-02-08 testovane s aktualnou najnovsou verziou OpenSSL 3.2.1
|
||||
*/
|
||||
|
||||
|
||||
/*
|
||||
MJ 2023-18-05 - Uprava funkcie printHeader()
|
||||
-> Zmazanie SSL metody
|
||||
-> Upraveny vypis ako spustit program
|
||||
- Zmazanie funkcii spojene s generovanim certifikatov
|
||||
-> callbackGeneratingKey()
|
||||
-> makekCert()
|
||||
- Uprava funkcie loadCertificates() aby nacitavala kluce klienta a servera zo suboru
|
||||
- Uprava funkcie initSSLContext() aby realizovala fixne iba TLS spojenie
|
||||
- Uprava hlavnej funkcie main() na zaklade predoslej upravy (nastavenie fixne TLS)
|
||||
-> Zmazanie premennej ctxMethod
|
||||
-> Uprava argumentov [argv] - zmazanie TLS metody, pridanie suborov s klucmi
|
||||
-> zmena nazvoslovia premennych na ulozenie klucov
|
||||
|
||||
|
||||
MJ 2022-12-28 - Oprava Warningu vo funckii routine() vid tag MJ (vid. komentare MJ)
|
||||
|
||||
*/
|
||||
|
||||
/*
|
||||
|
||||
MD 2021-03-29 testovane s aktualne najnovsou verziou OpenSSL v 1.1.1k
|
||||
MD 2018-11-07 Upravene pre linkovanie s OpenSSL v. 1.1.1
|
||||
(pouzitie novej funkcie TLS_server_method)
|
||||
MD 2018-11-02 Odstanene varovanie
|
||||
dodane nacitanie CA certifikatu
|
||||
dodany kod na realizaciu autentizacie klienta
|
||||
(vid //MD)
|
||||
*/
|
||||
|
||||
/** SSL/TLS Server
|
||||
* SSL/TLS server demonstration. This source code is cross-plateforme Windows and Linux.
|
||||
* Compile under Linux with : g++ main.cpp -Wall -lssl -lcrypto -o main
|
||||
* Certificat and private key to protect transaction can be used from :
|
||||
* - External(s) file(s), created with command : openssl req -x509 -nodes -newkey rsa:2048 -keyout server.pem -out server.pem
|
||||
* - Internal uniq hardcoded certificat and private key, equal into each server instance
|
||||
* - Randomly generated certificat and private key, best solution to used dynamic keying material at each server lauching.
|
||||
*/
|
||||
|
||||
// __unix__ is usually defined by compilers targeting Unix systems
|
||||
#ifdef __unix__
|
||||
# include <unistd.h>
|
||||
# include <sys/socket.h>
|
||||
# include <arpa/inet.h>
|
||||
# include <resolv.h>
|
||||
# define SOCKLEN_T socklen_t
|
||||
# define CLOSESOCKET close
|
||||
// _Win32 is usually defined by compilers targeting 32 or 64 bit Windows systems
|
||||
#elif defined _WIN32
|
||||
// MD, odstrani varovanie o potrebe prehodit poradie hlavickovych suborov
|
||||
# define WIN32_LEAN_AND_MEAN
|
||||
# include <windows.h>
|
||||
# include <winsock2.h>
|
||||
# define SOCKLEN_T int
|
||||
# define CLOSESOCKET closesocket
|
||||
#endif
|
||||
|
||||
#include <stdio.h>
|
||||
#include <errno.h>
|
||||
#include <unistd.h>
|
||||
#include <malloc.h>
|
||||
#include <string.h>
|
||||
|
||||
#include <openssl/crypto.h>
|
||||
#include <openssl/x509v3.h>
|
||||
#include <openssl/pem.h>
|
||||
#include <openssl/ssl.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/bio.h>
|
||||
#include <openssl/provider.h>
|
||||
|
||||
#ifdef _WIN32
|
||||
WSADATA wsa; // Winsock data
|
||||
#endif
|
||||
|
||||
/* JS
|
||||
Premenna na definovanie "exchange groups", algoritmov na vymenu klucov
|
||||
Server moze podporovat viacero KEX/KEM algoritmov, v premennej musi byt kazdy
|
||||
algoritmus oddeleny dvojbodkou, napr. "kyber512:bikel1"
|
||||
Podporovane algoritmy je mozne ziskat prikazom "openssl list -kem-algorithms"
|
||||
Prazdna premenna alebo naplnena neplatnymi protokolmi sposobi prerusenie aplikacie
|
||||
|
||||
Ak server a klient nenajdu spolocny KEX/KEM protokol, tak
|
||||
SSL vyhodi chybu: "SSL routines:final_key_share:no suitable key share"
|
||||
|
||||
Priklad pouzitia:
|
||||
- klasicke algoritmy: "x25519:x448:prime256v1:secp521r1:secp384r1:ffdhe2048:ffdhe3072"
|
||||
- PQ algoritmy: "kyber512:kyber768:kyber1024:bikel1:bikel3:bikel5:hqc128:hqc192:hqc256:frodo640aes:frodo640shake:frodo976aes:frodo976shake:frodo1344aes:frodo1344shake"
|
||||
- hybrid algoritmy: "x25519_kyber768:x25519_frodo640aes:x25519_hqc128:x448_bikel3:x448_kyber768:p256_kyber768"
|
||||
|
||||
Podporovane algoritmy OQS-providerom: https://github.com/open-quantum-safe/oqs-provider/blob/0.6.0/ALGORITHMS.md
|
||||
|
||||
POZOR - BIKE protokol nefunguje na Windows platforme (liboqs 0.10.0, oqs-provider 0.6.0)
|
||||
|
||||
*/
|
||||
#define DEFAULT_GROUPS "kyber768:frodo976aes:kyber1024"
|
||||
|
||||
#define DEFAULT_PORT 443
|
||||
|
||||
/**
|
||||
* printUsage function who describe the utilisation of this script.
|
||||
* @param char* bin : the name of the current binary.
|
||||
*/
|
||||
void printHeader(char* bin){
|
||||
// JS update
|
||||
printf("[?] Usage : %s <port> <server_public_key> <server_private_key>]\n", bin);
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* makeServerSocket function who create a traditionnal server socket, bind it and listen to it.
|
||||
* @param int port : the port to listen
|
||||
* @return int socket : the socket number created
|
||||
*/
|
||||
int makeServerSocket(int port){
|
||||
int sock;
|
||||
struct sockaddr_in addr;
|
||||
#ifdef _WIN32
|
||||
WSAStartup(MAKEWORD(2,0),&wsa);
|
||||
#endif
|
||||
sock = socket(PF_INET, SOCK_STREAM, 0);
|
||||
memset(&addr, 0, sizeof(addr));
|
||||
addr.sin_family = AF_INET;
|
||||
addr.sin_port = htons(port);
|
||||
addr.sin_addr.s_addr = INADDR_ANY;
|
||||
if(bind(sock, (struct sockaddr*)&addr, sizeof(addr)) != 0){
|
||||
perror("[-] Can't bind port on indicated port...");
|
||||
abort();
|
||||
}
|
||||
if(listen(sock, 10) != 0){
|
||||
perror("[-] Can't listening on indicated port...");
|
||||
abort();
|
||||
}
|
||||
printf("\n");
|
||||
printf("[+] Server listening on the %d port...\n", port);
|
||||
printf("[+] Waiting for connection\n");
|
||||
printf("\n");
|
||||
return sock;
|
||||
}
|
||||
|
||||
|
||||
/** JS update
|
||||
* initSSLContext function who initialize the SSL/TLS engine with right method/protocol
|
||||
* SSL/TLS engine provided by PQ algorithms functions of OQS provider
|
||||
* @return SSL_CTX *ctx : a pointer to the SSL context created
|
||||
*/
|
||||
SSL_CTX* initSSLContext(){
|
||||
const SSL_METHOD *method;
|
||||
SSL_CTX *ctx;
|
||||
|
||||
// initialize the SSL library
|
||||
SSL_library_init();
|
||||
SSL_load_error_strings();
|
||||
OpenSSL_add_all_algorithms();
|
||||
|
||||
// MJ only TLS connection
|
||||
method = TLS_server_method();
|
||||
//printf("[+] Use TLS server method.\n");
|
||||
|
||||
// create new context from selected method
|
||||
ctx = SSL_CTX_new(method);
|
||||
if(ctx == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
abort();
|
||||
}
|
||||
|
||||
return ctx;
|
||||
}
|
||||
|
||||
/**
|
||||
* loadCertificates function who load private key and certificat from files.
|
||||
* 3 mecanisms available :
|
||||
* - loading certificate and private key from file(s)
|
||||
* - use embed hardcoded certificate and private key in the PEM format
|
||||
* - generate random and dynamic certificate and private key at each server's launch instance.
|
||||
* @param SSL_CTX* ctx : the SSL/TLS context
|
||||
* @param char *server_pem : filename of the PEM certificat
|
||||
* @param char *server_key : filename of the PEM private key
|
||||
*/
|
||||
void loadCertificates(SSL_CTX* ctx, const char* server_pem, const char* server_key){
|
||||
|
||||
if (SSL_CTX_use_certificate_file(ctx, server_pem, SSL_FILETYPE_PEM) != 1 ||
|
||||
// namiesto MD SSL_CTX_use_RSAprivateKey_file
|
||||
SSL_CTX_use_PrivateKey_file(ctx, server_key, SSL_FILETYPE_PEM) != 1)
|
||||
{
|
||||
ERR_print_errors_fp(stderr);
|
||||
abort();
|
||||
}
|
||||
else
|
||||
printf("[*] Server's certificat and private key loaded from file.\n");
|
||||
|
||||
// verify private key match the public key into the certificate
|
||||
if(!SSL_CTX_check_private_key(ctx)){
|
||||
fprintf(stderr, "[-] Private key does not match the public certificate...\n");
|
||||
abort();
|
||||
} else
|
||||
printf("[+] Server's private key match public certificate\n");
|
||||
|
||||
// JS get server's signature algorithm name
|
||||
X509 *cert = SSL_CTX_get0_certificate(ctx);
|
||||
int pknid;
|
||||
if (X509_get_signature_info(cert, NULL, &pknid, NULL, NULL) != 1){
|
||||
printf("Certificate signature algorithm: Unknown algorithm");
|
||||
}
|
||||
else{
|
||||
printf("Certificate signature algorithm: %s\n", OBJ_nid2sn(pknid));
|
||||
}
|
||||
|
||||
// MD kod na autentizaciu klienta
|
||||
// MJ Update [Define Macro]
|
||||
#ifdef AUTHENTICATION
|
||||
|
||||
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT, NULL);
|
||||
|
||||
// load the trusted client CA certificate into context
|
||||
if (SSL_CTX_load_verify_locations(ctx, "myCA.pem", NULL) != 1)
|
||||
{
|
||||
fprintf(stderr, "[-] CA certificate not loaded...\n");
|
||||
abort();
|
||||
}
|
||||
#endif
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* showCerts function who catch and print out certificate's data from the client.
|
||||
* @param SSL* ssl : the SSL/TLS connection
|
||||
*/
|
||||
void showCerts(SSL* ssl){
|
||||
X509 *cert;
|
||||
char *subject, *issuer;
|
||||
|
||||
// get the client's certificate
|
||||
cert = SSL_get_peer_certificate(ssl);
|
||||
if(cert != NULL){
|
||||
// get certificate's subject
|
||||
subject = X509_NAME_oneline(X509_get_subject_name(cert), 0, 0);
|
||||
// get certificate's issuer
|
||||
issuer = X509_NAME_oneline(X509_get_issuer_name(cert), 0, 0);
|
||||
|
||||
printf("[+] Client certificates :\n");
|
||||
printf("\tSubject: %s\n", subject);
|
||||
printf("\tIssuer: %s\n", issuer);
|
||||
|
||||
// Free memory
|
||||
free(subject);
|
||||
free(issuer);
|
||||
X509_free(cert);
|
||||
}
|
||||
else
|
||||
printf("[-] No client's certificates\n");
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* routine function who treat the content of data received and reply to the client.
|
||||
* this function is threadable and his context sharedable.
|
||||
* @param SSL* ssl : the SSL/TLS connection
|
||||
*/
|
||||
void routine(SSL* ssl){
|
||||
/* MJ char buf[1024], reply[1024];
|
||||
-> buf must be smaller than reply array because arrays are copied in sprintf function,
|
||||
which have some additional string
|
||||
-> buf_size + (string in sprintf)_size > reply_size = Can do overflow
|
||||
-> 1024 bytes (buf) + "Enchante %s, je suis ServerName.\n" + some string(s) > 1024 bytes
|
||||
(reply)
|
||||
-> solution is change size of buf array
|
||||
*/
|
||||
char buf[1024/2], reply[1024];
|
||||
|
||||
int sock, bytes;
|
||||
const char* echo = "Enchante %s, je suis ServerName.\n";
|
||||
|
||||
// accept SSL/TLS connection
|
||||
if(SSL_accept(ssl) == -1)
|
||||
ERR_print_errors_fp(stderr);
|
||||
else{
|
||||
printf("[+] Cipher used : %s\n", SSL_get_cipher(ssl));
|
||||
|
||||
// JS get chosen (negotiated) key exchange/encapsulation algorithm name
|
||||
printf("Used group (KEM): %s\n", SSL_group_to_name(ssl, SSL_get_negotiated_group(ssl)));
|
||||
|
||||
// JS get client's certificate algorithm name
|
||||
int nid;
|
||||
SSL_get_peer_signature_type_nid(ssl, &nid);
|
||||
printf("Peer signature name: %s\n", OBJ_nid2sn(nid));
|
||||
|
||||
|
||||
// Show certificats data
|
||||
showCerts(ssl);
|
||||
|
||||
// read data from client request
|
||||
bytes = SSL_read(ssl, buf, sizeof(buf));
|
||||
if(bytes > 0){
|
||||
buf[bytes] = 0;
|
||||
printf("[+] Client data received : %s\n", buf);
|
||||
|
||||
// construct response
|
||||
sprintf(reply, echo, buf);
|
||||
// send response
|
||||
SSL_write(ssl, reply, strlen(reply));
|
||||
} else {
|
||||
switch(SSL_get_error(ssl, bytes)){
|
||||
case SSL_ERROR_ZERO_RETURN :
|
||||
printf("SSL_ERROR_ZERO_RETURN : ");
|
||||
break;
|
||||
case SSL_ERROR_NONE :
|
||||
printf("SSL_ERROR_NONE : ");
|
||||
break;
|
||||
case SSL_ERROR_SSL:
|
||||
printf("SSL_ERROR_SSL : ");
|
||||
break;
|
||||
}
|
||||
ERR_print_errors_fp(stderr);
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
// get traditionnal socket connection from SSL connection
|
||||
sock = SSL_get_fd(ssl);
|
||||
// release SSL connection state
|
||||
SSL_shutdown(ssl);
|
||||
SSL_free(ssl);
|
||||
// close socket
|
||||
CLOSESOCKET(sock);
|
||||
}
|
||||
|
||||
/**
|
||||
* main function who coordinate the socket and SSL connection creation, then receive and emit
|
||||
data to and from the client.
|
||||
*/
|
||||
int main(int argc, char **argv){
|
||||
int sock, port;
|
||||
SSL_CTX *ctx;
|
||||
const char *server_pem, *server_key;
|
||||
|
||||
if(argc != 4){
|
||||
printHeader(argv[0]);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
port = (atoi(argv[1]) > 0 && atoi(argv[1]) < 65535) ? atoi(argv[1]) : DEFAULT_PORT;
|
||||
|
||||
// JS
|
||||
// Load default and OQS providers
|
||||
// Default provider must be loaded before OQS provider
|
||||
OSSL_PROVIDER* provider;
|
||||
provider = OSSL_PROVIDER_load(NULL, "default");
|
||||
if (provider == NULL) {
|
||||
printf("Failed to load Default provider\n");
|
||||
exit(0);
|
||||
}
|
||||
|
||||
OSSL_PROVIDER* custom_provider = OSSL_PROVIDER_load(NULL, "oqsprovider");
|
||||
if (custom_provider == NULL){
|
||||
printf("Failed to load OQS-provider\n");
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// load SSL library and dependances
|
||||
ctx = initSSLContext();
|
||||
|
||||
// MJ Update argv parameters
|
||||
server_pem = argv[2];
|
||||
server_key = argv[3];
|
||||
|
||||
// load certificats and keys
|
||||
loadCertificates(ctx, server_pem, server_key);
|
||||
|
||||
// make a classic server socket
|
||||
sock = makeServerSocket(port);
|
||||
|
||||
while(1){
|
||||
struct sockaddr_in addr;
|
||||
SSL *ssl;
|
||||
SOCKLEN_T len = sizeof(addr);
|
||||
|
||||
// accept connection of client
|
||||
int client = accept(sock, (struct sockaddr*)&addr, &len);
|
||||
printf("[+] Connection [%s:%d]\n", inet_ntoa(addr.sin_addr), ntohs(addr.sin_port));
|
||||
|
||||
// get new SSL state with context
|
||||
ssl = SSL_new(ctx);
|
||||
if (ssl == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
break;
|
||||
}
|
||||
|
||||
// JS set key exchange/encapsulation protocols supported by server
|
||||
// Without this function, client will use default X25519 protocol
|
||||
// First protocol supported by both server and client will be used for KEX/KEM
|
||||
// Empty DEFAULT_GROUPS or list of unsupported protocol by server will fail communication
|
||||
if (SSL_set1_groups_list(ssl, DEFAULT_GROUPS) != 1){
|
||||
printf("KEX/KEM algorithms undefined - check DEFAULT_GROUPS variable\n");
|
||||
ERR_print_errors_fp(stderr);
|
||||
break;
|
||||
}
|
||||
|
||||
// set traditionnal socket to SSL
|
||||
SSL_set_fd(ssl, client);
|
||||
|
||||
// apply routine to the socket's content
|
||||
routine(ssl);
|
||||
// JS remove break if you want server running in loop
|
||||
break;
|
||||
}
|
||||
|
||||
|
||||
// close socket
|
||||
CLOSESOCKET(sock);
|
||||
#ifdef _WIN32
|
||||
WSACleanup();
|
||||
#endif
|
||||
|
||||
// release SSL's context
|
||||
SSL_CTX_free(ctx);
|
||||
// JS Unload both providers
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
OSSL_PROVIDER_unload(custom_provider);
|
||||
return 0;
|
||||
}
|
||||
@ -0,0 +1,158 @@
|
||||
-----BEGIN PRIVATE KEY-----
|
||||
MIIdOgIBADANBgsrBgEEAQKCCwcIBwSCHSQEgh0gvTK6AtK0Q9jgF8fkD3bhK+mq
|
||||
crSGaTsr+M3dEpgFL3bhWKkwAKVvZkcQtq1EO/PjghbhsqWSfPpCfH+aUsMtmfMh
|
||||
rfc49qdfHMCOV2xrnab/JWaaehQlCHKLHwljYEo2ICUKi4ApgDKBIjBlC5VFWpgM
|
||||
0ShqwTgEUYYQWEAl2YJwmwKGGhMywpYxAoiIIqOFAYho3IIIXDYGCEYSwkgi5DQK
|
||||
HAKIEYURABQEHKIBHIAxkLJkWsBtZDRA1AZSYSQOogRIirAwABBIJAOFkbYA0CRk
|
||||
ChQuW7BR4LiRiyCNYYRwBKFgmqiQmwZsIbZoFCgikEgm0kIlATYlRAQQCYZoGLMI
|
||||
BKJkShZGkACBJAYoIAaAEsRMSyZiEbkIygRS2ShsiQIhySYAVJJkE5dRAyEgmyCK
|
||||
AzRqkiRK40ZiyyRMGiRQigBFCREt4LAwCoMoWYJRU8AlQCBOwyQx0sgQWziBoJYE
|
||||
GQdF0hYlCwVMIrdACiBqELUpSyRpUhZEEAMkGkQQEQGKUqQQW6iNAABqAwaCAMEx
|
||||
WoZEoAZEEjICikZAGqUM2RQFBBBGCjUs3JRJkJYEC4ANGwZiECcxEilgTBKOAiCB
|
||||
hECCyTQQWgYpYraFwRBIk6KRjIKRisQg0EZxQBQRwyByCaaIAUkKwoAxIKYoYoZs
|
||||
UEJt4EQKJIUhCDOOHAdpATFxBImRGUFACpCJ4wByHBBSSziO0iJxmChyTKZNGYFI
|
||||
0waNoURQAkOMkkAqGcaBJDFgDBRkyohsQBSKIzgEARKJSARCpLQhQERypEBkCklu
|
||||
jIZMoLYNIYNowyYykASRwRJiQIBoI5EQU7BsGLCAHBgwGxEliqZkCiZQYphIpBAB
|
||||
wIaR08YRhCYqoUZIIiNK24IFjDZFATOK2AIqohho0jiOAgks2zIqoLaJGbUM0hRA
|
||||
g0ZCAyFFCoYowUZi2jhSUhBG3BgN2AYFS5RpGykuVAQKUEJmW5BFGLCBoUCJAaEl
|
||||
xBgyIQdRGyAqo0RJI0By4kRJw4ZABACEFAYEI8IImACRCQEmIsEhkRCEAiFRCDgF
|
||||
orIlw7hIEEJMEAMqCSlAApUBVIQIGECFGJVxkIJsYQSKozSG0whqEbBBCQZqIiAw
|
||||
W8JJiSZoExJAw8Jg4aBg0DRuDMIRIyMGUcaMikAJCcBEUhYhwDhipMgFEKhsSUBJ
|
||||
CoYpEydtFJKBorZRxKhEQoJEGUgMQgQtTIIljLaRSbQpIicNEAQEwjggAEluRAiB
|
||||
ASEyGjFinDZlUCZwW6YAiMJNgSQtVDJM2jCJYDCNAwMCUAJiCAdF4pIQFEkw2QSG
|
||||
m7BswCQCEhhhQDKQlEZEEYElWMZQ1AIkTKhk1AJpGCUhGskBBAdJyBRxSURtjCKC
|
||||
i5gIgpgxSRiGw5ZtCTeFASgBEocsGbVsE0WSUEYyDIMRiTaBEBkxUUaREhUR4iAB
|
||||
5MgImThEpAYs0cJFGUYC4gJtCiBo4QJRlAIClEJAISFBnJJR4LBAGbRJYBgtHDUp
|
||||
yjZygcJklDhxCrCFWcJllDZQIxYQokSMkSARCBQR3AYNEjBJ0aJACTEQYBhEwDKM
|
||||
Q7RkQQZIWUZIIBlCBMhIASJKIRlw25YxCBhimJZsSLZxgCgNWDIyECBoIshtAzgs
|
||||
gzAQwcBkGgVFAzAoSrhlZARhEghwyhQhCRIiYDJFUyAiwBSF2jBMIRQwg0RCChEF
|
||||
YqgFADCNWJBpDJNBAyNNWIZg3AYSI0dBYBBNCxgRI8GMDDkRYYYA2DBIShgxTMho
|
||||
mYQAQDKAG4kQA8Rp2gYx0IZwWCRpAyYlI0FNAbYICqgtYCYCWAgm25goYKBg0oaE
|
||||
EcIoIoGECRclISOEWKaIIyNQyqYhCDRqi0IRSrQFJAhhkRKMJBSRAAMtUTIsEkaJ
|
||||
2Ahy0SAhErOA0MQBo6YlwzCN2zQtWjAAWLRtJBIpC6Et4oZkEUVCgqSAGwAKDKEB
|
||||
lLAkSSJQkpBEIEgSGRVCwjQSU6hhWUBMo4ZJmEZmGJVxEoiRohJJCwIC4ZhpwAIg
|
||||
CiMmARVJyARNEyQR5AYq0yiCQUYECEAplDYIGxlir6nmSsdnwQE4aIyLcH8G+e9A
|
||||
JMh4VleqODjUui8wPwVJ8p9EeE4WFmSeCmtkodQHF7OqVP7LmatI0zQAoW2xKKJl
|
||||
arQN4R0buSgB15lkAJDMJd9ACMJQm0nGwP1yJSgbTHTuLa6Q+h/Ur1j7okiM5AXl
|
||||
03HhG5I9p+K4SCBGYNqyWGKYzTgTAfDWN69JPw/host6PI56xH2yhRv1TCWHmSnw
|
||||
OdCLesM5yt6F22aSrjlTodVMTAbFbrOl3M+M/Him1QfRdC3Vs8wx73nQvJWl6xy0
|
||||
Z3IFgEqz7wXnD2kMZAPes41naps3Ef7N7kAYNFtqN28C1v/SAcYgJFO26uneApLh
|
||||
+y7RhdsQ6ruwt/fV59C6btDyGtLouR/gAGZ3ClDulayVP3khlrjd+CHv+ZU9nbkw
|
||||
yoBBwA+CNrCLaHuXNPxbkHCwcBOmDF2mJnIYoYjLgsBIsiEmY5LisBl8xKc5N9gp
|
||||
fpcYRlGxBCs7QI5J2ShG/9BzMx8tQl9EviyvEbNxYMiYPxMebsqFizSt2n+/B62o
|
||||
1qeeMSnVDVqTDNg4p21393qGuz5qa36S0uwVB2BOvRIXC3Sq4hz5JCyUROR3inlc
|
||||
pl2zzHSeSbx+R+/Dh9XmEfdG1oMBJJgIjorwt64wPRU7a3GGH88uIcxhxLWG1r0U
|
||||
PT/Hf8kMcTfMj+ttMZotk6kuqbrnsuazxt2c8CYuzKWS0NdzaMBMA89iT+enZVhw
|
||||
RXz8D72OrT9iwTNVQ6nwTW3wsIgb1DZHwxp5Tyo93MV0dalV8zGnUl7ovGwO2em8
|
||||
7gQ7scXMtZVBT7/Y3bZnq7h9XKTjNYaz99Q7RLtm59cdKsD4fgNm1Ic7u5CmQYM2
|
||||
TWrgbe6wp9kIL/lfarNb5fYaTT0rn+wGG0tlBT4oo2Oi1MwCxVhDB2s5j0bdWNCY
|
||||
Ef/UXGVJVwr+rCauoRYab/Dm6Pq1PBuEiTSKywijlGCnNreeXrvpDvq1nrEN7sjR
|
||||
Qi+DG/teSd+NaEbrb1BEy4AoJ7VlyehJncdBzBFNTG6TB+inDNLyAUwuB8LxStHO
|
||||
kyKAcTsubnAl0FCA6Cg5niuHsC4I2kM2Zq5Xhve6lGatJmwrYEgQ/0sfk8TZszHy
|
||||
GkRCD5yOcwRLdES3MKeyFjWtGJToe0quwe+PhWpFQibWL2ExFfk9LG/6T8Ru0YsZ
|
||||
Di2hBgLJHoS0sBKkHjeKc+WsApIsI7X0yf2r6GNJFNYagRDkko2Riq7wv7uAhp9s
|
||||
Uy/5raWf1WeVVJ5Sr4hjlvo0lHzRtThiWlQoHAOzuBMyiuSHW+1lT4By/21CXTM5
|
||||
Y7SxE0CuLQnRQJsImo9m9dh7t9V+IKNwg/DnPjI4xldXP1Nlvrlv8ypHV9K7V+/Y
|
||||
e3yQVeuMENIvKDxNsjPye6VIKEduqyWZVeHNs6M21rg6lYkhrXQtP2FT4gN+UnNO
|
||||
a0IKYbCfvXzKczPYUAOGIbCsUQZgWBI6agdGnH3kmfD6Qxf+ILZriRfJYd15EvH7
|
||||
6WNYVFTqfHBJeq9eJk270T3miL25NhonSHT2+THMQsFmtRD7G9GvMbt4K7WU2QWA
|
||||
TEobCGxPncKoTNZ13jAiVUwgmJX0VGqjC/VJAlPM7wJkPsmUNzq6GX24P0To9/tK
|
||||
vP4j+X19zNH/JljI6rxHsvscq0yUlL8Z/9c8VbV1DEC+bcKfFsv6CZv/fqCL8hny
|
||||
XHhIPNddGgZcpgEjZ3R5Z9lv5JOWrLydOnA8d4ZhXpF5H4qxqETROfk8OW/zKC+U
|
||||
Z6T26I66AaIJG5OgHmIlz4bfHeg3zXev71UPskRQxHxVHeDPPontQwUqa8STMjwo
|
||||
sQ2XRINkV7O/Ol/vGNBgwLfxWQwzn6a3MTOpusVrfQbMexwl7PHGsqEf1X6X7b8f
|
||||
Xm0ckF9OP93T2NeuBYgA6fhh0dfNtz0xxoRVaad09ZI92lSNvOIEvXOcQXKjoGdR
|
||||
ZDATE1uczDKtShKqNkF0Q7Q5oDYwHv0Up7J+Wd8Zmj5JenJmXYsN+vNtt7op9YEP
|
||||
K31OtHJv1Dliotwi4YPv6bFjThwImO6FQbwFgwF74+GVZRT+hJ9Bpo8uS3wYJNMf
|
||||
6iiCxEVl9L7b6I5OhLKqMbqilMn87nKnXkCfVoKdyj/pftif2OLqBVj02fXy3XhN
|
||||
RcIxjwh+Q+UMT0Vfgm0Z8EYabFjkez4i3TR+2YsYn1pLu865licRw7HB0R9Kikj3
|
||||
rnC1mo1QTzoguAYdx5fEUG/BcUcruriBUg7qdTRaUB+NfIVplXar/za7yp3YLNa3
|
||||
EHueU7Z7lByzdeoIII1jIhNaVmfei9ZwQQPJiXmqnIIAKQCPm6piTaEadnwtmGMB
|
||||
uNSTgKNrdWac+sXzMAIUd39m9lY+s2BuTIRvwySHHE+hZVSGY5BaW9DLLLYtDtUF
|
||||
k+fKiGwtNdiwgdnKDqpj3dihhKNJN36xB3SyXeUV3l7cbZ8xOCpIaJLxH/f3t+3h
|
||||
EqLJPwzt8zBTqeHG3ta0Zx2IoRLUg7NcOOmO3lD//IdnspTk4BftD5KKq1+IZ7es
|
||||
RFob4FdtH7/9pdchRuUwgXdqgJwMM1FGiWD9Ef1MmNucsMvOYFoSl0VuHqgtjtum
|
||||
rzHPOq5Ifpo8AVIJN73SuQQFKej9F/4bfySFEvuB15HKEg8NRri4yE3yl7Ul7eK8
|
||||
lY5AFJ250E3qEysGIco8MTUvqo+aH6Azf+gyUOnlpwWxM5kYrw/eSy9etCUbAWve
|
||||
3B7YTKXmR8t/23upM16qPazEYtRbJo9Y0yLknsPc41Ut0WmUMlf7Yhvq4n9UsC/C
|
||||
WnDy6Hso+3Dy/5mIOidVzoN/oKwt3HqHUvgHYyKzuvxL/2nBPMEs0VJNnqqgjq3r
|
||||
p6/UEgGJDeqcFYB/OeW5OzLmsw3VAKyIfTW2e4C5bW4Od0XkYFrfhGu72SKhna9P
|
||||
Rzi0eKOO667TDnEKJ4fK67bevyqXTdVJM8w3Rzv7JHdBNqUUGyB2neQSM0FkZe2g
|
||||
zFas6TUzEi4rnjUQ3vp5zxbL2Ogft4k+aiKKGSZoxN34KreSn0gQAA//Sziiejxi
|
||||
68lu9aKwiy9eUCTJacmAuMd246XdFD6CTCiuPbudVItolo/IsUkacLl+dX5sKeu5
|
||||
D7zZrvNw0TmGCgShOCirgIiHIOCSqZhL2xYQhLxhY6+coiCSbOvzgknJowzw3vbT
|
||||
KTm3UbP9gSBs8GC7z7pt1UBqAN4DWboFVONAoInnFprDGf0DToeHWIHEfwfTdLqz
|
||||
OJvpSWnUeqCQr+0qlBvHg1shew5eIRA0OpdlfzYHE42OIXJ2hbPRA/I1c+u097ri
|
||||
CdBQGeLNUQe0OhPxo4/Ck/rDMZnonUPuvsXF6asP+H3TPPh7C1DTBm56waarlL/Y
|
||||
pCIZQoNJm7/UAGpJa3GFKjY7Q08ncQf13XnzSZXbkg1BrxxzzbgDuhIXwhZVx6YT
|
||||
jfu+CLZj/9I094az4v4VpAaPMI9XwHaVQIt2azSLO7Sb4gXmYgSoGX6YO2/mL0b6
|
||||
XwcQmeCEedtOKDPmK9a4wKHONHl7/c0B5GaUTexQkNUQTKVnI6vEB310zOKNEo7B
|
||||
O731+kSOETiKDLHXYskMPimw/aVkSBVI2cQwK+WH85a9sk+ruuefPuhlGZMT/BMs
|
||||
RznyI6ZgRsE/+bOICIKo8MX9PtSYjARz1UCcdaoIWp7chE35eX2+aUMcGuw5I/Y+
|
||||
lwkYEoZx9NOjpp4C4795lgdj9q0mD99QrwckO9EcM00Bdd2WeDyfQJa0+slY3Ls3
|
||||
YmsVdsIA71xpcLGsC+36KfC2fzR+gZGG/7rT5mW40qGHU4rFKkkmDw1CsvqfhxOE
|
||||
lthyzNf0jLzWaBoxZZGxdTNtFreM9UQNdoF0HWu7pY9nJB694DkXYapcfrw0EPc8
|
||||
F759gJrKh57aPntGsu96K0ZuDYuhaHi5NSBgjDluDjUh218EH3ISJe3UlnJrSwcG
|
||||
C4midDPQ4fHe8nLLd2hJmKUX96Cx3Ytz2RQzI5RMV6fbPQwcuX0fZD0gxxFtcj7X
|
||||
awjSbC5ERiSIV88CgSOU6KKpv7GdJjYx3QHXHL5R4868zPixbhzwBD7zVj9cKKIq
|
||||
WDV+FRvWCkQHv5kL2446CpZM4QoeG4NpCNZXhsO+NtLcZg/QRXgb3A2CTQsRgZoW
|
||||
UWBYKCQuKW2DP+BGQRd03i19ihe1oYGqc4C50j91rW72Sz1ffp7kGPRGcjTgJIO3
|
||||
AWSN7xOe4OXBGUkAe7llVpgzaZhrYdOm/Zif3IJ/BX4G8drjZPrfkVbJRX+HOvOh
|
||||
8l5rRwJlNIOFYsikfB9NY6PDdv8yCGXbuRnxrKaX91K644OgO3ecUZW4x7C2BU8N
|
||||
HRNo/v8LV9f5URm8eCLE2rTTTyS+Z2q8k0mAQCSb8p19vWb8OoHG35y8dKwo2V/r
|
||||
1RiaZRz0NDutCXyH0fNhACRljlBykPs4Dg2GOXyjlNsnYKx7KKEiNGXcz6jSnr0y
|
||||
ugLStEPY4BfH5A924SvpqnK0hmk7K/jN3RKYBS92RlG/Rply0aZWZCtiY3mFR7+2
|
||||
T47cRmLdDTAm8oqLVmA5L9psXw76DjsG4fWW/6sViN8KMHq5zxNUvEy8ndiNkoip
|
||||
XS0A+SEvKq1njzVBGpK3DQx1NOdL8CROXnPcUNcDlpf9h55VziEIuYLvyjL1UK03
|
||||
NGnyNvjWSaTwKYbGMTk0T81oKXXZf7YNKR5tUpdijBPRjcXrE6Rou+qNFMN7Gcfv
|
||||
zJomfoaS7h4aad3K5DltzaQakRm7R92r8YeU9GQOKx1oPU0708PJ30KBlmeUb8xn
|
||||
OgYzsXklWIRRmdXSBUT9lWgvIAf2paF8PrF3llyAjo8XIOoCQyAl0KzDR8XBUVpC
|
||||
ImjkBOkODFKQc4XG14bnwMmFSbDRtBOWmucr6L/lYcmrqVXH5TmbPAY4FdFYXxCg
|
||||
YRQ8KwZZtoVHKYIby+J+iXm8rjzpqm734iqdfYbDZSAUOhy7okWAvBs+7XRe9GJl
|
||||
plMgcsZeRgPKF7J3yfeV2JPib/l7jDe+lbThRJVzxH7Wjh/0hLrx5vjRpGYHUksv
|
||||
b47LqFBRCtB/1kJRfpTUvdfuZPIEv4JFZ+uSXG1q6dsHMgSO1atkksRZjn1X71Rs
|
||||
vd7OFaKLavx9Q6qnF4s4RTsr88dHjY87SXvBkGPCdjva5Zm3VkysegJsXMPSYsRH
|
||||
6L7pwVQ9yWo4kFgxS4B25zZvUPOKaclGC2s1ImT3qx8dj1KWP00eu8vxrZX34u+6
|
||||
nMC4+9mw11uW6GIJvBFwIgSMb2R66KyPqi3G6pTPfWbT5XBLobUONg8y5/MsnEY3
|
||||
tafgxRK1iMTLLpQwRfmb0fB5UizptZEPjKS21rML07Ycfo6viFVwwOGm7V1URDnS
|
||||
yM5Yj7hwUfxSa+WFoyNf0+fJStIBHiI1XOQQLPj/YIGnsx83aM04AimffDwXXycC
|
||||
xHSFAZK5MJEUwt46nAFFdX3rZnkt0++eMRX/HB+a0IW5akg0palO82e/8UjqZeRv
|
||||
PyvQhIgxNZCbfJD1XJhV9i6ly/m2N0J7GLMDFkWCw9PI6juhkKR8pn4GM3VnPxsl
|
||||
FupJudsL804HY9D5OioT+b5pW2ExYW3RO7pb8mOoCWeiO2nCcVzrglqh2S45X24X
|
||||
CbJXp/CNUJ5CCZw5oOlQEYE+O7+2h3fECfHdni7idCSme8RGH4ZKlmAKvb25Egr7
|
||||
31nKuNScUnL3fWCIATzGCcX1riyxchHEQVMuduPBSS/qwWI7VGWOF/yqoKZ4xxPo
|
||||
4GPTba0Aebes/UhE48P0iLKmGmpCqvCx1Pcd0YZk6z5M8IPYx0+fVp1QYHNaCATx
|
||||
Tj/3nDTg6YtA1l8coBYwW8Wl6Fsv4krpZ0QV9fFz2qYW1NJXaybSwWiQ2lXrsZCQ
|
||||
vgeYmmBSnrCS9maNpjhFbTKMCfG+kcwYYS/ZdBH8Y22ntS5Ru7NMVY0L7A97/mv+
|
||||
/jnM5PE0iwlonfPaL48go1e1Kzi8HCa+GFypUyH8D5DstzIDmrSNZXINDsmHQsHM
|
||||
quAPYBaCgKIC9hfx0bWzzzxQWFItWL8ykhgnkuQ0j8KNI0di7ziyPUFw0KrH+zPw
|
||||
P3aRoe1CNO+Nr47hhcKbge9rTk0MN8j/K/sUxFlyuKSGxdn80L9TokUJHYh1Hxu8
|
||||
MG0itTZBCR486wj/ULCWOxfUTYgjV/og5oza/qDgkx7xsy8+iiznRoCkquEO6HVb
|
||||
QH/+aFzjnXFto1aKpb1QrpHZXqUpBF0veeeMDtifHoE5ZsZ8goZVE7DIfFgbCawK
|
||||
FS7MaAzBV3Jfb6VuRbWu3hUtjepwPkCCn7QfmUZXbm9WZtW0gMuFdBMuJ64CVWWY
|
||||
EW2YgG2H/zkw3Cg/fXXJZtmaAQzaeeh1r/TNypCd1QN6a30RMivp8dHx0s4JLLBY
|
||||
36k5dhnwGzZWLFUaMz85kovbQXkZ+8DjzVLJPsuYGQveVRrujtN2e+6O/lftupjx
|
||||
pRUZNhYIwnzjpUOXSeoNiQqOIXbUERebol5cnX6CLJVOsTgEzHbwwY4izutzHHvd
|
||||
3gReJVlJLWuh6Qz6uLxDW9asG44bihlcLWOYy9hB/Q+eJixlDeVTtQy8IrWagFAR
|
||||
Z6GUpV4h6fbRfAtQQA0XEWdusrLZbKlPfC5SUIOP0Jvbd2w8y6S9K2Jwcqs68usk
|
||||
EMe7m33Qlr30Kqbp6d0D8Qxi3sOdJ/u1ECh3onnyakWAZW+wYZ1aTdpW7v3/FnFZ
|
||||
DweU5LJayfiSGlMQ22W/mDdAhqseadbt08lLo8p0/jjP8CjK+WlptYXm/TYCrr1Q
|
||||
R9RhVC8n/k26lNnZFMU6Vv2TVHTxwFxfB6VCPgASIvx+csCvgbTrerPdjBuLK/me
|
||||
uxz2mTqP0m+2YsaXhIYca3g/rrDNEJ7gxr0zRK2/H/DCbDrjrSXX5BrkYPJc+t5j
|
||||
PhkJ7ocZ1e8/lrmpX/UPVrqoPUf8qY+S87l6ntQYIA2FXHKesMDLqv4XCnpRFQJa
|
||||
lLr83cwWPPdLorm7C8Wu6Pi4PySGcVOdvXFM94tNR9j6fgyraSoe8PyXo43JrDCv
|
||||
hJrSeq5o7Xi8bMRJHP5/6zpVkgQHKPc8FrVWP3QNsFy7kVJdFpqXhJjq05CJGup4
|
||||
WKe6Jh9Mn5dv5tYlDqMwRgb26jBWLXzhSi1QtJSalSa4kyVrdLjTLGEtKoDNIiI9
|
||||
I/32+ki/MQ5KAIkVbB+Zad6NmHbWXO+b+O3EuoUToIaSnZMpWpC7/ds/E8aIF3E3
|
||||
7ortKOz0O665mwV/eDWan8Zy7Yn3QaasutZ/qILuQ6fjTX5Ccq9DReakphFmGTHV
|
||||
TZjMFbizetonT7NywIGcErneYdWKYeDv+186YXCxLOs6zNcP/UkaXveXgtgD9DUm
|
||||
SXHEdrhv4Bo+nl9Q0B82DajY42dLzvX9XkbJ52LQGzaK8RI6+1L5x5kgheToo0R7
|
||||
oJZ4nOe5NrEccfv1u23U3ASNsEfOSNXvY8xGO31ksaNd9IXyCBQfygE666OLlMcb
|
||||
EEt9h7UjOswHnxLNPuL3UhNm8sNl5qom7gkApHpCsQFPgDavxIXGHviRBwNMowzs
|
||||
GUcBKPOExvDMY8ip1dMgo1otlBlSh//sOlAp8BgXoTQMi2nvtSnDL5anX6zme3tU
|
||||
aNBWaW+LF6iWeSXCov16K9dNA/Yi2b+CC2Wewo3IsP7bmtBXI7i/HhdWJ5dj5DJM
|
||||
GDocf22pUmaKkZs1AWV7+GiKLRgxiwqMHushKqx0/m1DT5HwlbwSQn8utiwmr/FM
|
||||
lP/bs8rRBsCIieR14N0dJTL7OQ+4srrysk7TfvV9UuTFg+IaoyjK1j+FgNtxMQ5Y
|
||||
7E63ulGO5dogiTxAmxrYOtzxcUat6TZp7vAXoBuGcxf2foV2dEIzMS4XIiVWMyOv
|
||||
jghCWfI5DGIe0lB7H7I7PXFV9EmV43P04GNPRyVXkMeSUrkQw++HDsS4oH7AqQ==
|
||||
-----END PRIVATE KEY-----
|
||||
@ -0,0 +1,161 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIdnzCCC5SgAwIBAgIUJ85yF8KSw0QrCNIkQdmFpQeyNiYwDQYLKwYBBAECggsH
|
||||
CAcwZTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcM
|
||||
DUZha2UgTG9jYWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJ
|
||||
bG9jYWwuZGV2MB4XDTI0MDIyMzEyMTMxNVoXDTI5MDIyMTEyMTMxNVowZTELMAkG
|
||||
A1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2UgTG9j
|
||||
YWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwuZGV2
|
||||
MIIKNDANBgsrBgEEAQKCCwcIBwOCCiEAvTK6AtK0Q9jgF8fkD3bhK+mqcrSGaTsr
|
||||
+M3dEpgFL3ZGUb9GmXLRplZkK2JjeYVHv7ZPjtxGYt0NMCbyiotWYDkv2mxfDvoO
|
||||
Owbh9Zb/qxWI3wowernPE1S8TLyd2I2SiKldLQD5IS8qrWePNUEakrcNDHU050vw
|
||||
JE5ec9xQ1wOWl/2HnlXOIQi5gu/KMvVQrTc0afI2+NZJpPAphsYxOTRPzWgpddl/
|
||||
tg0pHm1Sl2KME9GNxesTpGi76o0Uw3sZx+/MmiZ+hpLuHhpp3crkOW3NpBqRGbtH
|
||||
3avxh5T0ZA4rHWg9TTvTw8nfQoGWZ5RvzGc6BjOxeSVYhFGZ1dIFRP2VaC8gB/al
|
||||
oXw+sXeWXICOjxcg6gJDICXQrMNHxcFRWkIiaOQE6Q4MUpBzhcbXhufAyYVJsNG0
|
||||
E5aa5yvov+VhyaupVcflOZs8BjgV0VhfEKBhFDwrBlm2hUcpghvL4n6JebyuPOmq
|
||||
bvfiKp19hsNlIBQ6HLuiRYC8Gz7tdF70YmWmUyByxl5GA8oXsnfJ95XYk+Jv+XuM
|
||||
N76VtOFElXPEftaOH/SEuvHm+NGkZgdSSy9vjsuoUFEK0H/WQlF+lNS91+5k8gS/
|
||||
gkVn65JcbWrp2wcyBI7Vq2SSxFmOfVfvVGy93s4Vootq/H1DqqcXizhFOyvzx0eN
|
||||
jztJe8GQY8J2O9rlmbdWTKx6Amxcw9JixEfovunBVD3JajiQWDFLgHbnNm9Q84pp
|
||||
yUYLazUiZPerHx2PUpY/TR67y/Gtlffi77qcwLj72bDXW5boYgm8EXAiBIxvZHro
|
||||
rI+qLcbqlM99ZtPlcEuhtQ42DzLn8yycRje1p+DFErWIxMsulDBF+ZvR8HlSLOm1
|
||||
kQ+MpLbWswvTthx+jq+IVXDA4abtXVREOdLIzliPuHBR/FJr5YWjI1/T58lK0gEe
|
||||
IjVc5BAs+P9ggaezHzdozTgCKZ98PBdfJwLEdIUBkrkwkRTC3jqcAUV1fetmeS3T
|
||||
754xFf8cH5rQhblqSDSlqU7zZ7/xSOpl5G8/K9CEiDE1kJt8kPVcmFX2LqXL+bY3
|
||||
QnsYswMWRYLD08jqO6GQpHymfgYzdWc/GyUW6km52wvzTgdj0Pk6KhP5vmlbYTFh
|
||||
bdE7ulvyY6gJZ6I7acJxXOuCWqHZLjlfbhcJslen8I1QnkIJnDmg6VARgT47v7aH
|
||||
d8QJ8d2eLuJ0JKZ7xEYfhkqWYAq9vbkSCvvfWcq41JxScvd9YIgBPMYJxfWuLLFy
|
||||
EcRBUy5248FJL+rBYjtUZY4X/KqgpnjHE+jgY9NtrQB5t6z9SETjw/SIsqYaakKq
|
||||
8LHU9x3RhmTrPkzwg9jHT59WnVBgc1oIBPFOP/ecNODpi0DWXxygFjBbxaXoWy/i
|
||||
SulnRBX18XPaphbU0ldrJtLBaJDaVeuxkJC+B5iaYFKesJL2Zo2mOEVtMowJ8b6R
|
||||
zBhhL9l0Efxjbae1LlG7s0xVjQvsD3v+a/7+Oczk8TSLCWid89ovjyCjV7UrOLwc
|
||||
Jr4YXKlTIfwPkOy3MgOatI1lcg0OyYdCwcyq4A9gFoKAogL2F/HRtbPPPFBYUi1Y
|
||||
vzKSGCeS5DSPwo0jR2LvOLI9QXDQqsf7M/A/dpGh7UI0742vjuGFwpuB72tOTQw3
|
||||
yP8r+xTEWXK4pIbF2fzQv1OiRQkdiHUfG7wwbSK1NkEJHjzrCP9QsJY7F9RNiCNX
|
||||
+iDmjNr+oOCTHvGzLz6KLOdGgKSq4Q7odVtAf/5oXOOdcW2jVoqlvVCukdlepSkE
|
||||
XS9554wO2J8egTlmxnyChlUTsMh8WBsJrAoVLsxoDMFXcl9vpW5Fta7eFS2N6nA+
|
||||
QIKftB+ZRldub1Zm1bSAy4V0Ey4nrgJVZZgRbZiAbYf/OTDcKD99dclm2ZoBDNp5
|
||||
6HWv9M3KkJ3VA3prfREyK+nx0fHSzgkssFjfqTl2GfAbNlYsVRozPzmSi9tBeRn7
|
||||
wOPNUsk+y5gZC95VGu6O03Z77o7+V+26mPGlFRk2FgjCfOOlQ5dJ6g2JCo4hdtQR
|
||||
F5uiXlydfoIslU6xOATMdvDBjiLO63Mce93eBF4lWUkta6HpDPq4vENb1qwbjhuK
|
||||
GVwtY5jL2EH9D54mLGUN5VO1DLwitZqAUBFnoZSlXiHp9tF8C1BADRcRZ26ystls
|
||||
qU98LlJQg4/Qm9t3bDzLpL0rYnByqzry6yQQx7ubfdCWvfQqpunp3QPxDGLew50n
|
||||
+7UQKHeiefJqRYBlb7BhnVpN2lbu/f8WcVkPB5TkslrJ+JIaUxDbZb+YN0CGqx5p
|
||||
1u3TyUujynT+OM/wKMr5aWm1heb9NgKuvVBH1GFULyf+TbqU2dkUxTpW/ZNUdPHA
|
||||
XF8HpUI+ABIi/H5ywK+BtOt6s92MG4sr+Z67HPaZOo/Sb7ZixpeEhhxreD+usM0Q
|
||||
nuDGvTNErb8f8MJsOuOtJdfkGuRg8lz63mM+GQnuhxnV7z+Wualf9Q9Wuqg9R/yp
|
||||
j5LzuXqe1BggDYVccp6wwMuq/hcKelEVAlqUuvzdzBY890uiubsLxa7o+Lg/JIZx
|
||||
U529cUz3i01H2Pp+DKtpKh7w/JejjcmsMK+EmtJ6rmjteLxsxEkc/n/rOlWSBAco
|
||||
9zwWtVY/dA2wXLuRUl0WmpeEmOrTkIka6nhYp7omH0yfl2/m1iUOozBGBvbqMFYt
|
||||
fOFKLVC0lJqVJriTJWt0uNMsYS0qgM0iIj0j/fb6SL8xDkoAiRVsH5lp3o2YdtZc
|
||||
75v47cS6hROghpKdkylakLv92z8TxogXcTfuiu0o7PQ7rrmbBX94NZqfxnLtifdB
|
||||
pqy61n+ogu5Dp+NNfkJyr0NF5qSmEWYZMdVNmMwVuLN62idPs3LAgZwSud5h1Yph
|
||||
4O/7XzphcLEs6zrM1w/9SRpe95eC2AP0NSZJccR2uG/gGj6eX1DQHzYNqNjjZ0vO
|
||||
9f1eRsnnYtAbNorxEjr7UvnHmSCF5OijRHuglnic57k2sRxx+/W7bdTcBI2wR85I
|
||||
1e9jzEY7fWSxo130hfIIFB/KATrro4uUxxsQS32HtSM6zAefEs0+4vdSE2byw2Xm
|
||||
qibuCQCkekKxAU+ANq/EhcYe+JEHA0yjDOwZRwEo84TG8MxjyKnV0yCjWi2UGVKH
|
||||
/+w6UCnwGBehNAyLae+1KcMvlqdfrOZ7e1Ro0FZpb4sXqJZ5JcKi/Xor100D9iLZ
|
||||
v4ILZZ7Cjciw/tua0FcjuL8eF1Ynl2PkMkwYOhx/balSZoqRmzUBZXv4aIotGDGL
|
||||
Cowe6yEqrHT+bUNPkfCVvBJCfy62LCav8UyU/9uzytEGwIiJ5HXg3R0lMvs5D7iy
|
||||
uvKyTtN+9X1S5MWD4hqjKMrWP4WA23ExDljsTre6UY7l2iCJPECbGtg63PFxRq3p
|
||||
Nmnu8BegG4ZzF/Z+hXZ0QjMxLhciJVYzI6+OCEJZ8jkMYh7SUHsfsjs9cVX0SZXj
|
||||
c/TgY09HJVeQx5JSuRDD74cOxLigfsCpo0IwQDAdBgNVHQ4EFgQUTjGffRm6tMlF
|
||||
9wDEy5Sqa/WGZpgwHwYDVR0jBBgwFoAUhYbPRDALyI1ALGoCVaAj4E8o8WcwDQYL
|
||||
KwYBBAECggsHCAcDghH0AERlsw/HzjkRFsg48aRqr+rqa0QANoQOritVtth0rRok
|
||||
tkkwJTBhGOdRBSYE0JcpsKDNspCLCC1Nre6ktz/Tm8STY4eIGKXvD1eO48CqfIRV
|
||||
2+UfR8MEhG/EGpdDz1Ib+pwtxb6DLvf3k/DkMyT8+UUhlLp4M9w5VcTZLy7V5OUb
|
||||
0LCVRFr1QRrGiWCY1jrKiXc2oyVySLhYAORJWOPJeSl2OBah6JAYTnxjfyyJRMkh
|
||||
0eces5KGwWaX/v0B3YHj0nQaqGryItjGSlAEOIH/5fmEoWiWmZQk5yb4nPVf2isB
|
||||
64o55E1alsgwy5aL7zq/in6g+f2bmbX1xmordok+UqHdtmvNiUP/IIITadBVneoP
|
||||
aEaC4lJrbKzYDXqPoP99KMTNWPMtSF2Lg2lU1gbn5+yluP7HlNGpeEWnSVtRX+4B
|
||||
REaYqtdhfz+UkcGJHbr+V4H0HS33Cn8lr6yG8XlmG5iEIemtwghBKFBjzkMp3DRx
|
||||
K1e6OURNgZIcI9nX0ABZaSz21VtcleINlbkpCt7sZHE3DCgT7CGMa4FJcq8bhZkf
|
||||
0tbEueTCa6Z0dvVgrHsErr/jvW7Yru30csqZElMf9AAki5zHHdOuPaOu/9E0Wx+J
|
||||
MGiIPXEjIP3TSKw5WbVEVhex/JOsPDJV/CJ90cFRS+bFGMTqcz88az+PtGeH6gRp
|
||||
UdyIfWuLTcU5yQG0e6t114uk2L06YJsUcTS1rEHkE1EoWYxNYVkYtqASOfnkqm/6
|
||||
oTRWAG4s2sa3OYV+xV2hsA5rvs+jryfgpnoGdWWjdNDU+QKpkhsYw6trRaCkxYRn
|
||||
sW7mLIME7lM9Tkj/aC1464Eoj2noIlVJ+Kaw4gOLGmqY/Ipw0kbhR6doxg6BhYIa
|
||||
5ZB+MlC7DM8vXfQEc8dkmUEL5JuSpMBHOcMYrrq3jjCwOgnjcSub35wDGk09tRrc
|
||||
iOpfc+3i4V9ezbdAFOHZUMI5KC/k8brlbRxoARRoR01d1NUP+e0q1DnWTOOtdhjQ
|
||||
KoaXnTyfNrPCIph8pmu81w5fUhymhmVTwTBK9CySrCS2Jo6MEEyLSY7eie2QcIMK
|
||||
6FQelpcyg12P6Ta6dSVShEsR4ewSOw39xSYVTZxBaKaEKrkzxt95tvh+QauDG1mu
|
||||
rOhHzIq69/oGxfMaNWqzbJYkBBLMpkzTTr52tLeqLSo9fdD6q5goRlQbQuY8AJj8
|
||||
/LNQTJECYjNbN9Ow0YNXJyrsjBnK5EnmFU0a587nBabfQNz1tUrM+/ZkvKDBfeA8
|
||||
BioG1oegt36pSS4QmgvgcHP1E1BA7inM6ey7YbbgN8pt3FVyXKorqCQ0nZctvQmY
|
||||
5VRRAusmSr/xMFBOZTM/IeReA+yh6t9v77JfcHC+FV7KjDo1ATgmXjiyPz8o3g4z
|
||||
eWJj84R9jaZjAGD8w8P2okZQBCFxedXWZDFk2Sz7Vm7ruHOGyBuwuWIwcCfNiAiU
|
||||
YBfnB4QPQwY8xDEZCUU8rU8JtMsj8j5bh8asblVPuvn7kgmW9cU7JmwmM4N4JqsN
|
||||
rIAUlla08JEnlyR0068L3BusLdLx4b3Qa+Dm0jT8IhUvJRxjlSvmwM8ULnXkwiu+
|
||||
0zVJc6q9es1Z7ZVIHTq3nF7cg5hMYQoKvFPqanQww2kAfskuLDZ/Yg9YzSy9ISfD
|
||||
knfA7Hc5d8UA7qWLknZ1jb20jmOVXV8cXChUGVISbwcdOM32L+xwplzLNvm/6jZW
|
||||
e1WyeakM/slDoPZ9oMzK+5mQQmCn3TKQIa62JHM1diwAh2TV5BF3WzD8W694gv3e
|
||||
uwJS/OjnDF87VIPj/1JO71j+U7/skHU0+/jKKqOrLFKn7b1stRQg7NAjh8PxP5GN
|
||||
TbbuykXqDxLU7BvuZKN+dmFwMezr/3KJ3gOGAsFrgygdgPc3LQ1V9BXm7DlcsfA+
|
||||
5FX3GaCE2by5d8GlXhFx/NQmY/CXlvY0Q9+d6inETcambEUC/BfxPDvl+kQJ2EmC
|
||||
sfgeQmuq7TsCgOZqOZvLAlO2gEtrZQDAsmAPzN8CmkwTEl7D/e2uK5bDSJEKHMRf
|
||||
j43LkjULHRvL7necR7esxWSokfeouYSe6hFgB3b1KHxMX++GHkccAWSV8t2GiVhn
|
||||
jdnc8b6avfAfkGqkyEmRanmV0RhvtzsEuGLtFAPXtJQPULWhlt2Sg+EyXviqXSkf
|
||||
KOU7wQgpvb2dkrl0qvJD5dBCFxawCHHFfpj2Y0N/z3kQLUAh+cxcb5SuVcja340h
|
||||
ajw9qApuCPrq7YGwkj+AqQ5Xuuu5QSPketqfIj1QmRVyE2i0wvNk6MHmjWdikymg
|
||||
2w3PTmxZ3veMQo5ADZsodgsmmapIw//hjkuBsALmfuMlpEPGWTx4Q2ck7inE9QM9
|
||||
0wvVvW5I9SVYKodniDmHP4/U4o8Ep5OZvKSDbiJVC5j0j8rbiZdI4HfZMJ5+wf1h
|
||||
1zIOcdOLqbz8QxAij17NCCTM37V0yckLtHe30tbMakcUybvSS+8bH/sq44F+EHiL
|
||||
WMWQbjNy3lZKc4xwt7xtK5Gi9C679iGjlgWqUFveYGU0S7S34uFtCDHOYROC67ZW
|
||||
Z2V1r00VUIOfGLy3OdneVKpZlQngKwUSa4BNKJNazhvD36xu/Tn+Vz14WSEmXNQe
|
||||
OJvqXsS4cG/LBGxr9NY1M1Yzve91EnMcyKbmEeOa5tFyszbEkSFnNlCW+tebZTwP
|
||||
SjGEp0qMe59RwpE9UMCxIfC8WFuJQivZWaYGUjI75IHJbKyfm/3cMfsTNVjuqZj9
|
||||
wHpf+yySOYNWaZelAMYz9N/GtwrSAH3MmHNyrCKMJ3z64jbvwTKCBWXScDooDyfN
|
||||
HD6TMq6rbu66RdS1QRXtPhlLVRzxihJH8VRq6sr/ewDQztLVqsl0Ow7uFN1utjII
|
||||
+ID7ecVKiy7Cc2SBeIJOqHm+8G5aMLOb70etE6E5roO2/koadAgIuOXJoRHGGTil
|
||||
tj6JWqKdaMA2ldKGPtAGlpe208xMfNRB12Wk/Vr+ZFeucv9St+GakVqMaAU4gLJK
|
||||
pYfvSWdX4zXbKo8kOIAy/HLu+xq+nHIOgBL3VzAo+YY7J91sSy/mACTtBwtUnuk7
|
||||
1l/3YyIWvbfxPlf7kfym3LeFlrjFOlaUi/JQiW/23kb6jovLtJjhMJMO8c0yuobi
|
||||
eWENzygFrZnPlv/jKEzGb4bCkymK3oYhEtynOyQ+JknqylFBF8aA6eeNKNev8OjH
|
||||
QWIFgBt0XYeIKxl5lYhq5J6ULX0ZwcQxS93t+iKwWvKw3NKqt2D7VvWogZC89WNy
|
||||
GMabcEU+unbGFqplmEe9SV6UU3cyWmUFEfqJmBKXyCvRtDilV2NxHCfArguqHduv
|
||||
o+mA/r0TdEEPLBDm3BodGKTrszsate3qBnKZWjrdQ/Dx9f1IbTjqgKOYx3g0X2nq
|
||||
kZ8YaEUmO0lHVuJRTsaSA1w8RgXppFN90Hr3mMFRHSUYYpIi0ORUHfGbtz8akkD3
|
||||
bwBo5OfLDjtJQ3i+ZKyNpgBBEKJQ3VpiKKwwi3C010cGxWC0R5tJoOYs3B3jKha6
|
||||
oQAnv7Pd8ScbHcIRCqVDKFDvGrhOHYOMhRQul8aSGITRHg5UV0H9M1JuE7R//qpB
|
||||
aRAMXi/GSMAAlT/vuu/FU7s4kyjAuTxQcWYlz4yBwP+tpUMCmkCCR7MYb7b9QTGv
|
||||
e7ms8jLmoHPM5ZvEucHp2/iZkOdouLn8qnKFRjVAJaE20smfB14WdB1dwQVQfR3Q
|
||||
3dDRDbl8Ug52nK03Jr13BPL56U7IS2B2J5/QLA3bbTtbe1X87ZYTkW63ZvtqKR2U
|
||||
kxkkJd8TWWiQJpFeHkDN3GCAs+4mlwEw7fBVEuyFbk5LFl/dJsaUGZTWvftRODHj
|
||||
AQSIewOdHTbSwTMvrDxFBc2wErAl2a8NNd6tN6VySGFPozVFGKdRt3GXL+/ZFVED
|
||||
Xx7nEMWJp69zEYFnW0Lk0JczP8MWdOd/AkZvJ1zcc9TfezMx0v4xaOH3KLqlz0hJ
|
||||
BY2oJGPny3K/i0ZzLTdcWqXx7BqLd4OhWcNo2dS6sW7009lBadNqyGb9upk3FMR7
|
||||
ArHg6GOqBSUV4vw/xo5hbH/hzeu1Vx2nqxDBDQAjQK5dF79aDcZZI6Sy0wmHOMKd
|
||||
/nH+57k1NzOCy2TLrPdzXY6YNgkVllZMCEgW0a7xpTRNh73ibI6n9StEORSngh5n
|
||||
PSDZK7TB8vC10z6kPYoHe6ihdqdpQdJI5npFpIH3C0Ok1RCjD7ujhnLVPxtTYBQi
|
||||
RqXXyW3S846kXaAl7umwbKvnHYmEk0UgzVlLQVugCb+mMa77MEZpEpLmthDLQJDC
|
||||
504y3oV5uj5uYN8FE9dXAlPJ1BtrOlp5xj5Z9NINUJK+wW0ElgdryopbFqEoaW7S
|
||||
VDMHeEf4ofGm25aeiD9ybfWLmxBZyyoT7x3B76Q10grXIHS5pvFA/7/xblXdFK/C
|
||||
vp/gMXe+FJjS8Ot83sxvuvrEbZkLYwmGNqTM4zMhzz3uJyhtd4noAcSWE0vuDdu3
|
||||
X8MZ12Dh0hUHYkQRMRpY4oq8xdHKflXcTVaztP+wmzytG1Tuaq/JA7196ljxJY8O
|
||||
T2JbNnarvlqjmQnkvh2rVlQovZFCcFLPodTV2MuOrGfrb4wtgGlLDYkdGDcpo1ZT
|
||||
XoXxwcNtKnOcAzC30LruQK+rkIPZHBuylxjp7lKIXhguYFgvtlXRVYihVm8yiXXu
|
||||
f2cPQfytadXxpeQJv55DAZWXhZpLOlDo9Ev/8agHHh8HCbznGYa47XaiVV90SxiL
|
||||
XNRbtsoXIhe86z5deF07pGT+YHElhRjEkxPIanCYcxJ3r/ZfRF91QGZ7vIEs0RLJ
|
||||
mNLcGC1UuyUoDa/ArVnesvKSVkwm8NpOvg95kzBWZQuwnOWkrf/dgirWYKE0+y2j
|
||||
OmXCdbtq+JUtgrQd8FmNv1LltyrZzRqpDiO9chyn4sJHorFv81wW3VeVzViSIySV
|
||||
reVPXetHvjjoJUcVUtN0BP0HUgy5R+0jzKY/JoIafAcb5rTgIanRIUffYNcyrcU8
|
||||
HEzhpxAsrAwlmf87IRcxz/v+GM/dejUMCYKprXcl+4NIvwNB0+CKbAntFw7wwLKV
|
||||
AhREDE/Fcu70KnwlL9T2g4uY9qVkL060fjlJhkrK2KAZ1GUBW4EpXQGsZgr0o6Mw
|
||||
XB7mFeIfe/PTszl0QyyC5ZavKNQk79Fszuu7ppVKTG81Ik5UD/uDTeuMLCe637oV
|
||||
9HMJ4Q+e98sy3TNcxcuXxg61imE3TAXfjwWnUsdn16qCak8RS/Q1tI1STSyYYv3B
|
||||
qIfngui3ZZamw4ZBvMgtXwfy6h9R774djeBGemMEAuP72KMh9m5BPU5w/K0bKXaW
|
||||
1uuWAOv8XiglxfZk9uIiIU4EPZtjGkfrSRTZq9996JeO16SVUTUenE7UhfkLFqsU
|
||||
2BnkHU3s4PjIXyZYSEiH+pkmdr/RUjFN4EmpkxvGjHhUVmvsLVrpXw2CA1JWg+kE
|
||||
SoRzcZ5g+yCow9rNiJr8L5fRp4qCm3gq8NC4DE4Jhj2sQdpnP7h/BYTcVvQsePBM
|
||||
99k0hZyWJKkBXBZuszFEqm66xeNArxGFxiBJY9hPFHGB0j//QDRpQJrHq+2Uwgcf
|
||||
xKYqpP1h83hkvZtCv/JwakAHykogDfDMOlRAWjczJzIZ0BbH7p9ckRAU0pGQ1jWs
|
||||
H8otcl69wVaM1aEGewhX4PiCjYBYDdHqhSTSda797YMVf9gydAh+C7BnmWZfo0Pu
|
||||
nVCyT66GoMLCvKnYFx/Zs/izXzPXv46HrRS7yW4ruz1LXYA2fFtj2EDR+LFK8l3F
|
||||
ZJ8sWxSlM7LNnJYrS701Je+H8nxFONedjoqn+EvTnuHe7e3SIFSSUXjV+hZ5qSL/
|
||||
NXRUHLLphcgvyz5/5QgOOJQbdZBSAd17jKkV860QPMj5ZAuhU4qx7yHVUP7PIlWn
|
||||
ZYTq4zY716AA96Z8xK5uqT3pN8ZvxN8eg6ZR+lLUpiHJa3pkVXbp3oh9L+F6uRlN
|
||||
dhtgHHC4Y1Qy/Snu1h3/RAZeD1T0p0wk59uL+roPyVFOd2QhNLwHbriHftOTvsfc
|
||||
qXIZM5tDK09z2OZBQKgpmi8zTHZ4oMfKLENbbICMkJGYxcbJ/Bk9dHe3ztTcjJW3
|
||||
wcTYCjtRVF6Rzufp8wsVQ0VWaH6UxtRkdZuwvMvf4QALFywxNTZ1f/L8/QgVHSMt
|
||||
Nz9L
|
||||
-----END CERTIFICATE-----
|
||||
@ -0,0 +1,9 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: compilation for client.c file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem prikazy na prelozenie a linkovanie EXE programov s vyuzitim OpenSSL kniznice nainstalovanej v obraze BPS_PS
|
||||
:: MJ Pridanie makra AUTHENTICATION pre autentizaciu klienta, ak nie je nutne autentizovat klienta staci zmazat -DAUTHENTICATION z procesu kompilacie
|
||||
|
||||
gcc -Wall -Wextra -o client_run ./CLIENT/client.c -lcrypto -lssl -I C:\OPENSSL\include -L C:\OPENSSL\lib -lws2_32 -DAUTHENTICATION
|
||||
@ -0,0 +1,9 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: compilation for server.c file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem prikazy na prelozenie a linkovanie EXE programov s vyuzitim OpenSSL kniznice nainstalovanej v obraze BPS_PS
|
||||
:: MJ Pridanie makra AUTHENTICATION pre autentizaciu klienta, ak nie je nutne autentizovat klienta staci zmazat -DAUTHENTICATION z procesu kompilacie
|
||||
|
||||
gcc -Wall -Wextra -o server_run ./SERVER/server.c -lcrypto -lssl -I C:\OPENSSL\include -L C:\OPENSSL\lib -lws2_32 -DAUTHENTICATION
|
||||
@ -0,0 +1,30 @@
|
||||
# Makefile created by Martin Janitor
|
||||
# DP1
|
||||
# 9.5.2023
|
||||
|
||||
CC=gcc
|
||||
CFLAGS=-Wall -Wextra
|
||||
LIBS= -lcrypto -lssl
|
||||
SRC_CLIENT= ./CLIENT/
|
||||
SRC_SERVER= ./SERVER/
|
||||
OPTIONAL= -DAUTHENTICATION
|
||||
|
||||
ifeq ($(OS),Windows_NT)
|
||||
# Windows-specific options
|
||||
LIBS += -I C:\OPENSSL\include -L C:\OPENSSL\lib -lws2_32
|
||||
endif
|
||||
|
||||
#I C:\BATCHES\include
|
||||
#L C:\BATCHES\lib
|
||||
|
||||
all: server_run client_run
|
||||
|
||||
server_run: $(SRC_SERVER)server.c
|
||||
$(CC) $(CFLAGS) -o server_run $(SRC_SERVER)server.c $(LIBS) $(OPTIONAL)
|
||||
|
||||
client_run: $(SRC_CLIENT)client.c
|
||||
$(CC) $(CFLAGS) -o client_run $(SRC_CLIENT)client.c $(LIBS) $(OPTIONAL)
|
||||
|
||||
clean:
|
||||
rm -f server client
|
||||
del server.exe client.exe
|
||||
@ -0,0 +1,160 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIdjzCCC4SgAwIBAgIUN0p76iVLFlnmnk5I2lxh/FY89lUwDQYLKwYBBAECggsH
|
||||
CAcwZTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcM
|
||||
DUZha2UgTG9jYWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJ
|
||||
bG9jYWwuZGV2MB4XDTI0MDIyMzEyMTMxNVoXDTI5MDIyMTEyMTMxNVowZTELMAkG
|
||||
A1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2UgTG9j
|
||||
YWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwuZGV2
|
||||
MIIKNDANBgsrBgEEAQKCCwcIBwOCCiEA4mTQbxXW7KvE84Go8ktmQrst7JxioPjI
|
||||
M+h6sZqAgLbMuZuG2znL7I/Ubku7jDDeSbtizuuKg096ZPcZyShabn8tD6FktVNj
|
||||
cwjl4g8OuK8IrpsZPZ7b1f5VpXmQleGdWjqJAmtuOzkXtkYyVsI5p9vOCuOlnFFC
|
||||
GFnwRI1r9JaAh//rNSaHrEVg2pXuY0pwsvantf+Mua1pBMZ8hBNKoxEkfzSUiAyg
|
||||
xG5fCCkRlviY4WZAJiQ+3ci8EMO71zlI5E6ZdTo3O+0GZIv9/GKQB2PFv0E0WdSe
|
||||
UcKHO4KyELrQtOF57G4Y/ypN6/Ixe8Ej33KtBOjlBs3ri6bZxrCjy2uLNSUYt8aC
|
||||
aMBhdOXg1esJAZhaefUUdJd+5cpxmwx8G6emmyHDueEUoH0ntj7FBSG1YAGAsgvp
|
||||
rlUzNmtc04747L2tkkJG/3z/vnpWOnuq46A643/X7tpT1o2rCzBPnuouxMW6TvbA
|
||||
UmqGZ/dxyJ9fT1hq+19Exm1/02wP4zDQ2Im+aaOHie+OFZx0hIJucRb8T20NnQAo
|
||||
4vQJiIwcxKFqpkOzWh5wrkP59AeymPMnuvctEMbaeC4fv09XBkM4xWo710o7HPjm
|
||||
qFMkYh0MaraDK1Z4c8F+9Q0JPO/3fl2/YsfnmYWo3U1Act+kGJ9Z9wCIwYpDIjq9
|
||||
L7zAMaQlhBp6U6qWafb3Uo0I6iXdH1fKJ1frEsK+OuTZXwsps/eFBEFduf5DdncW
|
||||
zunhJakRCIJA68Cgt/LThXZzHJ1LaN9vVUNr6US1ZlIiFnNTtr3KEVggddkVCQu2
|
||||
V4tX6358LB0hG6rh/8W/nBer6Uh8DDh9RlklOijXfiaNcDlYBqEMviDmGOYhwksX
|
||||
5vVCd5zUH0GLXmsoP7K3Ch/VIB7gI5qa8TUSmgs9ULsEYOGYEUamYN1nGpJU6W9y
|
||||
uBwDDCCq3K++YUP/4cM15slCd1p/oM25z1P7bTUGLl1X1aKqJLE4eH84I67psGw0
|
||||
31Vu41U6tLIoeZKi2UusO9kBCoH1XOMDt/MdJLWnZg47N8o9wkZuGQvCJhReakhq
|
||||
hOJpSe5RfuajoIwfy7au3QwgXg02uOJ8rCJvXNmPydTmer1BSCOR9dYjnlNDlJcw
|
||||
XvlazspKU+ylrmeH9xUT0O41PVBdYhKXg0V0RrCbgUQH1qLn06wOXzaITjlzCESn
|
||||
I+Xz1RIYGI3j4IMUOgz+Q9CmBhAJ1/G+To0xC9QwCG0M/UYsDkdvABCjOHxEHd2N
|
||||
NdxDBjTvWNyYEZJQA4T3vye2FrrJs7UocMqphTZgh1M0CHUP1lQE8ldHNbc9HdYf
|
||||
JHlMMK2H/DF1B+u0+YPuZciVzpsDQHeVQo988vMExmzcZVoxhYr60QZ8Cljys73D
|
||||
ns0Tl79uYxpX6k0OSbIvI5k8tE8PesVivl7t5SzXXrHEozs1GAESgyJt6dPpwDyr
|
||||
zByzD2Q/esg6DJKuwrKFFLO2Ed9HLxVfVeYQrmvj2vbTczd1rio1TtOPtHlhe+5y
|
||||
qjh/FkVJSdb1vqib3KHxumgPPPrv28KajOXcONhjWteQ9PvS/L7UVxovGTOkSfsC
|
||||
oDL/5LEbrkqjkIp1vhpXa9wRFGDeQG8i7GSP1DSgvO+bkUAbe2efKMbhVAscOFbb
|
||||
CIabeKvGhTsPsJEF/eYz5vYzcaSKC37Ra5fQ7sgBwdEZO5KW1DojUKHvTX6Uuilr
|
||||
Alt+stgr37Seg2km1xHxJ2M5MK7xIFSv7crO1uu0GO8Dt+857/0sqWUNCvWjSL6s
|
||||
4oazZ4JWonjmRlHegaMny04wx2ZaJTGe5gSupHCur1DmJ8m5QfXbXr/8SKF9ICRb
|
||||
du32OYKZB8w2XmEf/LtKgSo8ksQl0ttFA6b4S9423KsfGrlgpnFiPLHRaJoPiV/k
|
||||
DPXOFpu4HAPoMVmYpJAny4rE89oTRXSEN+livYjtZsBFVtkM/a85zhgiZLstpeJK
|
||||
38NBukXEXgvHEch8kC52Ng4JUEmy8iiKDId7Ij/IXySkwo9kfm913yRGxpOStL9u
|
||||
WWeCPruWySkc0ncjP1Bi6GXD214oftGh16tdM6bXssFMUmjxfq+77pgRqtbKxjaU
|
||||
rFzKp3r/hteoSMpnq2pn+IV+Eu30RXKACgY7MFRlfxxr4i//AA5bhfdjOmjIYKDA
|
||||
bgrsyByeC0wX/GeMcosHYkhffiBWydE2Y4cvBmCxTELw25kikmXvVfEFCOvUk7Ov
|
||||
LCbA66CRGnvOOEce9syc7e7Dd3sleUaLoE2JfgqztYt25mUJHK+DZbsTqyIYCVRC
|
||||
HALsJImlLt60b7bASITD8FCA1OablNb3uLciT504XiXenNsnWgEbphSf69+3Cy9D
|
||||
C5j8dt4k9VYQt2SQz1jP23KCEuZqIzy7OKfx2Qzg7eYZ6OR17otNgbU1hA9ABBn7
|
||||
ouBLN7JnPyKObXP+fN1QkiIRVeW4qCSSanxYVImlS8yrzM8uukHyP5xQtqp5L0Y4
|
||||
cnK5JiJ+NvXO/foW3pVgbJPx0g3MKUdlvqd8gXgCelxE16rBoLvb8LwyXTWgsROn
|
||||
eQgSlwRVzCTK9oVfinLG45vrufIn1iXJxsDfaj6msuqcC8RSKy0/aKcXxSgl+0nD
|
||||
A3i+m5ktCgrPJJ9M51io2ecvDBy+251JPJnpqWHxsXMs0vhPszzK42tiC5pQPMkf
|
||||
ulS04ic8vuWkDfei0+IunxyJ8L6EKhNJFEnnU5z9k0KLi9jYmATD5Kakxb4fTrjd
|
||||
vl5WLXUAcru/w93BU+LsvHLy4KZMcr+k6+BwABonwyhC7KUjrTTa0e3WNdjpU14B
|
||||
Lw0oscGtzMWVl5KwfYIKoU5HF9WgawczBPanPye7yt6Vvb36FnRO0mTPAQy0t7Wn
|
||||
Eg7HarcA5DMYxV4hkB7kSlIGSekQ0GRABK4YdaNPEGAYxuvlBLP68vhEujARFAXZ
|
||||
pRrK+ysrzX//WJY3Y3vmk3NACV/RDqfokwySYNLC3+ToOak0JYnmQd8EZEqhoL31
|
||||
WjHcG78JaSKw5cg4aHeV+W7ZYpruS/c28kpI4ox47SMrumrrL8fP0+3FAg29d2Mm
|
||||
xM4tr1vnElQh457fJ2w8dWum4M7AJhyUQyDwcV9TnqbFYKCRVxmA5/OUVLCVlaN8
|
||||
9N5yaKHG0uWhyHMEC8y0OJs1dw8DWYmEserjXtAGg16CCEUztQV8HdIBd1EekQho
|
||||
oxlTp9oV/Hvul7gfp7aEtvWXhPUHSGHeFNCU776Ac0SfCV/xc1naWfot52/Pd4G0
|
||||
g58AS5F8l+PnjM2T2bwlroYdeoBWRhLu3YCMmgWzFfLLb96mQEZJlz0Q5JMlTsgq
|
||||
2zWfhBhWW3EVGUzQ+QSvIV1vVY3jHXseAwRKb699I6LkUhxZiBaebhRX4E+mUY06
|
||||
F4LHVqEi+ia/FsiLGWhbm/R6ntkKZA9Gu3Gu8NrC6bLNGB5IXJGo4jyhueh71Lag
|
||||
Wd6GJYBcyQhUflYJpvDF52uAFCtX2VV8ozIwMDAPBgNVHRMBAf8EBTADAQH/MB0G
|
||||
A1UdDgQWBBSFhs9EMAvIjUAsagJVoCPgTyjxZzANBgsrBgEEAQKCCwcIBwOCEfQA
|
||||
QVt6346wBPySLh2vjzeBIMH0S9voQKpbK8a9tWEylCAwhoAtSSdvuHqmauCRj5/q
|
||||
fSsroRMGf34Zi+k3i9gf9AvyL51iM9TPucYElCKidPBlY6OArByUhXxvad/VM+da
|
||||
Ji5ZEEvL2WPU0/pGqaELXsnb1gKtZuBVB936BPsvZ/HpEYe8PhxwOEe7aWqCOYuV
|
||||
yoL18t+kQ91+aOjezZqLW5fjJEKRRAvbt0EOFXxUUFRu3j9qy0ie0p+Y1xvGfmR/
|
||||
EuCyY6jJ2cGROg2vI4ezojrbaci4aQ9no/G3jFQnjo6Qpepyf7aMbgBB3UIaxHK9
|
||||
6CMzSYseql1VFlZ69M2MC/PTZGHqBMlptvU7LiFUgCzaFy4931OTH6d1EgpXLDAj
|
||||
At9JLJYA33FY/vhCBwH/ePJyqasUQu4n+MVA56na8dvJTTPy/Tv7msfSBN4KvuZP
|
||||
V+327KGBYjN2M6tOIIzYhf7nEQzsjKmDcLXp+7axTCUF6yal+YSBvQRTlyrAQ3nd
|
||||
nh4TpP8WPahFL2X+l/KaU0FTEjh3bSQNLsjWKlO/IOmKuv1MPLzi23KwbHACcZWC
|
||||
9d64tbW5ErGkunHb72E1IJeXeFNK8lYO4OceMjZgGBa7RdiqVVz0uh6vbz7R/LTo
|
||||
t+WNK85Q/i7Ha4ibbSs/t6av8nfPZFIoSTq0VPtXo851B+1qlbhyrQKAEAE40sk2
|
||||
ehwSibk7o2tj+9yQbCBhVyGUhIbgMn/skD8FbxE+i036nt9a2A72cPZPUYOaqvHo
|
||||
hqzSxRtUyH9LQbgZr9tm+SFx1xImYSiRKBmhdLqDL0jPGKnOFiMfwRVNMg+w+ak5
|
||||
tazM0fpjK3KUS0GQ2BrC03pd2rbVxD57awUqYiLKA3O/3LLFfnfGFtDTkZ6gyYZF
|
||||
hXZM1MUyEgH75qIceBTJPh6mVSlEhIwHwwQKXXVCpa2itaJH+OYBKKbQlYaG7RPh
|
||||
HHK6HLo8SYJtQLkQ6ZBsYAjWBcGSTWsNCDwg3lSTEUdinH7x8imFsAbwGm9Wf5Qm
|
||||
RsoQyuF11MqDdKGDpdHOwfqaHINsYM18JIfqqZkqiOhz5JJauP/sv6i8QBUX6I1x
|
||||
gUJNEMI8Pe8j+tx1HeUpiLPgeT0M0pLW/Ot1AfiiXdToTJvXQfsl+U3NgXhvTEiK
|
||||
e0qz51VgzW2uVsVxKlIBjBOuax0akxfi09w/EBmACC95y+DnfuHP9/ASIZ1pP8iv
|
||||
DbpWO3CB9z+9kzebEo156LteZLvkwGccI62dO9qJSNKQ8ucqgOnQmhtlxy/lqx5S
|
||||
wPWVZncvDGesnhxYUgqQ7Xo7uFpmicDoyAaeWnxYhoM5JjpOTWX8oph9UF1Q1NO6
|
||||
JQkOq0jjRxVshXc4BE1lKvbjLKhidhU1SozQTIGj/Z1LiIzbhW3nFdKlL7Gswqet
|
||||
yzhsTP4l0l4ATQBdFcY2NONsjsP2H41Obr8Jai5/AbGRP9mVER5NJLcyKw5NDZ2v
|
||||
z28A0FJFr2U/16wBM2Ki/x5Aqh7+G8bjT6XSuYVtrJCtonOB3h14KGSHXcZzz+YE
|
||||
H0clExRibfMO7BMPRU3envWMTi/MMC9bXwt5iJuy4phaWuMUcexVunoA2QhDAQt9
|
||||
7fSLsXLaD9UIL9k8PnKY4Vx1GD/I01QWGz9NPzPIYyfwE2qbC1LlbSNjOp5G/uWI
|
||||
SXurH39QZ9EwEraLQoBJpdjghE3mDMgHaZ5mn3gVoyqAh91Bw++ilSFhhejNB4/B
|
||||
TSI8+kuvQpyizmQAin8OqvnPrh7WiEVKqx2dS2Lmb9PkpVHHlhSo2tcBlt/a6g4Y
|
||||
5z/sQhoyoLvfWfkiQ14gkYzKa0zEYuGnsph6FWQDYyV+d/bnn1hrWxviNONjCdcZ
|
||||
0XFeCyfywS0dJSn4ZLuPD5EUoJvtXDElezII6T0NraCDDfSPkN3eL78oWp6pb3D8
|
||||
puTFBMpHNk7+I1HbM0nknxm5f3xTJZVsfciIDVloS0aKGtOTLUII7v5GqZMu08VT
|
||||
jo1K5RK287MikmpKMz4ZyejHm4snOuDwad1TzcfshZmHnv4J/+zHWs3w6QjvLdy0
|
||||
3tQ1D0Tu/U1nt4C5Tx1AJOQjAswTVdxKVEfezFOZqhM173XshNnY7dQrG1RCE0cQ
|
||||
5zpRe5ZrOjd+ZpuQR0V2GFnnOBXlb9NomIS0uURc1+KbaK1bSnsUTmZNe9By3f8S
|
||||
3u8ZUoj54mlSQqlz+3lxNNovukqPl6HeAa1Ze0etrqdsegkSFgKTSmZD6RT6pOeI
|
||||
8OcjIirpv7vQteAMG37URKUjS+T1DWe1JIDJ80dXXj5Lhrau3wgADDZzTf4r9nPM
|
||||
4Yyw2mkwvAFksSJdthmy5sA8LGTH40DOgJVmRVZTvxd3L/BYjCkCv00qEmgEj5r4
|
||||
5mdDO1+A00/p2EZso3VoX9ek+oITiGqxXyHYl0FnTf3+NmqZPh32GnBpEpwwPZvd
|
||||
WIyCAkazRvf40EZdJuYU8L5z2x/ICDxxeDg4MAS2TRg7pY6IwiozWODVMiqdTI7D
|
||||
mR8WBFqq4f3NK+sOKvHbYyOrMNmkfjR87ApVOBgdu6w02y5NrSyYVlAD4lEB9zuZ
|
||||
p/hhi7Zr1gW+P/0ThpoYKxA/kx2/yNZOwC18Q7O7Mh6+dVS1qPEIajpOOu4/6SmG
|
||||
pEGZqI028BnJQkB/CvyrP3X5ejz11RdZPi6VC6PpzrBS7hg/C82+Wg6pzWOTigb1
|
||||
h9BZrFXleOiFAWgaE+hUujmaqAn6t2XTn5b3Lbps2YY5wk2hsT4M//PDvh6Zv+Gb
|
||||
fMLbDUSlQDqc/nonFQqt4pR4YIkbmNXemvpqXoIZQtQaGoJ+Gf7nRdG6T5AISEMa
|
||||
PZFl/LV8b6hdOCZ+p+yjByliS3nWd25FjsXdtotOOPNeht2BhDIj/6W3AAHUKFk5
|
||||
eB0M60e4GsV2sJb6ZZiIZDM/CCb1Q1xiLmci4BKaWO5xTN/fMYgiw/uUgWfeSn0X
|
||||
IijVc+hZFnq/csUF5ZYz+pT9kAgceWZGNBQfPp4s/1lBH1drg9H2SN7wj7nJrOef
|
||||
4Z+hAfnVVOSqUUJXfOMporximqSxbW9hdUnkzsW6NZbUN67jBDhatvuNRDUZ/d6L
|
||||
AzEFFzSBtSNHHozkm5UmV3AZdrlpJMErYQA070BaMnd34s39x7Kq37tKXfPugSTz
|
||||
Z6DQuh4dNHlPFAsw6Ich0iYYCXIiNeACfn/URRmrQ3sjiWIHHb+t364Ce3iiaAW+
|
||||
jgd2YE52nRgR/CW8NGlwnhvOgJAH+hjmiRYovufnUxW8QdQ9rZViVwHsgJE+ku7I
|
||||
IFTBsLUaKWX8uEk4jw8jlWFqUYrNu0sWBO2t/LIvYPKNU9ZZs+4kf41gjAJYSEz2
|
||||
ThmU8g6wBv4cTV8EhwjBEGmRYGNLeNTyHWG7W2qYjeKIpfGxOlWFZSQ0iDV4SZqo
|
||||
pMzINn1yTCpp2ubyEmwXnpy+R2iCm9O8du94ZR3ffeGAQGVKMXXsUjCWeLaScZsp
|
||||
xRQKD4hEg93nT9SoTBdx3M+rSRfzbtxxcBGmJElrrgj2I0EUunDtEOFwTNLHSwwy
|
||||
yD84L79lMRig4jYfZI4zPIaPONHjLy3Tmeg7VpdktVs4qDVIaPz1V1PemwADYxfD
|
||||
WV3c0STo3QvkKmq7WlD2Q/oKsjszPZkVqo977ClBiAaTj+upxDi5Yy+Zec3bWbyg
|
||||
TrXfksaG05mhuzcBs7/u/DoYiPfAGo+IbObY0ofoL0+/STbl2p0wFfGRGhZ4N0o/
|
||||
S5NOVbJL7khhLvf8VRX8jeQXh/DpBKAvl4sZw3ViL23KkN6XsecxZPR2Y79Q/X3m
|
||||
cyGrH4S2c+uxHUPjzTyS+cZavHBXIKPRjzvhdHw6smmUIckaY/n3JL5JyWyjjUS/
|
||||
6iugMcybQFOhg3mmbxr10jN00gy6DbV7SmDDvAxtpG4PVnfvPJU0ylVzITIBl0MN
|
||||
IoIQFGlXlWoH6VKfwdQ5qNz7wYuVovN5rDejOBi8h+WvUo+wyCw0TKWq9NIPb/7/
|
||||
U7jkwJ2Xu7YyiaWYMjMUADBCdon/ygidfjZotZN8WpKcZmKenlkKX4de9R768dwn
|
||||
nSjPgUdvcnC7zO4dq6sp0URps9iBlG+jogK8UfWxDdWt1y60pMZ8JZUzBERfh/3q
|
||||
TAPeGFDt5gUBysWhXZJXR5PF6FFCZLrrSpXRtd0JP3HpVuEmkS+VurfZPJhmHLGh
|
||||
KejNJxOzSBl8E2ycxkiV8RGQZ0nL3hNDcvv6lcSwj1F1eoDElORF9bgxmODz24bQ
|
||||
IwdHBNhUpWVLLMi2PB9En/KuOT2oXAUVjL0WuOzzO7yYkla8IIFmpCb4Skp812/b
|
||||
3kdeP7sdRRav3XlgQx6gJJG2IvozHtdSIW6iamMpPCVnErV7nbydhywerjeNsO9e
|
||||
nhoPgjt1xklbVWcZWTO5cXf2ahVRUUMnagrLOabjERGGmwgsFELqji2XiUPnEBBX
|
||||
PPTVK990XH7C7bDDS5BZbm9xXb9T03N7GU3HFqJPMpzIHD8oxIqZ0H8Ds/E+BccV
|
||||
BoZJUGYPayR/NE4szCSPTc1CAsbTFaahlMtsNxP18Hc4Bzy4uQcO4iLf7dGnEVvY
|
||||
yAeZGioi86Zk77dkbIPcONDk+tuV5QkJIVzJPKSKskWijucG7yqh8Aha6RnFwfWP
|
||||
aSeJSuZfzAZhqzQ+o1S4/Bg2wCJLp3O4a1MLVexwZBiRBUL5g4uYxA9vI0RVv5tM
|
||||
vFVKKB54w+OK9SU/P3oKd+euYcawVi6d+iKBJwgUwRJDeHDhQ81m09L+JY0Oa4Hs
|
||||
1BUfruXOxkbt9UAfqmE/icpsj1Qf0SI7MUnIamUtsm7g68yIOCCwdTVt2JnjvtcM
|
||||
E8QUXKGs3Bfqq0DT6I85Ri7gFnvqBK240QQP6UbsQ+Y/+1TSFK0tXUEhhsaXN1Ye
|
||||
OD+QgsMQimNKwNZHUKhotYPkS3z+CaO97t+mimgIlCqY/3iZn/fvut/0mVyguhts
|
||||
LYEQvoTVHRx0tFyZv4Ua2VNom5zJkTaZdVpAVtOICijsqr91IkXLH/Emb+XQ3Lcy
|
||||
TbJBBKinsJtmf6C9m8miNpt5Yg1EG2qBbaurlszfyU1pEc1r1L2ffGXjjPr9T8Uw
|
||||
hmdTinmjH/6huoEBAoNKZAskaBSTX/zC+BwVI7zWp0vh7dUJEJ75fe344pa4epQ8
|
||||
HR2+UkMeX9cLLmSZi4gdg7m2/lZhEdT18HZgmspUZoM1pKvZSmGhUYS/8tVg8hC8
|
||||
NEfOrwJpLz1AISDZMtP5S0Jr3jSU9nKO5ZFdYmpZohroEYARI3GKs1/aTYt0swy2
|
||||
Nd9sf3DOJKMe1I1HJLnC0LB3l9SR65Fl68gbnljCPES6Vbb4UMQeJL3nk82Y52VW
|
||||
L6S7ZddPfGRWMNKeWnCu347u+/QR/YD+7cpZeKetoi+Mxdd2quRiHphFFf5PMmSz
|
||||
HnRdnSO430329Zg90yiX+wBy92AQd0cG706DB1E2s84WX1xHGcC7o5oc0pnH7cv8
|
||||
hE0Y5qoQBD+LpDbAPbpr13ByJnulGTXhrWz/Z1hEovkMOpV4Do4MrAoyy/c25jSi
|
||||
bKwPaoHP5Fl7I+9TiWNWvRMV1N4dhLYo8Cau2Dv0XsOv6gKXOf24uapflq1pn6tH
|
||||
jjjChNRcqVodrDEf2+L7Vwgtxdzgw6thG8y9UnJydwMftqI/xfGUxmVaK+e0PUaJ
|
||||
kiMXpWJcwiL6BhJ2ngVOmmnNOXSBFsO583w6YNxYAhaTnQs7kHrod6fmJeApTHp8
|
||||
3hwj5sdYPUmbn/rkThIUJDeSoWHkIBm6s7emxXn+GoJOdzun8oqcYkptriVNg0V/
|
||||
S8LoGEzgY/smw7cAp05skH8psBJclO45JfImbrwkZFMPyeQLH3XK69wigjT22DYp
|
||||
o6LRvtzoWUQziRj7JKOMHbOfKXn56cPGTEezF2LNxNXdDP8b72MelSCVMVA9wVOE
|
||||
aYcA7TuyUBWLU1y/QnFSdtq/48jTcGGVGEO5l07POlxh0NRPjPuqjjGPR5LZYWi9
|
||||
MF121z5OJ/gvHLSnPT6hbu5QP94cKpRWdAK+bu5VrBlMnC0uUZJwy9c+ms9Sk0wS
|
||||
BAdRlM71FilYrbO31homWXKBqbPx8j1IXHTCyvT2DTp/5vIpMklPY2iC6SxDZoqL
|
||||
7ERMXWuSmLvRAAAAAAAAAAAAAAAAAAAAAAAABg0WHiMrMTk=
|
||||
-----END CERTIFICATE-----
|
||||
File diff suppressed because one or more lines are too long
|
After Width: | Height: | Size: 104 KiB |
@ -0,0 +1,7 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: run client .bat file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem testovanie spojenia klient server na lokalhost adrese s vyuzitim portu 5000
|
||||
client_run 127.0.0.1 5000 ./CLIENT/client.key ./CLIENT/client.pem
|
||||
@ -0,0 +1,7 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: run server .bat file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem Spustenie servra, ktory "pocuva" na porte 5000
|
||||
server_run 5000 ./SERVER/server.pem ./SERVER/server.key
|
||||
@ -0,0 +1,324 @@
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.6.0
|
||||
*/
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-03-04 - doplnenie funkcii pre uvolnenie nacitanych providerov
|
||||
*/
|
||||
/*
|
||||
JS 2024-02-24 - funkcia initSSLContext() rozsirena o nacitanie OQS-providera
|
||||
pre plne funkcne PQ algoritmy na kazdej platforme
|
||||
- doplnene priklady nastavenia premennej DEFAULT_GROUPS
|
||||
- testovane s oqsprovider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-02-17 - testovanie PQ algoritmov s pouzitim oqs-providera
|
||||
- pridane vypisy s informaciami o pouzivanych algoritmoch
|
||||
pre KEX a certifikaty
|
||||
*/
|
||||
|
||||
/*
|
||||
JS 2024-02-08 testovane s aktualnou najnovsou verziou OpenSSL 3.2.1
|
||||
*/
|
||||
|
||||
/*
|
||||
Name: Martin Janitor
|
||||
Subject: DP1
|
||||
Description: Implemenation SSL/TLS [CLIENT] connection with usage of BIO structure
|
||||
Date: 2023-07-12
|
||||
*/
|
||||
|
||||
#include <stdio.h>
|
||||
#include <errno.h>
|
||||
#include <malloc.h>
|
||||
#include <string.h>
|
||||
|
||||
#include <openssl/crypto.h>
|
||||
#include <openssl/x509.h>
|
||||
#include <openssl/pem.h>
|
||||
|
||||
#include <openssl/bio.h>
|
||||
#include <openssl/ssl.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/provider.h>
|
||||
|
||||
/*
|
||||
Premenna na definovanie "exchange groups", algoritmov na vymenu klucov
|
||||
Server moze podporovat viacero KEX/KEM algoritmov, v premennej musi byt kazdy
|
||||
algoritmus oddeleny dvojbodkou, napr. "kyber512:bikel1"
|
||||
Podporovane algoritmy je mozne ziskat prikazom "openssl list -kem-algorithms"
|
||||
Prazdna premenna alebo naplnena neplatnymi protokolmi sposobi prerusenie aplikacie
|
||||
|
||||
Ak server a klient nenajdu spolocny KEX/KEM protokol, tak
|
||||
SSL vyhodi chybu SSL routines:final_key_share:no suitable key share
|
||||
|
||||
Priklad pouzitia:
|
||||
- klasicke algoritmy: "x25519:x448:prime256v1:secp521r1:secp384r1:ffdhe2048:ffdhe3072"
|
||||
- PQ algoritmy: "kyber512:kyber768:kyber1024:bikel1:bikel3:bikel5:hqc128:hqc192:hqc256:frodo640aes:frodo640shake:frodo976aes:frodo976shake:frodo1344aes:frodo1344shake"
|
||||
- hybrid algoritmy: "x25519_kyber768:x25519_frodo640aes:x25519_hqc128:x448_bikel3:x448_kyber768:p256_kyber768"
|
||||
|
||||
Podporovane algoritmy OQS-providerom: https://github.com/open-quantum-safe/oqs-provider/blob/0.6.0/ALGORITHMS.md
|
||||
|
||||
POZOR - BIKE protokol nefunguje na Windows platforme (liboqs 0.10.0, oqs-provider 0.6.0)
|
||||
|
||||
*/
|
||||
#define DEFAULT_GROUPS "X25519:kyber512:kyber768"
|
||||
|
||||
/**
|
||||
* printUsage function who describe the utilisation of this script.
|
||||
* @param char* bin : the name of the current binary.
|
||||
*/
|
||||
void printHeader(char *bin)
|
||||
{
|
||||
/* JS update */
|
||||
printf("[?] Usage : %s <hostname> <port> <client_private_key> <client_public_key>\n", bin);
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* makeClientSocket function who create a traditionnal client socket to the hostname throught the port.
|
||||
* @param char* hostname : the target to connect to
|
||||
* @param int port : the port to connect throught
|
||||
* @return BIO context structure
|
||||
*/
|
||||
BIO* makeClientSocket(const char *hostname, int port)
|
||||
{
|
||||
char buffer[25];
|
||||
memset(buffer,'\0',25);
|
||||
sprintf(buffer, "%s:%d",hostname,port);
|
||||
|
||||
BIO *bio = BIO_new_connect(buffer);
|
||||
|
||||
if (bio == NULL){
|
||||
fprintf(stderr, "Error creating connection BIO\n");
|
||||
return NULL;
|
||||
}
|
||||
return bio;
|
||||
}
|
||||
|
||||
/** JS update
|
||||
* initSSLContext function who initialize the SSL/TLS engine with right method/protocol
|
||||
* SSL/TLS engine provided by PQ algorithms functions of OQS provider
|
||||
* @param client_key name of file where is stored private key of client
|
||||
* @param client_pem name of file where is stored public key of client
|
||||
* @return SSL_CTX *ctx ; a pointer to the SSL context created
|
||||
*/
|
||||
SSL_CTX *initSSLContext(char *client_key, char *client_pem)
|
||||
{
|
||||
const SSL_METHOD *method;
|
||||
SSL_CTX *ctx;
|
||||
|
||||
// initialize the SSL library
|
||||
SSL_library_init();
|
||||
SSL_load_error_strings();
|
||||
OpenSSL_add_all_algorithms();
|
||||
|
||||
// MJ only TLS connection
|
||||
method = TLS_client_method();
|
||||
|
||||
// create new context from selected method
|
||||
ctx = SSL_CTX_new(method);
|
||||
if (ctx == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
abort();
|
||||
}
|
||||
|
||||
// MD zabezpecenie overenia certifikatu servera pomocou CA
|
||||
if (SSL_CTX_load_verify_locations(ctx, "myCA.pem", 0)){
|
||||
printf("CA certificate loaded\n");
|
||||
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
|
||||
}
|
||||
|
||||
else{
|
||||
printf("\nCA certificate not loaded! Abort ...\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
// MD nacitanie dat pre autentizaciu klineta
|
||||
// MJ Update [Define Macro]
|
||||
#ifdef AUTHENTICATION
|
||||
int res = 0;
|
||||
|
||||
res = SSL_CTX_use_certificate_file(ctx, client_pem, SSL_FILETYPE_PEM);
|
||||
if (res <= 0){
|
||||
// handle error
|
||||
ERR_print_errors_fp(stderr);
|
||||
printf("\nCLIENT certificate not loaded! Abort ...\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
res = SSL_CTX_use_PrivateKey_file(ctx, client_key, SSL_FILETYPE_PEM);
|
||||
if (res <= 0){
|
||||
// handle error
|
||||
printf("\nCLIENT key not loaded! Abort ...\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
/* verify private key */
|
||||
if (!SSL_CTX_check_private_key(ctx)){
|
||||
fprintf(stderr, "Private key does not match the public certificate\n");
|
||||
abort();
|
||||
}
|
||||
|
||||
printf("Certificate attached\n");
|
||||
printf("\n");
|
||||
#endif
|
||||
|
||||
return ctx;
|
||||
}
|
||||
|
||||
/**
|
||||
* showCerts function who catch and print out certificat's data from the server
|
||||
* @param SSL* ssl : the SSL/TLS connection
|
||||
*/
|
||||
void showCerts(SSL *ssl)
|
||||
{
|
||||
X509 *cert;
|
||||
char *subject, *issuer;
|
||||
|
||||
// get the server's certificate
|
||||
cert = SSL_get_peer_certificate(ssl);
|
||||
if (cert != NULL){
|
||||
|
||||
// JS get server's certificate algorithm name
|
||||
int nid;
|
||||
SSL_get_peer_signature_type_nid(ssl, &nid);
|
||||
printf("Server signature algorithm: %s\n", OBJ_nid2sn(nid));
|
||||
|
||||
// get certificat's subject
|
||||
subject = X509_NAME_oneline(X509_get_subject_name(cert), 0, 0);
|
||||
// get certificat's issuer
|
||||
issuer = X509_NAME_oneline(X509_get_issuer_name(cert), 0, 0);
|
||||
|
||||
printf("[+] Server certificates :\n");
|
||||
printf("\tSubject: %s\n", subject);
|
||||
printf("\tIssuer: %s\n", issuer);
|
||||
|
||||
// Free memory
|
||||
free(subject);
|
||||
free(issuer);
|
||||
X509_free(cert);
|
||||
|
||||
// check certificat's trust
|
||||
if (SSL_get_verify_result(ssl) == X509_V_OK)
|
||||
printf("[+] Server certificates X509 is trust!\n");
|
||||
else
|
||||
printf("[-] Server certificates X509 is not trust...\n");
|
||||
}
|
||||
else
|
||||
printf("[-] No server's certificates\n");
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* main function who coordinate the socket and SSL connection creation, then receive and
|
||||
emit data to and from the server.
|
||||
*/
|
||||
int main(int argc, char **argv)
|
||||
{
|
||||
BIO* sock = NULL;
|
||||
int bytes, port;
|
||||
SSL_CTX *ctx;
|
||||
SSL *ssl;
|
||||
char buf[1024];
|
||||
char *hostname;
|
||||
|
||||
if (argc != 5){
|
||||
printHeader(argv[0]);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// MJ Add keys for communication
|
||||
char *client_key = argv[3];
|
||||
char *client_pem = argv[4];
|
||||
|
||||
hostname = argv[1];
|
||||
|
||||
// Assign correct port number
|
||||
port = (atoi(argv[2]) > 0 && atoi(argv[2]) < 65535) ? atoi(argv[2]) : 433;
|
||||
|
||||
// Load default and OQS providers
|
||||
// Default provider must be loaded before OQS provider
|
||||
OSSL_PROVIDER* provider;
|
||||
provider = OSSL_PROVIDER_load(NULL, "default");
|
||||
if (provider == NULL) {
|
||||
printf("Failed to load Default provider\n");
|
||||
exit(0);
|
||||
}
|
||||
|
||||
OSSL_PROVIDER* custom_provider = OSSL_PROVIDER_load(NULL, "oqsprovider");
|
||||
if (custom_provider == NULL){
|
||||
printf("Failed to load OQS-provider\n");
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// load SSL library and dependances
|
||||
ctx = initSSLContext(client_key, client_pem);
|
||||
|
||||
// make a classic socket to the hostname throught the port
|
||||
sock = makeClientSocket(hostname, port);
|
||||
|
||||
// create new SSL connection state
|
||||
ssl = SSL_new(ctx);
|
||||
|
||||
// JS set default groups for key exchange/encapsulation
|
||||
// Without this function, server will use default X25519 protocol
|
||||
// First protocol supported by both server and client will be used for KEX/KEM
|
||||
// Empty DEFAULT_GROUPS or list of unsupported protocol by client will fail communication
|
||||
if (SSL_set1_groups_list(ssl, DEFAULT_GROUPS) != 1){
|
||||
printf("KEX/KEM algorithms undefined unknown - check DEFAULT_GROUPS variable\n");
|
||||
ERR_print_errors_fp(stderr);
|
||||
SSL_free(ssl);
|
||||
SSL_CTX_free(ctx);
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
OSSL_PROVIDER_unload(custom_provider);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// attach the socket descriptor
|
||||
SSL_set_bio(ssl, sock, sock);
|
||||
|
||||
if (SSL_connect(ssl) == -1) // make the SSL connection
|
||||
ERR_print_errors_fp(stderr);
|
||||
else
|
||||
{
|
||||
// JS get chosen (negotiated) key exchange/encapsulation algorithm name
|
||||
printf("Used group (KEM): %s\n", SSL_group_to_name(ssl, SSL_get_negotiated_group(ssl)));
|
||||
|
||||
/*
|
||||
if the server suddenly wants a new handshake,
|
||||
OpenSSL handles it in the background. Without this
|
||||
option, any read or write operation will return an
|
||||
error if the server wants a new handshake.
|
||||
*/
|
||||
SSL_set_mode(ssl, SSL_MODE_AUTO_RETRY);
|
||||
|
||||
char msg[] = "ClientName";
|
||||
printf("[+] Cipher used : %s\n", SSL_get_cipher(ssl));
|
||||
|
||||
// show certificats data
|
||||
showCerts(ssl);
|
||||
|
||||
// encrypt and send message
|
||||
SSL_write(ssl, msg, strlen(msg));
|
||||
|
||||
// get response and decrypt content
|
||||
bytes = SSL_read(ssl, buf, sizeof(buf));
|
||||
buf[bytes] = 0;
|
||||
printf("[+] Server data received : %s\n", buf);
|
||||
SSL_shutdown(ssl);
|
||||
}
|
||||
|
||||
// release SSL connection state
|
||||
SSL_free(ssl);
|
||||
|
||||
// release SSL's context
|
||||
SSL_CTX_free(ctx);
|
||||
// JS Unload both providers
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
OSSL_PROVIDER_unload(custom_provider);
|
||||
return 0;
|
||||
}
|
||||
@ -0,0 +1,48 @@
|
||||
-----BEGIN PRIVATE KEY-----
|
||||
MIIIlgIBADAHBgUrzg8DBgSCCIYEggiCWQAuggQPvwR+gw/ROxCfAA+QvPgBxPvh
|
||||
hPvhfhe/vRexAvwPvPifCvfAgQPAuBgAgwPOwggwBP++O/g+/hQfv+//O/vP/xBh
|
||||
vwBhigv/P/efAwQeQRQgBPxAQQP/wRfAgQPQuxAvSBQvxuwfPfuAAAwvgfhPRAvf
|
||||
AeggAev/AAfAvhfRvxg+wgAvxvuegf/fvgBPgQwg/fQQwAOQPPgvvQvhQhQfgARO
|
||||
PPhPP/hus+yAewRRvwvgAfh+gdgfeQfQQwPgewAfPfhPAwfewRgAvwwgAQuuPwvw
|
||||
ROwwAPyAAPPAugAgAQC/AQewwAAxOvuvuwBxBPwP+g9uwPStgfwPuQQBPPuwAvBy
|
||||
BQf9fhdPAfwPAv/wgwvPxf+vNt/BOARO/AAwvvvvff/QwghO/AgPAQvww/wfAQvu
|
||||
wxSgP/QvgBP/wgQgDQvPQ/Afffv/fxgBvxOuvwevfwf/wwQ/gPQRPfPBhfgfAeww
|
||||
AB/Px/+vRP/APu+wguQgBRQgRwft/uw/gBfxP+fhuQOwPfvQQAe+uAhgQgwAQPfg
|
||||
BvQAeiPCA/PvAPyAxRCOvPAfQgfwPtuh+wQABeQufgwgwQxAAgQQRuQhOBAAwAQ/
|
||||
PhPQvwfPv/vfvuxAxQBvwhBAAAPxPQPQgQAvhPwOQgQPvQfQgtwASQ/gOhgNQfgu
|
||||
wBwgPwwxPgQggvQ+OQQv/P+uvviPxPQBviBxwO/wfhQgxvBAAxhBf/PhA/wfgPA+
|
||||
/gfgNvufQePQhOAOwQwPxPvhPROegvwfAdweAAQOxABP/B/PgPP/vwwQ/BvQAfA/
|
||||
gwxfgwwfAwQQBfRPgh+wRAf/u//gvdwhvvPfwAggvRfigf/wQPwOgARAASO/xAgg
|
||||
fvd/wxffvQORPO/gQtNgRgvPOQfPfSwwfhRNvQOhNAefQPvPvRxyxxf/PeAOggSf
|
||||
fP+PBROQgwwPQhPwQv/PwfhQARDPv/fgPQQQQQAwftiQ/R+BfQPgvhvwRABhAxv/
|
||||
QPgiPAQfOvu//wBRvQv/gQwvvRfwAxBg+c0E5PIb9u/jACHQ+SoE+BAH9P4f+/3Y
|
||||
DEkI1tYWCOLVFwkCAgIWHhAj9+PmIfnu4d4D5v41D/3o5PflAu8U8fMP7AHhBd4K
|
||||
HDAJ8f3vDgLwJvwVEQ8GsOMDBe3VFv/r7wsbMSoMKPP86xkCFBAjJgIJ/w37BAkS
|
||||
H/a5BAUYGeMXPiXUAe4E5czz+PHpC/7wJSM2G+gb4fH7v8rN9x/PBwvJChPuBRcH
|
||||
7BrpCRL14d78It4F6+MdJRca5xMRFvDuH+gF/PMC5uDY/R0bCyAFJO3t4OX89AXw
|
||||
+e0MD/Pm+zMM7NIM5QfMJScc7ukc+BHgB9HRAAUKEUAfFyBIJAf/6Nin/BTlGgEE
|
||||
7C0AEhwMNvz7Cs3y8QngIgwXHwjx7wMF9QYC+tIL0OrkAu0YJBYA6CjMENr35QsN
|
||||
4h0NAukOBUDwBALsEPjuCBL79BP9A90RG97qCt//7P4ICTHwART82N8rFeb5EvMG
|
||||
/+zd/Rr4EgcSMv4o6efrBzML/QH4zw7g4/Xe2hMPFCT3B/8V2vQIG/DpBygR5RHv
|
||||
E+wP/dQRDQgXOe3aJe4jLgwR9gPxzwsJKQbxFhMmK+cJ/g/11gnt5N0q8B8fFRH8
|
||||
B+35++Pf4jDQ6c/s8fHY2fL48QE2IPj1DPT3PvLEE/4L7OfbHhHy/UgJTvAK8scU
|
||||
EcHSAxnp8BwUCVZJpvTSzbO/eq72xQ9lsjB3BD0oN30S8wAjSg0K6PV3HMaQSFzZ
|
||||
NnvFaLeRJMX7ogyu8WUbBZ3WktLOZ6+KAmxWwpU4wAWVxXPoZ8PVoZRSAH4gwRlN
|
||||
fxdylXtKZS/acWdjUg44Qjmo6Bp5K4AtHxtbEJansNxcKCq+cpmjwrxgQOleqA5H
|
||||
SPSh4MV8ZThRsOka0j6+huWrAPpQihFynxa9GckCZQQBsbGUzlLISQ42emhlmZrf
|
||||
S756UhCPTAaMCCqGpABFGokWLFE4by7qmkBTSTLmDzSUzBxstA0IxGWvBmrs0XUk
|
||||
cgpidXeG6/NxobaDUskCJ2GbNEok/wp498E3X4CvsBdmNmbKS51KujlB50Yt4de3
|
||||
Ebt5nGVIf9TBUDUFOqblA7mOi8eJn7KtommG3aeafN5e4c8JALXaCZKyFdULKnRY
|
||||
49yPLWqbVD8kxHo47NAR7YwhecaWmdfnIfTuN5PWdmrSrbT/09AIZazKcILpI9bC
|
||||
Y0BNtz9GqktLF2Zv+LLQFu6BsFrMW+yrareoJsafp+85KnhD5oOrKEiE1VGPCiSI
|
||||
O0gh3RoJyXVWFIz9WqpoJLFeOjeROQOIk0aC5s4EUQOPSFqsxy6temkkD4e2CMuP
|
||||
Eus6EAynUyFweQUQMnw6LVE40Pg3YuLj9B35qfBBeFNjdWrMqNJajJQxPI90POTn
|
||||
UCyB1fXlmx9K0gqpHxwszDJXeMtXXwRTyborwa2Wd0ubFF4tSHojlo9NlWaO9nep
|
||||
FC/5xiZrUO1o/Vl1OkTyt8xLKTUtEXWcBFsyoaNEXel2zU8nNmSTikWhxz9opeDN
|
||||
3Ot6KnxrPdPaUx0fpByVaFRMC0bW4J5TlteWP93GGBoBc2LUOYk8JmMNHJk5hWRY
|
||||
U+PLRySSixTKLik+GuLoyhe5tnCHs2+KOIiV99pqt6WosyHBz/Y+pelUl9KBNt2r
|
||||
kZPEk5UMegB2iW0vzsiWSa9INhx7RFHoLE1M+bugh3GwKC7UdpSGeRjbBJ8iLw3E
|
||||
f0o+yxu83dmF+1t3Ou6sYMuV4rc5ZEvSYOMb1eOBnq/EAQLyGrUAoFCq8eSZyv4x
|
||||
baDh+N1Js4mjB+bGVClWNFMCHn6oTYZXSK17E1xmtU3Pd75FsysU29YD6k0VgeJV
|
||||
C7HCcz6YzxxUeRIGJi2xcQVwMGKMfQhYoaqOxA4AK+ZV5CqfXbKivaQi
|
||||
-----END PRIVATE KEY-----
|
||||
@ -0,0 +1,43 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIHjDCCBOmgAwIBAgIUSaqkQplPGf1X7L8bQu6ywQZ2gGwwBwYFK84PAwYwZTEL
|
||||
MAkGA1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2Ug
|
||||
TG9jYWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwu
|
||||
ZGV2MB4XDTI0MDIyMzA5NDAxMFoXDTI5MDIyMTA5NDAxMFowZTELMAkGA1UEBhMC
|
||||
VVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2UgTG9jYWxpdHkx
|
||||
FTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwuZGV2MIIDjzAH
|
||||
BgUrzg8DBgOCA4IACVZJpvTSzbO/eq72xQ9lsjB3BD0oN30S8wAjSg0K6PV3HMaQ
|
||||
SFzZNnvFaLeRJMX7ogyu8WUbBZ3WktLOZ6+KAmxWwpU4wAWVxXPoZ8PVoZRSAH4g
|
||||
wRlNfxdylXtKZS/acWdjUg44Qjmo6Bp5K4AtHxtbEJansNxcKCq+cpmjwrxgQOle
|
||||
qA5HSPSh4MV8ZThRsOka0j6+huWrAPpQihFynxa9GckCZQQBsbGUzlLISQ42emhl
|
||||
mZrfS756UhCPTAaMCCqGpABFGokWLFE4by7qmkBTSTLmDzSUzBxstA0IxGWvBmrs
|
||||
0XUkcgpidXeG6/NxobaDUskCJ2GbNEok/wp498E3X4CvsBdmNmbKS51KujlB50Yt
|
||||
4de3Ebt5nGVIf9TBUDUFOqblA7mOi8eJn7KtommG3aeafN5e4c8JALXaCZKyFdUL
|
||||
KnRY49yPLWqbVD8kxHo47NAR7YwhecaWmdfnIfTuN5PWdmrSrbT/09AIZazKcILp
|
||||
I9bCY0BNtz9GqktLF2Zv+LLQFu6BsFrMW+yrareoJsafp+85KnhD5oOrKEiE1VGP
|
||||
CiSIO0gh3RoJyXVWFIz9WqpoJLFeOjeROQOIk0aC5s4EUQOPSFqsxy6temkkD4e2
|
||||
CMuPEus6EAynUyFweQUQMnw6LVE40Pg3YuLj9B35qfBBeFNjdWrMqNJajJQxPI90
|
||||
POTnUCyB1fXlmx9K0gqpHxwszDJXeMtXXwRTyborwa2Wd0ubFF4tSHojlo9NlWaO
|
||||
9nepFC/5xiZrUO1o/Vl1OkTyt8xLKTUtEXWcBFsyoaNEXel2zU8nNmSTikWhxz9o
|
||||
peDN3Ot6KnxrPdPaUx0fpByVaFRMC0bW4J5TlteWP93GGBoBc2LUOYk8JmMNHJk5
|
||||
hWRYU+PLRySSixTKLik+GuLoyhe5tnCHs2+KOIiV99pqt6WosyHBz/Y+pelUl9KB
|
||||
Nt2rkZPEk5UMegB2iW0vzsiWSa9INhx7RFHoLE1M+bugh3GwKC7UdpSGeRjbBJ8i
|
||||
Lw3Ef0o+yxu83dmF+1t3Ou6sYMuV4rc5ZEvSYOMb1eOBnq/EAQLyGrUAoFCq8eSZ
|
||||
yv4xbaDh+N1Js4mjB+bGVClWNFMCHn6oTYZXSK17E1xmtU3Pd75FsysU29YD6k0V
|
||||
geJVC7HCcz6YzxxUeRIGJi2xcQVwMGKMfQhYoaqOxA4AK+ZV5CqfXbKivaQio0Iw
|
||||
QDAdBgNVHQ4EFgQUkIx6Kwmb9VSJWIleLegR00WtJbMwHwYDVR0jBBgwFoAUdaN0
|
||||
NvC+/DBZDZ36A1j7i9XJGHkwBwYFK84PAwYDggKSADknGgtkjppPScid9fCaVwaa
|
||||
2sSJ8fXsRzmZag/gHpVdsEWwzzPASpMygUSennMXNOqs08uOin+z30K5ePf9M86k
|
||||
aue+gs8kioOygByYGa/z3zmSfxxJQ+k+eFXOuYnJDPMkn+ugbMx9X7rH1gTEkptH
|
||||
HWKpKp2sf+eF3c+NrC5NiWK8uBPbl0JIY2zgWyEbqBe0ySCNo0M37kp0jfySo+rU
|
||||
ODiKrIOD9iO5Lcc7i+rBVhLW/gTz+aaoJrf3kxI7AwkNIflFvhtkgRGLFKMfJDYK
|
||||
+aQOjPvtjikpRhbA0BNBxQyB2Dji9KblK02eEJ3HmZIxBqPTFJWdAr/t1hw9KztK
|
||||
fr65JeNRDpUiGVKhs4XizQ8Ei6ktFkm3UhAjOtIlzbUlIGFWKcdvyVs2aWWJATM3
|
||||
v5/iNIVvDZ6xHlyU7dnVVLeIf8H6c5/4Qe2aznDb8yUuZBM+Ss2UiKUepsVwNuEh
|
||||
+zOKfIGacGk0FfJkyPDteAYjjI8SDwZtj+N/sV5hrByYKyfDQNo/LzMe2MbxbU4b
|
||||
DjCYb4vfGMwRNRqpAoBjXAJ3zCKYxLULxyAs9Fs6UA4GiTGyYhibWcztqZrszEKO
|
||||
Sjl7bhaZhrPMUNOPVmQVJCsp6mVOQvmtJS5UWji0ak2KI/iq9j5ZGoOmfCUq7ubl
|
||||
qJvGOzx9iSredyYEgsuYRptEBpJ8OPO7xgta1RvZO2sq1TgkNSpRGisSt+s7EaeK
|
||||
R5FaPdUt7P0bQCabIoOKoZyHe197lmXfOf1qame9ojjCOFz3Ql6OkMKAmzV4HpX/
|
||||
46ddWw95vYit+eTfPcBdMKqVP1nhazokNv0ShzAFOQQm/LMladyWBFrTAcqaC3pp
|
||||
hJ9sj/bdLB+bhZ+thhmznQ==
|
||||
-----END CERTIFICATE-----
|
||||
@ -0,0 +1,394 @@
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.6.0
|
||||
*/
|
||||
/*
|
||||
JS 2024-04-11 testovane s OpenSSL 3.3.0, liboqs 0.10.0 a oqs-provider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-03-04 - doplnenie funkcii pre uvolnenie nacitanych providerov
|
||||
*/
|
||||
/*
|
||||
JS 2024-02-24 - funkcia initSSLContext() rozsirena o nacitanie OQS-providera
|
||||
pre plne funkcne PQ algoritmy na kazdej platforme
|
||||
- doplnene priklady nastavenia premennej DEFAULT_GROUPS
|
||||
- testovane s oqsprovider 0.5.3
|
||||
*/
|
||||
/*
|
||||
JS 2024-02-17 - testovanie PQ algoritmov s pouzitim oqs-providera
|
||||
- uprava vypisu o pripojeni klienta
|
||||
- pridane vypisy s informaciami o pouzivanych algoritmoch
|
||||
pre KEX a certifikaty
|
||||
- oprava kontroly navratovej hodnoty funkcii
|
||||
SSL_CTX_use_certificate_file() a SSL_CTX_use_PrivateKey_file
|
||||
*/
|
||||
|
||||
/*
|
||||
JS 2024-02-08 testovane s aktualnou najnovsou verziou OpenSSL 3.2.1
|
||||
*/
|
||||
|
||||
/*
|
||||
Name: Martin Janitor
|
||||
Subject: DP1
|
||||
Description: Implemenation SSL/TLS [SERVER] connection with usage of BIO structure
|
||||
Date: 2023-06-28
|
||||
*/
|
||||
|
||||
#include <stdio.h>
|
||||
#include <errno.h>
|
||||
#include <unistd.h>
|
||||
#include <malloc.h>
|
||||
#include <string.h>
|
||||
|
||||
#include <openssl/crypto.h>
|
||||
#include <openssl/x509v3.h>
|
||||
#include <openssl/pem.h>
|
||||
#include <openssl/ssl.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/bio.h>
|
||||
#include <openssl/provider.h>
|
||||
|
||||
/*
|
||||
Premenna na definovanie "exchange groups", algoritmov na vymenu klucov
|
||||
Server moze podporovat viacero KEX/KEM algoritmov, v premennej musi byt kazdy
|
||||
algoritmus oddeleny dvojbodkou, napr. "kyber512:bikel1"
|
||||
Podporovane algoritmy je mozne ziskat prikazom "openssl list -kem-algorithms"
|
||||
Prazdna premenna alebo naplnena neplatnymi protokolmi sposobi prerusenie aplikacie
|
||||
|
||||
Ak server a klient nenajdu spolocny KEX/KEM protokol, tak
|
||||
SSL vyhodi chybu SSL routines:final_key_share:no suitable key share
|
||||
|
||||
Priklad pouzitia:
|
||||
- klasicke algoritmy: "x25519:x448:prime256v1:secp521r1:secp384r1:ffdhe2048:ffdhe3072"
|
||||
- PQ algoritmy: "kyber512:kyber768:kyber1024:bikel1:bikel3:bikel5:hqc128:hqc192:hqc256:frodo640aes:frodo640shake:frodo976aes:frodo976shake:frodo1344aes:frodo1344shake"
|
||||
- hybrid algoritmy: "x25519_kyber768:x25519_frodo640aes:x25519_hqc128:x448_bikel3:x448_kyber768:p256_kyber768"
|
||||
|
||||
Podporovane algoritmy OQS-providerom: https://github.com/open-quantum-safe/oqs-provider/blob/0.6.0/ALGORITHMS.md
|
||||
|
||||
POZOR - BIKE protokol nefunguje na Windows platforme (liboqs 0.10.0, oqs-provider 0.6.0)
|
||||
|
||||
*/
|
||||
#define DEFAULT_GROUPS "kyber768:frodo976aes:kyber1024"
|
||||
|
||||
#define DEFAULT_PORT 443
|
||||
|
||||
|
||||
/**
|
||||
* printUsage function who describe the utilisation of this script.
|
||||
* @param char* bin: the name of the current binary.
|
||||
*/
|
||||
void printHeader(char* bin){
|
||||
// JS update
|
||||
printf("[?] Usage: %s <port> <server_public_key> <server_private_key>]\n", bin);
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* makeServerSocket function who create a BIO structure for socket
|
||||
* @param int port : the port to listen
|
||||
* @return int socket : the socket number created
|
||||
*/
|
||||
BIO* makeServerSocket(int port){
|
||||
|
||||
char buffer[5];
|
||||
memset(buffer,'\0',5);
|
||||
sprintf(buffer,"%d",port);
|
||||
|
||||
BIO* accept_bio = BIO_new_accept(buffer);
|
||||
if (accept_bio == NULL){
|
||||
fprintf(stderr, "Error creating accept BIO\n");
|
||||
return NULL;
|
||||
}
|
||||
|
||||
printf("\n");
|
||||
printf("[+] Server listening on the %d port...\n", port);
|
||||
printf("[+] Waiting for connection\n");
|
||||
return accept_bio;
|
||||
}
|
||||
|
||||
|
||||
/** JS update
|
||||
* initSSLContext function who initialize the SSL/TLS engine with right method/protocol
|
||||
* SSL/TLS engine provided by PQ algorithms functions of OQS provider
|
||||
* @return SSL_CTX *ctx : a pointer to the SSL context created
|
||||
*/
|
||||
SSL_CTX* initSSLContext(){
|
||||
const SSL_METHOD *method;
|
||||
SSL_CTX *ctx;
|
||||
|
||||
// initialize the SSL library
|
||||
SSL_library_init();
|
||||
SSL_load_error_strings();
|
||||
OpenSSL_add_all_algorithms();
|
||||
|
||||
// MJ only TLS connection
|
||||
method = TLS_server_method();
|
||||
|
||||
// create new context from selected method
|
||||
ctx = SSL_CTX_new(method);
|
||||
if(ctx == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
abort();
|
||||
}
|
||||
|
||||
return ctx;
|
||||
}
|
||||
|
||||
/**
|
||||
* loadCertificates function who load private key and certificat from files.
|
||||
* 3 mecanisms available :
|
||||
* - loading certificate and private key from file(s)
|
||||
* - use embed hardcoded certificate and private key in the PEM format
|
||||
* @param SSL_CTX* ctx : the SSL/TLS context
|
||||
* @param char *server_pem : filename of the PEM certificat
|
||||
* @param char *server_key : filename of the PEM private key
|
||||
*/
|
||||
void loadCertificates(SSL_CTX* ctx, const char* server_pem, const char* server_key){
|
||||
|
||||
|
||||
if (SSL_CTX_use_certificate_file(ctx, server_pem, SSL_FILETYPE_PEM) != 1 ||
|
||||
// namiesto MD SSL_CTX_use_RSAprivateKey_file
|
||||
SSL_CTX_use_PrivateKey_file(ctx, server_key, SSL_FILETYPE_PEM) != 1)
|
||||
{
|
||||
|
||||
ERR_print_errors_fp(stderr);
|
||||
abort();
|
||||
}
|
||||
else
|
||||
printf("[*] Server's certificat and private key loaded from file.\n");
|
||||
|
||||
// verify private key match the public key into the certificate
|
||||
if(!SSL_CTX_check_private_key(ctx)){
|
||||
fprintf(stderr, "[-] Private key does not match the public certificate...\n");
|
||||
abort();
|
||||
}
|
||||
else{
|
||||
printf("[+] Server's private key match public certificate\n");
|
||||
}
|
||||
|
||||
// JS get server's signature algorithm name
|
||||
X509 *cert = SSL_CTX_get0_certificate(ctx);
|
||||
int pknid;
|
||||
if (X509_get_signature_info(cert, NULL, &pknid, NULL, NULL) != 1){
|
||||
printf("Certificate signature algorithm: Unknown algorithm");
|
||||
}
|
||||
else{
|
||||
printf("Certificate signature algorithm: %s\n", OBJ_nid2sn(pknid));
|
||||
}
|
||||
|
||||
// MD kod na autentizaciu klienta
|
||||
#ifdef AUTHENTICATION
|
||||
|
||||
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT, NULL);
|
||||
|
||||
// load the trusted client CA certificate into context
|
||||
if (SSL_CTX_load_verify_locations(ctx, "myCA.pem", NULL) != 1)
|
||||
{
|
||||
fprintf(stderr, "[-] CA certificate not loaded...\n");
|
||||
abort();
|
||||
}
|
||||
#endif
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* showCerts function who catch and print out certificate's data from the client.
|
||||
* @param SSL* ssl : the SSL/TLS connection
|
||||
*/
|
||||
void showCerts(SSL *ssl)
|
||||
{
|
||||
X509 *cert;
|
||||
char *subject, *issuer;
|
||||
|
||||
// get the client's certificate
|
||||
cert = SSL_get_peer_certificate(ssl);
|
||||
|
||||
// get certificate info
|
||||
if (cert != NULL){
|
||||
// get certificate's subject
|
||||
subject = X509_NAME_oneline(X509_get_subject_name(cert), 0, 0);
|
||||
// get certificate's issuer
|
||||
issuer = X509_NAME_oneline(X509_get_issuer_name(cert), 0, 0);
|
||||
|
||||
printf("[+] Client certificates :\n");
|
||||
printf("\tSubject: %s\n", subject);
|
||||
printf("\tIssuer: %s\n", issuer);
|
||||
printf("[+] Cipher used : %s\n", SSL_get_cipher(ssl));
|
||||
|
||||
// Free memory
|
||||
free(subject);
|
||||
free(issuer);
|
||||
X509_free(cert);
|
||||
}
|
||||
else
|
||||
printf("[-] No client's certificates\n");
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
* routine function who treat the content of data received and reply to the client.
|
||||
* this function is threadable and his context sharedable.
|
||||
* @param SSL* ssl : the SSL/TLS connection
|
||||
*/
|
||||
void routine(SSL* ssl)
|
||||
{
|
||||
char buf[1024 / 2], reply[1024];
|
||||
|
||||
int bytes;
|
||||
const char *echo = "Enchante %s, je suis ServerName.\n";
|
||||
|
||||
// accept SSL/TLS connection
|
||||
if (SSL_accept(ssl) == -1)
|
||||
ERR_print_errors_fp(stderr);
|
||||
else{
|
||||
|
||||
// JS get chosen (negotiated) key exchange/encapsulation algorithm name
|
||||
printf("Used group (KEM): %s\n", SSL_group_to_name(ssl, SSL_get_negotiated_group(ssl)));
|
||||
|
||||
// JS get client's certificate algorithm name
|
||||
int nid;
|
||||
SSL_get_peer_signature_type_nid(ssl, &nid);
|
||||
printf("Peer signature name: %s\n", OBJ_nid2sn(nid));
|
||||
|
||||
// show certificates data
|
||||
showCerts(ssl);
|
||||
|
||||
// read data from client request
|
||||
bytes = SSL_read(ssl, buf, sizeof(buf));
|
||||
if (bytes > 0){
|
||||
buf[bytes] = 0;
|
||||
printf("[+] Client data received: %s\n", buf);
|
||||
|
||||
// construct response
|
||||
sprintf(reply, echo, buf);
|
||||
// send response
|
||||
SSL_write(ssl, reply, strlen(reply));
|
||||
}
|
||||
else{
|
||||
switch (SSL_get_error(ssl, bytes)){
|
||||
case SSL_ERROR_ZERO_RETURN:
|
||||
printf("SSL_ERROR_ZERO_RETURN : ");
|
||||
break;
|
||||
case SSL_ERROR_NONE:
|
||||
printf("SSL_ERROR_NONE : ");
|
||||
break;
|
||||
case SSL_ERROR_SSL:
|
||||
printf("SSL_ERROR_SSL : ");
|
||||
break;
|
||||
}
|
||||
ERR_print_errors_fp(stderr);
|
||||
}
|
||||
}
|
||||
|
||||
SSL_shutdown(ssl);
|
||||
SSL_free(ssl);
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* main function who coordinate the socket and SSL connection creation, then receive and
|
||||
emit data to and from the client.
|
||||
*/
|
||||
int main(int argc, char **argv){
|
||||
BIO* sock;
|
||||
int port;
|
||||
SSL_CTX *ctx;
|
||||
const char *server_pem, *server_key;
|
||||
|
||||
if(argc != 4){
|
||||
printHeader(argv[0]);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// Select PORT number
|
||||
port = (atoi(argv[1]) > 0 && atoi(argv[1]) < 65535) ? atoi(argv[1]) : DEFAULT_PORT;
|
||||
|
||||
// Load default and OQS providers
|
||||
// Default provider must be loaded before OQS provider
|
||||
OSSL_PROVIDER* provider;
|
||||
provider = OSSL_PROVIDER_load(NULL, "default");
|
||||
if (provider == NULL) {
|
||||
printf("Failed to load Default provider\n");
|
||||
exit(0);
|
||||
}
|
||||
|
||||
OSSL_PROVIDER* custom_provider = OSSL_PROVIDER_load(NULL, "oqsprovider");
|
||||
if (custom_provider == NULL){
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
printf("Failed to load OQS-provider\n");
|
||||
exit(0);
|
||||
}
|
||||
|
||||
// load SSL library and dependances
|
||||
ctx = initSSLContext();
|
||||
server_pem = argv[2];
|
||||
server_key = argv[3];
|
||||
|
||||
// load certificats and keys
|
||||
loadCertificates(ctx, server_pem, server_key);
|
||||
|
||||
// make a classic server socket
|
||||
sock = makeServerSocket(port);
|
||||
|
||||
// Pridane na skusku od predosleho
|
||||
BIO_set_bind_mode(sock, BIO_BIND_REUSEADDR);
|
||||
|
||||
if (BIO_do_accept(sock) <= 0)
|
||||
ERR_print_errors_fp(stderr);
|
||||
|
||||
while (1)
|
||||
{
|
||||
// Accept incoming connection
|
||||
if (BIO_do_accept(sock) <= 0)
|
||||
{
|
||||
ERR_print_errors_fp(stderr);
|
||||
break;
|
||||
}
|
||||
|
||||
printf("\n");
|
||||
|
||||
// Create a new BIO object
|
||||
BIO *conn = BIO_pop(sock);
|
||||
if (conn == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
break;
|
||||
}
|
||||
|
||||
// JS added info about connected client (IP)
|
||||
printf("Connection of client %s accepted\n", BIO_get_peer_name(sock));
|
||||
|
||||
// Create a new SSL object
|
||||
SSL *ssl = SSL_new(ctx);
|
||||
if (ssl == NULL){
|
||||
ERR_print_errors_fp(stderr);
|
||||
BIO_free(conn);
|
||||
break;
|
||||
}
|
||||
|
||||
// JS set key exchange/encapsulation protocols supported by server
|
||||
// Without this function, client will use default X25519 protocol
|
||||
// First protocol supported by both server and client will be used for KEX/KEM
|
||||
// Empty DEFAULT_GROUPS or list of unsupported protocol by server will fail communication
|
||||
if (SSL_set1_groups_list(ssl, DEFAULT_GROUPS) != 1){
|
||||
printf("KEX/KEM algorithms undefined unknown - check DEFAULT_GROUPS variable\n");
|
||||
ERR_print_errors_fp(stderr);
|
||||
BIO_free(conn);
|
||||
break;
|
||||
}
|
||||
|
||||
// Assign the SSL object to the connection BIO
|
||||
SSL_set_bio(ssl, conn, conn);
|
||||
|
||||
routine(ssl);
|
||||
// JS remove break if you want server running in loop
|
||||
break;
|
||||
}
|
||||
|
||||
SSL_CTX_free(ctx);
|
||||
// JS Unload both providers
|
||||
OSSL_PROVIDER_unload(provider);
|
||||
OSSL_PROVIDER_unload(custom_provider);
|
||||
BIO_free_all(sock);
|
||||
return 0;
|
||||
}
|
||||
|
||||
@ -0,0 +1,48 @@
|
||||
-----BEGIN PRIVATE KEY-----
|
||||
MIIIlgIBADAHBgUrzg8DBgSCCIYEggiCWQAOQ+/BACAfAAfAwgvfgQQRivydw+wR
|
||||
fAQgwgRwAvQi+ggA/vwAgvhfQiAxev/egfvBBeSgBugPfQefxvfufwfAAQAAhQeA
|
||||
u//wQhCBOwfPfQAQhQAhBPf/vRBePhxPgxefN/AgQSSvfBfe/P+ufQheQwu/vgQ/
|
||||
wvf/AQ/vfvQRifBPvfAAw/hBAwwwAxgfRfAv+uAgf/QfgAuRAOOPPQB/fR/whNwx
|
||||
//APPSQw/vwAAff+uRBfuwgv/xAuAABOwwf//e/xCBfgPw///ftwRRAffQQQgPgv
|
||||
PfQ/wfffwgPAfCRgQwPw/vgCQhgPPuyxAeAQf/PRQvwxtgAexBO/whAwQBABgQgR
|
||||
QAs/9evAvfNACfwOgxBRACvRuRPNgOwPwgeduyAvAPAAQ/vguhxB//wORxQfPPv+
|
||||
vgQRABxBPxwRxfvQBP/QwQ/+/PQRAQPvfSQfAge/QBA/OxOvgvgdQAhfAhg+wf+Q
|
||||
BCvwP/wQggAQhfRRBBBwRQfegg/h/fvxQhBvuwewfQPv+uQBAggQQf+Agu/B8+gN
|
||||
hPxPgBPBPugPPAwgP/uuQQgABghRwAxPwwiOAuvQOSAghBPgQPwNfwwg+gfv//vf
|
||||
fgA+/f/uxOwQAP/BAhQvjPxf/uBQPgevdAgPgfBRgBAfQQQvvggBPwgudvxvhv/x
|
||||
A/MgwQhgePgwQxfQA/gBPCe/wQvOQfAQhPAfdwRPvwQQf//vevwOAtwQg/PxCQAC
|
||||
AwPv/PgvthQQwQgN+ehQAxgRePwQAe/ggABfRAfO/BOQwAe+vhfRPAxP/g/PQQwu
|
||||
xRAfg/Qfw/xxgQ/QwPhggv/xvSfQQARQwhgf/xPvPghO+xf/RPQRBwASP/BAAQN/
|
||||
fAff+egAPgvffQQxfQQvgA/wQ//vQ+/f/PAxO/hvAgvwwe/tw+uwQOQexQQxw/hB
|
||||
gfQB/BCQgOw/vuyAPhAwwO8vhQg/wPv/f/Qd/PPPOgfQABPfvfhf/fQggwfAAvxe
|
||||
/h//hQ/wQfgPfvwf/A/PvwBv//CAOeue/+kT8R372/MJJMjz7/AX+OAR9/QJ5uvI
|
||||
AOTa+PHcRf9C2OcaCiUfGtn0DAQaGwlC/wH1HgbrFx3z2yDsBRn3/8jZLBzdFPfs
|
||||
Dw4X4e67AwkgEfv17wr+2OAE1w4V4Qks8yL47CrxKhEn5+wSDgzV++Tm7O4f3Qk9
|
||||
IR0G8/M1GxAF6vAlFAIMF+zs/gjM/+cYBfvkDtwjCiIPLx/kC+UADwD8Hb/86Bci
|
||||
zukFLugYLwsAsOQU++7GAAoALfEOzPfzGNjnGMACHiX2BQUOEzTqCRDlE8sXOdXr
|
||||
HALj8yQzGfsqBfLaEwzpGdUI7NgF8h4A9OH+5/72JjLb9RIL+ekP2fb9Avf+8zPv
|
||||
2OsMBfz7EhkRCRcFAQcgHy3k1QbfJx+9+N80MCcQ3fbpMO/s6AUGxR8J7N0bBbb/
|
||||
BvPn6SsKzvgUBvTa6eweGPwYBxTuHfUP6ccFBgj2X//dCBzSFRAZEPj3HdHL5Ov+
|
||||
1QvpIw//Hf8G/tfT4xHmFA0lBivc/P7pKODk6Nb7F/4S4AP7DyQTx93X0Ar0JgLe
|
||||
DQ8Q2R0ZFxH7xu78+w7XIvDhERMR/PEGA/QM4OMZ7wQWMQDv4jLnAvMC1xoL5Rbw
|
||||
CSsWDQYr4gkK//0bCvcI4usU1gcc+Bf7wf0KBefv0eIk9BYm6f0ODQT4/fMYDugL
|
||||
EwoFO9oL7AROCTGe2QB0pUqoEha1+VtNfJUHwiNB5ToyqfiHRJh/DSCidpe0u1VY
|
||||
xFBlJqmNZht4WqIfeQOy4kbqKWEpReje1kqpTrfmHb2IVdDDA0cKb0kE+qAQszNh
|
||||
E9Z9aoEsse81hBVWp1SwG4HbfF990nTUJ/YTAnVSSyRYLRGm6RMoqqL0ruaemf65
|
||||
uaqJL8X1TRJwY17v8oF+ApQUCWkwHvpAq2BZWLHZs7eBxlEA2JdZXLS4wY/DOkbd
|
||||
MGBW8jhDlF2wm6VUKCYLAdOyTdnVf0Z1QH2P5xNFompu6WNywGopCMvzYaZC8REJ
|
||||
Ty5iTtqxicdoUb277goEuzYRh8ifeZl2vPOmgRC8bYowPixZkTjOddwCHmLGL2nu
|
||||
CudW1dYGMcgvfejgGp6rhSJAiEMChdeEqq93F6mmorCOyvecebtGQ+uZRoK0lBSD
|
||||
NYEkacKiiyLnPQgMbzlMgkOi5LjyPFLcBcyXgFKpnVT2KAhT7OQkurf3f4Lebu2D
|
||||
OvItxhGam6k1GeOBMisgC9LfrbW15aCup78ibsSGjVUPxP2LFoTeO1n9pdEf2bAl
|
||||
S3iXaoAsOMyXDYVItQIWB2eQSwQkJLZdQRA0Ir1k/YsLoKwSkf9ukV2WullDJM8J
|
||||
KmCRrEVZOg5JCGxBJaBRX5SXT58yLEB7h505Huxk1iHUvJks20ef2Wa6BAqqnwkM
|
||||
jPpkKkKignVZoNCQZURXyQYIi48RGqYPOygJZbeBRuEfYfV1XErhNxkjLbms6ljV
|
||||
xofRSMdI6wOlFKya/JJKHej79UvduHmyGGsTjD5PnrYCHx5BP0aqcBfYzak6WkV+
|
||||
b0YdnF81AOmSgWXVtaLOfCFM4brpo44XcY9iba1lWAWS5xlmJ6NpagkVxwACoGpZ
|
||||
mOrENrkkBWVEpCHqsmPvhI4E/a1GJ6OYvNEKJSRDWW5ONITwh5gaCr3pgCVLRyA5
|
||||
WzQP5LD9tjdITYd8MjfAMQ9JpkT/6+HhKnMcL8n17Mc1Ac7JaKlni66YURGFWGoq
|
||||
AGNpwT9Neg7aBEj5BkTUGbPOamu4Rxps3C8lMmrR/6BjDeX+eVROYVFWAnE2AC1Z
|
||||
nCl1LFREigyoRilcDV8M+IZ/o95qCu17r8hfJaKdANrNvVjyvCb+zCx3zsUbDBXI
|
||||
Rl2j10ebgliRiQGSFWqlfu30Ty5kBL2xyF1NDYnMkbUWYd2SQXapOyOZ
|
||||
-----END PRIVATE KEY-----
|
||||
@ -0,0 +1,43 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIHiTCCBOmgAwIBAgIUSaqkQplPGf1X7L8bQu6ywQZ2gG0wBwYFK84PAwYwZTEL
|
||||
MAkGA1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2Ug
|
||||
TG9jYWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwu
|
||||
ZGV2MB4XDTI0MDIyMzA5NDAxMFoXDTI5MDIyMTA5NDAxMFowZTELMAkGA1UEBhMC
|
||||
VVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2UgTG9jYWxpdHkx
|
||||
FTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwuZGV2MIIDjzAH
|
||||
BgUrzg8DBgOCA4IACTGe2QB0pUqoEha1+VtNfJUHwiNB5ToyqfiHRJh/DSCidpe0
|
||||
u1VYxFBlJqmNZht4WqIfeQOy4kbqKWEpReje1kqpTrfmHb2IVdDDA0cKb0kE+qAQ
|
||||
szNhE9Z9aoEsse81hBVWp1SwG4HbfF990nTUJ/YTAnVSSyRYLRGm6RMoqqL0ruae
|
||||
mf65uaqJL8X1TRJwY17v8oF+ApQUCWkwHvpAq2BZWLHZs7eBxlEA2JdZXLS4wY/D
|
||||
OkbdMGBW8jhDlF2wm6VUKCYLAdOyTdnVf0Z1QH2P5xNFompu6WNywGopCMvzYaZC
|
||||
8REJTy5iTtqxicdoUb277goEuzYRh8ifeZl2vPOmgRC8bYowPixZkTjOddwCHmLG
|
||||
L2nuCudW1dYGMcgvfejgGp6rhSJAiEMChdeEqq93F6mmorCOyvecebtGQ+uZRoK0
|
||||
lBSDNYEkacKiiyLnPQgMbzlMgkOi5LjyPFLcBcyXgFKpnVT2KAhT7OQkurf3f4Le
|
||||
bu2DOvItxhGam6k1GeOBMisgC9LfrbW15aCup78ibsSGjVUPxP2LFoTeO1n9pdEf
|
||||
2bAlS3iXaoAsOMyXDYVItQIWB2eQSwQkJLZdQRA0Ir1k/YsLoKwSkf9ukV2WullD
|
||||
JM8JKmCRrEVZOg5JCGxBJaBRX5SXT58yLEB7h505Huxk1iHUvJks20ef2Wa6BAqq
|
||||
nwkMjPpkKkKignVZoNCQZURXyQYIi48RGqYPOygJZbeBRuEfYfV1XErhNxkjLbms
|
||||
6ljVxofRSMdI6wOlFKya/JJKHej79UvduHmyGGsTjD5PnrYCHx5BP0aqcBfYzak6
|
||||
WkV+b0YdnF81AOmSgWXVtaLOfCFM4brpo44XcY9iba1lWAWS5xlmJ6NpagkVxwAC
|
||||
oGpZmOrENrkkBWVEpCHqsmPvhI4E/a1GJ6OYvNEKJSRDWW5ONITwh5gaCr3pgCVL
|
||||
RyA5WzQP5LD9tjdITYd8MjfAMQ9JpkT/6+HhKnMcL8n17Mc1Ac7JaKlni66YURGF
|
||||
WGoqAGNpwT9Neg7aBEj5BkTUGbPOamu4Rxps3C8lMmrR/6BjDeX+eVROYVFWAnE2
|
||||
AC1ZnCl1LFREigyoRilcDV8M+IZ/o95qCu17r8hfJaKdANrNvVjyvCb+zCx3zsUb
|
||||
DBXIRl2j10ebgliRiQGSFWqlfu30Ty5kBL2xyF1NDYnMkbUWYd2SQXapOyOZo0Iw
|
||||
QDAdBgNVHQ4EFgQUTILz4hu3s2RVCYK8RfrB6OFnaqcwHwYDVR0jBBgwFoAUdaN0
|
||||
NvC+/DBZDZ36A1j7i9XJGHkwBwYFK84PAwYDggKPADnHeGlvw2iL/4DsrXZKHw6+
|
||||
x9De5cOsjpkpCdG8DmVi+lb6/CPkZhjCPKxiXIeMYyvzNIzW8Wr8fuQ4yWMwaySD
|
||||
rwBHlNRGREXYNr0mNxQtv3Y9WUmK6lCk5bLYS7Kxz0xmNvyJSZE5do0UhInrojmY
|
||||
xh7ceLHNh1UmdPnOXTY7prbsHSl807b/pfKPUnOCZdryr/9S5nhXXL+QlCaabyCe
|
||||
luU0Lf3J5mKMxZnaf+WPKArlrQBW4R0NG3y4VjVc2C5o4e2p1u+ZdqMnS2zu7EVi
|
||||
2bajkdCcI+1fFvkFQ7U7hVe7HMw+jSOgpf1X3m6Mw9GaT7Hsh02mzo0psEWMAj6k
|
||||
2niKxaGpP7ppvIpEyt5o8zkk3L+qvOjuJwj0XTZ2dvELMxAI9IOGtURaOaZHs4Kq
|
||||
p9WuJyMcfhuOW07clXgRbfLnoJII9ATCa8isjFsamWJl0FSv9FJtZc1asYfhNsLn
|
||||
vEdtet8RJDqnYcxPSiM5ty+whlNblvsz+GcOGZOx8P6mK5axqtXGQOn+dmrB6pi/
|
||||
+hUaonGRRZxdoQ11A7tw1B0LJGJiiTxuxkz0OroF6UOE7esJQ0kB7CacHfXvYwgn
|
||||
WTCYyGgYAOxaHodbep+0fdTwkpIYa0Co5BcKy+mrkykx0zMx1ru04fhr80fyM3iS
|
||||
STFnsajH5LitpiuppxtYDDtW5ch5t5Y9H47pouSz7zl9Gahap89qyMFffNF+D5fb
|
||||
iGHW+cwxGII6tOzjO+LXefVZTWTMLTbVJXSkYlMfNDk6o5y+aVHGru2dc0lVI4oU
|
||||
4TkU2DYqNkhs0l7Lyz2ZpSuCkUOhshbEzT+cRT6SVkbQ/kiZBMonF0b+Tw41yr3V
|
||||
i8Jgnmcsib8TOaRwYA==
|
||||
-----END CERTIFICATE-----
|
||||
@ -0,0 +1,9 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: compilation for client.c file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem prikazy na prelozenie a linkovanie EXE programov s vyuzitim OpenSSL kniznice nainstalovanej v obraze BPS_PS
|
||||
:: MJ Pridanie makra AUTHENTICATION pre autentizaciu klienta, ak nie je nutne autentizovat klienta staci zmazat -DAUTHENTICATION z procesu kompilacie
|
||||
|
||||
gcc -Wall -Wextra -o client_run ./CLIENT/client.c -lcrypto -lssl -I C:\OPENSSL\include -L C:\OPENSSL\lib -lws2_32 -DAUTHENTICATION
|
||||
@ -0,0 +1,9 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: compilation for server.c file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem prikazy na prelozenie a linkovanie EXE programov s vyuzitim OpenSSL kniznice nainstalovanej v obraze BPS_PS
|
||||
:: MJ Pridanie makra AUTHENTICATION pre autentizaciu klienta, ak nie je nutne autentizovat klienta staci zmazat -DAUTHENTICATION z procesu kompilacie
|
||||
|
||||
gcc -Wall -Wextra -o server_run ./SERVER/server.c -lcrypto -lssl -I C:\OPENSSL\include -L C:\OPENSSL\lib -lws2_32 -DAUTHENTICATION
|
||||
@ -0,0 +1,30 @@
|
||||
# Makefile created by Martin Janitor
|
||||
# DP1
|
||||
# 9.5.2023
|
||||
|
||||
CC=gcc
|
||||
CFLAGS=-Wall -Wextra
|
||||
LIBS= -lcrypto -lssl
|
||||
SRC_CLIENT= ./CLIENT/
|
||||
SRC_SERVER= ./SERVER/
|
||||
OPTIONAL= -DAUTHENTICATION
|
||||
|
||||
ifeq ($(OS),Windows_NT)
|
||||
# Windows-specific options
|
||||
LIBS += -I C:\OPENSSL\include -L C:\OPENSSL\lib -lws2_32
|
||||
endif
|
||||
|
||||
#I C:\BATCHES\include
|
||||
#L C:\BATCHES\lib
|
||||
|
||||
all: server_run client_run
|
||||
|
||||
server_run: $(SRC_SERVER)server.c
|
||||
$(CC) $(CFLAGS) -o server_run $(SRC_SERVER)server.c $(LIBS) $(OPTIONAL)
|
||||
|
||||
client_run: $(SRC_CLIENT)client.c
|
||||
$(CC) $(CFLAGS) -o client_run $(SRC_CLIENT)client.c $(LIBS) $(OPTIONAL)
|
||||
|
||||
clean:
|
||||
rm -f server client
|
||||
del server.exe client.exe
|
||||
@ -0,0 +1,42 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIHdzCCBNmgAwIBAgIUWXaR57uTKy4p1O4cX1NPjeafBsQwBwYFK84PAwYwZTEL
|
||||
MAkGA1UEBhMCVVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2Ug
|
||||
TG9jYWxpdHkxFTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwu
|
||||
ZGV2MB4XDTI0MDIyMzA5NDAxMFoXDTI5MDIyMTA5NDAxMFowZTELMAkGA1UEBhMC
|
||||
VVMxEzARBgNVBAgMCkZha2UgU3RhdGUxFjAUBgNVBAcMDUZha2UgTG9jYWxpdHkx
|
||||
FTATBgNVBAoMDEZha2UgQ29tcGFueTESMBAGA1UEAwwJbG9jYWwuZGV2MIIDjzAH
|
||||
BgUrzg8DBgOCA4IACRR9c0KbSpmMkJrouMVUQyK3CKyJwmJC0ej2F3AMMhSh/ObX
|
||||
IoIgQ1Ja360wcSVrS/JCdf1TqFMasQiKAG7f66rkLOT3RSGIys3QR9VCRkJUes+q
|
||||
KReiacL22d9mxdPaNB2ypbEvifZqwhK80SMTXi9MdUzQA+BMc/zcqMEPqx6ZVPVH
|
||||
6SF4SO8oll7itNorWJNbwhfGLJpyL1idlCoJxs6VR+qEk5Km0rpc/zF8nbeIZvQW
|
||||
E4aHuzAKKjXBw0CIfWpemBRa3JQD9alJlDqeh/Qapa+cuIoYEIZr3Ij7x0ZDkVnr
|
||||
VO5MSSLxgMQTlYsVmDZAJA1IIwCMgo9ZcFRRl2X1aGY6eQzkwpz7Lmn0wL5fdizI
|
||||
rYJ0wvGB2prLa+GCAgriQESCXB7sftUYUUQb8FVHRia/Tg5vaxmJuDaSXnpGpUEN
|
||||
YLwr05cifABAMWrl2ABU1VOei0264GalhAYojR0h8VEInlPg+Wkn6Pk5krN0MUk+
|
||||
te2yeAfS8hW6fWN57yOKOIW3DAuZDJAuWQFptFlobQvKIKcWGIk4mpKdPQgFxthv
|
||||
cJqVMAhHHjUW3FalU0ZoSU0uF00Qup0d0lKMTlU5TqzqZKLvCioTptgmFmbmWctJ
|
||||
42Ja+o7ShYgXjYZxCZmCrhwZVsFEKZOSJPt4G9D0svkT9LBW7FNybbLqZ0Yc2D4L
|
||||
N1eVuQ6I+brjc0Eu6sNO3rZPpKa4vwZKWEL2Y3wf22DUPpDjmmosRFoIHUJUsh63
|
||||
ILEFegLgOusgCjC3noTY6BDsudy7konozLE8F3JmwSojCKmA7Y5xgAiiwtkkjAae
|
||||
dFHoxmMGdYXFqSfDGxq0IdnX+gReRcMzEvhZ/OfgzC/Rvko2qtBgmXLpRIct4kKL
|
||||
RPw28kPYNozDhi0Igqaiqej96sJY4Ep3ehLhU7wuglNhfLk0BfZKjcoh5ERLGpHd
|
||||
PWRNI/5hpl0azsIOwjgQ9U6TfwT2emAwWyUFiGR0MKAJYCtuQnJFBxzvJnBz6+nO
|
||||
kwh+8AdnqsB6VqcJiu1eT7VWefDKeCkycQpyhSa/kLpwoeESGxT04x5CPiQuLMrT
|
||||
ZyNqVQFaneoVIqqSlbIjfZ/RaPUH66GyFj4TjYyDjaaq0J3NcL9BR2Nxrn9rMNPL
|
||||
m9R4iTo6tvMjvDyN0aRdkO0Q1iayUeOGtBHG+GQOpZpCtXbyDgNegbahFw+UozIw
|
||||
MDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1o3Q28L78MFkNnfoDWPuL1ckY
|
||||
eTAHBgUrzg8DBgOCAo0AOQ5Kpd4LYnmsq14VPx6EM7fmwGAU+0sFLk6y1wwO7AIL
|
||||
gkPnzf6vlVznae4pGgEL9LzGuVdnZaYw+HzqbRQ3Pb1cbLnlZjr37N1cwq6rc3uz
|
||||
H34nY2r9uurr1vR5LNq/QryLv5k7RgZKJlKcJ5GsY2kvHsaZ3ONx2xTa4pqn6Bzj
|
||||
Ocfc8C7Y2o6vPx9vHKovMKwgmXVRoLmLBUFq3zEQAsMFYuGF2z6z9dPGCzujRD4f
|
||||
NjnIKTTbEhUx9ZfIt6ay710hytISalO0TZNrPN2+nEJNkPDlkOeWDPBnKkULfOov
|
||||
vRj6kJayXj9nAWHjOvEWfIuMOzCMWyKSRjF9JpceNJORwUIl0J2pWUWQSlcWu58k
|
||||
Mlvq4bfSXDNpWm5kgo2VuulTDWZSNeqoxyMoLXrGohZY1LfVE+4dV4HbM0d/v0Ex
|
||||
xsevMCF4dJSkYJwFWbC3kRwaWxNSlR189Qx+oKyiSNLJe3eVk9nkYmlcC1L17spj
|
||||
Hjhrf6OCQrLqY3qEttJlrMq9Mb5T4Jfmly7EdPNTyHlBa71/i4a9xGkPNjnGXebY
|
||||
at5VT7GXXcWJVtFwqfjBNWNJH6TTDvOoTx9iNOo2m4g7lVCwdHDVHZC7sLQCYjLo
|
||||
KjUNR7rsGZNJW+mRPp3i4Dit5Kndw1sXNmET+8L0lsmULKCuNyxPH7VI/WcoVP2k
|
||||
vGvm+TW6utmwaZ0hr8FX3Mv0B3UHXbR6lIvs4sp/MJS3mZWS0eY1Wh3TwTTiyBOu
|
||||
IsE4yND/v/u8caAlXw4bkbx5DwotdsdwMbgvlN7bpsvg/7sJKtjOXu2PDFSgezGZ
|
||||
pGP7vHrzUEjc84X9freSJr08QLUd9ESpT2Ra+uMowbKECRyR0Np30ajBQA==
|
||||
-----END CERTIFICATE-----
|
||||
File diff suppressed because one or more lines are too long
|
After Width: | Height: | Size: 105 KiB |
@ -0,0 +1,7 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: run client .bat file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem testovanie spojenia klient server na lokalhost adrese s vyuzitim portu 5000
|
||||
client_run 127.0.0.1 5000 ./CLIENT/client.key ./CLIENT/client.pem
|
||||
@ -0,0 +1,7 @@
|
||||
:: Name: Martin Janitor
|
||||
:: Subject: DP1
|
||||
:: Description: run server.bat file
|
||||
:: Date: 2023-07-05
|
||||
|
||||
rem Spustenie servra, ktory "pocuva" na porte 5000
|
||||
server_run 5000 ./SERVER/server.pem ./SERVER/server.key
|
||||
BIN
OpenSSL_liboqs_oqsprovider/PQ_PROJECT_SSL_TLS/dokumentacia.pdf
Normal file
BIN
OpenSSL_liboqs_oqsprovider/PQ_PROJECT_SSL_TLS/dokumentacia.pdf
Normal file
Binary file not shown.
@ -0,0 +1,54 @@
|
||||
Tento priecinok obsahuje subor oqsprovider.dll, ktory umoznuje vyuzivat PQ
|
||||
algoritmy v TLS komunikacii. Tento .dll subor bol vytvoreny specialne
|
||||
pre obraz Win 7 x86 za ucelom demonstracie post-kvantovych algoritmov
|
||||
v ramci predmetu BPS a BIKS. V pripade pouzitia zdrojovych kodov
|
||||
klient/server na inom zariadeni je nutne vytvorit novy .dll subor.
|
||||
|
||||
Vytvorene a testovane na:
|
||||
OpenSSL 3.3.0, liboqs 0.10.0, oqs-provider 0.6.0
|
||||
|
||||
Cely postup je dostupny online:
|
||||
https://git.kemt.fei.tuke.sk/js331zc/MastersThesis/src/branch/master/OpenSSL_liboqs_oqsprovider
|
||||
|
||||
NAVOD NA POUZITIE
|
||||
- predpokladame ze system obsahuje kniznice libcrypto a libssl
|
||||
- na generovanie PQ certifikatov je potrebne mat OpenSSL.exe
|
||||
|
||||
Subor oqsprovider.dll presunieme na nas virtualny pocitac na lubovolne miesto.
|
||||
Napr. ho skopirujeme priamo na plochu, teda do C:\Users\Administrator\Desktop
|
||||
|
||||
Cestu k suboru potom definujeme ako systemovu premennu OPENSSL_MODULES.
|
||||
|
||||
Systemovu premennu mozeme definovat:
|
||||
a) PowerShell prikaz
|
||||
[Environment]::SetEnvironmentVariable("OPENSSL_MODULES", "C:\Users\Administrator\Desktop\", "Machine")
|
||||
|
||||
b) cmd prikaz
|
||||
setx OPENSSL_MODULES "C:\Users\Administrator\Desktop\"
|
||||
|
||||
c) manualne cez nastavenia
|
||||
Settings-System-Advanced system settings-Environment Variables-System variables-New
|
||||
Name: OPENSSL_MODULES
|
||||
Value: C:\Users\Administrator\Desktop\
|
||||
|
||||
Po nastaveni premennej restartujeme cmd/PowerShell.
|
||||
|
||||
GENEROVANIE PQ CERTIFIKATOV
|
||||
Generovanie PQ certifikatov prostrednictvom OpenSSL je mozne po aktivacii
|
||||
oqsprovidera priamo cez konfiguracny subor. V tomto subore je potrebne
|
||||
aktivovat default providera a doplnit aktivaciu modulu oqsprovider.
|
||||
|
||||
[provider_sect]
|
||||
default = default_sect
|
||||
oqsprovider = oqsprovider_sect
|
||||
[oqsprovider_sect]
|
||||
activate = 1
|
||||
|
||||
Subor openssl.cnf v tomto priecinku je prikladom konfiguracneho suboru
|
||||
s uz aktivovanym oqsproviderom.
|
||||
|
||||
Aby OpenSSL pouzivalo nas konfiguracny subor, je nutne nastavit systemovu
|
||||
premennu OPENSSL_CONF na priecinok, kde sa tento subor nachadza. V BPS obraze
|
||||
je tato premenna nastavena na C:\OPENSSL\BIN\
|
||||
Systemovu premennu mozeme zmenit alebo skopirovat nas konfiguracny subor
|
||||
na dane miesto.
|
||||
@ -0,0 +1,394 @@
|
||||
#
|
||||
# OpenSSL example configuration file.
|
||||
# See doc/man5/config.pod for more info.
|
||||
#
|
||||
# This is mostly being used for generation of certificate requests,
|
||||
# but may be used for auto loading of providers
|
||||
|
||||
# Note that you can include other files from the main configuration
|
||||
# file using the .include directive.
|
||||
#.include filename
|
||||
|
||||
# This definition stops the following lines choking if HOME isn't
|
||||
# defined.
|
||||
HOME = .
|
||||
|
||||
# Use this in order to automatically load providers.
|
||||
openssl_conf = openssl_init
|
||||
|
||||
# Comment out the next line to ignore configuration errors
|
||||
config_diagnostics = 1
|
||||
|
||||
# Extra OBJECT IDENTIFIER info:
|
||||
# oid_file = $ENV::HOME/.oid
|
||||
oid_section = new_oids
|
||||
|
||||
# To use this configuration file with the "-extfile" option of the
|
||||
# "openssl x509" utility, name here the section containing the
|
||||
# X.509v3 extensions to use:
|
||||
# extensions =
|
||||
# (Alternatively, use a configuration file that has only
|
||||
# X.509v3 extensions in its main [= default] section.)
|
||||
|
||||
[ new_oids ]
|
||||
# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
|
||||
# Add a simple OID like this:
|
||||
# testoid1=1.2.3.4
|
||||
# Or use config file substitution like this:
|
||||
# testoid2=${testoid1}.5.6
|
||||
|
||||
# Policies used by the TSA examples.
|
||||
tsa_policy1 = 1.2.3.4.1
|
||||
tsa_policy2 = 1.2.3.4.5.6
|
||||
tsa_policy3 = 1.2.3.4.5.7
|
||||
|
||||
# For FIPS
|
||||
# Optionally include a file that is generated by the OpenSSL fipsinstall
|
||||
# application. This file contains configuration data required by the OpenSSL
|
||||
# fips provider. It contains a named section e.g. [fips_sect] which is
|
||||
# referenced from the [provider_sect] below.
|
||||
# Refer to the OpenSSL security policy for more information.
|
||||
# .include fipsmodule.cnf
|
||||
|
||||
[openssl_init]
|
||||
providers = provider_sect
|
||||
|
||||
# List of providers to load
|
||||
[provider_sect]
|
||||
default = default_sect
|
||||
oqsprovider = oqsprovider_sect
|
||||
# The fips section name should match the section name inside the
|
||||
# included fipsmodule.cnf.
|
||||
# fips = fips_sect
|
||||
|
||||
# If no providers are activated explicitly, the default one is activated implicitly.
|
||||
# See man 7 OSSL_PROVIDER-default for more details.
|
||||
#
|
||||
# If you add a section explicitly activating any other provider(s), you most
|
||||
# probably need to explicitly activate the default provider, otherwise it
|
||||
# becomes unavailable in openssl. As a consequence applications depending on
|
||||
# OpenSSL may not work correctly which could lead to significant system
|
||||
# problems including inability to remotely access the system.
|
||||
[default_sect]
|
||||
activate = 1
|
||||
|
||||
[oqsprovider_sect]
|
||||
activate = 1
|
||||
|
||||
|
||||
####################################################################
|
||||
[ ca ]
|
||||
default_ca = CA_default # The default ca section
|
||||
|
||||
####################################################################
|
||||
[ CA_default ]
|
||||
|
||||
dir = ./demoCA # Where everything is kept
|
||||
certs = $dir/certs # Where the issued certs are kept
|
||||
crl_dir = $dir/crl # Where the issued crl are kept
|
||||
database = $dir/index.txt # database index file.
|
||||
#unique_subject = no # Set to 'no' to allow creation of
|
||||
# several certs with same subject.
|
||||
new_certs_dir = $dir/newcerts # default place for new certs.
|
||||
|
||||
certificate = $dir/cacert.pem # The CA certificate
|
||||
serial = $dir/serial # The current serial number
|
||||
crlnumber = $dir/crlnumber # the current crl number
|
||||
# must be commented out to leave a V1 CRL
|
||||
crl = $dir/crl.pem # The current CRL
|
||||
private_key = $dir/private/cakey.pem# The private key
|
||||
|
||||
x509_extensions = usr_cert # The extensions to add to the cert
|
||||
|
||||
# Comment out the following two lines for the "traditional"
|
||||
# (and highly broken) format.
|
||||
name_opt = ca_default # Subject Name options
|
||||
cert_opt = ca_default # Certificate field options
|
||||
|
||||
# Extension copying option: use with caution.
|
||||
# copy_extensions = copy
|
||||
|
||||
# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
|
||||
# so this is commented out by default to leave a V1 CRL.
|
||||
# crlnumber must also be commented out to leave a V1 CRL.
|
||||
# crl_extensions = crl_ext
|
||||
|
||||
default_days = 365 # how long to certify for
|
||||
default_crl_days= 30 # how long before next CRL
|
||||
default_md = default # use public key default MD
|
||||
preserve = no # keep passed DN ordering
|
||||
|
||||
# A few difference way of specifying how similar the request should look
|
||||
# For type CA, the listed attributes must be the same, and the optional
|
||||
# and supplied fields are just that :-)
|
||||
policy = policy_match
|
||||
|
||||
# For the CA policy
|
||||
[ policy_match ]
|
||||
countryName = match
|
||||
stateOrProvinceName = match
|
||||
organizationName = match
|
||||
organizationalUnitName = optional
|
||||
commonName = supplied
|
||||
emailAddress = optional
|
||||
|
||||
# For the 'anything' policy
|
||||
# At this point in time, you must list all acceptable 'object'
|
||||
# types.
|
||||
[ policy_anything ]
|
||||
countryName = optional
|
||||
stateOrProvinceName = optional
|
||||
localityName = optional
|
||||
organizationName = optional
|
||||
organizationalUnitName = optional
|
||||
commonName = supplied
|
||||
emailAddress = optional
|
||||
|
||||
####################################################################
|
||||
[ req ]
|
||||
default_bits = 2048
|
||||
default_keyfile = privkey.pem
|
||||
distinguished_name = req_distinguished_name
|
||||
attributes = req_attributes
|
||||
x509_extensions = v3_ca # The extensions to add to the self signed cert
|
||||
|
||||
# Passwords for private keys if not present they will be prompted for
|
||||
# input_password = secret
|
||||
# output_password = secret
|
||||
|
||||
# This sets a mask for permitted string types. There are several options.
|
||||
# default: PrintableString, T61String, BMPString.
|
||||
# pkix : PrintableString, BMPString (PKIX recommendation before 2004)
|
||||
# utf8only: only UTF8Strings (PKIX recommendation after 2004).
|
||||
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
|
||||
# MASK:XXXX a literal mask value.
|
||||
# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
|
||||
string_mask = utf8only
|
||||
|
||||
# req_extensions = v3_req # The extensions to add to a certificate request
|
||||
|
||||
[ req_distinguished_name ]
|
||||
countryName = Country Name (2 letter code)
|
||||
countryName_default = AU
|
||||
countryName_min = 2
|
||||
countryName_max = 2
|
||||
|
||||
stateOrProvinceName = State or Province Name (full name)
|
||||
stateOrProvinceName_default = Some-State
|
||||
|
||||
localityName = Locality Name (eg, city)
|
||||
|
||||
0.organizationName = Organization Name (eg, company)
|
||||
0.organizationName_default = Internet Widgits Pty Ltd
|
||||
|
||||
# we can do this but it is not needed normally :-)
|
||||
#1.organizationName = Second Organization Name (eg, company)
|
||||
#1.organizationName_default = World Wide Web Pty Ltd
|
||||
|
||||
organizationalUnitName = Organizational Unit Name (eg, section)
|
||||
#organizationalUnitName_default =
|
||||
|
||||
commonName = Common Name (e.g. server FQDN or YOUR name)
|
||||
commonName_max = 64
|
||||
|
||||
emailAddress = Email Address
|
||||
emailAddress_max = 64
|
||||
|
||||
# SET-ex3 = SET extension number 3
|
||||
|
||||
[ req_attributes ]
|
||||
challengePassword = A challenge password
|
||||
challengePassword_min = 4
|
||||
challengePassword_max = 20
|
||||
|
||||
unstructuredName = An optional company name
|
||||
|
||||
[ usr_cert ]
|
||||
|
||||
# These extensions are added when 'ca' signs a request.
|
||||
|
||||
# This goes against PKIX guidelines but some CAs do it and some software
|
||||
# requires this to avoid interpreting an end user certificate as a CA.
|
||||
|
||||
basicConstraints=CA:FALSE
|
||||
|
||||
# This is typical in keyUsage for a client certificate.
|
||||
# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||||
|
||||
# PKIX recommendations harmless if included in all certificates.
|
||||
subjectKeyIdentifier=hash
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
|
||||
# This stuff is for subjectAltName and issuerAltname.
|
||||
# Import the email address.
|
||||
# subjectAltName=email:copy
|
||||
# An alternative to produce certificates that aren't
|
||||
# deprecated according to PKIX.
|
||||
# subjectAltName=email:move
|
||||
|
||||
# Copy subject details
|
||||
# issuerAltName=issuer:copy
|
||||
|
||||
# This is required for TSA certificates.
|
||||
# extendedKeyUsage = critical,timeStamping
|
||||
|
||||
[ v3_req ]
|
||||
|
||||
# Extensions to add to a certificate request
|
||||
|
||||
basicConstraints = CA:FALSE
|
||||
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||||
|
||||
[ v3_ca ]
|
||||
|
||||
|
||||
# Extensions for a typical CA
|
||||
|
||||
|
||||
# PKIX recommendation.
|
||||
|
||||
subjectKeyIdentifier=hash
|
||||
|
||||
authorityKeyIdentifier=keyid:always,issuer
|
||||
|
||||
basicConstraints = critical,CA:true
|
||||
|
||||
# Key usage: this is typical for a CA certificate. However since it will
|
||||
# prevent it being used as an test self-signed certificate it is best
|
||||
# left out by default.
|
||||
# keyUsage = cRLSign, keyCertSign
|
||||
|
||||
# Include email address in subject alt name: another PKIX recommendation
|
||||
# subjectAltName=email:copy
|
||||
# Copy issuer details
|
||||
# issuerAltName=issuer:copy
|
||||
|
||||
# DER hex encoding of an extension: beware experts only!
|
||||
# obj=DER:02:03
|
||||
# Where 'obj' is a standard or added object
|
||||
# You can even override a supported extension:
|
||||
# basicConstraints= critical, DER:30:03:01:01:FF
|
||||
|
||||
[ crl_ext ]
|
||||
|
||||
# CRL extensions.
|
||||
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
|
||||
|
||||
# issuerAltName=issuer:copy
|
||||
authorityKeyIdentifier=keyid:always
|
||||
|
||||
[ proxy_cert_ext ]
|
||||
# These extensions should be added when creating a proxy certificate
|
||||
|
||||
# This goes against PKIX guidelines but some CAs do it and some software
|
||||
# requires this to avoid interpreting an end user certificate as a CA.
|
||||
|
||||
basicConstraints=CA:FALSE
|
||||
|
||||
# This is typical in keyUsage for a client certificate.
|
||||
# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||||
|
||||
# PKIX recommendations harmless if included in all certificates.
|
||||
subjectKeyIdentifier=hash
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
|
||||
# This stuff is for subjectAltName and issuerAltname.
|
||||
# Import the email address.
|
||||
# subjectAltName=email:copy
|
||||
# An alternative to produce certificates that aren't
|
||||
# deprecated according to PKIX.
|
||||
# subjectAltName=email:move
|
||||
|
||||
# Copy subject details
|
||||
# issuerAltName=issuer:copy
|
||||
|
||||
# This really needs to be in place for it to be a proxy certificate.
|
||||
proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
|
||||
|
||||
####################################################################
|
||||
[ tsa ]
|
||||
|
||||
default_tsa = tsa_config1 # the default TSA section
|
||||
|
||||
[ tsa_config1 ]
|
||||
|
||||
# These are used by the TSA reply generation only.
|
||||
dir = ./demoCA # TSA root directory
|
||||
serial = $dir/tsaserial # The current serial number (mandatory)
|
||||
crypto_device = builtin # OpenSSL engine to use for signing
|
||||
signer_cert = $dir/tsacert.pem # The TSA signing certificate
|
||||
# (optional)
|
||||
certs = $dir/cacert.pem # Certificate chain to include in reply
|
||||
# (optional)
|
||||
signer_key = $dir/private/tsakey.pem # The TSA private key (optional)
|
||||
signer_digest = sha256 # Signing digest to use. (Optional)
|
||||
default_policy = tsa_policy1 # Policy if request did not specify it
|
||||
# (optional)
|
||||
other_policies = tsa_policy2, tsa_policy3 # acceptable policies (optional)
|
||||
digests = sha1, sha256, sha384, sha512 # Acceptable message digests (mandatory)
|
||||
accuracy = secs:1, millisecs:500, microsecs:100 # (optional)
|
||||
clock_precision_digits = 0 # number of digits after dot. (optional)
|
||||
ordering = yes # Is ordering defined for timestamps?
|
||||
# (optional, default: no)
|
||||
tsa_name = yes # Must the TSA name be included in the reply?
|
||||
# (optional, default: no)
|
||||
ess_cert_id_chain = no # Must the ESS cert id chain be included?
|
||||
# (optional, default: no)
|
||||
ess_cert_id_alg = sha1 # algorithm to compute certificate
|
||||
# identifier (optional, default: sha1)
|
||||
|
||||
[insta] # CMP using Insta Demo CA
|
||||
# Message transfer
|
||||
server = pki.certificate.fi:8700
|
||||
# proxy = # set this as far as needed, e.g., http://192.168.1.1:8080
|
||||
# tls_use = 0
|
||||
path = pkix/
|
||||
|
||||
# Server authentication
|
||||
recipient = "/C=FI/O=Insta Demo/CN=Insta Demo CA" # or set srvcert or issuer
|
||||
ignore_keyusage = 1 # potentially needed quirk
|
||||
unprotected_errors = 1 # potentially needed quirk
|
||||
extracertsout = insta.extracerts.pem
|
||||
|
||||
# Client authentication
|
||||
ref = 3078 # user identification
|
||||
secret = pass:insta # can be used for both client and server side
|
||||
|
||||
# Generic message options
|
||||
cmd = ir # default operation, can be overridden on cmd line with, e.g., kur
|
||||
|
||||
# Certificate enrollment
|
||||
subject = "/CN=openssl-cmp-test"
|
||||
newkey = insta.priv.pem
|
||||
out_trusted = insta.ca.crt
|
||||
certout = insta.cert.pem
|
||||
|
||||
[pbm] # Password-based protection for Insta CA
|
||||
# Server and client authentication
|
||||
ref = $insta::ref # 3078
|
||||
secret = $insta::secret # pass:insta
|
||||
|
||||
[signature] # Signature-based protection for Insta CA
|
||||
# Server authentication
|
||||
trusted = insta.ca.crt # does not include keyUsage digitalSignature
|
||||
|
||||
# Client authentication
|
||||
secret = # disable PBM
|
||||
key = $insta::newkey # insta.priv.pem
|
||||
cert = $insta::certout # insta.cert.pem
|
||||
|
||||
[ir]
|
||||
cmd = ir
|
||||
|
||||
[cr]
|
||||
cmd = cr
|
||||
|
||||
[kur]
|
||||
# Certificate update
|
||||
cmd = kur
|
||||
oldcert = $insta::certout # insta.cert.pem
|
||||
|
||||
[rr]
|
||||
# Certificate revocation
|
||||
cmd = rr
|
||||
oldcert = $insta::certout # insta.cert.pem
|
||||
Binary file not shown.
File diff suppressed because one or more lines are too long
|
After Width: | Height: | Size: 71 KiB |
91
OpenSSL_liboqs_oqsprovider/PQ_PROJECT_SSL_TLS/readme
Normal file
91
OpenSSL_liboqs_oqsprovider/PQ_PROJECT_SSL_TLS/readme
Normal file
@ -0,0 +1,91 @@
|
||||
[14.04.2024]
|
||||
CLIENT_SERVER_SECURE, CLIENT_SERVER_SECURE_BIO
|
||||
- Testovane na verzii OpenSSL 3.3.0, liboqs 0.10.0, oqs-provider 0.6.0
|
||||
|
||||
[11.04.2024]
|
||||
CLIENT_SERVER_SECURE, CLIENT_SERVER_SECURE_BIO
|
||||
- Testovane na verzii OpenSSL 3.3.0
|
||||
|
||||
[24.2.2024]
|
||||
CLIENT_SERVER_SECURE, CLIENT_SERVER_SECURE_BIO
|
||||
- Rozsirenie funkcie initSSLContext(), aktivacia OQS-providera cez API
|
||||
- Doplnene priklady nastavenia premennej DEFAULT_GROUPS
|
||||
- Testovane s oqsprovider 0.5.3 zalozenom na liboqs 0.9.2
|
||||
- Testovane na Win11 x64, Win10 x64, Ubuntu 22 a Win 7 x86
|
||||
|
||||
OQSPROVIDER
|
||||
- Pridany priecinok so suborom oqsprovider.dll vytvoreny pre BPS obraz Win 7
|
||||
- Vytvorene README s navodom na pouzitie prilozeneho oqsprovidera
|
||||
|
||||
[17.2.2024]
|
||||
CLIENT_SERVER_SECURE, CLIENT_SERVER_SECURE_BIO
|
||||
- testovanie oqs-providera, ktory umoznuje vyuzivat PQ algoritmy v TLS 1.3
|
||||
- Upravene vypisy oboch aplikacii
|
||||
- Doplnene vypisy o pouzitych key exchange/encapsulation a signature algoritmov
|
||||
|
||||
CERTIFICATEs
|
||||
- Pridana zlozka pre generovanie PQ algoritmov
|
||||
- Pridany subor gen_PQ_cert.bat na generovanie PQ algoritmov
|
||||
- Vytvoreny README so zoznamom dostupnych PQ algoritmov
|
||||
|
||||
[8.2.2024]
|
||||
CLIENT_SERVER_SECURE, CLIENT_SERVER_SECURE_BIO
|
||||
- Testovane na verzii OpenSSL 3.2.1
|
||||
|
||||
CERTIFICATEs
|
||||
- Upravene certificate-authority-options.conf pri generovani ECC a RSA
|
||||
- Upraveny subor gen_cert_RSA.bat - zmenena velkost generovanych klucov
|
||||
|
||||
[12.9.2023]
|
||||
- Konverzia obrazkov v dokumentacii na vektorove
|
||||
|
||||
[28.8.2023]
|
||||
- Vektorove obrazky pridane do wordu
|
||||
- Pridal som k otestovanym nastrojom aj 32-bitovou GCC 13.2 posix winlibs rel.1 a OpenSSL 3.1.2, ktore ste avizovali v readme
|
||||
- Vygeneroval som vektorove obrazky do PDF formatu
|
||||
- Pod niektorymi obrazkami som upravil lenegdy (opis obrazka)
|
||||
- Formalna uprava textu
|
||||
- Pridal som zdroj z ktoreho pochadza povodny projekt
|
||||
- Vektorove PDF obrazky som umiestnil do .zip suboru Janitor_Martin_documents/Documents
|
||||
|
||||
[10.8.2023]
|
||||
- Zmena v subore CLIENT_SERVER_SECURE_BIO/CLIENT/client.c
|
||||
BIO_free_all(sock) -> SSL_free(ssl); kvoli spravnemu
|
||||
uvolneniu pamate
|
||||
- Uprava opisu serioveho cisla v dokumentacii + pridanie nazornej ukazky do prilohy
|
||||
- Uprava prikazu pre zobrazenie certifikatu v dokumentacii
|
||||
|
||||
|
||||
[12.7.2023]
|
||||
-------------------------------------------------------------------------------------
|
||||
CLIENT_SERVER_SECURE, CLIENT_SERVER_SECURE_BIO
|
||||
- Zmazanie prebitocnych suborov
|
||||
- Sparovanie pre BPS obraz
|
||||
- Pridanie osobitnych kompilacnych suborov pre
|
||||
client a server [comp_client.bat a comp_server.bat]
|
||||
- Pridanie bat suborov pre spustenie klienta a servera
|
||||
[start_server.bat a start_client.bat]
|
||||
- Formalna uprava zdrojovych kodov client.c a server.c
|
||||
- Nahradenie tabulatorov medzerami
|
||||
|
||||
CLIENT_SERVER_SECURE_BIO
|
||||
- Oprava chyby ktora sposobovala zlihanie a nasledne
|
||||
spadnutie servera [server.c -> Pridanie BIO_pop() funkcie]
|
||||
|
||||
DOKUMENTACIA
|
||||
- Pridanie nazornych ukazok do priloh
|
||||
- Opisanie extensions v prilohe
|
||||
- Podrobnejsie opisanie serioveho cisla
|
||||
- Formalna uprava textu
|
||||
- Oprava opisu niektorych funkcii, prepinacov ...
|
||||
- modifikacia suboru program_structure.svg
|
||||
- vytvorenie 2 suborov schematic pre obidva projekty,
|
||||
ktore zobrazuju schemu a opis vyuzitych funkcii v projekte
|
||||
- Pridanie uzitocnych liniek
|
||||
|
||||
|
||||
Nastroje
|
||||
- Otestovane na najnovsej verzii OpenSSL 3.1.1 30 May 2023
|
||||
- Otestovane na najnovsom Winlibs gcc prekladaci: gcc (MinGW-W64 x86_64-ucrt-posix-seh, built by Brecht Sanders) 13.1.0
|
||||
- Otestovane s nastrojmi vyuzitymi v BPS obraze
|
||||
|
||||
Loading…
Reference in New Issue
Block a user