dlls/wininet/netconnection.c

   1 /*
   2  * Wininet - networking layer. Uses unix sockets or OpenSSL.
   3  *
   4  * Copyright 2002 TransGaming Technologies Inc.
   5  *
   6  * David Hammerton
   7  *
   8  * This library is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU Lesser General Public
  10  * License as published by the Free Software Foundation; either
  11  * version 2.1 of the License, or (at your option) any later version.
  12  *
  13  * This library is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * Lesser General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public
  19  * License along with this library; if not, write to the Free Software
  20  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  21  */
  22
  23 #include "config.h"
  24 #include "wine/port.h"
  25
  26 #ifdef HAVE_SYS_TIME_H
  27 # include <sys/time.h>
  28 #endif
  29 #include <sys/types.h>
  30 #ifdef HAVE_SYS_SOCKET_H
  31 # include <sys/socket.h>
  32 #endif
  33 #ifdef HAVE_UNISTD_H
  34 # include <unistd.h>
  35 #endif
  36 #include <stdarg.h>
  37 #include <stdlib.h>
  38 #include <string.h>
  39 #include <stdio.h>
  40 #include <errno.h>
  41
  42 #include "wine/library.h"
  43 #include "windef.h"
  44 #include "winbase.h"
  45 #include "wininet.h"
  46 #include "winerror.h"
  47
  48 /* To avoid conflicts with the Unix socket headers. we only need it for
  49  * the error codes anyway. */
  50 #define USE_WS_PREFIX
  51 #include "winsock2.h"
  52
  53 #include "wine/debug.h"
  54 #include "internet.h"
  55 #include "wincrypt.h"
  56
  57 #define RESPONSE_TIMEOUT        30            /* FROM internet.c */
  58
  59
  60 WINE_DEFAULT_DEBUG_CHANNEL(wininet);
  61
  62 /* FIXME!!!!!!
  63  *    This should use winsock - To use winsock the functions will have to change a bit
  64  *        as they are designed for unix sockets.
  65  *    SSL stuff should use crypt32.dll
  66  */
  67
  68 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
  69
  70 #include <openssl/err.h>
  71
  72 #ifndef SONAME_LIBSSL
  73 #define SONAME_LIBSSL "libssl.so"
  74 #endif
  75 #ifndef SONAME_LIBCRYPTO
  76 #define SONAME_LIBCRYPTO "libcrypto.so"
  77 #endif
  78
  79 static void *OpenSSL_ssl_handle;
  80 static void *OpenSSL_crypto_handle;
  81
  82 static SSL_METHOD *meth;
  83 static SSL_CTX *ctx;
  84
  85 #define MAKE_FUNCPTR(f) static typeof(f) * p##f
  86
  87 /* OpenSSL functions that we use */
  88 MAKE_FUNCPTR(SSL_library_init);
  89 MAKE_FUNCPTR(SSL_load_error_strings);
  90 MAKE_FUNCPTR(SSLv23_method);
  91 MAKE_FUNCPTR(SSL_CTX_new);
  92 MAKE_FUNCPTR(SSL_new);
  93 MAKE_FUNCPTR(SSL_free);
  94 MAKE_FUNCPTR(SSL_set_fd);
  95 MAKE_FUNCPTR(SSL_connect);
  96 MAKE_FUNCPTR(SSL_shutdown);
  97 MAKE_FUNCPTR(SSL_write);
  98 MAKE_FUNCPTR(SSL_read);
  99 MAKE_FUNCPTR(SSL_get_verify_result);
 100 MAKE_FUNCPTR(SSL_get_peer_certificate);
 101 MAKE_FUNCPTR(SSL_CTX_get_timeout);
 102 MAKE_FUNCPTR(SSL_CTX_set_timeout);
 103 MAKE_FUNCPTR(SSL_CTX_set_default_verify_paths);
 104 MAKE_FUNCPTR(i2d_X509);
 105
 106 /* OpenSSL's libcrypto functions that we use */
 107 MAKE_FUNCPTR(BIO_new_fp);
 108 MAKE_FUNCPTR(ERR_get_error);
 109 MAKE_FUNCPTR(ERR_error_string);
 110 #undef MAKE_FUNCPTR
 111
 112 #endif
 113
 114 BOOL NETCON_init(WININET_NETCONNECTION *connection, BOOL useSSL)
 115 {
 116     connection->useSSL = FALSE;
 117     connection->socketFD = -1;
 118     if (useSSL)
 119     {
 120 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 121         const char *libcrypto_name_candidates[] = {SONAME_LIBCRYPTO,
 122                                                    "libcrypto.so.0.9.7",
 123                                                    "libcrypto.so.0.9.7a",
 124                                                    "libcrypto.so.0.9.7f",
 125                                                    "libcrypto.so.0.9.8",
 126                                                    "libcrypto.so.0.9.8a",
 127                                                    "libcrypto.so.6",
 128                                                    "libcrypto.so.5",
 129                                                    "libcrypto.so.4",
 130                                                    "libcrypto.so.0",
 131                                                    NULL};
 132         int i;
 133         const char *libssl_name_candidates[] =    {SONAME_LIBSSL,
 134                                                    "libssl.so.0.9.7",
 135                                                    "libssl.so.0.9.7a",
 136                                                    "libssl.so.0.9.7f",
 137                                                    "libssl.so.0.9.8",
 138                                                    "libssl.so.0.9.8a",
 139                                                    "libssl.so.6",
 140                                                    "libssl.so.5",
 141                                                    "libssl.so.4",
 142                                                    "libssl.so.0",
 143                                                    NULL};
 144
 145         TRACE("using SSL connection\n");
 146         if (OpenSSL_ssl_handle) /* already initialized everything */
 147             return TRUE;
 148
 149         for (i = 0; libssl_name_candidates[i] && !OpenSSL_ssl_handle; i++ )
 150             OpenSSL_ssl_handle = wine_dlopen(libssl_name_candidates[i], RTLD_NOW, NULL, 0);
 151
 152         if (!OpenSSL_ssl_handle)
 153         {
 154             ERR("trying to use a SSL connection, but couldn't load %s. Expect trouble.\n",
 155                 SONAME_LIBSSL);
 156             INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR);
 157             return FALSE;
 158         }
 159
 160         for (i = 0; libcrypto_name_candidates[i] && !OpenSSL_crypto_handle; i++ )
 161             OpenSSL_crypto_handle = wine_dlopen(libcrypto_name_candidates[i], RTLD_NOW, NULL, 0);
 162
 163         if (!OpenSSL_crypto_handle)
 164         {
 165             ERR("trying to use a SSL connection, but couldn't load %s. Expect trouble.\n",
 166                 SONAME_LIBCRYPTO);
 167             INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR);
 168             return FALSE;
 169         }
 170
 171         /* mmm nice ugly macroness */
 172 #define DYNSSL(x) \
 173     p##x = wine_dlsym(OpenSSL_ssl_handle, #x, NULL, 0); \
 174     if (!p##x) \
 175     { \
 176         ERR("failed to load symbol %s\n", #x); \
 177         INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR); \
 178         return FALSE; \
 179     }
 180
 181         DYNSSL(SSL_library_init);
 182         DYNSSL(SSL_load_error_strings);
 183         DYNSSL(SSLv23_method);
 184         DYNSSL(SSL_CTX_new);
 185         DYNSSL(SSL_new);
 186         DYNSSL(SSL_free);
 187         DYNSSL(SSL_set_fd);
 188         DYNSSL(SSL_connect);
 189         DYNSSL(SSL_shutdown);
 190         DYNSSL(SSL_write);
 191         DYNSSL(SSL_read);
 192         DYNSSL(SSL_get_verify_result);
 193         DYNSSL(SSL_get_peer_certificate);
 194         DYNSSL(SSL_CTX_get_timeout);
 195         DYNSSL(SSL_CTX_set_timeout);
 196         DYNSSL(SSL_CTX_set_default_verify_paths);
 197         DYNSSL(i2d_X509);
 198 #undef DYNSSL
 199
 200 #define DYNCRYPTO(x) \
 201     p##x = wine_dlsym(OpenSSL_crypto_handle, #x, NULL, 0); \
 202     if (!p##x) \
 203     { \
 204         ERR("failed to load symbol %s\n", #x); \
 205         INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR); \
 206         return FALSE; \
 207     }
 208         DYNCRYPTO(BIO_new_fp);
 209         DYNCRYPTO(ERR_get_error);
 210         DYNCRYPTO(ERR_error_string);
 211 #undef DYNCRYPTO
 212
 213         pSSL_library_init();
 214         pSSL_load_error_strings();
 215         pBIO_new_fp(stderr, BIO_NOCLOSE); /* FIXME: should use winedebug stuff */
 216
 217         meth = pSSLv23_method();
 218         connection->peek_msg = NULL;
 219         connection->peek_msg_mem = NULL;
 220 #else
 221         FIXME("can't use SSL, not compiled in.\n");
 222         INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR);
 223         return FALSE;
 224 #endif
 225     }
 226     return TRUE;
 227 }
 228
 229 BOOL NETCON_connected(WININET_NETCONNECTION *connection)
 230 {
 231     if (connection->socketFD == -1)
 232         return FALSE;
 233     else
 234         return TRUE;
 235 }
 236
 237 /* translate a unix error code into a winsock one */
 238 static int sock_get_error( int err )
 239 {
 240     switch (err)
 241     {
 242         case EINTR:             return WSAEINTR;
 243         case EBADF:             return WSAEBADF;
 244         case EPERM:
 245         case EACCES:            return WSAEACCES;
 246         case EFAULT:            return WSAEFAULT;
 247         case EINVAL:            return WSAEINVAL;
 248         case EMFILE:            return WSAEMFILE;
 249         case EWOULDBLOCK:       return WSAEWOULDBLOCK;
 250         case EINPROGRESS:       return WSAEINPROGRESS;
 251         case EALREADY:          return WSAEALREADY;
 252         case ENOTSOCK:          return WSAENOTSOCK;
 253         case EDESTADDRREQ:      return WSAEDESTADDRREQ;
 254         case EMSGSIZE:          return WSAEMSGSIZE;
 255         case EPROTOTYPE:        return WSAEPROTOTYPE;
 256         case ENOPROTOOPT:       return WSAENOPROTOOPT;
 257         case EPROTONOSUPPORT:   return WSAEPROTONOSUPPORT;
 258         case ESOCKTNOSUPPORT:   return WSAESOCKTNOSUPPORT;
 259         case EOPNOTSUPP:        return WSAEOPNOTSUPP;
 260         case EPFNOSUPPORT:      return WSAEPFNOSUPPORT;
 261         case EAFNOSUPPORT:      return WSAEAFNOSUPPORT;
 262         case EADDRINUSE:        return WSAEADDRINUSE;
 263         case EADDRNOTAVAIL:     return WSAEADDRNOTAVAIL;
 264         case ENETDOWN:          return WSAENETDOWN;
 265         case ENETUNREACH:       return WSAENETUNREACH;
 266         case ENETRESET:         return WSAENETRESET;
 267         case ECONNABORTED:      return WSAECONNABORTED;
 268         case EPIPE:
 269         case ECONNRESET:        return WSAECONNRESET;
 270         case ENOBUFS:           return WSAENOBUFS;
 271         case EISCONN:           return WSAEISCONN;
 272         case ENOTCONN:          return WSAENOTCONN;
 273         case ESHUTDOWN:         return WSAESHUTDOWN;
 274         case ETOOMANYREFS:      return WSAETOOMANYREFS;
 275         case ETIMEDOUT:         return WSAETIMEDOUT;
 276         case ECONNREFUSED:      return WSAECONNREFUSED;
 277         case ELOOP:             return WSAELOOP;
 278         case ENAMETOOLONG:      return WSAENAMETOOLONG;
 279         case EHOSTDOWN:         return WSAEHOSTDOWN;
 280         case EHOSTUNREACH:      return WSAEHOSTUNREACH;
 281         case ENOTEMPTY:         return WSAENOTEMPTY;
 282 #ifdef EPROCLIM
 283         case EPROCLIM:          return WSAEPROCLIM;
 284 #endif
 285 #ifdef EUSERS
 286         case EUSERS:            return WSAEUSERS;
 287 #endif
 288 #ifdef EDQUOT
 289         case EDQUOT:            return WSAEDQUOT;
 290 #endif
 291 #ifdef ESTALE
 292         case ESTALE:            return WSAESTALE;
 293 #endif
 294 #ifdef EREMOTE
 295         case EREMOTE:           return WSAEREMOTE;
 296 #endif
 297     default: errno=err; perror("sock_set_error"); return WSAEFAULT;
 298     }
 299 }
 300
 301 /******************************************************************************
 302  * NETCON_create
 303  * Basically calls 'socket()'
 304  */
 305 BOOL NETCON_create(WININET_NETCONNECTION *connection, int domain,
 306               int type, int protocol)
 307 {
 308 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 309     if (connection->useSSL)
 310         return FALSE;
 311 #endif
 312
 313     connection->socketFD = socket(domain, type, protocol);
 314     if (connection->socketFD == -1)
 315     {
 316         INTERNET_SetLastError(sock_get_error(errno));
 317         return FALSE;
 318     }
 319     return TRUE;
 320 }
 321
 322 /******************************************************************************
 323  * NETCON_close
 324  * Basically calls 'close()' unless we should use SSL
 325  */
 326 BOOL NETCON_close(WININET_NETCONNECTION *connection)
 327 {
 328     int result;
 329
 330     if (!NETCON_connected(connection)) return FALSE;
 331
 332 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 333     if (connection->useSSL)
 334     {
 335         HeapFree(GetProcessHeap(),0,connection->peek_msg_mem);
 336         connection->peek_msg = NULL;
 337         connection->peek_msg_mem = NULL;
 338         connection->peek_len = 0;
 339
 340         pSSL_shutdown(connection->ssl_s);
 341         pSSL_free(connection->ssl_s);
 342         connection->ssl_s = NULL;
 343
 344         connection->useSSL = FALSE;
 345     }
 346 #endif
 347
 348     result = closesocket(connection->socketFD);
 349     connection->socketFD = -1;
 350
 351     if (result == -1)
 352     {
 353         INTERNET_SetLastError(sock_get_error(errno));
 354         return FALSE;
 355     }
 356     return TRUE;
 357 }
 358 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 359 static BOOL check_hostname(X509 *cert, char *hostname)
 360 {
 361     /* FIXME: implement */
 362     return TRUE;
 363 }
 364 #endif
 365 /******************************************************************************
 366  * NETCON_secure_connect
 367  * Initiates a secure connection over an existing plaintext connection.
 368  */
 369 BOOL NETCON_secure_connect(WININET_NETCONNECTION *connection, LPCWSTR hostname)
 370 {
 371 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 372     long verify_res;
 373     X509 *cert;
 374     int len;
 375     char *hostname_unix;
 376
 377     /* can't connect if we are already connected */
 378     if (connection->useSSL)
 379     {
 380         ERR("already connected\n");
 381         return FALSE;
 382     }
 383
 384     ctx = pSSL_CTX_new(meth);
 385     if (!pSSL_CTX_set_default_verify_paths(ctx))
 386     {
 387         ERR("SSL_CTX_set_default_verify_paths failed: %s\n",
 388             pERR_error_string(pERR_get_error(), 0));
 389         INTERNET_SetLastError(ERROR_OUTOFMEMORY);
 390         return FALSE;
 391     }
 392     connection->ssl_s = pSSL_new(ctx);
 393     if (!connection->ssl_s)
 394     {
 395         ERR("SSL_new failed: %s\n",
 396             pERR_error_string(pERR_get_error(), 0));
 397         INTERNET_SetLastError(ERROR_OUTOFMEMORY);
 398         goto fail;
 399     }
 400
 401     if (!pSSL_set_fd(connection->ssl_s, connection->socketFD))
 402     {
 403         ERR("SSL_set_fd failed: %s\n",
 404             pERR_error_string(pERR_get_error(), 0));
 405         INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR);
 406         goto fail;
 407     }
 408
 409     if (pSSL_connect(connection->ssl_s) <= 0)
 410     {
 411         ERR("SSL_connect failed: %s\n",
 412             pERR_error_string(pERR_get_error(), 0));
 413         INTERNET_SetLastError(ERROR_INTERNET_SECURITY_CHANNEL_ERROR);
 414         goto fail;
 415     }
 416     cert = pSSL_get_peer_certificate(connection->ssl_s);
 417     if (!cert)
 418     {
 419         ERR("no certificate for server %s\n", debugstr_w(hostname));
 420         /* FIXME: is this the best error? */
 421         INTERNET_SetLastError(ERROR_INTERNET_INVALID_CA);
 422         goto fail;
 423     }
 424     verify_res = pSSL_get_verify_result(connection->ssl_s);
 425     if (verify_res != X509_V_OK)
 426     {
 427         ERR("couldn't verify the security of the connection, %ld\n", verify_res);
 428         /* FIXME: we should set an error and return, but we only warn at
 429          * the moment */
 430     }
 431
 432     len = WideCharToMultiByte(CP_UNIXCP, 0, hostname, -1, NULL, 0, NULL, NULL);
 433     hostname_unix = HeapAlloc(GetProcessHeap(), 0, len);
 434     if (!hostname_unix)
 435     {
 436         INTERNET_SetLastError(ERROR_OUTOFMEMORY);
 437         goto fail;
 438     }
 439     WideCharToMultiByte(CP_UNIXCP, 0, hostname, -1, hostname_unix, len, NULL, NULL);
 440
 441     if (!check_hostname(cert, hostname_unix))
 442     {
 443         HeapFree(GetProcessHeap(), 0, hostname_unix);
 444         INTERNET_SetLastError(ERROR_INTERNET_SEC_CERT_CN_INVALID);
 445         goto fail;
 446     }
 447
 448     HeapFree(GetProcessHeap(), 0, hostname_unix);
 449     connection->useSSL = TRUE;
 450     return TRUE;
 451
 452 fail:
 453     if (connection->ssl_s)
 454     {
 455         pSSL_shutdown(connection->ssl_s);
 456         pSSL_free(connection->ssl_s);
 457         connection->ssl_s = NULL;
 458     }
 459 #endif
 460     return FALSE;
 461 }
 462
 463 /******************************************************************************
 464  * NETCON_connect
 465  * Connects to the specified address.
 466  */
 467 BOOL NETCON_connect(WININET_NETCONNECTION *connection, const struct sockaddr *serv_addr,
 468                     unsigned int addrlen)
 469 {
 470     int result;
 471
 472     if (!NETCON_connected(connection)) return FALSE;
 473
 474     result = connect(connection->socketFD, serv_addr, addrlen);
 475     if (result == -1)
 476     {
 477         WARN("Unable to connect to host (%s)\n", strerror(errno));
 478         INTERNET_SetLastError(sock_get_error(errno));
 479
 480         closesocket(connection->socketFD);
 481         connection->socketFD = -1;
 482         return FALSE;
 483     }
 484
 485     return TRUE;
 486 }
 487
 488 /******************************************************************************
 489  * NETCON_send
 490  * Basically calls 'send()' unless we should use SSL
 491  * number of chars send is put in *sent
 492  */
 493 BOOL NETCON_send(WININET_NETCONNECTION *connection, const void *msg, size_t len, int flags,
 494                 int *sent /* out */)
 495 {
 496     if (!NETCON_connected(connection)) return FALSE;
 497     if (!connection->useSSL)
 498     {
 499         *sent = send(connection->socketFD, msg, len, flags);
 500         if (*sent == -1)
 501         {
 502             INTERNET_SetLastError(sock_get_error(errno));
 503             return FALSE;
 504         }
 505         return TRUE;
 506     }
 507     else
 508     {
 509 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 510         if (flags)
 511             FIXME("SSL_write doesn't support any flags (%08x)\n", flags);
 512         *sent = pSSL_write(connection->ssl_s, msg, len);
 513         if (*sent < 1 && len)
 514             return FALSE;
 515         return TRUE;
 516 #else
 517         return FALSE;
 518 #endif
 519     }
 520 }
 521
 522 /******************************************************************************
 523  * NETCON_recv
 524  * Basically calls 'recv()' unless we should use SSL
 525  * number of chars received is put in *recvd
 526  */
 527 BOOL NETCON_recv(WININET_NETCONNECTION *connection, void *buf, size_t len, int flags,
 528                 int *recvd /* out */)
 529 {
 530     *recvd = 0;
 531     if (!NETCON_connected(connection)) return FALSE;
 532     if (!len)
 533         return TRUE;
 534     if (!connection->useSSL)
 535     {
 536         *recvd = recv(connection->socketFD, buf, len, flags);
 537         if (*recvd == -1)
 538         {
 539             INTERNET_SetLastError(sock_get_error(errno));
 540             return FALSE;
 541         }
 542         return TRUE;
 543     }
 544     else
 545     {
 546 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 547         if (flags & ~(MSG_PEEK|MSG_WAITALL))
 548             FIXME("SSL_read does not support the following flag: %08x\n", flags);
 549
 550         /* this ugly hack is all for MSG_PEEK. eww gross */
 551         if (flags & MSG_PEEK && !connection->peek_msg)
 552         {
 553             connection->peek_msg = connection->peek_msg_mem = HeapAlloc(GetProcessHeap(), 0, (sizeof(char) * len) + 1);
 554         }
 555         else if (flags & MSG_PEEK && connection->peek_msg)
 556         {
 557             if (len < connection->peek_len)
 558                 FIXME("buffer isn't big enough. Do the expect us to wrap?\n");
 559             *recvd = min(len, connection->peek_len);
 560             memcpy(buf, connection->peek_msg, *recvd);
 561             return TRUE;
 562         }
 563         else if (connection->peek_msg)
 564         {
 565             *recvd = min(len, connection->peek_len);
 566             memcpy(buf, connection->peek_msg, *recvd);
 567             connection->peek_len -= *recvd;
 568             connection->peek_msg += *recvd;
 569             if (connection->peek_len == 0)
 570             {
 571                 HeapFree(GetProcessHeap(), 0, connection->peek_msg_mem);
 572                 connection->peek_msg_mem = NULL;
 573                 connection->peek_msg = NULL;
 574             }
 575             /* check if we got enough data from the peek buffer */
 576             if (!(flags & MSG_WAITALL) || (*recvd == len))
 577                 return TRUE;
 578             /* otherwise, fall through */
 579         }
 580         *recvd += pSSL_read(connection->ssl_s, (char*)buf + *recvd, len - *recvd);
 581         if (flags & MSG_PEEK) /* must copy stuff into buffer */
 582         {
 583             connection->peek_len = *recvd;
 584             if (!*recvd)
 585             {
 586                 HeapFree(GetProcessHeap(), 0, connection->peek_msg_mem);
 587                 connection->peek_msg_mem = NULL;
 588                 connection->peek_msg = NULL;
 589             }
 590             else
 591                 memcpy(connection->peek_msg, buf, *recvd);
 592         }
 593         if (*recvd < 1 && len)
 594             return FALSE;
 595         return TRUE;
 596 #else
 597         return FALSE;
 598 #endif
 599     }
 600 }
 601
 602 /******************************************************************************
 603  * NETCON_getNextLine
 604  */
 605 BOOL NETCON_getNextLine(WININET_NETCONNECTION *connection, LPSTR lpszBuffer, LPDWORD dwBuffer)
 606 {
 607
 608     TRACE("\n");
 609
 610     if (!NETCON_connected(connection)) return FALSE;
 611
 612     if (!connection->useSSL)
 613     {
 614         struct timeval tv;
 615         fd_set infd;
 616         BOOL bSuccess = FALSE;
 617         DWORD nRecv = 0;
 618
 619         FD_ZERO(&infd);
 620         FD_SET(connection->socketFD, &infd);
 621         tv.tv_sec=RESPONSE_TIMEOUT;
 622         tv.tv_usec=0;
 623
 624         while (nRecv < *dwBuffer)
 625         {
 626             if (select(connection->socketFD+1,&infd,NULL,NULL,&tv) > 0)
 627             {
 628                 if (recv(connection->socketFD, &lpszBuffer[nRecv], 1, 0) <= 0)
 629                 {
 630                     INTERNET_SetLastError(sock_get_error(errno));
 631                     goto lend;
 632                 }
 633
 634                 if (lpszBuffer[nRecv] == '\n')
 635                 {
 636                     bSuccess = TRUE;
 637                     break;
 638                 }
 639                 if (lpszBuffer[nRecv] != '\r')
 640                     nRecv++;
 641             }
 642             else
 643             {
 644                 INTERNET_SetLastError(ERROR_INTERNET_TIMEOUT);
 645                 goto lend;
 646             }
 647         }
 648
 649     lend:             /* FIXME: don't use labels */
 650         if (bSuccess)
 651         {
 652             lpszBuffer[nRecv++] = '\0';
 653             *dwBuffer = nRecv;
 654             TRACE(":%u %s\n", nRecv, lpszBuffer);
 655             return TRUE;
 656         }
 657         else
 658         {
 659             return FALSE;
 660         }
 661     }
 662     else
 663     {
 664 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 665         long prev_timeout;
 666         DWORD nRecv = 0;
 667         BOOL success = TRUE;
 668
 669         prev_timeout = pSSL_CTX_get_timeout(ctx);
 670         pSSL_CTX_set_timeout(ctx, RESPONSE_TIMEOUT);
 671
 672         while (nRecv < *dwBuffer)
 673         {
 674             int recv = 1;
 675             if (!NETCON_recv(connection, &lpszBuffer[nRecv], 1, 0, &recv))
 676             {
 677                 INTERNET_SetLastError(ERROR_CONNECTION_ABORTED);
 678                 success = FALSE;
 679             }
 680
 681             if (lpszBuffer[nRecv] == '\n')
 682             {
 683                 success = TRUE;
 684                 break;
 685             }
 686             if (lpszBuffer[nRecv] != '\r')
 687                 nRecv++;
 688         }
 689
 690         pSSL_CTX_set_timeout(ctx, prev_timeout);
 691         if (success)
 692         {
 693             lpszBuffer[nRecv++] = '\0';
 694             *dwBuffer = nRecv;
 695             TRACE("_SSL:%u %s\n", nRecv, lpszBuffer);
 696             return TRUE;
 697         }
 698         return FALSE;
 699 #else
 700         return FALSE;
 701 #endif
 702     }
 703 }
 704
 705
 706 LPCVOID NETCON_GetCert(WININET_NETCONNECTION *connection)
 707 {
 708
 709 #if defined HAVE_OPENSSL_SSL_H && defined HAVE_OPENSSL_ERR_H
 710     X509* cert;
 711     unsigned char* buffer,*p;
 712     INT len;
 713     BOOL malloced = FALSE;
 714     LPCVOID r = NULL;
 715
 716     if (!connection->useSSL)
 717         return NULL;
 718
 719     cert = pSSL_get_peer_certificate(connection->ssl_s);
 720     p = NULL;
 721     len = pi2d_X509(cert,&p);
 722     /*
 723      * SSL 0.9.7 and above malloc the buffer if it is null.
 724      * however earlier version do not and so we would need to alloc the buffer.
 725      *
 726      * see the i2d_X509 man page for more details.
 727      */
 728     if (!p)
 729     {
 730         buffer = HeapAlloc(GetProcessHeap(),0,len);
 731         p = buffer;
 732         len = pi2d_X509(cert,&p);
 733     }
 734     else
 735     {
 736         buffer = p;
 737         malloced = TRUE;
 738     }
 739
 740     r = CertCreateCertificateContext(X509_ASN_ENCODING,buffer,len);
 741
 742     if (malloced)
 743         free(buffer);
 744     else
 745         HeapFree(GetProcessHeap(),0,buffer);
 746
 747     return r;
 748 #else
 749     return NULL;
 750 #endif
 751 }
 752
 753 BOOL NETCON_set_timeout(WININET_NETCONNECTION *connection, BOOL send, int value)
 754 {
 755     int result;
 756     struct timeval tv;
 757
 758     /* FIXME: we should probably store the timeout in the connection to set
 759      * when we do connect */
 760     if (!NETCON_connected(connection))
 761         return TRUE;
 762
 763     /* value is in milliseconds, convert to struct timeval */
 764     tv.tv_sec = value / 1000;
 765     tv.tv_usec = (value % 1000) * 1000;
 766
 767     result = setsockopt(connection->socketFD, SOL_SOCKET,
 768                         send ? SO_SNDTIMEO : SO_RCVTIMEO, &tv,
 769                         sizeof(tv));
 770
 771     if (result == -1)
 772     {
 773         WARN("setsockopt failed (%s)\n", strerror(errno));
 774         INTERNET_SetLastError(sock_get_error(errno));
 775         return FALSE;
 776     }
 777
 778     return TRUE;
 779 }