https_test.c 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372
  1. #include "board.h"
  2. #include <string.h>
  3. /* wolfssl includes. */
  4. #include <wolfssl/ssl.h>
  5. #include <wolfssl/internal.h>
  6. #include "api.h"
  7. #include "sockets.h"
  8. #define HTTPS_GET_API "GET / HTTP/1.1\r\n" /* HOST, host-port, URI */\
  9. "Host: www.baidu.com\r\n" /* server name */ \
  10. "\r\n"
  11. typedef struct {
  12. uint32_t ContentLength;
  13. }https_header_t;
  14. const char s__host_name[] = "www.baidu.com";
  15. static const unsigned char __ssl_root_certificate[] =
  16. "-----BEGIN CERTIFICATE-----"
  17. "MIIJ7DCCCNSgAwIBAgIMTkADpl62gfh/S9jrMA0GCSqGSIb3DQEBCwUAMFAxCzAJ"
  18. "BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H"
  19. "bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDA3MDgwMTQxMDJaFw0y"
  20. "NTA4MDkwMTQxMDFaMIGAMQswCQYDVQQGEwJDTjEQMA4GA1UECBMHYmVpamluZzEQ"
  21. "MA4GA1UEBxMHYmVpamluZzE5MDcGA1UEChMwQmVpamluZyBCYWlkdSBOZXRjb20g"
  22. "U2NpZW5jZSBUZWNobm9sb2d5IENvLiwgTHRkMRIwEAYDVQQDEwliYWlkdS5jb20w"
  23. "ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wFMskJ2dseOqoHptNwot"
  24. "FOhdBERsZ4VQnRNKXEEXMQEfgbNtScQ+C/Z+IpRAt1EObhYlifn74kt2nTsCQLng"
  25. "jfQkRVBuO/6PNGKdlCYGBeGqAL7xR+LOyHnpH9mwCBJc+WVt2zYM9I1clpXCJa+I"
  26. "tsq6qpb1AGoQxRDZ2n4K8Gd61wgNCPHDHc/Lk9NPJoUBMvYWvEe5lKhHsJtWtHe4"
  27. "QC3y58Vi+r5R0PWn2hyTBr9fCo58p/stDiRqp9Irtmi95YhwkNkmgwpMB8RhcGoN"
  28. "h+Uw5TkPZVj4AVaoPT1ED/GMKZev0+ypmp0+nmjVg2x7yUfLUfp3X7oBdI4TS2hv"
  29. "AgMBAAGjggaTMIIGjzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBjgYI"
  30. "KwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0cDovL3NlY3VyZS5nbG9iYWxz"
  31. "aWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGG"
  32. "K2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTgwVgYD"
  33. "VR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cu"
  34. "Z2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMD8GA1UdHwQ4MDYw"
  35. "NKAyoDCGLmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAx"
  36. "OC5jcmwwggNhBgNVHREEggNYMIIDVIIJYmFpZHUuY29tggxiYWlmdWJhby5jb22C"
  37. "DHd3dy5iYWlkdS5jboIQd3d3LmJhaWR1LmNvbS5jboIPbWN0LnkubnVvbWkuY29t"
  38. "ggthcG9sbG8uYXV0b4IGZHd6LmNuggsqLmJhaWR1LmNvbYIOKi5iYWlmdWJhby5j"
  39. "b22CESouYmFpZHVzdGF0aWMuY29tgg4qLmJkc3RhdGljLmNvbYILKi5iZGltZy5j"
  40. "b22CDCouaGFvMTIzLmNvbYILKi5udW9taS5jb22CDSouY2h1YW5rZS5jb22CDSou"
  41. "dHJ1c3Rnby5jb22CDyouYmNlLmJhaWR1LmNvbYIQKi5leXVuLmJhaWR1LmNvbYIP"
  42. "Ki5tYXAuYmFpZHUuY29tgg8qLm1iZC5iYWlkdS5jb22CESouZmFueWkuYmFpZHUu"
  43. "Y29tgg4qLmJhaWR1YmNlLmNvbYIMKi5taXBjZG4uY29tghAqLm5ld3MuYmFpZHUu"
  44. "Y29tgg4qLmJhaWR1cGNzLmNvbYIMKi5haXBhZ2UuY29tggsqLmFpcGFnZS5jboIN"
  45. "Ki5iY2Vob3N0LmNvbYIQKi5zYWZlLmJhaWR1LmNvbYIOKi5pbS5iYWlkdS5jb22C"
  46. "EiouYmFpZHVjb250ZW50LmNvbYILKi5kbG5lbC5jb22CCyouZGxuZWwub3JnghIq"
  47. "LmR1ZXJvcy5iYWlkdS5jb22CDiouc3UuYmFpZHUuY29tgggqLjkxLmNvbYISKi5o"
  48. "YW8xMjMuYmFpZHUuY29tgg0qLmFwb2xsby5hdXRvghIqLnh1ZXNodS5iYWlkdS5j"
  49. "b22CESouYmouYmFpZHViY2UuY29tghEqLmd6LmJhaWR1YmNlLmNvbYIOKi5zbWFy"
  50. "dGFwcHMuY26CDSouYmR0anJjdi5jb22CDCouaGFvMjIyLmNvbYIMKi5oYW9rYW4u"
  51. "Y29tgg8qLnBhZS5iYWlkdS5jb22CESoudmQuYmRzdGF0aWMuY29tghEqLmNsb3Vk"
  52. "LmJhaWR1LmNvbYISY2xpY2suaG0uYmFpZHUuY29tghBsb2cuaG0uYmFpZHUuY29t"
  53. "ghBjbS5wb3MuYmFpZHUuY29tghB3bi5wb3MuYmFpZHUuY29tghR1cGRhdGUucGFu"
  54. "LmJhaWR1LmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0j"
  55. "BBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFK3KAFTK2OWUto+D"
  56. "2ieAKE5ZJDsYMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgCvGBoo1oyj4KmK"
  57. "TJxnqwn4u7wiuq68sTijoZ3T+bYDDQAAAZCQAGzzAAAEAwBHMEUCIFwF5Jc+zyIF"
  58. "Gnpxchz9fY1qzlqg/oVrs2nnuxcpBuuIAiEAu3scD6u51VOP/9aMSqR2yKHZLbHw"
  59. "Fos9U7AzSdLIZa8AdgAS8U40vVNyTIQGGcOPP3oT+Oe1YoeInG0wBYTr5YYmOgAA"
  60. "AZCQAG3iAAAEAwBHMEUCIBBYQ6NP7VUDgfktWRg5QxT23QAbTqYovtV2D9O8Qc0T"
  61. "AiEA2P7+44EvQ5adwL1y56oyxv/m+Gujeia7wpo7+Xbhv6MAdwAN4fIwK9MNwUBi"
  62. "EgnqVS78R3R8sdfpMO8OQh60fk6qNAAAAZCQAGy+AAAEAwBIMEYCIQDU7Hxtx4c9"
  63. "p9Jd+cr+DCMtyRYSc0b8cktCcbMmtDE9ygIhAIpJd4yb7jtxnaEC8oLWDushbK1v"
  64. "0BIuZu6YrQvsf1nQMA0GCSqGSIb3DQEBCwUAA4IBAQCh9DfewC012/+fHZpmSpCn"
  65. "y+h3/+ClAZ8cJVO+LCmYz9r6bkyhcFquJ5qUpyoW8AYtU0oUFlqH6zLIyujW+7lq"
  66. "wFxB6NsXKKdwBKmMbmnZr2Fca5f+TtwD/GDJgG/egr7fI1u8194j9KEl8cK8Fujm"
  67. "+UsoWklEzd1It9xkLazJR/6SwbhSR4k610pvj8rQrS4wAewuYFDaDOfqsHtDIsx1"
  68. "tZfIfoB/O1wGWZQJU2M9wC8uYq0jQ2Q0MQJXuyJz04MFiGrPAS1Uk8mWd8M+3p65"
  69. "Xy4iAf8uWzs1M+fcwBE8BNBghkQgE+FSUsldm+5ZBCazU0joJswzldWisXMLTagI"
  70. "-----END CERTIFICATE-----"
  71. ;
  72. static const size_t __ssl_root_certificate_len = sizeof(__ssl_root_certificate);
  73. /*
  74. *行长度不包含行尾的\r\n
  75. */
  76. static int https_content_get_line_len(const char *https_content, int content_len)
  77. {
  78. int ret = -1;
  79. int step = 0;
  80. int cnt;
  81. if (!https_content || (content_len <= 0))
  82. goto exit;
  83. for (cnt = 0; cnt < content_len; cnt++) {
  84. if (https_content[cnt] == '\r') {
  85. step = 1;
  86. } else if (https_content[cnt] == '\n') {
  87. if (step == 1) {
  88. ret = cnt - 1;
  89. break;
  90. }
  91. } else {
  92. step = 0;
  93. }
  94. }
  95. exit:
  96. return ret;
  97. }
  98. static int https_content_get_line_pos(const char *https_content, int content_len, uint32_t line)
  99. {
  100. int pos = -1;
  101. int cur_pos;
  102. int step = 0;
  103. int line_cnt = 0;
  104. if (!https_content || (content_len <= 0))
  105. goto exit;
  106. for (cur_pos = 0; cur_pos < content_len; cur_pos++) {
  107. if (step == 2) {
  108. line_cnt++;
  109. step = 0;
  110. if (line_cnt == line) {
  111. pos = cur_pos;
  112. break;
  113. }
  114. }
  115. if (https_content[cur_pos] == '\r') {
  116. step = 1;
  117. } else if (https_content[cur_pos] == '\n') {
  118. if (step == 1) {
  119. step = 2;
  120. }
  121. } else {
  122. step = 0;
  123. }
  124. }
  125. exit:
  126. return pos;
  127. }
  128. static int https_get_content_length(const char *https_content, int content_len)
  129. {
  130. int ret = -1;
  131. int line_len = 0;
  132. int pos = 0;
  133. int pos_cnt = 0;
  134. const char header_start[] = "HTTP";
  135. const char ContentLength[] = "Content-Length";
  136. if (!https_content || content_len < 4) {
  137. ret = -1;
  138. goto exit;
  139. }
  140. if (memcmp((const void *)https_content, (const void *)header_start, 4) != 0) {
  141. ret = -1;
  142. goto exit;
  143. }
  144. while (1) {
  145. pos = https_content_get_line_pos(&https_content[pos_cnt], content_len - pos_cnt, 1);
  146. if (pos > -1) {
  147. pos_cnt += pos;
  148. line_len = https_content_get_line_len(&https_content[pos_cnt], content_len - pos_cnt);
  149. if (line_len <= 0) {
  150. break;
  151. } else if (line_len >= strlen(ContentLength)) {
  152. if (memcmp((const char *)&https_content[pos_cnt], (const char *)ContentLength, strlen(ContentLength)) == 0) {
  153. sscanf((const char *)&https_content[pos_cnt + strlen(ContentLength) + 2], "%d\r\n", &ret);
  154. break;
  155. }
  156. }
  157. } else {
  158. break;
  159. }
  160. }
  161. exit:
  162. return ret;
  163. }
  164. static int https_get_content_pos(const char *https_content, int content_len)
  165. {
  166. int ret = -1;
  167. int line_len = 0;
  168. int pos = 0;
  169. int pos_cnt = 0;
  170. int flag = 0;
  171. const char header_start[] = "HTTP";
  172. if (!https_content || content_len < 4) {
  173. ret = -1;
  174. goto exit;
  175. }
  176. if (memcmp((const void *)https_content, (const void *)header_start, 4) != 0) {
  177. ret = -1;
  178. goto exit;
  179. }
  180. while (1) {
  181. pos = https_content_get_line_pos(&https_content[pos_cnt], content_len - pos_cnt, 1);
  182. if (pos > -1) {
  183. pos_cnt += pos;
  184. line_len = https_content_get_line_len(&https_content[pos_cnt], content_len - pos_cnt);
  185. if (flag) {
  186. ret = pos_cnt;
  187. break;
  188. } else {
  189. if (line_len < 0) {
  190. break;
  191. } else if (line_len == 0) {
  192. flag = 1;
  193. }
  194. }
  195. } else {
  196. break;
  197. }
  198. }
  199. exit:
  200. return ret;
  201. }
  202. void https_client_test(void)
  203. {
  204. WOLFSSL_CTX* ctx = NULL;
  205. ip_addr_t server_ip ;
  206. err_t err = ERR_OK;
  207. int sockfd;
  208. struct sockaddr_in servaddr;
  209. WOLFSSL* ssl = NULL;
  210. char http_head[] = HTTPS_GET_API;
  211. int recv_len = 0;
  212. int total_recv_len = 0;
  213. char *rbuf = NULL;
  214. uint32_t pg_size = 1024 * 16;
  215. int ContentLength = -1;
  216. int content_start_pos = -1;
  217. //创建 wolfssl 需要的空间等配置
  218. if ( WOLFSSL_SUCCESS != wolfSSL_Init()) {
  219. printf("-------------- wolfssl init fail! --------------\n");
  220. goto exit;
  221. }
  222. //初始化 结构体 WOLFSSL_CTX
  223. if ((ctx = wolfSSL_CTX_new(wolfTLSv1_2_client_method())) == NULL) {
  224. printf("-------------- wolfSSL_CTX_new fail! --------------\n");
  225. goto exit;
  226. }
  227. //加载 CA 证书到 WOLFSSL_CTX
  228. if ( wolfSSL_CTX_load_verify_buffer(ctx, (unsigned char *)__ssl_root_certificate, \
  229. __ssl_root_certificate_len, WOLFSSL_FILETYPE_PEM) != SSL_SUCCESS) {
  230. printf("-------------- wolfSSL_CTX_load_verify_buffer fail! --------------\n");
  231. goto exit;
  232. }
  233. //进行域名解析
  234. err = netconn_gethostbyname(s__host_name, &server_ip);
  235. if (err != ERR_OK) {
  236. printf("-------------- netconn_gethostbyname fail! --------------\n");
  237. goto exit;
  238. }
  239. if (server_ip.addr == 0) {
  240. printf("-------------- DNS fail! --------------\n");
  241. goto exit;
  242. }
  243. // 进行 socket 连接
  244. sockfd = socket(AF_INET, SOCK_STREAM, 0);
  245. if (sockfd < 0)
  246. goto exit;
  247. memset(&servaddr, sizeof(servaddr), 0);
  248. servaddr.sin_family = AF_INET;
  249. servaddr.sin_port = htons(443);
  250. inet_pton(AF_INET, inet_ntoa(server_ip), &servaddr.sin_addr);
  251. /* Connect to socket file descriptor */
  252. if (0 > connect(sockfd, (struct sockaddr*) &servaddr, sizeof(servaddr))) {
  253. printf("-------------- https connect socket fail! --------------\n");
  254. goto exit;
  255. }
  256. //进行 SSL 的初始化
  257. wolfSSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, 0); // 尝试解决 -188, -155
  258. if ((ssl = wolfSSL_new(ctx)) == NULL) {
  259. printf("-------------- wolfSSL_new fail! --------------\n");
  260. goto exit;
  261. }
  262. //进行 SSL 和 socket 绑定
  263. if( WOLFSSL_SUCCESS != wolfSSL_set_fd(ssl, sockfd)) {
  264. printf("-------------- wolfSSL_set_fd fail! --------------\n");
  265. goto exit;
  266. }
  267. //访问
  268. if (wolfSSL_write(ssl, http_head, strlen(http_head)) != strlen(http_head)) {
  269. printf("-------------- wolfSSL_write fail! --------------\n");
  270. goto exit;
  271. }
  272. //接收
  273. for(;;) {
  274. if (total_recv_len == 0)
  275. rbuf = (char *)pvPortRealloc(rbuf, pg_size);
  276. else
  277. rbuf = (char *)pvPortRealloc(rbuf, total_recv_len + pg_size);
  278. if (!rbuf) {
  279. printf("realloc fail!\n");
  280. goto exit;
  281. }
  282. if ((ContentLength > 0) && (content_start_pos > 0)) {
  283. if (((ContentLength + content_start_pos) - total_recv_len) >= pg_size) {
  284. recv_len = wolfSSL_read(ssl, rbuf + total_recv_len, pg_size);
  285. } else {
  286. recv_len = wolfSSL_read(ssl, rbuf + total_recv_len, ((ContentLength + content_start_pos) - total_recv_len));
  287. }
  288. } else {
  289. recv_len = wolfSSL_read(ssl, rbuf + total_recv_len, pg_size);
  290. }
  291. if(recv_len <= 0) {
  292. break;
  293. }
  294. total_recv_len += recv_len;
  295. if ((ContentLength > 0) && (content_start_pos > 0)) {
  296. if ((ContentLength + content_start_pos) <= total_recv_len)
  297. break;
  298. }
  299. if (ContentLength == -1) {
  300. ContentLength = https_get_content_length((const char *)rbuf, total_recv_len);
  301. if (ContentLength > 0)
  302. printf("ContentLength = %d\n", ContentLength);
  303. }
  304. if ((ContentLength > 0) && (content_start_pos == -1)) {
  305. content_start_pos = https_get_content_pos((const char *)rbuf, total_recv_len);
  306. if (content_start_pos > 0)
  307. printf("content_start_pos = %d\n", content_start_pos);
  308. }
  309. }
  310. printf("\n ========== \n\n");
  311. printf("https recv data : recv_len = 0x%x\n",total_recv_len);
  312. printf("addr:0x%x\n", (uint32_t)rbuf);
  313. printf("\n ========== \n\n");
  314. exit:
  315. //释放空间
  316. if (ssl)
  317. wolfSSL_free(ssl); /* Free WOLFSSL object */
  318. if (ctx)
  319. wolfSSL_CTX_free(ctx); /* Free WOLFSSL_CTX object */
  320. wolfSSL_Cleanup(); /* Free wolfSSL */
  321. //关闭 socket
  322. if (sockfd != -1)
  323. closesocket(sockfd);
  324. if (rbuf)
  325. vPortFree((void *)rbuf);
  326. return;
  327. }