1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
#include <u.h>
#include <libc.h>
#include <mp.h>
#include <libsec.h>
void
usage(void)
{
fprint(2, "usage: tlsclient [-t /sys/lib/tls/xxx] [-x /sys/lib/tls/xxx.exclude] dialstring\n");
exits("usage");
}
void
xfer(int from, int to)
{
char buf[12*1024];
int n;
while((n = read(from, buf, sizeof buf)) > 0)
if(write(to, buf, n) < 0)
break;
}
void
main(int argc, char **argv)
{
int fd, netfd;
uchar digest[20];
TLSconn conn;
char *addr, *file, *filex;
Thumbprint *thumb;
file = nil;
filex = nil;
thumb = nil;
ARGBEGIN{
case 't':
file = EARGF(usage());
break;
case 'x':
filex = EARGF(usage());
break;
default:
usage();
}ARGEND
if(argc != 1)
usage();
if(filex && !file)
sysfatal("specifying -x without -t is useless");
if(file){
thumb = initThumbprints(file, filex);
if(thumb == nil)
sysfatal("initThumbprints: %r");
}
addr = argv[0];
if((netfd = dial(addr, 0, 0, 0)) < 0)
sysfatal("dial %s: %r", addr);
memset(&conn, 0, sizeof conn);
fd = tlsClient(netfd, &conn);
if(fd < 0)
sysfatal("tlsclient: %r");
if(thumb){
if(conn.cert==nil || conn.certlen<=0)
sysfatal("server did not provide TLS certificate");
sha1(conn.cert, conn.certlen, digest, nil);
if(!okThumbprint(digest, thumb)){
fmtinstall('H', encodefmt);
sysfatal("server certificate %.*H not recognized", SHA1dlen, digest);
}
}
free(conn.cert);
close(netfd);
rfork(RFNOTEG);
switch(fork()){
case -1:
fprint(2, "%s: fork: %r\n", argv0);
exits("dial");
case 0:
xfer(0, fd);
break;
default:
xfer(fd, 1);
break;
}
postnote(PNGROUP, getpid(), "die yankee pig dog");
exits(0);
}
|
