linux使用openssl對socket通信加密

//普通的tcp伺服器端

#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>

int main(int argc, char *argv[])
{
    int server_sockfd;//伺服器端套接字
    int client_sockfd;//用戶端套接字
    int len;
    struct sockaddr_in my_addr;   //伺服器網絡位址結構體
    struct sockaddr_in remote_addr; //用戶端網絡位址結構體
    int sin_size;
    char buf[BUFSIZ];  //資料傳送的緩沖區
    memset(&my_addr,,sizeof(my_addr)); //資料初始化--清零
    my_addr.sin_family=AF_INET; //設定為IP通信
    my_addr.sin_addr.s_addr=INADDR_ANY;//伺服器IP位址--允許連接配接到所有本地位址上
    my_addr.sin_port=htons(); //伺服器端口号

    /*建立伺服器端套接字--IPv4協定，面向連接配接通信，TCP協定*/
    if((server_sockfd=socket(PF_INET,SOCK_STREAM,))<)
    {  
        perror("socket");
        return ;
    }

        /*将套接字綁定到伺服器的網絡位址上*/
    if (bind(server_sockfd,(struct sockaddr *)&my_addr,sizeof(struct sockaddr))<)
    {
        perror("bind");
        return ;
    }

    /*監聽連接配接請求--監聽隊列長度為5*/
    listen(server_sockfd,);

    sin_size=sizeof(struct sockaddr_in);

    /*等待用戶端連接配接請求到達*/
    if((client_sockfd=accept(server_sockfd,(struct sockaddr *)&remote_addr,&sin_size))<)
    {
        perror("accept");
        return ;
    }
    printf("accept client %s/n",inet_ntoa(remote_addr.sin_addr));
    len=send(client_sockfd,"Welcome to my server/n",,);//發送歡迎資訊

    /*接收用戶端的資料并将其發送給用戶端--recv傳回接收到的位元組數，send傳回發送的位元組數*/
    while((len=recv(client_sockfd,buf,BUFSIZ,))>))
    {
        buf[len]='/0';
        printf("%s/n",buf);
        if(send(client_sockfd,buf,len,)<)
        {
            perror("write");
            return ;
        }
    }
    close(client_sockfd);
    close(server_sockfd);
        return ;
}

//普通的tcp用戶端

#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>

int main(int argc, char *argv[])
{
    int client_sockfd;
    int len;
    struct sockaddr_in remote_addr; //伺服器端網絡位址結構體
    char buf[BUFSIZ];  //資料傳送的緩沖區
    memset(&remote_addr,,sizeof(remote_addr)); //資料初始化--清零
    remote_addr.sin_family=AF_INET; //設定為IP通信
    remote_addr.sin_addr.s_addr=inet_addr("127.0.0.1");//伺服器IP位址
    remote_addr.sin_port=htons(); //伺服器端口号

    /*建立用戶端套接字--IPv4協定，面向連接配接通信，TCP協定*/
    if((client_sockfd=socket(PF_INET,SOCK_STREAM,))<)
    {
        perror("socket");
        return ;
    }

    /*将套接字綁定到伺服器的網絡位址上*/
    if(connect(client_sockfd,(struct sockaddr *)&remote_addr,sizeof(struct sockaddr))<)
    {
        perror("connect");
        return ;
    }
    printf("connected to server/n");
    len=recv(client_sockfd,buf,BUFSIZ,);//接收伺服器端資訊
         buf[len]='/0';
    printf("%s",buf); //列印伺服器端資訊

    /*循環的發送接收資訊并列印接收資訊--recv傳回接收到的位元組數，send傳回發送的位元組數*/
    while()
    {
        printf("Enter string to send:");
        scanf("%s",buf);
        if(!strcmp(buf,"quit")
            break;
        len=send(client_sockfd,buf,strlen(buf),);
        len=recv(client_sockfd,buf,BUFSIZ,);
        buf[len]='/0';
        printf("received:%s/n",buf);
    }
    close(client_sockfd);//關閉套接字
         return ;
}

/*********************openssl加密解密函數******************************/

aes_options.h

#ifndef _ASE_H_
    #define _ASE_H_
     int encrypt(char *input_string, char **encrypt_string);
     void decrypt(char *encrypt_string, char **decrypt_string, int len);
#endif

aes_options.c

#include <stdio.h>
#include <openssl/aes.h>
#include <stdlib.h>
#include <string.h>

int encrypt(char *input_string, char **encrypt_string)
{
    AES_KEY aes;
    unsigned char key[AES_BLOCK_SIZE];        // AES_BLOCK_SIZE = 16
    unsigned char iv[AES_BLOCK_SIZE];        // init vector
    unsigned int len;        // encrypt length (in multiple of AES_BLOCK_SIZE)
    unsigned int i;

    // set the encryption length
    len = ;
    if ((strlen(input_string) + ) % AES_BLOCK_SIZE == ) 
    {
        len = strlen(input_string) + ;
    } 
    else 
    {
        len = ((strlen(input_string) + ) / AES_BLOCK_SIZE + ) * AES_BLOCK_SIZE;
    }

    // Generate AES 128-bit key
    for (i=; i<; ++i) {
        key[i] =  + i;
    }

    // Set encryption key
    for (i=; i<AES_BLOCK_SIZE; ++i) {
        iv[i] = ;
    }
    if (AES_set_encrypt_key(key, , &aes) < ) {
        fprintf(stderr, "Unable to set encryption key in AES\n");
        exit();
    }

    // alloc encrypt_string
    *encrypt_string = (unsigned char*)calloc(len, sizeof(unsigned char));    
    if (*encrypt_string == NULL) {
        fprintf(stderr, "Unable to allocate memory for encrypt_string\n");
        exit(-);
    }

    // encrypt (iv will change)
    AES_cbc_encrypt(input_string, *encrypt_string, len, &aes, iv, AES_ENCRYPT);
    return len;
}

void decrypt(char *encrypt_string, char **decrypt_string,int len)
{
    unsigned char key[AES_BLOCK_SIZE];        // AES_BLOCK_SIZE = 16
    unsigned char iv[AES_BLOCK_SIZE];        // init vector
    AES_KEY aes;
    int i;
    // Generate AES 128-bit key

    for (i=; i<; ++i) {
        key[i] =  + i;
    }

    // alloc decrypt_string
    *decrypt_string = (unsigned char*)calloc(len, sizeof(unsigned char));
    if (*decrypt_string == NULL) {
        fprintf(stderr, "Unable to allocate memory for decrypt_string\n");
        exit(-);
    }

    // Set decryption key
    for (i=; i<AES_BLOCK_SIZE; ++i) {
        iv[i] = ;
    }
    if (AES_set_decrypt_key(key, , &aes) < ) {
        fprintf(stderr, "Unable to set decryption key in AES\n");
        exit(-);
    }

    // decrypt
    AES_cbc_encrypt(encrypt_string, *decrypt_string, len, &aes, iv, 
            AES_DECRYPT);
}

/***********将普通的tcp伺服器及用戶端進行加密處理************************/

//伺服器

#include <stdio.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <string.h>
#include "aes_options.h"   //add

int main()
{
    int server_fd;
    int client_fd;
    int len;
    struct sockaddr_in server_addr;
    struct sockaddr_in client_addr;
    int sin_size;
    char buffer[BUFSIZ];
    // printf("%d",BUFSIZ);
    memset(&server_addr, , sizeof(server_addr));  //initialize struct
    memset(&server_addr, , sizeof(client_addr));

    server_addr.sin_family = AF_INET;
    server_addr.sin_addr.s_addr = INADDR_ANY;
    server_addr.sin_port = htons();

    if((server_fd = socket(PF_INET, SOCK_STREAM, )) < )   //create server socket
    {
        perror("socket create failed");
        return ;
    }

    if(bind(server_fd, (struct sockaddr *)&server_addr, sizeof(struct sockaddr)) < ) //bind info on server socket
    {
        perror("bind failed");
        return ;
    }

    listen(server_fd, );   //listen port 9000 

    sin_size = sizeof(struct sockaddr_in);

    if((client_fd = accept(server_fd, (struct sockaddr *)&client_addr, &sin_size)) < )
    {
        perror("accept failed");
        return ;   
    }

    printf("accept client %s\n", inet_ntoa(client_addr.sin_addr));
    len = send(client_fd, "Welcome to my server\n", , );

    while((len=recv(client_fd, buffer, BUFSIZ, )) > )
    {

        char *decryto_string = NULL;                          //add
        //進行解密處理
        decrypt(buffer, &decryto_string, len);                //add
        printf("%s \n", decryto_string);
        if(send(client_fd, decryto_string, len, ) < )       //modified
        {
            perror("send failed");
            return ;
        }
    }

    close(client_fd);
    close(server_fd);

    return ;
}

//用戶端

#include <stdio.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <string.h>
#include "aes_options.h"           //add

int main()
{
    int len;
    int client_sockfd;  
    struct sockaddr_in server_addr;
    char buffer[BUFSIZ];
    char *encrypt_string = NULL;
    memset(&server_addr, , sizeof(server_addr));

    server_addr.sin_family = AF_INET;
    server_addr.sin_addr.s_addr = inet_addr("127.0.0.1");
    server_addr.sin_port = htons();

    if((client_sockfd = socket(PF_INET, SOCK_STREAM, )) < )
    {
        perror("socket create failed");
        return ;

    }


    if(connect(client_sockfd, (struct sockaddr *)&server_addr, sizeof(struct sockaddr)) < )
    {
        perror("connect failed");
        return ;
    }

    printf("connect to server\n");
    len = recv(client_sockfd, buffer, BUFSIZ, );

    buffer[len] = '\0';
    printf("%s", buffer);

    while()
    {
        printf("enter a data:");
        scanf("%s", buffer);
        if(!strcmp(buffer,"quit"))
            break;
        //進行加密處理
        int encrypt_length = encrypt(buffer, &encrypt_string);     //add
        len = send(client_sockfd, encrypt_string, encrypt_length, ); //add
        len = recv(client_sockfd, buffer, BUFSIZ, );
        buffer[len] = '\0';
        printf("recived:%s \n", buffer);
    }

    close(client_sockfd);
    printf("bye");


    return ;
}

//編譯時

gcc aes_options.c socket_comunication_server.c -o server -lcrypto
gcc aes_options.c socket_comunication_client.c -o client -lcrypto## 标題文字 ##

linux使用openssl對socket通信加密

繼續閱讀

linux-svn解除安裝與安裝

vsftp虛拟多使用者多權限一鍵部署腳本

Ubuntu14.04 LTS下安裝mongodb

httpd服務的部署、啟動、配置和簡單優化一、部署二、啟動三、配置檔案

配置網頁内容通路

艱難安裝LDAP,SSL認證

Apache配置SSLApache配置SSL

手動安裝Intel network I217-LM網卡的Linux驅動

Windows下配置Apache的SSL服務

禁止ubuntu系統彈出報錯界面

Ubuntu Linux下Apache的配置檔案

samba伺服器的功能

【Linux】UDP廣播封包接收速率問題

Linux裝置模型（中）之上層容器

PowerPC平台 Linux移植三