|
 |
97434d |
From 2a5868411c57e25802d2f16fd6b77601f10d0b72 Mon Sep 17 00:00:00 2001
|
|
|
97434d |
From: Nikos Mavrogiannopoulos <nmav@redhat.com>
|
|
|
97434d |
Date: Fri, 29 Apr 2016 22:58:34 +0200
|
|
|
97434d |
Subject: [PATCH] Updated gnutls certificate callback to new API (backwards
|
|
|
97434d |
compatible)
|
|
|
97434d |
|
|
|
97434d |
---
|
|
|
97434d |
src/idevice.c | 13 +++++++++++++
|
|
|
97434d |
1 file changed, 13 insertions(+)
|
|
|
97434d |
|
|
|
97434d |
diff --git a/src/idevice.c b/src/idevice.c
|
|
|
97434d |
index 5912aeb..f2de6a3 100644
|
|
|
97434d |
--- a/src/idevice.c
|
|
|
97434d |
+++ b/src/idevice.c
|
|
|
97434d |
@@ -642,7 +642,11 @@ static const char *ssl_error_to_string(int e)
|
|
|
97434d |
/**
|
|
|
97434d |
* Internally used gnutls callback function that gets called during handshake.
|
|
|
97434d |
*/
|
|
|
97434d |
+#if GNUTLS_VERSION_NUMBER >= 0x020b07
|
|
|
97434d |
+static int internal_cert_callback(gnutls_session_t session, const gnutls_datum_t * req_ca_rdn, int nreqs, const gnutls_pk_algorithm_t * sign_algos, int sign_algos_length, gnutls_retr2_st * st)
|
|
|
97434d |
+#else
|
|
|
97434d |
static int internal_cert_callback(gnutls_session_t session, const gnutls_datum_t * req_ca_rdn, int nreqs, const gnutls_pk_algorithm_t * sign_algos, int sign_algos_length, gnutls_retr_st * st)
|
|
|
97434d |
+#endif
|
|
|
97434d |
{
|
|
|
97434d |
int res = -1;
|
|
|
97434d |
gnutls_certificate_type_t type = gnutls_certificate_type_get(session);
|
|
|
97434d |
@@ -650,7 +654,12 @@ static int internal_cert_callback(gnutls_session_t session, const gnutls_datum_t
|
|
|
97434d |
ssl_data_t ssl_data = (ssl_data_t)gnutls_session_get_ptr(session);
|
|
|
97434d |
if (ssl_data && ssl_data->host_privkey && ssl_data->host_cert) {
|
|
|
97434d |
debug_info("Passing certificate");
|
|
|
97434d |
+#if GNUTLS_VERSION_NUMBER >= 0x020b07
|
|
|
97434d |
+ st->cert_type = type;
|
|
|
97434d |
+ st->key_type = GNUTLS_PRIVKEY_X509;
|
|
|
97434d |
+#else
|
|
|
97434d |
st->type = type;
|
|
|
97434d |
+#endif
|
|
|
97434d |
st->ncerts = 1;
|
|
|
97434d |
st->cert.x509 = &ssl_data->host_cert;
|
|
|
97434d |
st->key.x509 = ssl_data->host_privkey;
|
|
|
97434d |
@@ -759,7 +768,11 @@ LIBIMOBILEDEVICE_API idevice_error_t idevice_connection_enable_ssl(idevice_conne
|
|
|
97434d |
debug_info("enabling SSL mode");
|
|
|
97434d |
errno = 0;
|
|
|
97434d |
gnutls_certificate_allocate_credentials(&ssl_data_loc->certificate);
|
|
|
97434d |
+#if GNUTLS_VERSION_NUMBER >= 0x020b07
|
|
|
97434d |
+ gnutls_certificate_set_retrieve_function(ssl_data_loc->certificate, internal_cert_callback);
|
|
|
97434d |
+#else
|
|
|
97434d |
gnutls_certificate_client_set_retrieve_function(ssl_data_loc->certificate, internal_cert_callback);
|
|
|
97434d |
+#endif
|
|
|
97434d |
gnutls_init(&ssl_data_loc->session, GNUTLS_CLIENT);
|
|
|
97434d |
gnutls_priority_set_direct(ssl_data_loc->session, "NONE:+VERS-SSL3.0:+ANON-DH:+RSA:+AES-128-CBC:+AES-256-CBC:+SHA1:+MD5:+COMP-NULL", NULL);
|
|
|
97434d |
gnutls_credentials_set(ssl_data_loc->session, GNUTLS_CRD_CERTIFICATE, ssl_data_loc->certificate);
|
|
|
97434d |
--
|
|
|
97434d |
2.9.3
|
|
|
97434d |
|