std::string avjackif::async_client_hello(boost::asio::yield_context yield_context)
{
proto::client_hello client_hello;
client_hello.set_client("avim");
client_hello.set_version(0001);
unsigned char to[512];
auto dh = DH_new();
DH_generate_parameters_ex(dh,64,DH_GENERATOR_5,NULL);
DH_generate_key(dh);
// 把 g,p, pubkey 传过去
client_hello.set_random_g((const void*)to, BN_bn2bin(dh->g, to));
client_hello.set_random_p((const void*)to, BN_bn2bin(dh->p, to));
client_hello.set_random_pub_key((const void*)to, BN_bn2bin(dh->pub_key, to));
auto tobesend = av_router::encode(client_hello);
boost::asio::async_write(*m_sock, boost::asio::buffer(tobesend), yield_context);
// 解码
std::unique_ptr<proto::server_hello> server_hello(
(proto::server_hello*)async_read_protobuf_message(*m_sock, yield_context));
m_remote_addr.reset(new proto::av_address(
av_address_from_string(server_hello->server_av_address())));
auto server_pubkey = BN_bin2bn((const unsigned char *) server_hello->random_pub_key().data(),
server_hello->random_pub_key().length(), NULL);
m_shared_key.resize(DH_size(dh));
// 密钥就算出来啦！
DH_compute_key(&m_shared_key[0], server_pubkey, dh);
BN_free(server_pubkey);
std::printf("key = 0x");
for (int i=0; i<DH_size(dh); ++i)
{
std::printf("%x%x", (m_shared_key[i] >> 4) & 0xf, m_shared_key[i] & 0xf);
}
std::printf("\n");
DH_free(dh);
return server_hello->random_pub_key();
}
/*
* 这个类呢，是用来实现和 JACK 实现的那个 AVROUTER 对接的。也就是 JACK 版本的 AV NETWORK SERVICE PROVIDER
*/
void avjackif::set_pki(boost::shared_ptr<RSA> _key, boost::shared_ptr<X509> cert)
{
_rsa = _key;
_x509 = cert;
unsigned char * CN = NULL;
auto cert_name = X509_get_subject_name(cert.get());
auto cert_entry = X509_NAME_get_entry(cert_name,
X509_NAME_get_index_by_NID(cert_name, NID_commonName, 0)
);
ASN1_STRING *entryData = X509_NAME_ENTRY_get_data( cert_entry );
auto strlengh = ASN1_STRING_to_UTF8(&CN, entryData);
printf("%s\n",CN);
std::string commonname((char*)CN, strlengh);
m_local_addr.reset(new proto::avAddress(av_address_from_string(commonname)));
OPENSSL_free(CN);
}
bool avjackif::async_handshake(boost::asio::yield_context yield_context)
{
proto::client_hello client_hello;
client_hello.set_client("avim");
client_hello.set_version(0001);
unsigned char to[512];
auto dh = DH_new();
DH_generate_parameters_ex(dh,64,DH_GENERATOR_5,NULL);
DH_generate_key(dh);
// 把 g,p, pubkey 传过去
client_hello.set_random_g((const void*)to, BN_bn2bin(dh->g, to));
client_hello.set_random_p((const void*)to, BN_bn2bin(dh->p, to));
client_hello.set_random_pub_key((const void*)to, BN_bn2bin(dh->pub_key, to));
auto tobesend = av_router::encode(client_hello);
boost::asio::async_write(*m_sock, boost::asio::buffer(tobesend), yield_context);
std::uint32_t l;
boost::asio::async_read(*m_sock, boost::asio::buffer(&l, sizeof(l)), boost::asio::transfer_exactly(4), yield_context);
auto hostl = htonl(l);
std::string buf;
buf.resize(hostl + 4);
memcpy(&buf[0], &l, 4);
hostl = boost::asio::async_read(*m_sock, boost::asio::buffer(&buf[4], hostl),
boost::asio::transfer_exactly(hostl), yield_context);
// 解码
boost::scoped_ptr<proto::server_hello> server_hello((proto::server_hello*)av_router::decode(buf));
m_remote_addr.reset(new proto::avAddress(
av_address_from_string(server_hello->server_av_address())));
auto server_pubkey = BN_bin2bn((const unsigned char *) server_hello->random_pub_key().data(),
server_hello->random_pub_key().length(), NULL);
m_shared_key.resize(DH_size(dh));
// 密钥就算出来啦！
DH_compute_key(&m_shared_key[0], server_pubkey, dh);
BN_free(server_pubkey);
std::printf("key = 0x");
for (int i=0; i<DH_size(dh); ++i) {
std::printf("%x%x", (m_shared_key[i] >> 4) & 0xf, m_shared_key[i] & 0xf);
}
std::printf("\n");
DH_free(dh);
// 接着私钥加密 随机数
auto singned = RSA_private_encrypt(_rsa.get(), server_hello->random_pub_key());
proto::login login_packet;
login_packet.set_user_cert( i2d_X509(_x509.get()) );
login_packet.set_encryped_radom_key(singned);
boost::asio::async_write(*m_sock, boost::asio::buffer(av_router::encode(login_packet)),
yield_context);
// 读取回应
boost::asio::async_read(*m_sock, boost::asio::buffer(&l, sizeof(l)),
boost::asio::transfer_exactly(hostl), yield_context);
hostl = htonl(l);
buf.resize(htonl(l) + 4);
memcpy(&buf[0], &l, 4);
boost::asio::async_read(*m_sock, boost::asio::buffer(&buf[4], htonl(l)),
boost::asio::transfer_exactly(hostl), yield_context);
// 解码
boost::scoped_ptr<proto::login_result> login_result((proto::login_result*)av_router::decode(buf));
return login_result.get()->result() == proto::login_result_login_result_code_LOGIN_SUCCEED;
}
