Problem - Kevin Tafuro

Additionally, over time, SSPI-specific recipes may end up on the book’s companion
web site, particularly if submitted by readers such as you.
9.1 Creating an SSL Client
Problem
You want to establish a connection from a client to a remote server using SSL.
Solution
Establishing a connection to a remote server using SSLis not entirely different from
establishing a connection without using SSL—at least it doesn’t have to be. Establishing
an SSLconnection requires a little more setup work, consisting primarily of
building an spc_x509store_t object (see Recipe 10.5) that contains the information
necessary to verify the server. Once this is done, you need to create an SSL_CTX object
and attach it to the connection. OpenSSL will handle the rest.
Discussion
Before reading this recipe, make sure you understand the basics of
public key infrastructure (see Recipe 10.1).
Once you’ve created an spc_x509store_t object by loading it with the appropriate
certificates and CRLs (see Recipes 10.10 and 10.11 for information on obtaining
CRLs), connecting to a remote server over SSL can be as simple as making a call to
the following function, spc_connect_ssl( ). You can optionally create an SSL_CTX
object yourself using spc_create_sslctx( ) or the OpenSSLAPI. Alternatively, you
can share one that has already been created for other connections, or you can let spc_
connect_ssl( ) do it for you. In the latter case, the connection will be established and
the SSL_CTX object that was created will be returned by way of a pointer to the SSL_
CTX object pointer in the function’s argument list.
#include
#include
BIO *spc_connect_ssl(char *host, int port, spc_x509store_t *spc_store,
SSL_CTX **ctx) {
BIO *conn = 0;
int our_ctx = 0;
if (*ctx) {
CRYPTO_add(&((*ctx)->references), 1, CRYPTO_LOCK_SSL_CTX);
if (spc_store && spc_store != SSL_CTX_get_app_data(*ctx)) {
SSL_CTX_set_cert_store(*ctx, spc_create_x509store(spc_store));
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Creating an SSL Client | 455