用openssl进行ssl编程（Programming with SSL using OpenSSL）.doc

用openssl进行ssl编程（Programming with SSL using OpenSSL） The main introduction of OpenSSL SSL communication functions and procedures, mainly the initialization process, as for data reception and subsequent processing, specific problems can be analyzed. Load all the SSL algorithms Openssl_add_ssl_algorithms (); Build method for SSL Ssl_method, *meth=sslv23_method (); Initializing context scenarios Ssl_ctx *ctx=ssl_ctx_new (meth); Ret-quiet_shutdown=1; the default is ret-quiet_shutdown=0; he is equivalent to the ssl_set_shutdown function and sets the parameter to ssl_sent_shutdown|ssl_received_shutdown When set to 1, if you do not notify each other after closing, this is not suitable for TLS standards Ssl_ctx_set_quiet_shutdown (CTX, 1); Ctx-options|=ssl_op_all, ssl/tls has several recognized bug, so that the setting makes the possibility of error smaller Ssl_ctx_set_options (CTX, ssl_op_all); Set the size of the cache, the default is 1024*20=20000, which is how many session_id can be stored, and generally do not need to change. If it was 0, it would be infinite Ssl_ctx_sess_set_cache_size (CTX, 128); Ssl_ctx_load_verify_locations is used to load a trusted CA certificate, and if cafile is not null, then the file he points to contains one or more certificates in the PEM encoding format, and e.g. can be used to brief the certificate contents If capath is not null, it points to a directory containing the PEM Certificate in the CA format. Each file in the directory contains a CA certificate. The file name is the hash value of the CA name in the certificate You can build this directory with c-rehash, such as CD /some/where/certs (including a lot of trusted CA certificates), c_rehash. Returns a success, and 0 fails. Ssl_ctx_set_default_verify_paths looks for the default validation path, which is definitely not found here. The main set cert_store here Char, *cafile=null, *capath=null; Ssl_ctx_load_verify_locations (CTX, cafile, capath); When client authentication is required, the