Click here to Skip to main content
Click here to Skip to main content

SSL : Convert your Plain Sockets to SSL Sockets in an Easy Way

, 14 Mar 2008
Rate this:
Please Sign up or sign in to vote.
A simple class that allows you to convert an existing SOCKET handle to SSL under Windows

Includes:

  • SSL class soucre files (SSL.CPP, Z.H, SSL.H)
  • Testing project TEL, telnet client and server with SSL ability.

Introduction

A lot of SSL stuff already exists, but it is in either MFC, NET or some other non-native format. Here is a simple class SSL_SOCKET that allows you to convert an existing SOCKET handle to SSL under Windows. I got much information from the great CSslSocket - SSL/TLS enabled CSocket MFC article, but I need a plain Win32 one

Features

  • x86 / x64 compatible.
  • HTML help.
  • Supports Server and Client.

License

Free, for any kind or freeware, shareware, commercial, or whateverware project, as long as you give me credit for the library in your 'about box' or your application's documentation.

Creating the SSL Client

First, create and connect your socket using the normal socket functions (socket(), and connect()). Then construct an SSL_SOCKET:

// Say that X is a socket
SSL_SOCKET* SX = new SSL_SOCKET(X,0,0);

This creates an SSL_SOCKET object for an SSL_CLIENT. The last parameter to the constructor indicates that the object will create a tempora self-signed certificate to authenticate itself with the SSL server. If you want, you can pass your own PCERT_CONTEXT.

Next step is to call SSL_SOCKET::ClientInit()

// Initialize the Security Session
sX->ClientInit();

This also calls SSL_SOCKET::ClientLoop() to initialize the SSL Session. (If you don't want to initialize the SSL session at this time, call ClientInit(true) and then later call ClientLoop()). Once the loop returns 0 (success), you can then use the following functions:

  • int SSL_SOCKET:: s_send(char* b, int sz); // Sends data, returns 0 or -1 on error (like normal send()).
  • int SSL_SOCKET:: s_ssend(char* b, int sz); // Sends data, returns 0 or -1 on error (like normal send()). Does not return until all the bytes have been sent or an error occurs.
  • int SSL_SOCKET:: s_recv(char* b, int sz); // Receives data, returns 0 or -1 on error (like normal recv()).
  • int SSL_SOCKET:: s_ssend(char* b, int sz); // Receives data, returns 0 or -1 on error (like normal recv()). Does not return until all the bytes have been received or an error occurs.

If you like, you can call also send_p, ssend_p, recv_p, rrecv_p to send/receive raw bytes (without messaging encryption/decryption), if you can encrypt/decrypt the stuff yourself.

Polite shutdown of the client connection is calling SSL_SOCKET :: ClientOff() before calling closesocket().

Creating the SSL Server

First, create and accept your socket using the normal socket functions (socket(), bind(), listen() and accept()). Then construct a SSL_SOCKET:

// Say that X is a socket
SSL_SOCKET* SX = new SSL_SOCKET(X,1,0);

This creates an SSL_SOCKET object for a SSL_CLIENT. The last parameter to the constructor indicates that the object will create a tempora self-signed certificate to authenticate itself with the SSL server. If you want, you can pass your own PCERT_CONTEXT. Note that some clients will test the certificate and reject it or warn it, so you may want to pass a trusted certificate.

Next step is to call SSL_SOCKET::ServerInit()

// Initialize the Security Session
sX->ServerInit();

This also calls SSL_SOCKET::ServerLoop() to initialize the SSL Session. (If you don't want to initialize the SSL session at this time, call ServerInit(true) and then later call ServerLoop()). Once the loop returns 0 (success), you can then use the send/recv functions discussed above.

Shutdown the server by calling SSL_Socket :: ServerOff().

Other Features

These are some features I'd like to implement in the future:

  • Certificate verification (not yet completed)
  • Documentation (SSL.CHM) is pending.

Please leave your questions and comments!

History

  • March 13, 2007 - Original version posted

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

About the Author

Michael Chourdakis
Engineer
Greece Greece
I'm working in C++, PHP , Flash and DSP Programming, currently experimenting with Windows 7 technologies and professional audio applications.
 
I 've a PhD in Digital Signal Processing.
 
My home page: http://www.michaelchourdakis.com

Comments and Discussions

 
QuestionCertificate verification PinmemberMember 1000013317-Apr-14 11:13 
QuestionCryptGenKey in ssl.cpp causes access denied error Pinmembernat32_support20-Aug-13 22:15 
QuestionSize of "t" variable on ClientLoop function Pinmemberfvalerin22-Apr-13 10:42 
AnswerRe: Size of "t" variable on ClientLoop function PinmemberMichael Chourdakis22-Apr-13 11:01 
GeneralRe: Size of "t" variable on ClientLoop function Pinmemberfvalerin22-Apr-13 11:13 
QuestionWhy InitializeSecurityContext() fails? Pinmemberxjyang15-Nov-12 4:09 
QuestionThe ZIP file is broken? Pinmemberxjyang14-Nov-12 4:16 
AnswerRe: The ZIP file is broken? PinmemberMichael Chourdakis14-Nov-12 5:38 
GeneralRe: The ZIP file is broken? Pinmemberxjyang14-Nov-12 6:28 
QuestionHow often ServerInit/ClientInit can be invoked Pinmembercin197921-Mar-12 3:26 
AnswerRe: How often ServerInit/ClientInit can be invoked PinmemberMichael Chourdakis21-Mar-12 3:30 
I 'm not sure. Your best shot is to call GetLastError after a failed AqcuireCredentialsHandle to see the reason of the failure.
 
It could also be a broken certificate.
Michael Chourdakis - Music & DSP Engineer
http://www.turboirc.com - Software & Research

GeneralRe: How often ServerInit/ClientInit can be invoked Pinmembercin197921-Mar-12 4:55 
GeneralRe: How often ServerInit/ClientInit can be invoked PinmemberMichael Chourdakis21-Mar-12 7:51 
GeneralRe: How often ServerInit/ClientInit can be invoked Pinmembercin197921-Mar-12 21:57 
GeneralRe: How often ServerInit/ClientInit can be invoked PinmemberMichael Chourdakis22-Mar-12 3:13 
QuestionNice work! Michael. PinmemberstrWork@g.com13-Jan-12 8:14 
GeneralEvent driven sockets? Pinmemberrix_17-Nov-11 12:25 
GeneralRe: Event driven sockets? PinmemberMichael Chourdakis17-Nov-11 20:36 
Questioncan i using this class for https ? PinmemberMember 161414030-Oct-11 5:25 
QuestionThanks and another doubt Pinmemberdyvim22-Aug-11 3:42 
AnswerRe: Thanks and another doubt PinmemberMichael Chourdakis22-Aug-11 20:26 
GeneralRe: Thanks and another doubt Pinmemberdyvim22-Aug-11 21:35 
GeneralRe: Thanks and another doubt PinmemberMichael Chourdakis23-Aug-11 0:57 
GeneralRe: Thanks and another doubt Pinmemberdyvim23-Aug-11 2:49 
GeneralRe: Thanks and another doubt PinmemberMichael Chourdakis23-Aug-11 3:16 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Mobile
Web04 | 2.8.140709.1 | Last Updated 14 Mar 2008
Article Copyright 2008 by Michael Chourdakis
Everything else Copyright © CodeProject, 1999-2014
Terms of Service
Layout: fixed | fluid