Click here to Skip to main content
15,867,686 members
Articles / Desktop Programming / Win32
Article

SSL : Convert your Plain Sockets to SSL Sockets in an Easy Way

Rate me:
Please Sign up or sign in to vote.
4.83/5 (21 votes)
14 Mar 2008CPOL3 min read 245.8K   7K   55   82
A simple class that allows you to convert an existing SOCKET handle to SSL under Windows

Includes:

  • SSL class soucre files (SSL.CPP, Z.H, SSL.H)
  • Testing project TEL, telnet client and server with SSL ability.

Introduction

A lot of SSL stuff already exists, but it is in either MFC, NET or some other non-native format. Here is a simple class SSL_SOCKET that allows you to convert an existing SOCKET handle to SSL under Windows. I got much information from the great CSslSocket - SSL/TLS enabled CSocket MFC article, but I need a plain Win32 one

Features

  • x86 / x64 compatible.
  • HTML help.
  • Supports Server and Client.

License

Free, for any kind or freeware, shareware, commercial, or whateverware project, as long as you give me credit for the library in your 'about box' or your application's documentation.

Creating the SSL Client

First, create and connect your socket using the normal socket functions (socket(), and connect()). Then construct an SSL_SOCKET:

C++
// Say that X is a socket
SSL_SOCKET* SX = new SSL_SOCKET(X,0,0);

This creates an SSL_SOCKET object for an SSL_CLIENT. The last parameter to the constructor indicates that the object will create a tempora self-signed certificate to authenticate itself with the SSL server. If you want, you can pass your own PCERT_CONTEXT.

Next step is to call SSL_SOCKET::ClientInit()

C++
// Initialize the Security Session
sX->ClientInit();

This also calls SSL_SOCKET::ClientLoop() to initialize the SSL Session. (If you don't want to initialize the SSL session at this time, call ClientInit(true) and then later call ClientLoop()). Once the loop returns 0 (success), you can then use the following functions:

  • int SSL_SOCKET:: s_send(char* b, int sz); // Sends data, returns 0 or -1 on error (like normal send()).
  • int SSL_SOCKET:: s_ssend(char* b, int sz); // Sends data, returns 0 or -1 on error (like normal send()). Does not return until all the bytes have been sent or an error occurs.
  • int SSL_SOCKET:: s_recv(char* b, int sz); // Receives data, returns 0 or -1 on error (like normal recv()).
  • int SSL_SOCKET:: s_ssend(char* b, int sz); // Receives data, returns 0 or -1 on error (like normal recv()). Does not return until all the bytes have been received or an error occurs.

If you like, you can call also send_p, ssend_p, recv_p, rrecv_p to send/receive raw bytes (without messaging encryption/decryption), if you can encrypt/decrypt the stuff yourself.

Polite shutdown of the client connection is calling SSL_SOCKET :: ClientOff() before calling closesocket().

Creating the SSL Server

First, create and accept your socket using the normal socket functions (socket(), bind(), listen() and accept()). Then construct a SSL_SOCKET:

C++
// Say that X is a socket
SSL_SOCKET* SX = new SSL_SOCKET(X,1,0);

This creates an SSL_SOCKET object for a SSL_CLIENT. The last parameter to the constructor indicates that the object will create a tempora self-signed certificate to authenticate itself with the SSL server. If you want, you can pass your own PCERT_CONTEXT. Note that some clients will test the certificate and reject it or warn it, so you may want to pass a trusted certificate.

Next step is to call SSL_SOCKET::ServerInit()

C++
// Initialize the Security Session
sX->ServerInit();

This also calls SSL_SOCKET::ServerLoop() to initialize the SSL Session. (If you don't want to initialize the SSL session at this time, call ServerInit(true) and then later call ServerLoop()). Once the loop returns 0 (success), you can then use the send/recv functions discussed above.

Shutdown the server by calling SSL_Socket :: ServerOff().

Other Features

These are some features I'd like to implement in the future:

  • Certificate verification (not yet completed)
  • Documentation (SSL.CHM) is pending.

Please leave your questions and comments!

History

  • March 13, 2007 - Original version posted

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


Written By
Software Developer
Greece Greece
I'm working in C++, PHP , Java, Windows, iOS, Android and Web (HTML/Javascript/CSS).

I 've a PhD in Digital Signal Processing and Artificial Intelligence and I specialize in Pro Audio and AI applications.

My home page: https://www.turbo-play.com

Comments and Discussions

 
QuestionCan anyone provide latest working link to download the updated version ssl.rar Pin
Member 1526517628-Jan-22 0:51
Member 1526517628-Jan-22 0:51 
QuestionHow to verify client and server certificate in this? Pin
Member 1526517619-Jan-22 1:42
Member 1526517619-Jan-22 1:42 
QuestionError Pin
Member 1422642611-Apr-19 10:21
Member 1422642611-Apr-19 10:21 
PraiseThanks, this really helps Pin
snoopy_czk17-Mar-19 17:46
snoopy_czk17-Mar-19 17:46 
QuestionAccess violation at CertStrToName Pin
Member 1312420318-Dec-18 5:20
Member 1312420318-Dec-18 5:20 
QuestionCan code be used to access https: site Pin
cdecg16-May-17 9:48
cdecg16-May-17 9:48 
AnswerRe: Can code be used to access https: site Pin
Michael Chourdakis16-May-17 10:09
mvaMichael Chourdakis16-May-17 10:09 
GeneralRe: Can code be used to access https: site Pin
cdecg23-May-17 6:06
cdecg23-May-17 6:06 
QuestionYahoo mail problem Pin
MuffyDog16-Mar-17 9:58
MuffyDog16-Mar-17 9:58 
QuestionExample Pin
Member 123559027-May-16 9:38
Member 123559027-May-16 9:38 
QuestionReverse shell using SSL Pin
Al3487625-Nov-14 8:53
Al3487625-Nov-14 8:53 
QuestionCertificate verification Pin
Member 1000013317-Apr-14 11:13
Member 1000013317-Apr-14 11:13 
QuestionCryptGenKey in ssl.cpp causes access denied error Pin
nat32_support20-Aug-13 22:15
nat32_support20-Aug-13 22:15 
QuestionSize of "t" variable on ClientLoop function Pin
fvalerin22-Apr-13 10:42
fvalerin22-Apr-13 10:42 
AnswerRe: Size of "t" variable on ClientLoop function Pin
Michael Chourdakis22-Apr-13 11:01
mvaMichael Chourdakis22-Apr-13 11:01 
GeneralRe: Size of "t" variable on ClientLoop function Pin
fvalerin22-Apr-13 11:13
fvalerin22-Apr-13 11:13 
QuestionWhy InitializeSecurityContext() fails? Pin
xjyang15-Nov-12 4:09
xjyang15-Nov-12 4:09 
QuestionThe ZIP file is broken? Pin
xjyang14-Nov-12 4:16
xjyang14-Nov-12 4:16 
AnswerRe: The ZIP file is broken? Pin
Michael Chourdakis14-Nov-12 5:38
mvaMichael Chourdakis14-Nov-12 5:38 
GeneralRe: The ZIP file is broken? Pin
xjyang14-Nov-12 6:28
xjyang14-Nov-12 6:28 
QuestionHow often ServerInit/ClientInit can be invoked Pin
cin197921-Mar-12 3:26
cin197921-Mar-12 3:26 
AnswerRe: How often ServerInit/ClientInit can be invoked Pin
Michael Chourdakis21-Mar-12 3:30
mvaMichael Chourdakis21-Mar-12 3:30 
GeneralRe: How often ServerInit/ClientInit can be invoked Pin
cin197921-Mar-12 4:55
cin197921-Mar-12 4:55 
GeneralRe: How often ServerInit/ClientInit can be invoked Pin
Michael Chourdakis21-Mar-12 7:51
mvaMichael Chourdakis21-Mar-12 7:51 
GeneralRe: How often ServerInit/ClientInit can be invoked Pin
cin197921-Mar-12 21:57
cin197921-Mar-12 21:57 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.