wolfSSL_read（）返回0

Question

我正在使用Microsoft Visual Studio 2010和wolfSSL 3.7.0。

我創建服務器方面與這些功能：

WOLFSSL_CTX *sslContext = wolfSSL_CTX_new(wolfTLSv1_2_server_method()); 
if(!sslContext) 
{ 
    closesocket(socketListen); 
    return FALSE; 
} 

wolfSSL_CTX_use_certificate_buffer(sslContext, (unsigned char*)szServerCert, strlen(szServerCert), SSL_FILETYPE_PEM); 

wolfSSL_CTX_use_PrivateKey_buffer(sslContext, (unsigned char*)szServerKey, strlen(szServerKey), SSL_FILETYPE_PEM); 

這是確定。於是，我接受了連接，創建WOLFSSL *背景和它與我的socket描述符關聯：

WOLFSSL *ssl = wolfSSL_new(sslContext); 

    wolfSSL_set_fd(ssl, Socket); 

    CHAR Buffer[1024]; 

    int retVal = wolfSSL_read(ssl, Buffer, 1024); 

但是當我嘗試通過瀏覽器連接到127.0.0.1:443，wolfSSL_read()返回0 wolfSSL_get_error()回報-397（SOCKET_PEER_CLOSED_E ）。瀏覽器顯示該頁面仍在加載。是什麼原因？

Answer 1

wolfSSL這裏提供了一個很好的參考例子：https://github.com/wolfSSL/wolfssl-examples/blob/master/tls/server-tls.c

請在下面找到引用代碼：

/* server-tls.c 
* 
* Copyright (C) 2006-2015 wolfSSL Inc. 
* 
* This file is part of wolfSSL. (formerly known as CyaSSL) 
* 
* wolfSSL is free software; you can redistribute it and/or modify 
* it under the terms of the GNU General Public License as published by 
* the Free Software Foundation; either version 2 of the License, or 
* (at your option) any later version. 
* 
* wolfSSL is distributed in the hope that it will be useful, 
* but WITHOUT ANY WARRANTY; without even the implied warranty of 
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 
* GNU General Public License for more details. 
* 
* You should have received a copy of the GNU General Public License 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA 
*============================================================================= 
* 
* This is a super basic example of what a TCP Server secured with TLS 1.2 
* might look like. This server can also resume the session if a client 
* inadvertantly disconnects. 
*/ 

#include <stdio.h> 
#include <unistd.h> 
#include <sys/types.h> 
#include <sys/socket.h> 
#include <string.h> 
#include <netinet/in.h> 
#include <stdlib.h> 
#include <errno.h> 

/* include the wolfSSL library for our TLS 1.2 security */ 
#include <wolfssl/ssl.h> 

#define DEFAULT_PORT 11111 

int AcceptAndRead(WOLFSSL_CTX* ctx, socklen_t sockfd, struct sockaddr_in 
    clientAddr); 

int AcceptAndRead(WOLFSSL_CTX* ctx, socklen_t sockfd, struct sockaddr_in 
    clientAddr) 
{ 
     /* Create our reply message */ 
    const char reply[] = "I hear ya fa shizzle!\n"; 
    socklen_t   size = sizeof(clientAddr); 

    /* Wait until a client connects */ 
    socklen_t connd = accept(sockfd, (struct sockaddr *)&clientAddr, &size); 

    /* If fails to connect,int loop back up and wait for a new connection */ 
    if (connd == -1) { 
     printf("failed to accept the connection..\n"); 
    } 
    /* If it connects, read in and reply to the client */ 
    else { 
     printf("Client connected successfully\n"); 
     WOLFSSL*  ssl; 

     if ((ssl = wolfSSL_new(ctx)) == NULL) { 
      fprintf(stderr, "wolfSSL_new error.\n"); 
      exit(EXIT_FAILURE); 
     } 

     /* direct our ssl to our clients connection */ 
     wolfSSL_set_fd(ssl, connd); 

     printf("Using Non-Blocking I/O: %d\n", wolfSSL_get_using_nonblock(
      ssl)); 

     for (; ;) { 
      char buff[256]; 
      int ret = 0; 

      /* Clear the buffer memory for anything possibly left over */ 
      memset(&buff, 0, sizeof(buff)); 

      /* Read the client data into our buff array */ 
      if ((ret = wolfSSL_read(ssl, buff, sizeof(buff)-1)) > 0) { 
       /* Print any data the client sends to the console */ 
       printf("Client: %s\n", buff); 

       /* Reply back to the client */ 
       if ((ret = wolfSSL_write(ssl, reply, sizeof(reply)-1)) 
        < 0) 
       { 
        printf("wolfSSL_write error = %d\n", wolfSSL_get_error(ssl, ret)); 
       } 
      } 
      /* if the client disconnects break the loop */ 
      else { 
       if (ret < 0) 
        printf("wolfSSL_read error = %d\n", wolfSSL_get_error(ssl 
         ,ret)); 
       else if (ret == 0) 
        printf("The client has closed the connection.\n"); 

       break; 
      } 
     } 
     wolfSSL_free(ssl);   /* Free the WOLFSSL object */ 
    } 
    close(connd);    /* close the connected socket */ 

    return 0; 
} 


int main() 
{ 
    /* Create a ctx pointer for our ssl */ 
    WOLFSSL_CTX* ctx; 

    /* 
    * Creates a socket that uses an internet IP address, 
    * Sets the type to be Stream based (TCP), 
    * 0 means choose the default protocol. 
    */ 
    socklen_t sockfd = socket(AF_INET, SOCK_STREAM, 0); 
    int loopExit = 0; /* 0 = False, 1 = True */ 
    int ret  = 0; /* Return value */ 
    /* Server and client socket address structures */ 
    struct sockaddr_in serverAddr = {0}, clientAddr = {0}; 

    /* Initialize wolfSSL */ 
    wolfSSL_Init(); 

    /* If positive value, the socket is valid */ 
    if (sockfd == -1) { 
     printf("ERROR: failed to create the socket\n"); 
     return EXIT_FAILURE;  /* Kill the server with exit status 1 */ 
    } 

    /* create and initialize WOLFSSL_CTX structure */ 
    if ((ctx = wolfSSL_CTX_new(wolfTLSv1_2_server_method())) == NULL) { 
     fprintf(stderr, "wolfSSL_CTX_new error.\n"); 
     return EXIT_FAILURE; 
    } 

    /* Load server certificate into WOLFSSL_CTX */ 
    if (wolfSSL_CTX_use_certificate_file(ctx, "../certs/server-cert.pem", 
       SSL_FILETYPE_PEM) != SSL_SUCCESS) { 
     fprintf(stderr, "Error loading certs/server-cert.pem, please check" 
       "the file.\n"); 
     return EXIT_FAILURE; 
    } 

    /* Load server key into WOLFSSL_CTX */ 
    if (wolfSSL_CTX_use_PrivateKey_file(ctx, "../certs/server-key.pem", 
       SSL_FILETYPE_PEM) != SSL_SUCCESS) { 
     fprintf(stderr, "Error loading certs/server-key.pem, please check" 
       "the file.\n"); 
     return EXIT_FAILURE; 
    } 

    /* load DH params */ 
    ret = wolfSSL_CTX_SetTmpDH_file(ctx, "../certs/dh2048.pem" , SSL_FILETYPE_PEM); 
    if (ret != SSL_SUCCESS) { 
     fprintf(stderr, "Error setting DH parameters.\n"); 
     return EXIT_FAILURE; 
    } 
    /* Initialize the server address struct to zero */ 
    memset((char *)&serverAddr, 0, sizeof(serverAddr)); 

    /* Fill the server's address family */ 
    serverAddr.sin_family  = AF_INET; 
    serverAddr.sin_addr.s_addr = INADDR_ANY; 
    serverAddr.sin_port  = htons(DEFAULT_PORT); 

    /* Attach the server socket to our port */ 
    if (bind(sockfd, (struct sockaddr *)&serverAddr, sizeof(serverAddr)) 
     < 0) { 
     printf("ERROR: failed to bind\n"); 
     return EXIT_FAILURE; 
    } 

    printf("Waiting for a connection...\n"); 
    /* Continuously accept connects while not currently in an active connection 
     or told to quit */ 
    while (loopExit == 0) { 
     /* listen for a new connection, allow 5 pending connections */ 
     ret = listen(sockfd, 5); 
     if (ret == 0) { 

      /* Accept client connections and read from them */ 
      loopExit = AcceptAndRead(ctx, sockfd, clientAddr); 
     } 
    } 

    wolfSSL_CTX_free(ctx); /* Free WOLFSSL_CTX */ 
    wolfSSL_Cleanup();  /* Free wolfSSL */ 
    return EXIT_SUCCESS; 
}