gullradriel/nilorea-library
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Page: ex_network_alpn_8c example
Pages
Examples Files Home Module AABB3D Module ACCEPT_POOL Module ALLEGRO4 Module ALLEGRO5 Module ANIM_LIB Module ASTAR Module ATLAS_LIB Module AVRO Module CLOCK_SYNC Module COMMONS Module CONFIGFILE Module CYPHER_BASE64 Module CYPHER_VIGENERE Module DEAD_RECKONING Module ENUMS Module EXCEPTIONS Module GAME_ENV Module GIT Module GUI Module HASH_TABLE Module ISOMETRIC_ENGINE Module LIST Module LOG Module LOGNODUP Module LZ4 Module NETWORKING Module NETWORK_MSG Module N_COOKIES Module N_DIFF Module N_DIGEST Module N_DISK_CACHE Module N_DNS Module N_ECC Module N_ENTROPY Module N_FILES Module N_FLUIDS Module N_GUI_COLOR Module N_GUI_COLORWHEEL Module N_GUI_CURVE Module N_GUI_GRID Module N_GUI_POPUP Module N_HEX Module N_HTTP3 Module N_HTTP_COOKIE Module N_HTTP_FORM Module N_HTTP_MIME Module N_HTTP_REQ Module N_HTTP_RESP Module N_HTTP_ROUTER Module N_HTTP_SERVER Module N_ICC Module N_JSON Module N_KAFKA Module N_LINALG Module N_MODULE Module N_OPENSSL_COMPAT Module N_PRETTY Module N_PTH Module N_QUERY Module N_RANDOM Module N_SHA256 Module N_STR Module N_TIFF Module N_TIME Module N_USER Module N_X509 Module N_ZIP Module PARTICLES Module PCRE Module PHYSICS Module SIGNALS Module STACK Module THREADS Module TRAJECTORY Module TREE Module ZLIB Modules Pages Struct A4_BMP Struct A4_TIMER Struct AABB3D Struct ANIM_DATA Struct ANIM_FRAME Struct ANIM_GFX Struct ANIM_LIB Struct ASTAR_BOX Struct ASTAR_CELL Struct ASTAR_GRID Struct ASTAR_HEAP Struct ASTAR_HEAP_NODE Struct ASTAR_NODE Struct ASTAR_PATH Struct AVRO_FIELD Struct AVRO_READER Struct AVRO_SCHEMA Struct BITMAP Struct CALLBACK_DATA Struct CA_CTX Struct CLIENT_JOB Struct CLIENT_STATE Struct CONFIG_FILE Struct CONFIG_FILE_SECTION Struct CYPHER_PARAM Struct DATA Struct DEMO_PANEL Struct DICTIONARY_DEFINITION Struct DICTIONARY_ENTRY Struct DIFF_OUT Struct DIFF_TEXT Struct DRAW_STATE Struct DR_ENTITY Struct DR_STATE Struct DR_VEC3 Struct ExceptionContextList Struct FONT Struct GAME_ENV Struct H2BUF Struct H2_DYN_ENTRY Struct H2_STREAM Struct HASH_NODE Struct HASH_TABLE Struct ISO_DRAW_ENTRY Struct ISO_MAP Struct ISO_PROJECTION Struct ISO_TILE_SEGMENT Struct ISO_TILE_SEGMENTS Struct ISO_VISIBLE_EDGES Struct JS_STATE Struct LEX_ITEM Struct LIST Struct LIST_NODE Struct LOG_LEVELS Struct LexMenu Struct MEMBER Struct MIDI Struct NESTED Struct NETWORK Struct NETWORK_HTTP_INFO Struct NETWORK_POOL Struct NETWORK_SSL_THREAD_PARAMS Struct NETW_ACCEPT_POOL Struct NETW_ACCEPT_POOL_STATS Struct NETW_MSG Struct NETW_SNI_ARG Struct NODE_DATA Struct N_ATLAS Struct N_ATLAS_PAGE Struct N_CLOCK_SYNC Struct N_COOKIE Struct N_COOKIE_JAR Struct N_DIFF_LINE Struct N_DIFF_RESULT Struct N_DISK_CACHE Struct N_ENTROPY_BIT Struct N_ENTROPY_POS Struct N_FILE_INFO Struct N_FLUID Struct N_FLUID_THREAD_PARAMS Struct N_FORM_FIELD Struct N_GIT_COMMIT_INFO Struct N_GIT_REMOTE_AUTH Struct N_GIT_REPO Struct N_GIT_STATUS_ENTRY Struct N_GUI_BUTTON_DATA Struct N_GUI_CHECKBOX_DATA Struct N_GUI_COLOR_PICKER Struct N_GUI_COMBOBOX_DATA Struct N_GUI_CTX Struct N_GUI_CUSTOM_DATA Struct N_GUI_DATAGRID_COL Struct N_GUI_DATAGRID_DATA Struct N_GUI_DROPMENU_DATA Struct N_GUI_DROPMENU_ENTRY Struct N_GUI_GRID_CALLBACKS Struct N_GUI_HEXVIEW_DATA Struct N_GUI_IMAGE_DATA Struct N_GUI_KVTABLE Struct N_GUI_KV_CONTENT Struct N_GUI_KV_ROW Struct N_GUI_LABEL_DATA Struct N_GUI_LISTBOX_DATA Struct N_GUI_LISTITEM Struct N_GUI_MARKDOWNVIEW_DATA Struct N_GUI_MD_FONTS Struct N_GUI_MD_STYLE Struct N_GUI_MEAS_ENTRY Struct N_GUI_MOUSE_EVENT Struct N_GUI_PENDING_GEOM Struct N_GUI_PENDING_WIDGET Struct N_GUI_POPUP Struct N_GUI_PROGRESSBAR_DATA Struct N_GUI_RADIOLIST_DATA Struct N_GUI_SB_TRACK Struct N_GUI_SCROLLBAR_DATA Struct N_GUI_SECTION Struct N_GUI_SECTIONLIST Struct N_GUI_SLIDER_DATA Struct N_GUI_SPLITPANE_DATA Struct N_GUI_STYLE Struct N_GUI_SUGGEST_SINK Struct N_GUI_SYNTAXVIEW_DATA Struct N_GUI_TAB_PANEL Struct N_GUI_TB_BUTTONS Struct N_GUI_TEXTAREA_DATA Struct N_GUI_TEXT_DIMS Struct N_GUI_THEME Struct N_GUI_TREE Struct N_GUI_TREE_NODE Struct N_GUI_TREE_STATE Struct N_GUI_WIDGET Struct N_GUI_WINDOW Struct N_H2_FRAME Struct N_H2_HEADER Struct N_H2_HPACK Struct N_H2_REQUEST Struct N_H2_SERVER Struct N_H2_SETTING Struct N_HTML_ATTR_ Struct N_HTML_FORM Struct N_HTML_TAG_ Struct N_HTTP3_RESPONSE Struct N_HTTP_FIELD Struct N_HTTP_FORM Struct N_HTTP_FORM_MULTIPART Struct N_HTTP_FORM_PART Struct N_HTTP_MULTIPART_PART Struct N_HTTP_REQUEST Struct N_HTTP_RESP Struct N_HTTP_RESPONSE Struct N_HTTP_SERVER Struct N_HTTP_SERVER_CONFIG Struct N_HTTP_SERVER_REQUEST Struct N_HTTP_SERVER_STATS Struct N_HTTP_SET_COOKIE Struct N_HTTP_STREAM Struct N_ISO_CAMERA Struct N_ISO_OBJECT Struct N_KAFKA Struct N_KAFKA_EVENT Struct N_MOCK_SERVER Struct N_MODULE Struct N_PARALLEL_SLICE Struct N_PARALLEL_TEAM Struct N_PARALLEL_WORKER Struct N_PCRE Struct N_PROXY_CFG Struct N_PTH Struct N_PTH_TENSOR Struct N_QUERY Struct N_ROUTE Struct N_ROUTER Struct N_ROUTE_MATCH Struct N_SHA256 Struct N_SOCKET Struct N_SPAWN_PIPE Struct N_SSE_CONN Struct N_SSE_EVENT Struct N_STR Struct N_TIFF Struct N_TIFF_ENTRY Struct N_TIME Struct N_URL Struct N_URL_PARAM Struct N_USER Struct N_USERLIST Struct N_WS_CONN Struct N_WS_FRAME Struct N_WS_MESSAGE Struct N_ZIP_MEMBER Struct OCTREE Struct OCTREE_NODE Struct PARSER Struct PARTICLE Struct PARTICLE_EMITTER Struct PARTICLE_SYSTEM Struct PEER Struct PHYSICS Struct PK_OBJ Struct PK_VM Struct POINT2D Struct POINT3D Struct PRETTY_OUT Struct QNODE Struct QUADTREE Struct QUADTREE_NODE Struct REC Struct RGB Struct SAMPLE Struct SEEN Struct SHARER Struct SRV Struct SRV_ARG Struct STACK Struct STACK_ITEM Struct SYNTAX_RUN Struct THREAD_POOL Struct THREAD_POOL_NODE Struct THREAD_WAITING_PROC Struct TRAJECTORY Struct TRAJECTORY_POINT Struct TREE Struct TREE_NODE Struct TS_LOG Struct WAYPOINT3D Struct WORKER_ARG Struct ZIP_SINK Struct _N_DC_ENTRY Struct _N_DC_GROUP_ENTRY Struct _N_GUI_COLORWHEEL Struct _N_GUI_COLORWHEEL_BLOCK Struct _N_GUI_COLORWHEEL_MOUSE Struct _N_GUI_CURVE Struct _N_GUI_CURVE_BLOCK Struct _N_GUI_CURVE_MOUSE Struct _N_GUI_GRID Struct _N_GUI_POPUP_ENTRY Struct _N_GUI_POPUP_LEVEL Struct _N_GUI_SB_SKIN Struct _N_GUI_TA_STEP Struct _N_GUI_THUMB Struct _N_GUI_WRAP_ACC Struct _compiled Struct _conn Struct _ip_slot Struct _mp_param Struct _n_civil Struct _seg Struct client Struct collector Struct date_vector Struct md_atom Struct md_cells Struct md_hit Struct md_line_ctx Struct mline Struct n_http_req_header Struct n_http_req_limits Struct n_http_request Struct n_markdown_block Struct n_markdown_doc Struct n_markdown_inline Struct n_markdown_span Struct n_reactor_stats Struct n_url_safe Struct n_url_safe_head Struct n_wrap_item Struct producer_state Struct rects Struct reply Struct runner Struct sink Struct tbuf Struct wrap_hit Struct wrap_span Structures Union COORD_VALUE Union HASH_DATA Union NODE_DATA_TYPES Union STACK_DATA dir_310dcdd4703e877a6b99d5dc3fc54d27 dir_68267d1309a1af8e8297ef4c3efbcdba dir_d28a4824dc47e487b107a5db32ef43c4 dir_d44c64559bbebec7f509842c48db8b23 ex__accept__pool__client_8c ex__accept__pool__server_8c ex__allegro__4_8c ex__atlas_8c ex__avro_8c ex__base64_8c ex__bind__exclusive_8c ex__clipboard_8c ex__clock__sync_8c ex__common_8c ex__configfile_8c ex__cookies_8c ex__crypto_8c ex__diff_8c ex__digest_8c ex__disk__cache_8c ex__dns_8c ex__ecc_8c ex__entropy_8c ex__exceptions_8c ex__file_8c ex__file__copy_8c ex__fluid_8c ex__fluid__config_8c ex__fluid__config_8h ex__git_8c ex__gui_8c ex__gui__bench_8c ex__gui__button__keys_8c ex__gui__checkbox__label_8c ex__gui__checkbox__release_8c ex__gui__color__picker_8c ex__gui__colorwheel_8c ex__gui__combobox__items_8c ex__gui__combobox__wheel_8c ex__gui__cursor_8c ex__gui__curve_8c ex__gui__custom_8c ex__gui__custom__mouse_8c ex__gui__datagrid_8c ex__gui__datagrid__keys_8c ex__gui__datagrid__sort_8c ex__gui__detach_8c ex__gui__dictionary_8c ex__gui__display__fallback_8c ex__gui__double__click_8c ex__gui__dropmenu_8c ex__gui__frameless__drag_8c ex__gui__global__scroll_8c ex__gui__glyph_8c ex__gui__grid_8c ex__gui__hexview_8c ex__gui__hover_8c ex__gui__isometric_8c ex__gui__kvtable_8c ex__gui__label__fits_8c ex__gui__label__lines_8c ex__gui__layout__persist_8c ex__gui__listbox_8c ex__gui__md_8c ex__gui__multiwin_8c ex__gui__network_8c ex__gui__particles_8c ex__gui__placeholder_8c ex__gui__popup_8c ex__gui__progressbar_8c ex__gui__reentrant_8c ex__gui__round_8c ex__gui__sectionlist_8c ex__gui__slider__default_8c ex__gui__slider__handle_8c ex__gui__slider__step_8c ex__gui__splitpane_8c ex__gui__suggest_8c ex__gui__syntaxview_8c ex__gui__text__shorten_8c ex__gui__textarea__selection_8c ex__gui__tooltip_8c ex__gui__tree__lazy_8c ex__gui__tree__order_8c ex__gui__tree__state_8c ex__gui__window__rect_8c ex__gui__zorder_8c ex__hash_8c ex__hex_8c ex__html_8c ex__http2_8c ex__http2__server_8c ex__http3_8c ex__http__cookie_8c ex__http__form_8c ex__http__mime_8c ex__http__req_8c ex__http__response_8c ex__http__router_8c ex__http__server_8c ex__icc_8c ex__iso__astar_8c ex__json_8c ex__kafka_8c ex__linalg_8c ex__list_8c ex__log_8c ex__markdown_8c ex__module_8c ex__monolith_8c ex__network_8c ex__network_8h ex__network__accept_8c ex__network__alpn_8c ex__network__connect__abort_8c ex__network__mock_8c ex__network__proxy_8c ex__network__reactor_8c ex__network__sni_8c ex__network__sse_8c ex__network__ssl_8c ex__network__ssl__hardened_8c ex__network__ssl__hostname_8c ex__network__ssl__nonblock_8c ex__network__tls__defaults_8c ex__network__ws_8c ex__network__ws__limits_8c ex__nstr_8c ex__parallel__for_8c ex__parallel__team_8c ex__pcre_8c ex__pretty_8c ex__pth_8c ex__query_8c ex__random_8c ex__sha256_8c ex__signals_8c ex__spawn_8c ex__ssrf_8c ex__stack_8c ex__thread__pool__discard_8c ex__thread__pool__wait_8c ex__threads_8c ex__tiff_8c ex__time__formats_8c ex__trajectory_8c ex__trees_8c ex__url_8c ex__url__safe_8c ex__wrap_8c ex__x509_8c ex__zip_8c ex__zlib_8c ex_accept_pool_client_8c example ex_accept_pool_server_8c example ex_allegro_4_8c example ex_atlas_8c example ex_base64_8c example ex_clock_sync_8c example ex_common_8c example ex_configfile_8c example ex_cookies_8c example ex_crypto_8c example ex_diff_8c example ex_digest_8c example ex_disk_cache_8c example ex_dns_8c example ex_ecc_8c example ex_entropy_8c example ex_exceptions_8c example ex_file_8c example ex_file_copy_8c example ex_fluid_8c example ex_fluid_config_8c example ex_fluid_config_8h example ex_git_8c example ex_gui_8c example ex_gui_bench_8c example ex_gui_button_keys_8c example ex_gui_checkbox_label_8c example ex_gui_checkbox_release_8c example ex_gui_color_picker_8c example ex_gui_colorwheel_8c example ex_gui_combobox_items_8c example ex_gui_combobox_wheel_8c example ex_gui_cursor_8c example ex_gui_curve_8c example ex_gui_custom_8c example ex_gui_custom_mouse_8c example ex_gui_datagrid_8c example ex_gui_datagrid_keys_8c example ex_gui_datagrid_sort_8c example ex_gui_detach_8c example ex_gui_dictionary_8c example ex_gui_display_fallback_8c example ex_gui_double_click_8c example ex_gui_dropmenu_8c example ex_gui_frameless_drag_8c example ex_gui_global_scroll_8c example ex_gui_glyph_8c example ex_gui_grid_8c example ex_gui_hexview_8c example ex_gui_hover_8c example ex_gui_isometric_8c example ex_gui_kvtable_8c example ex_gui_label_fits_8c example ex_gui_label_lines_8c example ex_gui_layout_persist_8c example ex_gui_listbox_8c example ex_gui_md_8c example ex_gui_multiwin_8c example ex_gui_network_8c example ex_gui_particles_8c example ex_gui_placeholder_8c example ex_gui_popup_8c example ex_gui_progressbar_8c example ex_gui_reentrant_8c example ex_gui_round_8c example ex_gui_sectionlist_8c example ex_gui_slider_default_8c example ex_gui_slider_handle_8c example ex_gui_slider_step_8c example ex_gui_splitpane_8c example ex_gui_suggest_8c example ex_gui_syntaxview_8c example ex_gui_text_shorten_8c example ex_gui_textarea_selection_8c example ex_gui_tooltip_8c example ex_gui_tree_lazy_8c example ex_gui_tree_order_8c example ex_gui_tree_state_8c example ex_gui_window_rect_8c example ex_gui_zorder_8c example ex_hash_8c example ex_hex_8c example ex_html_8c example ex_http2_8c example ex_http2_server_8c example ex_http_cookie_8c example ex_http_form_8c example ex_http_mime_8c example ex_http_req_8c example ex_http_response_8c example ex_http_router_8c example ex_http_server_8c example ex_icc_8c example ex_iso_astar_8c example ex_json_8c example ex_kafka_8c example ex_linalg_8c example ex_list_8c example ex_log_8c example ex_markdown_8c example ex_module_8c example ex_monolith_8c example ex_network_8c example ex_network_8h example ex_network_accept_8c example ex_network_alpn_8c example ex_network_connect_abort_8c example ex_network_mock_8c example ex_network_proxy_8c example ex_network_reactor_8c example ex_network_sni_8c example ex_network_sse_8c example ex_network_ssl_8c example ex_network_ssl_hardened_8c example ex_network_ssl_hostname_8c example ex_network_ssl_nonblock_8c example ex_network_tls_defaults_8c example ex_network_ws_8c example ex_network_ws_limits_8c example ex_nstr_8c example ex_parallel_for_8c example ex_parallel_team_8c example ex_pcre_8c example ex_pretty_8c example ex_pth_8c example ex_query_8c example ex_random_8c example ex_sha256_8c example ex_signals_8c example ex_spawn_8c example ex_ssrf_8c example ex_stack_8c example ex_threads_8c example ex_tiff_8c example ex_time_formats_8c example ex_trajectory_8c example ex_trees_8c example ex_url_8c example ex_url_safe_8c example ex_wrap_8c example ex_x509_8c example ex_zip_8c example ex_zlib_8c example mainpage_8dox n__3d_8c n__3d_8h n__aabb_8c n__aabb_8h n__allegro5_8c n__allegro5_8h n__allegro__4_8c n__allegro__4_8h n__anim_8c n__anim_8h n__astar_8c n__astar_8h n__atlas_8c n__atlas_8h n__avro_8c n__avro_8h n__base64_8c n__base64_8h n__clipboard_8c n__clipboard_8h n__clock__sync_8c n__clock__sync_8h n__common_8c n__common_8h n__config__file_8c n__config__file_8h n__cookies_8c n__cookies_8h n__crypto_8c n__crypto_8h n__dead__reckoning_8c n__dead__reckoning_8h n__diff_8c n__diff_8h n__digest_8c n__digest_8h n__disk__cache_8c n__disk__cache_8h n__dns_8c n__dns_8h n__ecc_8c n__ecc_8h n__entropy_8c n__entropy_8h n__enum_8h n__exceptions_8c n__exceptions_8h n__files_8c n__files_8h n__fluids_8c n__fluids_8h n__games_8c n__games_8h n__git_8c n__git_8h n__gui_8c n__gui_8h n__gui__color_8c n__gui__color_8h n__gui__colorwheel_8c n__gui__colorwheel_8h n__gui__curve_8c n__gui__curve_8h n__gui__grid_8c n__gui__grid_8h n__gui__md_8c n__gui__md_8h n__gui__popup_8c n__gui__popup_8h n__hash_8c n__hash_8h n__hex_8c n__hex_8h n__html_8c n__html_8h n__http2_8c n__http2_8h n__http2__server_8c n__http2__server_8h n__http3_8c n__http3_8h n__http__cookie_8c n__http__cookie_8h n__http__form_8c n__http__form_8h n__http__mime_8c n__http__mime_8h n__http__req_8c n__http__req_8h n__http__response_8c n__http__response_8h n__http__router_8c n__http__router_8h n__http__server_8c n__http__server_8h n__icc_8c n__icc_8h n__iso__engine_8c n__iso__engine_8h n__json_8c n__json_8h n__kafka_8c n__kafka_8h n__linalg_8c n__linalg_8h n__list_8c n__list_8h n__log_8c n__log_8h n__lz4_8c n__lz4_8h n__markdown_8c n__markdown_8h n__module_8c n__module_8h n__network_8c n__network_8h n__network__accept__pool_8c n__network__accept__pool_8h n__network__msg_8c n__network__msg_8h n__nodup__log_8c n__nodup__log_8h n__openssl__compat_8h n__particles_8c n__particles_8h n__pcre_8c n__pcre_8h n__pretty_8c n__pretty_8h n__pth_8c n__pth_8h n__query_8c n__query_8h n__random_8c n__random_8h n__reactor_8c n__reactor_8h n__sha256_8c n__sha256_8h n__signals_8c n__signals_8h n__ssrf_8c n__ssrf_8h n__stack_8c n__stack_8h n__str_8c n__str_8h n__thread__pool_8c n__thread__pool_8h n__tiff_8c n__tiff_8h n__time_8c n__time_8h n__trajectory_8c n__trajectory_8h n__trees_8c n__trees_8h n__url__safe_8c n__url__safe_8h n__user_8c n__user_8h n__windows_8h n__wrap_8c n__wrap_8h n__x509_8c n__x509_8h n__zip_8c n__zip_8h n__zlib_8c n__zlib_8h nilorea_8h
5 ex_network_alpn_8c example
gullradriel edited this page 2026-10-09 00:51:57 +02:00
Table of Contents

ex_network_alpn.c

TLS ALPN negotiation, and a real HTTP/2 exchange over the "h2" it selects Three connections against one SNI-minting TLS server that offers "h2" then "http/1.1":

  1. a client offering both gets "h2", and the connection then carries a real HTTP/2 request answered by n_http2_server over the TLS socket;
  2. a client offering only "http/1.1" gets "http/1.1";
  3. a client offering nothing negotiates no protocol at all, and the handshake still succeeds. ```c

/*

  • Nilorea Library
  • Copyright (C) 2005-2026 Castagnier Mickael
  • Licensed under the Apache License, Version 2.0 (the "License");
  • you may not use this file except in compliance with the License.
  • You may obtain a copy of the License at
  • http://www.apache.org/licenses/LICENSE-2.0
  • Unless required by applicable law or agreed to in writing, software
  • distributed under the License is distributed on an "AS IS" BASIS,
  • WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
  • implied. See the License for the specific language governing
  • permissions and limitations under the License.
  • SPDX-License-Identifier: Apache-2.0 */

#include "nilorea/n_common.h" #include "nilorea/n_http2_server.h" #include "nilorea/n_log.h" #include "nilorea/n_network.h" #include "nilorea/n_str.h" #include "nilorea/n_x509.h"

#include <getopt.h> #include <pthread.h> #include <stdio.h> #include <stdlib.h> #include <string.h> #include <unistd.h>

#include <openssl/ssl.h>

#define ALPN_HOST "alpn.host.example" #define ROUNDS 3 #define H2_REPLY "served-over-h2"

static int failures = 0;

typedef struct CA_CTX { N_STR* cert; N_STR* key;
} CA_CTX;

typedef struct SRV { NETWORK* listen;
CA_CTX* ca;
char selected[ROUNDS][32]; int rounds_done;
int h2_requests;
char h2_path[128];
} SRV;

/* Parse the -V LOG_LEVEL verbosity argument. / void process_args(int argc, char* argv) { int opt = 0; while ((opt = getopt(argc, argv, "hvV:")) != EOF) { switch (opt) { case 'V': if (!strncmp("LOG_NULL", optarg, 8)) set_log_level(LOG_NULL); else if (!strncmp("LOG_NOTICE", optarg, 10)) set_log_level(LOG_NOTICE); else if (!strncmp("LOG_INFO", optarg, 8)) set_log_level(LOG_INFO); else if (!strncmp("LOG_ERR", optarg, 7)) set_log_level(LOG_ERR); else if (!strncmp("LOG_DEBUG", optarg, 9)) set_log_level(LOG_DEBUG); break; case 'v': fprintf(stderr, "ex_network_alpn\n"); exit(1); case 'h': default: fprintf(stderr, "usage: %s [-V LOG_LEVEL]\n", argv[0]); break; } } }

/* SNI pick callback: mint a leaf for the requested host signed by the CA. / static int pick_cb(const char sni, N_STR** cert_pem, N_STR** key_pem, void* user_data) { CA_CTX* ca = (CA_CTX*)user_data; const char* host = (sni && sni[0]) ? sni : "localhost"; return n_x509_mint_host_cert(host, ca->cert, ca->key, 825, cert_pem, key_pem); }

/* ------------------------------------------------------------------ / / byte I/O over a TLS NETWORK, for the HTTP/2 state machine / / ------------------------------------------------------------------ */

static ssize_t tls_read(void* io, void* buf, size_t len) { NETWORK* n = (NETWORK*)io; int r = SSL_read(n->ssl, buf, (int)len); return (r < 0) ? -1 : (ssize_t)r; }

static ssize_t tls_write(void* io, const void* buf, size_t len) { NETWORK* n = (NETWORK*)io; size_t off = 0; while (off < len) { int w = SSL_write(n->ssl, (const char*)buf + off, (int)(len - off)); if (w <= 0) return -1; off += (size_t)w; } return (ssize_t)len; }

/* ------------------------------------------------------------------ / / the server / / ------------------------------------------------------------------ */

/* Answer every HTTP/2 request with a small text body. / static int h2_on_request(void ud, N_H2_SERVER* srv, const N_H2_REQUEST* req) { SRV* s = (SRV*)ud; N_H2_HEADER h[2]; s->h2_requests++; snprintf(s->h2_path, sizeof(s->h2_path), "%s", req->path ? req->path : ""); h[0].name = (char*)":status"; h[0].value = (char*)"200"; h[1].name = (char*)"content-type"; h[1].value = (char*)"text/plain"; if (n_http2_server_respond(srv, req->stream_id, h, 2, (const unsigned char*)H2_REPLY, strlen(H2_REPLY)) != 0) failures++; return 0; }

/* Accept ROUNDS connections, negotiating ALPN on each. / static void server_fn(void* p) { static const char* const protos[] = {"h2", "http/1.1"}; SRV* s = (SRV*)p; int round; for (round = 0; round < ROUNDS; round++) { NETWORK* c = netw_accept_from(s->listen); if (!c) break; if (netw_ssl_server_handshake_ex(c, pick_cb, s->ca, protos, 2) != TRUE) { n_log(LOG_ERR, "server TLS handshake failed on round %d", round); failures++; netw_close(&c); continue; } if (netw_ssl_get_alpn(c, s->selected[round], sizeof(s->selected[round])) != TRUE) s->selected[round][0] = '\0'; if (strcmp(s->selected[round], "h2") == 0) { N_H2_SERVER* h2 = n_http2_server_new(c, tls_read, tls_write); if (!h2 || n_http2_server_handshake(h2) != 0 || n_http2_server_run(h2, h2_on_request, s) != 0) { n_log(LOG_ERR, "HTTP/2 server failed: %s", _str(n_http2_server_error(h2))); failures++; } n_http2_server_free(&h2); } else { /* the non-h2 rounds only prove the handshake completed */ char buf[16] = ""; if (SSL_read(c->ssl, buf, 4) > 0) tls_write(c, "pong", 4); } s->rounds_done++; netw_close(&c); } return NULL; }

/* ------------------------------------------------------------------ / / a minimal HTTP/2 client, enough to check the server answers / / ------------------------------------------------------------------ */

/* Send one GET on stream 1 and read the response status and body. Returns 0 on success, -1 on a protocol or I/O error. / static int h2_client_get(NETWORK c, const char* path, int* status, char* body, size_t body_cap) { unsigned char block[512], frame[1024], rb[8192]; N_H2_HEADER req[4]; N_H2_HPACK* dec = n_http2_hpack_new(0); size_t w, rlen = 0, blen = 0; int done = 0, rc = -1;

*status = 0;
body[0] = '\0';
req[0].name = (char*)":method";
req[0].value = (char*)"GET";
req[1].name = (char*)":scheme";
req[1].value = (char*)"https";
req[2].name = (char*)":authority";
req[2].value = (char*)ALPN_HOST;
req[3].name = (char*)":path";
req[3].value = (char*)path;
w = n_http2_hpack_encode(req, 4, block, sizeof(block));
if (w == 0 || !dec)
    goto out;

if (tls_write(c, N_H2_PREFACE, strlen(N_H2_PREFACE)) < 0)
    goto out;
if (n_http2_frame_build_header(frame, sizeof(frame), 0, N_H2_SETTINGS, 0, 0) == 0)
    goto out;
if (tls_write(c, frame, N_H2_FRAME_HEADER_LEN) < 0)
    goto out;
if (n_http2_frame_build_header(frame, sizeof(frame), (uint32_t)w, N_H2_HEADERS, N_H2_FLAG_END_HEADERS | N_H2_FLAG_END_STREAM, 1) == 0)
    goto out;
memcpy(frame + N_H2_FRAME_HEADER_LEN, block, w);
if (tls_write(c, frame, N_H2_FRAME_HEADER_LEN + w) < 0)
    goto out;

while (!done) {
    N_H2_FRAME f;
    size_t consumed = 0;
    int pr = (rlen > 0) ? n_http2_frame_parse(rb, rlen, &f, &consumed) : 0;
    if (pr < 0)
        goto out;
    if (pr == 0) {
        ssize_t n;
        if (rlen == sizeof(rb))
            goto out;
        n = tls_read(c, rb + rlen, sizeof(rb) - rlen);
        if (n <= 0)
            goto out;
        rlen += (size_t)n;
        continue;
    }
    if (f.type == N_H2_HEADERS && f.stream_id == 1) {
        N_H2_HEADER hdrs[32];
        size_t count = 0, i;
        if (n_http2_hpack_decode(dec, f.payload, f.length, hdrs, 32, &count) != 0)
            goto out;
        for (i = 0; i < count; i++)
            if (hdrs[i].name && strcmp(hdrs[i].name, ":status") == 0)
                *status = atoi(hdrs[i].value ? hdrs[i].value : "0");
        n_http2_hpack_headers_free(hdrs, count);
    } else if (f.type == N_H2_DATA && f.stream_id == 1) {
        if (blen + f.length < body_cap) {
            memcpy(body + blen, f.payload, f.length);
            blen += f.length;
            body[blen] = '\0';
        }
    }
    if (f.stream_id == 1 && (f.flags & N_H2_FLAG_END_STREAM))
        done = 1;
    memmove(rb, rb + consumed, rlen - consumed);
    rlen -= consumed;
}
rc = 0;

out: n_http2_hpack_free(&dec); return rc; }

/* ------------------------------------------------------------------ / / the client rounds / / ------------------------------------------------------------------ */

/* Connect, offer the given ALPN list (none when count is 0), and report what was negotiated in got[]. Returns the connected NETWORK, or NULL. / static NETWORK client_connect(const char* port, const char* const* protos, size_t count, char* got, size_t got_len) { NETWORK* cli = NULL; got[0] = '\0'; if (netw_ssl_connect_client_to(&cli, "127.0.0.1", (char*)port, NETWORK_IPALL, 5000) != TRUE || !cli) return NULL; netw_ssl_set_verify(cli, 0); if (count > 0 && netw_ssl_set_alpn(cli, protos, count) != TRUE) { netw_close(&cli); return NULL; } if (netw_ssl_do_handshake(cli, (char*)ALPN_HOST) != TRUE) { netw_close(&cli); return NULL; } netw_ssl_get_alpn(cli, got, got_len); return cli; }

/* Bind a loopback listening socket on the first free port in a range. / static NETWORK bind_free(char* port_out, size_t port_out_len) { int p; for (p = 18400; p < 18500; p++) { NETWORK* l = NULL; char ps[16]; snprintf(ps, sizeof(ps), "%d", p); if (netw_make_listening(&l, "127.0.0.1", ps, 5, NETWORK_IPALL) == TRUE && l) { snprintf(port_out, port_out_len, "%s", ps); return l; } if (l) netw_close(&l); } return NULL; }

int main(int argc, char** argv) { static const char* const both[] = {"h2", "http/1.1"}; static const char* const only11[] = {"http/1.1"}; CA_CTX ca = {NULL, NULL}; NETWORK* listen = NULL; NETWORK* cli = NULL; SRV srv; pthread_t th; char port[16] = ""; char got[32] = "";

set_log_level(LOG_NOTICE);
process_args(argc, argv);
memset(&srv, 0, sizeof(srv));

netw_init_openssl();
if (n_x509_generate_ca("Nilorea ALPN Test CA", 3650, &ca.cert, &ca.key) != 0 || !ca.cert || !ca.key) {
    n_log(LOG_ERR, "CA generation failed");
    return 1;
}
listen = bind_free(port, sizeof(port));
if (!listen) {
    n_log(LOG_ERR, "could not bind a loopback port");
    free_nstr(&ca.cert);
    free_nstr(&ca.key);
    return 1;
}
srv.listen = listen;
srv.ca = &ca;
pthread_create(&th, NULL, server_fn, &srv);

/* round 1: both offered, h2 selected, and a real HTTP/2 exchange over it */
cli = client_connect(port, both, 2, got, sizeof(got));
if (!cli) {
    n_log(LOG_ERR, "round 1 connect failed");
    failures++;
} else {
    int status = 0;
    char body[128] = "";
    if (strcmp(got, "h2") != 0) {
        n_log(LOG_ERR, "round 1 negotiated '%s', expected h2", got);
        failures++;
    }
    if (h2_client_get(cli, "/alpn", &status, body, sizeof(body)) != 0) {
        n_log(LOG_ERR, "round 1 HTTP/2 exchange failed");
        failures++;
    }
    if (status != 200 || strcmp(body, H2_REPLY) != 0) {
        n_log(LOG_ERR, "round 1 got status %d body '%s'", status, body);
        failures++;
    }
    netw_close(&cli);
}

/* round 2: the client speaks only HTTP/1.1, so that is what is selected */
cli = client_connect(port, only11, 1, got, sizeof(got));
if (!cli) {
    n_log(LOG_ERR, "round 2 connect failed");
    failures++;
} else {
    char buf[8] = "";
    if (strcmp(got, "http/1.1") != 0) {
        n_log(LOG_ERR, "round 2 negotiated '%s', expected http/1.1", got);
        failures++;
    }
    tls_write(cli, "ping", 4);
    if (SSL_read(cli->ssl, buf, 4) <= 0) {
        n_log(LOG_ERR, "round 2 exchange failed");
        failures++;
    }
    netw_close(&cli);
}

/* round 3: no ALPN offered at all: nothing is negotiated, and the handshake
   still succeeds. A server that answered with a protocol here would break
   every client that does not speak ALPN. */
cli = client_connect(port, NULL, 0, got, sizeof(got));
if (!cli) {
    n_log(LOG_ERR, "round 3 connect failed");
    failures++;
} else {
    char buf[8] = "";
    if (got[0] != '\0') {
        n_log(LOG_ERR, "round 3 negotiated '%s', expected nothing", got);
        failures++;
    }
    tls_write(cli, "ping", 4);
    if (SSL_read(cli->ssl, buf, 4) <= 0) {
        n_log(LOG_ERR, "round 3 exchange failed");
        failures++;
    }
    netw_close(&cli);
}

pthread_join(th, NULL);
if (srv.rounds_done != ROUNDS) {
    n_log(LOG_ERR, "the server served %d of %d rounds", srv.rounds_done, ROUNDS);
    failures++;
}
if (srv.h2_requests != 1 || strcmp(srv.h2_path, "/alpn") != 0) {
    n_log(LOG_ERR, "the HTTP/2 handler saw %d request(s), path '%s'", srv.h2_requests, srv.h2_path);
    failures++;
}
if (strcmp(srv.selected[0], "h2") != 0 || strcmp(srv.selected[1], "http/1.1") != 0 || srv.selected[2][0] != '\0') {
    n_log(LOG_ERR, "the server side saw '%s', '%s', '%s'", srv.selected[0], srv.selected[1], srv.selected[2]);
    failures++;
}

/* guards */
if (netw_ssl_set_alpn(NULL, both, 2) != FALSE) failures++;
if (netw_ssl_get_alpn(NULL, got, sizeof(got)) != FALSE) failures++;
if (netw_ssl_server_handshake_ex(NULL, pick_cb, &ca, both, 2) != FALSE) failures++;

netw_close(&listen);
free_nstr(&ca.cert);
free_nstr(&ca.key);
netw_unload_openssl();

if (failures) {
    n_log(LOG_ERR, "ex_network_alpn: %d failure(s)", failures);
    return 1;
}
n_log(LOG_NOTICE, "ex_network_alpn: all checks passed");
return 0;

}


_Filename: ex_network_alpn.c_

Home

Modules