linux C libcurl https 使用

最近一直在测试libcurl使用https服务器单向认证的情况，一直在查找原因和调试。主要出现在下面的问题上：

routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error

这个问题的解决思路可以在下面链接中找到：

http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/

在server.xml中增加下面的内容：

ciphers="SSL_RSA_WITH_RC4_128_SHA"

If you're running curl 7.35.0 and run into this error in php when trying to connect to a remote host:35 - error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failureit means you need to tell curl to use sslv3 and also use the sslv3 ciphers, ensure you have these curl_setopt settings, eg:curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');

下面是libcurl 的测试代码：

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <curl/curl.h>

static size_t save_response_callback(void *buffer,size_t size,size_t count,void **response)
{
char * ptr = NULL;
printf("buffer is %s\n",(char *)buffer);
ptr =(char *) malloc(count*size + 4);
memcpy(ptr,buffer,count*size);
*response = ptr;

return count;
}

int main(int argc,char *argv[])
{
CURL * curl;
CURLcode res;
char * response = NULL;

if(argc !=2){
printf("Usage:file<url>;\n");
return;
}

//curl_global_init(CURL_GLOBAL_DEFAULT);

curl = curl_easy_init();

if(curl!=NULL){
printf("Usage:file<%s>;\n",argv[1]);
curl_easy_setopt(curl,CURLOPT_URL,argv[1]);
curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,&save_response_callback);
curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response);
curl_easy_setopt(curl,CURLOPT_COOKIESESSION,1L);
curl_easy_setopt(curl,CURLOPT_COOKIEFILE,"/dev/null");
curl_easy_setopt(curl,CURLOPT_SSL_VERIFYPEER,1);
//curl_easy_setopt(curl,CURLOPT_CAPATH,"/etc/ssl/cert/");
curl_easy_setopt(curl,CURLOPT_CAINFO,"ca-cert.pem");

curl_easy_setopt(curl,CURLOPT_SSL_VERIFYHOST,1);
curl_easy_setopt(curl,CURLOPT_VERBOSE,1L);
curl_easy_setopt(curl,CURLOPT_TIMEOUT,30);
#if 0
/* 双向验证下面是客户端的ＣＡ*/
//	curl_easy_setopt(curl,CURLOPT_CAPATH,"./");
curl_easy_setopt(curl,CURLOPT_SSLCERT,"client-cert.pem");
curl_easy_setopt(curl,CURLOPT_SSLCERTPASSWD,"password");
curl_easy_setopt(curl,CURLOPT_SSLCERTTYPE,"PEM");
curl_easy_setopt(curl,CURLOPT_SSLKEY,"client-key.pem");
curl_easy_setopt(curl,CURLOPT_SSLKEYPASSWD,"password");
curl_easy_setopt(curl,CURLOPT_SSLKEYTYPE,"PEM");
#endif

res = curl_easy_perform(curl);
if(res != CURLE_OK){

printf("curl_wasy_perform error = %s",curl_easy_strerror(res));
}
printf("response<%s>\n",response);

curl_easy_cleanup(curl);
}

}

参考资料： 源码测试用例：http://curl.haxx.se/libcurl/c/https.html教程：http://blog.csdn.net/jgood/article/details/4787670ＳＳＬ证书制作：http://blog.chinaunix.net/uid-7591044-id-1742977.html