[Help-gnutls] Re: gnutls with pgp

[dellanna at csp.it]

I want to build the following scenario (with gnutls)
One archtecture client-server (in lan)... when client open the connection with
server, it be used  TLS with autentication PGP-based.
It is possible to start from ex-serv-anon and ex-client1. isn't it?
There is some reference on this mechanism? (this is gnutls mechanism)

Simone.

Scrive Simon Josefsson <simon at josefsson.org>:

> dellanna at csp.it writes:
>
> > Yes,
> > with cc -o ex-client1 ex-client1.c tcp.c -lgnutls it was generated the
> output "
> > ex-client1", but if I run ./ex-client1 the application return "Connect
> error".
> > I work on LAN and there is the server machine in waiting on port  5556. The
> > client machine should to connect on server machine with TLS.
> > The client application is complete?
>
> The client connects to "localhost:5556".  Do you have a server running
> there?  The error you get indicate that there is no server.
>
> Remember, you will want to modify the client in order to do anything
> useful, so I recommend to start reading its source code to understand
> what it does.
>
> /Simon
>
> > Simone.
> >
> > Scrive Simon Josefsson <simon at josefsson.org>:
> >
> >> dellanna at csp.it writes:
> >>
> >> > Ok,
> >> > now, if I run  cc -ex-serv-anon ex-serv-anon.c -I/usr/lib/ -L /usr/lib/
> >> -lgnutls
> >> > (for server with anonymous authentication) it work correctly...the
> output
> >> is the
> >> > following:
> >> >
> >> > Server ready. Listening to port '5556'
> >> >
> >> > But if I run cc -ex-client1 ex-client1.c -I/usr/lib/ -L /usr/lib/
> -lgnutls
> >> on
> >> > client machine (for client anonymous) it return the following error:
> >>
> >> Try:
> >>
> >> cc -o ex-client1 ex-client1.c -lgnutls
> >>
> >> instead.
> >>
> >> > _______________________________________________________________
> >> > /usr/bin/ld: warning: cannot find entry symbol x-client1; defaulting to
> >> > 0000000008048908
> >> > /tmp/ccbQ8aPE.o: In function `main':ex-client1.c:(.text+0x97): undefined
> >> > reference to `tcp_connect'
> >> > :ex-client1.c:(.text+0x1fd): undefined reference to `tcp_close'
> >> > collect2: ld returned 1 exit status
> >> > _______________________________________________________________
> >> >
> >> > What is the problem for you?
> >>
> >> The tcp_* functions are needed.  Download this file as tcp.c:
> >>
> >>
> >
>
http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/*checkout*/gnutls/doc/examples/tcp.c?root=GNU+TLS+Library&content-type=text%2Fplain
> >>
> >> and build it too, e.g.:
> >>
> >> cc -o ex-client1 ex-client1.c tcp.c -lgnutls
> >>
> >> I have added that file as another section in the manual.
> >>
> >> /Simon
> >>
> >> > Simone.
> >> >
> >> > Scrive Simon Josefsson <simon at josefsson.org>:
> >> >
> >> >> dellanna at csp.it writes:
> >> >>
> >> >> > Hi,
> >> >> > I installed gnutls with Synaptic Package Manager ( in ubuntu 6.06)
> and I
> >> >> don't
> >> >> > know what is gnutls library directory...
> >> >>
> >> >> Then it is installed in the default path, /usr/lib.  You don't have to
> >> >> specify the -I or -L parameters at all.  Just add "-lgnutls" when
> >> >> building it.
> >> >>
> >> >> > If I download gnutls from ftp://ftp.gnupg.org/gcrypt/alpha/gnutls/
> >> >> > what is the packet I need to use gnutls in my applications?
> >> >> > In manual there aren't instructions releted to configuration of my
> >> >> environment.
> >> >> > Can you help me, please?
> >> >>
> >> >> See the file INSTALL, but if GnuTLS comes with your distribution, you
> >> >> don't need to build it yourself.
> >> >>
> >> >> /Simon
> >> >>
> >> >> > Simone.
> >> >> >
> >> >> > Scrive Simon Josefsson <simon at josefsson.org>:
> >> >> >
> >> >> >> dellanna at csp.it writes:
> >> >> >>
> >> >> >> > Ok,
> >> >> >> > but if I try to compiler the example on manual "Echo Server with
> >> >> anonymous
> >> >> >> > authentication" with command gcc, it return something like:
> >> >> >> > "server.c:(.text+0x2e): undefined reference to
> >> >> >> `gnutls_set_default_priority'"
> >> >> >> > this function is in the package <gnutls/gnutls.h>.
> >> >> >> > In this example I write #include <gnutls/gnutls.h> . There is
> >> something
> >> >> to
> >> >> >> > configure before gnutls work correctly?
> >> >> >>
> >> >> >> Did you forget to link the program with the gnutls library?  You'll
> >> >> >> need to compile it using something like this:
> >> >> >>
> >> >> >> cc -o foo foo.c -I/path/to/gnutls/include -L/path/to/gnutls/lib
> >> -lgnutls
> >> >> >>
> >> >> >> Alternatively, if you built GnuTLS yourself, invoke 'make' in the
> >> >> >> doc/examples/ directory.  The examples are built when you build
> >> >> >> GnuTLS.
> >> >> >>
> >> >> >> /Simon
> >> >> >>
> >> >> >> > Simone.
> >> >> >> >
> >> >> >> > Scrive Simon Josefsson <simon at josefsson.org>:
> >> >> >> >
> >> >> >> >> dellanna at csp.it writes:
> >> >> >> >>
> >> >> >> >> > Hi all,
> >> >> >> >> > I should implement autenthication inside of web application
> with
> >> >> gnutls.
> >> >> >> >> > I should use OpenPGP inside TLS connection (I do not use
> >> certificate
> >> >> >> >> X.509).
> >> >> >> >> > It is possible in GnuTLS, but can someone indicate me any
> >> reference
> >> >> >> guide
> >> >> >> >> (with
> >> >> >> >> > example server-client)?
> >> >> >> >>
> >> >> >> >> Hi!  Yes, that should be possible.  There are example code for a
> >> >> >> >> server in the GnuTLS manual:
> >> >> >> >>
> >> >> >> >>
> >> >> >> >
> >> >> >>
> >> >> >
> >> >>
> >> >
> >>
> >
>
http://www.gnu.org/software/gnutls/manual/html_node/Echo-Server-with-OpenPGP-authentication.html
> >> >> >> >>
> >> >> >> >> There are no explicit examples for OpenPGP clients, but modifying
> >> the
> >> >> >> >> standard X.509 example:
> >> >> >> >>
> >> >> >> >>
> >> >> >> >
> >> >> >>
> >> >> >
> >> >>
> >> >
> >>
> >
>
http://www.gnu.org/software/gnutls/manual/html_node/Simple-client-example-with-X_002e509-certificate-support.html
> >> >> >> >>
> >> >> >> >> using the hints from:
> >> >> >> >>
> >> >> >> >>
> >> >> >> >
> >> >> >>
> >> >> >
> >> >>
> >> >
> >>
> >
>
http://www.gnu.org/software/gnutls/manual/html_node/Certificate-authentication.html
> >> >> >> >>
> >> >> >> >> should not be impossible.
> >> >> >> >>
> >> >> >> >> Note that this part of GnuTLS is not widely used, so it isn't
> >> unlikely
> >> >> >> >> that you run into problems.  Let us know how it works for you!
> >> >> >> >>
> >> >> >> >> /Simon
> >> >> >> >>
> >> >> >> >>
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> > ----------------------------------------------------------------
> >> >> >> > This message was sent using IMP, the Internet Messaging Program.
> >> >> >>
> >> >> >>
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> > ----------------------------------------------------------------
> >> >> > This message was sent using IMP, the Internet Messaging Program.
> >> >>
> >> >>
> >> >
> >> >
> >> >
> >> >
> >> > ----------------------------------------------------------------
> >> > This message was sent using IMP, the Internet Messaging Program.
> >>
> >>
> >
> >
> >
> >
> > ----------------------------------------------------------------
> > This message was sent using IMP, the Internet Messaging Program.
>
>




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.