X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=src%2Fcrypto%2FremoteSigner.cpp;h=f4680d650933248c0bb9584f63cc8b892583b549;hb=eac5817fe5ed5052599bbfb1ab3f6ade426010d0;hp=5888667aea2903cbbc37b3038dd1c8db3fcfb63e;hpb=709700dfbbeb5bf8aee1f5a1966f0192d783ae03;p=cassiopeia.git diff --git a/src/crypto/remoteSigner.cpp b/src/crypto/remoteSigner.cpp index 5888667..f4680d6 100644 --- a/src/crypto/remoteSigner.cpp +++ b/src/crypto/remoteSigner.cpp @@ -69,20 +69,11 @@ std::shared_ptr RemoteSigner::sign( std::shared_ptr(); - std::vector buffer( 2048 * 4 ); for( int i = 0; i < 3; i++ ) { try { - int length = conn->read( buffer.data(), buffer.size() ); - - if( length <= 0 ) { - logger::error( "Error, no response data" ); - result = nullptr; - break; - } - RecordHeader head; - std::string payload = parseCommand( head, std::string( buffer.data(), length ) ); + std::string payload = parseCommand( head, conn->readLine() ); switch( static_cast( head.command )) { case RecordHeader::SignerResult::CERTIFICATE: @@ -141,9 +132,11 @@ std::shared_ptr RemoteSigner::sign( std::shared_ptrserial = std::string( serStr.get() ); } + logger::note( "Closing SSL connection" ); if( !SSL_shutdown( ssl.get() ) && !SSL_shutdown( ssl.get() ) ) { // need to close the connection twice logger::warn( "SSL shutdown failed" ); } + logger::note( "SSL connection closed" ); return result; } @@ -169,14 +162,7 @@ std::pair, std::string> RemoteSigner::revoke( std::shared_p std::string payload = ca->name; send( conn, head, RecordHeader::SignerCommand::REVOKE, payload ); - std::vector buffer( 2048 * 4 ); - int length = conn->read( buffer.data(), buffer.size() ); - - if( length <= 0 ) { - throw "Error, no response data"; - } - - payload = parseCommand( head, std::string( buffer.data(), length ) ); + payload = parseCommand( head, conn->readLine() ); auto crl = std::make_shared( ca->path + std::string( "/ca.crl" ) ); std::string date; @@ -205,13 +191,8 @@ std::pair, std::string> RemoteSigner::revoke( std::shared_p } else { logger::warn( "CRL is broken, trying to recover" ); send( conn, head, RecordHeader::SignerCommand::GET_FULL_CRL, ca->name ); - length = conn->read( buffer.data(), buffer.size() ); - - if( length <= 0 ) { - throw "Error, no response data"; - } - payload = parseCommand( head, std::string( buffer.data(), length ) ); + payload = parseCommand( head, conn->readLine() ); if( static_cast( head.command ) != RecordHeader::SignerResult::FULL_CRL ) { throw "Protocol violation"; @@ -230,9 +211,11 @@ std::pair, std::string> RemoteSigner::revoke( std::shared_p logger::debug( "CRL:\n", crl->toString() ); + logger::note( "Closing SSL connection" ); if( !SSL_shutdown( ssl.get() ) && !SSL_shutdown( ssl.get() ) ) { // need to close the connection twice logger::warn( "SSL shutdown failed" ); } + logger::note( "SSL connection closed" ); return { crl, date }; }