#include <config.h>

#include <iostream>

#include <stdexcept>

#include <gnutls/gnutls.h>

#include <gnutls/gnutlsxx.h>

#include <cstring> /* for strlen */

/* A very basic TLS client, with anonymous authentication.

 * written by Eduardo Villanueva Che.

 */

#define MAX_BUF 1024

#define SA struct sockaddr

#define CAFILE "ca.pem"

#define MSG "GET / HTTP/1.0\r\n\r\n"

extern "C"

{

    int tcp_connect(void);

    void tcp_close(int sd);

}

int main(void)

{

    int sd = -1;

    gnutls_global_init();

    try

    {

        /* Allow connections to servers that have OpenPGP keys as well.

         */

        gnutls::client_session session;

        /* X509 stuff */

        gnutls::certificate_credentials credentials;

        /* sets the trusted cas file

         */

        credentials.set_x509_trust_file(CAFILE, GNUTLS_X509_FMT_PEM);

        /* put the x509 credentials to the current session

         */

        session.set_credentials(credentials);

        /* Use default priorities */

        session.set_priority ("NORMAL", NULL);

        /* connect to the peer

         */

        sd = tcp_connect();

        session.set_transport_ptr((gnutls_transport_ptr_t) (ptrdiff_t)sd);

        /* Perform the TLS handshake

         */

        int ret = session.handshake();

        if (ret < 0)

        {

            throw std::runtime_error("Handshake failed");

        }

        else

        {

            std::cout << "- Handshake was completed" << std::endl;

        }

        session.send(MSG, strlen(MSG));

        char buffer[MAX_BUF + 1];

        ret = session.recv(buffer, MAX_BUF);

        if (ret == 0)

        {

            throw std::runtime_error("Peer has closed the TLS connection");

        }

        else if (ret < 0)

        {

            throw std::runtime_error(gnutls_strerror(ret));

        }

        std::cout << "- Received " << ret << " bytes:" << std::endl;

        std::cout.write(buffer, ret);

        std::cout << std::endl;

        session.bye(GNUTLS_SHUT_RDWR);

    }

    catch (std::exception &ex)

    {

        std::cerr << "Exception caught: " << ex.what() << std::endl;

    }

    if (sd != -1)

        tcp_close(sd);

    gnutls_global_deinit();

    return 0;

}