Question

我正在使用openSSL库与www.httpbin.org创建SSL会话。我能够在服务器的端口号443处成功创建它。我在ping www.httpbin.org中使用ubuntu命令获取ip address的{{1}}，以便我可以将其用于我的程序。我在下面粘贴了我的程序。我从服务器获得httpbin。

有人能解释我为什么会收到这个错误吗？ 400 Bad Request保存HTTP初始行和标头。可能问题在于我char msg[]，但我无法解决问题。

http headers

要编译上述程序，您可以使用#include <iostream> #include <string.h> #include <unistd.h> #include <sys/socket.h> #include <resolv.h> #include <netdb.h> #include <netinet/in.h> #include <arpa/inet.h> #include <openssl/bio.h> #include <openssl/ssl.h> #include <openssl/err.h> #include <openssl/pem.h> #include <openssl/x509.h> #include <openssl/x509_vfy.h> #define DEFAULT_PORT_NUMBER 443 int create_socket(char *, uint16_t port_num); int openSSL_client_init() { OpenSSL_add_all_algorithms(); ERR_load_BIO_strings(); ERR_load_crypto_strings(); SSL_load_error_strings(); if (SSL_library_init() < 0) return -1; return 0; } int openSSL_create_client_ctx(SSL_CTX **ctx) { const SSL_METHOD *method = SSLv23_client_method(); if ((*ctx = SSL_CTX_new(method)) == NULL) return -1; //SSL_CTX_set_options(*ctx, SSL_OP_NO_SSLv2); return 0; } int main(int argc, char *argv[]) { BIO *outbio = NULL; X509 *cert; X509_NAME *certname = NULL; SSL_CTX *ctx; SSL *ssl; int server = 0; int ret, i; if (openSSL_client_init()) { std :: cerr << "Could not initialize the OpenSSL library !" << std :: endl; return -1; } outbio = BIO_new_fp(stdout, BIO_NOCLOSE); if (openSSL_create_client_ctx(&ctx)) { std :: cerr << "Unable to create a new SSL context structure." << std :: endl; return -1; } ssl = SSL_new(ctx); server = create_socket(argv[1], atoi(argv[2])); if (server < 0) { std :: cerr << "Error: Can't create TCP session" << std :: endl; return -1; } std :: cout << "Successfully made the TCP connection to: " << argv[1] << " port: " << atoi(argv[2]) << std :: endl; SSL_set_fd(ssl, server); if (SSL_connect(ssl) != 1) { std :: cerr << "Error: Could not build a SSL session to: " << argv[1] << std :: endl; return -1; } std :: cout << "Successfully enabled SSL/TLS session to: " << argv[1] << std :: endl; //SSL_SESSION *ss = SSL_get_session(ssl); cert = SSL_get_peer_certificate(ssl); if (cert == NULL) { std :: cerr << "Error: Could not get a certificate from: " << argv[1] << std :: endl; return -1; } certname = X509_NAME_new(); certname = X509_get_subject_name(cert); std :: cout << "Displaying the certificate subject data:" << std :: endl; X509_NAME_print_ex(outbio, certname, 0, 0); std :: cout << std :: endl; char msg[1024] = "GET https://www.httpbin.org/ HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip\r\nUser-Agent: runscope/0.1\r\n\r\n"; SSL_write(ssl, msg, strlen(msg)); SSL_read(ssl, msg, 1024); std :: cout << "Message is " << msg << std :: endl; SSL_free(ssl); close(server); X509_free(cert); SSL_CTX_free(ctx); std :: cout << "Finished SSL/TLS connection with server" << std :: endl; return 0; } int create_socket(char *ip_cstr, uint16_t port_num) { int fd; struct sockaddr_in dest_addr; fd = socket(AF_INET, SOCK_STREAM, 0); dest_addr.sin_family = AF_INET; dest_addr.sin_port = htons(port_num); dest_addr.sin_addr.s_addr = inet_addr(ip_cstr); memset(&(dest_addr.sin_zero), '\0', 8); if (connect(fd, (struct sockaddr *)&dest_addr, sizeof(struct sockaddr)) == -1) return -1; return fd; }。我在gcc -lssl -lcrypto FILE_NAME.C上使用gcc。要安装openSSL开发包，可以在Ubuntu上使用sudo apt-get install libssl-dev。要执行已编译的程序，请使用Ubuntu。

我从我的程序获得的输出是：

成功将TCP连接到：23.22.14.18端口：443 已成功启用SSL / TLS会话：23.22.14.18 显示证书主题数据： =域控制验证，OU = EssentialSSL通配符，CN = * .httpbin.org 消息是

./a.out IP_ADDERSS PORT_NUMBER

与服务器完成SSL / TLS连接

Answer 1

GET https://www.httpbin.org/ HTTP/1.1
Accept: */*
Accept-Encoding: gzip
User-Agent: runscope/0.1

我不知道在GET行中提供协议和域是有效的（虽然不引用我的内容）。当然，{1.1}必须使用Host行，但您没有提供。{/ p>

你的意思是：

GET / HTTP/1.1
Host: www.httpbin.org
Accept: */*
Accept-Encoding: gzip
User-Agent: runscope/0.1

我建议在尝试实施之前阅读HTTP requests。

对www.httpbin.org的错误请求？

1 个答案: