unikernel/duniverse/ocaml-tls/lwt/examples/echo_client.ml

@@ -0,0 +1,73 @@
+
+open Ex_common
+open Lwt
+
+let cached_session : Tls.Core.epoch_data =
+  let hex = Ohex.decode in
+  {
+    Tls.Core.side = `Client ;
+    protocol_version = `TLS_1_3 ;
+    ciphersuite = `DHE_RSA_WITH_AES_128_GCM_SHA256 ;
+    peer_random = hex "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" ;
+    peer_certificate = None ;
+    peer_certificate_chain = [] ;
+    peer_name = None ;
+    trust_anchor = None ;
+    received_certificates = [] ;
+    own_random = hex "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" ;
+    own_certificate = [] ;
+    own_private_key = None ;
+    own_name = None ;
+    master_secret = hex "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" ;
+    exporter_master_secret = "" ;
+    session_id = "" ;
+    extended_ms = true ;
+    alpn_protocol = None ;
+    state = `Established ;
+    tls_unique = None ;
+  }
+
+let echo_client ?ca hostname port =
+  let open Lwt_io in
+  auth ?ca () >>= fun authenticator ->
+  X509_lwt.private_of_pems
+    ~cert:server_cert
+    ~priv_key:server_key >>= fun certificate ->
+  Tls_lwt.connect_ext
+    (get_ok Tls.Config.(client ~authenticator ~cached_session ~certificates:(`Single certificate) ~ciphers:Ciphers.supported ()))
+    (hostname, port) >>= fun (ic, oc) ->
+  Lwt.join [
+    lines ic    |> Lwt_stream.iter_s (printf "+ %s\n%!") ;
+    lines stdin |> Lwt_stream.iter_s (write_line oc)
+  ]
+
+let jump _ port host ca =
+  try
+    Lwt_main.run (echo_client ?ca host port)
+  with
+  | Tls_lwt.Tls_alert alert as exn ->
+    print_alert "remote end" alert ; raise exn
+  | Tls_lwt.Tls_failure alert as exn ->
+    print_fail "our end" alert ; raise exn
+
+open Cmdliner
+
+let port =
+  let doc = "Port to connect to" in
+  Arg.(value & opt int 443 & info [ "port" ] ~doc)
+
+let host =
+  let doc = "Host to connect to" in
+  Arg.(value & opt string "" & info [ "host" ] ~doc)
+
+let trust =
+  let doc = "Trust anchor" in
+  Arg.(value & opt (some string) None & info [ "trust" ] ~doc)
+
+let cmd =
+  let term = Term.(const jump $ setup_log $ port $ host $ trust)
+  and info = Cmd.info "echo_client" ~version:"2.0.3"
+  in
+  Cmd.v info term
+
+let () = exit (Cmd.eval cmd)