Merge pull request #335 from dgarske/ocspnb_async

Example for OCSP non-blocking with async.

Author: lealem47

ocsp/ocsp_nonblock/README.md

@@ -32,3 +32,93 @@ OCSP Response: ret 471, nonblock count 409421
 Check OCSP for Google.com (ret 1)
 Ret = 1: success
 ```
+
+## OCSP non-blocking Async example
+
+This uses your system certificate chain to demonstrate validating revocation status using an OCSP 
+public server with wolfSSL's Asynchronous crypto.
+
+The example uses youtube.com as the public server.
+
+Example usage:
+
+```sh
+$ ./configure --enable-ocsp --enable-asynccrypt --enable-sni --enable-alpn --enable-ocspstapling 
+              --enable-ocspstapling2 --enable-opensslextra --enable-curve25519 CFLAGS="-DWOLFSSL_NONBLOCK_OCSP"
+$ make
+$ sudo make install
+
+% make
+gcc -o ocsp_nonblock_async ocsp_nonblock_async.c -Wall -I/usr/local/include -Os -L/usr/local/lib -lwolfssl
+
+% ./ocsp_nonblock_async
+WolfSSL AsyncCrypt Enabled
+WolfSSL AsyncCrypt with Simulation Mode
+Connecting...
+wolfSSL_connect() returned -1 (error code -108)
+wolfSSL_connect() returned -1 (error code -108)
+wolfSSL_connect() returned -1 (error code -108)
+ocsp_cb(): http://ocsp.pki.goog/gsr1
+  simulate 'want read'
+wolfSSL_connect() returned -1 (error code -408)
+ocsp_cb(): http://ocsp.pki.goog/gsr1
+Running command:
+curl -s --data-binary '@ocsp.req' -o 'ocsp.resp' -X POST -H 'Cache-Control: no-cache' -H 'Content-Type: application/ocsp-request' 'http://ocsp.pki.goog/gsr1'
+Reading OCSP response from file...
+Read 1447 bytes.
+*response is (nil)
+Allocating 1447 bytes...
+*response is now 0x55ef7fdcb4e0
+Copying bytes...
+Bytes copied.
+verify_cb()
+  preverify_ok = 1
+wolfSSL_connect() returned -1 (error code -108)
+ocsp_cb(): http://ocsp.pki.goog/gtsr1
+  simulate 'want read'
+wolfSSL_connect() returned -1 (error code -408)
+ocsp_cb(): http://ocsp.pki.goog/gtsr1
+Running command:
+curl -s --data-binary '@ocsp.req' -o 'ocsp.resp' -X POST -H 'Cache-Control: no-cache' -H 'Content-Type: application/ocsp-request' 'http://ocsp.pki.goog/gtsr1'
+Reading OCSP response from file...
+Read 724 bytes.
+*response is (nil)
+Allocating 724 bytes...
+*response is now 0x55ef7fdaf030
+Copying bytes...
+Bytes copied.
+verify_cb()
+  preverify_ok = 1
+wolfSSL_connect() returned -1 (error code -108)
+ocsp_cb(): http://ocsp.pki.goog/gts1c3
+  simulate 'want read'
+wolfSSL_connect() returned -1 (error code -408)
+ocsp_cb(): http://ocsp.pki.goog/gts1c3
+Running command:
+curl -s --data-binary '@ocsp.req' -o 'ocsp.resp' -X POST -H 'Cache-Control: no-cache' -H 'Content-Type: application/ocsp-request' 'http://ocsp.pki.goog/gts1c3'
+Reading OCSP response from file...
+Read 472 bytes.
+*response is (nil)
+Allocating 472 bytes...
+*response is now 0x55ef7fdac4b0
+Copying bytes...
+Bytes copied.
+verify_cb()
+  preverify_ok = 1
+wolfSSL_connect() returned -1 (error code -108)
+CONNECTED
+  Closing connection...
+wolfSSL_shutdown() failed with code 2 (error 0)
+  CLOSED
+test_connect() failed
+CONNECT FAILED
+
+DONE
+```
+
+The example uses `/etc/ssl/certs/ca-certificates.crt` as the system certs file by default. If your
+system doesn't have this file, just run the executable with the path to your own cert file.
+
+```
+./ocsp_nonblock_asynccrypt ../../mycerts/ca.crt
+```