Fix bug #3139, "Mainwindow unresponsive due to a busy loop"
[claws.git] / src / common / socket.c
index cb4c7f8c74f4f3670ea65ab70444f943eec70bdd..1d6638d07afe6882493786a3e9a1b2c0c40c4947 100644 (file)
@@ -1,10 +1,10 @@
 /*
  * Sylpheed -- a GTK+ based, lightweight, and fast e-mail client
- * Copyright (C) 1999-2007 Hiroyuki Yamamoto and the Claws Mail team
+ * Copyright (C) 1999-2012 Hiroyuki Yamamoto and the Claws Mail team
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
+ * the Free Software Foundation; either version 3 of the License, or
  * (at your option) any later version.
  *
  * This program is distributed in the hope that it will be useful,
  * GNU General Public License for more details.
  *
  * You should have received a copy of the GNU General Public License
- * along with this program; if not, write to the Free Software
- * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ * 
  */
 
 #ifdef HAVE_CONFIG_H
 #  include "config.h"
+#include "claws-features.h"
+#endif
+
+#if (defined (_XOPEN_SOURCE) && !defined (_BSD_SOURCE))
+#define _BSD_SOURCE
 #endif
 
 #include <glib.h>
@@ -31,6 +36,7 @@
 #  ifndef EINPROGRESS
 #    define EINPROGRESS WSAEINPROGRESS
 #  endif
+#  include "w32lib.h"
 #else
 #  if HAVE_SYS_WAIT_H
 #    include <sys/wait.h>
@@ -58,7 +64,7 @@
 #include "socket.h"
 #include "utils.h"
 #include "log.h"
-#if USE_OPENSSL
+#ifdef USE_GNUTLS
 #  include "ssl.h"
 #endif
 
@@ -124,19 +130,21 @@ static guint io_timeout = 60;
 
 static GList *sock_connect_data_list = NULL;
 
-static gboolean sock_prepare           (GSource        *source,
+static gboolean ssl_sock_prepare       (GSource        *source,
                                         gint           *timeout);
-static gboolean sock_check             (GSource        *source);
-static gboolean sock_dispatch          (GSource        *source,
+static gboolean ssl_sock_check         (GSource        *source);
+static gboolean ssl_sock_dispatch      (GSource        *source,
                                         GSourceFunc     callback,
                                         gpointer        user_data);
 
-GSourceFuncs sock_watch_funcs = {
-       sock_prepare,
-       sock_check,
-       sock_dispatch,
+#ifdef USE_GNUTLS
+GSourceFuncs ssl_watch_funcs = {
+       ssl_sock_prepare,
+       ssl_sock_check,
+       ssl_sock_dispatch,
        NULL
 };
+#endif
 
 static gint sock_connect_with_timeout  (gint                    sock,
                                         const struct sockaddr  *serv_addr,
@@ -227,6 +235,11 @@ void refresh_resolvers(void)
 #endif /*G_OS_UNIX*/
 }
 
+#ifdef G_OS_WIN32
+#define SOCKET_IS_VALID(s)      ((s) != INVALID_SOCKET)
+#else
+#define SOCKET_IS_VALID(s)     TRUE
+#endif
 
 /* Due to the fact that socket under Windows are not represented by
    standard file descriptors, we sometimes need to check whether a
@@ -244,6 +257,78 @@ static int fd_is_w32_socket(gint fd)
 #endif 
 }
 
+gint fd_connect_inet(gushort port)
+{
+       gint sock;
+       struct sockaddr_in addr;
+
+       sock = socket(AF_INET, SOCK_STREAM, 0);
+       if (!SOCKET_IS_VALID(sock)) {
+#ifdef G_OS_WIN32
+               debug_print("fd_connect_inet(): socket() failed: %d\n",
+                         WSAGetLastError());
+#else
+               perror("fd_connect_inet(): socket");
+#endif
+               return -1;
+       }
+
+       memset(&addr, 0, sizeof(addr));
+       addr.sin_family = AF_INET;
+       addr.sin_port = htons(port);
+       addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
+
+       if (connect(sock, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
+               fd_close(sock);
+               return -1;
+       }
+
+       return sock;
+}
+gint fd_open_inet(gushort port)
+{
+       gint sock;
+       struct sockaddr_in addr;
+       gint val;
+
+       sock = socket(AF_INET, SOCK_STREAM, 0);
+       if (!SOCKET_IS_VALID(sock)) {
+#ifdef G_OS_WIN32
+               g_warning("fd_open_inet(): socket() failed: %d\n",
+                         WSAGetLastError());
+#else
+               perror("fd_open_inet(): socket");
+#endif
+               return -1;
+       }
+
+       val = 1;
+       if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, (char *)&val,
+                      sizeof(val)) < 0) {
+               perror("setsockopt");
+               fd_close(sock);
+               return -1;
+       }
+
+       memset(&addr, 0, sizeof(addr));
+       addr.sin_family = AF_INET;
+       addr.sin_port = htons(port);
+       addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
+
+       if (bind(sock, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
+               perror("bind");
+               fd_close(sock);
+               return -1;
+       }
+
+       if (listen(sock, 1) < 0) {
+               perror("listen");
+               fd_close(sock);
+               return -1;
+       }
+
+       return sock;
+}
 
 gint fd_connect_unix(const gchar *path)
 {
@@ -290,13 +375,17 @@ gint fd_open_unix(const gchar *path)
        strncpy(addr.sun_path, path, sizeof(addr.sun_path) - 1);
 
        if (bind(sock, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-               perror("bind");
+               gchar *buf = g_strdup_printf("can't bind to %s", path);
+               perror(buf);
+               g_free(buf);
                close(sock);
                return -1;
        }
 
        if (listen(sock, 1) < 0) {
-               perror("listen");
+               gchar *buf = g_strdup_printf("can't listen on %s", path);
+               perror(buf);
+               g_free(buf);
                close(sock);
                return -1;              
        }
@@ -341,7 +430,7 @@ static gint set_nonblocking_mode(gint fd, gboolean nonblock)
 
 gint sock_set_nonblocking_mode(SockInfo *sock, gboolean nonblock)
 {
-       g_return_val_if_fail(sock != NULL, -1);
+       cm_return_val_if_fail(sock != NULL, -1);
 
        return set_nonblocking_mode(sock->sock, nonblock);
 }
@@ -365,43 +454,34 @@ static gboolean is_nonblocking_mode(gint fd)
 
 gboolean sock_is_nonblocking_mode(SockInfo *sock)
 {
-       g_return_val_if_fail(sock != NULL, FALSE);
+       cm_return_val_if_fail(sock != NULL, FALSE);
 
        return is_nonblocking_mode(sock->sock);
 }
 
 
-static gboolean sock_prepare(GSource *source, gint *timeout)
+#ifdef USE_GNUTLS
+static gboolean ssl_sock_prepare(GSource *source, gint *timeout)
 {
        *timeout = 1;
        return FALSE;
 }
 
-static gboolean sock_check(GSource *source)
+static gboolean ssl_sock_check(GSource *source)
 {
        SockInfo *sock = ((SockSource *)source)->sock;
        struct timeval timeout = {0, 0};
        fd_set fds;
-       GIOCondition condition = sock->condition;
+       GIOCondition condition = 0;
         
        if (!sock || !sock->sock)
                return FALSE;
 
-#if USE_OPENSSL
-       if (sock->ssl) {
-               if (condition & G_IO_IN) {
-                       if (SSL_pending(sock->ssl) > 0)
-                               return TRUE;
-                       if (SSL_want_write(sock->ssl))
-                               condition |= G_IO_OUT;
-               }
+       condition = sock->condition;
 
-               if (condition & G_IO_OUT) {
-                       if (SSL_want_read(sock->ssl))
-                               condition |= G_IO_IN;
-               }
-       }
-#endif
+       if ((condition & G_IO_IN) == G_IO_IN &&
+           gnutls_record_check_pending(sock->ssl) != 0)
+               return TRUE;
 
        FD_ZERO(&fds);
        FD_SET(sock->sock, &fds);
@@ -414,7 +494,7 @@ static gboolean sock_check(GSource *source)
        return FD_ISSET(sock->sock, &fds) != 0;
 }
 
-static gboolean sock_dispatch(GSource *source, GSourceFunc callback,
+static gboolean ssl_sock_dispatch(GSource *source, GSourceFunc callback,
                              gpointer user_data)
 {
        SockInfo *sock = ((SockSource *)source)->sock;
@@ -424,6 +504,7 @@ static gboolean sock_dispatch(GSource *source, GSourceFunc callback,
 
        return sock->callback(sock, sock->condition, sock->data);
 }
+#endif
 
 static gboolean sock_watch_cb(GIOChannel *source, GIOCondition condition,
                              gpointer data)
@@ -439,14 +520,17 @@ static gboolean sock_watch_cb(GIOChannel *source, GIOCondition condition,
 guint sock_add_watch(SockInfo *sock, GIOCondition condition, SockFunc func,
                     gpointer data)
 {
+       if (!sock)
+               return FALSE;
+
        sock->callback = func;
        sock->condition = condition;
        sock->data = data;
 
-#if USE_OPENSSL
+#ifdef USE_GNUTLS
        if (sock->ssl)
        {
-               GSource *source = g_source_new(&sock_watch_funcs,
+               GSource *source = g_source_new(&ssl_watch_funcs,
                                               sizeof(SockSource));
                ((SockSource *) source)->sock = sock;
                g_source_set_priority(source, G_PRIORITY_DEFAULT);
@@ -486,6 +570,7 @@ static gint fd_check_io(gint fd, GIOCondition cond)
                return 0;
        } else {
                g_warning("Socket IO timeout\n");
+               log_error(LOG_PROTOCOL, _("Socket IO timeout.\n"));
                return -1;
        }
 }
@@ -514,6 +599,7 @@ static gint sock_connect_with_timeout(gint sock,
                alarm(0);
                signal(SIGALRM, prev_handler);
                errno = ETIMEDOUT;
+               log_error(LOG_PROTOCOL, _("Connection timed out.\n"));
                return -1;
        }
        alarm(timeout_secs);
@@ -540,7 +626,8 @@ struct hostent *my_gethostbyname(const gchar *hostname)
        if (sigsetjmp(jmpenv, 1)) {
                alarm(0);
                signal(SIGALRM, prev_handler);
-               fprintf(stderr, "%s: host lookup timed out.\n", hostname);
+               g_printerr("%s: host lookup timed out.\n", hostname);
+               log_error(LOG_PROTOCOL, _("%s: host lookup timed out.\n"), hostname);
                errno = 0;
                return NULL;
        }
@@ -552,7 +639,8 @@ struct hostent *my_gethostbyname(const gchar *hostname)
                alarm(0);
                signal(SIGALRM, prev_handler);
 #endif
-               fprintf(stderr, "%s: unknown host.\n", hostname);
+               g_printerr("%s: unknown host.\n", hostname);
+               log_error(LOG_PROTOCOL, _("%s: unknown host.\n"), hostname);
                errno = 0;
                return NULL;
        }
@@ -600,13 +688,13 @@ static gint sock_connect_by_hostname(gint sock, const gchar *hostname,
 
        if (!my_inet_aton(hostname, &ad.sin_addr)) {
                if ((hp = my_gethostbyname(hostname)) == NULL) {
-                       fprintf(stderr, "%s: unknown host.\n", hostname);
+                       g_printerr("%s: unknown host.\n", hostname);
                        errno = 0;
                        return -1;
                }
 
                if (hp->h_length != 4 && hp->h_length != 8) {
-                       fprintf(stderr, "illegal address length received for host %s\n", hostname);
+                       g_printerr("illegal address length received for host %s\n", hostname);
                        errno = 0;
                        return -1;
                }
@@ -637,7 +725,7 @@ static gint sock_connect_by_getaddrinfo(const gchar *hostname, gushort      port)
        g_snprintf(port_str, sizeof(port_str), "%d", port);
 
        if ((gai_error = getaddrinfo(hostname, port_str, &hints, &res)) != 0) {
-               fprintf(stderr, "getaddrinfo for %s:%s failed: %s\n",
+               g_printerr("getaddrinfo for %s:%s failed: %s\n",
                        hostname, port_str, gai_strerror(gai_error));
                return -1;
        }
@@ -664,40 +752,6 @@ static gint sock_connect_by_getaddrinfo(const gchar *hostname, gushort     port)
 }
 #endif /* !INET6 */
 
-
-/* Open a connection using an external program.  May be useful when
- * you need to tunnel through a SOCKS or other firewall, or to
- * establish an IMAP-over-SSH connection. */
-/* TODO: Recreate this for sock_connect_thread() */
-SockInfo *sock_connect_cmd(const gchar *hostname, const gchar *tunnelcmd)
-{
-#ifdef G_OS_UNIX
-       gint fd[2];
-       int r;
-                    
-       if ((r = socketpair(AF_UNIX, SOCK_STREAM, 0, fd)) == -1) {
-               perror("socketpair");
-               return NULL;
-       }
-       log_message("launching tunnel command \"%s\"\n", tunnelcmd);
-       if (fork() == 0) {
-               close(fd[0]);
-               close(0);
-               close(1);
-               dup(fd[1]);     /* set onto stdin */
-               dup(fd[1]);
-               execlp("/bin/sh", "/bin/sh", "-c", tunnelcmd, NULL);
-       }
-
-       close(fd[1]);
-       return sockinfo_from_fd(hostname, 0, fd[0]);
-#else
-        /* We would need a special implementation for W32. */
-        return NULL;
-#endif
-}
-
-
 SockInfo *sock_connect(const gchar *hostname, gushort port)
 {
 #ifdef G_OS_WIN32
@@ -774,13 +828,20 @@ static gboolean sock_connect_async_cb(GIOChannel *source,
 
        if (val != 0) {
                close(fd);
+               log_error(LOG_PROTOCOL, _("%s:%d: connection failed (%s).\n"),
+                         conn_data->hostname, conn_data->port,
+                         strerror(val));
                sock_connect_address_list_async(conn_data);
                return FALSE;
        }
 
        sockinfo = g_new0(SockInfo, 1);
        sockinfo->sock = fd;
+#ifndef G_OS_WIN32
        sockinfo->sock_ch = g_io_channel_unix_new(fd);
+#else
+       sockinfo->sock_ch = g_io_channel_win32_new_socket(fd);
+#endif
        sockinfo->hostname = g_strdup(conn_data->hostname);
        sockinfo->port = conn_data->port;
        sockinfo->state = CONN_ESTABLISHED;
@@ -800,10 +861,11 @@ static gint sock_connect_async_get_address_info_cb(GList *addr_list,
 
        conn_data->addr_list = addr_list;
        conn_data->cur_addr = addr_list;
-       conn_data->canonical_name = conn_data->lookup_data->canonical_name;
-       conn_data->lookup_data->canonical_name = NULL;
-       conn_data->lookup_data = NULL;
-
+       if (conn_data->lookup_data) {
+               conn_data->canonical_name = conn_data->lookup_data->canonical_name;
+               conn_data->lookup_data->canonical_name = NULL;
+               conn_data->lookup_data = NULL;
+       }
        return sock_connect_address_list_async(conn_data);
 }
 
@@ -862,7 +924,10 @@ gint sock_connect_async_cancel(gint id)
                if (conn_data->io_tag > 0)
                        g_source_remove(conn_data->io_tag);
                if (conn_data->channel) {
-                       g_io_channel_close(conn_data->channel);
+                       GError *err = NULL;
+                       g_io_channel_shutdown(conn_data->channel, TRUE, &err);
+                       if (err)
+                               g_error_free(err);
                        g_io_channel_unref(conn_data->channel);
                }
 
@@ -890,6 +955,7 @@ static gint sock_connect_address_list_async(SockConnectData *conn_data)
                if ((sock = socket(addr_data->family, addr_data->socktype,
                                   addr_data->protocol)) < 0) {
                        perror("socket");
+
                        continue;
                }
 
@@ -902,14 +968,12 @@ static gint sock_connect_address_list_async(SockConnectData *conn_data)
                                perror("connect");
                                close(sock);
                        }
-               } else
+               } else {
                        break;
+               }
        }
 
        if (conn_data->cur_addr == NULL) {
-               g_warning("sock_connect_address_list_async: "
-                         "connection to %s:%d failed\n",
-                         conn_data->hostname, conn_data->port);
                conn_data->func(NULL, conn_data->data);
                sock_connect_async_cancel(conn_data->id);
                return -1;
@@ -917,7 +981,11 @@ static gint sock_connect_address_list_async(SockConnectData *conn_data)
 
        conn_data->cur_addr = conn_data->cur_addr->next;
 
+#ifndef G_OS_WIN32
        conn_data->channel = g_io_channel_unix_new(sock);
+#else
+       conn_data->channel = g_io_channel_win32_new_socket(sock);
+#endif
        conn_data->io_tag = g_io_add_watch(conn_data->channel, G_IO_IN|G_IO_OUT,
                                           sock_connect_async_cb, conn_data);
 
@@ -938,21 +1006,38 @@ static gboolean sock_get_address_info_async_cb(GIOChannel *source,
        struct sockaddr *addr;
        gchar *canonical_name = NULL;
        gchar len = 0;
-
-       if (g_io_channel_read(source, &len, sizeof(len),
-                             &bytes_read) == G_IO_ERROR_NONE) {
+       GError *err = NULL;
+       
+       g_io_channel_set_encoding(source, NULL, &err);
+       if (err) {
+               g_warning("can unset encoding: %s\n", err->message);
+               g_error_free(err);
+               return FALSE;
+       }
+       g_io_channel_set_buffered(source, FALSE);
+       if (g_io_channel_read_chars(source, &len, sizeof(len),
+                             &bytes_read, &err) == G_IO_STATUS_NORMAL) {
+               if (err != NULL) {
+                       g_warning("g_io_channel_read_chars: %s\n", err->message);
+                       g_error_free(err);
+                       return FALSE;
+               } 
                if (bytes_read == sizeof(len) && len > 0) {
                        gchar *cur = NULL;
                        gint todo = len;
                        canonical_name = g_malloc0(len + 1);
                        cur = canonical_name;
                        while (todo > 0) {
-                               if (g_io_channel_read(source, cur, todo,
-                                     &bytes_read) != G_IO_ERROR_NONE) {
-                                     g_warning("canonical name not read\n");
-                                     g_free(canonical_name);
-                                     canonical_name = NULL;
-                                     break;
+                               if (g_io_channel_read_chars(source, cur, todo,
+                                     &bytes_read, &err) != G_IO_STATUS_NORMAL) {
+                                       if (err) {
+                                             g_warning("canonical name not read %s\n", err->message);
+                                             g_free(canonical_name);
+                                             canonical_name = NULL;
+                                             g_error_free(err);
+                                             err = NULL;
+                                             break;
+                                       }
                                } else {
                                        cur += bytes_read;
                                        todo -= bytes_read;
@@ -967,12 +1052,15 @@ static gboolean sock_get_address_info_async_cb(GIOChannel *source,
                }             
        }
        for (;;) {
-               if (g_io_channel_read(source, (gchar *)ai_member,
-                                     sizeof(ai_member), &bytes_read)
-                   != G_IO_ERROR_NONE) {
-                       g_warning("sock_get_address_info_async_cb: "
-                                 "address length read error\n");
-                       break;
+               if (g_io_channel_read_chars(source, (gchar *)ai_member,
+                                     sizeof(ai_member), &bytes_read, &err) 
+                   != G_IO_STATUS_NORMAL) {
+                       if (err != NULL) {
+                               g_warning("g_io_channel_read_chars: addr len %s\n", err->message);
+                               g_error_free(err);
+                               err = NULL;
+                               break;
+                       } 
                }
 
                if (bytes_read == 0 || bytes_read != sizeof(ai_member))
@@ -980,17 +1068,22 @@ static gboolean sock_get_address_info_async_cb(GIOChannel *source,
 
                if (ai_member[0] == AF_UNSPEC) {
                        g_warning("DNS lookup failed\n");
+                       log_error(LOG_PROTOCOL, _("%s:%d: unknown host.\n"),
+                               lookup_data->hostname, lookup_data->port);
                        break;
                }
 
                addr = g_malloc(ai_member[3]);
-               if (g_io_channel_read(source, (gchar *)addr, ai_member[3],
-                                     &bytes_read)
-                   != G_IO_ERROR_NONE) {
-                       g_warning("sock_get_address_info_async_cb: "
-                                 "address data read error\n");
-                       g_free(addr);
-                       break;
+               if (g_io_channel_read_chars(source, (gchar *)addr, ai_member[3],
+                                     &bytes_read, &err) 
+                   != G_IO_STATUS_NORMAL) {
+                       if (err != NULL) {
+                               g_warning("g_io_channel_read_chars: addr data read %s\n", err->message);
+                               g_error_free(err);
+                               err = NULL;
+                               g_free(addr);
+                               break;
+                       } 
                }
 
                if (bytes_read != ai_member[3]) {
@@ -1010,7 +1103,9 @@ static gboolean sock_get_address_info_async_cb(GIOChannel *source,
                addr_list = g_list_append(addr_list, addr_data);
        }
 
-       g_io_channel_close(source);
+       g_io_channel_shutdown(source, TRUE, &err);
+       if (err)
+               g_error_free(err);
        g_io_channel_unref(source);
 
 #ifdef G_OS_WIN32
@@ -1068,6 +1163,8 @@ static void address_info_async_child(void *opaque)
                gchar len = 0;
                 g_warning("getaddrinfo for %s:%s failed: %s\n",
                           parm->hostname, port_str, gai_strerror(gai_err));
+               log_error(LOG_PROTOCOL, _("%s:%s: host lookup failed (%s).\n"),
+                         parm->hostname, port_str, gai_strerror(gai_err));
                fd_write_all(parm->pipe_fds[1], &len,
                      sizeof(len));
                 fd_write_all(parm->pipe_fds[1], (gchar *)ai_member,
@@ -1214,7 +1311,11 @@ static SockLookupData *sock_get_address_info_async(const gchar *hostname,
         lookup_data->pipe_fds[1] = -1;
 #endif  /*!G_OS_WIN32 */
         
+#ifndef G_OS_WIN32
         lookup_data->channel = g_io_channel_unix_new(lookup_data->pipe_fds[0]);
+#else
+        lookup_data->channel = g_io_channel_win32_new_fd(lookup_data->pipe_fds[0]);
+#endif
         lookup_data->io_tag = g_io_add_watch(lookup_data->channel, G_IO_IN,
                                              sock_get_address_info_async_cb,
                                              lookup_data);
@@ -1231,7 +1332,11 @@ static gint sock_get_address_info_async_cancel(SockLookupData *lookup_data)
        if (lookup_data->io_tag > 0)
                g_source_remove(lookup_data->io_tag);
        if (lookup_data->channel) {
-               g_io_channel_close(lookup_data->channel);
+               GError *err = NULL;
+               g_io_channel_shutdown(lookup_data->channel, TRUE, &err);
+               if (err)
+                       g_error_free(err);
+
                g_io_channel_unref(lookup_data->channel);
        }
 
@@ -1260,7 +1365,11 @@ static SockInfo *sockinfo_from_fd(const gchar *hostname,
 
        sockinfo = g_new0(SockInfo, 1);
        sockinfo->sock = sock;
+#ifndef G_OS_WIN32
        sockinfo->sock_ch = g_io_channel_unix_new(sock);
+#else
+       sockinfo->sock_ch = g_io_channel_win32_new_socket(sock);
+#endif
        sockinfo->hostname = g_strdup(hostname);
        sockinfo->port = port;
        sockinfo->state = CONN_ESTABLISHED;
@@ -1268,19 +1377,7 @@ static SockInfo *sockinfo_from_fd(const gchar *hostname,
        return sockinfo;
 }
 
-gint sock_printf(SockInfo *sock, const gchar *format, ...)
-{
-       va_list args;
-       gchar buf[BUFFSIZE];
-
-       va_start(args, format);
-       g_vsnprintf(buf, sizeof(buf), format, args);
-       va_end(args);
-
-       return sock_write_all(sock, buf, strlen(buf));
-}
-
-gint fd_read(gint fd, gchar *buf, gint len)
+static gint fd_read(gint fd, gchar *buf, gint len)
 {
        if (fd_check_io(fd, G_IO_IN) < 0)
                return -1;
@@ -1290,33 +1387,42 @@ gint fd_read(gint fd, gchar *buf, gint len)
        return read(fd, buf, len);
 }
 
-#if USE_OPENSSL
-gint ssl_read(SSL *ssl, gchar *buf, gint len)
+#if USE_GNUTLS
+static gint ssl_read(gnutls_session_t ssl, gchar *buf, gint len)
 {
-       gint err, ret;
+       gint r;
 
-       if (SSL_pending(ssl) == 0) {
-               if (fd_check_io(SSL_get_rfd(ssl), G_IO_IN) < 0)
+       if (gnutls_record_check_pending(ssl) == 0) {
+               if (fd_check_io(GPOINTER_TO_INT(gnutls_transport_get_ptr(ssl)), G_IO_IN) < 0)
                        return -1;
        }
 
-       ret = SSL_read(ssl, buf, len);
+       while (1) {
+               r = gnutls_record_recv(ssl, buf, len);
+               if (r > 0)
+                       return r;
 
-       switch ((err = SSL_get_error(ssl, ret))) {
-       case SSL_ERROR_NONE:
-               return ret;
-       case SSL_ERROR_WANT_READ:
-       case SSL_ERROR_WANT_WRITE:
-               errno = EAGAIN;
-               return -1;
-       case SSL_ERROR_ZERO_RETURN:
-               return 0;
-       default:
-               g_warning("SSL_read() returned error %d, ret = %d\n", err, ret);
-               if (ret == 0)
-                       return 0;
-               return -1;
+               switch (r) {
+               case 0: /* closed connection */
+                       return -1;
+
+               case GNUTLS_E_REHANDSHAKE:
+                       do {
+                               r = gnutls_handshake(ssl);
+                       } while (r == GNUTLS_E_AGAIN || r == GNUTLS_E_INTERRUPTED);
+                       break; /* re-receive */
+               case GNUTLS_E_AGAIN:
+               case GNUTLS_E_INTERRUPTED:
+                       errno = EAGAIN;
+                       return -1;
+
+               default:
+                       debug_print("Unexpected SSL read result %d\n", r);
+                       errno = EIO;
+                       return -1;
+               }
        }
+
 }
 #endif
 
@@ -1324,9 +1430,9 @@ gint sock_read(SockInfo *sock, gchar *buf, gint len)
 {
        gint ret;
 
-       g_return_val_if_fail(sock != NULL, -1);
+       cm_return_val_if_fail(sock != NULL, -1);
 
-#if USE_OPENSSL
+#ifdef USE_GNUTLS
        if (sock->ssl)
                ret = ssl_read(sock->ssl, buf, len);
        else
@@ -1348,33 +1454,37 @@ gint fd_write(gint fd, const gchar *buf, gint len)
        return write(fd, buf, len);
 }
 
-#if USE_OPENSSL
-gint ssl_write(SSL *ssl, const gchar *buf, gint len)
+#if USE_GNUTLS
+static gint ssl_write(gnutls_session_t ssl, const gchar *buf, gint len)
 {
        gint ret;
 
-       ret = SSL_write(ssl, buf, len);
+       if (fd_check_io(GPOINTER_TO_INT(gnutls_transport_get_ptr(ssl)), G_IO_OUT) < 0)
+               return -1;
+
+       ret = gnutls_record_send(ssl, buf, len);
 
-       switch (SSL_get_error(ssl, ret)) {
-       case SSL_ERROR_NONE:
-               return ret;
-       case SSL_ERROR_WANT_READ:
-       case SSL_ERROR_WANT_WRITE:
-               errno = EAGAIN;
+       switch (ret) {
+       case 0:
                return -1;
+       case GNUTLS_E_AGAIN:
+       case GNUTLS_E_INTERRUPTED:
+               return 0;
+
        default:
-               return -1;
+               return ret;
        }
 }
+
 #endif
 
 gint sock_write(SockInfo *sock, const gchar *buf, gint len)
 {
        gint ret;
 
-       g_return_val_if_fail(sock != NULL, -1);
+       cm_return_val_if_fail(sock != NULL, -1);
 
-#if USE_OPENSSL
+#ifdef USE_GNUTLS
        if (sock->ssl)
                ret = ssl_write(sock->ssl, buf, len);
        else
@@ -1402,7 +1512,7 @@ gint fd_write_all(gint fd, const gchar *buf, gint len)
                         n = write(fd, buf, len);
 
                if (n <= 0) {
-                       log_error(_("write on fd%d: %s\n"), fd, strerror(errno));
+                       log_error(LOG_PROTOCOL, _("write on fd%d: %s\n"), fd, strerror(errno));
                        return -1;
                }
                len -= n;
@@ -1413,8 +1523,8 @@ gint fd_write_all(gint fd, const gchar *buf, gint len)
        return wrlen;
 }
 
-#if USE_OPENSSL
-gint ssl_write_all(SSL *ssl, const gchar *buf, gint len)
+#ifdef USE_GNUTLS
+static gint ssl_write_all(gnutls_session_t ssl, const gchar *buf, gint len)
 {
        gint n, wrlen = 0;
 
@@ -1435,9 +1545,9 @@ gint sock_write_all(SockInfo *sock, const gchar *buf, gint len)
 {
        gint ret;
 
-       g_return_val_if_fail(sock != NULL, -1);
+       cm_return_val_if_fail(sock != NULL, -1);
 
-#if USE_OPENSSL
+#ifdef USE_GNUTLS
        if (sock->ssl)
                ret = ssl_write_all(sock->ssl, buf, len);
        else
@@ -1466,6 +1576,7 @@ gint fd_gets(gint fd, gchar *buf, gint len)
                return -1;
 
 #ifdef G_OS_WIN32
+       fd_check_io(fd, G_IO_IN);
        do {
 /*
 XXX:tm try nonblock
@@ -1504,173 +1615,6 @@ Single-byte send() and recv().
        return bp - buf;
 }
 
-#if USE_OPENSSL
-gint ssl_gets(SSL *ssl, gchar *buf, gint len)
-{
-       gchar *newline, *bp = buf;
-       gint n;
-
-       if (--len < 1)
-               return -1;
-       do {
-               if ((n = ssl_peek(ssl, bp, len)) <= 0)
-                       return -1;
-               if ((newline = memchr(bp, '\n', n)) != NULL)
-                       n = newline - bp + 1;
-               if ((n = ssl_read(ssl, bp, n)) < 0)
-                       return -1;
-               bp += n;
-               len -= n;
-       } while (!newline && len);
-
-       *bp = '\0';
-       return bp - buf;
-}
-#endif
-
-gint sock_gets(SockInfo *sock, gchar *buf, gint len)
-{
-       gint ret;
-
-       g_return_val_if_fail(sock != NULL, -1);
-
-#if USE_OPENSSL
-       if (sock->ssl)
-               return ssl_gets(sock->ssl, buf, len);
-       else
-#endif
-               return fd_gets(sock->sock, buf, len);
-
-       if (ret < 0)
-               sock->state = CONN_DISCONNECTED;
-       return ret;
-}
-
-gint fd_getline(gint fd, gchar **str)
-{
-       gchar buf[BUFFSIZE];
-       gint len;
-       gulong size = 1;
-
-       while ((len = fd_gets(fd, buf, sizeof(buf))) > 0) {
-               size += len;
-               if (!*str)
-                       *str = g_strdup(buf);
-               else {
-                       *str = g_realloc(*str, size);
-                       strcat(*str, buf);
-               }
-               if (buf[len - 1] == '\n'
-#ifdef G_OS_WIN32  /* FIXME This does not seem to be correct. */
-                    || buf[len - 1] == '\r'
-#endif
-                    )
-                       break;
-       }
-       if (len == -1 && *str)
-               g_free(*str);
-
-       return len;
-}
-
-#if USE_OPENSSL
-gint ssl_getline(SSL *ssl, gchar **str)
-{
-       gchar buf[BUFFSIZE];
-       gint len;
-       gulong size = 1;
-
-       while ((len = ssl_gets(ssl, buf, sizeof(buf))) > 0) {
-               size += len;
-               if (!*str)
-                       *str = g_strdup(buf);
-               else {
-                       *str = g_realloc(*str, size);
-                       strcat(*str, buf);
-               }
-               if (buf[len - 1] == '\n')
-                       break;
-       }
-       if (len == -1 && *str)
-               g_free(*str);
-
-       return len;
-}
-#endif
-
-gchar *sock_getline(SockInfo *sock)
-{
-       gint ret;
-       gchar *str = NULL;
-
-       g_return_val_if_fail(sock != NULL, NULL);
-
-#if USE_OPENSSL
-       if (sock->ssl)
-               ret = ssl_getline(sock->ssl, &str);
-       else
-#endif
-               ret = fd_getline(sock->sock, &str);
-
-       if (ret < 0)
-               sock->state = CONN_DISCONNECTED;
-       return str;
-}
-
-gint sock_puts(SockInfo *sock, const gchar *buf)
-{
-       gint ret;
-
-       if ((ret = sock_write_all(sock, buf, strlen(buf))) < 0)
-               return ret;
-       return sock_write_all(sock, "\r\n", 2);
-}
-
-/* peek at the socket data without actually reading it */
-#if USE_OPENSSL
-gint ssl_peek(SSL *ssl, gchar *buf, gint len)
-{
-       gint err, ret;
-
-       if (SSL_pending(ssl) == 0) {
-               if (fd_check_io(SSL_get_rfd(ssl), G_IO_IN) < 0)
-                       return -1;
-       }
-
-       ret = SSL_peek(ssl, buf, len);
-
-       switch ((err = SSL_get_error(ssl, ret))) {
-       case SSL_ERROR_NONE:
-               return ret;
-       case SSL_ERROR_WANT_READ:
-       case SSL_ERROR_WANT_WRITE:
-               errno = EAGAIN;
-               return -1;
-       case SSL_ERROR_ZERO_RETURN:
-               return 0;
-       case SSL_ERROR_SYSCALL:
-               g_warning("SSL_peek() returned syscall error. errno=%d\n", errno);
-               return -1;
-       default:
-               g_warning("SSL_peek() returned error %d, ret = %d\n", err, ret);
-               if (ret == 0)
-                       return 0;
-               return -1;
-       }
-}
-#endif
-
-gint sock_peek(SockInfo *sock, gchar *buf, gint len)
-{
-       g_return_val_if_fail(sock != NULL, -1);
-
-#if USE_OPENSSL
-       if (sock->ssl)
-               return ssl_peek(sock->ssl, buf, len);
-#endif
-       return fd_recv(sock->sock, buf, len, MSG_PEEK);
-}
-
 gint sock_close(SockInfo *sock)
 {
        gint ret;
@@ -1681,7 +1625,7 @@ gint sock_close(SockInfo *sock)
        if (sock->sock_ch)
                g_io_channel_unref(sock->sock_ch);
 
-#if USE_OPENSSL
+#ifdef USE_GNUTLS
        if (sock->ssl)
                ssl_done_socket(sock);
        if (sock->g_source != 0)