unsigned long serverAddrLen,

const wchar_t * serverSPN,

const SOCKET_SECURITY_SETTINGS * securitySettings,

unsigned long settingsLen)

{

SOCKADDR_IN sockaddr;

int iresult = NOPROBLEM_BIT;

int sockErr = 0;

SOCKET sock = INVALID_SOCKET;

WSABUF wsaBuf = { 0 };

char *dataBuf = "12345678";

DWORD bytesSent = 0;

char recvBuf[RECV_DATA_BUF_SIZE] = { 0 };

DWORD bytesRecvd = 0;

DWORD flags = 0;

SOCKET_PEER_TARGET_NAME *peerTargetName = NULL;

DWORD serverSpnStringLen = (DWORD) wcslen(serverSPN);

DWORD peerTargetNameLen = sizeof (SOCKET_PEER_TARGET_NAME) +

(serverSpnStringLen * sizeof (wchar_t));

//-----------------------------------------

// Create a TCP socket

sock = WSASocket(sockaddr->sa_family,

SOCK_STREAM, IPPROTO_TCP, NULL, 0, 0);

if (sock == INVALID_SOCKET) {

iResult = WSAGetLastError();

wprintf(L"WSASocket returned error %ld\n", iResult);

goto cleanup;

}

//-----------------------------------------

// Turn on security for the socket.

sockErr = WSASetSocketSecurity(sock,

securitySettings, settingsLen, NULL, NULL);

if (sockErr == SOCKET_ERROR) {

iResult = WSAGetLastError();

wprintf(L"WSASetSocketSecurity returned error %ld\n", iResult);

goto cleanup;

}

//-----------------------------------------

// Specify the server SPN

peerTargetName = (SOCKET_PEER_TARGET_NAME *) HeapAlloc(GetProcessHeap(),

HEAP_ZERO_MEMORY, peerTargetNameLen);

if (!peerTargetName) {

iResult = ERROR_NOT_ENOUGH_MEMORY;

wprintf(L"Out of memory\n");

goto cleanup;

}

// Use the security protocol as specified by the settings

peerTargetName->SecurityProtocol = securitySettings->SecurityProtocol;

// Specify the server SPN

peerTargetName->PeerTargetNameStringLen = serverSpnStringLen;

RtlCopyMemory((BYTE *) peerTargetName->AllStrings,

(BYTE *) serverSPN, serverSpnStringLen * sizeof (wchar_t)

);

sockErr = WSASetSocketPeerTargetName(sock,

peerTargetName,

peerTargetNameLen, NULL, NULL);

if (sockErr == SOCKET_ERROR) {

iResult = WSAGetLastError();

wprintf(L"WSASetSocketPeerTargetName returned error %ld\n", iResult);

goto cleanup;

}

//-----------------------------------------

// Connect to the server

sockErr = WSAConnect(sock,

serverAddr, serverAddrLen, NULL, NULL, NULL, NULL);

if (sockErr == SOCKET_ERROR) {

iResult = WSAGetLastError();

wprintf(L"WSAConnect returned error %ld\n", iResult);

goto cleanup;

}

// At this point a secure connection must have been established.

wprintf(L"Secure connection established to the server\n");

//-----------------------------------------

// Send some data securely

wsaBuf.len = (ULONG) strlen(dataBuf);

wsaBuf.buf = dataBuf;

sockErr = WSASend(sock, &wsaBuf, 1, &bytesSent, 0, NULL, NULL);

if (sockErr == SOCKET_ERROR) {

iResult = WSAGetLastError();

wprintf(L"WSASend returned error %ld\n", iResult);

goto cleanup;

}

wprintf(L"Sent %d bytes of data to the server\n", bytesSent);

//-----------------------------------------

// Receive server's response securely

wsaBuf.len = RECV_DATA_BUF_SIZE;

wsaBuf.buf = recvBuf;

sockErr = WSARecv(sock, &wsaBuf, 1, &bytesRecvd, &flags, NULL, NULL);

if (sockErr == SOCKET_ERROR) {

iResult = WSAGetLastError();

wprintf(L"WSARecv returned error %ld\n", iResult);

goto cleanup;

}

wprintf(L"Received %d bytes of data from the server\n", bytesRecvd);

cleanup:

if (sock != INVALID_SOCKET) {

//This will trigger the cleanup of all IPsec filters and policies that

//were added for this socket. The cleanup will happen only after all

//outstanding data has been sent out on the wire.

closesocket(sock);

}

if (peerTargetName) {

HeapFree(GetProcessHeap(), 0, peerTargetName);

}

return iResult;