2 * ustream-ssl - library for SSL over ustream
4 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19 #include "ustream-ssl.h"
20 #include "ustream-internal.h"
22 __hidden void * __ustream_ssl_context_new(bool server)
24 static bool _init = false;
29 SSL_load_error_strings();
34 #ifdef CYASSL_OPENSSL_H_
36 m = SSLv23_server_method();
38 m = SSLv23_client_method();
41 m = TLSv1_server_method();
43 m = TLSv1_client_method();
46 c = SSL_CTX_new((void *) m);
51 SSL_CTX_set_verify(c, SSL_VERIFY_NONE, NULL);
56 __hidden int __ustream_ssl_set_crt_file(void *ctx, const char *file)
60 ret = SSL_CTX_use_certificate_file(ctx, file, SSL_FILETYPE_PEM);
62 ret = SSL_CTX_use_certificate_file(ctx, file, SSL_FILETYPE_ASN1);
70 __hidden int __ustream_ssl_set_key_file(void *ctx, const char *file)
74 ret = SSL_CTX_use_PrivateKey_file(ctx, file, SSL_FILETYPE_PEM);
76 ret = SSL_CTX_use_PrivateKey_file(ctx, file, SSL_FILETYPE_ASN1);
84 __hidden void __ustream_ssl_context_free(void *ctx)
89 static void ustream_ssl_error(struct ustream_ssl *us, int ret)
92 uloop_timeout_set(&us->error_timer, 0);
95 __hidden enum ssl_conn_status __ustream_ssl_connect(struct ustream_ssl *us)
103 r = SSL_connect(ssl);
108 r = SSL_get_error(ssl, r);
109 if (r == SSL_ERROR_WANT_READ || r == SSL_ERROR_WANT_WRITE)
110 return U_SSL_PENDING;
112 ustream_ssl_error(us, r);
116 __hidden int __ustream_ssl_write(struct ustream_ssl *us, const char *buf, int len)
119 int ret = SSL_write(ssl, buf, len);
122 int err = SSL_get_error(ssl, ret);
123 if (err == SSL_ERROR_WANT_WRITE)
126 ustream_ssl_error(us, err);
133 __hidden int __ustream_ssl_read(struct ustream_ssl *us, char *buf, int len)
135 int ret = SSL_read(us->ssl, buf, len);
138 ret = SSL_get_error(us->ssl, ret);
139 if (ret == SSL_ERROR_WANT_READ)
140 return U_SSL_PENDING;
142 ustream_ssl_error(us, ret);