]> git.ipfire.org Git - thirdparty/cups.git/blobdiff - cups/http.c
File cleanup.
[thirdparty/cups.git] / cups / http.c
index 87428152a7945a5cc1f8bbd6fffe65e082e73089..83396ea4191a748e800ff6f8a7e8824c67a34726 100644 (file)
@@ -1,11 +1,11 @@
 /*
- * "$Id: http.c,v 1.62 2000/03/20 13:51:48 mike Exp $"
+ * "$Id$"
  *
- *   HTTP routines for the Common UNIX Printing System (CUPS) scheduler.
+ *   HTTP routines for the Common UNIX Printing System (CUPS).
  *
- *   Copyright 1997-2000 by Easy Software Products, all rights reserved.
+ *   Copyright 1997-2006 by Easy Software Products, all rights reserved.
  *
- *   These statusd instructions, statements, and computer programs are the
+ *   These coded instructions, statements, and computer programs are the
  *   property of Easy Software Products and are protected by Federal
  *   copyright law.  Distribution and use rights are outlined in the file
  *   "LICENSE.txt" which should have been included with this file.  If this
  *       Attn: CUPS Licensing Information
  *       Easy Software Products
  *       44141 Airport View Drive, Suite 204
- *       Hollywood, Maryland 20636-3111 USA
+ *       Hollywood, Maryland 20636 USA
  *
- *       Voice: (301) 373-9603
+ *       Voice: (301) 373-9600
  *       EMail: cups-info@cups.org
  *         WWW: http://www.cups.org
  *
+ *   This file is subject to the Apple OS-Developed Software exception.
+ *
  * Contents:
  *
- *   httpInitialize()    - Initialize the HTTP interface library and set the
- *                         default HTTP proxy (if any).
- *   httpCheck()         - Check to see if there is a pending response from
- *                         the server.
- *   httpClose()         - Close an HTTP connection...
- *   httpConnect()       - Connect to a HTTP server.
- *   httpReconnect()     - Reconnect to a HTTP server...
- *   httpSeparate()      - Separate a Universal Resource Identifier into its
- *                         components.
- *   httpSetField()      - Set the value of an HTTP header.
- *   httpDelete()        - Send a DELETE request to the server.
- *   httpGet()           - Send a GET request to the server.
- *   httpHead()          - Send a HEAD request to the server.
- *   httpOptions()       - Send an OPTIONS request to the server.
- *   httpPost()          - Send a POST request to the server.
- *   httpPut()           - Send a PUT request to the server.
- *   httpTrace()         - Send an TRACE request to the server.
- *   httpFlush()         - Flush data from a HTTP connection.
- *   httpRead()          - Read data from a HTTP connection.
- *   httpWrite()         - Write data to a HTTP connection.
- *   httpGets()          - Get a line of text from a HTTP connection.
- *   httpPrintf()        - Print a formatted string to a HTTP connection.
- *   httpStatus()        - Return a short string describing a HTTP status code.
- *   httpGetDateString() - Get a formatted date/time string from a time value.
- *   httpGetDateTime()   - Get a time value from a formatted date/time string.
- *   httpUpdate()        - Update the current HTTP state for incoming data.
- *   httpDecode64()      - Base64-decode a string.
- *   httpEncode64()      - Base64-encode a string.
- *   httpGetLength()     - Get the amount of data remaining from the
- *                         content-length or transfer-encoding fields.
- *   http_field()        - Return the field index for a field name.
- *   http_send()         - Send a request with all fields and the trailing
- *                         blank line.
+ *   httpBlocking()       - Set blocking/non-blocking behavior on a connection.
+ *   httpCheck()          - Check to see if there is a pending response from
+ *                          the server.
+ *   httpClearCookie()    - Clear the cookie value(s).
+ *   httpClearFields()    - Clear HTTP request fields.
+ *   httpClose()          - Close an HTTP connection...
+ *   httpConnect()        - Connect to a HTTP server.
+ *   httpConnectEncrypt() - Connect to a HTTP server using encryption.
+ *   httpDelete()         - Send a DELETE request to the server.
+ *   httpEncryption()     - Set the required encryption on the link.
+ *   httpError()          - Get the last error on a connection.
+ *   httpFlush()          - Flush data from a HTTP connection.
+ *   httpFlushWrite()     - Flush data in write buffer.
+ *   httpGet()            - Send a GET request to the server.
+ *   httpGetBlocking()    - Get the blocking/non-block state of a connection.
+ *   httpGetCookie()      - Get any cookie data from the response.
+ *   httpGetFd()          - Get the file descriptor associated with a
+ *                          connection.
+ *   httpGetField()       - Get a field value from a request/response.
+ *   httpGetLength()      - Get the amount of data remaining from the
+ *                          content-length or transfer-encoding fields.
+ *   httpGetLength2()     - Get the amount of data remaining from the
+ *                          content-length or transfer-encoding fields.
+ *   httpGetStatus()      - Get the status of the last HTTP request.
+ *   httpGetSubField()    - Get a sub-field value.
+ *   httpGets()           - Get a line of text from a HTTP connection.
+ *   httpHead()           - Send a HEAD request to the server.
+ *   httpInitialize()     - Initialize the HTTP interface library and set the
+ *                          default HTTP proxy (if any).
+ *   httpOptions()        - Send an OPTIONS request to the server.
+ *   httpPost()           - Send a POST request to the server.
+ *   httpPrintf()         - Print a formatted string to a HTTP connection.
+ *   httpPut()            - Send a PUT request to the server.
+ *   httpRead()           - Read data from a HTTP connection.
+ *   httpRead2()          - Read data from a HTTP connection.
+ *   _httpReadCDSA()      - Read function for CDSA decryption code.
+ *   httpReconnect()      - Reconnect to a HTTP server...
+ *   httpSetCookie()      - Set the cookie value(s)...
+ *   httpSetExpect()      - Set the Expect: header in a request.
+ *   httpSetField()       - Set the value of an HTTP header.
+ *   httpSetLength()      - Set the content-length and transfer-encoding.
+ *   httpTrace()          - Send an TRACE request to the server.
+ *   httpUpdate()         - Update the current HTTP state for incoming data.
+ *   httpWait()           - Wait for data available on a connection.
+ *   httpWrite()          - Write data to a HTTP connection.
+ *   httpWrite2()         - Write data to a HTTP connection.
+ *   _httpWriteCDSA()     - Write function for CDSA encryption code.
+ *   http_field()         - Return the field index for a field name.
+ *   http_read_ssl()      - Read from a SSL/TLS connection.
+ *   http_send()          - Send a request with all fields and the trailing
+ *                          blank line.
+ *   http_setup_ssl()     - Set up SSL/TLS on a connection.
+ *   http_shutdown_ssl()  - Shut down SSL/TLS on a connection.
+ *   http_upgrade()       - Force upgrade to TLS encryption.
+ *   http_wait()          - Wait for data available on a connection.
+ *   http_write()         - Write data to a connection.
+ *   http_write_ssl()     - Write to a SSL/TLS connection.
  */
 
 /*
  * Include necessary headers...
  */
 
-#include <stdio.h>
+#include "http-private.h"
+#include "globals.h"
+#include "debug.h"
 #include <stdlib.h>
-#include <stdarg.h>
-#include <ctype.h>
-#include "string.h"
 #include <fcntl.h>
 #include <errno.h>
-
-#include "http.h"
-#include "ipp.h"
-#include "debug.h"
-
-#if !defined(WIN32) && !defined(__EMX__)
+#ifndef WIN32
 #  include <signal.h>
-#endif /* !WIN32 && !__EMX__ */
+#  include <sys/time.h>
+#  include <sys/resource.h>
+#endif /* !WIN32 */
+
 
 /*
  * Some operating systems have done away with the Fxxxx constants for
 static http_field_t    http_field(const char *name);
 static int             http_send(http_t *http, http_state_t request,
                                  const char *uri);
+static int             http_wait(http_t *http, int msec);
+static int             http_write(http_t *http, const char *buffer,
+                                  int length);
+static int             http_write_chunk(http_t *http, const char *buffer,
+                                        int length);
+#ifdef HAVE_SSL
+static int             http_read_ssl(http_t *http, char *buf, int len);
+static int             http_setup_ssl(http_t *http);
+static void            http_shutdown_ssl(http_t *http);
+static int             http_upgrade(http_t *http);
+static int             http_write_ssl(http_t *http, const char *buf, int len);
+#endif /* HAVE_SSL */
 
 
 /*
  * Local globals...
  */
 
-static const char      *http_fields[] =
+static const char * const http_fields[] =
                        {
                          "Accept-Language",
                          "Accept-Ranges",
@@ -131,64 +166,18 @@ static const char *http_fields[] =
                          "User-Agent",
                          "WWW-Authenticate"
                        };
-static const char      *days[7] =
-                       {
-                         "Sun",
-                         "Mon",
-                         "Tue",
-                         "Wed",
-                         "Thu",
-                         "Fri",
-                         "Sat"
-                       };
-static const char      *months[12] =
-                       {
-                         "Jan",
-                         "Feb",
-                         "Mar",
-                         "Apr",
-                         "May",
-                         "Jun",
-                         "Jul",
-                         "Aug",
-                         "Sep",
-                         "Oct",
-                         "Nov",
-                         "Dec"
-                       };
 
 
 /*
- * 'httpInitialize()' - Initialize the HTTP interface library and set the
- *                      default HTTP proxy (if any).
+ * 'httpBlocking()' - Set blocking/non-blocking behavior on a connection.
  */
 
 void
-httpInitialize(void)
+httpBlocking(http_t *http,             /* I - HTTP connection */
+             int    b)                 /* I - 1 = blocking, 0 = non-blocking */
 {
-#if defined(WIN32) || defined(__EMX__)
-  WSADATA      winsockdata;    /* WinSock data */
-  static int   initialized = 0;/* Has WinSock been initialized? */
-
-
-  if (!initialized)
-    WSAStartup(MAKEWORD(1,1), &winsockdata);
-#elif defined(HAVE_SIGSET)
-  sigset(SIGPIPE, SIG_IGN);
-#elif defined(HAVE_SIGACTION)
-  struct sigaction     action; /* POSIX sigaction data */
-
-
- /*
-  * Ignore SIGPIPE signals...
-  */
-
-  memset(&action, 0, sizeof(action));
-  action.sa_handler = SIG_IGN;
-  sigaction(SIGPIPE, &action, NULL);
-#else
-  signal(SIGPIPE, SIG_IGN);
-#endif /* WIN32 || __EMX__ */
+  if (http)
+    http->blocking = b;
 }
 
 
@@ -196,34 +185,47 @@ httpInitialize(void)
  * 'httpCheck()' - Check to see if there is a pending response from the server.
  */
 
-int                            /* O - 0 = no data, 1 = data available */
-httpCheck(http_t *http)                /* I - HTTP connection */
+int                                    /* O - 0 = no data, 1 = data available */
+httpCheck(http_t *http)                        /* I - HTTP connection */
 {
-  fd_set       input;          /* Input set for select() */
-  struct timeval timeout;      /* Timeout */
+  return (httpWait(http, 0));
+}
 
 
- /*
-  * First see if there is data in the buffer...
-  */
+/*
+ * 'httpClearCookie()' - Clear the cookie value(s).
+ *
+ * @since CUPS 1.1.19@
+ */
 
-  if (http == NULL)
-    return (0);
+void
+httpClearCookie(http_t *http)          /* I - HTTP connection */
+{
+  if (!http)
+    return;
 
-  if (http->used)
-    return (1);
+  if (http->cookie)
+  {
+    free(http->cookie);
+    http->cookie = NULL;
+  }
+}
 
- /*
-  * Then try doing a select() to poll the socket...
-  */
 
-  FD_ZERO(&input);
-  FD_SET(http->fd, &input);
+/*
+ * 'httpClearFields()' - Clear HTTP request fields.
+ */
 
-  timeout.tv_sec  = 0;
-  timeout.tv_usec = 0;
+void
+httpClearFields(http_t *http)          /* I - HTTP connection */
+{
+  if (http)
+  {
+    memset(http->fields, 0, sizeof(http->fields));
+    httpSetField(http, HTTP_FIELD_HOST, http->hostname);
 
-  return (select(http->fd + 1, &input, NULL, NULL, &timeout) > 0);
+    http->expect = (http_status_t)0;
+  }
 }
 
 
@@ -232,11 +234,26 @@ httpCheck(http_t *http)           /* I - HTTP connection */
  */
 
 void
-httpClose(http_t *http)                /* I - Connection to close */
+httpClose(http_t *http)                        /* I - HTTP connection */
 {
-  if (http == NULL)
+  DEBUG_printf(("httpClose(http=%p)\n", http));
+
+  if (!http)
     return;
 
+  httpAddrFreeList(http->addrlist);
+
+  if (http->input_set)
+    free(http->input_set);
+
+  if (http->cookie)
+    free(http->cookie);
+
+#ifdef HAVE_SSL
+  if (http->tls)
+    http_shutdown_ssl(http);
+#endif /* HAVE_SSL */
+
 #ifdef WIN32
   closesocket(http->fd);
 #else
@@ -251,15 +268,45 @@ httpClose(http_t *http)           /* I - Connection to close */
  * 'httpConnect()' - Connect to a HTTP server.
  */
 
-http_t *                       /* O - New HTTP connection */
-httpConnect(const char *host,  /* I - Host to connect to */
-            int        port)   /* I - Port number */
+http_t *                               /* O - New HTTP connection */
+httpConnect(const char *host,          /* I - Host to connect to */
+            int        port)           /* I - Port number */
+{
+  http_encryption_t    encryption;     /* Type of encryption to use */
+
+
+ /*
+  * Set the default encryption status...
+  */
+
+  if (port == 443)
+    encryption = HTTP_ENCRYPT_ALWAYS;
+  else
+    encryption = HTTP_ENCRYPT_IF_REQUESTED;
+
+  return (httpConnectEncrypt(host, port, encryption));
+}
+
+
+/*
+ * 'httpConnectEncrypt()' - Connect to a HTTP server using encryption.
+ */
+
+http_t *                               /* O - New HTTP connection */
+httpConnectEncrypt(
+    const char        *host,           /* I - Host to connect to */
+    int               port,            /* I - Port number */
+    http_encryption_t encryption)      /* I - Type of encryption to use */
 {
   http_t               *http;          /* New HTTP connection */
-  struct hostent       *hostaddr;      /* Host address data */
+  http_addrlist_t      *addrlist;      /* Host address data */
+  char                 service[255];   /* Service name */
+
 
+  DEBUG_printf(("httpConnectEncrypt(host=\"%s\", port=%d, encryption=%d)\n",
+                host ? host : "(null)", port, encryption));
 
-  if (host == NULL)
+  if (!host)
     return (NULL);
 
   httpInitialize();
@@ -268,7 +315,9 @@ httpConnect(const char *host,       /* I - Host to connect to */
   * Lookup the host...
   */
 
-  if ((hostaddr = gethostbyname(host)) == NULL)
+  sprintf(service, "%d", port);
+
+  if ((addrlist = httpAddrGetList(host, AF_UNSPEC, service)) == NULL)
     return (NULL);
 
  /*
@@ -282,316 +331,184 @@ httpConnect(const char *host,   /* I - Host to connect to */
   http->version  = HTTP_1_1;
   http->blocking = 1;
   http->activity = time(NULL);
+  http->fd       = -1;
 
  /*
-  * Copy the hostname and port and then "reconnect"...
+  * Set the encryption status...
   */
 
-  strncpy(http->hostname, host, sizeof(http->hostname) - 1);
-  memcpy((char *)&(http->hostaddr.sin_addr), hostaddr->h_addr, hostaddr->h_length);
-  http->hostaddr.sin_family = hostaddr->h_addrtype;
-#ifdef WIN32
-  http->hostaddr.sin_port   = htons((u_short)port);
-#else
-  http->hostaddr.sin_port   = htons(port);
-#endif /* WIN32 */
-  if (httpReconnect(http))
-  {
-    free(http);
-    return (NULL);
-  }
+  if (port == 443)                     /* Always use encryption for https */
+    http->encryption = HTTP_ENCRYPT_ALWAYS;
   else
-    return (http);
-}
-
-
-/*
- * 'httpReconnect()' - Reconnect to a HTTP server...
- */
-
-int                            /* O - 0 on success, non-zero on failure */
-httpReconnect(http_t *http)    /* I - HTTP data */
-{
-  int  val;                    /* Socket option value */
-
+    http->encryption = encryption;
 
  /*
-  * Close any previously open socket...
+  * Loop through the addresses we have until one of them connects...
   */
 
-  if (http->fd)
-#ifdef WIN32
-    closesocket(http->fd);
-#else
-    close(http->fd);
-#endif /* WIN32 */
+  strlcpy(http->hostname, host, sizeof(http->hostname));
 
  /*
-  * Create the socket and set options to allow reuse.
+  * Connect to the remote system...
   */
 
-  if ((http->fd = socket(AF_INET, SOCK_STREAM, 0)) < 0)
-  {
-#if defined(WIN32) || defined(__EMX__)
-    http->error  = WSAGetLastError();
-#else
-    http->error  = errno;
-#endif /* WIN32 || __EMX__ */
-    http->status = HTTP_ERROR;
-    return (-1);
-  }
-
-#ifdef FD_CLOEXEC
-  fcntl(http->fd, F_SETFD, FD_CLOEXEC);        /* Close this socket when starting *
-                                        * other processes...              */
-#endif /* FD_CLOEXEC */
+  http->addrlist = addrlist;
 
-  val = 1;
-  setsockopt(http->fd, SOL_SOCKET, SO_REUSEADDR, (char *)&val, sizeof(val));
-
-#ifdef SO_REUSEPORT
-  val = 1;
-  setsockopt(http->fd, SOL_SOCKET, SO_REUSEPORT, &val, sizeof(val));
-#endif /* SO_REUSEPORT */
+  if (!httpReconnect(http))
+    return (http);
 
  /*
-  * Connect to the server...
+  * Could not connect to any known address - bail out!
   */
 
-  if (connect(http->fd, (struct sockaddr *)&(http->hostaddr),
-              sizeof(http->hostaddr)) < 0)
-  {
-#if defined(WIN32) || defined(__EMX__)
-    http->error  = WSAGetLastError();
-#else
-    http->error  = errno;
-#endif /* WIN32 || __EMX__ */
-    http->status = HTTP_ERROR;
-
-#ifdef WIN32
-    closesocket(http->fd);
-#else
-    close(http->fd);
-#endif
-
-    return (-1);
-  }
+  httpAddrFreeList(addrlist);
 
-  http->error  = 0;
-  http->status = HTTP_CONTINUE;
+  free(http);
 
-  return (0);
+  return (NULL);
 }
 
 
 /*
- * 'httpSeparate()' - Separate a Universal Resource Identifier into its
- *                    components.
+ * 'httpDelete()' - Send a DELETE request to the server.
  */
 
-void
-httpSeparate(const char *uri,          /* I - Universal Resource Identifier */
-             char       *method,       /* O - Method [32] (http, https, etc.) */
-            char       *username,      /* O - Username [32] */
-            char       *host,          /* O - Hostname [32] */
-            int        *port,          /* O - Port number to use */
-             char       *resource)     /* O - Resource/filename [1024] */
+int                                    /* O - Status of call (0 = success) */
+httpDelete(http_t     *http,           /* I - HTTP connection */
+           const char *uri)            /* I - URI to delete */
 {
-  char *ptr;                   /* Pointer into string... */
+  return (http_send(http, HTTP_DELETE, uri));
+}
 
 
-  if (uri == NULL || method == NULL || username == NULL || host == NULL ||
-      port == NULL || resource == NULL)
-    return;
+/*
+ * 'httpEncryption()' - Set the required encryption on the link.
+ */
 
- /*
-  * Grab the method portion of the URI...
-  */
+int                                    /* O - -1 on error, 0 on success */
+httpEncryption(http_t            *http,        /* I - HTTP connection */
+               http_encryption_t e)    /* I - New encryption preference */
+{
+  DEBUG_printf(("httpEncryption(http=%p, e=%d)\n", http, e));
 
-  if (strncmp(uri, "//", 2) == 0)
-  {
-   /*
-    * Workaround for HP IPP client bug...
-    */
+#ifdef HAVE_SSL
+  if (!http)
+    return (0);
 
-    strcpy(method, "ipp");
-  }
+  http->encryption = e;
+
+  if ((http->encryption == HTTP_ENCRYPT_ALWAYS && !http->tls) ||
+      (http->encryption == HTTP_ENCRYPT_NEVER && http->tls))
+    return (httpReconnect(http));
+  else if (http->encryption == HTTP_ENCRYPT_REQUIRED && !http->tls)
+    return (http_upgrade(http));
   else
-  {
-   /*
-    * Standard URI with method...
-    */
+    return (0);
+#else
+  if (e == HTTP_ENCRYPT_ALWAYS || e == HTTP_ENCRYPT_REQUIRED)
+    return (-1);
+  else
+    return (0);
+#endif /* HAVE_SSL */
+}
 
-    ptr = host;
-    while (*uri != ':' && *uri != '\0')
-      *ptr++ = *uri++;
 
-    *ptr = '\0';
-    if (*uri == ':')
-      uri ++;
+/*
+ * 'httpError()' - Get the last error on a connection.
+ */
 
-   /*
-    * If the method contains a period or slash, then it's probably
-    * hostname/filename...
-    */
+int                                    /* O - Error code (errno) value */
+httpError(http_t *http)                        /* I - HTTP connection */
+{
+  if (http)
+    return (http->error);
+  else
+    return (EINVAL);
+}
 
-    if (strchr(host, '.') != NULL || strchr(host, '/') != NULL || *uri == '\0')
-    {
-      if ((ptr = strchr(host, '/')) != NULL)
-      {
-       strncpy(resource, ptr, HTTP_MAX_URI - 1);
-       resource[HTTP_MAX_URI - 1] = '\0';
-       *ptr = '\0';
-      }
-      else
-       resource[0] = '\0';
 
-      if (isdigit(*uri))
-      {
-       /*
-       * OK, we have "hostname:port[/resource]"...
-       */
+/*
+ * 'httpFlush()' - Flush data from a HTTP connection.
+ */
 
-       *port = strtol(uri, (char **)&uri, 10);
+void
+httpFlush(http_t *http)                        /* I - HTTP connection */
+{
+  char buffer[8192];                   /* Junk buffer */
+  int  blocking;                       /* To block or not to block */
 
-       if (*uri == '/')
-       {
-          strncpy(resource, uri, HTTP_MAX_URI - 1);
-          resource[HTTP_MAX_URI - 1] = '\0';
-       }
-      }
-      else
-       *port = 631;
 
-      strcpy(method, "http");
-      username[0] = '\0';
-      return;
-    }
-    else
-    {
-      strncpy(method, host, 31);
-      method[31] = '\0';
-    }
-  }
+  DEBUG_printf(("httpFlush(http=%p), state=%d\n", http, http->state));
 
  /*
-  * If the method starts with less than 2 slashes then it is a local resource...
+  * Temporarily set non-blocking mode so we don't get stuck in httpRead()...
   */
 
-  if (strncmp(uri, "//", 2) != 0)
-  {
-    strncpy(resource, uri, 1023);
-    resource[1023] = '\0';
-
-    username[0] = '\0';
-    host[0]     = '\0';
-    *port       = 0;
-    return;
-  }
+  blocking = http->blocking;
+  http->blocking = 0;
 
  /*
-  * Grab the hostname...
+  * Read any data we can...
   */
 
-  while (*uri == '/')
-    uri ++;
+  while (httpRead2(http, buffer, sizeof(buffer)) > 0);
 
-  ptr = host;
-  while (!(*uri == ':' && isdigit(uri[1])) && *uri != '@' && *uri != '/' && *uri != '\0')
-    *ptr ++ = *uri ++;
+ /*
+  * Restore blocking and reset the connection if we didn't get all of
+  * the remaining data...
+  */
 
-  *ptr = '\0';
+  http->blocking = blocking;
 
-  if (*uri == '@')
+  if (http->state != HTTP_WAITING && http->fd >= 0)
   {
    /*
-    * Got a username...
+    * Didn't get the data back, so close the current connection.
     */
 
-    strncpy(username, host, 31);
-    username[31] = '\0';
-    
-    ptr = host;
-    uri ++;
-    while (*uri != ':' && *uri != '/' && *uri != '\0')
-      *ptr ++ = *uri ++;
-
-    *ptr = '\0';
-  }
-  else
-    username[0] = '\0';
-
-  if (*uri != ':')
-  {
-    if (strcasecmp(method, "http") == 0)
-      *port = 80;
-    else if (strcasecmp(method, "https") == 0)
-      *port = 443;
-    else if (strcasecmp(method, "ipp") == 0)   /* Not registered yet... */
-      *port = ippPort();
-    else if (strcasecmp(method, "socket") == 0)        /* Not registered yet... */
-      *port = 9100;
-    else
-      *port = 0;
-  }
-  else
-  {
-   /*
-    * Parse port number...
-    */
+    http->state = HTTP_WAITING;
 
-    *port = 0;
-    uri ++;
-    while (isdigit(*uri))
-    {
-      *port = (*port * 10) + *uri - '0';
-      uri ++;
-    }
-  }
+#ifdef HAVE_SSL
+    if (http->tls)
+      http_shutdown_ssl(http);
+#endif /* HAVE_SSL */
 
-  if (*uri == '\0')
-  {
-   /*
-    * Hostname but no port or path...
-    */
+#ifdef WIN32
+    closesocket(http->fd);
+#else
+    close(http->fd);
+#endif /* WIN32 */
 
-    resource[0] = '/';
-    resource[1] = '\0';
-    return;
+    http->fd = -1;
   }
-
- /*
-  * The remaining portion is the resource string...
-  */
-
-  strncpy(resource, uri, HTTP_MAX_URI - 1);
-  resource[HTTP_MAX_URI - 1] = '\0';
 }
 
 
 /*
- * 'httpSetField()' - Set the value of an HTTP header.
+ * 'httpFlushWrite()' - Flush data in write buffer.
+ *
+ * @since CUPS 1.2@
  */
 
-void
-httpSetField(http_t       *http,       /* I - HTTP data */
-             http_field_t field,       /* I - Field index */
-            const char   *value)       /* I - Value */
+int                                    /* O - Bytes written or -1 on error */
+httpFlushWrite(http_t *http)           /* I - HTTP connection */
 {
-  strncpy(http->fields[field], value, HTTP_MAX_VALUE - 1);
-  http->fields[field][HTTP_MAX_VALUE - 1] = '\0';
-}
+  int  bytes;                          /* Bytes written */
 
 
-/*
- * 'httpDelete()' - Send a DELETE request to the server.
- */
+  DEBUG_printf(("httpFlushWrite(http=%p)\n", http));
 
-int                                    /* O - Status of call (0 = success) */
-httpDelete(http_t     *http,           /* I - HTTP data */
-           const char *uri)            /* I - URI to delete */
-{
-  return (http_send(http, HTTP_DELETE, uri));
+  if (!http || !http->wused)
+    return (0);
+
+  if (http->data_encoding == HTTP_ENCODE_CHUNKED)
+    bytes = http_write_chunk(http, http->wbuffer, http->wused);
+  else
+    bytes = http_write(http, http->wbuffer, http->wused);
+
+  http->wused = 0;
+
+  return (bytes);
 }
 
 
@@ -600,7 +517,7 @@ httpDelete(http_t     *http,                /* I - HTTP data */
  */
 
 int                                    /* O - Status of call (0 = success) */
-httpGet(http_t     *http,              /* I - HTTP data */
+httpGet(http_t     *http,              /* I - HTTP connection */
         const char *uri)               /* I - URI to get */
 {
   return (http_send(http, HTTP_GET, uri));
@@ -608,275 +525,294 @@ httpGet(http_t     *http,               /* I - HTTP data */
 
 
 /*
- * 'httpHead()' - Send a HEAD request to the server.
+ * 'httpGetBlocking()' - Get the blocking/non-block state of a connection.
+ *
+ * @since CUPS 1.2@
  */
 
-int                                    /* O - Status of call (0 = success) */
-httpHead(http_t     *http,             /* I - HTTP data */
-         const char *uri)              /* I - URI for head */
+int                                    /* O - 1 if blocking, 0 if non-blocking */
+httpGetBlocking(http_t *http)          /* I - HTTP connection */
 {
-  return (http_send(http, HTTP_HEAD, uri));
+  return (http ? http->blocking : 0);
 }
 
 
 /*
- * 'httpOptions()' - Send an OPTIONS request to the server.
+ * 'httpGetCookie()' - Get any cookie data from the response.
  */
 
-int                                    /* O - Status of call (0 = success) */
-httpOptions(http_t     *http,          /* I - HTTP data */
-            const char *uri)           /* I - URI for options */
+const char *                           /* O - Cookie data or NULL */
+httpGetCookie(http_t *http)            /* I - HTTP connecion */
 {
-  return (http_send(http, HTTP_OPTIONS, uri));
+  return (http ? http->cookie : NULL);
 }
 
 
 /*
- * 'httpPost()' - Send a POST request to the server.
+ * 'httpGetFd()' - Get the file descriptor associated with a connection.
+ *
+ * @since CUPS 1.2@
  */
 
-int                                    /* O - Status of call (0 = success) */
-httpPost(http_t     *http,             /* I - HTTP data */
-         const char *uri)              /* I - URI for post */
+int                                    /* O - File descriptor or -1 if none */
+httpGetFd(http_t *http)                        /* I - HTTP connection */
 {
-  httpGetLength(http);
-
-  return (http_send(http, HTTP_POST, uri));
+  return (http ? http->fd : -1);
 }
 
 
 /*
- * 'httpPut()' - Send a PUT request to the server.
+ * 'httpGetField()' - Get a field value from a request/response.
  */
 
-int                                    /* O - Status of call (0 = success) */
-httpPut(http_t     *http,              /* I - HTTP data */
-        const char *uri)               /* I - URI to put */
+const char *                           /* O - Field value */
+httpGetField(http_t       *http,       /* I - HTTP connection */
+             http_field_t field)       /* I - Field to get */
 {
-  httpGetLength(http);
-
-  return (http_send(http, HTTP_PUT, uri));
+  if (!http || field <= HTTP_FIELD_UNKNOWN || field >= HTTP_FIELD_MAX)
+    return (NULL);
+  else
+    return (http->fields[field]);
 }
 
 
 /*
- * 'httpTrace()' - Send an TRACE request to the server.
+ * 'httpGetLength()' - Get the amount of data remaining from the
+ *                     content-length or transfer-encoding fields.
+ *
+ * This function is deprecated and will not return lengths larger than
+ * 2^31 - 1; use httpGetLength2() instead.
+ *
+ * @deprecated@
  */
 
-int                                    /* O - Status of call (0 = success) */
-httpTrace(http_t     *http,            /* I - HTTP data */
-          const char *uri)             /* I - URI for trace */
+int                                    /* O - Content length */
+httpGetLength(http_t *http)            /* I - HTTP connection */
 {
-  return (http_send(http, HTTP_TRACE, uri));
+ /*
+  * Get the read content length and return the 32-bit value.
+  */
+
+  if (http)
+  {
+    httpGetLength2(http);
+
+    return (http->_data_remaining);
+  }
+  else
+    return (-1);
 }
 
 
 /*
- * 'httpFlush()' - Flush data from a HTTP connection.
+ * 'httpGetLength2()' - Get the amount of data remaining from the
+ *                      content-length or transfer-encoding fields.
+ *
+ * This function returns the complete content length, even for
+ * content larger than 2^31 - 1.
+ *
+ * @since CUPS 1.2@
  */
 
-void
-httpFlush(http_t *http)        /* I - HTTP data */
+off_t                                  /* O - Content length */
+httpGetLength2(http_t *http)           /* I - HTTP connection */
 {
-  char buffer[8192];   /* Junk buffer */
+  DEBUG_printf(("httpGetLength2(http=%p), state=%d\n", http, http->state));
+
+  if (!http)
+    return (-1);
+
+  if (!strcasecmp(http->fields[HTTP_FIELD_TRANSFER_ENCODING], "chunked"))
+  {
+    DEBUG_puts("httpGetLength2: chunked request!");
+
+    http->data_encoding  = HTTP_ENCODE_CHUNKED;
+    http->data_remaining = 0;
+  }
+  else
+  {
+    http->data_encoding = HTTP_ENCODE_LENGTH;
+
+   /*
+    * The following is a hack for HTTP servers that don't send a
+    * content-length or transfer-encoding field...
+    *
+    * If there is no content-length then the connection must close
+    * after the transfer is complete...
+    */
+
+    if (http->fields[HTTP_FIELD_CONTENT_LENGTH][0] == '\0')
+      http->data_remaining = 2147483647;
+    else
+      http->data_remaining = strtoll(http->fields[HTTP_FIELD_CONTENT_LENGTH],
+                                     NULL, 10);
+
+    DEBUG_printf(("httpGetLength2: content_length=" CUPS_LLFMT "\n",
+                  CUPS_LLCAST http->data_remaining));
+  }
 
+  if (http->data_remaining <= INT_MAX)
+    http->_data_remaining = (int)http->data_remaining;
+  else
+    http->_data_remaining = INT_MAX;
 
-  while (httpRead(http, buffer, sizeof(buffer)) > 0);
+  return (http->data_remaining);
 }
 
 
 /*
- * 'httpRead()' - Read data from a HTTP connection.
+ * 'httpGetStatus()' - Get the status of the last HTTP request.
+ *
+ * @since CUPS 1.2@
  */
 
-int                                    /* O - Number of bytes read */
-httpRead(http_t *http,                 /* I - HTTP data */
-         char   *buffer,               /* I - Buffer for data */
-        int    length)                 /* I - Maximum number of bytes */
+http_status_t                          /* O - HTTP status */
+httpGetStatus(http_t *http)            /* I - HTTP connection */
 {
-  int          bytes;                  /* Bytes read */
-  char         len[32];                /* Length string */
+  return (http ? http->status : HTTP_ERROR);
+}
 
 
-  DEBUG_printf(("httpRead(%08x, %08x, %d)\n", http, buffer, length));
+/*
+ * 'httpGetSubField()' - Get a sub-field value.
+ *
+ * @deprecated@
+ */
 
-  if (http == NULL || buffer == NULL)
-    return (-1);
+char *                                 /* O - Value or NULL */
+httpGetSubField(http_t       *http,    /* I - HTTP connection */
+                http_field_t field,    /* I - Field index */
+                const char   *name,    /* I - Name of sub-field */
+               char         *value)    /* O - Value string */
+{
+  return (httpGetSubField2(http, field, name, value, HTTP_MAX_VALUE));
+}
 
-  http->activity = time(NULL);
 
-  if (length <= 0)
-    return (0);
+/*
+ * 'httpGetSubField2()' - Get a sub-field value.
+ *
+ * @since CUPS 1.2@
+ */
 
-  if (http->data_encoding == HTTP_ENCODE_CHUNKED &&
-      http->data_remaining <= 0)
-  {
-    DEBUG_puts("httpRead: Getting chunk length...");
+char *                                 /* O - Value or NULL */
+httpGetSubField2(http_t       *http,   /* I - HTTP connection */
+                 http_field_t field,   /* I - Field index */
+                 const char   *name,   /* I - Name of sub-field */
+                char         *value,   /* O - Value string */
+                int          valuelen) /* I - Size of value buffer */
+{
+  const char   *fptr;                  /* Pointer into field */
+  char         temp[HTTP_MAX_VALUE],   /* Temporary buffer for name */
+               *ptr,                   /* Pointer into string buffer */
+               *end;                   /* End of value buffer */
 
-    if (httpGets(len, sizeof(len), http) == NULL)
-    {
-      DEBUG_puts("httpRead: Could not get length!");
-      return (0);
-    }
+  DEBUG_printf(("httpGetSubField2(http=%p, field=%d, name=\"%s\", value=%p, valuelen=%d)\n",
+                http, field, name, value, valuelen));
 
-    http->data_remaining = strtol(len, NULL, 16);
-  }
+  if (!http || !name || !value || valuelen < 2 ||
+      field <= HTTP_FIELD_UNKNOWN || field >= HTTP_FIELD_MAX)
+    return (NULL);
 
-  DEBUG_printf(("httpRead: data_remaining = %d\n", http->data_remaining));
+  end = value + valuelen - 1;
 
-  if (http->data_remaining == 0)
+  for (fptr = http->fields[field]; *fptr;)
   {
    /*
-    * A zero-length chunk ends a transfer; unless we are reading POST
-    * data, go idle...
+    * Skip leading whitespace...
     */
 
-    if (http->data_encoding == HTTP_ENCODE_CHUNKED)
-      httpGets(len, sizeof(len), http);
-
-    if (http->state == HTTP_POST_RECV)
-      http->state ++;
-    else
-      http->state = HTTP_WAITING;
-
-    return (0);
-  }
-  else if (length > http->data_remaining)
-    length = http->data_remaining;
-
-  if (http->used > 0)
-  {
-    if (length > http->used)
-      length = http->used;
-
-    bytes = length;
-
-    DEBUG_printf(("httpRead: grabbing %d bytes from input buffer...\n", bytes));
+    while (isspace(*fptr & 255))
+      fptr ++;
 
-    memcpy(buffer, http->buffer, length);
-    http->used -= length;
+    if (*fptr == ',')
+    {
+      fptr ++;
+      continue;
+    }
 
-    if (http->used > 0)
-      memcpy(http->buffer, http->buffer + length, http->used);
-  }
-  else
-  {
-    DEBUG_printf(("httpRead: reading %d bytes from socket...\n", length));
-    bytes = recv(http->fd, buffer, length, 0);
-    DEBUG_printf(("httpRead: read %d bytes from socket...\n", bytes));
-  }
+   /*
+    * Get the sub-field name...
+    */
 
-  if (bytes > 0)
-    http->data_remaining -= bytes;
-  else if (bytes < 0)
-#if defined(WIN32) || defined(__EMX__)
-    http->error = WSAGetLastError();
-#else
-    http->error = errno;
-#endif /* WIN32 || __EMX__ */
+    for (ptr = temp;
+         *fptr && *fptr != '=' && !isspace(*fptr & 255) &&
+            ptr < (temp + sizeof(temp) - 1);
+         *ptr++ = *fptr++);
 
-  if (http->data_remaining == 0)
-  {
-    if (http->data_encoding == HTTP_ENCODE_CHUNKED)
-      httpGets(len, sizeof(len), http);
+    *ptr = '\0';
 
-    if (http->data_encoding != HTTP_ENCODE_CHUNKED)
-    {
-      if (http->state == HTTP_POST_RECV)
-       http->state ++;
-      else
-       http->state = HTTP_WAITING;
-    }
-  }
+    DEBUG_printf(("httpGetSubField: name=\"%s\"\n", temp));
 
-  return (bytes);
-}
+   /*
+    * Skip trailing chars up to the '='...
+    */
 
+    while (isspace(*fptr & 255))
+      fptr ++;
 
-/*
- * 'httpWrite()' - Write data to a HTTP connection.
- */
-int                                    /* O - Number of bytes written */
-httpWrite(http_t     *http,            /* I - HTTP data */
-          const char *buffer,          /* I - Buffer for data */
-         int        length)            /* I - Number of bytes to write */
-{
-  int  tbytes,                         /* Total bytes sent */
-       bytes;                          /* Bytes sent */
+    if (!*fptr)
+      break;
 
+    if (*fptr != '=')
+      continue;
 
-  if (http == NULL || buffer == NULL)
-    return (-1);
+   /*
+    * Skip = and leading whitespace...
+    */
 
-  http->activity = time(NULL);
+    fptr ++;
 
-  if (http->data_encoding == HTTP_ENCODE_CHUNKED)
-  {
-    if (httpPrintf(http, "%x\r\n", length) < 0)
-      return (-1);
+    while (isspace(*fptr & 255))
+      fptr ++;
 
-    if (length == 0)
+    if (*fptr == '\"')
     {
      /*
-      * A zero-length chunk ends a transfer; unless we are sending POST
-      * data, go idle...
+      * Read quoted string...
       */
 
-      DEBUG_puts("httpWrite: changing states...");
+      for (ptr = value, fptr ++;
+           *fptr && *fptr != '\"' && ptr < end;
+          *ptr++ = *fptr++);
 
-      if (http->state == HTTP_POST_RECV)
-       http->state ++;
-      else
-       http->state = HTTP_WAITING;
+      *ptr = '\0';
 
-      if (httpPrintf(http, "\r\n") < 0)
-       return (-1);
+      while (*fptr && *fptr != '\"')
+        fptr ++;
 
-      return (0);
+      if (*fptr)
+        fptr ++;
     }
-  }
+    else
+    {
+     /*
+      * Read unquoted string...
+      */
 
-  tbytes = 0;
+      for (ptr = value;
+           *fptr && !isspace(*fptr & 255) && *fptr != ',' && ptr < end;
+          *ptr++ = *fptr++);
 
-  while (length > 0)
-  {
-    bytes = send(http->fd, buffer, length, 0);
-    if (bytes < 0)
-    {
-      DEBUG_puts("httpWrite: error writing data...\n");
+      *ptr = '\0';
 
-      return (-1);
+      while (*fptr && !isspace(*fptr & 255) && *fptr != ',')
+        fptr ++;
     }
 
-    buffer += bytes;
-    tbytes += bytes;
-    length -= bytes;
-    if (http->data_encoding == HTTP_ENCODE_LENGTH)
-      http->data_remaining -= bytes;
-  }
-
-  if (http->data_encoding == HTTP_ENCODE_CHUNKED)
-    if (httpPrintf(http, "\r\n") < 0)
-      return (-1);
+    DEBUG_printf(("httpGetSubField: value=\"%s\"\n", value));
 
-  if (http->data_remaining == 0 && http->data_encoding == HTTP_ENCODE_LENGTH)
-  {
    /*
-    * Finished with the transfer; unless we are sending POST data, go idle...
+    * See if this is the one...
     */
 
-    DEBUG_puts("httpWrite: changing states...");
-
-    if (http->state == HTTP_POST_RECV)
-      http->state ++;
-    else
-      http->state = HTTP_WAITING;
+    if (!strcmp(name, temp))
+      return (value);
   }
 
-  DEBUG_printf(("httpWrite: wrote %d bytes...\n", tbytes));
+  value[0] = '\0';
 
-  return (tbytes);
+  return (NULL);
 }
 
 
@@ -887,660 +823,1936 @@ httpWrite(http_t     *http,            /* I - HTTP data */
 char *                                 /* O - Line or NULL */
 httpGets(char   *line,                 /* I - Line to read into */
          int    length,                        /* I - Max length of buffer */
-        http_t *http)                  /* I - HTTP data */
+        http_t *http)                  /* I - HTTP connection */
 {
   char *lineptr,                       /* Pointer into line */
+       *lineend,                       /* End of line */
        *bufptr,                        /* Pointer into input buffer */
        *bufend;                        /* Pointer to end of buffer */
-  int  bytes;                          /* Number of bytes read */
+  int  bytes,                          /* Number of bytes read */
+       eol;                            /* End-of-line? */
 
 
-  DEBUG_printf(("httpGets(%08x, %d, %08x)\n", line, length, http));
+  DEBUG_printf(("httpGets(line=%p, length=%d, http=%p)\n", line, length, http));
 
   if (http == NULL || line == NULL)
     return (NULL);
 
  /*
-  * Pre-scan the buffer and see if there is a newline in there...
+  * Read a line from the buffer...
   */
+    
+  lineptr = line;
+  lineend = line + length - 1;
+  eol     = 0;
 
-#if defined(WIN32) || defined(__EMX__)
-  WSASetLastError(0);
-#else
-  errno = 0;
-#endif /* WIN32 || __EMX__ */
-
-  do
+  while (lineptr < lineend)
   {
-    bufptr  = http->buffer;
-    bufend  = http->buffer + http->used;
+   /*
+    * Pre-load the buffer as needed...
+    */
 
-    while (bufptr < bufend)
-      if (*bufptr == 0x0a)
-       break;
-      else
-       bufptr ++;
+#ifdef WIN32
+    WSASetLastError(0);
+#else
+    errno = 0;
+#endif /* WIN32 */
 
-    if (bufptr >= bufend)
+    while (http->used == 0)
     {
      /*
       * No newline; see if there is more data to be read...
       */
 
-      if ((bytes = recv(http->fd, bufend, HTTP_MAX_BUFFER - http->used, 0)) < 0)
+      if (!http->blocking && !http_wait(http, 1000))
+        return (NULL);
+
+#ifdef HAVE_SSL
+      if (http->tls)
+       bytes = http_read_ssl(http, http->buffer + http->used,
+                             HTTP_MAX_BUFFER - http->used);
+      else
+#endif /* HAVE_SSL */
+        bytes = recv(http->fd, http->buffer + http->used,
+                    HTTP_MAX_BUFFER - http->used, 0);
+
+      DEBUG_printf(("httpGets: read %d bytes...\n", bytes));
+
+      if (bytes < 0)
       {
        /*
        * Nope, can't get a line this time...
        */
 
-#if defined(WIN32) || defined(__EMX__)
+#ifdef WIN32
         if (WSAGetLastError() != http->error)
        {
          http->error = WSAGetLastError();
          continue;
        }
 
-        DEBUG_printf(("httpGets(): recv() error %d!\n", WSAGetLastError()));
+        DEBUG_printf(("httpGets: recv() error %d!\n", WSAGetLastError()));
 #else
-        if (errno != http->error)
+        DEBUG_printf(("httpGets: recv() error %d!\n", errno));
+
+        if (errno == EINTR)
+         continue;
+       else if (errno != http->error)
        {
          http->error = errno;
          continue;
        }
-
-        DEBUG_printf(("httpGets(): recv() error %d!\n", errno));
-#endif /* WIN32 || __EMX__ */
+#endif /* WIN32 */
 
         return (NULL);
       }
       else if (bytes == 0)
       {
-        if (http->blocking)
-         http->error = EPIPE;
+       http->error = EPIPE;
 
         return (NULL);
       }
 
      /*
-      * Yup, update the amount used and the end pointer...
+      * Yup, update the amount used...
       */
 
       http->used += bytes;
-      bufend     += bytes;
     }
-  }
-  while (bufptr >= bufend);
 
-  http->activity = time(NULL);
+   /*
+    * Now copy as much of the current line as possible...
+    */
 
- /*
-  * Read a line from the buffer...
-  */
-    
-  lineptr = line;
-  bufptr  = http->buffer;
-  bytes   = 0;
+    for (bufptr = http->buffer, bufend = http->buffer + http->used;
+         lineptr < lineend && bufptr < bufend;)
+    {
+      if (*bufptr == 0x0a)
+      {
+        eol = 1;
+       bufptr ++;
+       break;
+      }
+      else if (*bufptr == 0x0d)
+       bufptr ++;
+      else
+       *lineptr++ = *bufptr++;
+    }
 
-  while (bufptr < bufend && bytes < length)
-  {
-    bytes ++;
+    http->used -= bufptr - http->buffer;
+    if (http->used > 0)
+      memmove(http->buffer, bufptr, http->used);
 
-    if (*bufptr == 0x0a)
+    if (eol)
     {
-      bufptr ++;
-      *lineptr = '\0';
+     /*
+      * End of line...
+      */
 
-      http->used -= bytes;
-      if (http->used > 0)
-       memcpy(http->buffer, bufptr, http->used);
+      http->activity = time(NULL);
+
+      *lineptr = '\0';
+      
+      DEBUG_printf(("httpGets: Returning \"%s\"\n", line));
 
-      DEBUG_printf(("httpGets(): Returning \"%s\"\n", line));
       return (line);
     }
-    else if (*bufptr == 0x0d)
-      bufptr ++;
-    else
-      *lineptr++ = *bufptr++;
   }
 
-  DEBUG_puts("httpGets(): No new line available!");
+  DEBUG_puts("httpGets: No new line available!");
 
   return (NULL);
 }
 
 
 /*
- * 'httpPrintf()' - Print a formatted string to a HTTP connection.
+ * 'httpHead()' - Send a HEAD request to the server.
  */
 
-int                                    /* O - Number of bytes written */
-httpPrintf(http_t     *http,           /* I - HTTP data */
-           const char *format,         /* I - printf-style format string */
-          ...)                         /* I - Additional args as needed */
+int                                    /* O - Status of call (0 = success) */
+httpHead(http_t     *http,             /* I - HTTP connection */
+         const char *uri)              /* I - URI for head */
 {
-  int          bytes,                  /* Number of bytes to write */
-               nbytes,                 /* Number of bytes written */
-               tbytes;                 /* Number of bytes all together */
-  char         buf[HTTP_MAX_BUFFER],   /* Buffer for formatted string */
-               *bufptr;                /* Pointer into buffer */
-  va_list      ap;                     /* Variable argument pointer */
-
+  return (http_send(http, HTTP_HEAD, uri));
+}
+
+
+/*
+ * 'httpInitialize()' - Initialize the HTTP interface library and set the
+ *                      default HTTP proxy (if any).
+ */
+
+void
+httpInitialize(void)
+{
+#ifdef HAVE_LIBSSL
+#  ifndef WIN32
+  struct timeval       curtime;        /* Current time in microseconds */
+#  endif /* !WIN32 */
+  int                  i;              /* Looping var */
+  unsigned char                data[1024];     /* Seed data */
+#endif /* HAVE_LIBSSL */
+
+#ifdef WIN32
+  WSADATA      winsockdata;            /* WinSock data */
+  static int   initialized = 0;        /* Has WinSock been initialized? */
+
+
+  if (!initialized)
+    WSAStartup(MAKEWORD(1,1), &winsockdata);
+#elif !defined(SO_NOSIGPIPE)
+ /*
+  * Ignore SIGPIPE signals...
+  */
+
+#  ifdef HAVE_SIGSET
+  sigset(SIGPIPE, SIG_IGN);
+#  elif defined(HAVE_SIGACTION)
+  struct sigaction     action;         /* POSIX sigaction data */
+
+
+  memset(&action, 0, sizeof(action));
+  action.sa_handler = SIG_IGN;
+  sigaction(SIGPIPE, &action, NULL);
+#  else
+  signal(SIGPIPE, SIG_IGN);
+#  endif /* !SO_NOSIGPIPE */
+#endif /* WIN32 */
+
+#ifdef HAVE_GNUTLS
+  gnutls_global_init();
+#endif /* HAVE_GNUTLS */
+
+#ifdef HAVE_LIBSSL
+  SSL_load_error_strings();
+  SSL_library_init();
+
+ /*
+  * Using the current time is a dubious random seed, but on some systems
+  * it is the best we can do (on others, this seed isn't even used...)
+  */
+
+#ifdef WIN32
+#else
+  gettimeofday(&curtime, NULL);
+  srand(curtime.tv_sec + curtime.tv_usec);
+#endif /* WIN32 */
+
+  for (i = 0; i < sizeof(data); i ++)
+    data[i] = rand(); /* Yes, this is a poor source of random data... */
+
+  RAND_seed(&data, sizeof(data));
+#endif /* HAVE_LIBSSL */
+}
+
+
+/*
+ * 'httpOptions()' - Send an OPTIONS request to the server.
+ */
+
+int                                    /* O - Status of call (0 = success) */
+httpOptions(http_t     *http,          /* I - HTTP connection */
+            const char *uri)           /* I - URI for options */
+{
+  return (http_send(http, HTTP_OPTIONS, uri));
+}
+
+
+/*
+ * 'httpPost()' - Send a POST request to the server.
+ */
+
+int                                    /* O - Status of call (0 = success) */
+httpPost(http_t     *http,             /* I - HTTP connection */
+         const char *uri)              /* I - URI for post */
+{
+  return (http_send(http, HTTP_POST, uri));
+}
+
+
+/*
+ * 'httpPrintf()' - Print a formatted string to a HTTP connection.
+ *
+ * @private@
+ */
+
+int                                    /* O - Number of bytes written */
+httpPrintf(http_t     *http,           /* I - HTTP connection */
+           const char *format,         /* I - printf-style format string */
+          ...)                         /* I - Additional args as needed */
+{
+  int          bytes;                  /* Number of bytes to write */
+  char         buf[16384];             /* Buffer for formatted string */
+  va_list      ap;                     /* Variable argument pointer */
+
+
+  DEBUG_printf(("httpPrintf(http=%p, format=\"%s\", ...)\n", http, format));
+
+  va_start(ap, format);
+  bytes = vsnprintf(buf, sizeof(buf), format, ap);
+  va_end(ap);
+
+  DEBUG_printf(("httpPrintf: %s", buf));
+
+  if (http->wused)
+  {
+    DEBUG_puts("    flushing existing data...");
+
+    if (httpFlushWrite(http) < 0)
+      return (-1);
+  }
+
+  return (http_write(http, buf, bytes));
+}
+
+
+/*
+ * 'httpPut()' - Send a PUT request to the server.
+ */
+
+int                                    /* O - Status of call (0 = success) */
+httpPut(http_t     *http,              /* I - HTTP connection */
+        const char *uri)               /* I - URI to put */
+{
+  return (http_send(http, HTTP_PUT, uri));
+}
+
+
+/*
+ * 'httpRead()' - Read data from a HTTP connection.
+ *
+ * This function is deprecated. Use the httpRead2() function which can
+ * read more than 2GB of data.
+ *
+ * @deprecated@
+ */
+
+int                                    /* O - Number of bytes read */
+httpRead(http_t *http,                 /* I - HTTP connection */
+         char   *buffer,               /* I - Buffer for data */
+        int    length)                 /* I - Maximum number of bytes */
+{
+  return ((int)httpRead2(http, buffer, length));
+}
+
+
+/*
+ * 'httpRead2()' - Read data from a HTTP connection.
+ *
+ * @since CUPS 1.2@
+ */
+
+ssize_t                                        /* O - Number of bytes read */
+httpRead2(http_t *http,                        /* I - HTTP connection */
+          char   *buffer,              /* I - Buffer for data */
+         size_t length)                /* I - Maximum number of bytes */
+{
+  ssize_t      bytes;                  /* Bytes read */
+  char         len[32];                /* Length string */
+
+
+  DEBUG_printf(("httpRead(http=%p, buffer=%p, length=%d)\n",
+                http, buffer, length));
+
+  if (http == NULL || buffer == NULL)
+    return (-1);
+
+  http->activity = time(NULL);
+
+  if (length <= 0)
+    return (0);
+
+  if (http->data_encoding == HTTP_ENCODE_CHUNKED &&
+      http->data_remaining <= 0)
+  {
+    DEBUG_puts("httpRead2: Getting chunk length...");
+
+    if (httpGets(len, sizeof(len), http) == NULL)
+    {
+      DEBUG_puts("httpRead2: Could not get length!");
+      return (0);
+    }
+
+    http->data_remaining = strtoll(len, NULL, 16);
+    if (http->data_remaining < 0)
+    {
+      DEBUG_puts("httpRead2: Negative chunk length!");
+      return (0);
+    }
+  }
+
+  DEBUG_printf(("httpRead2: data_remaining=" CUPS_LLFMT "\n",
+                CUPS_LLCAST http->data_remaining));
+
+  if (http->data_remaining <= 0)
+  {
+   /*
+    * A zero-length chunk ends a transfer; unless we are reading POST
+    * data, go idle...
+    */
+
+    if (http->data_encoding == HTTP_ENCODE_CHUNKED)
+      httpGets(len, sizeof(len), http);
+
+    if (http->state == HTTP_POST_RECV)
+      http->state ++;
+    else
+      http->state = HTTP_WAITING;
+
+   /*
+    * Prevent future reads for this request...
+    */
+
+    http->data_encoding = HTTP_ENCODE_LENGTH;
+
+    return (0);
+  }
+  else if (length > http->data_remaining)
+    length = http->data_remaining;
+
+  if (http->used == 0 && length <= 256)
+  {
+   /*
+    * Buffer small reads for better performance...
+    */
+
+    if (!http->blocking && !httpWait(http, 1000))
+      return (0);
+
+    if (http->data_remaining > sizeof(http->buffer))
+      bytes = sizeof(http->buffer);
+    else
+      bytes = http->data_remaining;
+
+#ifdef HAVE_SSL
+    if (http->tls)
+      bytes = http_read_ssl(http, http->buffer, bytes);
+    else
+#endif /* HAVE_SSL */
+    {
+      DEBUG_printf(("httpRead2: reading %d bytes from socket into buffer...\n",
+                    bytes));
+
+      bytes = recv(http->fd, http->buffer, bytes, 0);
+
+      DEBUG_printf(("httpRead2: read %d bytes from socket into buffer...\n",
+                    bytes));
+    }
+
+    if (bytes > 0)
+      http->used = bytes;
+    else if (bytes < 0)
+    {
+#ifdef WIN32
+      http->error = WSAGetLastError();
+      return (-1);
+#else
+      if (errno != EINTR)
+      {
+        http->error = errno;
+        return (-1);
+      }
+#endif /* WIN32 */
+    }
+    else
+    {
+      http->error = EPIPE;
+      return (0);
+    }
+  }
+
+  if (http->used > 0)
+  {
+    if (length > http->used)
+      length = http->used;
+
+    bytes = length;
+
+    DEBUG_printf(("httpRead2: grabbing %d bytes from input buffer...\n", bytes));
+
+    memcpy(buffer, http->buffer, length);
+    http->used -= length;
+
+    if (http->used > 0)
+      memmove(http->buffer, http->buffer + length, http->used);
+  }
+#ifdef HAVE_SSL
+  else if (http->tls)
+  {
+    if (!http->blocking && !httpWait(http, 1000))
+      return (0);
+
+    bytes = http_read_ssl(http, buffer, length);
+  }
+#endif /* HAVE_SSL */
+  else
+  {
+    if (!http->blocking && !httpWait(http, 1000))
+      return (0);
+
+    DEBUG_printf(("httpRead2: reading %d bytes from socket...\n", length));
+
+    while ((bytes = recv(http->fd, buffer, length, 0)) < 0)
+      if (errno != EINTR)
+        break;
+
+    DEBUG_printf(("httpRead2: read %d bytes from socket...\n", bytes));
+  }
+
+  if (bytes > 0)
+  {
+    http->data_remaining -= bytes;
+
+    if (http->data_remaining <= INT_MAX)
+      http->_data_remaining = (int)http->data_remaining;
+    else
+      http->_data_remaining = INT_MAX;
+  }
+  else if (bytes < 0)
+  {
+#ifdef WIN32
+    http->error = WSAGetLastError();
+#else
+    if (errno == EINTR)
+      bytes = 0;
+    else
+      http->error = errno;
+#endif /* WIN32 */
+  }
+  else
+  {
+    http->error = EPIPE;
+    return (0);
+  }
+
+  if (http->data_remaining == 0)
+  {
+    if (http->data_encoding == HTTP_ENCODE_CHUNKED)
+      httpGets(len, sizeof(len), http);
+
+    if (http->data_encoding != HTTP_ENCODE_CHUNKED)
+    {
+      if (http->state == HTTP_POST_RECV)
+       http->state ++;
+      else
+       http->state = HTTP_WAITING;
+    }
+  }
+
+#ifdef DEBUG
+  {
+    int i, j, ch;
+    printf("httpRead2: Read %d bytes:\n", bytes);
+    for (i = 0; i < bytes; i += 16)
+    {
+      printf("   ");
+
+      for (j = 0; j < 16 && (i + j) < bytes; j ++)
+        printf(" %02X", buffer[i + j] & 255);
+
+      while (j < 16)
+      {
+        printf("   ");
+       j ++;
+      }
+
+      printf("    ");
+      for (j = 0; j < 16 && (i + j) < bytes; j ++)
+      {
+        ch = buffer[i + j] & 255;
+
+       if (ch < ' ' || ch >= 127)
+         ch = '.';
+
+        putchar(ch);
+      }
+      putchar('\n');
+    }
+  }
+#endif /* DEBUG */
+
+  return (bytes);
+}
+
+
+#if defined(HAVE_SSL) && defined(HAVE_CDSASSL)
+/*
+ * '_httpReadCDSA()' - Read function for CDSA decryption code.
+ */
+
+OSStatus                               /* O  - -1 on error, 0 on success */
+_httpReadCDSA(
+    SSLConnectionRef connection,       /* I  - SSL/TLS connection */
+    void             *data,            /* I  - Data buffer */
+    size_t           *dataLength)      /* IO - Number of bytes */
+{
+  OSStatus     result;                 /* Return value */
+  ssize_t      bytes;                  /* Number of bytes read */
+
+  do
+    bytes = recv((int)connection, data, *dataLength, 0);
+  while (bytes == -1 && errno == EINTR);
+
+  if (bytes == *dataLength)
+    result = 0;
+  else if (bytes > 0)
+  {
+    *dataLength = bytes;
+    result = errSSLWouldBlock;
+  }
+  else
+  {
+    *dataLength = 0;
+
+    if (bytes == 0)
+      result = errSSLClosedAbort;
+    else if (errno == EAGAIN)
+      result = errSSLWouldBlock;
+    else if (errno == EPIPE)
+      result = errSSLClosedAbort;
+    else
+      result = errSSLInternal;
+  }
+
+  return result;
+}
+#endif /* HAVE_SSL && HAVE_CDSASSL */
+
+
+/*
+ * 'httpReconnect()' - Reconnect to a HTTP server.
+ */
+
+int                                    /* O - 0 on success, non-zero on failure */
+httpReconnect(http_t *http)            /* I - HTTP connection */
+{
+  http_addrlist_t      *addr;          /* Connected address */
+
+
+  DEBUG_printf(("httpReconnect(http=%p)\n", http));
+
+  if (!http)
+    return (-1);
+
+#ifdef HAVE_SSL
+  if (http->tls)
+    http_shutdown_ssl(http);
+#endif /* HAVE_SSL */
+
+ /*
+  * Close any previously open socket...
+  */
+
+  if (http->fd >= 0)
+  {
+#ifdef WIN32
+    closesocket(http->fd);
+#else
+    close(http->fd);
+#endif /* WIN32 */
+
+    http->fd = -1;
+  }
+
+ /*
+  * Connect to the server...
+  */
+
+  if ((addr = httpAddrConnect(http->addrlist, &(http->fd))) == NULL)
+  {
+   /*
+    * Unable to connect...
+    */
+
+#ifdef WIN32
+    http->error  = WSAGetLastError();
+#else
+    http->error  = errno;
+#endif /* WIN32 */
+    http->status = HTTP_ERROR;
+
+    return (-1);
+  }
+
+  http->hostaddr = &(addr->addr);
+  http->error    = 0;
+  http->status   = HTTP_CONTINUE;
+
+#ifdef HAVE_SSL
+  if (http->encryption == HTTP_ENCRYPT_ALWAYS)
+  {
+   /*
+    * Always do encryption via SSL.
+    */
+
+    if (http_setup_ssl(http) != 0)
+    {
+#ifdef WIN32
+      closesocket(http->fd);
+#else
+      close(http->fd);
+#endif /* WIN32 */
+
+      return (-1);
+    }
+  }
+  else if (http->encryption == HTTP_ENCRYPT_REQUIRED)
+    return (http_upgrade(http));
+#endif /* HAVE_SSL */
+
+  return (0);
+}
+
+
+/*
+ * 'httpSetCookie()' - Set the cookie value(s)...
+ *
+ * @since CUPS 1.1.19@
+ */
+
+void
+httpSetCookie(http_t     *http,                /* I - Connection */
+              const char *cookie)      /* I - Cookie string */
+{
+  if (!http)
+    return;
+
+  if (http->cookie)
+    free(http->cookie);
+
+  if (cookie)
+    http->cookie = strdup(cookie);
+  else
+    http->cookie = NULL;
+}
+
+
+/*
+ * 'httpSetExpect()' - Set the Expect: header in a request.
+ *
+ * Currently only HTTP_CONTINUE is supported for the "expect" argument.
+ *
+ * @since CUPS 1.2@
+ */
+
+void
+httpSetExpect(http_t        *http,     /* I - HTTP connection */
+              http_status_t expect)    /* I - HTTP status to expect (HTTP_CONTINUE) */
+{
+  if (http)
+    http->expect = expect;
+}
+
+
+/*
+ * 'httpSetField()' - Set the value of an HTTP header.
+ */
+
+void
+httpSetField(http_t       *http,       /* I - HTTP connection */
+             http_field_t field,       /* I - Field index */
+            const char   *value)       /* I - Value */
+{
+  if (http == NULL ||
+      field < HTTP_FIELD_ACCEPT_LANGUAGE ||
+      field > HTTP_FIELD_WWW_AUTHENTICATE ||
+      value == NULL)
+    return;
+
+  strlcpy(http->fields[field], value, HTTP_MAX_VALUE);
+}
+
+
+/*
+ * 'httpSetLength()' - Set the content-length and content-encoding.
+ *
+ * @since CUPS 1.2@
+ */
+
+void
+httpSetLength(http_t *http,            /* I - HTTP connection */
+              size_t length)           /* I - Length (0 for chunked) */
+{
+  if (!http)
+    return;
+
+  if (!length)
+  {
+    strcpy(http->fields[HTTP_FIELD_TRANSFER_ENCODING], "chunked");
+    http->fields[HTTP_FIELD_CONTENT_LENGTH][0] = '\0';
+  }
+  else
+  {
+    http->fields[HTTP_FIELD_TRANSFER_ENCODING][0] = '\0';
+    snprintf(http->fields[HTTP_FIELD_CONTENT_LENGTH], HTTP_MAX_VALUE,
+             CUPS_LLFMT, CUPS_LLCAST length);
+  }
+}
+
+
+/*
+ * 'httpTrace()' - Send an TRACE request to the server.
+ */
+
+int                                    /* O - Status of call (0 = success) */
+httpTrace(http_t     *http,            /* I - HTTP connection */
+          const char *uri)             /* I - URI for trace */
+{
+  return (http_send(http, HTTP_TRACE, uri));
+}
+
+
+/*
+ * 'httpUpdate()' - Update the current HTTP state for incoming data.
+ */
+
+http_status_t                          /* O - HTTP status */
+httpUpdate(http_t *http)               /* I - HTTP connection */
+{
+  char         line[32768],            /* Line from connection... */
+               *value;                 /* Pointer to value on line */
+  http_field_t field;                  /* Field index */
+  int          major, minor,           /* HTTP version numbers */
+               status;                 /* Request status */
+
+
+  DEBUG_printf(("httpUpdate(http=%p), state=%d\n", http, http->state));
+
+ /*
+  * Flush pending data, if any...
+  */
+
+  if (http->wused)
+  {
+    DEBUG_puts("    flushing buffer...");
+
+    if (httpFlushWrite(http) < 0)
+      return (HTTP_ERROR);
+  }
+
+ /*
+  * If we haven't issued any commands, then there is nothing to "update"...
+  */
+
+  if (http->state == HTTP_WAITING)
+    return (HTTP_CONTINUE);
+
+ /*
+  * Grab all of the lines we can from the connection...
+  */
+
+  while (httpGets(line, sizeof(line), http) != NULL)
+  {
+    DEBUG_printf(("httpUpdate: Got \"%s\"\n", line));
+
+    if (line[0] == '\0')
+    {
+     /*
+      * Blank line means the start of the data section (if any).  Return
+      * the result code, too...
+      *
+      * If we get status 100 (HTTP_CONTINUE), then we *don't* change states.
+      * Instead, we just return HTTP_CONTINUE to the caller and keep on
+      * tryin'...
+      */
+
+      if (http->status == HTTP_CONTINUE)
+        return (http->status);
+
+      if (http->status < HTTP_BAD_REQUEST)
+        http->digest_tries = 0;
+
+#ifdef HAVE_SSL
+      if (http->status == HTTP_SWITCHING_PROTOCOLS && !http->tls)
+      {
+       if (http_setup_ssl(http) != 0)
+       {
+#  ifdef WIN32
+         closesocket(http->fd);
+#  else
+         close(http->fd);
+#  endif /* WIN32 */
+
+         return (HTTP_ERROR);
+       }
+
+        return (HTTP_CONTINUE);
+      }
+#endif /* HAVE_SSL */
+
+      httpGetLength2(http);
+
+      switch (http->state)
+      {
+        case HTTP_GET :
+       case HTTP_POST :
+       case HTTP_POST_RECV :
+       case HTTP_PUT :
+           http->state ++;
+       case HTTP_POST_SEND :
+           break;
+
+       default :
+           http->state = HTTP_WAITING;
+           break;
+      }
+
+      return (http->status);
+    }
+    else if (strncmp(line, "HTTP/", 5) == 0)
+    {
+     /*
+      * Got the beginning of a response...
+      */
+
+      if (sscanf(line, "HTTP/%d.%d%d", &major, &minor, &status) != 3)
+        return (HTTP_ERROR);
+
+      http->version = (http_version_t)(major * 100 + minor);
+      http->status  = (http_status_t)status;
+    }
+    else if ((value = strchr(line, ':')) != NULL)
+    {
+     /*
+      * Got a value...
+      */
+
+      *value++ = '\0';
+      while (isspace(*value & 255))
+        value ++;
+
+     /*
+      * Be tolerants of servers that send unknown attribute fields...
+      */
+
+      if (!strcasecmp(line, "expect"))
+      {
+       /*
+        * "Expect: 100-continue" or similar...
+       */
+
+        http->expect = (http_status_t)atoi(value);
+      }
+      else if (!strcasecmp(line, "cookie"))
+      {
+       /*
+        * "Cookie: name=value[; name=value ...]" - replaces previous cookies...
+       */
+
+        httpSetCookie(http, value);
+      }
+      else if ((field = http_field(line)) == HTTP_FIELD_UNKNOWN)
+      {
+        DEBUG_printf(("httpUpdate: unknown field %s seen!\n", line));
+        continue;
+      }
+      else
+        httpSetField(http, field, value);
+    }
+    else
+    {
+      http->status = HTTP_ERROR;
+      return (HTTP_ERROR);
+    }
+  }
+
+ /*
+  * See if there was an error...
+  */
+
+  if (http->error == EPIPE && http->status > HTTP_CONTINUE)
+    return (http->status);
+
+  if (http->error)
+  {
+    DEBUG_printf(("httpUpdate: socket error %d - %s\n", http->error,
+                  strerror(http->error)));
+    http->status = HTTP_ERROR;
+    return (HTTP_ERROR);
+  }
+
+ /*
+  * If we haven't already returned, then there is nothing new...
+  */
+
+  return (HTTP_CONTINUE);
+}
+
+
+/*
+ * 'httpWait()' - Wait for data available on a connection.
+ *
+ * @since CUPS 1.1.19@
+ */
+
+int                                    /* O - 1 if data is available, 0 otherwise */
+httpWait(http_t *http,                 /* I - HTTP connection */
+         int    msec)                  /* I - Milliseconds to wait */
+{
+ /*
+  * First see if there is data in the buffer...
+  */
+
+  if (http == NULL)
+    return (0);
+
+  if (http->used)
+    return (1);
+
+ /*
+  * If not, check the SSL/TLS buffers and do a select() on the connection...
+  */
+
+  return (http_wait(http, msec));
+}
+
+
+/*
+ * 'httpWrite()' - Write data to a HTTP connection.
+ *
+ * This function is deprecated. Use the httpWrite2() function which can
+ * write more than 2GB of data.
+ *
+ * @deprecated@
+ */
+int                                    /* O - Number of bytes written */
+httpWrite(http_t     *http,            /* I - HTTP connection */
+          const char *buffer,          /* I - Buffer for data */
+         int        length)            /* I - Number of bytes to write */
+{
+  return ((int)httpWrite2(http, buffer, length));
+}
+
+
+/*
+ * 'httpWrite2()' - Write data to a HTTP connection.
+ *
+ * @since CUPS 1.2@
+ */
+ssize_t                                        /* O - Number of bytes written */
+httpWrite2(http_t     *http,           /* I - HTTP connection */
+           const char *buffer,         /* I - Buffer for data */
+          size_t     length)           /* I - Number of bytes to write */
+{
+  ssize_t      bytes;                  /* Bytes written */
+
+
+  DEBUG_printf(("httpWrite(http=%p, buffer=%p, length=%d)\n", http,
+                buffer, length));
+
+ /*
+  * Range check input...
+  */
+
+  if (http == NULL || buffer == NULL)
+    return (-1);
+
+ /*
+  * Mark activity on the connection...
+  */
+
+  http->activity = time(NULL);
+
+ /*
+  * Buffer small writes for better performance...
+  */
+
+  if (length > 0)
+  {
+    if (http->wused && (length + http->wused) > sizeof(http->wbuffer))
+    {
+      DEBUG_printf(("    flushing buffer (wused=%d, length=%d)\n",
+                    http->wused, length));
+
+      httpFlushWrite(http);
+    }
+
+    if ((length + http->wused) <= sizeof(http->wbuffer))
+    {
+     /*
+      * Write to buffer...
+      */
+
+      DEBUG_printf(("    copying %d bytes to wbuffer...\n", length));
 
-  va_start(ap, format);
-  bytes = vsnprintf(buf, sizeof(buf), format, ap);
-  va_end(ap);
+      memcpy(http->wbuffer + http->wused, buffer, length);
+      http->wused += length;
+      bytes = length;
+    }
+    else
+    {
+     /*
+      * Otherwise write the data directly...
+      */
 
-  DEBUG_printf(("httpPrintf: %s", buf));
+      DEBUG_printf(("    writing %d bytes to socket...\n", length));
 
-  for (tbytes = 0, bufptr = buf; tbytes < bytes; tbytes += nbytes, bufptr += nbytes)
-    if ((nbytes = send(http->fd, bufptr, bytes - tbytes, 0)) < 0)
-      return (-1);
+      if (http->data_encoding == HTTP_ENCODE_CHUNKED)
+       bytes = http_write_chunk(http, buffer, length);
+      else
+       bytes = http_write(http, buffer, length);
+
+      DEBUG_printf(("    wrote %d bytes...\n", bytes));
+    }
+
+    if (http->data_encoding == HTTP_ENCODE_LENGTH)
+      http->data_remaining -= bytes;
+  }
+  else
+    bytes = 0;
+
+ /*
+  * Handle end-of-request processing...
+  */
+
+  if ((http->data_encoding == HTTP_ENCODE_CHUNKED && length == 0) ||
+      (http->data_encoding == HTTP_ENCODE_LENGTH && http->data_remaining == 0))
+  {
+   /*
+    * Finished with the transfer; unless we are sending POST or PUT
+    * data, go idle...
+    */
+
+    DEBUG_puts("httpWrite: changing states...");
+
+    if (http->wused)
+      httpFlushWrite(http);
+
+    if (http->data_encoding == HTTP_ENCODE_CHUNKED)
+    {
+     /*
+      * Send a 0-length chunk at the end of the request...
+      */
+
+      http_write(http, "0\r\n\r\n", 5);
+
+     /*
+      * Reset the data state...
+      */
+
+      http->data_encoding  = HTTP_ENCODE_LENGTH;
+      http->data_remaining = 0;
+    }
+
+    if (http->state == HTTP_POST_RECV)
+      http->state ++;
+    else if (http->state == HTTP_PUT_RECV)
+      http->state = HTTP_STATUS;
+    else
+      http->state = HTTP_WAITING;
+  }
 
   return (bytes);
 }
 
 
+#if defined(HAVE_SSL) && defined(HAVE_CDSASSL)
 /*
- * 'httpStatus()' - Return a short string describing a HTTP status code.
+ * '_httpWriteCDSA()' - Write function for CDSA encryption code.
  */
 
-const char *                           /* O - String or NULL */
-httpStatus(http_status_t status)       /* I - HTTP status code */
+OSStatus                               /* O  - -1 on error, 0 on success */
+_httpWriteCDSA(
+    SSLConnectionRef connection,       /* I  - SSL/TLS connection */
+    const void       *data,            /* I  - Data buffer */
+    size_t           *dataLength)      /* IO - Number of bytes */
 {
-  switch (status)
+  OSStatus     result;                 /* Return value */
+  ssize_t      bytes;                  /* Number of bytes read */
+
+  do
+    bytes = write((int)connection, data, *dataLength);
+  while (bytes == -1 && errno == EINTR);
+
+  if (bytes == *dataLength)
+    result = 0;
+  else if (bytes >= 0)
   {
-    case HTTP_OK :
-        return ("OK");
-    case HTTP_CREATED :
-        return ("Created");
-    case HTTP_ACCEPTED :
-        return ("Accepted");
-    case HTTP_NO_CONTENT :
-        return ("No Content");
-    case HTTP_NOT_MODIFIED :
-        return ("Not Modified");
-    case HTTP_BAD_REQUEST :
-        return ("Bad Request");
-    case HTTP_UNAUTHORIZED :
-        return ("Unauthorized");
-    case HTTP_FORBIDDEN :
-        return ("Forbidden");
-    case HTTP_NOT_FOUND :
-        return ("Not Found");
-    case HTTP_REQUEST_TOO_LARGE :
-        return ("Request Entity Too Large");
-    case HTTP_URI_TOO_LONG :
-        return ("URI Too Long");
-    case HTTP_NOT_IMPLEMENTED :
-        return ("Not Implemented");
-    case HTTP_NOT_SUPPORTED :
-        return ("Not Supported");
-    default :
-        return ("Unknown");
+    *dataLength = bytes;
+    result = errSSLWouldBlock;
+  }
+  else
+  {
+    *dataLength = 0;
+  
+    if (errno == EAGAIN)
+      result = errSSLWouldBlock;
+    else if (errno == EPIPE)
+      result = errSSLClosedAbort;
+    else
+      result = errSSLInternal;
   }
+
+  return result;
 }
+#endif /* HAVE_SSL && HAVE_CDSASSL */
 
 
 /*
- * 'httpGetDateString()' - Get a formatted date/time string from a time value.
+ * 'http_field()' - Return the field index for a field name.
  */
 
-const char *                           /* O - Date/time string */
-httpGetDateString(time_t t)            /* I - UNIX time */
+static http_field_t            /* O - Field index */
+http_field(const char *name)   /* I - String name */
 {
-  struct tm    *tdate;
-  static char  datetime[256];
+  int  i;                      /* Looping var */
 
 
-  tdate = gmtime(&t);
-  sprintf(datetime, "%s, %02d %s %d %02d:%02d:%02d GMT",
-          days[tdate->tm_wday], tdate->tm_mday, months[tdate->tm_mon],
-         tdate->tm_year + 1900, tdate->tm_hour, tdate->tm_min, tdate->tm_sec);
+  for (i = 0; i < HTTP_FIELD_MAX; i ++)
+    if (strcasecmp(name, http_fields[i]) == 0)
+      return ((http_field_t)i);
 
-  return (datetime);
+  return (HTTP_FIELD_UNKNOWN);
 }
 
 
+#ifdef HAVE_SSL
 /*
- * 'httpGetDateTime()' - Get a time value from a formatted date/time string.
+ * 'http_read_ssl()' - Read from a SSL/TLS connection.
  */
 
-time_t                                 /* O - UNIX time */
-httpGetDateTime(const char *s)         /* I - Date/time string */
+static int                             /* O - Bytes read */
+http_read_ssl(http_t *http,            /* I - HTTP connection */
+             char   *buf,              /* I - Buffer to store data */
+             int    len)               /* I - Length of buffer */
 {
-  int          i;                      /* Looping var */
-  struct tm    tdate;                  /* Time/date structure */
-  char         mon[16];                /* Abbreviated month name */
-  int          day, year;              /* Day of month and year */
-  int          hour, min, sec;         /* Time */
+#  if defined(HAVE_LIBSSL)
+  return (SSL_read((SSL *)(http->tls), buf, len));
 
+#  elif defined(HAVE_GNUTLS)
+  return (gnutls_record_recv(((http_tls_t *)(http->tls))->session, buf, len));
 
-  if (sscanf(s, "%*s%d%15s%d%d:%d:%d", &day, mon, &year, &hour, &min, &sec) < 6)
-    return (0);
+#  elif defined(HAVE_CDSASSL)
+  int          result;                 /* Return value */
+  OSStatus     error;                  /* Error info */
+  size_t       processed;              /* Number of bytes processed */
 
-  for (i = 0; i < 12; i ++)
-    if (strcasecmp(mon, months[i]) == 0)
-      break;
 
-  if (i >= 12)
-    return (0);
+  error = SSLRead((SSLContextRef)http->tls, buf, len, &processed);
 
-  tdate.tm_mon   = i;
-  tdate.tm_mday  = day;
-  tdate.tm_year  = year - 1900;
-  tdate.tm_hour  = hour;
-  tdate.tm_min   = min;
-  tdate.tm_sec   = sec;
-  tdate.tm_isdst = 0;
+  switch (error)
+  {
+    case 0 :
+       result = (int)processed;
+       break;
+    case errSSLClosedGraceful :
+       result = 0;
+       break;
+    case errSSLWouldBlock :
+       if (processed)
+         result = (int)processed;
+       else
+       {
+         result = -1;
+         errno = EINTR;
+       }
+       break;
+    default :
+       errno = EPIPE;
+       result = -1;
+       break;
+  }
 
-  return (mktime(&tdate));
+  return (result);
+#  endif /* HAVE_LIBSSL */
 }
+#endif /* HAVE_SSL */
 
 
 /*
- * 'httpUpdate()' - Update the current HTTP state for incoming data.
+ * 'http_send()' - Send a request with all fields and the trailing blank line.
  */
 
-http_status_t                          /* O - HTTP status */
-httpUpdate(http_t *http)               /* I - HTTP data */
+static int                     /* O - 0 on success, non-zero on error */
+http_send(http_t       *http,  /* I - HTTP connection */
+          http_state_t request,        /* I - Request code */
+         const char   *uri)    /* I - URI */
 {
-  char         line[1024],             /* Line from connection... */
-               *value;                 /* Pointer to value on line */
-  http_field_t field;                  /* Field index */
-  int          major, minor;           /* HTTP version numbers */
-  http_status_t        status;                 /* Authorization status */
+  int          i;              /* Looping var */
+  char         *ptr,           /* Pointer in buffer */
+               buf[1024];      /* Encoded URI buffer */
+  static const char * const codes[] =
+               {               /* Request code strings */
+                 NULL,
+                 "OPTIONS",
+                 "GET",
+                 NULL,
+                 "HEAD",
+                 "POST",
+                 NULL,
+                 NULL,
+                 "PUT",
+                 NULL,
+                 "DELETE",
+                 "TRACE",
+                 "CLOSE"
+               };
+  static const char hex[] = "0123456789ABCDEF";
+                               /* Hex digits */
+
 
+  DEBUG_printf(("http_send(http=%p, request=HTTP_%s, uri=\"%s\")\n",
+                http, codes[request], uri));
 
-  DEBUG_printf(("httpUpdate(%08x)\n", http));
+  if (http == NULL || uri == NULL)
+    return (-1);
 
  /*
-  * If we haven't issued any commands, then there is nothing to "update"...
+  * Set the User-Agent field if it isn't already...
   */
 
-  if (http->state == HTTP_WAITING)
-    return (HTTP_CONTINUE);
+  if (!http->fields[HTTP_FIELD_USER_AGENT][0])
+    httpSetField(http, HTTP_FIELD_USER_AGENT, CUPS_MINIMAL);
 
  /*
-  * Grab all of the lines we can from the connection...
+  * Encode the URI as needed...
   */
 
-  while (httpGets(line, sizeof(line), http) != NULL)
-  {
-    DEBUG_puts(line);
-
-    if (line[0] == '\0')
+  for (ptr = buf; *uri != '\0' && ptr < (buf + sizeof(buf) - 1); uri ++)
+    if (*uri <= ' ' || *uri >= 127)
     {
-     /*
-      * Blank line means the start of the data section (if any).  Return
-      * the result code, too...
-      *
-      * If we get status 100 (HTTP_CONTINUE), then we *don't* change states.
-      * Instead, we just return HTTP_CONTINUE to the caller and keep on
-      * tryin'...
-      */
+      if (ptr < (buf + sizeof(buf) - 1))
+        *ptr ++ = '%';
+      if (ptr < (buf + sizeof(buf) - 1))
+        *ptr ++ = hex[(*uri >> 4) & 15];
+      if (ptr < (buf + sizeof(buf) - 1))
+        *ptr ++ = hex[*uri & 15];
+    }
+    else
+      *ptr ++ = *uri;
 
-      if (http->status == HTTP_CONTINUE)
-        return (http->status);
+  *ptr = '\0';
 
-      httpGetLength(http);
+ /*
+  * See if we had an error the last time around; if so, reconnect...
+  */
 
-      switch (http->state)
-      {
-        case HTTP_GET :
-       case HTTP_POST :
-       case HTTP_POST_RECV :
-       case HTTP_PUT :
-           http->state ++;
-           break;
+  if (http->status == HTTP_ERROR || http->status >= HTTP_BAD_REQUEST)
+    if (httpReconnect(http))
+      return (-1);
 
-       default :
-           http->state = HTTP_WAITING;
-           break;
-      }
+ /*
+  * Send the request header...
+  */
 
-      return (http->status);
-    }
-    else if (strncmp(line, "HTTP/", 5) == 0)
-    {
-     /*
-      * Got the beginning of a response...
-      */
+  http->state = request;
+  if (request == HTTP_POST || request == HTTP_PUT)
+    http->state ++;
 
-      if (sscanf(line, "HTTP/%d.%d%d", &major, &minor, &status) != 3)
-        return (HTTP_ERROR);
+  http->status = HTTP_CONTINUE;
 
-      http->version = (http_version_t)(major * 100 + minor);
-      http->status  = status;
-    }
-    else if ((value = strchr(line, ':')) != NULL)
-    {
-     /*
-      * Got a value...
-      */
+#ifdef HAVE_SSL
+  if (http->encryption == HTTP_ENCRYPT_REQUIRED && !http->tls)
+  {
+    httpSetField(http, HTTP_FIELD_CONNECTION, "Upgrade");
+    httpSetField(http, HTTP_FIELD_UPGRADE, "TLS/1.0,SSL/2.0,SSL/3.0");
+  }
+#endif /* HAVE_SSL */
 
-      *value++ = '\0';
-      while (isspace(*value))
-        value ++;
+  if (httpPrintf(http, "%s %s HTTP/1.1\r\n", codes[request], buf) < 1)
+  {
+    http->status = HTTP_ERROR;
+    return (-1);
+  }
 
-     /*
-      * Be tolerants of servers that send unknown attribute fields...
-      */
+  for (i = 0; i < HTTP_FIELD_MAX; i ++)
+    if (http->fields[i][0] != '\0')
+    {
+      DEBUG_printf(("%s: %s\n", http_fields[i], http->fields[i]));
 
-      if ((field = http_field(line)) == HTTP_FIELD_UNKNOWN)
+      if (httpPrintf(http, "%s: %s\r\n", http_fields[i], http->fields[i]) < 1)
       {
-        DEBUG_printf(("httpUpdate: unknown field %s seen!\n", line));
-        continue;
+       http->status = HTTP_ERROR;
+       return (-1);
       }
+    }
 
-      httpSetField(http, field, value);
+  if (http->cookie)
+    if (httpPrintf(http, "Cookie: $Version=0; %s\r\n", http->cookie) < 1)
+    {
+      http->status = HTTP_ERROR;
+      return (-1);
     }
-    else
+
+  if (http->expect == HTTP_CONTINUE &&
+      (http->state == HTTP_POST_RECV || http->state == HTTP_PUT_RECV))
+    if (httpPrintf(http, "Expect: 100-continue\r\n") < 1)
     {
       http->status = HTTP_ERROR;
-      return (HTTP_ERROR);
+      return (-1);
     }
+
+  if (httpPrintf(http, "\r\n") < 1)
+  {
+    http->status = HTTP_ERROR;
+    return (-1);
+  }
+
+  httpGetLength2(http);
+  httpClearFields(http);
+
+  return (0);
+}
+
+
+#ifdef HAVE_SSL
+/*
+ * 'http_setup_ssl()' - Set up SSL/TLS support on a connection.
+ */
+
+static int                             /* O - Status of connection */
+http_setup_ssl(http_t *http)           /* I - HTTP connection */
+{
+#  ifdef HAVE_LIBSSL
+  SSL_CTX      *context;       /* Context for encryption */
+  SSL          *conn;          /* Connection for encryption */
+#  elif defined(HAVE_GNUTLS)
+  http_tls_t   *conn;          /* TLS session object */
+  gnutls_certificate_client_credentials *credentials;
+                               /* TLS credentials */
+#  elif defined(HAVE_CDSASSL)
+  SSLContextRef        conn;           /* Context for encryption */
+  OSStatus     error;          /* Error info */
+#  endif /* HAVE_LIBSSL */
+
+
+  DEBUG_printf(("http_setup_ssl(http=%p)\n", http));
+
+#  ifdef HAVE_LIBSSL
+  context = SSL_CTX_new(SSLv23_client_method());
+
+  SSL_CTX_set_options(context, SSL_OP_NO_SSLv2); /* Only use SSLv3 or TLS */
+
+  conn = SSL_new(context);
+
+  SSL_set_fd(conn, http->fd);
+  if (SSL_connect(conn) != 1)
+  {
+#    ifdef DEBUG
+    unsigned long      error;  /* Error code */
+
+    while ((error = ERR_get_error()) != 0)
+      printf("http_setup_ssl: %s\n", ERR_error_string(error, NULL));
+#    endif /* DEBUG */
+
+    SSL_CTX_free(context);
+    SSL_free(conn);
+
+#    ifdef WIN32
+    http->error  = WSAGetLastError();
+#    else
+    http->error  = errno;
+#    endif /* WIN32 */
+    http->status = HTTP_ERROR;
+
+    return (HTTP_ERROR);
+  }
+
+#  elif defined(HAVE_GNUTLS)
+  conn = (http_tls_t *)malloc(sizeof(http_tls_t));
+
+  if (conn == NULL)
+  {
+    http->error  = errno;
+    http->status = HTTP_ERROR;
+
+    return (-1);
+  }
+
+  credentials = (gnutls_certificate_client_credentials *)
+                    malloc(sizeof(gnutls_certificate_client_credentials));
+  if (credentials == NULL)
+  {
+    free(conn);
+
+    http->error = errno;
+    http->status = HTTP_ERROR;
+
+    return (-1);
+  }
+
+  gnutls_certificate_allocate_credentials(credentials);
+
+  gnutls_init(&(conn->session), GNUTLS_CLIENT);
+  gnutls_set_default_priority(conn->session);
+  gnutls_credentials_set(conn->session, GNUTLS_CRD_CERTIFICATE, *credentials);
+  gnutls_transport_set_ptr(conn->session, (gnutls_transport_ptr)http->fd);
+
+  if ((gnutls_handshake(conn->session)) != GNUTLS_E_SUCCESS)
+  {
+    http->error  = errno;
+    http->status = HTTP_ERROR;
+
+    return (-1);
   }
 
- /*
-  * See if there was an error...
-  */
+  conn->credentials = credentials;
+
+#  elif defined(HAVE_CDSASSL)
+  error = SSLNewContext(false, &conn);
+
+  if (!error)
+    error = SSLSetIOFuncs(conn, _httpReadCDSA, _httpWriteCDSA);
 
-  if (http->error)
+  if (!error)
+    error = SSLSetConnection(conn, (SSLConnectionRef)http->fd);
+
+  if (!error)
+    error = SSLSetAllowsExpiredCerts(conn, true);
+
+  if (!error)
+    error = SSLSetAllowsAnyRoot(conn, true);
+
+  if (!error)
   {
-    http->status = HTTP_ERROR;
-    return (HTTP_ERROR);
+    while ((error = SSLHandshake(conn)) == errSSLWouldBlock)
+      usleep(1000);
   }
 
- /*
-  * If we haven't already returned, then there is nothing new...
-  */
+  if (error != 0)
+  {
+    http->error  = error;
+    http->status = HTTP_ERROR;
 
-  return (HTTP_CONTINUE);
+    SSLDisposeContext(conn);
+
+    close(http->fd);
+
+    return (-1);
+  }
+#  endif /* HAVE_CDSASSL */
+
+  http->tls = conn;
+  return (0);
 }
+#endif /* HAVE_SSL */
 
 
+#ifdef HAVE_SSL
 /*
- * 'httpDecode64()' - Base64-decode a string.
+ * 'http_shutdown_ssl()' - Shut down SSL/TLS on a connection.
  */
 
-char *                         /* O - Decoded string */
-httpDecode64(char       *out,  /* I - String to write to */
-             const char *in)   /* I - String to read from */
+static void
+http_shutdown_ssl(http_t *http)        /* I - HTTP connection */
 {
-  int  pos,                    /* Bit position */
-       base64;                 /* Value of this character */
-  char *outptr;                /* Output pointer */
+#  ifdef HAVE_LIBSSL
+  SSL_CTX      *context;       /* Context for encryption */
+  SSL          *conn;          /* Connection for encryption */
 
 
-  for (outptr = out, pos = 0; *in != '\0'; in ++)
-  {
-   /*
-    * Decode this character into a number from 0 to 63...
-    */
+  conn    = (SSL *)(http->tls);
+  context = SSL_get_SSL_CTX(conn);
 
-    if (*in >= 'A' && *in <= 'Z')
-      base64 = *in - 'A';
-    else if (*in >= 'a' && *in <= 'z')
-      base64 = *in - 'a' + 26;
-    else if (*in >= '0' && *in <= '9')
-      base64 = *in - '0' + 52;
-    else if (*in == '+')
-      base64 = 62;
-    else if (*in == '/')
-      base64 = 63;
-    else if (*in == '=')
-      break;
-    else
-      continue;
+  SSL_shutdown(conn);
+  SSL_CTX_free(context);
+  SSL_free(conn);
 
-   /*
-    * Store the result in the appropriate chars...
-    */
+#  elif defined(HAVE_GNUTLS)
+  http_tls_t      *conn;       /* Encryption session */
+  gnutls_certificate_client_credentials *credentials;
+                               /* TLS credentials */
 
-    switch (pos)
-    {
-      case 0 :
-          *outptr = base64 << 2;
-         pos ++;
-         break;
-      case 1 :
-          *outptr++ |= (base64 >> 4) & 3;
-         *outptr = (base64 << 4) & 255;
-         pos ++;
-         break;
-      case 2 :
-          *outptr++ |= (base64 >> 2) & 15;
-         *outptr = (base64 << 6) & 255;
-         pos ++;
-         break;
-      case 3 :
-          *outptr++ |= base64;
-         pos = 0;
-         break;
-    }
-  }
 
-  *outptr = '\0';
+  conn = (http_tls_t *)(http->tls);
+  credentials = (gnutls_certificate_client_credentials *)(conn->credentials);
 
- /*
-  * Return the decoded string...
-  */
+  gnutls_bye(conn->session, GNUTLS_SHUT_RDWR);
+  gnutls_deinit(conn->session);
+  gnutls_certificate_free_credentials(*credentials);
+  free(credentials);
+  free(conn);
+
+#  elif defined(HAVE_CDSASSL)
+  while (SSLClose((SSLContextRef)http->tls) == errSSLWouldBlock)
+    usleep(1000);
 
-  return (out);
+  SSLDisposeContext((SSLContextRef)http->tls);
+#  endif /* HAVE_LIBSSL */
+
+  http->tls = NULL;
 }
+#endif /* HAVE_SSL */
 
 
+#ifdef HAVE_SSL
 /*
- * 'httpEncode64()' - Base64-encode a string.
+ * 'http_upgrade()' - Force upgrade to TLS encryption.
  */
 
-char *                         /* O - Encoded string */
-httpEncode64(char       *out,  /* I - String to write to */
-             const char *in)   /* I - String to read from */
+static int                     /* O - Status of connection */
+http_upgrade(http_t *http)     /* I - HTTP connection */
 {
-  char         *outptr;        /* Output pointer */
-  static char  base64[] =      /* Base64 characters... */
-               {
-                 "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
-                 "abcdefghijklmnopqrstuvwxyz"
-                 "0123456789"
-                 "+/"
-               };
+  int          ret;            /* Return value */
+  http_t       myhttp;         /* Local copy of HTTP data */
+
+
+  DEBUG_printf(("http_upgrade(%p)\n", http));
+
+ /*
+  * Copy the HTTP data to a local variable so we can do the OPTIONS
+  * request without interfering with the existing request data...
+  */
+
+  memcpy(&myhttp, http, sizeof(myhttp));
+
+ /*
+  * Send an OPTIONS request to the server, requiring SSL or TLS
+  * encryption on the link...
+  */
 
+  httpClearFields(&myhttp);
+  httpSetField(&myhttp, HTTP_FIELD_CONNECTION, "upgrade");
+  httpSetField(&myhttp, HTTP_FIELD_UPGRADE, "TLS/1.0, SSL/2.0, SSL/3.0");
 
-  for (outptr = out; *in != '\0'; in ++)
+  if ((ret = httpOptions(&myhttp, "*")) == 0)
   {
    /*
-    * Encode the up to 3 characters as 4 Base64 numbers...
+    * Wait for the secure connection...
     */
 
-    *outptr ++ = base64[in[0] >> 2];
-    *outptr ++ = base64[((in[0] << 4) | (in[1] >> 4)) & 63];
+    while (httpUpdate(&myhttp) == HTTP_CONTINUE);
+  }
 
-    in ++;
-    if (*in == '\0')
-    {
-      *outptr ++ = '=';
-      break;
-    }
+  httpFlush(&myhttp);
+
+ /*
+  * Copy the HTTP data back over, if any...
+  */
 
-    *outptr ++ = base64[((in[0] << 2) | (in[1] >> 6)) & 63];
+  http->fd         = myhttp.fd;
+  http->error      = myhttp.error;
+  http->activity   = myhttp.activity;
+  http->status     = myhttp.status;
+  http->version    = myhttp.version;
+  http->keep_alive = myhttp.keep_alive;
+  http->used       = myhttp.used;
 
-    in ++;
-    if (*in == '\0')
-      break;
+  if (http->used)
+    memcpy(http->buffer, myhttp.buffer, http->used);
 
-    *outptr ++ = base64[in[0] & 63];
-  }
+  http->auth_type   = myhttp.auth_type;
+  http->nonce_count = myhttp.nonce_count;
 
-  *outptr ++ = '=';
-  *outptr = '\0';
+  memcpy(http->nonce, myhttp.nonce, sizeof(http->nonce));
+
+  http->tls        = myhttp.tls;
+  http->encryption = myhttp.encryption;
 
  /*
-  * Return the encoded string...
+  * See if we actually went secure...
   */
 
-  return (out);
+  if (!http->tls)
+  {
+   /*
+    * Server does not support HTTP upgrade...
+    */
+
+    DEBUG_puts("Server does not support HTTP upgrade!");
+
+#  ifdef WIN32
+    closesocket(http->fd);
+#  else
+    close(http->fd);
+#  endif
+
+    http->fd = -1;
+
+    return (-1);
+  }
+  else
+    return (ret);
 }
+#endif /* HAVE_SSL */
 
 
 /*
- * 'httpGetLength()' - Get the amount of data remaining from the
- *                     content-length or transfer-encoding fields.
+ * 'http_wait()' - Wait for data available on a connection.
  */
 
-int                            /* O - Content length */
-httpGetLength(http_t *http)    /* I - HTTP data */
+static int                             /* O - 1 if data is available, 0 otherwise */
+http_wait(http_t *http,                        /* I - HTTP connection */
+          int    msec)                 /* I - Milliseconds to wait */
 {
-  DEBUG_printf(("httpGetLength(%08x)\n", http));
+#ifndef WIN32
+  struct rlimit                limit;          /* Runtime limit */
+  int                  set_size;       /* Size of select set */
+#endif /* !WIN32 */
+  struct timeval       timeout;        /* Timeout */
+  int                  nfds;           /* Result from select() */
 
-  if (strcasecmp(http->fields[HTTP_FIELD_TRANSFER_ENCODING], "chunked") == 0)
-  {
-    DEBUG_puts("httpGetLength: chunked request!");
 
-    http->data_encoding  = HTTP_ENCODE_CHUNKED;
-    http->data_remaining = 0;
+  DEBUG_printf(("http_wait(http=%p, msec=%d)\n", http, msec));
+
+  if (http->fd < 0)
+    return (0);
+
+ /*
+  * Check the SSL/TLS buffers for data first...
+  */
+
+#ifdef HAVE_SSL
+  if (http->tls)
+  {
+#  ifdef HAVE_LIBSSL
+    if (SSL_pending((SSL *)(http->tls)))
+      return (1);
+#  elif defined(HAVE_GNUTLS)
+    if (gnutls_record_check_pending(((http_tls_t *)(http->tls))->session))
+      return (1);
+#  elif defined(HAVE_CDSASSL)
+    size_t bytes;                      /* Bytes that are available */
+
+    if (!SSLGetBufferedReadSize((SSLContextRef)http->tls, &bytes) && bytes > 0)
+      return (1);
+#  endif /* HAVE_LIBSSL */
   }
-  else
+#endif /* HAVE_SSL */
+
+ /*
+  * Then try doing a select() to poll the socket...
+  */
+
+  if (!http->input_set)
   {
-    http->data_encoding = HTTP_ENCODE_LENGTH;
+#ifdef WIN32
+   /*
+    * Windows has a fixed-size select() structure, different (surprise,
+    * surprise!) from all UNIX implementations.  Just allocate this
+    * fixed structure...
+    */
 
+    http->input_set = calloc(1, sizeof(fd_set));
+#else
    /*
-    * The following is a hack for HTTP servers that don't send a
-    * content-length or transfer-encoding field...
-    *
-    * If there is no content-length then the connection must close
-    * after the transfer is complete...
+    * Allocate the select() input set based upon the max number of file
+    * descriptors available for this process...
     */
 
-    if (http->fields[HTTP_FIELD_CONTENT_LENGTH][0] == '\0')
-      http->data_remaining = 2147483647;
-    else
-      http->data_remaining = atoi(http->fields[HTTP_FIELD_CONTENT_LENGTH]);
+    getrlimit(RLIMIT_NOFILE, &limit);
 
-    DEBUG_printf(("httpGetLength: content_length = %d\n", http->data_remaining));
-  }
+    set_size = (limit.rlim_cur + 31) / 8 + 4;
+    if (set_size < sizeof(fd_set))
+      set_size = sizeof(fd_set);
 
-  return (http->data_remaining);
-}
+    http->input_set = calloc(1, set_size);
+#endif /* WIN32 */
 
+    if (!http->input_set)
+      return (0);
+  }
 
-/*
- * 'http_field()' - Return the field index for a field name.
- */
+  do
+  {
+    FD_SET(http->fd, http->input_set);
 
-static http_field_t            /* O - Field index */
-http_field(const char *name)   /* I - String name */
-{
-  int  i;                      /* Looping var */
+    if (msec >= 0)
+    {
+      timeout.tv_sec  = msec / 1000;
+      timeout.tv_usec = (msec % 1000) * 1000;
 
+      nfds = select(http->fd + 1, http->input_set, NULL, NULL, &timeout);
+    }
+    else
+      nfds = select(http->fd + 1, http->input_set, NULL, NULL, NULL);
+  }
+#ifdef WIN32
+  while (nfds < 0 && WSAGetLastError() == WSAEINTR);
+#else
+  while (nfds < 0 && errno == EINTR);
+#endif /* WIN32 */
 
-  for (i = 0; i < HTTP_FIELD_MAX; i ++)
-    if (strcasecmp(name, http_fields[i]) == 0)
-      return ((http_field_t)i);
+  FD_CLR(http->fd, http->input_set);
 
-  return (HTTP_FIELD_UNKNOWN);
+  return (nfds > 0);
 }
 
 
 /*
- * 'http_send()' - Send a request with all fields and the trailing blank line.
+ * 'http_write()' - Write a buffer to a HTTP connection.
  */
-
-static int                     /* O - 0 on success, non-zero on error */
-http_send(http_t       *http,  /* I - HTTP data */
-          http_state_t request,        /* I - Request code */
-         const char   *uri)    /* I - URI */
+static int                             /* O - Number of bytes written */
+http_write(http_t     *http,           /* I - HTTP connection */
+          const char *buffer,          /* I - Buffer for data */
+         int        length)            /* I - Number of bytes to write */
 {
-  int          i;              /* Looping var */
-  char         *ptr,           /* Pointer in buffer */
-               buf[1024];      /* Encoded URI buffer */
-  static const char *codes[] = /* Request code strings */
-               {
-                 NULL,
-                 "OPTIONS",
-                 "GET",
-                 NULL,
-                 "HEAD",
-                 "POST",
-                 NULL,
-                 NULL,
-                 "PUT",
-                 NULL,
-                 "DELETE",
-                 "TRACE",
-                 "CLOSE"
-               };
-  static const char *hex = "0123456789ABCDEF";
-                               /* Hex digits */
+  int  tbytes,                         /* Total bytes sent */
+       bytes;                          /* Bytes sent */
 
 
-  if (http == NULL || uri == NULL)
-    return (-1);
+  tbytes = 0;
 
- /*
-  * Encode the URI as needed...
-  */
+  while (length > 0)
+  {
+#ifdef HAVE_SSL
+    if (http->tls)
+      bytes = http_write_ssl(http, buffer, length);
+    else
+#endif /* HAVE_SSL */
+    bytes = send(http->fd, buffer, length, 0);
 
-  for (ptr = buf; *uri != '\0'; uri ++)
-    if (*uri <= ' ' || *uri >= 127)
+    if (bytes < 0)
     {
-      *ptr ++ = '%';
-      *ptr ++ = hex[(*uri >> 4) & 15];
-      *ptr ++ = hex[*uri & 15];
+#ifdef WIN32
+      if (WSAGetLastError() != http->error)
+      {
+        http->error = WSAGetLastError();
+       continue;
+      }
+#else
+      if (errno == EINTR)
+        continue;
+      else if (errno != http->error && errno != ECONNRESET)
+      {
+        http->error = errno;
+       continue;
+      }
+#endif /* WIN32 */
+
+      DEBUG_puts("http_write: error writing data...\n");
+
+      return (-1);
     }
-    else
-      *ptr ++ = *uri;
 
-  *ptr = '\0';
+    buffer += bytes;
+    tbytes += bytes;
+    length -= bytes;
+  }
 
- /*
-  * See if we had an error the last time around; if so, reconnect...
-  */
+#ifdef DEBUG
+  {
+    int i, j, ch;
+    printf("http_write: wrote %d bytes: \n", tbytes);
+    for (i = 0, buffer -= tbytes; i < tbytes; i += 16)
+    {
+      printf("   ");
 
-  if (http->status == HTTP_ERROR || http->status >= HTTP_BAD_REQUEST)
-    httpReconnect(http);
+      for (j = 0; j < 16 && (i + j) < tbytes; j ++)
+        printf(" %02X", buffer[i + j] & 255);
+
+      while (j < 16)
+      {
+        printf("   ");
+       j ++;
+      }
+
+      printf("    ");
+      for (j = 0; j < 16 && (i + j) < tbytes; j ++)
+      {
+        ch = buffer[i + j] & 255;
+
+       if (ch < ' ' || ch == 127)
+         ch = '.';
+
+        putchar(ch);
+      }
+      putchar('\n');
+    }
+  }
+#endif /* DEBUG */
+
+  return (tbytes);
+}
+
+
+/*
+ * 'http_write_chunk()' - Write a chunked buffer.
+ */
+
+static int                             /* O - Number bytes written */
+http_write_chunk(http_t     *http,     /* I - HTTP connection */
+                 const char *buffer,   /* I - Buffer to write */
+                int        length)     /* I - Length of buffer */
+{
+  char header[255];                    /* Chunk header */
+  int  bytes;                          /* Bytes written */
+
+  DEBUG_printf(("http_write_chunk(http=%p, buffer=%p, length=%d)\n",
+                http, buffer, length));
 
  /*
-  * Send the request header...
+  * Write the chunk header, data, and trailer.
   */
 
-  http->state = request;
-  if (request == HTTP_POST || request == HTTP_PUT)
-    http->state ++;
+  sprintf(header, "%x\r\n", length);
+  if (http_write(http, header, strlen(header)) < 0)
+  {
+    DEBUG_puts("    http_write of length failed!");
+    return (-1);
+  }
 
-  http->status = HTTP_CONTINUE;
+  if ((bytes = http_write(http, buffer, length)) < 0)
+  {
+    DEBUG_puts("    http_write of buffer failed!");
+    return (-1);
+  }
 
-  if (httpPrintf(http, "%s %s HTTP/1.1\r\n", codes[request], buf) < 1)
+  if (http_write(http, "\r\n", 2) < 0)
   {
-    http->status = HTTP_ERROR;
+    DEBUG_puts("    http_write of CR LF failed!");
     return (-1);
   }
 
-  for (i = 0; i < HTTP_FIELD_MAX; i ++)
-    if (http->fields[i][0] != '\0')
-    {
-      DEBUG_printf(("%s: %s\n", http_fields[i], http->fields[i]));
+  return (bytes);
+}
 
-      if (httpPrintf(http, "%s: %s\r\n", http_fields[i], http->fields[i]) < 1)
-      {
-       http->status = HTTP_ERROR;
-       return (-1);
-      }
-    }
 
-  if (httpPrintf(http, "\r\n") < 1)
+#ifdef HAVE_SSL
+/*
+ * 'http_write_ssl()' - Write to a SSL/TLS connection.
+ */
+
+static int                             /* O - Bytes written */
+http_write_ssl(http_t     *http,       /* I - HTTP connection */
+              const char *buf,         /* I - Buffer holding data */
+              int        len)          /* I - Length of buffer */
+{
+#  if defined(HAVE_LIBSSL)
+  return (SSL_write((SSL *)(http->tls), buf, len));
+
+#  elif defined(HAVE_GNUTLS)
+  return (gnutls_record_send(((http_tls_t *)(http->tls))->session, buf, len));
+#  elif defined(HAVE_CDSASSL)
+  int          result;                 /* Return value */
+  OSStatus     error;                  /* Error info */
+  size_t       processed;              /* Number of bytes processed */
+
+
+  error = SSLWrite((SSLContextRef)http->tls, buf, len, &processed);
+
+  switch (error)
   {
-    http->status = HTTP_ERROR;
-    return (-1);
+    case 0 :
+       result = (int)processed;
+       break;
+    case errSSLClosedGraceful :
+       result = 0;
+       break;
+    case errSSLWouldBlock :
+       if (processed)
+         result = (int)processed;
+       else
+       {
+         result = -1;
+         errno = EINTR;
+       }
+       break;
+    default :
+       errno = EPIPE;
+       result = -1;
+       break;
   }
 
-  httpClearFields(http);
-
-  return (0);
+  return (result);
+#  endif /* HAVE_LIBSSL */
 }
+#endif /* HAVE_SSL */
 
 
 /*
- * End of "$Id: http.c,v 1.62 2000/03/20 13:51:48 mike Exp $".
+ * End of "$Id$".
  */