[thirdparty/openssl.git] / ssl / bio_ssl.c

/*
 * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>
#include <openssl/crypto.h>
#include "internal/bio.h"
#include <openssl/err.h>
#include "ssl_locl.h"

static int ssl_write(BIO *h, const char *buf, size_t size, size_t *written);
static int ssl_read(BIO *b, char *buf, size_t size, size_t *readbytes);
static int ssl_puts(BIO *h, const char *str);
static long ssl_ctrl(BIO *h, int cmd, long arg1, void *arg2);
static int ssl_new(BIO *h);
static int ssl_free(BIO *data);
static long ssl_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
typedef struct bio_ssl_st {
    SSL *ssl;                   /* The ssl handle :-) */
    /* re-negotiate every time the total number of bytes is this size */
    int num_renegotiates;
    unsigned long renegotiate_count;
    size_t byte_count;
    unsigned long renegotiate_timeout;
    unsigned long last_time;
} BIO_SSL;

static const BIO_METHOD methods_sslp = {
    BIO_TYPE_SSL,
    "ssl",
    ssl_write,
    NULL,                       /* ssl_write_old, */
    ssl_read,
    NULL,                       /* ssl_read_old,  */
    ssl_puts,
    NULL,                       /* ssl_gets,      */
    ssl_ctrl,
    ssl_new,
    ssl_free,
    ssl_callback_ctrl,
};

const BIO_METHOD *BIO_f_ssl(void)
{
    return &methods_sslp;
}

static int ssl_new(BIO *bi)
{
    BIO_SSL *bs = OPENSSL_zalloc(sizeof(*bs));

    if (bs == NULL) {
        BIOerr(BIO_F_SSL_NEW, ERR_R_MALLOC_FAILURE);
        return 0;
    }
    BIO_set_init(bi, 0);
    BIO_set_data(bi, bs);
    /* Clear all flags */
    BIO_clear_flags(bi, ~0);

    return 1;
}

static int ssl_free(BIO *a)
{
    BIO_SSL *bs;

    if (a == NULL)
        return 0;
    bs = BIO_get_data(a);
    if (bs->ssl != NULL)
        SSL_shutdown(bs->ssl);
    if (BIO_get_shutdown(a)) {
        if (BIO_get_init(a))
            SSL_free(bs->ssl);
        /* Clear all flags */
        BIO_clear_flags(a, ~0);
        BIO_set_init(a, 0);
    }
    OPENSSL_free(bs);
    return 1;
}

static int ssl_read(BIO *b, char *buf, size_t size, size_t *readbytes)
{
    int ret = 1;
    BIO_SSL *sb;
    SSL *ssl;
    int retry_reason = 0;
    int r = 0;

    if (buf == NULL)
        return 0;
    sb = BIO_get_data(b);
    ssl = sb->ssl;

    BIO_clear_retry_flags(b);

    ret = ssl_read_internal(ssl, buf, size, readbytes);

    switch (SSL_get_error(ssl, ret)) {
    case SSL_ERROR_NONE:
        if (sb->renegotiate_count > 0) {
            sb->byte_count += *readbytes;
            if (sb->byte_count > sb->renegotiate_count) {
                sb->byte_count = 0;
                sb->num_renegotiates++;
                SSL_renegotiate(ssl);
                r = 1;
            }
        }
        if ((sb->renegotiate_timeout > 0) && (!r)) {
            unsigned long tm;

            tm = (unsigned long)time(NULL);
            if (tm > sb->last_time + sb->renegotiate_timeout) {
                sb->last_time = tm;
                sb->num_renegotiates++;
                SSL_renegotiate(ssl);
            }
        }

        break;
    case SSL_ERROR_WANT_READ:
        BIO_set_retry_read(b);
        break;
    case SSL_ERROR_WANT_WRITE:
        BIO_set_retry_write(b);
        break;
    case SSL_ERROR_WANT_X509_LOOKUP:
        BIO_set_retry_special(b);
        retry_reason = BIO_RR_SSL_X509_LOOKUP;
        break;
    case SSL_ERROR_WANT_ACCEPT:
        BIO_set_retry_special(b);
        retry_reason = BIO_RR_ACCEPT;
        break;
    case SSL_ERROR_WANT_CONNECT:
        BIO_set_retry_special(b);
        retry_reason = BIO_RR_CONNECT;
        break;
    case SSL_ERROR_SYSCALL:
    case SSL_ERROR_SSL:
    case SSL_ERROR_ZERO_RETURN:
    default:
        break;
    }

    BIO_set_retry_reason(b, retry_reason);

    return ret;
}

static int ssl_write(BIO *b, const char *buf, size_t size, size_t *written)
{
    int ret, r = 0;
    int retry_reason = 0;
    SSL *ssl;
    BIO_SSL *bs;

    if (buf == NULL)
        return 0;
    bs = BIO_get_data(b);
    ssl = bs->ssl;

    BIO_clear_retry_flags(b);

    ret = ssl_write_internal(ssl, buf, size, written);

    switch (SSL_get_error(ssl, ret)) {
    case SSL_ERROR_NONE:
        if (bs->renegotiate_count > 0) {
            bs->byte_count += *written;
            if (bs->byte_count > bs->renegotiate_count) {
                bs->byte_count = 0;
                bs->num_renegotiates++;
                SSL_renegotiate(ssl);
                r = 1;
            }
        }
        if ((bs->renegotiate_timeout > 0) && (!r)) {
            unsigned long tm;

            tm = (unsigned long)time(NULL);
            if (tm > bs->last_time + bs->renegotiate_timeout) {
                bs->last_time = tm;
                bs->num_renegotiates++;
                SSL_renegotiate(ssl);
            }
        }
        break;
    case SSL_ERROR_WANT_WRITE:
        BIO_set_retry_write(b);
        break;
    case SSL_ERROR_WANT_READ:
        BIO_set_retry_read(b);
        break;
    case SSL_ERROR_WANT_X509_LOOKUP:
        BIO_set_retry_special(b);
        retry_reason = BIO_RR_SSL_X509_LOOKUP;
        break;
    case SSL_ERROR_WANT_CONNECT:
        BIO_set_retry_special(b);
        retry_reason = BIO_RR_CONNECT;
    case SSL_ERROR_SYSCALL:
    case SSL_ERROR_SSL:
    default:
        break;
    }

    BIO_set_retry_reason(b, retry_reason);

    return ret;
}

static long ssl_ctrl(BIO *b, int cmd, long num, void *ptr)
{
    SSL **sslp, *ssl;
    BIO_SSL *bs, *dbs;
    BIO *dbio, *bio;
    long ret = 1;
    BIO *next;

    bs = BIO_get_data(b);
    next = BIO_next(b);
    ssl = bs->ssl;
    if ((ssl == NULL) && (cmd != BIO_C_SET_SSL))
        return 0;
    switch (cmd) {
    case BIO_CTRL_RESET:
        SSL_shutdown(ssl);

        if (ssl->handshake_func == ssl->method->ssl_connect)
            SSL_set_connect_state(ssl);
        else if (ssl->handshake_func == ssl->method->ssl_accept)
            SSL_set_accept_state(ssl);

        if (!SSL_clear(ssl)) {
            ret = 0;
            break;
        }

        if (next != NULL)
            ret = BIO_ctrl(next, cmd, num, ptr);
        else if (ssl->rbio != NULL)
            ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
        else
            ret = 1;
        break;
    case BIO_CTRL_INFO:
        ret = 0;
        break;
    case BIO_C_SSL_MODE:
        if (num)                /* client mode */
            SSL_set_connect_state(ssl);
        else
            SSL_set_accept_state(ssl);
        break;
    case BIO_C_SET_SSL_RENEGOTIATE_TIMEOUT:
        ret = bs->renegotiate_timeout;
        if (num < 60)
            num = 5;
        bs->renegotiate_timeout = (unsigned long)num;
        bs->last_time = (unsigned long)time(NULL);
        break;
    case BIO_C_SET_SSL_RENEGOTIATE_BYTES:
        ret = bs->renegotiate_count;
        if ((long)num >= 512)
            bs->renegotiate_count = (unsigned long)num;
        break;
    case BIO_C_GET_SSL_NUM_RENEGOTIATES:
        ret = bs->num_renegotiates;
        break;
    case BIO_C_SET_SSL:
        if (ssl != NULL) {
            ssl_free(b);
            if (!ssl_new(b))
                return 0;
        }
        BIO_set_shutdown(b, num);
        ssl = (SSL *)ptr;
        bs->ssl = ssl;
        bio = SSL_get_rbio(ssl);
        if (bio != NULL) {
            if (next != NULL)
                BIO_push(bio, next);
            BIO_set_next(b, bio);
            BIO_up_ref(bio);
        }
        BIO_set_init(b, 1);
        break;
    case BIO_C_GET_SSL:
        if (ptr != NULL) {
            sslp = (SSL **)ptr;
            *sslp = ssl;
        } else
            ret = 0;
        break;
    case BIO_CTRL_GET_CLOSE:
        ret = BIO_get_shutdown(b);
        break;
    case BIO_CTRL_SET_CLOSE:
        BIO_set_shutdown(b, (int)num);
        break;
    case BIO_CTRL_WPENDING:
        ret = BIO_ctrl(ssl->wbio, cmd, num, ptr);
        break;
    case BIO_CTRL_PENDING:
        ret = SSL_pending(ssl);
        if (ret == 0)
            ret = BIO_pending(ssl->rbio);
        break;
    case BIO_CTRL_FLUSH:
        BIO_clear_retry_flags(b);
        ret = BIO_ctrl(ssl->wbio, cmd, num, ptr);
        BIO_copy_next_retry(b);
        break;
    case BIO_CTRL_PUSH:
        if ((next != NULL) && (next != ssl->rbio)) {
            /*
             * We are going to pass ownership of next to the SSL object...but
             * we don't own a reference to pass yet - so up ref
             */
            BIO_up_ref(next);
            SSL_set_bio(ssl, next, next);
        }
        break;
    case BIO_CTRL_POP:
        /* Only detach if we are the BIO explicitly being popped */
        if (b == ptr) {
            /* This will clear the reference we obtained during push */
            SSL_set_bio(ssl, NULL, NULL);
        }
        break;
    case BIO_C_DO_STATE_MACHINE:
        BIO_clear_retry_flags(b);

        BIO_set_retry_reason(b, 0);
        ret = (int)SSL_do_handshake(ssl);

        switch (SSL_get_error(ssl, (int)ret)) {
        case SSL_ERROR_WANT_READ:
            BIO_set_flags(b, BIO_FLAGS_READ | BIO_FLAGS_SHOULD_RETRY);
            break;
        case SSL_ERROR_WANT_WRITE:
            BIO_set_flags(b, BIO_FLAGS_WRITE | BIO_FLAGS_SHOULD_RETRY);
            break;
        case SSL_ERROR_WANT_CONNECT:
            BIO_set_flags(b, BIO_FLAGS_IO_SPECIAL | BIO_FLAGS_SHOULD_RETRY);
            BIO_set_retry_reason(b, BIO_get_retry_reason(next));
            break;
        case SSL_ERROR_WANT_X509_LOOKUP:
            BIO_set_retry_special(b);
            BIO_set_retry_reason(b, BIO_RR_SSL_X509_LOOKUP);
            break;
        default:
            break;
        }
        break;
    case BIO_CTRL_DUP:
        dbio = (BIO *)ptr;
        dbs = BIO_get_data(dbio);
        SSL_free(dbs->ssl);
        dbs->ssl = SSL_dup(ssl);
        dbs->num_renegotiates = bs->num_renegotiates;
        dbs->renegotiate_count = bs->renegotiate_count;
        dbs->byte_count = bs->byte_count;
        dbs->renegotiate_timeout = bs->renegotiate_timeout;
        dbs->last_time = bs->last_time;
        ret = (dbs->ssl != NULL);
        break;
    case BIO_C_GET_FD:
        ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
        break;
    case BIO_CTRL_SET_CALLBACK:
        ret = 0; /* use callback ctrl */
        break;
    default:
        ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
        break;
    }
    return ret;
}

static long ssl_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
{
    SSL *ssl;
    BIO_SSL *bs;
    long ret = 1;

    bs = BIO_get_data(b);
    ssl = bs->ssl;
    switch (cmd) {
    case BIO_CTRL_SET_CALLBACK:
        ret = BIO_callback_ctrl(ssl->rbio, cmd, fp);
        break;
    default:
        ret = 0;
        break;
    }
    return ret;
}

static int ssl_puts(BIO *bp, const char *str)
{
    int n, ret;

    n = strlen(str);
    ret = BIO_write(bp, str, n);
    return ret;
}

BIO *BIO_new_buffer_ssl_connect(SSL_CTX *ctx)
{
#ifndef OPENSSL_NO_SOCK
    BIO *ret = NULL, *buf = NULL, *ssl = NULL;

    if ((buf = BIO_new(BIO_f_buffer())) == NULL)
        return NULL;
    if ((ssl = BIO_new_ssl_connect(ctx)) == NULL)
        goto err;
    if ((ret = BIO_push(buf, ssl)) == NULL)
        goto err;
    return ret;
 err:
    BIO_free(buf);
    BIO_free(ssl);
#endif
    return NULL;
}

BIO *BIO_new_ssl_connect(SSL_CTX *ctx)
{
#ifndef OPENSSL_NO_SOCK
    BIO *ret = NULL, *con = NULL, *ssl = NULL;

    if ((con = BIO_new(BIO_s_connect())) == NULL)
        return NULL;
    if ((ssl = BIO_new_ssl(ctx, 1)) == NULL)
        goto err;
    if ((ret = BIO_push(ssl, con)) == NULL)
        goto err;
    return ret;
 err:
    BIO_free(con);
#endif
    return NULL;
}

BIO *BIO_new_ssl(SSL_CTX *ctx, int client)
{
    BIO *ret;
    SSL *ssl;

    if ((ret = BIO_new(BIO_f_ssl())) == NULL)
        return NULL;
    if ((ssl = SSL_new(ctx)) == NULL) {
        BIO_free(ret);
        return NULL;
    }
    if (client)
        SSL_set_connect_state(ssl);
    else
        SSL_set_accept_state(ssl);

    BIO_set_ssl(ret, ssl, BIO_CLOSE);
    return ret;
}

int BIO_ssl_copy_session_id(BIO *t, BIO *f)
{
    BIO_SSL *tdata, *fdata;
    t = BIO_find_type(t, BIO_TYPE_SSL);
    f = BIO_find_type(f, BIO_TYPE_SSL);
    if ((t == NULL) || (f == NULL))
        return 0;
    tdata = BIO_get_data(t);
    fdata = BIO_get_data(f);
    if ((tdata->ssl == NULL) || (fdata->ssl == NULL))
        return 0;
    if (!SSL_copy_session_id(tdata->ssl, (fdata->ssl)))
        return 0;
    return 1;
}

void BIO_ssl_shutdown(BIO *b)
{
    BIO_SSL *bdata;

    for (; b != NULL; b = BIO_next(b)) {
        if (BIO_method_type(b) != BIO_TYPE_SSL)
            continue;
        bdata = BIO_get_data(b);
        if (bdata != NULL && bdata->ssl != NULL)
            SSL_shutdown(bdata->ssl);
    }
}
Commit	Line	Data
846e33c7 RS	1	/*
846e33c7 RS	2	* Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
d02b48c6	3	*
2c18d164	4	* Licensed under the Apache License 2.0 (the "License"). You may not use
846e33c7 RS	5	* this file except in compliance with the License. You can obtain a copy
	6	* in the file LICENSE in the source distribution or at
	7	* https://www.openssl.org/source/license.html
d02b48c6 RE	8	*/
	9
	10	#include <stdio.h>
58964a49	11	#include <stdlib.h>
d02b48c6 RE	12	#include <string.h>
d02b48c6 RE	13	#include <errno.h>
ec577822	14	#include <openssl/crypto.h>
a146ae55	15	#include "internal/bio.h"
ec577822	16	#include <openssl/err.h>
b6ba4014	17	#include "ssl_locl.h"
d02b48c6	18
f42fd819 MC	19	static int ssl_write(BIO h, const char buf, size_t size, size_t *written);
f42fd819 MC	20	static int ssl_read(BIO b, char buf, size_t size, size_t *readbytes);
0e1c0612 UM	21	static int ssl_puts(BIO h, const char str);
0e1c0612 UM	22	static long ssl_ctrl(BIO h, int cmd, long arg1, void arg2);
d02b48c6 RE	23	static int ssl_new(BIO *h);
d02b48c6 RE	24	static int ssl_free(BIO *data);
fce78bd4	25	static long ssl_callback_ctrl(BIO h, int cmd, BIO_info_cb fp);
0f113f3e MC	26	typedef struct bio_ssl_st {
	27	SSL ssl; / The ssl handle :-) */
	28	/* re-negotiate every time the total number of bytes is this size */
	29	int num_renegotiates;
	30	unsigned long renegotiate_count;
8051ab2b	31	size_t byte_count;
0f113f3e MC	32	unsigned long renegotiate_timeout;
	33	unsigned long last_time;
	34	} BIO_SSL;
	35
04f6b0fd	36	static const BIO_METHOD methods_sslp = {
27ab9195 DB	37	BIO_TYPE_SSL,
27ab9195 DB	38	"ssl",
0f113f3e	39	ssl_write,
b4ff6622	40	NULL, /* ssl_write_old, */
0f113f3e	41	ssl_read,
b4ff6622	42	NULL, /* ssl_read_old, */
0f113f3e	43	ssl_puts,
b4ff6622	44	NULL, /* ssl_gets, */
0f113f3e MC	45	ssl_ctrl,
	46	ssl_new,
	47	ssl_free,
	48	ssl_callback_ctrl,
	49	};
a9188d4e	50
04f6b0fd	51	const BIO_METHOD *BIO_f_ssl(void)
0f113f3e	52	{
26a7d938	53	return &methods_sslp;
0f113f3e	54	}
d02b48c6	55
6b691a5c	56	static int ssl_new(BIO *bi)
0f113f3e	57	{
b51bce94	58	BIO_SSL bs = OPENSSL_zalloc(sizeof(bs));
0f113f3e	59
0f113f3e MC	60	if (bs == NULL) {
0f113f3e MC	61	BIOerr(BIO_F_SSL_NEW, ERR_R_MALLOC_FAILURE);
26a7d938	62	return 0;
0f113f3e	63	}
a146ae55 MC	64	BIO_set_init(bi, 0);
	65	BIO_set_data(bi, bs);
	66	/* Clear all flags */
	67	BIO_clear_flags(bi, ~0);
	68
	69	return 1;
0f113f3e	70	}
d02b48c6	71
6b691a5c	72	static int ssl_free(BIO *a)
0f113f3e MC	73	{
	74	BIO_SSL *bs;
	75
	76	if (a == NULL)
26a7d938	77	return 0;
a146ae55	78	bs = BIO_get_data(a);
0f113f3e MC	79	if (bs->ssl != NULL)
0f113f3e MC	80	SSL_shutdown(bs->ssl);
a146ae55 MC	81	if (BIO_get_shutdown(a)) {
a146ae55 MC	82	if (BIO_get_init(a))
0f113f3e	83	SSL_free(bs->ssl);
a146ae55 MC	84	/* Clear all flags */
	85	BIO_clear_flags(a, ~0);
	86	BIO_set_init(a, 0);
0f113f3e	87	}
a146ae55 MC	88	OPENSSL_free(bs);
a146ae55 MC	89	return 1;
0f113f3e MC	90	}
0f113f3e MC	91
f42fd819	92	static int ssl_read(BIO b, char buf, size_t size, size_t *readbytes)
0f113f3e MC	93	{
	94	int ret = 1;
	95	BIO_SSL *sb;
	96	SSL *ssl;
	97	int retry_reason = 0;
	98	int r = 0;
d02b48c6	99
f42fd819 MC	100	if (buf == NULL)
f42fd819 MC	101	return 0;
a146ae55	102	sb = BIO_get_data(b);
0f113f3e	103	ssl = sb->ssl;
d02b48c6	104
0f113f3e	105	BIO_clear_retry_flags(b);
d02b48c6	106
4ee7d3f9	107	ret = ssl_read_internal(ssl, buf, size, readbytes);
0f113f3e MC	108
	109	switch (SSL_get_error(ssl, ret)) {
	110	case SSL_ERROR_NONE:
0f113f3e	111	if (sb->renegotiate_count > 0) {
ac0edec1	112	sb->byte_count += *readbytes;
0f113f3e MC	113	if (sb->byte_count > sb->renegotiate_count) {
	114	sb->byte_count = 0;
	115	sb->num_renegotiates++;
	116	SSL_renegotiate(ssl);
	117	r = 1;
	118	}
	119	}
	120	if ((sb->renegotiate_timeout > 0) && (!r)) {
	121	unsigned long tm;
	122
	123	tm = (unsigned long)time(NULL);
	124	if (tm > sb->last_time + sb->renegotiate_timeout) {
	125	sb->last_time = tm;
	126	sb->num_renegotiates++;
	127	SSL_renegotiate(ssl);
	128	}
	129	}
	130
	131	break;
	132	case SSL_ERROR_WANT_READ:
	133	BIO_set_retry_read(b);
	134	break;
	135	case SSL_ERROR_WANT_WRITE:
	136	BIO_set_retry_write(b);
	137	break;
	138	case SSL_ERROR_WANT_X509_LOOKUP:
	139	BIO_set_retry_special(b);
	140	retry_reason = BIO_RR_SSL_X509_LOOKUP;
	141	break;
	142	case SSL_ERROR_WANT_ACCEPT:
	143	BIO_set_retry_special(b);
	144	retry_reason = BIO_RR_ACCEPT;
	145	break;
	146	case SSL_ERROR_WANT_CONNECT:
	147	BIO_set_retry_special(b);
	148	retry_reason = BIO_RR_CONNECT;
	149	break;
	150	case SSL_ERROR_SYSCALL:
	151	case SSL_ERROR_SSL:
	152	case SSL_ERROR_ZERO_RETURN:
	153	default:
	154	break;
	155	}
	156
a146ae55	157	BIO_set_retry_reason(b, retry_reason);
d07aee2c	158
3befffa3	159	return ret;
0f113f3e	160	}
d02b48c6	161
f42fd819	162	static int ssl_write(BIO b, const char buf, size_t size, size_t *written)
0f113f3e MC	163	{
	164	int ret, r = 0;
	165	int retry_reason = 0;
	166	SSL *ssl;
	167	BIO_SSL *bs;
	168
f42fd819 MC	169	if (buf == NULL)
f42fd819 MC	170	return 0;
a146ae55	171	bs = BIO_get_data(b);
0f113f3e MC	172	ssl = bs->ssl;
	173
	174	BIO_clear_retry_flags(b);
	175
4ee7d3f9	176	ret = ssl_write_internal(ssl, buf, size, written);
0f113f3e MC	177
	178	switch (SSL_get_error(ssl, ret)) {
	179	case SSL_ERROR_NONE:
0f113f3e	180	if (bs->renegotiate_count > 0) {
8051ab2b	181	bs->byte_count += *written;
0f113f3e MC	182	if (bs->byte_count > bs->renegotiate_count) {
	183	bs->byte_count = 0;
	184	bs->num_renegotiates++;
	185	SSL_renegotiate(ssl);
	186	r = 1;
	187	}
	188	}
	189	if ((bs->renegotiate_timeout > 0) && (!r)) {
	190	unsigned long tm;
	191
	192	tm = (unsigned long)time(NULL);
	193	if (tm > bs->last_time + bs->renegotiate_timeout) {
	194	bs->last_time = tm;
	195	bs->num_renegotiates++;
	196	SSL_renegotiate(ssl);
	197	}
	198	}
	199	break;
	200	case SSL_ERROR_WANT_WRITE:
	201	BIO_set_retry_write(b);
	202	break;
	203	case SSL_ERROR_WANT_READ:
	204	BIO_set_retry_read(b);
	205	break;
	206	case SSL_ERROR_WANT_X509_LOOKUP:
	207	BIO_set_retry_special(b);
	208	retry_reason = BIO_RR_SSL_X509_LOOKUP;
	209	break;
	210	case SSL_ERROR_WANT_CONNECT:
	211	BIO_set_retry_special(b);
	212	retry_reason = BIO_RR_CONNECT;
	213	case SSL_ERROR_SYSCALL:
	214	case SSL_ERROR_SSL:
	215	default:
	216	break;
	217	}
	218
a146ae55	219	BIO_set_retry_reason(b, retry_reason);
3befffa3	220
a146ae55	221	return ret;
0f113f3e	222	}
d02b48c6	223
0e1c0612	224	static long ssl_ctrl(BIO b, int cmd, long num, void ptr)
0f113f3e MC	225	{
0f113f3e MC	226	SSL *sslp, ssl;
a146ae55	227	BIO_SSL bs, dbs;
0f113f3e MC	228	BIO dbio, bio;
0f113f3e MC	229	long ret = 1;
a146ae55	230	BIO *next;
0f113f3e	231
a146ae55 MC	232	bs = BIO_get_data(b);
a146ae55 MC	233	next = BIO_next(b);
0f113f3e MC	234	ssl = bs->ssl;
0f113f3e MC	235	if ((ssl == NULL) && (cmd != BIO_C_SET_SSL))
26a7d938	236	return 0;
0f113f3e MC	237	switch (cmd) {
	238	case BIO_CTRL_RESET:
	239	SSL_shutdown(ssl);
	240
	241	if (ssl->handshake_func == ssl->method->ssl_connect)
	242	SSL_set_connect_state(ssl);
	243	else if (ssl->handshake_func == ssl->method->ssl_accept)
	244	SSL_set_accept_state(ssl);
	245
61986d32	246	if (!SSL_clear(ssl)) {
69f68237 MC	247	ret = 0;
	248	break;
	249	}
0f113f3e	250
a146ae55 MC	251	if (next != NULL)
a146ae55 MC	252	ret = BIO_ctrl(next, cmd, num, ptr);
0f113f3e MC	253	else if (ssl->rbio != NULL)
	254	ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
	255	else
	256	ret = 1;
	257	break;
	258	case BIO_CTRL_INFO:
	259	ret = 0;
	260	break;
	261	case BIO_C_SSL_MODE:
	262	if (num) /* client mode */
	263	SSL_set_connect_state(ssl);
	264	else
	265	SSL_set_accept_state(ssl);
	266	break;
	267	case BIO_C_SET_SSL_RENEGOTIATE_TIMEOUT:
	268	ret = bs->renegotiate_timeout;
	269	if (num < 60)
	270	num = 5;
	271	bs->renegotiate_timeout = (unsigned long)num;
	272	bs->last_time = (unsigned long)time(NULL);
	273	break;
	274	case BIO_C_SET_SSL_RENEGOTIATE_BYTES:
	275	ret = bs->renegotiate_count;
	276	if ((long)num >= 512)
	277	bs->renegotiate_count = (unsigned long)num;
	278	break;
	279	case BIO_C_GET_SSL_NUM_RENEGOTIATES:
	280	ret = bs->num_renegotiates;
	281	break;
	282	case BIO_C_SET_SSL:
	283	if (ssl != NULL) {
	284	ssl_free(b);
	285	if (!ssl_new(b))
	286	return 0;
	287	}
a146ae55	288	BIO_set_shutdown(b, num);
0f113f3e	289	ssl = (SSL *)ptr;
a146ae55	290	bs->ssl = ssl;
0f113f3e MC	291	bio = SSL_get_rbio(ssl);
0f113f3e MC	292	if (bio != NULL) {
a146ae55 MC	293	if (next != NULL)
	294	BIO_push(bio, next);
	295	BIO_set_next(b, bio);
fb46be03	296	BIO_up_ref(bio);
0f113f3e	297	}
a146ae55	298	BIO_set_init(b, 1);
0f113f3e MC	299	break;
	300	case BIO_C_GET_SSL:
	301	if (ptr != NULL) {
	302	sslp = (SSL **)ptr;
	303	*sslp = ssl;
	304	} else
	305	ret = 0;
	306	break;
	307	case BIO_CTRL_GET_CLOSE:
a146ae55	308	ret = BIO_get_shutdown(b);
0f113f3e MC	309	break;
0f113f3e MC	310	case BIO_CTRL_SET_CLOSE:
a146ae55	311	BIO_set_shutdown(b, (int)num);
0f113f3e MC	312	break;
	313	case BIO_CTRL_WPENDING:
	314	ret = BIO_ctrl(ssl->wbio, cmd, num, ptr);
	315	break;
	316	case BIO_CTRL_PENDING:
	317	ret = SSL_pending(ssl);
	318	if (ret == 0)
	319	ret = BIO_pending(ssl->rbio);
	320	break;
	321	case BIO_CTRL_FLUSH:
	322	BIO_clear_retry_flags(b);
	323	ret = BIO_ctrl(ssl->wbio, cmd, num, ptr);
	324	BIO_copy_next_retry(b);
	325	break;
	326	case BIO_CTRL_PUSH:
a146ae55	327	if ((next != NULL) && (next != ssl->rbio)) {
eddef305 MC	328	/*
	329	* We are going to pass ownership of next to the SSL object...but
	330	* we don't own a reference to pass yet - so up ref
	331	*/
	332	BIO_up_ref(next);
a146ae55	333	SSL_set_bio(ssl, next, next);
0f113f3e MC	334	}
	335	break;
	336	case BIO_CTRL_POP:
	337	/* Only detach if we are the BIO explicitly being popped */
	338	if (b == ptr) {
b46fe860 MC	339	/* This will clear the reference we obtained during push */
b46fe860 MC	340	SSL_set_bio(ssl, NULL, NULL);
0f113f3e MC	341	}
	342	break;
	343	case BIO_C_DO_STATE_MACHINE:
	344	BIO_clear_retry_flags(b);
	345
a146ae55	346	BIO_set_retry_reason(b, 0);
0f113f3e MC	347	ret = (int)SSL_do_handshake(ssl);
	348
	349	switch (SSL_get_error(ssl, (int)ret)) {
	350	case SSL_ERROR_WANT_READ:
	351	BIO_set_flags(b, BIO_FLAGS_READ \| BIO_FLAGS_SHOULD_RETRY);
	352	break;
	353	case SSL_ERROR_WANT_WRITE:
	354	BIO_set_flags(b, BIO_FLAGS_WRITE \| BIO_FLAGS_SHOULD_RETRY);
	355	break;
	356	case SSL_ERROR_WANT_CONNECT:
	357	BIO_set_flags(b, BIO_FLAGS_IO_SPECIAL \| BIO_FLAGS_SHOULD_RETRY);
a146ae55	358	BIO_set_retry_reason(b, BIO_get_retry_reason(next));
0f113f3e	359	break;
f1c412c9 DSH	360	case SSL_ERROR_WANT_X509_LOOKUP:
f1c412c9 DSH	361	BIO_set_retry_special(b);
a146ae55	362	BIO_set_retry_reason(b, BIO_RR_SSL_X509_LOOKUP);
f1c412c9	363	break;
0f113f3e MC	364	default:
	365	break;
	366	}
	367	break;
	368	case BIO_CTRL_DUP:
	369	dbio = (BIO *)ptr;
a146ae55 MC	370	dbs = BIO_get_data(dbio);
	371	SSL_free(dbs->ssl);
	372	dbs->ssl = SSL_dup(ssl);
dbd5c34f MC	373	dbs->num_renegotiates = bs->num_renegotiates;
	374	dbs->renegotiate_count = bs->renegotiate_count;
	375	dbs->byte_count = bs->byte_count;
	376	dbs->renegotiate_timeout = bs->renegotiate_timeout;
	377	dbs->last_time = bs->last_time;
a146ae55	378	ret = (dbs->ssl != NULL);
0f113f3e MC	379	break;
	380	case BIO_C_GET_FD:
	381	ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
	382	break;
	383	case BIO_CTRL_SET_CALLBACK:
2722ff50	384	ret = 0; /* use callback ctrl */
0f113f3e	385	break;
0f113f3e MC	386	default:
	387	ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
	388	break;
	389	}
26a7d938	390	return ret;
0f113f3e	391	}
d02b48c6	392
fce78bd4	393	static long ssl_callback_ctrl(BIO b, int cmd, BIO_info_cb fp)
0f113f3e MC	394	{
	395	SSL *ssl;
	396	BIO_SSL *bs;
	397	long ret = 1;
	398
a146ae55	399	bs = BIO_get_data(b);
0f113f3e MC	400	ssl = bs->ssl;
	401	switch (cmd) {
	402	case BIO_CTRL_SET_CALLBACK:
fce78bd4	403	ret = BIO_callback_ctrl(ssl->rbio, cmd, fp);
0f113f3e MC	404	break;
0f113f3e MC	405	default:
fce78bd4	406	ret = 0;
0f113f3e MC	407	break;
0f113f3e MC	408	}
26a7d938	409	return ret;
0f113f3e	410	}
d3442bc7	411
0e1c0612	412	static int ssl_puts(BIO bp, const char str)
0f113f3e MC	413	{
0f113f3e MC	414	int n, ret;
d02b48c6	415
0f113f3e MC	416	n = strlen(str);
0f113f3e MC	417	ret = BIO_write(bp, str, n);
26a7d938	418	return ret;
0f113f3e	419	}
d02b48c6	420
6b691a5c	421	BIO BIO_new_buffer_ssl_connect(SSL_CTX ctx)
0f113f3e	422	{
85d686e7	423	#ifndef OPENSSL_NO_SOCK
0f113f3e MC	424	BIO ret = NULL, buf = NULL, *ssl = NULL;
	425
	426	if ((buf = BIO_new(BIO_f_buffer())) == NULL)
26a7d938	427	return NULL;
0f113f3e MC	428	if ((ssl = BIO_new_ssl_connect(ctx)) == NULL)
	429	goto err;
	430	if ((ret = BIO_push(buf, ssl)) == NULL)
	431	goto err;
26a7d938	432	return ret;
0f113f3e	433	err:
ca3a82c3 RS	434	BIO_free(buf);
ca3a82c3 RS	435	BIO_free(ssl);
85d686e7	436	#endif
26a7d938	437	return NULL;
0f113f3e	438	}
58964a49	439
6b691a5c	440	BIO BIO_new_ssl_connect(SSL_CTX ctx)
0f113f3e	441	{
4a1fbd13	442	#ifndef OPENSSL_NO_SOCK
0f113f3e MC	443	BIO ret = NULL, con = NULL, *ssl = NULL;
	444
	445	if ((con = BIO_new(BIO_s_connect())) == NULL)
26a7d938	446	return NULL;
0f113f3e MC	447	if ((ssl = BIO_new_ssl(ctx, 1)) == NULL)
	448	goto err;
	449	if ((ret = BIO_push(ssl, con)) == NULL)
	450	goto err;
26a7d938	451	return ret;
0f113f3e	452	err:
ca3a82c3	453	BIO_free(con);
4a1fbd13	454	#endif
26a7d938	455	return NULL;
0f113f3e	456	}
58964a49	457
6b691a5c	458	BIO BIO_new_ssl(SSL_CTX ctx, int client)
0f113f3e MC	459	{
	460	BIO *ret;
	461	SSL *ssl;
	462
	463	if ((ret = BIO_new(BIO_f_ssl())) == NULL)
26a7d938	464	return NULL;
0f113f3e MC	465	if ((ssl = SSL_new(ctx)) == NULL) {
0f113f3e MC	466	BIO_free(ret);
26a7d938	467	return NULL;
0f113f3e MC	468	}
	469	if (client)
	470	SSL_set_connect_state(ssl);
	471	else
	472	SSL_set_accept_state(ssl);
	473
	474	BIO_set_ssl(ret, ssl, BIO_CLOSE);
26a7d938	475	return ret;
0f113f3e	476	}
d02b48c6	477
6b691a5c	478	int BIO_ssl_copy_session_id(BIO t, BIO f)
0f113f3e	479	{
a146ae55	480	BIO_SSL tdata, fdata;
0f113f3e MC	481	t = BIO_find_type(t, BIO_TYPE_SSL);
	482	f = BIO_find_type(f, BIO_TYPE_SSL);
	483	if ((t == NULL) \|\| (f == NULL))
a146ae55 MC	484	return 0;
	485	tdata = BIO_get_data(t);
	486	fdata = BIO_get_data(f);
	487	if ((tdata->ssl == NULL) \|\| (fdata->ssl == NULL))
26a7d938	488	return 0;
a146ae55	489	if (!SSL_copy_session_id(tdata->ssl, (fdata->ssl)))
17dd65e6	490	return 0;
208fb891	491	return 1;
0f113f3e	492	}
d02b48c6	493
6b691a5c	494	void BIO_ssl_shutdown(BIO *b)
0f113f3e	495	{
9015d34e RS	496	BIO_SSL *bdata;
	497
	498	for (; b != NULL; b = BIO_next(b)) {
	499	if (BIO_method_type(b) != BIO_TYPE_SSL)
	500	continue;
	501	bdata = BIO_get_data(b);
	502	if (bdata != NULL && bdata->ssl != NULL)
	503	SSL_shutdown(bdata->ssl);
	504	}
0f113f3e	505	}