Class: HTTPX::SSL

Inherits:
TCP
  • Object
show all
Defined in:
lib/httpx/io/ssl.rb

Constant Summary collapse

TLS_OPTIONS = 
if OpenSSL::SSL::SSLContext.instance_methods.include?(:alpn_protocols)
  { alpn_protocols: %w[h2 http/1.1].freeze }.freeze
else
  {}.freeze
end

Constants included from Loggable

Loggable::COLORS

Instance Attribute Summary

Attributes inherited from TCP

#addresses, #interests, #ip, #port, #state

Instance Method Summary collapse

Methods inherited from TCP

#closed?, #inspect, #to_io

Methods included from Loggable

#log, #log_exception

Constructor Details

#initialize(_, _, options) ⇒ SSL 



15
16
17
18
19
20
21
22
 
# File 'lib/httpx/io/ssl.rb', line 15

def initialize(_, _, options)
  super
  @ctx = OpenSSL::SSL::SSLContext.new
  ctx_options = TLS_OPTIONS.merge(options.ssl)
  @sni_hostname = ctx_options.delete(:hostname) || @hostname
  @ctx.set_params(ctx_options) unless ctx_options.empty?
  @state = :negotiated if @keep_open
end

Instance Method Details

#can_verify_peer? ⇒ Boolean 



30
31
32
 
# File 'lib/httpx/io/ssl.rb', line 30

def can_verify_peer?
  @ctx.verify_mode == OpenSSL::SSL::VERIFY_PEER
end

#close ⇒ Object 



41
42
43
44
45
46
 
# File 'lib/httpx/io/ssl.rb', line 41

def close
  super
  # allow reconnections
  # connect only works if initial @io is a socket
  @io = @io.io if @io.respond_to?(:io)
end

#connect ⇒ Object 



52
53
54
55
56
57
58
59
60
61
62
63
 
# File 'lib/httpx/io/ssl.rb', line 52

def connect
  super
  return if @state == :negotiated ||
            @state != :connected

  unless @io.is_a?(OpenSSL::SSL::SSLSocket)
    @io = OpenSSL::SSL::SSLSocket.new(@io, @ctx)
    @io.hostname = @sni_hostname
    @io.sync_close = true
  end
  try_ssl_connect
end

#connected? ⇒ Boolean 



48
49
50
 
# File 'lib/httpx/io/ssl.rb', line 48

def connected?
  @state == :negotiated
end

#protocol ⇒ Object 



24
25
26
27
28
 
# File 'lib/httpx/io/ssl.rb', line 24

def protocol
  @io.alpn_protocol || super
rescue StandardError
  super
end

#read(size, buffer) ⇒ Object 



78
79
80
81
82
83
 
# File 'lib/httpx/io/ssl.rb', line 78

def read(_, buffer)
  super
rescue ::IO::WaitWritable
  buffer.clear
  0
end

#try_ssl_connect ⇒ Object

:nocov:



67
68
69
70
71
72
73
74
75
76
 
# File 'lib/httpx/io/ssl.rb', line 67

def try_ssl_connect
  @io.connect_nonblock
  @io.post_connection_check(@sni_hostname) if @ctx.verify_mode != OpenSSL::SSL::VERIFY_NONE
  transition(:negotiated)
  @interests = :w
rescue ::IO::WaitReadable
  @interests = :r
rescue ::IO::WaitWritable
  @interests = :w
end

#verify_hostname(host) ⇒ Object 



34
35
36
37
38
39
 
# File 'lib/httpx/io/ssl.rb', line 34

def verify_hostname(host)
  return false if @ctx.verify_mode == OpenSSL::SSL::VERIFY_NONE
  return false if !@io.respond_to?(:peer_cert) || @io.peer_cert.nil?

  OpenSSL::SSL.verify_certificate_identity(@io.peer_cert, host)
end

#write ⇒ Object 



85
86
87
88
89
 
# File 'lib/httpx/io/ssl.rb', line 85

def write(*)
  super
rescue ::IO::WaitReadable
  0
end