Module: HTTPX::TLS::SSL

Extended by:
FFI::Library
Defined in:
lib/httpx/io/tls/ffi.rb

Overview

Copyright © 2004-2013 Cotag Media

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Constant Summary collapse

Error = 
HTTPX::TLS::Error
SSL_ST_OK = 
0x03
BIO_CTRL_PENDING =

opt - is their more data buffered?

10
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT =

Verify callback

2
X509_V_ERR_HOSTNAME_MISMATCH = 
62
X509_V_ERR_CERT_REJECTED = 
28
SSL_CTRL_OPTIONS = 
32
SSL_CTRL_MODE = 
33
SSL_CTRL_SET_SESS_CACHE_SIZE = 
42
SSL_CTRL_SET_TLSEXT_HOSTNAME = 
55
SSL_CTRL_SET_TLSEXT_SERVERNAME_CB = 
53
TLSEXT_NAMETYPE_host_name = 
0
SSL_TLSEXT_ERR_OK = 
0
SSL_TLSEXT_ERR_ALERT_WARNING = 
1
SSL_TLSEXT_ERR_ALERT_FATAL = 
2
SSL_TLSEXT_ERR_NOACK = 
3
PrivateMaterials = 
<<~KEYSTR
  -----BEGIN RSA PRIVATE KEY-----
  MIICXAIBAAKBgQDCYYhcw6cGRbhBVShKmbWm7UVsEoBnUf0cCh8AX+MKhMxwVDWV
  Igdskntn3cSJjRtmgVJHIK0lpb/FYHQB93Ohpd9/Z18pDmovfFF9nDbFF0t39hJ/
  AqSzFB3GiVPoFFZJEE1vJqh+3jzsSF5K56bZ6azz38VlZgXeSozNW5bXkQIDAQAB
  AoGALA89gIFcr6BIBo8N5fL3aNHpZXjAICtGav+kTUpuxSiaym9cAeTHuAVv8Xgk
  H2Wbq11uz+6JMLpkQJH/WZ7EV59DPOicXrp0Imr73F3EXBfR7t2EQDYHPMthOA1D
  I9EtCzvV608Ze90hiJ7E3guGrGppZfJ+eUWCPgy8CZH1vRECQQDv67rwV/oU1aDo
  6/+d5nqjeW6mWkGqTnUU96jXap8EIw6B+0cUKskwx6mHJv+tEMM2748ZY7b0yBlg
  w4KDghbFAkEAz2h8PjSJG55LwqmXih1RONSgdN9hjB12LwXL1CaDh7/lkEhq0PlK
  PCAUwQSdM17Sl0Xxm2CZiekTSlwmHrtqXQJAF3+8QJwtV2sRJp8u2zVe37IeH1cJ
  xXeHyjTzqZ2803fnjN2iuZvzNr7noOA1/Kp+pFvUZUU5/0G2Ep8zolPUjQJAFA7k
  xRdLkzIx3XeNQjwnmLlncyYPRv+qaE3FMpUu7zftuZBnVCJnvXzUxP3vPgKTlzGa
  dg5XivDRfsV+okY5uQJBAMV4FesUuLQVEKb6lMs7rzZwpeGQhFDRfywJzfom2TLn
  2RdJQQ3dcgnhdVDgt5o1qkmsqQh8uJrJ9SdyLIaZQIc=
  -----END RSA PRIVATE KEY-----
  -----BEGIN CERTIFICATE-----
  MIID6TCCA1KgAwIBAgIJANm4W/Tzs+s+MA0GCSqGSIb3DQEBBQUAMIGqMQswCQYD
  VQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5ldyBZb3JrMRYw
  FAYDVQQKEw1TdGVhbWhlYXQubmV0MRQwEgYDVQQLEwtFbmdpbmVlcmluZzEdMBsG
  A1UEAxMUb3BlbmNhLnN0ZWFtaGVhdC5uZXQxKDAmBgkqhkiG9w0BCQEWGWVuZ2lu
  ZWVyaW5nQHN0ZWFtaGVhdC5uZXQwHhcNMDYwNTA1MTcwNjAzWhcNMjQwMjIwMTcw
  NjAzWjCBqjELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE5ldyBZb3JrMREwDwYDVQQH
  EwhOZXcgWW9yazEWMBQGA1UEChMNU3RlYW1oZWF0Lm5ldDEUMBIGA1UECxMLRW5n
  aW5lZXJpbmcxHTAbBgNVBAMTFG9wZW5jYS5zdGVhbWhlYXQubmV0MSgwJgYJKoZI
  hvcNAQkBFhllbmdpbmVlcmluZ0BzdGVhbWhlYXQubmV0MIGfMA0GCSqGSIb3DQEB
  AQUAA4GNADCBiQKBgQDCYYhcw6cGRbhBVShKmbWm7UVsEoBnUf0cCh8AX+MKhMxw
  VDWVIgdskntn3cSJjRtmgVJHIK0lpb/FYHQB93Ohpd9/Z18pDmovfFF9nDbFF0t3
  9hJ/AqSzFB3GiVPoFFZJEE1vJqh+3jzsSF5K56bZ6azz38VlZgXeSozNW5bXkQID
  AQABo4IBEzCCAQ8wHQYDVR0OBBYEFPJvPd1Fcmd8o/Tm88r+NjYPICCkMIHfBgNV
  HSMEgdcwgdSAFPJvPd1Fcmd8o/Tm88r+NjYPICCkoYGwpIGtMIGqMQswCQYDVQQG
  EwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5ldyBZb3JrMRYwFAYD
  VQQKEw1TdGVhbWhlYXQubmV0MRQwEgYDVQQLEwtFbmdpbmVlcmluZzEdMBsGA1UE
  AxMUb3BlbmNhLnN0ZWFtaGVhdC5uZXQxKDAmBgkqhkiG9w0BCQEWGWVuZ2luZWVy
  aW5nQHN0ZWFtaGVhdC5uZXSCCQDZuFv087PrPjAMBgNVHRMEBTADAQH/MA0GCSqG
  SIb3DQEBBQUAA4GBAC1CXey/4UoLgJiwcEMDxOvW74plks23090iziFIlGgcIhk0
  Df6hTAs7H3MWww62ddvR8l07AWfSzSP5L6mDsbvq7EmQsmPODwb6C+i2aF3EDL8j
  uw73m4YIGI0Zw2XdBpiOGkx2H56Kya6mJJe/5XORZedh1wpI7zki01tHYbcy
  -----END CERTIFICATE-----
KEYSTR
BuiltinPasswdCB = 
FFI::Function.new(:int, %i[pointer int int pointer]) do |buffer, _len, _flag, _data|
  buffer.write_string("kittycat")
  8
end
SSL_MODE_RELEASE_BUFFERS =

Save RAM by releasing read and write buffers when they’re empty

0x00000010
SSL_OP_ALL = 
0x80000BFF
SSL_FILETYPE_PEM = 
1
DEFAULT_PRIVATE = 
pointer.get_pointer(0)
DEFAULT_CERT = 
pointer.get_pointer(0)

Class Method Summary collapse

Class Method Details

.BIO_pending(bio) ⇒ Object 



115
116
117
 
# File 'lib/httpx/io/tls/ffi.rb', line 115

def self.BIO_pending(bio)
  BIO_ctrl(bio, BIO_CTRL_PENDING, 0, nil)
end

.get_current_cipher(ssl) ⇒ Object 



204
205
206
207
 
# File 'lib/httpx/io/tls/ffi.rb', line 204

def self.get_current_cipher(ssl)
  cipher = SSL_get_current_cipher(ssl)
  SSL_CIPHER_get_name(cipher)
end

.get_version(ssl) ⇒ Object 



200
201
202
 
# File 'lib/httpx/io/tls/ffi.rb', line 200

def self.get_version(ssl)
  SSL_get_version(ssl)
end

.SSL_CTX_sess_set_cache_size(ssl_ctx, op) ⇒ Object 



221
222
223
 
# File 'lib/httpx/io/tls/ffi.rb', line 221

def self.SSL_CTX_sess_set_cache_size(ssl_ctx, op)
  SSL_CTX_ctrl(ssl_ctx, SSL_CTRL_SET_SESS_CACHE_SIZE, op, nil)
end

.SSL_CTX_set_mode(ssl_ctx, op) ⇒ Object 



217
218
219
 
# File 'lib/httpx/io/tls/ffi.rb', line 217

def self.SSL_CTX_set_mode(ssl_ctx, op)
  SSL_CTX_ctrl(ssl_ctx, SSL_CTRL_MODE, op, nil)
end

.SSL_CTX_set_options(ssl_ctx, op) ⇒ Object 



213
214
215
 
# File 'lib/httpx/io/tls/ffi.rb', line 213

def self.SSL_CTX_set_options(ssl_ctx, op)
  SSL_CTX_ctrl(ssl_ctx, SSL_CTRL_OPTIONS, op, nil)
end

.SSL_CTX_set_tlsext_servername_callback(ctx, callback) ⇒ Object 



238
239
240
 
# File 'lib/httpx/io/tls/ffi.rb', line 238

def self.SSL_CTX_set_tlsext_servername_callback(ctx, callback)
  SSL_CTX_callback_ctrl(ctx, SSL_CTRL_SET_TLSEXT_SERVERNAME_CB, callback)
end

.SSL_set_tlsext_host_name(ssl, host_name) ⇒ Object

Raises:



228
229
230
231
 
# File 'lib/httpx/io/tls/ffi.rb', line 228

def self.SSL_set_tlsext_host_name(ssl, host_name)
  name_ptr = FFI::MemoryPointer.from_string(host_name)
  raise Error, "error setting SNI hostname" if SSL_ctrl(ssl, SSL_CTRL_SET_TLSEXT_HOSTNAME, TLSEXT_NAMETYPE_host_name, name_ptr).zero?
end