bin/auditdistd/proto_tls.c

494 	struct tls_ctx *tlsctx;
541 		tlsctx = calloc(1, sizeof(*tlsctx));
542 		if (tlsctx == NULL) {
549 		tlsctx->tls_sock = sock;
550 		tlsctx->tls_tcp = NULL;
551 		tlsctx->tls_side = TLS_SIDE_CLIENT;
552 		tlsctx->tls_wait_called = false;
553 		tlsctx->tls_magic = TLS_CTX_MAGIC;
555 			error = tls_connect_wait(tlsctx, timeout);
558 				tls_close(tlsctx);
562 		*ctxp = tlsctx;
570 	struct tls_ctx *tlsctx = ctx;
574 	PJDLOG_ASSERT(tlsctx != NULL);
575 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
576 	PJDLOG_ASSERT(tlsctx->tls_side == TLS_SIDE_CLIENT);
577 	PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
578 	PJDLOG_ASSERT(!tlsctx->tls_wait_called);
581 	sockfd = proto_descriptor(tlsctx->tls_sock);
599 			tlsctx->tls_wait_called = true;
612 	struct tls_ctx *tlsctx;
619 	tlsctx = malloc(sizeof(*tlsctx));
620 	if (tlsctx == NULL) {
627 		free(tlsctx);
635 		free(tlsctx);
641 	tlsctx->tls_sock = NULL;
642 	tlsctx->tls_tcp = tcp;
643 	tlsctx->tls_side = TLS_SIDE_SERVER_LISTEN;
644 	tlsctx->tls_wait_called = true;
645 	tlsctx->tls_magic = TLS_CTX_MAGIC;
646 	*ctxp = tlsctx;
774 	struct tls_ctx *tlsctx = ctx;
780 	PJDLOG_ASSERT(tlsctx != NULL);
781 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
782 	PJDLOG_ASSERT(tlsctx->tls_side == TLS_SIDE_SERVER_LISTEN);
788 	if (proto_accept(tlsctx->tls_tcp, &tcp) == -1) {
808 		proto_close(tlsctx->tls_tcp);
814 		newtlsctx = calloc(1, sizeof(*tlsctx));
847 	struct tls_ctx *tlsctx;
851 	tlsctx = calloc(1, sizeof(*tlsctx));
852 	if (tlsctx == NULL)
857 		free(tlsctx);
861 	tlsctx->tls_sock = sock;
862 	tlsctx->tls_tcp = NULL;
863 	tlsctx->tls_wait_called = (client ? false : true);
864 	tlsctx->tls_side = (client ? TLS_SIDE_CLIENT : TLS_SIDE_SERVER_WORK);
865 	tlsctx->tls_magic = TLS_CTX_MAGIC;
866 	*ctxp = tlsctx;
874 	struct tls_ctx *tlsctx = ctx;
876 	PJDLOG_ASSERT(tlsctx != NULL);
877 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
878 	PJDLOG_ASSERT(tlsctx->tls_side == TLS_SIDE_CLIENT ||
879 	    tlsctx->tls_side == TLS_SIDE_SERVER_WORK);
880 	PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
881 	PJDLOG_ASSERT(tlsctx->tls_wait_called);
884 	if (proto_send(tlsctx->tls_sock, data, size) == -1)
893 	struct tls_ctx *tlsctx = ctx;
895 	PJDLOG_ASSERT(tlsctx != NULL);
896 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
897 	PJDLOG_ASSERT(tlsctx->tls_side == TLS_SIDE_CLIENT ||
898 	    tlsctx->tls_side == TLS_SIDE_SERVER_WORK);
899 	PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
900 	PJDLOG_ASSERT(tlsctx->tls_wait_called);
903 	if (proto_recv(tlsctx->tls_sock, data, size) == -1)
912 	const struct tls_ctx *tlsctx = ctx;
914 	PJDLOG_ASSERT(tlsctx != NULL);
915 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
917 	switch (tlsctx->tls_side) {
920 		PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
922 		return (proto_descriptor(tlsctx->tls_sock));
924 		PJDLOG_ASSERT(tlsctx->tls_tcp != NULL);
926 		return (proto_descriptor(tlsctx->tls_tcp));
928 		PJDLOG_ABORT("Invalid side (%d).", tlsctx->tls_side);
935 	const struct tls_ctx *tlsctx = ctx;
937 	PJDLOG_ASSERT(tlsctx != NULL);
938 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
940 	return (strcmp(tlsctx->tls_raddr, addr) == 0);
946 	const struct tls_ctx *tlsctx = ctx;
948 	PJDLOG_ASSERT(tlsctx != NULL);
949 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
950 	PJDLOG_ASSERT(tlsctx->tls_wait_called);
952 	switch (tlsctx->tls_side) {
954 		PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
959 		PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
961 		PJDLOG_VERIFY(strlcpy(addr, tlsctx->tls_laddr, size) < size);
964 		PJDLOG_ASSERT(tlsctx->tls_tcp != NULL);
966 		proto_local_address(tlsctx->tls_tcp, addr, size);
972 		PJDLOG_ABORT("Invalid side (%d).", tlsctx->tls_side);
979 	const struct tls_ctx *tlsctx = ctx;
981 	PJDLOG_ASSERT(tlsctx != NULL);
982 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
983 	PJDLOG_ASSERT(tlsctx->tls_wait_called);
985 	switch (tlsctx->tls_side) {
987 		PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
992 		PJDLOG_ASSERT(tlsctx->tls_sock != NULL);
994 		PJDLOG_VERIFY(strlcpy(addr, tlsctx->tls_raddr, size) < size);
997 		PJDLOG_ASSERT(tlsctx->tls_tcp != NULL);
999 		proto_remote_address(tlsctx->tls_tcp, addr, size);
1005 		PJDLOG_ABORT("Invalid side (%d).", tlsctx->tls_side);
1012 	struct tls_ctx *tlsctx = ctx;
1014 	PJDLOG_ASSERT(tlsctx != NULL);
1015 	PJDLOG_ASSERT(tlsctx->tls_magic == TLS_CTX_MAGIC);
1017 	if (tlsctx->tls_sock != NULL) {
1018 		proto_close(tlsctx->tls_sock);
1019 		tlsctx->tls_sock = NULL;
1021 	if (tlsctx->tls_tcp != NULL) {
1022 		proto_close(tlsctx->tls_tcp);
1023 		tlsctx->tls_tcp = NULL;
1025 	tlsctx->tls_side = 0;
1026 	tlsctx->tls_magic = 0;
1027 	free(tlsctx);