usr.sbin/syslogd/tls.c

1085 	struct tls_conn_settings *tls_conn, const int rc)
1105 			    tls_conn ? tls_conn->hostname : NULL);
1112 		    tls_conn ? tls_conn->hostname : NULL);
1121 	if (tls_conn)
1122 		tls_conn->errorcount++;
1145 	if (!(f->f_un.f_tls.tls_conn =
1146 		calloc(1, sizeof(*f->f_un.f_tls.tls_conn)))
1147 	 || !(f->f_un.f_tls.tls_conn->event = allocev())
1148 	 || !(f->f_un.f_tls.tls_conn->retryevent = allocev())) {
1149 		if (f->f_un.f_tls.tls_conn)
1150 			free(f->f_un.f_tls.tls_conn->event);
1151 		free(f->f_un.f_tls.tls_conn);
1156 	f->f_un.f_tls.tls_conn->x509verify = X509VERIFY_ALWAYS;
1157 	f->f_un.f_tls.tls_conn->reconnect = TLS_RECONNECT_SEC;
1159 	if (!(copy_string(&(f->f_un.f_tls.tls_conn->hostname), p, q))) {
1162 		free_tls_conn(f->f_un.f_tls.tls_conn);
1171 		if (!(copy_string(&(f->f_un.f_tls.tls_conn->port), p, q))) {
1174 			free_tls_conn(f->f_un.f_tls.tls_conn);
1186 			    &(f->f_un.f_tls.tls_conn->subject), &p)
1188 			    &(f->f_un.f_tls.tls_conn->fingerprint), &p)
1190 			    &(f->f_un.f_tls.tls_conn->certfile), &p)) {
1197 				f->f_un.f_tls.tls_conn->x509verify =
1217 	    f->f_un.f_tls.tls_conn->hostname,
1218 	    f->f_un.f_tls.tls_conn->port,
1219 	    f->f_un.f_tls.tls_conn->subject,
1220 	    f->f_un.f_tls.tls_conn->certfile,
1221 	    f->f_un.f_tls.tls_conn->fingerprint);
1316 	tls_in->tls_conn = conn_info;
1517 	DPRINTF(D_TLS, "calling SSL_read(%p, %p, %zu)\n", c->tls_conn->sslptr,
1519 	retrying = (c->tls_conn->state == ST_READING);
1520 	ST_CHANGE(c->tls_conn->state, ST_READING);
1521 	rc = SSL_read(c->tls_conn->sslptr, &(c->inbuf[c->read_pos]),
1524 		error = tls_examine_error("SSL_read()", c->tls_conn->sslptr,
1525 		    c->tls_conn, rc);
1532 				event_del(c->tls_conn->event);
1533 			event_set(c->tls_conn->retryevent, fd,
1535 			EVENT_ADD(c->tls_conn->retryevent);
1539 			if (c->tls_conn->errorcount < TLS_MAXERRORCOUNT)
1556 		EVENT_ADD(c->tls_conn->event);
1559 		free_tls_conn(c->tls_conn);
1564 		ST_CHANGE(c->tls_conn->state, ST_TLS_EST);
1662 		printline(c->tls_conn->hostname, &c->inbuf[c->cur_msg_start],
1724 	    len, f->f_un.f_tls.tls_conn->sslptr ? "" : "un");
1726 	if(f->f_un.f_tls.tls_conn->state == ST_TLS_EST) {
1754 	struct tls_conn_settings *conn_info = smsg->f->f_un.f_tls.tls_conn;
1838  * Close a SSL connection and its queue and its tls_conn.