1/* apps/s_time.c */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#define NO_SHUTDOWN
60
61/*-----------------------------------------
62   s_time - SSL client connection timer program
63   Written and donated by Larry Streepy <streepy@healthcare.com>
64  -----------------------------------------*/
65
66#include <stdio.h>
67#include <stdlib.h>
68#include <string.h>
69
70#define USE_SOCKETS
71#include "apps.h"
72#ifdef OPENSSL_NO_STDIO
73#define APPS_WIN16
74#endif
75#include <openssl/x509.h>
76#include <openssl/ssl.h>
77#include <openssl/pem.h>
78#include "s_apps.h"
79#include <openssl/err.h>
80#ifdef WIN32_STUFF
81#include "winmain.h"
82#include "wintext.h"
83#endif
84#if !defined(OPENSSL_SYS_MSDOS)
85#include OPENSSL_UNISTD
86#endif
87
88#if !defined(OPENSSL_SYS_NETWARE) && !defined(OPENSSL_SYS_MSDOS) && !defined(OPENSSL_SYS_VXWORKS) && (!defined(OPENSSL_SYS_VMS) || defined(__DECC))
89#define TIMES
90#endif
91
92#ifndef _IRIX
93#include <time.h>
94#endif
95#ifdef TIMES
96#include <sys/types.h>
97#include <sys/times.h>
98#endif
99
100/* Depending on the VMS version, the tms structure is perhaps defined.
101   The __TMS macro will show if it was.  If it wasn't defined, we should
102   undefine TIMES, since that tells the rest of the program how things
103   should be handled.				-- Richard Levitte */
104#if defined(OPENSSL_SYS_VMS_DECC) && !defined(__TMS)
105#undef TIMES
106#endif
107
108#if !defined(TIMES) && !defined(OPENSSL_SYS_VXWORKS) && !defined(OPENSSL_SYS_NETWARE)
109#include <sys/timeb.h>
110#endif
111
112#if defined(sun) || defined(__ultrix)
113#define _POSIX_SOURCE
114#include <limits.h>
115#include <sys/param.h>
116#endif
117
118/* The following if from times(3) man page.  It may need to be changed
119*/
120#ifndef HZ
121# ifdef _SC_CLK_TCK
122#  define HZ ((double)sysconf(_SC_CLK_TCK))
123# else
124#  ifndef CLK_TCK
125#   ifndef _BSD_CLK_TCK_ /* FreeBSD hack */
126#    define HZ	100.0
127#   else /* _BSD_CLK_TCK_ */
128#    define HZ ((double)_BSD_CLK_TCK_)
129#   endif
130#  else /* CLK_TCK */
131#   define HZ ((double)CLK_TCK)
132#  endif
133# endif
134#endif
135
136#undef PROG
137#define PROG s_time_main
138
139#undef ioctl
140#define ioctl ioctlsocket
141
142#define SSL_CONNECT_NAME	"localhost:4433"
143
144/*#define TEST_CERT "client.pem" */ /* no default cert. */
145
146#undef BUFSIZZ
147#define BUFSIZZ 1024*10
148
149#define MYBUFSIZ 1024*8
150
151#undef min
152#undef max
153#define min(a,b) (((a) < (b)) ? (a) : (b))
154#define max(a,b) (((a) > (b)) ? (a) : (b))
155
156#undef SECONDS
157#define SECONDS	30
158extern int verify_depth;
159extern int verify_error;
160
161static void s_time_usage(void);
162static int parseArgs( int argc, char **argv );
163static SSL *doConnection( SSL *scon );
164static void s_time_init(void);
165
166/***********************************************************************
167 * Static data declarations
168 */
169
170/* static char *port=PORT_STR;*/
171static char *host=SSL_CONNECT_NAME;
172static char *t_cert_file=NULL;
173static char *t_key_file=NULL;
174static char *CApath=NULL;
175static char *CAfile=NULL;
176static char *tm_cipher=NULL;
177static int tm_verify = SSL_VERIFY_NONE;
178static int maxTime = SECONDS;
179static SSL_CTX *tm_ctx=NULL;
180static SSL_METHOD *s_time_meth=NULL;
181static char *s_www_path=NULL;
182static long bytes_read=0;
183static int st_bugs=0;
184static int perform=0;
185#ifdef FIONBIO
186static int t_nbio=0;
187#endif
188#ifdef OPENSSL_SYS_WIN32
189static int exitNow = 0;		/* Set when it's time to exit main */
190#endif
191
192static void s_time_init(void)
193	{
194	host=SSL_CONNECT_NAME;
195	t_cert_file=NULL;
196	t_key_file=NULL;
197	CApath=NULL;
198	CAfile=NULL;
199	tm_cipher=NULL;
200	tm_verify = SSL_VERIFY_NONE;
201	maxTime = SECONDS;
202	tm_ctx=NULL;
203	s_time_meth=NULL;
204	s_www_path=NULL;
205	bytes_read=0;
206	st_bugs=0;
207	perform=0;
208
209#ifdef FIONBIO
210	t_nbio=0;
211#endif
212#ifdef OPENSSL_SYS_WIN32
213	exitNow = 0;		/* Set when it's time to exit main */
214#endif
215	}
216
217/***********************************************************************
218 * usage - display usage message
219 */
220static void s_time_usage(void)
221{
222	static char umsg[] = "\
223-time arg     - max number of seconds to collect data, default %d\n\
224-verify arg   - turn on peer certificate verification, arg == depth\n\
225-cert arg     - certificate file to use, PEM format assumed\n\
226-key arg      - RSA file to use, PEM format assumed, key is in cert file\n\
227                file if not specified by this option\n\
228-CApath arg   - PEM format directory of CA's\n\
229-CAfile arg   - PEM format file of CA's\n\
230-cipher       - preferred cipher to use, play with 'openssl ciphers'\n\n";
231
232	printf( "usage: s_time <args>\n\n" );
233
234	printf("-connect host:port - host:port to connect to (default is %s)\n",SSL_CONNECT_NAME);
235#ifdef FIONBIO
236	printf("-nbio         - Run with non-blocking IO\n");
237	printf("-ssl2         - Just use SSLv2\n");
238	printf("-ssl3         - Just use SSLv3\n");
239	printf("-bugs         - Turn on SSL bug compatibility\n");
240	printf("-new          - Just time new connections\n");
241	printf("-reuse        - Just time connection reuse\n");
242	printf("-www page     - Retrieve 'page' from the site\n");
243#endif
244	printf( umsg,SECONDS );
245}
246
247/***********************************************************************
248 * parseArgs - Parse command line arguments and initialize data
249 *
250 * Returns 0 if ok, -1 on bad args
251 */
252static int parseArgs(int argc, char **argv)
253{
254    int badop = 0;
255
256    verify_depth=0;
257    verify_error=X509_V_OK;
258
259    argc--;
260    argv++;
261
262    while (argc >= 1) {
263	if (strcmp(*argv,"-connect") == 0)
264		{
265		if (--argc < 1) goto bad;
266		host= *(++argv);
267		}
268#if 0
269	else if( strcmp(*argv,"-host") == 0)
270		{
271		if (--argc < 1) goto bad;
272		host= *(++argv);
273		}
274	else if( strcmp(*argv,"-port") == 0)
275		{
276		if (--argc < 1) goto bad;
277		port= *(++argv);
278		}
279#endif
280	else if (strcmp(*argv,"-reuse") == 0)
281		perform=2;
282	else if (strcmp(*argv,"-new") == 0)
283		perform=1;
284	else if( strcmp(*argv,"-verify") == 0) {
285
286	    tm_verify=SSL_VERIFY_PEER|SSL_VERIFY_CLIENT_ONCE;
287	    if (--argc < 1) goto bad;
288	    verify_depth=atoi(*(++argv));
289	    BIO_printf(bio_err,"verify depth is %d\n",verify_depth);
290
291	} else if( strcmp(*argv,"-cert") == 0) {
292
293	    if (--argc < 1) goto bad;
294	    t_cert_file= *(++argv);
295
296	} else if( strcmp(*argv,"-key") == 0) {
297
298	    if (--argc < 1) goto bad;
299	    t_key_file= *(++argv);
300
301	} else if( strcmp(*argv,"-CApath") == 0) {
302
303	    if (--argc < 1) goto bad;
304	    CApath= *(++argv);
305
306	} else if( strcmp(*argv,"-CAfile") == 0) {
307
308	    if (--argc < 1) goto bad;
309	    CAfile= *(++argv);
310
311	} else if( strcmp(*argv,"-cipher") == 0) {
312
313	    if (--argc < 1) goto bad;
314	    tm_cipher= *(++argv);
315	}
316#ifdef FIONBIO
317	else if(strcmp(*argv,"-nbio") == 0) {
318	    t_nbio=1;
319	}
320#endif
321	else if(strcmp(*argv,"-www") == 0)
322		{
323		if (--argc < 1) goto bad;
324		s_www_path= *(++argv);
325		if(strlen(s_www_path) > MYBUFSIZ-100)
326			{
327			BIO_printf(bio_err,"-www option too long\n");
328			badop=1;
329			}
330		}
331	else if(strcmp(*argv,"-bugs") == 0)
332	    st_bugs=1;
333#ifndef OPENSSL_NO_SSL2
334	else if(strcmp(*argv,"-ssl2") == 0)
335	    s_time_meth=SSLv2_client_method();
336#endif
337#ifndef OPENSSL_NO_SSL3
338	else if(strcmp(*argv,"-ssl3") == 0)
339	    s_time_meth=SSLv3_client_method();
340#endif
341	else if( strcmp(*argv,"-time") == 0) {
342
343	    if (--argc < 1) goto bad;
344	    maxTime= atoi(*(++argv));
345	}
346	else {
347	    BIO_printf(bio_err,"unknown option %s\n",*argv);
348	    badop=1;
349	    break;
350	}
351
352	argc--;
353	argv++;
354    }
355
356    if (perform == 0) perform=3;
357
358    if(badop) {
359bad:
360		s_time_usage();
361		return -1;
362    }
363
364	return 0;			/* Valid args */
365}
366
367/***********************************************************************
368 * TIME - time functions
369 */
370#define START	0
371#define STOP	1
372
373static double tm_Time_F(int s)
374	{
375	static double ret;
376#ifdef TIMES
377	static struct tms tstart,tend;
378
379	if(s == START) {
380		times(&tstart);
381		return(0);
382	} else {
383		times(&tend);
384		ret=((double)(tend.tms_utime-tstart.tms_utime))/HZ;
385		return((ret == 0.0)?1e-6:ret);
386	}
387#elif defined(OPENSSL_SYS_NETWARE)
388    static clock_t tstart,tend;
389
390    if (s == START)
391    {
392        tstart=clock();
393        return(0);
394    }
395    else
396    {
397        tend=clock();
398        ret=(double)((double)(tend)-(double)(tstart));
399        return((ret < 0.001)?0.001:ret);
400    }
401#elif defined(OPENSSL_SYS_VXWORKS)
402        {
403	static unsigned long tick_start, tick_end;
404
405	if( s == START )
406		{
407		tick_start = tickGet();
408		return 0;
409		}
410	else
411		{
412		tick_end = tickGet();
413		ret = (double)(tick_end - tick_start) / (double)sysClkRateGet();
414		return((ret == 0.0)?1e-6:ret);
415		}
416        }
417#else /* !times() */
418	static struct timeb tstart,tend;
419	long i;
420
421	if(s == START) {
422		ftime(&tstart);
423		return(0);
424	} else {
425		ftime(&tend);
426		i=(long)tend.millitm-(long)tstart.millitm;
427		ret=((double)(tend.time-tstart.time))+((double)i)/1000.0;
428		return((ret == 0.0)?1e-6:ret);
429	}
430#endif
431}
432
433/***********************************************************************
434 * MAIN - main processing area for client
435 *			real name depends on MONOLITH
436 */
437int MAIN(int, char **);
438
439int MAIN(int argc, char **argv)
440	{
441	double totalTime = 0.0;
442	int nConn = 0;
443	SSL *scon=NULL;
444	long finishtime=0;
445	int ret=1,i;
446	MS_STATIC char buf[1024*8];
447	int ver;
448
449	apps_startup();
450	s_time_init();
451
452	if (bio_err == NULL)
453		bio_err=BIO_new_fp(stderr,BIO_NOCLOSE);
454
455#if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3)
456	s_time_meth=SSLv23_client_method();
457#elif !defined(OPENSSL_NO_SSL3)
458	s_time_meth=SSLv3_client_method();
459#elif !defined(OPENSSL_NO_SSL2)
460	s_time_meth=SSLv2_client_method();
461#endif
462
463	/* parse the command line arguments */
464	if( parseArgs( argc, argv ) < 0 )
465		goto end;
466
467	OpenSSL_add_ssl_algorithms();
468	if ((tm_ctx=SSL_CTX_new(s_time_meth)) == NULL) return(1);
469
470	SSL_CTX_set_quiet_shutdown(tm_ctx,1);
471
472	if (st_bugs) SSL_CTX_set_options(tm_ctx,SSL_OP_ALL);
473	SSL_CTX_set_cipher_list(tm_ctx,tm_cipher);
474	if(!set_cert_stuff(tm_ctx,t_cert_file,t_key_file))
475		goto end;
476
477	SSL_load_error_strings();
478
479	if ((!SSL_CTX_load_verify_locations(tm_ctx,CAfile,CApath)) ||
480		(!SSL_CTX_set_default_verify_paths(tm_ctx)))
481		{
482		/* BIO_printf(bio_err,"error setting default verify locations\n"); */
483		ERR_print_errors(bio_err);
484		/* goto end; */
485		}
486
487	if (tm_cipher == NULL)
488		tm_cipher = getenv("SSL_CIPHER");
489
490	if (tm_cipher == NULL ) {
491		fprintf( stderr, "No CIPHER specified\n" );
492	}
493
494	if (!(perform & 1)) goto next;
495	printf( "Collecting connection statistics for %d seconds\n", maxTime );
496
497	/* Loop and time how long it takes to make connections */
498
499	bytes_read=0;
500	finishtime=(long)time(NULL)+maxTime;
501	tm_Time_F(START);
502	for (;;)
503		{
504		if (finishtime < (long)time(NULL)) break;
505#ifdef WIN32_STUFF
506
507		if( flushWinMsgs(0) == -1 )
508			goto end;
509
510		if( waitingToDie || exitNow )		/* we're dead */
511			goto end;
512#endif
513
514		if( (scon = doConnection( NULL )) == NULL )
515			goto end;
516
517		if (s_www_path != NULL)
518			{
519			BIO_snprintf(buf,sizeof buf,"GET %s HTTP/1.0\r\n\r\n",s_www_path);
520			SSL_write(scon,buf,strlen(buf));
521			while ((i=SSL_read(scon,buf,sizeof(buf))) > 0)
522				bytes_read+=i;
523			}
524
525#ifdef NO_SHUTDOWN
526		SSL_set_shutdown(scon,SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
527#else
528		SSL_shutdown(scon);
529#endif
530		SHUTDOWN2(SSL_get_fd(scon));
531
532		nConn += 1;
533		if (SSL_session_reused(scon))
534			ver='r';
535		else
536			{
537			ver=SSL_version(scon);
538			if (ver == TLS1_VERSION)
539				ver='t';
540			else if (ver == SSL3_VERSION)
541				ver='3';
542			else if (ver == SSL2_VERSION)
543				ver='2';
544			else
545				ver='*';
546			}
547		fputc(ver,stdout);
548		fflush(stdout);
549
550		SSL_free( scon );
551		scon=NULL;
552		}
553	totalTime += tm_Time_F(STOP); /* Add the time for this iteration */
554
555	i=(int)((long)time(NULL)-finishtime+maxTime);
556	printf( "\n\n%d connections in %.2fs; %.2f connections/user sec, bytes read %ld\n", nConn, totalTime, ((double)nConn/totalTime),bytes_read);
557	printf( "%d connections in %ld real seconds, %ld bytes read per connection\n",nConn,(long)time(NULL)-finishtime+maxTime,bytes_read/nConn);
558
559	/* Now loop and time connections using the same session id over and over */
560
561next:
562	if (!(perform & 2)) goto end;
563	printf( "\n\nNow timing with session id reuse.\n" );
564
565	/* Get an SSL object so we can reuse the session id */
566	if( (scon = doConnection( NULL )) == NULL )
567		{
568		fprintf( stderr, "Unable to get connection\n" );
569		goto end;
570		}
571
572	if (s_www_path != NULL)
573		{
574		BIO_snprintf(buf,sizeof buf,"GET %s HTTP/1.0\r\n\r\n",s_www_path);
575		SSL_write(scon,buf,strlen(buf));
576		while (SSL_read(scon,buf,sizeof(buf)) > 0)
577			;
578		}
579#ifdef NO_SHUTDOWN
580	SSL_set_shutdown(scon,SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
581#else
582	SSL_shutdown(scon);
583#endif
584	SHUTDOWN2(SSL_get_fd(scon));
585
586	nConn = 0;
587	totalTime = 0.0;
588
589	finishtime=(long)time(NULL)+maxTime;
590
591	printf( "starting\n" );
592	bytes_read=0;
593	tm_Time_F(START);
594
595	for (;;)
596		{
597		if (finishtime < (long)time(NULL)) break;
598
599#ifdef WIN32_STUFF
600		if( flushWinMsgs(0) == -1 )
601			goto end;
602
603		if( waitingToDie || exitNow )	/* we're dead */
604			goto end;
605#endif
606
607	 	if( (doConnection( scon )) == NULL )
608			goto end;
609
610		if (s_www_path)
611			{
612			BIO_snprintf(buf,sizeof buf,"GET %s HTTP/1.0\r\n\r\n",s_www_path);
613			SSL_write(scon,buf,strlen(buf));
614			while ((i=SSL_read(scon,buf,sizeof(buf))) > 0)
615				bytes_read+=i;
616			}
617
618#ifdef NO_SHUTDOWN
619		SSL_set_shutdown(scon,SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
620#else
621		SSL_shutdown(scon);
622#endif
623		SHUTDOWN2(SSL_get_fd(scon));
624
625		nConn += 1;
626		if (SSL_session_reused(scon))
627			ver='r';
628		else
629			{
630			ver=SSL_version(scon);
631			if (ver == TLS1_VERSION)
632				ver='t';
633			else if (ver == SSL3_VERSION)
634				ver='3';
635			else if (ver == SSL2_VERSION)
636				ver='2';
637			else
638				ver='*';
639			}
640		fputc(ver,stdout);
641		fflush(stdout);
642		}
643	totalTime += tm_Time_F(STOP); /* Add the time for this iteration*/
644
645
646	printf( "\n\n%d connections in %.2fs; %.2f connections/user sec, bytes read %ld\n", nConn, totalTime, ((double)nConn/totalTime),bytes_read);
647	printf( "%d connections in %ld real seconds, %ld bytes read per connection\n",nConn,(long)time(NULL)-finishtime+maxTime,bytes_read/nConn);
648
649	ret=0;
650end:
651	if (scon != NULL) SSL_free(scon);
652
653	if (tm_ctx != NULL)
654		{
655		SSL_CTX_free(tm_ctx);
656		tm_ctx=NULL;
657		}
658	apps_shutdown();
659	OPENSSL_EXIT(ret);
660	}
661
662/***********************************************************************
663 * doConnection - make a connection
664 * Args:
665 *		scon	= earlier ssl connection for session id, or NULL
666 * Returns:
667 *		SSL *	= the connection pointer.
668 */
669static SSL *doConnection(SSL *scon)
670	{
671	BIO *conn;
672	SSL *serverCon;
673	int width, i;
674	fd_set readfds;
675
676	if ((conn=BIO_new(BIO_s_connect())) == NULL)
677		return(NULL);
678
679/*	BIO_set_conn_port(conn,port);*/
680	BIO_set_conn_hostname(conn,host);
681
682	if (scon == NULL)
683		serverCon=SSL_new(tm_ctx);
684	else
685		{
686		serverCon=scon;
687		SSL_set_connect_state(serverCon);
688		}
689
690	SSL_set_bio(serverCon,conn,conn);
691
692#if 0
693	if( scon != NULL )
694		SSL_set_session(serverCon,SSL_get_session(scon));
695#endif
696
697	/* ok, lets connect */
698	for(;;) {
699		i=SSL_connect(serverCon);
700		if (BIO_sock_should_retry(i))
701			{
702			BIO_printf(bio_err,"DELAY\n");
703
704			i=SSL_get_fd(serverCon);
705			width=i+1;
706			FD_ZERO(&readfds);
707			FD_SET(i,&readfds);
708			/* Note: under VMS with SOCKETSHR the 2nd parameter
709			 * is currently of type (int *) whereas under other
710			 * systems it is (void *) if you don't have a cast it
711			 * will choke the compiler: if you do have a cast then
712			 * you can either go for (int *) or (void *).
713			 */
714			select(width,(void *)&readfds,NULL,NULL,NULL);
715			continue;
716			}
717		break;
718		}
719	if(i <= 0)
720		{
721		BIO_printf(bio_err,"ERROR\n");
722		if (verify_error != X509_V_OK)
723			BIO_printf(bio_err,"verify error:%s\n",
724				X509_verify_cert_error_string(verify_error));
725		else
726			ERR_print_errors(bio_err);
727		if (scon == NULL)
728			SSL_free(serverCon);
729		return NULL;
730		}
731
732	return serverCon;
733	}
734
735
736