Lines Matching refs:tls_ctx
53 TLSContext *tls_ctx = h->priv_data;
55 mbedtls_ssl_close_notify(&tls_ctx->ssl_context);
56 mbedtls_pk_free(&tls_ctx->priv_key);
57 mbedtls_x509_crt_free(&tls_ctx->ca_cert);
58 mbedtls_x509_crt_free(&tls_ctx->own_cert);
59 mbedtls_ssl_free(&tls_ctx->ssl_context);
60 mbedtls_ssl_config_free(&tls_ctx->ssl_config);
61 mbedtls_ctr_drbg_free(&tls_ctx->ctr_drbg_context);
62 mbedtls_entropy_free(&tls_ctx->entropy_context);
64 ffurl_closep(&tls_ctx->tls_shared.tcp);
169 TLSContext *tls_ctx = h->priv_data;
170 TLSShared *shr = &tls_ctx->tls_shared;
175 parse_options(tls_ctx, uri);
180 mbedtls_ssl_init(&tls_ctx->ssl_context);
181 mbedtls_ssl_config_init(&tls_ctx->ssl_config);
182 mbedtls_entropy_init(&tls_ctx->entropy_context);
183 mbedtls_ctr_drbg_init(&tls_ctx->ctr_drbg_context);
184 mbedtls_x509_crt_init(&tls_ctx->ca_cert);
185 mbedtls_pk_init(&tls_ctx->priv_key);
189 if ((ret = mbedtls_x509_crt_parse_file(&tls_ctx->ca_cert, shr->ca_file)) != 0) {
197 if ((ret = mbedtls_x509_crt_parse_file(&tls_ctx->own_cert, shr->cert_file)) != 0) {
204 if ((ret = mbedtls_ctr_drbg_seed(&tls_ctx->ctr_drbg_context,
206 &tls_ctx->entropy_context,
214 if ((ret = mbedtls_pk_parse_keyfile(&tls_ctx->priv_key,
216 tls_ctx->priv_key_pw
219 &tls_ctx->ctr_drbg_context
227 if ((ret = mbedtls_ssl_config_defaults(&tls_ctx->ssl_config,
235 mbedtls_ssl_conf_authmode(&tls_ctx->ssl_config,
237 mbedtls_ssl_conf_rng(&tls_ctx->ssl_config, mbedtls_ctr_drbg_random, &tls_ctx->ctr_drbg_context);
238 mbedtls_ssl_conf_ca_chain(&tls_ctx->ssl_config, &tls_ctx->ca_cert, NULL);
241 if ((ret = mbedtls_ssl_conf_own_cert(&tls_ctx->ssl_config, &tls_ctx->own_cert, &tls_ctx->priv_key)) != 0) {
246 if ((ret = mbedtls_ssl_setup(&tls_ctx->ssl_context, &tls_ctx->ssl_config)) != 0) {
252 if ((ret = mbedtls_ssl_set_hostname(&tls_ctx->ssl_context, shr->host)) != 0) {
259 mbedtls_ssl_set_bio(&tls_ctx->ssl_context, shr->tcp, mbedtls_send, mbedtls_recv, NULL);
262 while ((ret = mbedtls_ssl_handshake(&tls_ctx->ssl_context)) != 0) {
271 if ((verify_res_flags = mbedtls_ssl_get_verify_result(&tls_ctx->ssl_context)) != 0) {
309 TLSContext *tls_ctx = h->priv_data;
312 if ((ret = mbedtls_ssl_read(&tls_ctx->ssl_context, buf, size)) > 0) {
322 TLSContext *tls_ctx = h->priv_data;
325 if ((ret = mbedtls_ssl_write(&tls_ctx->ssl_context, buf, size)) > 0) {