CLplusSSL

Subprojects

• CL+SSL
• trivial-https
• trivial-gray-streams

News

2007-xx-yy

• Fixed windows support, thanks to Matthew Kennedy and Vodonosov Anton.

2007-07-07

• Improved clisp support, thanks to Pixel // pinterface, as well as client certificate support.
• Re-introduced support for direct access to file descriptors as an optimization. New function stream-fd. New keyword argument close-callback.

2007-01-16: CL+SSL is now available under an MIT-style license.

Download

Anonymous CVS (browse):

$ export CVSROOT=:pserver:anonymous@common-lisp.net:/project/cl-plus-ssl/cvsroot
$ cvs login
password: anonymous
$ cvs co cl+ssl
$ cvs co trivial-gray-streams
$ cvs co trivial-https

Tarballs are also available (but not always up-to-date).

Note that you need the libssl-dev package on Debian to load this package without manual configuration.

Send bug reports to cl-plus-ssl-devel@common-lisp.net (list information).

This library is a fork of SSL-CMUCL. The original SSL-CMUCL source code was written by Eric Marsden and includes contributions by Jochen Schmidt. License: MIT-style.

• CL+SSL is portable code based on CFFI and gray streams.
• It defines its own libssl BIO method, so that SSL I/O is actually written over portable Lisp streams instead of bypassing the streams and sending data over Unix file descriptors directly.

Comparison chart:

¹ Character I/O and external formats in CL+SSL are provided using flexi-streams.

API functions

Pass the return value of this function to make-ssl-client-stream or make-ssl-servre-stream, which are faster when accessing file descriptors directly.

If fd-or-stream is a lisp stream, it can the SSL stream will close it automatically. File descriptors are not closed automatically. However, if close-callback is non-nil, it will be called with zero arguments when the SSL stream is closed. certificate is the path to a file containing the PEM-encoded certificate for your client. key is the path to the PEM-encoded key for the client, which must not be associated with a passphrase.

If external-format is nil (the default), a plain (unsigned-byte 8) SSL stream is returned. With a non-null external-format, a flexi-stream capable of character I/O will be returned instead, with the specified value as its initial external format.

If fd-or-stream is a lisp stream, it can the SSL stream will close it automatically. File descriptors are not closed automatically. However, if close-callback is non-nil, it will be called with zero arguments when the SSL stream is closed. certificate is the path to a file containing the PEM-encoded certificate for your server. key is the path to the PEM-encoded key for the server, which must not be associated with a passphrase. See above for external-format handling.

Portability

CL+SSL requires CFFI with callback support.

Test results for Linux/x86, except OpenMCL which was tested on Linux/PPC:

TODO

• CNAME checking!

trivial-https is a fork of Brian Mastenbrook's trivial-http adding support for HTTPS using CL+SSL. License: MIT-style.

Note: The Drakma HTTP client library by Weitz supports HTTPS using CL+SSL. trivial-https will not be developed further; please use Drakma instead.

README

README