1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
local ca = require "cqueues.auxlib"
local cs = require "cqueues.socket"
local http_tls = require "http.tls"
local http_util = require "http.util"
local connection_common = require "http.connection_common"
local onerror = connection_common.onerror
local new_h1_connection = require "http.h1_connection".new
local new_h2_connection = require "http.h2_connection".new
local openssl_ssl = require "openssl.ssl"
local openssl_ctx = require "openssl.ssl.context"
local openssl_verify_param = require "openssl.x509.verify_param"
-- Create a shared 'default' TLS context
local default_ctx = http_tls.new_client_context()
local function negotiate(s, options, timeout)
s:onerror(onerror)
local tls = options.tls
local version = options.version
if tls then
local ctx = options.ctx or default_ctx
local ssl = openssl_ssl.new(ctx)
local host = options.host
local host_is_ip = host and http_util.is_ip(host)
local sendname = options.sendname
if sendname == nil and not host_is_ip and host then
sendname = host
end
if sendname then -- false indicates no sendname wanted
ssl:setHostName(sendname)
end
if http_tls.has_alpn then
if version == nil then
ssl:setAlpnProtos({"h2", "http/1.1"})
elseif version == 1.1 then
ssl:setAlpnProtos({"http/1.1"})
elseif version == 2 then
ssl:setAlpnProtos({"h2"})
end
end
if version == 2 then
ssl:setOptions(openssl_ctx.OP_NO_TLSv1 + openssl_ctx.OP_NO_TLSv1_1)
end
if host and http_tls.has_hostname_validation then
local params = openssl_verify_param.new()
if host_is_ip then
params:setIP(host)
else
params:setHost(host)
end
-- Allow user defined params to override
local old = ssl:getParam()
old:inherit(params)
ssl:setParam(old)
end
local ok, err, errno = s:starttls(ssl, timeout)
if not ok then
return nil, err, errno
end
end
if version == nil then
local ssl = s:checktls()
if ssl then
if http_tls.has_alpn and ssl:getAlpnSelected() == "h2" then
version = 2
else
version = 1.1
end
else
-- TODO: attempt upgrading http1 to http2
version = 1.1
end
end
if version < 2 then
return new_h1_connection(s, "client", version)
elseif version == 2 then
return new_h2_connection(s, "client", options.h2_settings)
else
error("Unknown HTTP version: " .. tostring(version))
end
end
local function connect(options, timeout)
local bind = options.bind
if bind ~= nil then
assert(type(bind) == "string")
local bind_address, bind_port = bind:match("^(.-):(%d+)$")
if bind_address then
bind_port = tonumber(bind_port, 10)
else
bind_address = bind
end
local ipv6 = bind_address:match("^%[([:%x]+)%]$")
if ipv6 then
bind_address = ipv6
end
bind = {
address = bind_address;
port = bind_port;
}
end
local s, err, errno = ca.fileresult(cs.connect {
family = options.family;
host = options.host;
port = options.port;
path = options.path;
bind = bind;
sendname = false;
v6only = options.v6only;
nodelay = true;
})
if s == nil then
return nil, err, errno
end
return negotiate(s, options, timeout)
end
return {
negotiate = negotiate;
connect = connect;
}
|
