10  *   http://www.apache.org/licenses/LICENSE-2.0
20 #include <thrift/thrift-config.h>
104       lock->mutex.lock();  in dyn_lock()
106       lock->mutex.unlock();  in dyn_lock()
125   // newer versions of OpenSSL changed CRYPTO_num_locks - see THRIFT-3878  in initializeOpenSSL()
153 …        // https://www.openssl.org/docs/man1.1.0/crypto/ENGINE_cleanup.html - cleanup call is need…  in cleanupOpenSSL()
206       SSL_CTX_set_options(ctx_, SSL_OP_NO_SSLv3);   // THRIFT-3164  in SSLContext()
289   // "!!" is squelching C4800 "forcing bool -> true or false" performance warning  in isOpen()
477             readRetryCount_--;  in read()
501     int32_t bytes = SSL_write(ssl_, &buf[written], len - written);  in write()
546     int32_t bytes = SSL_write(ssl_, &buf[written], len - written);  in write_partial()
600   // set underlying socket to non-blocking  in initializeHandshakeParams()
609   ssl_ = ctx_->createSSL();  in initializeHandshakeParams()
738   AccessManager::Decision decision = access_->verify(sa);  in authorize()
758       char* data = (char*)ASN1_STRING_data(name->d.ia5);  in authorize()
759       int length = ASN1_STRING_length(name->d.ia5);  in authorize()
760       switch (name->type) {  in authorize()
765         decision = access_->verify(host, data, length);  in authorize()
768         decision = access_->verify(sa, data, length);  in authorize()
788     int last = -1;  in authorize()
791       if (last == -1)  in authorize()
801       decision = access_->verify(host, (char*)utf8, size);  in authorize()
844   int timeout = -1;  in waitForEvent()
892   count_--;  in ~TSSLSocketFactory()
936   ssl->server(server());  in setup()
941     ssl->access(access_);  in setup()
946   int rc = SSL_CTX_set_cipher_list(ctx_->get(), enable.c_str());  in ciphers()
964   SSL_CTX_set_verify(ctx_->get(), mode, nullptr);  in authenticate()
973     if (SSL_CTX_use_certificate_chain_file(ctx_->get(), path) == 0) {  in loadCertificate()
994     const int status = SSL_CTX_use_certificate(ctx_->get(), cert);  in loadCertificateFromBuffer()
1014     if (SSL_CTX_use_PrivateKey_file(ctx_->get(), path, SSL_FILETYPE_PEM) == 0) {  in loadPrivateKey()
1037     const int status = SSL_CTX_use_PrivateKey(ctx_->get(), cert);  in loadPrivateKeyFromBuffer()
1056   if (SSL_CTX_load_verify_locations(ctx_->get(), path, capath) == 0) {  in loadTrustedCertificates()
1069   X509_STORE* vX509Store = SSL_CTX_get_cert_store(ctx_->get());  in loadTrustedCertificatesFromBuffer()
1094     if (SSL_CTX_add_extra_chain_cert(ctx_->get(), cert) == 0) {  in loadTrustedCertificatesFromBuffer()
1109   SSL_CTX_set_default_passwd_cb(ctx_->get(), passwordCallback);  in overrideDefaultPasswordCallback()
1110   SSL_CTX_set_default_passwd_cb_userdata(ctx_->get(), this);  in overrideDefaultPasswordCallback()
1116   factory->getPassword(userPassword, size);  in passwordCallback()
1138       THRIFT_SNPRINTF(message, sizeof(message) - 1, "SSL error # %lu", errorCode);  in buildErrors()
1186     match = (memcmp(&((sockaddr_in*)&sa)->sin_addr, data, size) == 0);  in verify()
1188     match = (memcmp(&((sockaddr_in6*)&sa)->sin6_addr, data, size) == 0);  in verify()
1204   int i = 0, j = 0;  in matchName()  local
1205   while (i < size && host[j] != '\0') {  in matchName()
1206     if (uppercase(pattern[i]) == uppercase(host[j])) {  in matchName()
1208       j++;  in matchName()
1212       while (host[j] != '.' && host[j] != '\0') {  in matchName()
1213         j++;  in matchName()
1220   if (i == size && host[j] == '\0') {  in matchName()
1230     return c + ('A' - 'a');  in uppercase()