openssl

import std::ffi::openssl; · source

The OpenSSL surface#

extern "C" {
    function OpenSSL_version_num() -> u64;
    function TLS_client_method() -> void*;
    function TLS_server_method() -> void*;
    function SSL_CTX_new(method: void*) -> void*;
    function SSL_CTX_free(ctx: void*) -> void;
    function SSL_new(ctx: void*) -> void*;
    function SSL_free(ssl: void*) -> void;
    function SSL_set_fd(ssl: void*, fd: i32) -> i32;
    function SSL_connect(ssl: void*) -> i32;
    function SSL_accept(ssl: void*) -> i32;
    function SSL_read(ssl: void*, buf: u8*, num: i32) -> i32;
    function SSL_write(ssl: void*, buf: u8*, num: i32) -> i32;
    function SSL_shutdown(ssl: void*) -> i32;
    function SSL_get_error(ssl: void*, ret: i32) -> i32;
    function SSL_ctrl(ssl: void*, cmd: i32, larg: i64, parg: void*) -> i64;
    // ...
}

function ssl_set_sni(ssl: void*, name: u8*) -> i64;

Raw extern "C" declarations for the subset of the OpenSSL 3.x API that net::tls drives. Opaque handles — SSL, SSL_CTX, SSL_METHOD — cross as void*, and you own the lifetime: pair every *_new with its *_free.

A binary that pulls in net::tls must add ssl and crypto to link_libs in its cryoconfig. Nothing here is referenced unless net::tls is used, so non-TLS binaries link without OpenSSL at all.

Several "functions" in <openssl/ssl.h> are preprocessor macros over SSL_ctrl rather than exported symbols. The one that matters, SSL_set_tlsext_host_name for SNI, is wrapped here as ssl_set_sni over the real SSL_ctrl symbol. Every extern in this file was checked against nm -D on the shipped libraries.

Constants#

const SSL_FILETYPE_PEM:                i32 = 1;
const SSL_FILETYPE_ASN1:               i32 = 2;
const SSL_VERIFY_NONE:                 i32 = 0;
const SSL_VERIFY_PEER:                 i32 = 1;
const SSL_VERIFY_FAIL_IF_NO_PEER_CERT: i32 = 2;
const SSL_ERROR_NONE:                  i32 = 0;
const SSL_ERROR_SSL:                   i32 = 1;
const SSL_ERROR_WANT_READ:             i32 = 2;
const SSL_ERROR_WANT_WRITE:            i32 = 3;
const SSL_ERROR_WANT_X509_LOOKUP:      i32 = 4;
const SSL_ERROR_SYSCALL:               i32 = 5;
const SSL_ERROR_ZERO_RETURN:           i32 = 6;
const SSL_ERROR_WANT_CONNECT:          i32 = 7;
const SSL_ERROR_WANT_ACCEPT:           i32 = 8;
const X509_V_OK:                       i64 = 0;
const SSL_CTRL_SET_TLSEXT_HOSTNAME:    i32 = 55;
const TLSEXT_NAMETYPE_host_name:       i64 = 0;

extern function exit(code: i32) -> void;
extern "C" {
    function puts(s: string) -> i32;
}

function name<T>(param: Type) -> Ret { ... }

extern "C" function OpenSSL_version_num() -> u64

primitive u64

extern "C" function TLS_client_method() -> void*

primitive void

extern "C" function TLS_server_method() -> void*

extern "C" function SSL_CTX_new(method: void*) -> void*

(parameter) method: void*

extern "C" function SSL_CTX_free(ctx: void*) -> void

(parameter) ctx: void*

extern "C" function SSL_new(ctx: void*) -> void*

extern "C" function SSL_free(ssl: void*) -> void

(parameter) ssl: void*

extern "C" function SSL_set_fd(ssl: void*, fd: i32) -> i32

(parameter) fd: i32

primitive i32

extern "C" function SSL_connect(ssl: void*) -> i32

extern "C" function SSL_accept(ssl: void*) -> i32

extern "C" function SSL_read(ssl: void*, buf: u8*, num: i32) -> i32

(parameter) buf: u8*

primitive u8

(parameter) num: i32

extern "C" function SSL_write(ssl: void*, buf: u8*, num: i32) -> i32

extern "C" function SSL_shutdown(ssl: void*) -> i32

extern "C" function SSL_get_error(ssl: void*, ret: i32) -> i32

(parameter) ret: i32

extern "C" function SSL_ctrl(ssl: void*, cmd: i32, larg: i64, parg: void*) -> i64

(parameter) cmd: i32

(parameter) larg: i64

primitive i64

(parameter) parg: void*

function ssl_set_sni(ssl: void*, name: u8*) -> i64

(parameter) name: u8*

const NAME: Type = value;

const SSL_FILETYPE_PEM: i32 = 1;

const SSL_FILETYPE_ASN1: i32 = 2;

const SSL_VERIFY_NONE: i32 = 0;

const SSL_VERIFY_PEER: i32 = 1;

const SSL_VERIFY_FAIL_IF_NO_PEER_CERT: i32 = 2;

const SSL_ERROR_NONE: i32 = 0;

const SSL_ERROR_SSL: i32 = 1;

const SSL_ERROR_WANT_READ: i32 = 2;

const SSL_ERROR_WANT_WRITE: i32 = 3;

const SSL_ERROR_WANT_X509_LOOKUP: i32 = 4;

const SSL_ERROR_SYSCALL: i32 = 5;

const SSL_ERROR_ZERO_RETURN: i32 = 6;

const SSL_ERROR_WANT_CONNECT: i32 = 7;

const SSL_ERROR_WANT_ACCEPT: i32 = 8;

const X509_V_OK: i64 = 0;

const SSL_CTRL_SET_TLSEXT_HOSTNAME: i32 = 55;

const TLSEXT_NAMETYPE_host_name: i64 = 0;

import a::b;
import a::b::{ X, Y };
import a::b as c;
import a::b::*;

namespace std;

namespace std::ffi;

namespace std::ffi::openssl;

namespace std::net;

namespace std::net::tls;

extern "C" function SSL_ctrl(ssl: void*, cmd: i32, larg: i64, parg: void*) -> i64

function ssl_set_sni(ssl: void*, name: u8*) -> i64