1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
|
.\"
.\" $OpenBSD: SSL_CTX_set_info_callback.3,v 1.2 2014/12/02 14:11:01 jmc Exp $
.\"
.Dd $Mdocdate: December 2 2014 $
.Dt SSL_CTX_SET_INFO_CALLBACK 3
.Os
.Sh NAME
.Nm SSL_CTX_set_info_callback ,
.Nm SSL_CTX_get_info_callback ,
.Nm SSL_set_info_callback ,
.Nm SSL_get_info_callback
.Nd handle information callback for SSL connections
.Sh SYNOPSIS
.In openssl/ssl.h
.Ft void
.Fn SSL_CTX_set_info_callback "SSL_CTX *ctx" "void (*callback)()"
.Ft void
.Fn "(*SSL_CTX_get_info_callback(const SSL_CTX *ctx))"
.Ft void
.Fn SSL_set_info_callback "SSL *ssl" "void (*callback)()"
.Ft void
.Fn "(*SSL_get_info_callback(const SSL *ssl))"
.Sh DESCRIPTION
.Fn SSL_CTX_set_info_callback
sets the
.Fa callback
function that can be used to obtain state information for SSL objects created
from
.Fa ctx
during connection setup and use.
The setting for
.Fa ctx
is overridden from the setting for a specific SSL object, if specified.
When
.Fa callback
is
.Dv NULL ,
no callback function is used.
.Pp
.Fn SSL_set_info_callback
sets the
.Fa callback
function that can be used to
obtain state information for
.Fa ssl
during connection setup and use.
When
.Fa callback
is
.Dv NULL ,
the callback setting currently valid for
.Fa ctx
is used.
.Pp
.Fn SSL_CTX_get_info_callback
returns a pointer to the currently set information callback function for
.Fa ctx .
.Pp
.Fn SSL_get_info_callback
returns a pointer to the currently set information callback function for
.Fa ssl .
.Sh NOTES
When setting up a connection and during use,
it is possible to obtain state information from the SSL/TLS engine.
When set, an information callback function is called whenever the state changes,
an alert appears, or an error occurs.
.Pp
The callback function is called as
.Fn callback "SSL *ssl" "int where" "int ret" .
The
.Fa where
argument specifies information about where (in which context)
the callback function was called.
If
.Fa ret
is 0, an error condition occurred.
If an alert is handled,
.Dv SSL_CB_ALERT
is set and
.Fa ret
specifies the alert information.
.Pp
.Fa where
is a bitmask made up of the following bits:
.Bl -tag -width Ds
.It Dv SSL_CB_LOOP
Callback has been called to indicate state change inside a loop.
.It Dv SSL_CB_EXIT
Callback has been called to indicate error exit of a handshake function.
(May be soft error with retry option for non-blocking setups.)
.It Dv SSL_CB_READ
Callback has been called during read operation.
.It Dv SSL_CB_WRITE
Callback has been called during write operation.
.It Dv SSL_CB_ALERT
Callback has been called due to an alert being sent or received.
.It Dv SSL_CB_READ_ALERT
.It Dv SSL_CB_WRITE_ALERT
.It Dv SSL_CB_ACCEPT_LOOP
.It Dv SSL_CB_ACCEPT_EXIT
.It Dv SSL_CB_CONNECT_LOOP
.It Dv SSL_CB_CONNECT_EXIT
.It Dv SSL_CB_HANDSHAKE_START
Callback has been called because a new handshake is started.
.It Dv SSL_CB_HANDSHAKE_DONE
Callback has been called because a handshake is finished.
.El
.Pp
The current state information can be obtained using the
.Xr SSL_state_string 3
family of functions.
.Pp
The
.Fa ret
information can be evaluated using the
.Xr SSL_alert_type_string 3
family of functions.
.Sh RETURN VALUES
.Fn SSL_set_info_callback
does not provide diagnostic information.
.Pp
.Fn SSL_get_info_callback
returns the current setting.
.Sh EXAMPLES
The following example callback function prints state strings,
information about alerts being handled and error messages to the
.Va bio_err
.Vt BIO .
.Bd -literal
void
apps_ssl_info_callback(SSL *s, int where, int ret)
{
const char *str;
int w;
w = where & ~SSL_ST_MASK;
if (w & SSL_ST_CONNECT)
str = "SSL_connect";
else if (w & SSL_ST_ACCEPT)
str = "SSL_accept";
else
str = "undefined";
if (where & SSL_CB_LOOP) {
BIO_printf(bio_err, "%s:%s\en", str,
SSL_state_string_long(s));
} else if (where & SSL_CB_ALERT) {
str = (where & SSL_CB_READ) ? "read" : "write";
BIO_printf(bio_err, "SSL3 alert %s:%s:%s\en", str,
SSL_alert_type_string_long(ret),
SSL_alert_desc_string_long(ret));
} else if (where & SSL_CB_EXIT) {
if (ret == 0)
BIO_printf(bio_err, "%s:failed in %s\en",
str, SSL_state_string_long(s));
else if (ret < 0) {
BIO_printf(bio_err, "%s:error in %s\en",
str, SSL_state_string_long(s));
}
}
}
.Ed
.Sh SEE ALSO
.Xr ssl 3 ,
.Xr SSL_alert_type_string 3 ,
.Xr SSL_state_string 3
|
