feat(ssl): added basic ssl implementation

bproxy.gyp

@@ -3,6 +3,8 @@
     "gypkg_deps": [
       "git://github.com/libuv/libuv.git@^v1.x => uv.gyp:libuv",
       "git://github.com/indutny/[email protected] => uv_link_t.gyp:uv_link_t",
+      "git://github.com/indutny/[email protected] => uv_ssl_t.gyp:uv_ssl_t",
+      "git://github.com/gypkg/openssl@~1.2.7  => openssl.gyp:openssl",
       "3rdparty/zlib => gyp/zlib.gyp:zlib"
     ]
   },

include/bproxy.h

@@ -18,6 +18,14 @@
 #include "config.h"
 #include "version.h"
 
+#include "openssl/bio.h"
+#include "openssl/err.h"
+#include "openssl/evp.h"
+#include "openssl/pem.h"
+#include "openssl/x509.h"
+
+#include "uv_ssl_t.h"
+
 typedef struct
 {
   uv_write_t req;
@@ -43,6 +51,9 @@ typedef struct conn_s
   uv_link_source_t source;
   uv_link_t http_link;
   uv_link_observer_t observer;
+
+  SSL* ssl;
+  uv_ssl_t* ssl_link;
 } conn_t;
 
 typedef struct proxy_ip_port
@@ -52,6 +63,7 @@ typedef struct proxy_ip_port
 } proxy_ip_port;
 
 server_t *server;
+static SSL_CTX* ctx;
 
 static void conn_init(uv_stream_t *handle);
 static void conn_free(conn_t *conn);

src/bproxy.c

@@ -14,6 +14,8 @@
   if ((V) != 0)  \
   abort()
 
+#define CHECK_ALLOC(V) if ((V) == NULL) abort()
+
 static void write_link_cb(uv_link_t *source, int status, void *arg)
 {
   free(arg);
@@ -24,6 +26,7 @@ static void observer_connection_link_close_cb(uv_link_t *link)
   conn_t *conn;
 
   conn = link->data;
+  SSL_free(conn->ssl);
   conn_free(conn);
 }
 
@@ -54,22 +57,40 @@ static void observer_connection_read_cb(uv_link_observer_t *observer, ssize_t nr
 
   if (nread < 0)
   {
+    uv_link_t* error_link;
+    int err = uv_link_errno(&error_link, -nread);
+    if(err != 135170){
+      // If not connection closing!
+      const char* estr = uv_link_strerror((uv_link_t*)observer, nread);
+      log_error("[%d]: %s", err, estr);
+    }
     uv_link_close((uv_link_t *)observer, observer_connection_link_close_cb);
   }
 }
 
 void conn_init(uv_stream_t *handle)
 {
+  int err = 0;
   conn_t *conn = malloc(sizeof(conn_t));
   conn->proxy_handle = NULL;
   conn->handle = handle;
 
+  // SSL
+  CHECK_ALLOC(conn->ssl = SSL_new(ctx));
+  SSL_set_accept_state(conn->ssl);
+
   CHECK(uv_link_source_init(&conn->source, (uv_stream_t *)conn->handle));
   conn->source.data = conn;
+
+  CHECK_ALLOC(conn->ssl_link =
+        uv_ssl_create(uv_default_loop(), conn->ssl, &err));
+  CHECK(err);
+
   CHECK(uv_link_init(&conn->http_link, &http_link_methods));
   CHECK(uv_link_observer_init(&conn->observer));
   http_link_init(&conn->http_link, &conn->http_link_context, server->config);
-  CHECK(uv_link_chain((uv_link_t *)&conn->source, &conn->http_link));
+  CHECK(uv_link_chain((uv_link_t *)&conn->source, conn->ssl_link));
+  CHECK(uv_link_chain((uv_link_t *)conn->ssl_link, &conn->http_link));
   CHECK(uv_link_chain((uv_link_t *)&conn->http_link, (uv_link_t *)&conn->observer));
 
   conn->observer.observer_read_cb = observer_connection_read_cb;
@@ -278,6 +299,20 @@ proxy_ip_port find_proxy_config(char *hostname)
 
 int server_init()
 {
+  SSL_library_init();
+  OpenSSL_add_all_algorithms();
+  OpenSSL_add_all_digests();
+  SSL_load_error_strings();
+  ERR_load_crypto_strings();
+
+  /* Initialize SSL_CTX */
+  CHECK_ALLOC(ctx = SSL_CTX_new(SSLv23_method()));
+
+  SSL_CTX_use_certificate_file(ctx, "test/keys/cert.pem", SSL_FILETYPE_PEM);
+  SSL_CTX_use_PrivateKey_file(ctx, "test/keys/key.pem", SSL_FILETYPE_PEM);
+
+ CHECK(uv_ssl_setup_recommended_secure_context(ctx));
+
   server->loop = uv_default_loop();
 
   if (uv_tcp_init(server->loop, &server->tcp))

src/http_link.c

@@ -31,7 +31,7 @@ void http_read_cb_override(uv_link_t *link, ssize_t nread, const uv_buf_t *buf)
 {
   http_link_context_t *context = link->data;
 
-  if (nread >= 0)
+  if (nread > 0)
   {
     if (context->type == TYPE_REQUEST)
     {