test-server/test-server-http.c

   1 /*
   2  * libwebsockets-test-server - libwebsockets test implementation
   3  *
   4  * Copyright (C) 2010-2016 Andy Green <andy@warmcat.com>
   5  *
   6  * This file is made available under the Creative Commons CC0 1.0
   7  * Universal Public Domain Dedication.
   8  *
   9  * The person who associated a work with this deed has dedicated
  10  * the work to the public domain by waiving all of his or her rights
  11  * to the work worldwide under copyright law, including all related
  12  * and neighboring rights, to the extent allowed by law. You can copy,
  13  * modify, distribute and perform the work, even for commercial purposes,
  14  * all without asking permission.
  15  *
  16  * The test apps are intended to be adapted for use in your code, which
  17  * may be proprietary.  So unlike the library itself, they are licensed
  18  * Public Domain.
  19  */
  20 #include "test-server.h"
  21
  22 /*
  23  * This demo server shows how to use libwebsockets for one or more
  24  * websocket protocols in the same server
  25  *
  26  * It defines the following websocket protocols:
  27  *
  28  *  dumb-increment-protocol:  once the socket is opened, an incrementing
  29  *                              ascii string is sent down it every 50ms.
  30  *                              If you send "reset\n" on the websocket, then
  31  *                              the incrementing number is reset to 0.
  32  *
  33  *  lws-mirror-protocol: copies any received packet to every connection also
  34  *                              using this protocol, including the sender
  35  */
  36
  37 #if defined(LWS_USE_POLARSSL)
  38 #else
  39 #if defined(LWS_USE_MBEDTLS)
  40 #else
  41 #if defined(LWS_OPENSSL_SUPPORT) && defined(LWS_HAVE_SSL_CTX_set1_param)
  42 /* location of the certificate revocation list */
  43 extern char crl_path[1024];
  44 #endif
  45 #endif
  46 #endif
  47
  48 extern int debug_level;
  49
  50 enum demo_protocols {
  51         /* always first */
  52         PROTOCOL_HTTP = 0,
  53
  54         PROTOCOL_DUMB_INCREMENT,
  55         PROTOCOL_LWS_MIRROR,
  56
  57         /* always last */
  58         DEMO_PROTOCOL_COUNT
  59 };
  60
  61 /*
  62  * We take a strict whitelist approach to stop ../ attacks
  63  */
  64 struct serveable {
  65         const char *urlpath;
  66         const char *mimetype;
  67 };
  68
  69 /*
  70  * this is just an example of parsing handshake headers, you don't need this
  71  * in your code unless you will filter allowing connections by the header
  72  * content
  73  */
  74 void
  75 dump_handshake_info(struct lws *wsi)
  76 {
  77         int n = 0, len;
  78         char buf[256];
  79         const unsigned char *c;
  80
  81         do {
  82                 c = lws_token_to_string(n);
  83                 if (!c) {
  84                         n++;
  85                         continue;
  86                 }
  87
  88                 len = lws_hdr_total_length(wsi, n);
  89                 if (!len || len > sizeof(buf) - 1) {
  90                         n++;
  91                         continue;
  92                 }
  93
  94                 lws_hdr_copy(wsi, buf, sizeof buf, n);
  95                 buf[sizeof(buf) - 1] = '\0';
  96
  97                 fprintf(stderr, "    %s = %s\n", (char *)c, buf);
  98                 n++;
  99         } while (c);
 100 }
 101
 102 const char * get_mimetype(const char *file)
 103 {
 104         int n = strlen(file);
 105
 106         if (n < 5)
 107                 return NULL;
 108
 109         if (!strcmp(&file[n - 4], ".ico"))
 110                 return "image/x-icon";
 111
 112         if (!strcmp(&file[n - 4], ".png"))
 113                 return "image/png";
 114
 115         if (!strcmp(&file[n - 5], ".html"))
 116                 return "text/html";
 117
 118         if (!strcmp(&file[n - 4], ".css"))
 119                 return "text/css";
 120
 121         return NULL;
 122 }
 123
 124 /* this protocol server (always the first one) handles HTTP,
 125  *
 126  * Some misc callbacks that aren't associated with a protocol also turn up only
 127  * here on the first protocol server.
 128  */
 129
 130 int callback_http(struct lws *wsi, enum lws_callback_reasons reason, void *user,
 131                   void *in, size_t len)
 132 {
 133         struct per_session_data__http *pss =
 134                         (struct per_session_data__http *)user;
 135         unsigned char buffer[4096 + LWS_PRE];
 136         unsigned long amount, file_len, sent;
 137         char leaf_path[1024];
 138         const char *mimetype;
 139         char *other_headers;
 140         unsigned char *end, *start;
 141         struct timeval tv;
 142         unsigned char *p;
 143 #ifndef LWS_NO_CLIENT
 144         struct per_session_data__http *pss1;
 145         struct lws *wsi1;
 146 #endif
 147         char buf[256];
 148         char b64[64];
 149         int n, m;
 150 #ifdef EXTERNAL_POLL
 151         struct lws_pollargs *pa = (struct lws_pollargs *)in;
 152 #endif
 153
 154
 155         switch (reason) {
 156         case LWS_CALLBACK_HTTP:
 157
 158                 lwsl_notice("lws_http_serve: %s\n",in);
 159
 160                 if (debug_level & LLL_INFO) {
 161                         dump_handshake_info(wsi);
 162
 163                         /* dump the individual URI Arg parameters */
 164                         n = 0;
 165                         while (lws_hdr_copy_fragment(wsi, buf, sizeof(buf),
 166                                                      WSI_TOKEN_HTTP_URI_ARGS, n) > 0) {
 167                                 lwsl_notice("URI Arg %d: %s\n", ++n, buf);
 168                         }
 169                 }
 170
 171                 {
 172                         char name[100], rip[50];
 173                         lws_get_peer_addresses(wsi, lws_get_socket_fd(wsi), name,
 174                                                sizeof(name), rip, sizeof(rip));
 175                         sprintf(buf, "%s (%s)", name, rip);
 176                         lwsl_notice("HTTP connect from %s\n", buf);
 177                 }
 178
 179                 if (len < 1) {
 180                         lws_return_http_status(wsi,
 181                                                 HTTP_STATUS_BAD_REQUEST, NULL);
 182                         goto try_to_reuse;
 183                 }
 184
 185 #ifndef LWS_NO_CLIENT
 186                 if (!strncmp(in, "/proxytest", 10)) {
 187                         struct lws_client_connect_info i;
 188                         char *rootpath = "/";
 189                         const char *p = (const char *)in;
 190
 191                         if (lws_get_child(wsi))
 192                                 break;
 193
 194                         pss->client_finished = 0;
 195                         memset(&i,0, sizeof(i));
 196                         i.context = lws_get_context(wsi);
 197                         i.address = "git.libwebsockets.org";
 198                         i.port = 80;
 199                         i.ssl_connection = 0;
 200                         if (p[10])
 201                                 i.path = (char *)in + 10;
 202                         else
 203                                 i.path = rootpath;
 204                         i.host = "git.libwebsockets.org";
 205                         i.origin = NULL;
 206                         i.method = "GET";
 207                         i.parent_wsi = wsi;
 208                         i.uri_replace_from = "git.libwebsockets.org/";
 209                         i.uri_replace_to = "/proxytest/";
 210                         if (!lws_client_connect_via_info(&i)) {
 211                                 lwsl_err("proxy connect fail\n");
 212                                 break;
 213                         }
 214
 215
 216
 217                         break;
 218                 }
 219 #endif
 220
 221 #if 1
 222                 /* this example server has no concept of directories */
 223                 if (strchr((const char *)in + 1, '/')) {
 224                         lws_return_http_status(wsi, HTTP_STATUS_NOT_ACCEPTABLE, NULL);
 225                         goto try_to_reuse;
 226                 }
 227 #endif
 228
 229                 if (!strncmp(in, "/postresults", 12)) {
 230                         m = sprintf(buf, "<html><body>Form results: '%s'<br>"
 231                                         "</body></html>", pss->post_string);
 232
 233                         p = buffer + LWS_PRE;
 234                         start = p;
 235                         end = p + sizeof(buffer) - LWS_PRE;
 236
 237                         if (lws_add_http_header_status(wsi, 200, &p, end))
 238                                 return 1;
 239                         if (lws_add_http_header_by_token(wsi,
 240                                         WSI_TOKEN_HTTP_CONTENT_TYPE,
 241                                         (unsigned char *)"text/html",
 242                                         9, &p, end))
 243                                 return 1;
 244                         if (lws_add_http_header_content_length(wsi, m, &p,
 245                                                                end))
 246                                 return 1;
 247                         if (lws_finalize_http_header(wsi, &p, end))
 248                                 return 1;
 249
 250                         n = lws_write(wsi, start, p - start,
 251                                       LWS_WRITE_HTTP_HEADERS);
 252                         if (n < 0)
 253                                 return 1;
 254
 255                         n = lws_write(wsi, (unsigned char *)buf, m, LWS_WRITE_HTTP);
 256                         if (n < 0)
 257                                 return 1;
 258
 259                         goto try_to_reuse;
 260                 }
 261
 262                 /* if a legal POST URL, let it continue and accept data */
 263                 if (lws_hdr_total_length(wsi, WSI_TOKEN_POST_URI))
 264                         return 0;
 265
 266                 /* check for the "send a big file by hand" example case */
 267
 268                 if (!strcmp((const char *)in, "/leaf.jpg")) {
 269                         if (strlen(resource_path) > sizeof(leaf_path) - 10)
 270                                 return -1;
 271                         sprintf(leaf_path, "%s/leaf.jpg", resource_path);
 272
 273                         /* well, let's demonstrate how to send the hard way */
 274
 275                         p = buffer + LWS_PRE;
 276                         end = p + sizeof(buffer) - LWS_PRE;
 277
 278                         pss->fd = lws_plat_file_open(wsi, leaf_path, &file_len,
 279                                                      LWS_O_RDONLY);
 280
 281                         if (pss->fd == LWS_INVALID_FILE) {
 282                                 lwsl_err("faild to open file %s\n", leaf_path);
 283                                 return -1;
 284                         }
 285
 286                         /*
 287                          * we will send a big jpeg file, but it could be
 288                          * anything.  Set the Content-Type: appropriately
 289                          * so the browser knows what to do with it.
 290                          *
 291                          * Notice we use the APIs to build the header, which
 292                          * will do the right thing for HTTP 1/1.1 and HTTP2
 293                          * depending on what connection it happens to be working
 294                          * on
 295                          */
 296                         if (lws_add_http_header_status(wsi, 200, &p, end))
 297                                 return 1;
 298                         if (lws_add_http_header_by_token(wsi, WSI_TOKEN_HTTP_SERVER,
 299                                         (unsigned char *)"libwebsockets",
 300                                         13, &p, end))
 301                                 return 1;
 302                         if (lws_add_http_header_by_token(wsi,
 303                                         WSI_TOKEN_HTTP_CONTENT_TYPE,
 304                                         (unsigned char *)"image/jpeg",
 305                                         10, &p, end))
 306                                 return 1;
 307                         if (lws_add_http_header_content_length(wsi,
 308                                                                file_len, &p,
 309                                                                end))
 310                                 return 1;
 311                         if (lws_finalize_http_header(wsi, &p, end))
 312                                 return 1;
 313
 314                         /*
 315                          * send the http headers...
 316                          * this won't block since it's the first payload sent
 317                          * on the connection since it was established
 318                          * (too small for partial)
 319                          *
 320                          * Notice they are sent using LWS_WRITE_HTTP_HEADERS
 321                          * which also means you can't send body too in one step,
 322                          * this is mandated by changes in HTTP2
 323                          */
 324
 325                         *p = '\0';
 326                         lwsl_info("%s\n", buffer + LWS_PRE);
 327
 328                         n = lws_write(wsi, buffer + LWS_PRE,
 329                                       p - (buffer + LWS_PRE),
 330                                       LWS_WRITE_HTTP_HEADERS);
 331                         if (n < 0) {
 332                                 lws_plat_file_close(wsi, pss->fd);
 333                                 return -1;
 334                         }
 335                         /*
 336                          * book us a LWS_CALLBACK_HTTP_WRITEABLE callback
 337                          */
 338                         lws_callback_on_writable(wsi);
 339                         break;
 340                 }
 341
 342                 /* if not, send a file the easy way */
 343                 if (!strncmp(in, "/cgit-data/", 11)) {
 344                         in = (char *)in + 11;
 345                         strcpy(buf, "/usr/share/cgit");
 346                 } else
 347                         strcpy(buf, resource_path);
 348
 349                 if (strcmp(in, "/")) {
 350                         if (*((const char *)in) != '/')
 351                                 strcat(buf, "/");
 352                         strncat(buf, in, sizeof(buf) - strlen(buf) - 1);
 353                 } else /* default file to serve */
 354                         strcat(buf, "/test.html");
 355                 buf[sizeof(buf) - 1] = '\0';
 356
 357                 /* refuse to serve files we don't understand */
 358                 mimetype = get_mimetype(buf);
 359                 if (!mimetype) {
 360                         lwsl_err("Unknown mimetype for %s\n", buf);
 361                         lws_return_http_status(wsi,
 362                                       HTTP_STATUS_UNSUPPORTED_MEDIA_TYPE, NULL);
 363                         return -1;
 364                 }
 365
 366                 /* demonstrates how to set a cookie on / */
 367
 368                 other_headers = leaf_path;
 369                 p = (unsigned char *)leaf_path;
 370                 if (!strcmp((const char *)in, "/") &&
 371                            !lws_hdr_total_length(wsi, WSI_TOKEN_HTTP_COOKIE)) {
 372                         /* this isn't very unguessable but it'll do for us */
 373                         gettimeofday(&tv, NULL);
 374                         n = sprintf(b64, "test=LWS_%u_%u_COOKIE;Max-Age=360000",
 375                                 (unsigned int)tv.tv_sec,
 376                                 (unsigned int)tv.tv_usec);
 377
 378                         if (lws_add_http_header_by_name(wsi,
 379                                 (unsigned char *)"set-cookie:",
 380                                 (unsigned char *)b64, n, &p,
 381                                 (unsigned char *)leaf_path + sizeof(leaf_path)))
 382                                 return 1;
 383                 }
 384                 if (lws_is_ssl(wsi) && lws_add_http_header_by_name(wsi,
 385                                                 (unsigned char *)
 386                                                 "Strict-Transport-Security:",
 387                                                 (unsigned char *)
 388                                                 "max-age=15768000 ; "
 389                                                 "includeSubDomains", 36, &p,
 390                                                 (unsigned char *)leaf_path +
 391                                                         sizeof(leaf_path)))
 392                         return 1;
 393                 n = (char *)p - leaf_path;
 394
 395                 n = lws_serve_http_file(wsi, buf, mimetype, other_headers, n);
 396                 if (n < 0 || ((n > 0) && lws_http_transaction_completed(wsi)))
 397                         return -1; /* error or can't reuse connection: close the socket */
 398
 399                 /*
 400                  * notice that the sending of the file completes asynchronously,
 401                  * we'll get a LWS_CALLBACK_HTTP_FILE_COMPLETION callback when
 402                  * it's done
 403                  */
 404                 break;
 405
 406         case LWS_CALLBACK_HTTP_BODY:
 407                 lwsl_notice("LWS_CALLBACK_HTTP_BODY: len %d\n", (int)len);
 408                 strncpy(pss->post_string, in, sizeof (pss->post_string) -1);
 409                 pss->post_string[sizeof(pss->post_string) - 1] = '\0';
 410                 if (len < sizeof(pss->post_string) - 1)
 411                         pss->post_string[len] = '\0';
 412                 break;
 413
 414         case LWS_CALLBACK_HTTP_BODY_COMPLETION:
 415                 lwsl_notice("LWS_CALLBACK_HTTP_BODY_COMPLETION\n");
 416                 /*
 417                  * the whole of the sent body arrived,
 418                  * respond to the client with a redirect to show the
 419                  * results
 420                  */
 421                 p = (unsigned char *)buf + LWS_PRE;
 422                 n = lws_http_redirect(wsi,
 423                                       HTTP_STATUS_SEE_OTHER, /* 303 */
 424                                       (unsigned char *)"/postresults", 12, /* location + len */
 425                                       &p, /* temp buffer to use */
 426                                       p + sizeof(buf) - 1 - LWS_PRE /* buffer len */
 427                         );
 428                 goto try_to_reuse;
 429
 430         case LWS_CALLBACK_HTTP_FILE_COMPLETION:
 431                 goto try_to_reuse;
 432
 433         case LWS_CALLBACK_HTTP_WRITEABLE:
 434                 lwsl_info("LWS_CALLBACK_HTTP_WRITEABLE\n");
 435
 436                 if (pss->client_finished)
 437                         return -1;
 438
 439                 if (pss->fd == LWS_INVALID_FILE)
 440                         goto try_to_reuse;
 441
 442 #ifndef LWS_NO_CLIENT
 443                 if (pss->reason_bf & 2) {
 444                         char *px = buf + LWS_PRE;
 445                         int lenx = sizeof(buf) - LWS_PRE;
 446                         /*
 447                          * our sink is writeable and our source has something
 448                          * to read.  So read a lump of source material of
 449                          * suitable size to send or what's available, whichever
 450                          * is the smaller.
 451                          */
 452                         pss->reason_bf &= ~2;
 453                         wsi1 = lws_get_child(wsi);
 454                         if (!wsi1)
 455                                 break;
 456                         if (lws_http_client_read(wsi1, &px, &lenx) < 0)
 457                                 goto bail;
 458
 459                         if (pss->client_finished)
 460                                 return -1;
 461                         break;
 462                 }
 463 #endif
 464                 /*
 465                  * we can send more of whatever it is we were sending
 466                  */
 467                 sent = 0;
 468                 do {
 469                         /* we'd like the send this much */
 470                         n = sizeof(buffer) - LWS_PRE;
 471
 472                         /* but if the peer told us he wants less, we can adapt */
 473                         m = lws_get_peer_write_allowance(wsi);
 474
 475                         /* -1 means not using a protocol that has this info */
 476                         if (m == 0)
 477                                 /* right now, peer can't handle anything */
 478                                 goto later;
 479
 480                         if (m != -1 && m < n)
 481                                 /* he couldn't handle that much */
 482                                 n = m;
 483
 484                         n = lws_plat_file_read(wsi, pss->fd,
 485                                                &amount, buffer + LWS_PRE, n);
 486                         /* problem reading, close conn */
 487                         if (n < 0) {
 488                                 lwsl_err("problem reading file\n");
 489                                 goto bail;
 490                         }
 491                         n = (int)amount;
 492                         /* sent it all, close conn */
 493                         if (n == 0)
 494                                 goto penultimate;
 495                         /*
 496                          * To support HTTP2, must take care about preamble space
 497                          *
 498                          * identification of when we send the last payload frame
 499                          * is handled by the library itself if you sent a
 500                          * content-length header
 501                          */
 502                         m = lws_write(wsi, buffer + LWS_PRE, n, LWS_WRITE_HTTP);
 503                         if (m < 0) {
 504                                 lwsl_err("write failed\n");
 505                                 /* write failed, close conn */
 506                                 goto bail;
 507                         }
 508                         if (m) /* while still active, extend timeout */
 509                                 lws_set_timeout(wsi, PENDING_TIMEOUT_HTTP_CONTENT, 5);
 510                         sent += m;
 511
 512                 } while (!lws_send_pipe_choked(wsi) && (sent < 1024 * 1024));
 513 later:
 514                 lws_callback_on_writable(wsi);
 515                 break;
 516 penultimate:
 517                 lws_plat_file_close(wsi, pss->fd);
 518                 pss->fd = LWS_INVALID_FILE;
 519                 goto try_to_reuse;
 520
 521 bail:
 522                 lws_plat_file_close(wsi, pss->fd);
 523
 524                 return -1;
 525
 526         /*
 527          * callback for confirming to continue with client IP appear in
 528          * protocol 0 callback since no websocket protocol has been agreed
 529          * yet.  You can just ignore this if you won't filter on client IP
 530          * since the default unhandled callback return is 0 meaning let the
 531          * connection continue.
 532          */
 533         case LWS_CALLBACK_FILTER_NETWORK_CONNECTION:
 534                 /* if we returned non-zero from here, we kill the connection */
 535                 break;
 536
 537 #ifndef LWS_NO_CLIENT
 538         case LWS_CALLBACK_ESTABLISHED_CLIENT_HTTP: {
 539                 char ctype[64], ctlen = 0;
 540                 lwsl_err("LWS_CALLBACK_ESTABLISHED_CLIENT_HTTP\n");
 541                 p = buffer + LWS_PRE;
 542                 end = p + sizeof(buffer) - LWS_PRE;
 543                 if (lws_add_http_header_status(lws_get_parent(wsi), 200, &p, end))
 544                         return 1;
 545                 if (lws_add_http_header_by_token(lws_get_parent(wsi),
 546                                 WSI_TOKEN_HTTP_SERVER,
 547                                 (unsigned char *)"libwebsockets",
 548                                 13, &p, end))
 549                         return 1;
 550
 551                 ctlen = lws_hdr_copy(wsi, ctype, sizeof(ctype), WSI_TOKEN_HTTP_CONTENT_TYPE);
 552                 if (ctlen > 0) {
 553                         if (lws_add_http_header_by_token(lws_get_parent(wsi),
 554                                 WSI_TOKEN_HTTP_CONTENT_TYPE,
 555                                 (unsigned char *)ctype, ctlen, &p, end))
 556                                 return 1;
 557                 }
 558 #if 0
 559                 if (lws_add_http_header_content_length(lws_get_parent(wsi),
 560                                                        file_len, &p, end))
 561                         return 1;
 562 #endif
 563                 if (lws_finalize_http_header(lws_get_parent(wsi), &p, end))
 564                         return 1;
 565
 566                 *p = '\0';
 567                 lwsl_info("%s\n", buffer + LWS_PRE);
 568
 569                 n = lws_write(lws_get_parent(wsi), buffer + LWS_PRE,
 570                               p - (buffer + LWS_PRE),
 571                               LWS_WRITE_HTTP_HEADERS);
 572                 if (n < 0)
 573                         return -1;
 574
 575                 break; }
 576         case LWS_CALLBACK_CLOSED_CLIENT_HTTP:
 577                 //lwsl_err("LWS_CALLBACK_CLOSED_CLIENT_HTTP\n");
 578                 return -1;
 579                 break;
 580         case LWS_CALLBACK_RECEIVE_CLIENT_HTTP:
 581                 //lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP: wsi %p\n", wsi);
 582                 assert(lws_get_parent(wsi));
 583                 if (!lws_get_parent(wsi))
 584                         break;
 585                 // lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP: wsi %p: sock: %d, parent_wsi: %p, parent_sock:%d,  len %d\n",
 586                 //              wsi, lws_get_socket_fd(wsi),
 587                 //              lws_get_parent(wsi),
 588                 //              lws_get_socket_fd(lws_get_parent(wsi)), len);
 589                 pss1 = lws_wsi_user(lws_get_parent(wsi));
 590                 pss1->reason_bf |= 2;
 591                 lws_callback_on_writable(lws_get_parent(wsi));
 592                 break;
 593         case LWS_CALLBACK_RECEIVE_CLIENT_HTTP_READ:
 594                 //lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP_READ len %d\n", len);
 595                 assert(lws_get_parent(wsi));
 596                 m = lws_write(lws_get_parent(wsi), (unsigned char *)in,
 597                                 len, LWS_WRITE_HTTP);
 598                 if (m < 0)
 599                         return -1;
 600                 break;
 601         case LWS_CALLBACK_COMPLETED_CLIENT_HTTP:
 602                 //lwsl_err("LWS_CALLBACK_COMPLETED_CLIENT_HTTP\n");
 603                 assert(lws_get_parent(wsi));
 604                 if (!lws_get_parent(wsi))
 605                         break;
 606                 pss1 = lws_wsi_user(lws_get_parent(wsi));
 607                 pss1->client_finished = 1;
 608                 break;
 609 #endif
 610
 611         /*
 612          * callbacks for managing the external poll() array appear in
 613          * protocol 0 callback
 614          */
 615
 616         case LWS_CALLBACK_LOCK_POLL:
 617                 /*
 618                  * lock mutex to protect pollfd state
 619                  * called before any other POLL related callback
 620                  * if protecting wsi lifecycle change, len == 1
 621                  */
 622                 test_server_lock(len);
 623                 break;
 624
 625         case LWS_CALLBACK_UNLOCK_POLL:
 626                 /*
 627                  * unlock mutex to protect pollfd state when
 628                  * called after any other POLL related callback
 629                  * if protecting wsi lifecycle change, len == 1
 630                  */
 631                 test_server_unlock(len);
 632                 break;
 633
 634 #ifdef EXTERNAL_POLL
 635         case LWS_CALLBACK_ADD_POLL_FD:
 636
 637                 if (count_pollfds >= max_poll_elements) {
 638                         lwsl_err("LWS_CALLBACK_ADD_POLL_FD: too many sockets to track\n");
 639                         return 1;
 640                 }
 641
 642                 fd_lookup[pa->fd] = count_pollfds;
 643                 pollfds[count_pollfds].fd = pa->fd;
 644                 pollfds[count_pollfds].events = pa->events;
 645                 pollfds[count_pollfds++].revents = 0;
 646                 break;
 647
 648         case LWS_CALLBACK_DEL_POLL_FD:
 649                 if (!--count_pollfds)
 650                         break;
 651                 m = fd_lookup[pa->fd];
 652                 /* have the last guy take up the vacant slot */
 653                 pollfds[m] = pollfds[count_pollfds];
 654                 fd_lookup[pollfds[count_pollfds].fd] = m;
 655                 break;
 656
 657         case LWS_CALLBACK_CHANGE_MODE_POLL_FD:
 658                 pollfds[fd_lookup[pa->fd]].events = pa->events;
 659                 break;
 660 #endif
 661
 662         case LWS_CALLBACK_GET_THREAD_ID:
 663                 /*
 664                  * if you will call "lws_callback_on_writable"
 665                  * from a different thread, return the caller thread ID
 666                  * here so lws can use this information to work out if it
 667                  * should signal the poll() loop to exit and restart early
 668                  */
 669
 670                 /* return pthread_getthreadid_np(); */
 671
 672                 break;
 673
 674 #if defined(LWS_USE_POLARSSL)
 675 #else
 676 #if defined(LWS_USE_MBEDTLS)
 677 #else
 678 #if defined(LWS_OPENSSL_SUPPORT)
 679         case LWS_CALLBACK_OPENSSL_PERFORM_CLIENT_CERT_VERIFICATION:
 680                 /* Verify the client certificate */
 681                 if (!len || (SSL_get_verify_result((SSL*)in) != X509_V_OK)) {
 682                         int err = X509_STORE_CTX_get_error((X509_STORE_CTX*)user);
 683                         int depth = X509_STORE_CTX_get_error_depth((X509_STORE_CTX*)user);
 684                         const char* msg = X509_verify_cert_error_string(err);
 685                         lwsl_err("LWS_CALLBACK_OPENSSL_PERFORM_CLIENT_CERT_VERIFICATION: SSL error: %s (%d), depth: %d\n", msg, err, depth);
 686                         return 1;
 687                 }
 688                 break;
 689 #if defined(LWS_HAVE_SSL_CTX_set1_param)
 690         case LWS_CALLBACK_OPENSSL_LOAD_EXTRA_SERVER_VERIFY_CERTS:
 691                 if (crl_path[0]) {
 692                         /* Enable CRL checking */
 693                         X509_VERIFY_PARAM *param = X509_VERIFY_PARAM_new();
 694                         X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CRL_CHECK);
 695                         SSL_CTX_set1_param((SSL_CTX*)user, param);
 696                         X509_STORE *store = SSL_CTX_get_cert_store((SSL_CTX*)user);
 697                         X509_LOOKUP *lookup = X509_STORE_add_lookup(store, X509_LOOKUP_file());
 698                         n = X509_load_cert_crl_file(lookup, crl_path, X509_FILETYPE_PEM);
 699                         X509_VERIFY_PARAM_free(param);
 700                         if (n != 1) {
 701                                 char errbuf[256];
 702                                 n = ERR_get_error();
 703                                 lwsl_err("LWS_CALLBACK_OPENSSL_LOAD_EXTRA_SERVER_VERIFY_CERTS: SSL error: %s (%d)\n", ERR_error_string(n, errbuf), n);
 704                                 return 1;
 705                         }
 706                 }
 707                 break;
 708 #endif
 709 #endif
 710 #endif
 711 #endif
 712
 713         default:
 714                 break;
 715         }
 716
 717         return 0;
 718
 719         /* if we're on HTTP1.1 or 2.0, will keep the idle connection alive */
 720 try_to_reuse:
 721         if (lws_http_transaction_completed(wsi))
 722                 return -1;
 723
 724         return 0;
 725 }