gcc- format strings: debug and extra plugins
[platform/upstream/libwebsockets.git] / test-server / test-server-http.c
1 /*
2  * libwebsockets-test-server - libwebsockets test implementation
3  *
4  * Copyright (C) 2010-2016 Andy Green <andy@warmcat.com>
5  *
6  * This file is made available under the Creative Commons CC0 1.0
7  * Universal Public Domain Dedication.
8  *
9  * The person who associated a work with this deed has dedicated
10  * the work to the public domain by waiving all of his or her rights
11  * to the work worldwide under copyright law, including all related
12  * and neighboring rights, to the extent allowed by law. You can copy,
13  * modify, distribute and perform the work, even for commercial purposes,
14  * all without asking permission.
15  *
16  * The test apps are intended to be adapted for use in your code, which
17  * may be proprietary.  So unlike the library itself, they are licensed
18  * Public Domain.
19  */
20 #include "test-server.h"
21
22 /*
23  * This demo server shows how to use libwebsockets for one or more
24  * websocket protocols in the same server
25  *
26  * It defines the following websocket protocols:
27  *
28  *  dumb-increment-protocol:  once the socket is opened, an incrementing
29  *                              ascii string is sent down it every 50ms.
30  *                              If you send "reset\n" on the websocket, then
31  *                              the incrementing number is reset to 0.
32  *
33  *  lws-mirror-protocol: copies any received packet to every connection also
34  *                              using this protocol, including the sender
35  */
36
37 #if defined(LWS_USE_POLARSSL)
38 #else
39 #if defined(LWS_USE_MBEDTLS)
40 #else
41 #if defined(LWS_OPENSSL_SUPPORT) && defined(LWS_HAVE_SSL_CTX_set1_param)
42 /* location of the certificate revocation list */
43 extern char crl_path[1024];
44 #endif
45 #endif
46 #endif
47
48 extern int debug_level;
49
50 enum demo_protocols {
51         /* always first */
52         PROTOCOL_HTTP = 0,
53
54         PROTOCOL_DUMB_INCREMENT,
55         PROTOCOL_LWS_MIRROR,
56
57         /* always last */
58         DEMO_PROTOCOL_COUNT
59 };
60
61 /*
62  * We take a strict whitelist approach to stop ../ attacks
63  */
64 struct serveable {
65         const char *urlpath;
66         const char *mimetype;
67 };
68
69 /*
70  * this is just an example of parsing handshake headers, you don't need this
71  * in your code unless you will filter allowing connections by the header
72  * content
73  */
74 void
75 dump_handshake_info(struct lws *wsi)
76 {
77         int n = 0, len;
78         char buf[256];
79         const unsigned char *c;
80
81         do {
82                 c = lws_token_to_string(n);
83                 if (!c) {
84                         n++;
85                         continue;
86                 }
87
88                 len = lws_hdr_total_length(wsi, n);
89                 if (!len || len > sizeof(buf) - 1) {
90                         n++;
91                         continue;
92                 }
93
94                 lws_hdr_copy(wsi, buf, sizeof buf, n);
95                 buf[sizeof(buf) - 1] = '\0';
96
97                 fprintf(stderr, "    %s = %s\n", (char *)c, buf);
98                 n++;
99         } while (c);
100 }
101
102 const char * get_mimetype(const char *file)
103 {
104         int n = strlen(file);
105
106         if (n < 5)
107                 return NULL;
108
109         if (!strcmp(&file[n - 4], ".ico"))
110                 return "image/x-icon";
111
112         if (!strcmp(&file[n - 4], ".png"))
113                 return "image/png";
114
115         if (!strcmp(&file[n - 5], ".html"))
116                 return "text/html";
117
118         if (!strcmp(&file[n - 4], ".css"))
119                 return "text/css";
120
121         if (!strcmp(&file[n - 3], ".js"))
122                 return "text/javascript";
123
124         return NULL;
125 }
126
127
128 static const char * const param_names[] = {
129         "text",
130         "send",
131         "file",
132         "upload",
133 };
134
135 enum enum_param_names {
136         EPN_TEXT,
137         EPN_SEND,
138         EPN_FILE,
139         EPN_UPLOAD,
140 };
141
142 static int
143 file_upload_cb(void *data, const char *name, const char *filename,
144                char *buf, int len, enum lws_spa_fileupload_states state)
145 {
146         struct per_session_data__http *pss =
147                         (struct per_session_data__http *)data;
148         int n;
149
150         switch (state) {
151         case LWS_UFS_OPEN:
152                 strncpy(pss->filename, filename, sizeof(pss->filename) - 1);
153                 /* we get the original filename in @filename arg, but for
154                  * simple demo use a fixed name so we don't have to deal with
155                  * attacks  */
156                 pss->post_fd = open("/tmp/post-file",
157                                O_CREAT | O_TRUNC | O_RDWR, 0600);
158                 break;
159         case LWS_UFS_FINAL_CONTENT:
160         case LWS_UFS_CONTENT:
161                 if (len) {
162                         pss->file_length += len;
163
164                         /* if the file length is too big, drop it */
165                         if (pss->file_length > 100000)
166                                 return 1;
167
168                         n = write(pss->post_fd, buf, len);
169                         lwsl_notice("%s: write %d says %d\n", __func__, len, n);
170                 }
171                 if (state == LWS_UFS_CONTENT)
172                         break;
173                 close(pss->post_fd);
174                 pss->post_fd = LWS_INVALID_FILE;
175                 break;
176         }
177
178         return 0;
179 }
180
181 /* this protocol server (always the first one) handles HTTP,
182  *
183  * Some misc callbacks that aren't associated with a protocol also turn up only
184  * here on the first protocol server.
185  */
186
187 int callback_http(struct lws *wsi, enum lws_callback_reasons reason, void *user,
188                   void *in, size_t len)
189 {
190         struct per_session_data__http *pss =
191                         (struct per_session_data__http *)user;
192         unsigned char buffer[4096 + LWS_PRE];
193         unsigned long amount, file_len, sent;
194         char leaf_path[1024];
195         const char *mimetype;
196         char *other_headers;
197         unsigned char *end, *start;
198         struct timeval tv;
199         unsigned char *p;
200 #ifndef LWS_NO_CLIENT
201         struct per_session_data__http *pss1;
202         struct lws *wsi1;
203 #endif
204         char buf[256];
205         char b64[64];
206         int n, m;
207 #ifdef EXTERNAL_POLL
208         struct lws_pollargs *pa = (struct lws_pollargs *)in;
209 #endif
210
211
212         switch (reason) {
213         case LWS_CALLBACK_HTTP:
214
215                 lwsl_info("lws_http_serve: %s\n", (const char *)in);
216
217                 if (debug_level & LLL_INFO) {
218                         dump_handshake_info(wsi);
219
220                         /* dump the individual URI Arg parameters */
221                         n = 0;
222                         while (lws_hdr_copy_fragment(wsi, buf, sizeof(buf),
223                                                      WSI_TOKEN_HTTP_URI_ARGS, n) > 0) {
224                                 lwsl_notice("URI Arg %d: %s\n", ++n, buf);
225                         }
226                 }
227
228                 {
229                         lws_get_peer_simple(wsi, buf, sizeof(buf));
230                         lwsl_info("HTTP connect from %s\n", buf);
231                 }
232
233                 if (len < 1) {
234                         lws_return_http_status(wsi,
235                                                 HTTP_STATUS_BAD_REQUEST, NULL);
236                         goto try_to_reuse;
237                 }
238
239 #ifndef LWS_NO_CLIENT
240                 if (!strncmp(in, "/proxytest", 10)) {
241                         struct lws_client_connect_info i;
242                         char *rootpath = "/";
243                         const char *p = (const char *)in;
244
245                         if (lws_get_child(wsi))
246                                 break;
247
248                         pss->client_finished = 0;
249                         memset(&i,0, sizeof(i));
250                         i.context = lws_get_context(wsi);
251                         i.address = "git.libwebsockets.org";
252                         i.port = 80;
253                         i.ssl_connection = 0;
254                         if (p[10])
255                                 i.path = (char *)in + 10;
256                         else
257                                 i.path = rootpath;
258                         i.host = "git.libwebsockets.org";
259                         i.origin = NULL;
260                         i.method = "GET";
261                         i.parent_wsi = wsi;
262                         i.uri_replace_from = "git.libwebsockets.org/";
263                         i.uri_replace_to = "/proxytest/";
264                         if (!lws_client_connect_via_info(&i)) {
265                                 lwsl_err("proxy connect fail\n");
266                                 break;
267                         }
268
269
270
271                         break;
272                 }
273 #endif
274
275 #if 1
276                 /* this example server has no concept of directories */
277                 if (strchr((const char *)in + 1, '/')) {
278                         lws_return_http_status(wsi, HTTP_STATUS_NOT_ACCEPTABLE, NULL);
279                         goto try_to_reuse;
280                 }
281 #endif
282
283                 /* if a legal POST URL, let it continue and accept data */
284                 if (lws_hdr_total_length(wsi, WSI_TOKEN_POST_URI))
285                         return 0;
286
287                 /* check for the "send a big file by hand" example case */
288
289                 if (!strcmp((const char *)in, "/leaf.jpg")) {
290                         if (strlen(resource_path) > sizeof(leaf_path) - 10)
291                                 return -1;
292                         sprintf(leaf_path, "%s/leaf.jpg", resource_path);
293
294                         /* well, let's demonstrate how to send the hard way */
295
296                         p = buffer + LWS_PRE;
297                         end = p + sizeof(buffer) - LWS_PRE;
298
299                         pss->fd = lws_plat_file_open(wsi, leaf_path, &file_len,
300                                                      LWS_O_RDONLY);
301
302                         if (pss->fd == LWS_INVALID_FILE) {
303                                 lwsl_err("failed to open file %s\n", leaf_path);
304                                 return -1;
305                         }
306
307                         /*
308                          * we will send a big jpeg file, but it could be
309                          * anything.  Set the Content-Type: appropriately
310                          * so the browser knows what to do with it.
311                          *
312                          * Notice we use the APIs to build the header, which
313                          * will do the right thing for HTTP 1/1.1 and HTTP2
314                          * depending on what connection it happens to be working
315                          * on
316                          */
317                         if (lws_add_http_header_status(wsi, 200, &p, end))
318                                 return 1;
319                         if (lws_add_http_header_by_token(wsi, WSI_TOKEN_HTTP_SERVER,
320                                         (unsigned char *)"libwebsockets",
321                                         13, &p, end))
322                                 return 1;
323                         if (lws_add_http_header_by_token(wsi,
324                                         WSI_TOKEN_HTTP_CONTENT_TYPE,
325                                         (unsigned char *)"image/jpeg",
326                                         10, &p, end))
327                                 return 1;
328                         if (lws_add_http_header_content_length(wsi,
329                                                                file_len, &p,
330                                                                end))
331                                 return 1;
332                         if (lws_finalize_http_header(wsi, &p, end))
333                                 return 1;
334
335                         /*
336                          * send the http headers...
337                          * this won't block since it's the first payload sent
338                          * on the connection since it was established
339                          * (too small for partial)
340                          *
341                          * Notice they are sent using LWS_WRITE_HTTP_HEADERS
342                          * which also means you can't send body too in one step,
343                          * this is mandated by changes in HTTP2
344                          */
345
346                         *p = '\0';
347                         lwsl_info("%s\n", buffer + LWS_PRE);
348
349                         n = lws_write(wsi, buffer + LWS_PRE,
350                                       p - (buffer + LWS_PRE),
351                                       LWS_WRITE_HTTP_HEADERS);
352                         if (n < 0) {
353                                 lws_plat_file_close(wsi, pss->fd);
354                                 return -1;
355                         }
356                         /*
357                          * book us a LWS_CALLBACK_HTTP_WRITEABLE callback
358                          */
359                         lws_callback_on_writable(wsi);
360                         break;
361                 }
362
363                 /* if not, send a file the easy way */
364                 if (!strncmp(in, "/cgit-data/", 11)) {
365                         in = (char *)in + 11;
366                         strcpy(buf, "/usr/share/cgit");
367                 } else
368                         strcpy(buf, resource_path);
369
370                 if (strcmp(in, "/")) {
371                         if (*((const char *)in) != '/')
372                                 strcat(buf, "/");
373                         strncat(buf, in, sizeof(buf) - strlen(buf) - 1);
374                 } else /* default file to serve */
375                         strcat(buf, "/test.html");
376                 buf[sizeof(buf) - 1] = '\0';
377
378                 /* refuse to serve files we don't understand */
379                 mimetype = get_mimetype(buf);
380                 if (!mimetype) {
381                         lwsl_err("Unknown mimetype for %s\n", buf);
382                         lws_return_http_status(wsi,
383                                       HTTP_STATUS_UNSUPPORTED_MEDIA_TYPE, NULL);
384                         return -1;
385                 }
386
387                 /* demonstrates how to set a cookie on / */
388
389                 other_headers = leaf_path;
390                 p = (unsigned char *)leaf_path;
391                 if (!strcmp((const char *)in, "/") &&
392                            !lws_hdr_total_length(wsi, WSI_TOKEN_HTTP_COOKIE)) {
393                         /* this isn't very unguessable but it'll do for us */
394                         gettimeofday(&tv, NULL);
395                         n = sprintf(b64, "test=LWS_%u_%u_COOKIE;Max-Age=360000",
396                                 (unsigned int)tv.tv_sec,
397                                 (unsigned int)tv.tv_usec);
398
399                         if (lws_add_http_header_by_name(wsi,
400                                 (unsigned char *)"set-cookie:",
401                                 (unsigned char *)b64, n, &p,
402                                 (unsigned char *)leaf_path + sizeof(leaf_path)))
403                                 return 1;
404                 }
405                 if (lws_is_ssl(wsi) && lws_add_http_header_by_name(wsi,
406                                                 (unsigned char *)
407                                                 "Strict-Transport-Security:",
408                                                 (unsigned char *)
409                                                 "max-age=15768000 ; "
410                                                 "includeSubDomains", 36, &p,
411                                                 (unsigned char *)leaf_path +
412                                                         sizeof(leaf_path)))
413                         return 1;
414                 n = (char *)p - leaf_path;
415
416                 n = lws_serve_http_file(wsi, buf, mimetype, other_headers, n);
417                 if (n < 0 || ((n > 0) && lws_http_transaction_completed(wsi)))
418                         return -1; /* error or can't reuse connection: close the socket */
419
420                 /*
421                  * notice that the sending of the file completes asynchronously,
422                  * we'll get a LWS_CALLBACK_HTTP_FILE_COMPLETION callback when
423                  * it's done
424                  */
425                 break;
426
427         case LWS_CALLBACK_HTTP_BODY:
428                 /* create the POST argument parser if not already existing */
429                 if (!pss->spa) {
430                         pss->spa = lws_spa_create(wsi, param_names,
431                                         ARRAY_SIZE(param_names), 1024,
432                                         file_upload_cb, pss);
433                         if (!pss->spa)
434                                 return -1;
435
436                         pss->filename[0] = '\0';
437                         pss->file_length = 0;
438                 }
439
440                 /* let it parse the POST data */
441                 if (lws_spa_process(pss->spa, in, len))
442                         return -1;
443                 break;
444
445         case LWS_CALLBACK_HTTP_BODY_COMPLETION:
446                 lwsl_debug("LWS_CALLBACK_HTTP_BODY_COMPLETION\n");
447                 /*
448                  * the whole of the sent body arrived,
449                  * respond to the client with a redirect to show the
450                  * results
451                  */
452
453                 /* call to inform no more payload data coming */
454                 lws_spa_finalize(pss->spa);
455
456                 p = (unsigned char *)pss->result + LWS_PRE;
457                 end = p + sizeof(pss->result) - LWS_PRE - 1;
458                 p += sprintf((char *)p,
459                         "<html><body><h1>Form results (after urldecoding)</h1>"
460                         "<table><tr><td>Name</td><td>Length</td><td>Value</td></tr>");
461
462                 for (n = 0; n < ARRAY_SIZE(param_names); n++)
463                         p += lws_snprintf((char *)p, end - p,
464                                     "<tr><td><b>%s</b></td><td>%d</td><td>%s</td></tr>",
465                                     param_names[n],
466                                     lws_spa_get_length(pss->spa, n),
467                                     lws_spa_get_string(pss->spa, n));
468
469                 p += lws_snprintf((char *)p, end - p, "</table><br><b>filename:</b> %s, <b>length</b> %ld",
470                                 pss->filename, pss->file_length);
471
472                 p += lws_snprintf((char *)p, end - p, "</body></html>");
473                 pss->result_len = p - (unsigned char *)(pss->result + LWS_PRE);
474
475                 p = buffer + LWS_PRE;
476                 start = p;
477                 end = p + sizeof(buffer) - LWS_PRE;
478
479                 if (lws_add_http_header_status(wsi, 200, &p, end))
480                         return 1;
481
482                 if (lws_add_http_header_by_token(wsi, WSI_TOKEN_HTTP_CONTENT_TYPE,
483                                 (unsigned char *)"text/html", 9, &p, end))
484                         return 1;
485                 if (lws_add_http_header_content_length(wsi, pss->result_len, &p, end))
486                         return 1;
487                 if (lws_finalize_http_header(wsi, &p, end))
488                         return 1;
489
490                 n = lws_write(wsi, start, p - start, LWS_WRITE_HTTP_HEADERS);
491                 if (n < 0)
492                         return 1;
493
494                 n = lws_write(wsi, (unsigned char *)pss->result + LWS_PRE,
495                               pss->result_len, LWS_WRITE_HTTP);
496                 if (n < 0)
497                         return 1;
498                 goto try_to_reuse;
499         case LWS_CALLBACK_HTTP_DROP_PROTOCOL:
500                 lwsl_debug("LWS_CALLBACK_HTTP_DROP_PROTOCOL\n");
501
502                 /* called when our wsi user_space is going to be destroyed */
503                 if (pss->spa) {
504                         lws_spa_destroy(pss->spa);
505                         pss->spa = NULL;
506                 }
507                 break;
508         case LWS_CALLBACK_HTTP_FILE_COMPLETION:
509                 goto try_to_reuse;
510
511         case LWS_CALLBACK_HTTP_WRITEABLE:
512                 lwsl_info("LWS_CALLBACK_HTTP_WRITEABLE\n");
513
514                 if (pss->client_finished)
515                         return -1;
516
517                 if (pss->fd == LWS_INVALID_FILE)
518                         goto try_to_reuse;
519
520 #ifndef LWS_NO_CLIENT
521                 if (pss->reason_bf & 2) {
522                         char *px = buf + LWS_PRE;
523                         int lenx = sizeof(buf) - LWS_PRE;
524                         /*
525                          * our sink is writeable and our source has something
526                          * to read.  So read a lump of source material of
527                          * suitable size to send or what's available, whichever
528                          * is the smaller.
529                          */
530                         pss->reason_bf &= ~2;
531                         wsi1 = lws_get_child(wsi);
532                         if (!wsi1)
533                                 break;
534                         if (lws_http_client_read(wsi1, &px, &lenx) < 0)
535                                 goto bail;
536
537                         if (pss->client_finished)
538                                 return -1;
539                         break;
540                 }
541 #endif
542                 /*
543                  * we can send more of whatever it is we were sending
544                  */
545                 sent = 0;
546                 do {
547                         /* we'd like the send this much */
548                         n = sizeof(buffer) - LWS_PRE;
549
550                         /* but if the peer told us he wants less, we can adapt */
551                         m = lws_get_peer_write_allowance(wsi);
552
553                         /* -1 means not using a protocol that has this info */
554                         if (m == 0)
555                                 /* right now, peer can't handle anything */
556                                 goto later;
557
558                         if (m != -1 && m < n)
559                                 /* he couldn't handle that much */
560                                 n = m;
561
562                         n = lws_plat_file_read(wsi, pss->fd,
563                                                &amount, buffer + LWS_PRE, n);
564                         /* problem reading, close conn */
565                         if (n < 0) {
566                                 lwsl_err("problem reading file\n");
567                                 goto bail;
568                         }
569                         n = (int)amount;
570                         /* sent it all, close conn */
571                         if (n == 0)
572                                 goto penultimate;
573                         /*
574                          * To support HTTP2, must take care about preamble space
575                          *
576                          * identification of when we send the last payload frame
577                          * is handled by the library itself if you sent a
578                          * content-length header
579                          */
580                         m = lws_write(wsi, buffer + LWS_PRE, n, LWS_WRITE_HTTP);
581                         if (m < 0) {
582                                 lwsl_err("write failed\n");
583                                 /* write failed, close conn */
584                                 goto bail;
585                         }
586                         if (m) /* while still active, extend timeout */
587                                 lws_set_timeout(wsi, PENDING_TIMEOUT_HTTP_CONTENT, 5);
588                         sent += m;
589
590                 } while (!lws_send_pipe_choked(wsi) && (sent < 1024 * 1024));
591 later:
592                 lws_callback_on_writable(wsi);
593                 break;
594 penultimate:
595                 lws_plat_file_close(wsi, pss->fd);
596                 pss->fd = LWS_INVALID_FILE;
597                 goto try_to_reuse;
598
599 bail:
600                 lws_plat_file_close(wsi, pss->fd);
601
602                 return -1;
603
604         /*
605          * callback for confirming to continue with client IP appear in
606          * protocol 0 callback since no websocket protocol has been agreed
607          * yet.  You can just ignore this if you won't filter on client IP
608          * since the default unhandled callback return is 0 meaning let the
609          * connection continue.
610          */
611         case LWS_CALLBACK_FILTER_NETWORK_CONNECTION:
612                 /* if we returned non-zero from here, we kill the connection */
613                 break;
614
615 #ifndef LWS_NO_CLIENT
616         case LWS_CALLBACK_ESTABLISHED_CLIENT_HTTP: {
617                 char ctype[64], ctlen = 0;
618                 lwsl_err("LWS_CALLBACK_ESTABLISHED_CLIENT_HTTP\n");
619                 p = buffer + LWS_PRE;
620                 end = p + sizeof(buffer) - LWS_PRE;
621                 if (lws_add_http_header_status(lws_get_parent(wsi), 200, &p, end))
622                         return 1;
623                 if (lws_add_http_header_by_token(lws_get_parent(wsi),
624                                 WSI_TOKEN_HTTP_SERVER,
625                                 (unsigned char *)"libwebsockets",
626                                 13, &p, end))
627                         return 1;
628
629                 ctlen = lws_hdr_copy(wsi, ctype, sizeof(ctype), WSI_TOKEN_HTTP_CONTENT_TYPE);
630                 if (ctlen > 0) {
631                         if (lws_add_http_header_by_token(lws_get_parent(wsi),
632                                 WSI_TOKEN_HTTP_CONTENT_TYPE,
633                                 (unsigned char *)ctype, ctlen, &p, end))
634                                 return 1;
635                 }
636 #if 0
637                 if (lws_add_http_header_content_length(lws_get_parent(wsi),
638                                                        file_len, &p, end))
639                         return 1;
640 #endif
641                 if (lws_finalize_http_header(lws_get_parent(wsi), &p, end))
642                         return 1;
643
644                 *p = '\0';
645                 lwsl_info("%s\n", buffer + LWS_PRE);
646
647                 n = lws_write(lws_get_parent(wsi), buffer + LWS_PRE,
648                               p - (buffer + LWS_PRE),
649                               LWS_WRITE_HTTP_HEADERS);
650                 if (n < 0)
651                         return -1;
652
653                 break; }
654         case LWS_CALLBACK_CLOSED_CLIENT_HTTP:
655                 //lwsl_err("LWS_CALLBACK_CLOSED_CLIENT_HTTP\n");
656                 return -1;
657                 break;
658         case LWS_CALLBACK_RECEIVE_CLIENT_HTTP:
659                 //lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP: wsi %p\n", wsi);
660                 assert(lws_get_parent(wsi));
661                 if (!lws_get_parent(wsi))
662                         break;
663                 // lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP: wsi %p: sock: %d, parent_wsi: %p, parent_sock:%d,  len %d\n",
664                 //              wsi, lws_get_socket_fd(wsi),
665                 //              lws_get_parent(wsi),
666                 //              lws_get_socket_fd(lws_get_parent(wsi)), len);
667                 pss1 = lws_wsi_user(lws_get_parent(wsi));
668                 pss1->reason_bf |= 2;
669                 lws_callback_on_writable(lws_get_parent(wsi));
670                 break;
671         case LWS_CALLBACK_RECEIVE_CLIENT_HTTP_READ:
672                 //lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP_READ len %d\n", len);
673                 assert(lws_get_parent(wsi));
674                 m = lws_write(lws_get_parent(wsi), (unsigned char *)in,
675                                 len, LWS_WRITE_HTTP);
676                 if (m < 0)
677                         return -1;
678                 break;
679         case LWS_CALLBACK_COMPLETED_CLIENT_HTTP:
680                 //lwsl_err("LWS_CALLBACK_COMPLETED_CLIENT_HTTP\n");
681                 assert(lws_get_parent(wsi));
682                 if (!lws_get_parent(wsi))
683                         break;
684                 pss1 = lws_wsi_user(lws_get_parent(wsi));
685                 pss1->client_finished = 1;
686                 break;
687 #endif
688
689         /*
690          * callbacks for managing the external poll() array appear in
691          * protocol 0 callback
692          */
693
694         case LWS_CALLBACK_LOCK_POLL:
695                 /*
696                  * lock mutex to protect pollfd state
697                  * called before any other POLL related callback
698                  * if protecting wsi lifecycle change, len == 1
699                  */
700                 test_server_lock(len);
701                 break;
702
703         case LWS_CALLBACK_UNLOCK_POLL:
704                 /*
705                  * unlock mutex to protect pollfd state when
706                  * called after any other POLL related callback
707                  * if protecting wsi lifecycle change, len == 1
708                  */
709                 test_server_unlock(len);
710                 break;
711
712 #ifdef EXTERNAL_POLL
713         case LWS_CALLBACK_ADD_POLL_FD:
714
715                 if (count_pollfds >= max_poll_elements) {
716                         lwsl_err("LWS_CALLBACK_ADD_POLL_FD: too many sockets to track\n");
717                         return 1;
718                 }
719
720                 fd_lookup[pa->fd] = count_pollfds;
721                 pollfds[count_pollfds].fd = pa->fd;
722                 pollfds[count_pollfds].events = pa->events;
723                 pollfds[count_pollfds++].revents = 0;
724                 break;
725
726         case LWS_CALLBACK_DEL_POLL_FD:
727                 if (!--count_pollfds)
728                         break;
729                 m = fd_lookup[pa->fd];
730                 /* have the last guy take up the vacant slot */
731                 pollfds[m] = pollfds[count_pollfds];
732                 fd_lookup[pollfds[count_pollfds].fd] = m;
733                 break;
734
735         case LWS_CALLBACK_CHANGE_MODE_POLL_FD:
736                 pollfds[fd_lookup[pa->fd]].events = pa->events;
737                 break;
738 #endif
739
740         case LWS_CALLBACK_GET_THREAD_ID:
741                 /*
742                  * if you will call "lws_callback_on_writable"
743                  * from a different thread, return the caller thread ID
744                  * here so lws can use this information to work out if it
745                  * should signal the poll() loop to exit and restart early
746                  */
747
748                 /* return pthread_getthreadid_np(); */
749
750                 break;
751
752 #if defined(LWS_USE_POLARSSL)
753 #else
754 #if defined(LWS_USE_MBEDTLS)
755 #else
756 #if defined(LWS_OPENSSL_SUPPORT)
757         case LWS_CALLBACK_OPENSSL_PERFORM_CLIENT_CERT_VERIFICATION:
758                 /* Verify the client certificate */
759                 if (!len || (SSL_get_verify_result((SSL*)in) != X509_V_OK)) {
760                         int err = X509_STORE_CTX_get_error((X509_STORE_CTX*)user);
761                         int depth = X509_STORE_CTX_get_error_depth((X509_STORE_CTX*)user);
762                         const char* msg = X509_verify_cert_error_string(err);
763                         lwsl_err("LWS_CALLBACK_OPENSSL_PERFORM_CLIENT_CERT_VERIFICATION: SSL error: %s (%d), depth: %d\n", msg, err, depth);
764                         return 1;
765                 }
766                 break;
767 #if defined(LWS_HAVE_SSL_CTX_set1_param)
768         case LWS_CALLBACK_OPENSSL_LOAD_EXTRA_SERVER_VERIFY_CERTS:
769                 if (crl_path[0]) {
770                         /* Enable CRL checking */
771                         X509_VERIFY_PARAM *param = X509_VERIFY_PARAM_new();
772                         X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CRL_CHECK);
773                         SSL_CTX_set1_param((SSL_CTX*)user, param);
774                         X509_STORE *store = SSL_CTX_get_cert_store((SSL_CTX*)user);
775                         X509_LOOKUP *lookup = X509_STORE_add_lookup(store, X509_LOOKUP_file());
776                         n = X509_load_cert_crl_file(lookup, crl_path, X509_FILETYPE_PEM);
777                         X509_VERIFY_PARAM_free(param);
778                         if (n != 1) {
779                                 char errbuf[256];
780                                 n = ERR_get_error();
781                                 lwsl_err("LWS_CALLBACK_OPENSSL_LOAD_EXTRA_SERVER_VERIFY_CERTS: SSL error: %s (%d)\n", ERR_error_string(n, errbuf), n);
782                                 return 1;
783                         }
784                 }
785                 break;
786 #endif
787 #endif
788 #endif
789 #endif
790
791         default:
792                 break;
793         }
794
795         return 0;
796
797         /* if we're on HTTP1.1 or 2.0, will keep the idle connection alive */
798 try_to_reuse:
799         if (lws_http_transaction_completed(wsi))
800                 return -1;
801
802         return 0;
803 }