ah: allow configurable ah hold timeout
[platform/upstream/libwebsockets.git] / lib / context.c
index 46ff505..27c8224 100644 (file)
@@ -44,48 +44,12 @@ static const char * const mount_protocols[] = {
        "http://",
        "https://",
        "file://",
-       "cgi://"
+       "cgi://",
+       ">http://",
+       ">https://",
+       "callback://"
 };
 
-LWS_VISIBLE LWS_EXTERN int
-lws_write_http_mount(struct lws_http_mount *next, struct lws_http_mount **res,
-                    void *store, const char *mountpoint, const char *origin,
-                    const char *def)
-{
-       struct lws_http_mount *m;
-       void *orig = store;
-       unsigned long l = (unsigned long)store;
-       int n;
-
-       if (l & 15)
-               l += 16 - (l & 15);
-
-       store = (void *)l;
-       m = (struct lws_http_mount *)store;
-       *res = m;
-
-       m->def = def;
-       m->mountpoint = mountpoint;
-       m->mountpoint_len = (unsigned char)strlen(mountpoint);
-       m->mount_next = NULL;
-       if (next)
-               next->mount_next = m;
-       for (n = 0; n < ARRAY_SIZE(mount_protocols); n++)
-               if (!strncmp(origin, mount_protocols[n],
-                    strlen(mount_protocols[n]))) {
-                       m->origin_protocol = n;
-                       m->origin = origin + strlen(mount_protocols[n]);
-                       break;
-               }
-
-       if (n == ARRAY_SIZE(mount_protocols)) {
-               lwsl_err("unsupported protocol://\n");
-               return 0; /* ie, fail */
-       }
-
-       return ((char *)store + sizeof(*m)) - (char *)orig;
-}
-
 LWS_VISIBLE void *
 lws_protocol_vh_priv_zalloc(struct lws_vhost *vhost, const struct lws_protocols *prot,
                            int size)
@@ -103,8 +67,15 @@ lws_protocol_vh_priv_zalloc(struct lws_vhost *vhost, const struct lws_protocols
        while (n < vhost->count_protocols && &vhost->protocols[n] != prot)
                n++;
 
-       if (n == vhost->count_protocols)
-               return NULL;
+       if (n == vhost->count_protocols) {
+               n = 0;
+               while (n < vhost->count_protocols &&
+                      strcmp(vhost->protocols[n].name, prot->name))
+                       n++;
+
+               if (n == vhost->count_protocols)
+                       return NULL;
+       }
 
        vhost->protocol_vh_privs[n] = lws_zalloc(size);
        return vhost->protocol_vh_privs[n];
@@ -122,30 +93,100 @@ lws_protocol_vh_priv_get(struct lws_vhost *vhost, const struct lws_protocols *pr
                n++;
 
        if (n == vhost->count_protocols) {
-               lwsl_err("%s: unknown protocol %p\n", __func__, prot);
-               return NULL;
+               n = 0;
+               while (n < vhost->count_protocols &&
+                      strcmp(vhost->protocols[n].name, prot->name))
+                       n++;
+
+               if (n == vhost->count_protocols) {
+                       lwsl_err("%s: unknown protocol %p\n", __func__, prot);
+                       return NULL;
+               }
        }
 
        return vhost->protocol_vh_privs[n];
 }
 
-int
+static const struct lws_protocol_vhost_options *
+lws_vhost_protocol_options(struct lws_vhost *vh, const char *name)
+{
+       const struct lws_protocol_vhost_options *pvo = vh->pvo;
+
+       while (pvo) {
+               // lwsl_notice("%s: '%s' '%s'\n", __func__, pvo->name, name);
+               if (!strcmp(pvo->name, name))
+                       return pvo;
+               pvo = pvo->next;
+       }
+
+       return NULL;
+}
+
+/*
+ * inform every vhost that hasn't already done it, that
+ * his protocols are initializing
+ */
+LWS_VISIBLE int
 lws_protocol_init(struct lws_context *context)
 {
        struct lws_vhost *vh = context->vhost_list;
+       const struct lws_protocol_vhost_options *pvo, *pvo1;
        struct lws wsi;
        int n;
 
        memset(&wsi, 0, sizeof(wsi));
        wsi.context = context;
 
+       lwsl_info("%s\n", __func__);
+
        while (vh) {
                wsi.vhost = vh;
 
+               /* only do the protocol init once for a given vhost */
+               if (vh->created_vhost_protocols)
+                       goto next;
+
                /* initialize supported protocols on this vhost */
 
                for (n = 0; n < vh->count_protocols; n++) {
                        wsi.protocol = &vh->protocols[n];
+                       if (!vh->protocols[n].name)
+                               continue;
+                       pvo = lws_vhost_protocol_options(vh,
+                                                        vh->protocols[n].name);
+                       if (pvo) {
+                               /*
+                                * linked list of options specific to
+                                * vh + protocol
+                                */
+                               pvo1 = pvo;
+                               pvo = pvo1->options;
+
+                               while (pvo) {
+                                       lwsl_notice("    vh %s prot %s opt %s\n",
+                                                       vh->name,
+                                                       vh->protocols[n].name,
+                                                       pvo->name);
+
+                                       if (!strcmp(pvo->name, "default")) {
+                                               lwsl_notice("Setting default "
+                                                  "protocol for vh %s to %s\n",
+                                                  vh->name,
+                                                  vh->protocols[n].name);
+                                               vh->default_protocol_index = n;
+                                       }
+                                       if (!strcmp(pvo->name, "raw")) {
+                                               lwsl_notice("Setting raw "
+                                                  "protocol for vh %s to %s\n",
+                                                  vh->name,
+                                                  vh->protocols[n].name);
+                                               vh->raw_protocol_index = n;
+                                       }
+                                       pvo = pvo->next;
+                               }
+
+                               pvo = pvo1->options;
+                       }
 
                        /*
                         * inform all the protocols that they are doing their one-time
@@ -154,35 +195,256 @@ lws_protocol_init(struct lws_context *context)
                         * NOTE the wsi is all zeros except for the context, vh and
                         * protocol ptrs so lws_get_context(wsi) etc can work
                         */
-                       vh->protocols[n].callback(&wsi,
-                               LWS_CALLBACK_PROTOCOL_INIT, NULL, NULL, 0);
+                       if (vh->protocols[n].callback(&wsi,
+                               LWS_CALLBACK_PROTOCOL_INIT, NULL,
+                               (void *)pvo, 0))
+                               return 1;
                }
 
+               vh->created_vhost_protocols = 1;
+next:
                vh = vh->vhost_next;
        }
 
+       if (!context->protocol_init_done)
+               lws_finalize_startup(context);
+
        context->protocol_init_done = 1;
 
        return 0;
 }
 
+LWS_VISIBLE int
+lws_callback_http_dummy(struct lws *wsi, enum lws_callback_reasons reason,
+                   void *user, void *in, size_t len)
+{
+#ifdef LWS_WITH_CGI
+       struct lws_cgi_args *args;
+#endif
+#if defined(LWS_WITH_CGI) || defined(LWS_WITH_HTTP_PROXY)
+       char buf[512];
+       int n;
+#endif
+
+
+       switch (reason) {
+       case LWS_CALLBACK_HTTP:
+#ifndef LWS_NO_SERVER
+               if (lws_return_http_status(wsi, HTTP_STATUS_NOT_FOUND, NULL))
+                       return -1;
+
+               if (lws_http_transaction_completed(wsi))
+#endif
+                       return -1;
+               break;
+
+       case LWS_CALLBACK_HTTP_WRITEABLE:
+#ifdef LWS_WITH_CGI
+               if (wsi->reason_bf & 1) {
+                       if (lws_cgi_write_split_stdout_headers(wsi) < 0)
+                               return -1;
+
+                       if (wsi->reason_bf & 8)
+                               wsi->reason_bf &= ~8;
+                       else
+                               wsi->reason_bf &= ~1;
+                       break;
+               }
+#endif
+#if defined(LWS_WITH_HTTP_PROXY)
+               if (wsi->reason_bf & 2) {
+                       char *px = buf + LWS_PRE;
+                       int lenx = sizeof(buf) - LWS_PRE;
+                       /*
+                        * our sink is writeable and our source has something
+                        * to read.  So read a lump of source material of
+                        * suitable size to send or what's available, whichever
+                        * is the smaller.
+                        */
+
+
+                       wsi->reason_bf &= ~2;
+                       if (!lws_get_child(wsi))
+                               break;
+                       if (lws_http_client_read(lws_get_child(wsi), &px, &lenx) < 0)
+                               return -1;
+                       break;
+               }
+#endif
+               break;
+
+#if defined(LWS_WITH_HTTP_PROXY)
+       case LWS_CALLBACK_RECEIVE_CLIENT_HTTP:
+               //lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP: wsi %p\n", wsi);
+               assert(lws_get_parent(wsi));
+               if (!lws_get_parent(wsi))
+                       break;
+               lws_get_parent(wsi)->reason_bf |= 2;
+               lws_callback_on_writable(lws_get_parent(wsi));
+               break;
+
+       case LWS_CALLBACK_RECEIVE_CLIENT_HTTP_READ:
+               //lwsl_err("LWS_CALLBACK_RECEIVE_CLIENT_HTTP_READ len %d\n", (int)len);
+               assert(lws_get_parent(wsi));
+               n = lws_write(lws_get_parent(wsi), (unsigned char *)in,
+                               len, LWS_WRITE_HTTP);
+               if (n < 0)
+                       return -1;
+               break;
+
+       case LWS_CALLBACK_ESTABLISHED_CLIENT_HTTP: {
+               unsigned char *p, *end;
+               char ctype[64], ctlen = 0;
+
+               //lwsl_err("LWS_CALLBACK_ESTABLISHED_CLIENT_HTTP\n");
+       
+               p = (unsigned char *)buf + LWS_PRE;
+               end = p + sizeof(buf) - LWS_PRE;
+
+               if (lws_add_http_header_status(lws_get_parent(wsi), HTTP_STATUS_OK, &p, end))
+                       return 1;
+               if (lws_add_http_header_by_token(lws_get_parent(wsi),
+                               WSI_TOKEN_HTTP_SERVER,
+                               (unsigned char *)"libwebsockets",
+                               13, &p, end))
+                       return 1;
+
+               ctlen = lws_hdr_copy(wsi, ctype, sizeof(ctype), WSI_TOKEN_HTTP_CONTENT_TYPE);
+               if (ctlen > 0) {
+                       if (lws_add_http_header_by_token(lws_get_parent(wsi),
+                               WSI_TOKEN_HTTP_CONTENT_TYPE,
+                               (unsigned char *)ctype, ctlen, &p, end))
+                               return 1;
+               }
+#if 0
+               if (lws_add_http_header_content_length(lws_get_parent(wsi),
+                                                      file_len, &p, end))
+                       return 1;
+#endif
+               if (lws_finalize_http_header(lws_get_parent(wsi), &p, end))
+                       return 1;
+
+               *p = '\0';
+//             lwsl_info("%s\n", buf + LWS_PRE);
+
+               n = lws_write(lws_get_parent(wsi), (unsigned char *)buf + LWS_PRE,
+                             p - ((unsigned char *)buf + LWS_PRE),
+                             LWS_WRITE_HTTP_HEADERS);
+               if (n < 0)
+                       return -1;
+
+               break; }
+
+#endif
+
+#ifdef LWS_WITH_CGI
+       /* CGI IO events (POLLIN/OUT) appear here, our default policy is:
+        *
+        *  - POST data goes on subprocess stdin
+        *  - subprocess stdout goes on http via writeable callback
+        *  - subprocess stderr goes to the logs
+        */
+       case LWS_CALLBACK_CGI:
+               args = (struct lws_cgi_args *)in;
+               switch (args->ch) { /* which of stdin/out/err ? */
+               case LWS_STDIN:
+                       /* TBD stdin rx flow control */
+                       break;
+               case LWS_STDOUT:
+                       wsi->reason_bf |= 1;
+                       /* when writing to MASTER would not block */
+                       lws_callback_on_writable(wsi);
+                       break;
+               case LWS_STDERR:
+                       n = read(lws_get_socket_fd(args->stdwsi[LWS_STDERR]),
+                                                  buf, sizeof(buf) - 2);
+                       if (n > 0) {
+                               if (buf[n - 1] != '\n')
+                                       buf[n++] = '\n';
+                               buf[n] = '\0';
+                               lwsl_notice("CGI-stderr: %s\n", buf);
+                       }
+                       break;
+               }
+               break;
+
+       case LWS_CALLBACK_CGI_TERMINATED:
+               return -1;
+
+       case LWS_CALLBACK_CGI_STDIN_DATA:  /* POST body for stdin */
+               args = (struct lws_cgi_args *)in;
+               args->data[args->len] = '\0';
+               n = write(lws_get_socket_fd(args->stdwsi[LWS_STDIN]),
+                         args->data, args->len);
+               if (n < args->len)
+                       lwsl_notice("LWS_CALLBACK_CGI_STDIN_DATA: "
+                                   "sent %d only %d went", n, args->len);
+               return n;
+#endif
+
+       case LWS_CALLBACK_SSL_INFO:
+               {
+                       struct lws_ssl_info *si = in;
+
+                       (void)si;
+                       lwsl_notice("LWS_CALLBACK_SSL_INFO: where: 0x%x, ret: 0x%x\n",
+                                       si->where, si->ret);
+               }
+               break;
+
+       default:
+               break;
+       }
+
+       return 0;
+}
+
+/* list of supported protocols and callbacks */
+
+static const struct lws_protocols protocols_dummy[] = {
+       /* first protocol must always be HTTP handler */
+
+       {
+               "http-only",            /* name */
+               lws_callback_http_dummy,                /* callback */
+               0,      /* per_session_data_size */
+               0,                      /* max frame size / rx buffer */
+               0, NULL, 0
+       },
+       /*
+        * the other protocols are provided by lws plugins
+        */
+       { NULL, NULL, 0, 0, 0, NULL, 0} /* terminator */
+};
+
+#ifdef LWS_PLAT_OPTEE
+#undef LWS_HAVE_GETENV
+#endif
+
 LWS_VISIBLE struct lws_vhost *
 lws_create_vhost(struct lws_context *context,
-                struct lws_context_creation_info *info,
-                struct lws_http_mount *mounts)
+                struct lws_context_creation_info *info)
 {
        struct lws_vhost *vh = lws_zalloc(sizeof(*vh)),
                         **vh1 = &context->vhost_list;
+       const struct lws_http_mount *mounts;
+       const struct lws_protocol_vhost_options *pvo;
 #ifdef LWS_WITH_PLUGINS
        struct lws_plugin *plugin = context->plugin_list;
-       struct lws_protocols *lwsp;
-       int m;
 #endif
+       struct lws_protocols *lwsp;
+       int m, f = !info->pvo;
+#ifdef LWS_HAVE_GETENV
        char *p;
+#endif
+       int n;
 
        if (!vh)
                return NULL;
 
+       if (!info->protocols)
+               info->protocols = &protocols_dummy[0];
+
        vh->context = context;
        if (!info->vhost_name)
                vh->name = "default";
@@ -190,48 +452,121 @@ lws_create_vhost(struct lws_context *context,
                vh->name = info->vhost_name;
 
        vh->iface = info->iface;
+#if !defined(LWS_WITH_ESP8266) && !defined(LWS_WITH_ESP32) && !defined(OPTEE_TA) && !defined(WIN32)
+       vh->bind_iface = info->bind_iface;
+#endif
+
        for (vh->count_protocols = 0;
             info->protocols[vh->count_protocols].callback;
             vh->count_protocols++)
                ;
+
+       vh->options = info->options;
+       vh->pvo = info->pvo;
+       vh->headers = info->headers;
+       vh->ssl_info_event_mask = info->ssl_info_event_mask;
+       if (info->keepalive_timeout)
+               vh->keepalive_timeout = info->keepalive_timeout;
+       else
+               vh->keepalive_timeout = 5;
+
+       if (info->timeout_secs_ah_idle)
+               vh->timeout_secs_ah_idle = info->timeout_secs_ah_idle;
+       else
+               vh->timeout_secs_ah_idle = 10;
+
+       /*
+        * give the vhost a unified list of protocols including the
+        * ones that came from plugins
+        */
+       lwsp = lws_zalloc(sizeof(struct lws_protocols) *
+                                  (vh->count_protocols +
+                                  context->plugin_protocol_count + 1));
+       if (!lwsp) {
+               lwsl_err("OOM\n");
+               return NULL;
+       }
+
+       m = vh->count_protocols;
+       memcpy(lwsp, info->protocols, sizeof(struct lws_protocols) * m);
+
+       /* for compatibility, all protocols enabled on vhost if only
+        * the default vhost exists.  Otherwise only vhosts who ask
+        * for a protocol get it enabled.
+        */
+
+       if (context->options & LWS_SERVER_OPTION_EXPLICIT_VHOSTS)
+               f = 0;
+       (void)f;
 #ifdef LWS_WITH_PLUGINS
        if (plugin) {
-               /*
-                * give the vhost a unified list of protocols including the
-                * ones that came from plugins
-                */
-               lwsp = lws_zalloc(sizeof(struct lws_protocols) *
-                                          (vh->count_protocols +
-                                          context->plugin_protocol_count + 1));
-               if (!lwsp)
-                       return NULL;
 
-               m = vh->count_protocols;
-               memcpy(lwsp, info->protocols,
-                      sizeof(struct lws_protocols) * m);
                while (plugin) {
-                       memcpy(&lwsp[m], plugin->caps.protocols,
-                              sizeof(struct lws_protocols) *
-                              plugin->caps.count_protocols);
-                       m += plugin->caps.count_protocols;
-                       vh->count_protocols += plugin->caps.count_protocols;
+                       for (n = 0; n < plugin->caps.count_protocols; n++) {
+                               /*
+                                * for compatibility's sake, no pvo implies
+                                * allow all protocols
+                                */
+                               if (f || lws_vhost_protocol_options(vh,
+                                   plugin->caps.protocols[n].name)) {
+                                       memcpy(&lwsp[m],
+                                              &plugin->caps.protocols[n],
+                                              sizeof(struct lws_protocols));
+                                       m++;
+                                       vh->count_protocols++;
+                               }
+                       }
                        plugin = plugin->list;
                }
-               vh->protocols = lwsp;
-       } else
+       }
 #endif
+
+       if (
+#ifdef LWS_WITH_PLUGINS
+           (context->plugin_list) ||
+#endif
+           context->options & LWS_SERVER_OPTION_EXPLICIT_VHOSTS)
+               vh->protocols = lwsp;
+       else {
                vh->protocols = info->protocols;
+               free(lwsp);
+       }
 
+       vh->same_vh_protocol_list = (struct lws **)
+                       lws_zalloc(sizeof(struct lws *) * vh->count_protocols);
 
-       vh->mount_list = mounts;
+       vh->mount_list = info->mounts;
 
-       lwsl_notice("Creating Vhost '%s' port %d, %d protocols\n",
-                       vh->name, info->port, vh->count_protocols);
+#ifdef LWS_USE_UNIX_SOCK
+       if (LWS_UNIX_SOCK_ENABLED(context)) {
+               lwsl_notice("Creating Vhost '%s' path \"%s\", %d protocols\n",
+                               vh->name, info->iface, vh->count_protocols);
+       } else
+#endif
+       lwsl_notice("Creating Vhost '%s' port %d, %d protocols, IPv6 %s\n",
+                       vh->name, info->port, vh->count_protocols, LWS_IPV6_ENABLED(vh) ? "on" : "off");
 
+       mounts = info->mounts;
        while (mounts) {
+               (void)mount_protocols[0];
                lwsl_notice("   mounting %s%s to %s\n",
                                mount_protocols[mounts->origin_protocol],
                                mounts->origin, mounts->mountpoint);
+
+               /* convert interpreter protocol names to pointers */
+               pvo = mounts->interpret;
+               while (pvo) {
+                       for (n = 0; n < vh->count_protocols; n++)
+                               if (!strcmp(pvo->value, vh->protocols[n].name)) {
+                                       ((struct lws_protocol_vhost_options *)pvo)->value =
+                                                       (const char *)(lws_intptr_t)n;
+                                       break;
+                               }
+                       if (n == vh->count_protocols)
+                               lwsl_err("ignoring unknown interpret protocol %s\n", pvo->value);
+                       pvo = pvo->next;
+               }
+
                mounts = mounts->mount_next;
        }
 
@@ -255,8 +590,10 @@ lws_create_vhost(struct lws_context *context,
 
                memcpy((struct lws_extension *)vh->extensions, info->extensions,
                       sizeof(struct lws_extension) * m);
+               plugin = context->plugin_list;
                while (plugin) {
-                       memcpy((struct lws_extension *)&vh->extensions[m], plugin->caps.extensions,
+                       memcpy((struct lws_extension *)&vh->extensions[m],
+                               plugin->caps.extensions,
                               sizeof(struct lws_extension) *
                               plugin->caps.count_extensions);
                        m += plugin->caps.count_extensions;
@@ -268,11 +605,17 @@ lws_create_vhost(struct lws_context *context,
 #endif
 
        vh->listen_port = info->port;
+#if !defined(LWS_WITH_ESP8266)
        vh->http_proxy_port = 0;
        vh->http_proxy_address[0] = '\0';
+#if defined(LWS_WITH_SOCKS5)
+       vh->socks_proxy_port = 0;
+       vh->socks_proxy_address[0] = '\0';
+#endif
 
        /* either use proxy from info, or try get it from env var */
 
+       /* http proxy */
        if (info->http_proxy_address) {
                /* override for backwards compatibility */
                if (info->http_proxy_port)
@@ -285,19 +628,56 @@ lws_create_vhost(struct lws_context *context,
                        lws_set_proxy(vh, p);
 #endif
        }
+#if defined(LWS_WITH_SOCKS5)
+       /* socks proxy */
+       if (info->socks_proxy_address) {
+               /* override for backwards compatibility */
+               if (info->socks_proxy_port)
+                       vh->socks_proxy_port = info->socks_proxy_port;
+               lws_set_socks(vh, info->socks_proxy_address);
+       } else {
+#ifdef LWS_HAVE_GETENV
+               p = getenv("socks_proxy");
+               if (p)
+                       lws_set_socks(vh, p);
+#endif
+       }
+#endif
+#endif
 
        vh->ka_time = info->ka_time;
        vh->ka_interval = info->ka_interval;
        vh->ka_probes = info->ka_probes;
 
+       if (vh->options & LWS_SERVER_OPTION_STS)
+               lwsl_notice("   STS enabled\n");
+
+#ifdef LWS_WITH_ACCESS_LOG
+       if (info->log_filepath) {
+               vh->log_fd = open(info->log_filepath, O_CREAT | O_APPEND | O_RDWR, 0600);
+               if (vh->log_fd == (int)LWS_INVALID_FILE) {
+                       lwsl_err("unable to open log filepath %s\n",
+                                info->log_filepath);
+                       goto bail;
+               }
+#ifndef WIN32
+               if (context->uid != -1)
+                       if (chown(info->log_filepath, context->uid,
+                                 context->gid) == -1)
+                               lwsl_err("unable to chown log file %s\n",
+                                               info->log_filepath);
+#endif
+       } else
+               vh->log_fd = (int)LWS_INVALID_FILE;
+#endif
        if (lws_context_init_server_ssl(info, vh))
                goto bail;
-
        if (lws_context_init_client_ssl(info, vh))
                goto bail;
-
-       if (lws_context_init_server(info, vh))
+       if (lws_context_init_server(info, vh)) {
+               lwsl_err("init server failed\n");
                goto bail;
+       }
 
        while (1) {
                if (!(*vh1)) {
@@ -306,6 +686,10 @@ lws_create_vhost(struct lws_context *context,
                }
                vh1 = &(*vh1)->vhost_next;
        };
+       /* for the case we are adding a vhost much later, after server init */
+
+       if (context->protocol_init_done)
+               lws_protocol_init(context);
 
        return vh;
 
@@ -315,47 +699,36 @@ bail:
        return NULL;
 }
 
-/**
- * lws_create_context() - Create the websocket handler
- * @info:      pointer to struct with parameters
- *
- *     This function creates the listening socket (if serving) and takes care
- *     of all initialization in one step.
- *
- *     After initialization, it returns a struct lws_context * that
- *     represents this server.  After calling, user code needs to take care
- *     of calling lws_service() with the context pointer to get the
- *     server's sockets serviced.  This must be done in the same process
- *     context as the initialization call.
- *
- *     The protocol callback functions are called for a handful of events
- *     including http requests coming in, websocket connections becoming
- *     established, and data arriving; it's also called periodically to allow
- *     async transmission.
- *
- *     HTTP requests are sent always to the FIRST protocol in @protocol, since
- *     at that time websocket protocol has not been negotiated.  Other
- *     protocols after the first one never see any HTTP callack activity.
- *
- *     The server created is a simple http server by default; part of the
- *     websocket standard is upgrading this http connection to a websocket one.
- *
- *     This allows the same server to provide files like scripts and favicon /
- *     images or whatever over http and dynamic data over websockets all in
- *     one place; they're all handled in the user callback.
- */
+LWS_VISIBLE int
+lws_init_vhost_client_ssl(const struct lws_context_creation_info *info,
+                         struct lws_vhost *vhost)
+{
+       struct lws_context_creation_info i;
+
+       memcpy(&i, info, sizeof(i));
+       i.port = CONTEXT_PORT_NO_LISTEN;
+
+       return lws_context_init_client_ssl(&i, vhost);
+}
+
 LWS_VISIBLE struct lws_context *
 lws_create_context(struct lws_context_creation_info *info)
 {
        struct lws_context *context = NULL;
-       struct lws wsi;
+       struct lws_plat_file_ops *prev;
 #ifndef LWS_NO_DAEMONIZE
        int pid_daemon = get_daemonize_pid();
 #endif
        int n, m;
+#if defined(__ANDROID__)
+       struct rlimit rt;
+#endif
 
        lwsl_notice("Initial logging level %d\n", log_level);
        lwsl_notice("Libwebsockets version: %s\n", library_version);
+#if defined(GCC_VER)
+       lwsl_notice("Compiled with  %s\n", GCC_VER);
+#endif
 #if LWS_POSIX
 #ifdef LWS_USE_IPV6
        if (!lws_check_opt(info->options, LWS_SERVER_OPTION_DISABLE_IPV6))
@@ -365,14 +738,19 @@ lws_create_context(struct lws_context_creation_info *info)
 #else
        lwsl_notice("IPV6 not compiled in\n");
 #endif
+#if !defined(LWS_PLAT_OPTEE) && !defined(LWS_PLAT_ESP32)
        lws_feature_status_libev(info);
        lws_feature_status_libuv(info);
 #endif
+#endif
        lwsl_info(" LWS_DEF_HEADER_LEN    : %u\n", LWS_DEF_HEADER_LEN);
        lwsl_info(" LWS_MAX_PROTOCOLS     : %u\n", LWS_MAX_PROTOCOLS);
        lwsl_info(" LWS_MAX_SMP           : %u\n", LWS_MAX_SMP);
        lwsl_info(" SPEC_LATEST_SUPPORTED : %u\n", SPEC_LATEST_SUPPORTED);
-       lwsl_info(" sizeof (*info)        : %u\n", sizeof(*info));
+       lwsl_info(" sizeof (*info)        : %ld\n", (long)sizeof(*info));
+#if defined(LWS_WITH_STATS)
+       lwsl_notice(" LWS_WITH_STATS        : on\n");
+#endif
 #if LWS_POSIX
        lwsl_info(" SYSTEM_RANDOM_FILEPATH: '%s'\n", SYSTEM_RANDOM_FILEPATH);
 #endif
@@ -384,13 +762,67 @@ lws_create_context(struct lws_context_creation_info *info)
                lwsl_err("No memory for websocket context\n");
                return NULL;
        }
+       if (info->pt_serv_buf_size)
+               context->pt_serv_buf_size = info->pt_serv_buf_size;
+       else
+               context->pt_serv_buf_size = 4096;
+
+       /* default to just the platform fops implementation */
+
+       context->fops_platform.LWS_FOP_OPEN     = _lws_plat_file_open;
+       context->fops_platform.LWS_FOP_CLOSE    = _lws_plat_file_close;
+       context->fops_platform.LWS_FOP_SEEK_CUR = _lws_plat_file_seek_cur;
+       context->fops_platform.LWS_FOP_READ     = _lws_plat_file_read;
+       context->fops_platform.LWS_FOP_WRITE    = _lws_plat_file_write;
+       context->fops_platform.fi[0].sig        = NULL;
+
+       /*
+        *  arrange a linear linked-list of fops starting from context->fops
+        *
+        * platform fops
+        * [ -> fops_zip (copied into context so .next settable) ]
+        * [ -> info->fops ]
+        */
+
+       context->fops = &context->fops_platform;
+       prev = (struct lws_plat_file_ops *)context->fops;
+
+#if defined(LWS_WITH_ZIP_FOPS)
+       /* make a soft copy so we can set .next */
+       context->fops_zip = fops_zip;
+       prev->next = &context->fops_zip;
+       prev = (struct lws_plat_file_ops *)prev->next;
+#endif
+
+       /* if user provided fops, tack them on the end of the list */
+       if (info->fops)
+               prev->next = info->fops;
+
+       context->reject_service_keywords = info->reject_service_keywords;
+       if (info->external_baggage_free_on_destroy)
+               context->external_baggage_free_on_destroy =
+                       info->external_baggage_free_on_destroy;
+
+       context->time_up = time(NULL);
+
+       context->simultaneous_ssl_restriction = info->simultaneous_ssl_restriction;
+
 #ifndef LWS_NO_DAEMONIZE
        if (pid_daemon) {
                context->started_with_parent = pid_daemon;
                lwsl_notice(" Started with daemon pid %d\n", pid_daemon);
        }
 #endif
-       context->max_fds = getdtablesize();
+#if defined(__ANDROID__)
+               n = getrlimit ( RLIMIT_NOFILE,&rt);
+               if (-1 == n) {
+                       lwsl_err("Get RLIMIT_NOFILE failed!\n");
+                       return NULL;
+               }
+               context->max_fds = rt.rlim_cur;
+#else
+               context->max_fds = getdtablesize();
+#endif
 
        if (info->count_threads)
                context->count_threads = info->count_threads;
@@ -409,12 +841,18 @@ lws_create_context(struct lws_context_creation_info *info)
        else
                context->timeout_secs = AWAITING_TIMEOUT;
 
+       context->ws_ping_pong_interval = info->ws_ping_pong_interval;
+
        lwsl_info(" default timeout (secs): %u\n", context->timeout_secs);
 
        if (info->max_http_header_data)
                context->max_http_header_data = info->max_http_header_data;
        else
-               context->max_http_header_data = LWS_DEF_HEADER_LEN;
+               if (info->max_http_header_data2)
+                       context->max_http_header_data =
+                                       info->max_http_header_data2;
+               else
+                       context->max_http_header_data = LWS_DEF_HEADER_LEN;
        if (info->max_http_header_pool)
                context->max_http_header_pool = info->max_http_header_pool;
        else
@@ -425,13 +863,15 @@ lws_create_context(struct lws_context_creation_info *info)
         * and header data pool
         */
        for (n = 0; n < context->count_threads; n++) {
-               context->pt[n].serv_buf = lws_zalloc(LWS_MAX_SOCKET_IO_BUF);
+               context->pt[n].serv_buf = lws_zalloc(context->pt_serv_buf_size);
                if (!context->pt[n].serv_buf) {
                        lwsl_err("OOM\n");
                        return NULL;
                }
 
+#ifdef LWS_USE_LIBUV
                context->pt[n].context = context;
+#endif
                context->pt[n].tid = n;
                context->pt[n].http_header_data = lws_malloc(context->max_http_header_data *
                                                       context->max_http_header_pool);
@@ -459,9 +899,6 @@ lws_create_context(struct lws_context_creation_info *info)
        lwsl_notice(" Threads: %d each %d fds\n", context->count_threads,
                    context->fd_limit_per_thread);
 
-       memset(&wsi, 0, sizeof(wsi));
-       wsi.context = context;
-
        if (!info->ka_interval && info->ka_time > 0) {
                lwsl_err("info->ka_interval can't be 0 if ka_time used\n");
                return NULL;
@@ -487,21 +924,31 @@ lws_create_context(struct lws_context_creation_info *info)
        context->use_ev_sigint = 1;
        context->lws_uv_sigint_cb = &lws_uv_sigint_cb;
 #endif
-
-       lwsl_info(" mem: context:         %5u bytes (%d ctx + (%d thr x %d))\n",
-                 sizeof(struct lws_context) +
-                 (context->count_threads * LWS_MAX_SOCKET_IO_BUF),
-                 sizeof(struct lws_context),
-                 context->count_threads,
-                 LWS_MAX_SOCKET_IO_BUF);
-
-       lwsl_info(" mem: http hdr rsvd:   %5u bytes (%u thr x (%u + %u) x %u))\n",
-                   (context->max_http_header_data +
+#ifdef LWS_USE_LIBEVENT
+       /* (Issue #264) In order to *avoid breaking backwards compatibility*, we
+        * enable libev mediated SIGINT handling with a default handler of
+        * lws_sigint_cb. The handler can be overridden or disabled
+        * by invoking lws_sigint_cfg after creating the context, but
+        * before invoking lws_initloop:
+        */
+       context->use_ev_sigint = 1;
+       context->lws_event_sigint_cb = &lws_event_sigint_cb;
+#endif /* LWS_USE_LIBEVENT */
+
+       lwsl_info(" mem: context:         %5lu bytes (%ld ctx + (%ld thr x %d))\n",
+                 (long)sizeof(struct lws_context) +
+                 (context->count_threads * context->pt_serv_buf_size),
+                 (long)sizeof(struct lws_context),
+                 (long)context->count_threads,
+                 context->pt_serv_buf_size);
+
+       lwsl_info(" mem: http hdr rsvd:   %5lu bytes (%u thr x (%u + %lu) x %u))\n",
+                   (long)(context->max_http_header_data +
                     sizeof(struct allocated_headers)) *
                    context->max_http_header_pool * context->count_threads,
                    context->count_threads,
                    context->max_http_header_data,
-                   sizeof(struct allocated_headers),
+                   (long)sizeof(struct allocated_headers),
                    context->max_http_header_pool);
        n = sizeof(struct lws_pollfd) * context->count_threads *
            context->fd_limit_per_thread;
@@ -512,6 +959,12 @@ lws_create_context(struct lws_context_creation_info *info)
        }
        lwsl_info(" mem: pollfd map:      %5u\n", n);
 
+       if (info->server_string) {
+               context->server_string = info->server_string;
+               context->server_string_len = (short)
+                               strlen(context->server_string);
+       }
+
 #if LWS_MAX_SMP > 1
        /* each thread serves his own chunk of fds */
        for (n = 1; n < (int)info->count_threads; n++)
@@ -524,22 +977,22 @@ lws_create_context(struct lws_context_creation_info *info)
 
        lws_context_init_ssl_library(info);
 
+       context->user_space = info->user;
+
        /*
         * if he's not saying he'll make his own vhosts later then act
         * compatibly and make a default vhost using the data in the info
         */
        if (!lws_check_opt(info->options, LWS_SERVER_OPTION_EXPLICIT_VHOSTS))
-               if (!lws_create_vhost(context, info, NULL)) {
+               if (!lws_create_vhost(context, info)) {
                        lwsl_err("Failed to create default vhost\n");
                        return NULL;
                }
 
        lws_context_init_extensions(info, context);
 
-       context->user_space = info->user;
-
-       lwsl_notice(" mem: per-conn:        %5u bytes + protocol rx buf\n",
-                   sizeof(struct lws));
+       lwsl_notice(" mem: per-conn:        %5lu bytes + protocol rx buf\n",
+                   (unsigned long)sizeof(struct lws));
 
        strcpy(context->canonical_hostname, "unknown");
        lws_server_get_canonical_hostname(context, info);
@@ -547,6 +1000,11 @@ lws_create_context(struct lws_context_creation_info *info)
        context->uid = info->uid;
        context->gid = info->gid;
 
+#if defined(LWS_HAVE_SYS_CAPABILITY_H) && defined(LWS_HAVE_LIBCAP)
+       memcpy(context->caps, info->caps, sizeof(context->caps));
+       context->count_caps = info->count_caps;
+#endif
+
        /*
         * drop any root privs for this process
         * to listen on port < 1023 we would have needed root, but now we are
@@ -575,30 +1033,311 @@ bail:
        return NULL;
 }
 
-/**
- * lws_context_destroy() - Destroy the websocket context
- * @context:   Websocket context
- *
- *     This function closes any active connections and then frees the
- *     context.  After calling this, any further use of the context is
- *     undefined.
- */
+LWS_VISIBLE LWS_EXTERN void
+lws_context_deprecate(struct lws_context *context, lws_reload_func cb)
+{
+       struct lws_vhost *vh = context->vhost_list, *vh1;
+       struct lws *wsi;
+
+       /*
+        * "deprecation" means disable the context from accepting any new
+        * connections and free up listen sockets to be used by a replacement
+        * context.
+        *
+        * Otherwise the deprecated context remains operational, until its
+        * number of connected sockets falls to zero, when it is deleted.
+        */
+
+       /* for each vhost, close his listen socket */
+
+       while (vh) {
+               wsi = vh->lserv_wsi;
+               if (wsi) {
+                       wsi->socket_is_permanently_unusable = 1;
+                       lws_close_free_wsi(wsi, LWS_CLOSE_STATUS_NOSTATUS);
+                       wsi->context->deprecation_pending_listen_close_count++;
+                       /*
+                        * other vhosts can share the listen port, they
+                        * point to the same wsi.  So zap those too.
+                        */
+                       vh1 = context->vhost_list;
+                       while (vh1) {
+                               if (vh1->lserv_wsi == wsi)
+                                       vh1->lserv_wsi = NULL;
+                               vh1 = vh1->vhost_next;
+                       }
+               }
+               vh = vh->vhost_next;
+       }
+
+       context->deprecated = 1;
+       context->deprecation_cb = cb;
+}
+
+LWS_VISIBLE LWS_EXTERN int
+lws_context_is_deprecated(struct lws_context *context)
+{
+       return context->deprecated;
+}
+
 LWS_VISIBLE void
-lws_context_destroy(struct lws_context *context)
+lws_context_destroy2(struct lws_context *context);
+
+
+static void
+lws_vhost_destroy1(struct lws_vhost *vh)
 {
        const struct lws_protocols *protocol = NULL;
        struct lws_context_per_thread *pt;
-       struct lws_vhost *vh, *vh1;
+       int n, m = vh->context->count_threads;
+       struct lws_context *context = vh->context;
        struct lws wsi;
-       int n, m;
 
        lwsl_notice("%s\n", __func__);
 
-       if (!context)
+       if (vh->being_destroyed)
                return;
 
+       vh->being_destroyed = 1;
+
+       /*
+        * Are there other vhosts that are piggybacking on our listen socket?
+        * If so we need to hand the listen socket off to one of the others
+        * so it will remain open.  If not, leave it attached to the closing
+        * vhost and it will get closed.
+        */
+
+       if (vh->lserv_wsi)
+               lws_start_foreach_ll(struct lws_vhost *, v, context->vhost_list) {
+                       if (v != vh &&
+                           !v->being_destroyed &&
+                           v->listen_port == vh->listen_port &&
+                           ((!v->iface && !vh->iface) ||
+                           (v->iface && vh->iface &&
+                           !strcmp(v->iface, vh->iface)))) {
+                               /*
+                                * this can only be a listen wsi, which is
+                                * restricted... it has no protocol or other
+                                * bindings or states.  So we can simply
+                                * swap it to a vhost that has the same
+                                * iface + port, but is not closing.
+                                */
+                               assert(v->lserv_wsi == NULL);
+                               v->lserv_wsi = vh->lserv_wsi;
+                               vh->lserv_wsi = NULL;
+                               v->lserv_wsi->vhost = v;
+
+                               lwsl_notice("%s: listen skt from %s to %s\n",
+                                           __func__, vh->name, v->name);
+                               break;
+                       }
+               } lws_end_foreach_ll(v, vhost_next);
+
+       /*
+        * Forcibly close every wsi assoicated with this vhost.  That will
+        * include the listen socket if it is still associated with the closing
+        * vhost.
+        */
+
+       while (m--) {
+               pt = &context->pt[m];
+
+               for (n = 0; (unsigned int)n < context->pt[m].fds_count; n++) {
+                       struct lws *wsi = wsi_from_fd(context, pt->fds[n].fd);
+                       if (!wsi)
+                               continue;
+                       if (wsi->vhost != vh)
+                               continue;
+
+                       lws_close_free_wsi(wsi,
+                               LWS_CLOSE_STATUS_NOSTATUS_CONTEXT_DESTROY
+                               /* no protocol close */);
+                       n--;
+               }
+       }
+
+       /*
+        * let the protocols destroy the per-vhost protocol objects
+        */
+
+       memset(&wsi, 0, sizeof(wsi));
+       wsi.context = vh->context;
+       wsi.vhost = vh;
+       protocol = vh->protocols;
+       if (protocol) {
+               n = 0;
+               while (n < vh->count_protocols) {
+                       wsi.protocol = protocol;
+                       protocol->callback(&wsi, LWS_CALLBACK_PROTOCOL_DESTROY,
+                                          NULL, NULL, 0);
+                       protocol++;
+                       n++;
+               }
+       }
+
+       /*
+        * remove vhost from context list of vhosts
+        */
+
+       lws_start_foreach_llp(struct lws_vhost **, pv, context->vhost_list) {
+               if (*pv == vh) {
+                       *pv = vh->vhost_next;
+                       break;
+               }
+       } lws_end_foreach_llp(pv, vhost_next);
+
+       /* add ourselves to the pending destruction list */
+
+       vh->vhost_next = vh->context->vhost_pending_destruction_list;
+       vh->context->vhost_pending_destruction_list = vh;
+}
+
+static void
+lws_vhost_destroy2(struct lws_vhost *vh)
+{
+       const struct lws_protocols *protocol = NULL;
+       struct lws_context *context = vh->context;
+       struct lws_deferred_free *df;
+       int n;
+
+       lwsl_notice("%s: %p\n", __func__, vh);
+
+       /* if we are still on deferred free list, remove ourselves */
+
+       lws_start_foreach_llp(struct lws_deferred_free **, pdf, context->deferred_free_list) {
+               if ((*pdf)->payload == vh) {
+                       df = *pdf;
+                       *pdf = df->next;
+                       lws_free(df);
+                       break;
+               }
+       } lws_end_foreach_llp(pdf, next);
+
+       /* remove ourselves from the pending destruction list */
+
+       lws_start_foreach_llp(struct lws_vhost **, pv, context->vhost_pending_destruction_list) {
+               if ((*pv) == vh) {
+                       *pv = (*pv)->vhost_next;
+                       break;
+               }
+       } lws_end_foreach_llp(pv, vhost_next);
+
+       /*
+        * Free all the allocations associated with the vhost
+        */
+
+       protocol = vh->protocols;
+       if (protocol) {
+               n = 0;
+               while (n < vh->count_protocols) {
+                       if (vh->protocol_vh_privs &&
+                           vh->protocol_vh_privs[n]) {
+                               lws_free(vh->protocol_vh_privs[n]);
+                               vh->protocol_vh_privs[n] = NULL;
+                       }
+                       protocol++;
+                       n++;
+               }
+       }
+       if (vh->protocol_vh_privs)
+               lws_free(vh->protocol_vh_privs);
+       lws_ssl_SSL_CTX_destroy(vh);
+       lws_free(vh->same_vh_protocol_list);
+#ifdef LWS_WITH_PLUGINS
+       if (LWS_LIBUV_ENABLED(context)) {
+               if (context->plugin_list)
+                       lws_free((void *)vh->protocols);
+       } else
+#endif
+       {
+               if (context->options & LWS_SERVER_OPTION_EXPLICIT_VHOSTS)
+                       lws_free((void *)vh->protocols);
+       }
+
+#ifdef LWS_WITH_PLUGINS
+#ifndef LWS_NO_EXTENSIONS
+       if (context->plugin_extension_count)
+               lws_free((void *)vh->extensions);
+#endif
+#endif
+#ifdef LWS_WITH_ACCESS_LOG
+       if (vh->log_fd != (int)LWS_INVALID_FILE)
+               close(vh->log_fd);
+#endif
+
+       /*
+        * although async event callbacks may still come for wsi handles with
+        * pending close in the case of asycn event library like libuv,
+        * they do not refer to the vhost.  So it's safe to free.
+        */
+
+       lwsl_notice("  %s: Freeing vhost %p\n", __func__, vh);
+
+       memset(vh, 0, sizeof(*vh));
+       free(vh);
+}
+
+int
+lws_check_deferred_free(struct lws_context *context, int force)
+{
+       struct lws_deferred_free *df;
+       time_t now = lws_now_secs();
+
+       lws_start_foreach_llp(struct lws_deferred_free **, pdf, context->deferred_free_list) {
+               if (now > (*pdf)->deadline || force) {
+                       df = *pdf;
+                       *pdf = df->next;
+                       /* finalize vh destruction */
+                       lwsl_notice("doing deferred vh %p destroy\n", df->payload);
+                       lws_vhost_destroy2(df->payload);
+                       lws_free(df);
+                       continue; /* after deletion we already point to next */
+               }
+       } lws_end_foreach_llp(pdf, next);
+
+       return 0;
+}
+
+LWS_VISIBLE void
+lws_vhost_destroy(struct lws_vhost *vh)
+{
+       struct lws_deferred_free *df = malloc(sizeof(*df));
+
+       if (!df)
+               return;
+
+       lws_vhost_destroy1(vh);
+
+       /* part 2 is deferred to allow all the handle closes to complete */
+
+       df->next = vh->context->deferred_free_list;
+       df->deadline = lws_now_secs() + 5;
+       df->payload = vh;
+       vh->context->deferred_free_list = df;
+}
+
+LWS_VISIBLE void
+lws_context_destroy(struct lws_context *context)
+{
+       struct lws_context_per_thread *pt;
+       struct lws_vhost *vh = NULL;
+       struct lws wsi;
+       int n, m;
+
+       if (!context) {
+               lwsl_notice("%s: ctx %p\n", __func__, context);
+               return;
+       }
+       if (context->being_destroyed1) {
+               lwsl_notice("%s: ctx %p: already being destroyed\n", __func__, context);
+               return;
+       }
+
+       lwsl_notice("%s: ctx %p\n", __func__, context);
+
        m = context->count_threads;
        context->being_destroyed = 1;
+       context->being_destroyed1 = 1;
 
        memset(&wsi, 0, sizeof(wsi));
        wsi.context = context;
@@ -621,7 +1360,9 @@ lws_context_destroy(struct lws_context *context)
                                /* no protocol close */);
                        n--;
                }
+               lws_pt_mutex_destroy(pt);
        }
+
        /*
         * give all extensions a chance to clean up any per-context
         * allocations they might have made
@@ -639,21 +1380,10 @@ lws_context_destroy(struct lws_context *context)
         *
         * We can't free things until after the event loop shuts down.
         */
-       vh = context->vhost_list;
+       if (context->protocol_init_done)
+               vh = context->vhost_list;
        while (vh) {
-               wsi.vhost = vh;
-               protocol = vh->protocols;
-               if (protocol) {
-                       n = 0;
-                       while (n < vh->count_protocols) {
-                               wsi.protocol = protocol;
-                               protocol->callback(&wsi, LWS_CALLBACK_PROTOCOL_DESTROY,
-                                                  NULL, NULL, 0);
-                               protocol++;
-                               n++;
-                       }
-               }
-
+               lws_vhost_destroy1(vh);
                vh = vh->vhost_next;
        }
 
@@ -662,6 +1392,7 @@ lws_context_destroy(struct lws_context *context)
 
                lws_libev_destroyloop(context, n);
                lws_libuv_destroyloop(context, n);
+               lws_libevent_destroyloop(context, n);
 
                lws_free_set_NULL(context->pt[n].serv_buf);
                if (pt->ah_pool)
@@ -670,45 +1401,52 @@ lws_context_destroy(struct lws_context *context)
                        lws_free(pt->http_header_data);
        }
        lws_plat_context_early_destroy(context);
-       lws_ssl_context_destroy(context);
 
        if (context->pt[0].fds)
                lws_free_set_NULL(context->pt[0].fds);
 
-       /* free all the vhost allocations */
+       if (!LWS_LIBUV_ENABLED(context))
+               lws_context_destroy2(context);
+}
+
+/*
+ * call the second one after the event loop has been shut down cleanly
+ */
+
+LWS_VISIBLE void
+lws_context_destroy2(struct lws_context *context)
+{
+       struct lws_vhost *vh = NULL, *vh1;
+
+       lwsl_notice("%s: ctx %p\n", __func__, context);
+
+       /*
+        * free all the per-vhost allocations
+        */
 
        vh = context->vhost_list;
        while (vh) {
-               protocol = vh->protocols;
-               if (protocol) {
-                       n = 0;
-                       while (n < vh->count_protocols) {
-                               if (vh->protocol_vh_privs &&
-                                   vh->protocol_vh_privs[n]) {
-                                       lws_free(vh->protocol_vh_privs[n]);
-                                       vh->protocol_vh_privs[n] = NULL;
-                               }
-                               protocol++;
-                               n++;
-                       }
-               }
-               if (vh->protocol_vh_privs)
-                       lws_free(vh->protocol_vh_privs);
-               lws_ssl_SSL_CTX_destroy(vh);
-#ifdef LWS_WITH_PLUGINS
-               if (context->plugin_list)
-                       lws_free((void *)vh->protocols);
-#ifndef LWS_NO_EXTENSIONS
-               if (context->plugin_extension_count)
-                       lws_free((void *)vh->extensions);
-#endif
-#endif
                vh1 = vh->vhost_next;
-               lws_free(vh);
+               lws_vhost_destroy2(vh);
                vh = vh1;
        }
 
+       /* remove ourselves from the pending destruction list */
+
+       while (context->vhost_pending_destruction_list)
+               /* removes itself from list */
+               lws_vhost_destroy2(context->vhost_pending_destruction_list);
+
+
+       lws_stats_log_dump(context);
+
+       lws_ssl_context_destroy(context);
        lws_plat_context_late_destroy(context);
 
+       if (context->external_baggage_free_on_destroy)
+               free(context->external_baggage_free_on_destroy);
+
+       lws_check_deferred_free(context, 1);
+
        lws_free(context);
 }