Method connectSSL

base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:188–248

void SecureSocketImpl::connectSSL(bool performHandshake)
{
	ScopedLock lock(*_mutex);
	poco_assert (!_pSSL);
	poco_assert (_pSocket->initialized());

	BIO* pBIO = BIO_new(getBioMethod());
	if (!pBIO) throw SSLException("Cannot create SSL BIO object");
	BIO_set_fd(pBIO, static_cast<int>(_pSocket->sockfd()), BIO_NOCLOSE);

	if (_bioMethod)
		BIO_set_data(pBIO, _pSocket.get());

	_pSSL = SSL_new(_pContext->sslContext());
	if (!_pSSL)
	{
		BIO_free(pBIO);
		throw SSLException("Cannot create SSL object");
	}
	SSL_set_bio(_pSSL, pBIO, pBIO);

#if !defined(OPENSSL_NO_TLSEXT)
	if (!_peerHostName.empty())
	{
		SSL_set_tlsext_host_name(_pSSL, _peerHostName.c_str());
	}
#endif

	if (_pSession)
	{
		SSL_set_session(_pSSL, _pSession->sslSession());
	}

	try
	{
		if (performHandshake && _pSocket->getBlocking())
		{
			int ret;
			Poco::Timespan remaining_time = getMaxTimeoutOrLimit();
			do
			{
				RemainingTimeCounter counter(remaining_time);
				ret = SSL_connect(_pSSL);
			}
			while (mustRetry(ret, remaining_time));
			handleError(ret);
			verifyPeerCertificate();
		}
		else
		{
			SSL_set_connect_state(_pSSL);
			_needHandshake = true;
		}
	}
	catch (...)
	{
		SSL_free(_pSSL);
		_pSSL = 0;