Method run

src/Server/TLSHandler.cpp:101–134

void DB::TLSHandler::run()
{
#if USE_SSL
    bool keys_are_explicitly_set = !params.privateKeyFile.empty() && !params.certificateFile.empty();
    bool acme_certificate_provided = config.has("acme");

    Context::Ptr ctx;

    if (keys_are_explicitly_set || acme_certificate_provided)
    {
        ctx = SSLManager::instance().getCustomServerContext(prefix);
        if (!ctx)
        {
            ctx = new Context(usage, params);
            ctx->disableProtocols(disabled_protocols);
            ctx->enableExtendedCertificateVerification(extended_verification);
            if (prefer_server_ciphers)
                ctx->preferServerCiphers();
            CertificateReloader::instance().tryLoad(config, ctx->sslContext(), prefix);
            ctx = SSLManager::instance().setCustomServerContext(prefix, ctx);
        }
    }
    else
    {
        ctx = SSLManager::instance().defaultServerContext();
    }

    socket() = SecureStreamSocket::attach(socket(), ctx);
    stack_data.socket = socket();
    stack_data.certificate = params.certificateFile;
#else
    throw Exception(::ErrorCodes::SUPPORT_IS_DISABLED, "SSL support for TCP protocol is disabled because Poco library was built without NetSSL support.");
#endif
}