Function New

engine/dlib/src/dlib/sslsocket_mbedtls.cpp:292–407

}

Result New(dmSocket::Socket socket, const char* host, uint64_t timeout, Socket* sslsocket)
{
    uint64_t handshakestart = dmTime::GetMonotonicTime();

    Socket c = (Socket)malloc(sizeof(SSLSocket));
    memset(c, 0, sizeof(SSLSocket));

#define MBED_CALLOC(_TYPE) (_TYPE*)calloc(1, sizeof(_TYPE))
    c->m_MbedConf      = MBED_CALLOC(mbedtls_ssl_config);
    c->m_SSLContext    = MBED_CALLOC(mbedtls_ssl_context);
    c->m_SSLNetContext = MBED_CALLOC(CustomNetContext);
#undef MBED_CALLOC

    mbedtls_ssl_config_init(c->m_MbedConf);

#if defined(MBEDTLS_DEBUG_C)
    mbedtls_ssl_conf_dbg(c->m_MbedConf, mbedtls_debug, 0);
#endif

    int ret = 0;
    if ((ret = mbedtls_ssl_config_defaults(c->m_MbedConf,
                                           MBEDTLS_SSL_IS_CLIENT,
                                           MBEDTLS_SSL_TRANSPORT_STREAM,
                                           MBEDTLS_SSL_PRESET_DEFAULT)) != 0)
    {
        SSL_LOGE("mbedtls_ssl_config_defaults failed", ret);
        Delete(c);
        return RESULT_SSL_INIT_FAILED;
    }

    mbedtls_ssl_conf_authmode(c->m_MbedConf, MBEDTLS_SSL_VERIFY_NONE);

    dmSocket::SetSendTimeout(socket, (int)timeout);
    dmSocket::SetReceiveTimeout(socket, (int)timeout);

#if defined(MBEDTLS_SSL_PROTO_DTLS)
    if (timeout != 0)
    {
        int mbed_ssl_timeout = dmMath::Max((int)timeout, dmSocket::SOCKET_TIMEOUT) / 1000;
        mbed_ssl_timeout = dmMath::Max(1, mbed_ssl_timeout);
        mbedtls_ssl_conf_handshake_timeout(c->m_MbedConf, 1, mbed_ssl_timeout);
    }
#endif

    c->m_SSLNetContext->m_Timeout = timeout;
    mbedtls_ssl_init(c->m_SSLContext);

    bool verify_certificate = g_MbedTlsContext.m_x509CertChain != 0;
    ConfigureCertificateChain(c->m_MbedConf);

    if ((ret = mbedtls_ssl_setup(c->m_SSLContext, c->m_MbedConf)) != 0)
    {
        SSL_LOGE("mbedtls_ssl_setup failed", ret);
        Delete(c);
        return RESULT_HANDSHAKE_FAILED;
    }

    if ((ret = mbedtls_ssl_set_hostname(c->m_SSLContext, host)) != 0)