1 | =pod
|
---|
2 |
|
---|
3 | =head1 NAME
|
---|
4 |
|
---|
5 | SSL_handle_events - advance asynchronous state machine and perform network I/O
|
---|
6 |
|
---|
7 | =head1 SYNOPSIS
|
---|
8 |
|
---|
9 | #include <openssl/ssl.h>
|
---|
10 |
|
---|
11 | int SSL_handle_events(SSL *ssl);
|
---|
12 |
|
---|
13 | =head1 DESCRIPTION
|
---|
14 |
|
---|
15 | SSL_handle_events() performs any internal processing which is due on a SSL object. The
|
---|
16 | exact operations performed by SSL_handle_events() vary depending on what kind of protocol
|
---|
17 | is being used with the given SSL object. For example, SSL_handle_events() may handle
|
---|
18 | timeout events which have become due, or may attempt, to the extent currently
|
---|
19 | possible, to perform network I/O operations on one of the BIOs underlying the
|
---|
20 | SSL object.
|
---|
21 |
|
---|
22 | The primary use case for SSL_handle_events() is to allow an application which uses
|
---|
23 | OpenSSL in nonblocking mode to give OpenSSL an opportunity to handle timer
|
---|
24 | events, or to respond to the availability of new data to be read from an
|
---|
25 | underlying BIO, or to respond to the opportunity to write pending data to an
|
---|
26 | underlying BIO.
|
---|
27 |
|
---|
28 | SSL_handle_events() can be used only with the following types of SSL object:
|
---|
29 |
|
---|
30 | =over 4
|
---|
31 |
|
---|
32 | =item DTLS SSL objects
|
---|
33 |
|
---|
34 | Using SSL_handle_events() on an SSL object being used with a DTLS method allows timeout
|
---|
35 | events to be handled properly. This is equivalent to a call to
|
---|
36 | L<DTLSv1_handle_timeout(3)>. Since SSL_handle_events() handles a superset of the use
|
---|
37 | cases of L<DTLSv1_handle_timeout(3)>, it should be preferred for new
|
---|
38 | applications which do not require support for OpenSSL 3.1 or older.
|
---|
39 |
|
---|
40 | When using DTLS, an application must call SSL_handle_events() as indicated by
|
---|
41 | calls to L<SSL_get_event_timeout(3)>; event handling is not performed
|
---|
42 | automatically by calls to other SSL functions such as L<SSL_read(3)> or
|
---|
43 | L<SSL_write(3)>. Note that this is different to QUIC which also performs event
|
---|
44 | handling implicitly; see below.
|
---|
45 |
|
---|
46 | =item QUIC connection SSL objects
|
---|
47 |
|
---|
48 | Using SSL_handle_events() on an SSL object which represents a QUIC connection allows
|
---|
49 | timeout events to be handled properly, as well as incoming network data to be
|
---|
50 | processed, and queued outgoing network data to be written, if the underlying BIO
|
---|
51 | has the capacity to accept it.
|
---|
52 |
|
---|
53 | Ordinarily, when an application uses an SSL object in blocking mode, it does not
|
---|
54 | need to call SSL_handle_events() because OpenSSL performs ticking internally on an
|
---|
55 | automatic basis. However, if an application uses a QUIC connection in
|
---|
56 | nonblocking mode, it must at a minimum ensure that SSL_handle_events() is called
|
---|
57 | periodically to allow timeout events to be handled. An application can find out
|
---|
58 | when it next needs to call SSL_handle_events() for this purpose (if at all) by calling
|
---|
59 | L<SSL_get_event_timeout(3)>.
|
---|
60 |
|
---|
61 | Calling SSL_handle_events() on a QUIC connection SSL object being used in blocking mode
|
---|
62 | is not necessary unless no I/O calls (such as L<SSL_read(3)> or L<SSL_write(3)>)
|
---|
63 | will be made to the object for a substantial period of time. So long as at least
|
---|
64 | one call to the SSL object is blocking, no such call is needed. However,
|
---|
65 | SSL_handle_events() may optionally be used on a QUIC connection object if desired.
|
---|
66 |
|
---|
67 | With the thread-assisted mode of operation L<OSSL_QUIC_client_thread_method(3)>
|
---|
68 | it is unnecessary to call SSL_handle_events() as the assist thread handles the QUIC
|
---|
69 | connection events.
|
---|
70 |
|
---|
71 | =back
|
---|
72 |
|
---|
73 | Calling SSL_handle_events() on any other kind of SSL object is a no-op. This is
|
---|
74 | considered a success case.
|
---|
75 |
|
---|
76 | Note that SSL_handle_events() supersedes the older L<DTLSv1_handle_timeout(3)> function
|
---|
77 | for all use cases.
|
---|
78 |
|
---|
79 | =head1 RETURN VALUES
|
---|
80 |
|
---|
81 | Returns 1 on success and 0 on failure.
|
---|
82 |
|
---|
83 | =head1 SEE ALSO
|
---|
84 |
|
---|
85 | L<SSL_get_event_timeout(3)>, L<DTLSv1_handle_timeout(3)>, L<ssl(7)>
|
---|
86 |
|
---|
87 | =head1 HISTORY
|
---|
88 |
|
---|
89 | The SSL_handle_events() function was added in OpenSSL 3.2.
|
---|
90 |
|
---|
91 | =head1 COPYRIGHT
|
---|
92 |
|
---|
93 | Copyright 2023 The OpenSSL Project Authors. All Rights Reserved.
|
---|
94 |
|
---|
95 | Licensed under the Apache License 2.0 (the "License"). You may not use
|
---|
96 | this file except in compliance with the License. You can obtain a copy
|
---|
97 | in the file LICENSE in the source distribution or at
|
---|
98 | L<https://www.openssl.org/source/license.html>.
|
---|
99 |
|
---|
100 | =cut
|
---|