174     SSL *ssl;  member
196     if (hctx->ssl) SSL_free(hctx->ssl);  in handler_ctx_free()
463 ssl_tlsext_status_cb(SSL *ssl, void *arg)  in ssl_tlsext_status_cb()  argument
466     if (TLSEXT_STATUSTYPE_ocsp != SSL_get_tlsext_status_type(ssl))  in ssl_tlsext_status_cb()
470     handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in ssl_tlsext_status_cb()
484     if (!SSL_set_tlsext_status_ocsp_resp(ssl, ocsp_resp, len)) {  in ssl_tlsext_status_cb()
940 ssl_info_callback (const SSL *ssl, int where, int ret)  in ssl_info_callback()  argument
945         handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in ssl_info_callback()
953         if (SSL_version(ssl) >= TLS1_3_VERSION) {  in ssl_info_callback()
956             handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in ssl_info_callback()
970     SSL *ssl;  in verify_callback()  local
980     ssl = X509_STORE_CTX_get_ex_data(ctx, SSL_get_ex_data_X509_STORE_CTX_idx());  in verify_callback()
981     hctx = (handler_ctx *) SSL_get_app_data(ssl);  in verify_callback()
1062 mod_openssl_cert_cb (SSL *ssl, void *arg)  in mod_openssl_cert_cb()  argument
1064     handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in mod_openssl_cert_cb()
1081     if (1 != SSL_use_certificate(ssl, pc->ssl_pemfile_x509)) {  in mod_openssl_cert_cb()
1092         SSL_set1_chain(ssl, pc->ssl_pemfile_chain);  in mod_openssl_cert_cb()
1101         SSL_set1_chain_cert_store(ssl, hctx->conf.ssl_ca_file->certs);  in mod_openssl_cert_cb()
1103         if (1 != SSL_build_cert_chain(ssl,  in mod_openssl_cert_cb()
1115             SSL_get0_chain_certs(ssl, &chain);  in mod_openssl_cert_cb()
1117             SSL_set1_chain_cert_store(ssl, NULL);  in mod_openssl_cert_cb()
1123     if (1 != SSL_use_PrivateKey(ssl, pc->ssl_pemfile_pkey)) {  in mod_openssl_cert_cb()
1135         && !SSL_set_ocsp_response(ssl, (uint8_t *)BUF_PTR_LEN(ocsp_resp))) {  in mod_openssl_cert_cb()
1153         SSL_set1_verify_cert_store(ssl, hctx->conf.ssl_ca_file->certs);  in mod_openssl_cert_cb()
1163         SSL_set_client_CA_list(ssl, SSL_dup_CA_list(cert_names));  in mod_openssl_cert_cb()
1167         SSL_set_verify(ssl, mode, verify_callback);  in mod_openssl_cert_cb()
1168         SSL_set_verify_depth(ssl, hctx->conf.ssl_verifyclient_depth + 1);  in mod_openssl_cert_cb()
1171         SSL_set_verify(ssl, SSL_VERIFY_NONE, NULL);  in mod_openssl_cert_cb()
1210     return (mod_openssl_cert_cb(hctx->ssl, NULL) == 1)  in mod_openssl_SNI()
1218 mod_openssl_client_hello_cb (SSL *ssl, int *al, void *srv)  in mod_openssl_client_hello_cb()  argument
1220     handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in mod_openssl_client_hello_cb()
1226     if (!SSL_client_hello_get0_ext(ssl, TLSEXT_TYPE_server_name, &name, &len)) {  in mod_openssl_client_hello_cb()
1238             SSL_set_read_ahead(ssl, hctx->conf.ssl_read_ahead);  in mod_openssl_client_hello_cb()
1248 network_ssl_servername_callback (SSL *ssl, int *al, void *srv)  in network_ssl_servername_callback()  argument
1250     handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in network_ssl_servername_callback()
1255     const char *servername = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name);  in network_ssl_servername_callback()
1262         SSL_set_read_ahead(ssl, hctx->conf.ssl_read_ahead);  in network_ssl_servername_callback()
1761 mod_openssl_acme_tls_1 (SSL *ssl, handler_ctx *hctx)  in mod_openssl_acme_tls_1()  argument
1821         if (1 != SSL_use_certificate(ssl, ssl_pemfile_x509)) {  in mod_openssl_acme_tls_1()
1829             SSL_set0_chain(ssl, ssl_pemfile_chain);  in mod_openssl_acme_tls_1()
1833         if (1 != SSL_use_PrivateKey(ssl, ssl_pemfile_pkey)) {  in mod_openssl_acme_tls_1()
1841         SSL_set_verify(ssl, SSL_VERIFY_NONE, NULL);  in mod_openssl_acme_tls_1()
1864     if (SSL_version(hctx->ssl) < TLS1_2_VERSION) {  in mod_openssl_alpn_h2_policy()
1875 mod_openssl_alpn_select_cb (SSL *ssl, const unsigned char **out, unsigned char *outlen, const unsig…  in mod_openssl_alpn_select_cb()  argument
1877     handler_ctx *hctx = (handler_ctx *) SSL_get_app_data(ssl);  in mod_openssl_alpn_select_cb()
1908                 int rc = mod_openssl_acme_tls_1(ssl, hctx);  in mod_openssl_alpn_select_cb()
2954 mod_openssl_write_err (SSL * const ssl, int wr, connection * const con,  in mod_openssl_write_err()  argument
2960     switch ((ssl_r = SSL_get_error(ssl, wr))) {  in mod_openssl_write_err()
3034     SSL * const ssl = hctx->ssl;  in connection_write_cq_ssl()  local
3063         wr = SSL_write(ssl, data, data_len);  in connection_write_cq_ssl()
3072             return mod_openssl_write_err(ssl, wr, con, errh);  in connection_write_cq_ssl()
3107           SSL_sendfile(hctx->ssl, c->file.fd, c->offset, (size_t)len, 0);  in connection_write_cq_ssl_ktls()
3109             return mod_openssl_write_err(hctx->ssl, (int)wr, con, hctx->errh);  in connection_write_cq_ssl_ktls()
3137         len = SSL_pending(hctx->ssl);  in connection_read_cq_ssl()
3142         len = SSL_read(hctx->ssl, mem, mem_len);  in connection_read_cq_ssl()
3156             && BIO_get_ktls_send(SSL_get_wbio(hctx->ssl)) > 0)  in connection_read_cq_ssl()
3175                 if (1 == SSL_do_handshake(hctx->ssl)) return -1;  in connection_read_cq_ssl()
3183              && (hctx->conf.ssl_read_ahead || SSL_pending(hctx->ssl) > 0));  in connection_read_cq_ssl()
3188         switch ((rc = SSL_get_error(hctx->ssl, len))) {  in connection_read_cq_ssl()
3309     hctx->ssl = SSL_new(s->ssl_ctx);  in CONNECTION_FUNC()
3310     if (NULL != hctx->ssl  in CONNECTION_FUNC()
3311         && SSL_set_app_data(hctx->ssl, hctx)  in CONNECTION_FUNC()
3312         && SSL_set_fd(hctx->ssl, con->fd)) {  in CONNECTION_FUNC()
3313         SSL_set_accept_state(hctx->ssl);  in CONNECTION_FUNC()
3348     if (SSL_is_init_finished(hctx->ssl)) {  in CONNECTION_FUNC()
3369         switch ((ret = SSL_shutdown(hctx->ssl))) {  in mod_openssl_close_notify()
3395             ssl_r = SSL_pending(hctx->ssl);  in mod_openssl_close_notify()
3399                     ret = SSL_read(hctx->ssl, buf, (int)sizeof(buf));  in mod_openssl_close_notify()
3404             switch ((ret = SSL_shutdown(hctx->ssl))) {  in mod_openssl_close_notify()
3418             if (!SSL_is_init_finished(hctx->ssl)) {  in mod_openssl_close_notify()
3423             switch ((ssl_r = SSL_get_error(hctx->ssl, ret))) {  in mod_openssl_close_notify()
3519     long vr = SSL_get_verify_result(hctx->ssl);  in https_add_ssl_client_entries()
3524     } else if (!(xs = SSL_get_peer_certificate(hctx->ssl))) {  in https_add_ssl_client_entries()
3596     s = SSL_get_version(hctx->ssl);  in http_cgi_ssl_env()
3599     if ((cipher = SSL_get_current_cipher(hctx->ssl))) {  in http_cgi_ssl_env()