[ViewVC] Diff of: cvs/AnyEvent/lib/AnyEvent/Handle.pm

Comparing AnyEvent/lib/AnyEvent/Handle.pm (file contents):
Revision 1.112 by root, Wed Jan 21 06:01:35 2009 UTC vs.
Revision 1.158 by root, Fri Jul 24 08:40:35 2009 UTC

…		…
1	package AnyEvent::Handle;	1	package AnyEvent::Handle;
2		2
3	no warnings;
4	use strict qw(subs vars);
5
6	use AnyEvent ();
7	use AnyEvent::Util qw(WSAEWOULDBLOCK);
8	use Scalar::Util ();	3	use Scalar::Util ();
9	use Carp ();	4	use Carp ();
10	use Fcntl ();
11	use Errno qw(EAGAIN EINTR);	5	use Errno qw(EAGAIN EINTR);
12		6
		7	use AnyEvent (); BEGIN { AnyEvent::common_sense }
		8	use AnyEvent::Util qw(WSAEWOULDBLOCK);
		9
13	=head1 NAME	10	=head1 NAME
14		11
15	AnyEvent::Handle - non-blocking I/O on file handles via AnyEvent	12	AnyEvent::Handle - non-blocking I/O on file handles via AnyEvent
16		13
17	=cut	14	=cut
18		15
19	our $VERSION = 4.331;	16	our $VERSION = 4.86;
20		17
21	=head1 SYNOPSIS	18	=head1 SYNOPSIS
22		19
23	use AnyEvent;	20	use AnyEvent;
24	use AnyEvent::Handle;	21	use AnyEvent::Handle;
25		22
26	my $cv = AnyEvent->condvar;	23	my $cv = AnyEvent->condvar;
27		24
28	my $handle =	25	my $hdl; $hdl = new AnyEvent::Handle
29	AnyEvent::Handle->new (
30	fh => \*STDIN,	26	fh => \*STDIN,
31	on_eof => sub {	27	on_error => sub {
		28	my ($hdl, $fatal, $msg) = @_;
		29	warn "got error $msg\n";
		30	$hdl->destroy;
32	$cv->send;	31	$cv->send;
33	},
34	);	32	);
35		33
36	# send some request line	34	# send some request line
37	$handle->push_write ("getinfo\015\012");	35	$hdl->push_write ("getinfo\015\012");
38		36
39	# read the response line	37	# read the response line
40	$handle->push_read (line => sub {	38	$hdl->push_read (line => sub {
41	my ($handle, $line) = @_;	39	my ($hdl, $line) = @_;
42	warn "read line <$line>\n";	40	warn "got line <$line>\n";
43	$cv->send;	41	$cv->send;
44	});	42	});
45		43
46	$cv->recv;	44	$cv->recv;
47		45
63		61
64	=head1 METHODS	62	=head1 METHODS
65		63
66	=over 4	64	=over 4
67		65
68	=item B<new (%args)>	66	=item $handle = B<new> AnyEvent::TLS fh => $filehandle, key => value...
69		67
70	The constructor supports these arguments (all as key => value pairs).	68	The constructor supports these arguments (all as C<< key => value >> pairs).
71		69
72	=over 4	70	=over 4
73		71
74	=item fh => $filehandle [MANDATORY]	72	=item fh => $filehandle [MANDATORY]
75		73
		74	#=item fh => $filehandle [C<fh> or C<connect> MANDATORY]
		75
76	The filehandle this L<AnyEvent::Handle> object will operate on.	76	The filehandle this L<AnyEvent::Handle> object will operate on.
77
78	NOTE: The filehandle will be set to non-blocking mode (using	77	NOTE: The filehandle will be set to non-blocking mode (using
79	C<AnyEvent::Util::fh_nonblocking>) by the constructor and needs to stay in	78	C<AnyEvent::Util::fh_nonblocking>) by the constructor and needs to stay in
80	that mode.	79	that mode.
81		80
		81	#=item connect => [$host, $service]
		82	#
		83	# You have to specify either this parameter, or C<connect>, below.
		84	#Try to connect to the specified host and service (port), using
		85	#C<AnyEvent::Socket::tcp_connect>.
		86	#
		87	#When this
		88
82	=item on_eof => $cb->($handle)	89	=item on_eof => $cb->($handle)
83		90
84	Set the callback to be called when an end-of-file condition is detected,	91	Set the callback to be called when an end-of-file condition is detected,
85	i.e. in the case of a socket, when the other side has closed the	92	i.e. in the case of a socket, when the other side has closed the
86	connection cleanly.	93	connection cleanly, and there are no outstanding read requests in the
		94	queue (if there are read requests, then an EOF counts as an unexpected
		95	connection close and will be flagged as an error).
87		96
88	For sockets, this just means that the other side has stopped sending data,	97	For sockets, this just means that the other side has stopped sending data,
89	you can still try to write data, and, in fact, one can return from the EOF	98	you can still try to write data, and, in fact, one can return from the EOF
90	callback and continue writing data, as only the read part has been shut	99	callback and continue writing data, as only the read part has been shut
91	down.	100	down.
92		101
93	While not mandatory, it is I<highly> recommended to set an EOF callback,
94	otherwise you might end up with a closed socket while you are still
95	waiting for data.
96
97	If an EOF condition has been detected but no C<on_eof> callback has been	102	If an EOF condition has been detected but no C<on_eof> callback has been
98	set, then a fatal error will be raised with C<$!> set to <0>.	103	set, then a fatal error will be raised with C<$!> set to <0>.
99		104
100	=item on_error => $cb->($handle, $fatal)	105	=item on_error => $cb->($handle, $fatal, $message)
101		106
102	This is the error callback, which is called when, well, some error	107	This is the error callback, which is called when, well, some error
103	occured, such as not being able to resolve the hostname, failure to	108	occured, such as not being able to resolve the hostname, failure to
104	connect or a read error.	109	connect or a read error.
105		110
106	Some errors are fatal (which is indicated by C<$fatal> being true). On	111	Some errors are fatal (which is indicated by C<$fatal> being true). On
107	fatal errors the handle object will be shut down and will not be usable	112	fatal errors the handle object will be destroyed (by a call to C<< ->
108	(but you are free to look at the current C<< ->rbuf >>). Examples of fatal	113	destroy >>) after invoking the error callback (which means you are free to
109	errors are an EOF condition with active (but unsatisifable) read watchers	114	examine the handle object). Examples of fatal errors are an EOF condition
110	(C<EPIPE>) or I/O errors.	115	with active (but unsatisifable) read watchers (C<EPIPE>) or I/O errors.
		116
		117	AnyEvent::Handle tries to find an appropriate error code for you to check
		118	against, but in some cases (TLS errors), this does not work well. It is
		119	recommended to always output the C<$message> argument in human-readable
		120	error messages (it's usually the same as C<"$!">).
111		121
112	Non-fatal errors can be retried by simply returning, but it is recommended	122	Non-fatal errors can be retried by simply returning, but it is recommended
113	to simply ignore this parameter and instead abondon the handle object	123	to simply ignore this parameter and instead abondon the handle object
114	when this callback is invoked. Examples of non-fatal errors are timeouts	124	when this callback is invoked. Examples of non-fatal errors are timeouts
115	C<ETIMEDOUT>) or badly-formatted data (C<EBADMSG>).	125	C<ETIMEDOUT>) or badly-formatted data (C<EBADMSG>).
116		126
117	On callback entrance, the value of C<$!> contains the operating system	127	On callback entrance, the value of C<$!> contains the operating system
118	error (or C<ENOSPC>, C<EPIPE>, C<ETIMEDOUT> or C<EBADMSG>).	128	error code (or C<ENOSPC>, C<EPIPE>, C<ETIMEDOUT>, C<EBADMSG> or
		129	C<EPROTO>).
119		130
120	While not mandatory, it is I<highly> recommended to set this callback, as	131	While not mandatory, it is I<highly> recommended to set this callback, as
121	you will not be notified of errors otherwise. The default simply calls	132	you will not be notified of errors otherwise. The default simply calls
122	C<croak>.	133	C<croak>.
123		134
…		…
127	and no read request is in the queue (unlike read queue callbacks, this	138	and no read request is in the queue (unlike read queue callbacks, this
128	callback will only be called when at least one octet of data is in the	139	callback will only be called when at least one octet of data is in the
129	read buffer).	140	read buffer).
130		141
131	To access (and remove data from) the read buffer, use the C<< ->rbuf >>	142	To access (and remove data from) the read buffer, use the C<< ->rbuf >>
132	method or access the C<$handle->{rbuf}> member directly.	143	method or access the C<< $handle->{rbuf} >> member directly. Note that you
		144	must not enlarge or modify the read buffer, you can only remove data at
		145	the beginning from it.
133		146
134	When an EOF condition is detected then AnyEvent::Handle will first try to	147	When an EOF condition is detected then AnyEvent::Handle will first try to
135	feed all the remaining data to the queued callbacks and C<on_read> before	148	feed all the remaining data to the queued callbacks and C<on_read> before
136	calling the C<on_eof> callback. If no progress can be made, then a fatal	149	calling the C<on_eof> callback. If no progress can be made, then a fatal
137	error will be raised (with C<$!> set to C<EPIPE>).	150	error will be raised (with C<$!> set to C<EPIPE>).
		151
		152	Note that, unlike requests in the read queue, an C<on_read> callback
		153	doesn't mean you I<require> some data: if there is an EOF and there
		154	are outstanding read requests then an error will be flagged. With an
		155	C<on_read> callback, the C<on_eof> callback will be invoked.
138		156
139	=item on_drain => $cb->($handle)	157	=item on_drain => $cb->($handle)
140		158
141	This sets the callback that is called when the write buffer becomes empty	159	This sets the callback that is called when the write buffer becomes empty
142	(or when the callback is set and the buffer is empty already).	160	(or when the callback is set and the buffer is empty already).
…		…
235		253
236	This will not work for partial TLS data that could not be encoded	254	This will not work for partial TLS data that could not be encoded
237	yet. This data will be lost. Calling the C<stoptls> method in time might	255	yet. This data will be lost. Calling the C<stoptls> method in time might
238	help.	256	help.
239		257
		258	=item peername => $string
		259
		260	A string used to identify the remote site - usually the DNS hostname
		261	(I<not> IDN!) used to create the connection, rarely the IP address.
		262
		263	Apart from being useful in error messages, this string is also used in TLS
		264	peername verification (see C<verify_peername> in L<AnyEvent::TLS>). This
		265	verification will be skipped when C<peername> is not specified or
		266	C<undef>.
		267
240	=item tls => "accept" \| "connect" \| Net::SSLeay::SSL object	268	=item tls => "accept" \| "connect" \| Net::SSLeay::SSL object
241		269
242	When this parameter is given, it enables TLS (SSL) mode, that means	270	When this parameter is given, it enables TLS (SSL) mode, that means
243	AnyEvent will start a TLS handshake as soon as the conenction has been	271	AnyEvent will start a TLS handshake as soon as the conenction has been
244	established and will transparently encrypt/decrypt data afterwards.	272	established and will transparently encrypt/decrypt data afterwards.
		273
		274	All TLS protocol errors will be signalled as C<EPROTO>, with an
		275	appropriate error message.
245		276
246	TLS mode requires Net::SSLeay to be installed (it will be loaded	277	TLS mode requires Net::SSLeay to be installed (it will be loaded
247	automatically when you try to create a TLS handle): this module doesn't	278	automatically when you try to create a TLS handle): this module doesn't
248	have a dependency on that module, so if your module requires it, you have	279	have a dependency on that module, so if your module requires it, you have
249	to add the dependency yourself.	280	to add the dependency yourself.
…		…
253	mode.	284	mode.
254		285
255	You can also provide your own TLS connection object, but you have	286	You can also provide your own TLS connection object, but you have
256	to make sure that you call either C<Net::SSLeay::set_connect_state>	287	to make sure that you call either C<Net::SSLeay::set_connect_state>
257	or C<Net::SSLeay::set_accept_state> on it before you pass it to	288	or C<Net::SSLeay::set_accept_state> on it before you pass it to
258	AnyEvent::Handle.	289	AnyEvent::Handle. Also, this module will take ownership of this connection
		290	object.
		291
		292	At some future point, AnyEvent::Handle might switch to another TLS
		293	implementation, then the option to use your own session object will go
		294	away.
259		295
260	B<IMPORTANT:> since Net::SSLeay "objects" are really only integers,	296	B<IMPORTANT:> since Net::SSLeay "objects" are really only integers,
261	passing in the wrong integer will lead to certain crash. This most often	297	passing in the wrong integer will lead to certain crash. This most often
262	happens when one uses a stylish C<< tls => 1 >> and is surprised about the	298	happens when one uses a stylish C<< tls => 1 >> and is surprised about the
263	segmentation fault.	299	segmentation fault.
264		300
265	See the C<< ->starttls >> method for when need to start TLS negotiation later.	301	See the C<< ->starttls >> method for when need to start TLS negotiation later.
266		302
267	=item tls_ctx => $ssl_ctx	303	=item tls_ctx => $anyevent_tls
268		304
269	Use the given C<Net::SSLeay::CTX> object to create the new TLS connection	305	Use the given C<AnyEvent::TLS> object to create the new TLS connection
270	(unless a connection object was specified directly). If this parameter is	306	(unless a connection object was specified directly). If this parameter is
271	missing, then AnyEvent::Handle will use C<AnyEvent::Handle::TLS_CTX>.	307	missing, then AnyEvent::Handle will use C<AnyEvent::Handle::TLS_CTX>.
		308
		309	Instead of an object, you can also specify a hash reference with C<< key
		310	=> value >> pairs. Those will be passed to L<AnyEvent::TLS> to create a
		311	new TLS context object.
		312
		313	=item on_starttls => $cb->($handle, $success[, $error_message])
		314
		315	This callback will be invoked when the TLS/SSL handshake has finished. If
		316	C<$success> is true, then the TLS handshake succeeded, otherwise it failed
		317	(C<on_stoptls> will not be called in this case).
		318
		319	The session in C<< $handle->{tls} >> can still be examined in this
		320	callback, even when the handshake was not successful.
		321
		322	TLS handshake failures will not cause C<on_error> to be invoked when this
		323	callback is in effect, instead, the error message will be passed to C<on_starttls>.
		324
		325	Without this callback, handshake failures lead to C<on_error> being
		326	called, as normal.
		327
		328	Note that you cannot call C<starttls> right again in this callback. If you
		329	need to do that, start an zero-second timer instead whose callback can
		330	then call C<< ->starttls >> again.
		331
		332	=item on_stoptls => $cb->($handle)
		333
		334	When a SSLv3/TLS shutdown/close notify/EOF is detected and this callback is
		335	set, then it will be invoked after freeing the TLS session. If it is not,
		336	then a TLS shutdown condition will be treated like a normal EOF condition
		337	on the handle.
		338
		339	The session in C<< $handle->{tls} >> can still be examined in this
		340	callback.
		341
		342	This callback will only be called on TLS shutdowns, not when the
		343	underlying handle signals EOF.
272		344
273	=item json => JSON or JSON::XS object	345	=item json => JSON or JSON::XS object
274		346
275	This is the json coder object used by the C<json> read and write types.	347	This is the json coder object used by the C<json> read and write types.
276		348
…		…
285		357
286	=cut	358	=cut
287		359
288	sub new {	360	sub new {
289	my $class = shift;	361	my $class = shift;
290
291	my $self = bless { @_ }, $class;	362	my $self = bless { @_ }, $class;
292		363
293	$self->{fh} or Carp::croak "mandatory argument fh is missing";	364	$self->{fh} or Carp::croak "mandatory argument fh is missing";
294		365
295	AnyEvent::Util::fh_nonblocking $self->{fh}, 1;	366	AnyEvent::Util::fh_nonblocking $self->{fh}, 1;
		367
		368	$self->{_activity} = AnyEvent->now;
		369	$self->_timeout;
		370
		371	$self->no_delay (delete $self->{no_delay}) if exists $self->{no_delay};
296		372
297	$self->starttls (delete $self->{tls}, delete $self->{tls_ctx})	373	$self->starttls (delete $self->{tls}, delete $self->{tls_ctx})
298	if $self->{tls};	374	if $self->{tls};
299		375
300	$self->{_activity} = AnyEvent->now;
301	$self->_timeout;
302
303	$self->on_drain (delete $self->{on_drain}) if exists $self->{on_drain};	376	$self->on_drain (delete $self->{on_drain}) if $self->{on_drain};
304	$self->no_delay (delete $self->{no_delay}) if exists $self->{no_delay};
305		377
306	$self->start_read	378	$self->start_read
307	if $self->{on_read};	379	if $self->{on_read};
308		380
309	$self	381	$self->{fh} && $self
310	}	382	}
311		383
312	sub _shutdown {	384	#sub _shutdown {
313	my ($self) = @_;	385	# my ($self) = @_;
314		386	#
315	delete $self->{_tw};	387	# delete @$self{qw(_tw _rw _ww fh wbuf on_read _queue)};
316	delete $self->{_rw};	388	# $self->{_eof} = 1; # tell starttls et. al to stop trying
317	delete $self->{_ww};	389	#
318	delete $self->{fh};
319
320	&_freetls;	390	# &_freetls;
321		391	#}
322	delete $self->{on_read};
323	delete $self->{_queue};
324	}
325		392
326	sub _error {	393	sub _error {
327	my ($self, $errno, $fatal) = @_;	394	my ($self, $errno, $fatal, $message) = @_;
328
329	$self->_shutdown
330	if $fatal;
331		395
332	$! = $errno;	396	$! = $errno;
		397	$message \|\|= "$!";
333		398
334	if ($self->{on_error}) {	399	if ($self->{on_error}) {
335	$self->{on_error}($self, $fatal);	400	$self->{on_error}($self, $fatal, $message);
		401	$self->destroy if $fatal;
336	} elsif ($self->{fh}) {	402	} elsif ($self->{fh}) {
		403	$self->destroy;
337	Carp::croak "AnyEvent::Handle uncaught error: $!";	404	Carp::croak "AnyEvent::Handle uncaught error: $message";
338	}	405	}
339	}	406	}
340		407
341	=item $fh = $handle->fh	408	=item $fh = $handle->fh
342		409
…		…
403	local $SIG{__DIE__};	470	local $SIG{__DIE__};
404	setsockopt $_[0]{fh}, &Socket::IPPROTO_TCP, &Socket::TCP_NODELAY, int $_[1];	471	setsockopt $_[0]{fh}, &Socket::IPPROTO_TCP, &Socket::TCP_NODELAY, int $_[1];
405	};	472	};
406	}	473	}
407		474
		475	=item $handle->on_starttls ($cb)
		476
		477	Replace the current C<on_starttls> callback (see the C<on_starttls> constructor argument).
		478
		479	=cut
		480
		481	sub on_starttls {
		482	$_[0]{on_starttls} = $_[1];
		483	}
		484
		485	=item $handle->on_stoptls ($cb)
		486
		487	Replace the current C<on_stoptls> callback (see the C<on_stoptls> constructor argument).
		488
		489	=cut
		490
		491	sub on_starttls {
		492	$_[0]{on_stoptls} = $_[1];
		493	}
		494
408	#############################################################################	495	#############################################################################
409		496
410	=item $handle->timeout ($seconds)	497	=item $handle->timeout ($seconds)
411		498
412	Configures (or disables) the inactivity timeout.	499	Configures (or disables) the inactivity timeout.
…		…
436	$self->{_activity} = $NOW;	523	$self->{_activity} = $NOW;
437		524
438	if ($self->{on_timeout}) {	525	if ($self->{on_timeout}) {
439	$self->{on_timeout}($self);	526	$self->{on_timeout}($self);
440	} else {	527	} else {
441	$self->_error (&Errno::ETIMEDOUT);	528	$self->_error (Errno::ETIMEDOUT);
442	}	529	}
443		530
444	# callback could have changed timeout value, optimise	531	# callback could have changed timeout value, optimise
445	return unless $self->{timeout};	532	return unless $self->{timeout};
446		533
…		…
509	Scalar::Util::weaken $self;	596	Scalar::Util::weaken $self;
510		597
511	my $cb = sub {	598	my $cb = sub {
512	my $len = syswrite $self->{fh}, $self->{wbuf};	599	my $len = syswrite $self->{fh}, $self->{wbuf};
513		600
514	if ($len >= 0) {	601	if (defined $len) {
515	substr $self->{wbuf}, 0, $len, "";	602	substr $self->{wbuf}, 0, $len, "";
516		603
517	$self->{_activity} = AnyEvent->now;	604	$self->{_activity} = AnyEvent->now;
518		605
519	$self->{on_drain}($self)	606	$self->{on_drain}($self)
…		…
654		741
655	pack "w/a*", Storable::nfreeze ($ref)	742	pack "w/a*", Storable::nfreeze ($ref)
656	};	743	};
657		744
658	=back	745	=back
		746
		747	=item $handle->push_shutdown
		748
		749	Sometimes you know you want to close the socket after writing your data
		750	before it was actually written. One way to do that is to replace your
		751	C<on_drain> handler by a callback that shuts down the socket (and set
		752	C<low_water_mark> to C<0>). This method is a shorthand for just that, and
		753	replaces the C<on_drain> callback with:
		754
		755	sub { shutdown $_[0]{fh}, 1 } # for push_shutdown
		756
		757	This simply shuts down the write side and signals an EOF condition to the
		758	the peer.
		759
		760	You can rely on the normal read queue and C<on_eof> handling
		761	afterwards. This is the cleanest way to close a connection.
		762
		763	=cut
		764
		765	sub push_shutdown {
		766	my ($self) = @_;
		767
		768	delete $self->{low_water_mark};
		769	$self->on_drain (sub { shutdown $_[0]{fh}, 1 });
		770	}
659		771
660	=item AnyEvent::Handle::register_write_type type => $coderef->($handle, @args)	772	=item AnyEvent::Handle::register_write_type type => $coderef->($handle, @args)
661		773
662	This function (not method) lets you add your own types to C<push_write>.	774	This function (not method) lets you add your own types to C<push_write>.
663	Whenever the given C<type> is used, C<push_write> will invoke the code	775	Whenever the given C<type> is used, C<push_write> will invoke the code
…		…
763		875
764	if (	876	if (
765	defined $self->{rbuf_max}	877	defined $self->{rbuf_max}
766	&& $self->{rbuf_max} < length $self->{rbuf}	878	&& $self->{rbuf_max} < length $self->{rbuf}
767	) {	879	) {
768	$self->_error (&Errno::ENOSPC, 1), return;	880	$self->_error (Errno::ENOSPC, 1), return;
769	}	881	}
770		882
771	while () {	883	while () {
		884	# we need to use a separate tls read buffer, as we must not receive data while
		885	# we are draining the buffer, and this can only happen with TLS.
		886	$self->{rbuf} .= delete $self->{_tls_rbuf} if exists $self->{_tls_rbuf};
		887
772	my $len = length $self->{rbuf};	888	my $len = length $self->{rbuf};
773		889
774	if (my $cb = shift @{ $self->{_queue} }) {	890	if (my $cb = shift @{ $self->{_queue} }) {
775	unless ($cb->($self)) {	891	unless ($cb->($self)) {
776	if ($self->{_eof}) {	892	if ($self->{_eof}) {
777	# no progress can be made (not enough data and no data forthcoming)	893	# no progress can be made (not enough data and no data forthcoming)
778	$self->_error (&Errno::EPIPE, 1), return;	894	$self->_error (Errno::EPIPE, 1), return;
779	}	895	}
780		896
781	unshift @{ $self->{_queue} }, $cb;	897	unshift @{ $self->{_queue} }, $cb;
782	last;	898	last;
783	}	899	}
…		…
791	&& !@{ $self->{_queue} } # and the queue is still empty	907	&& !@{ $self->{_queue} } # and the queue is still empty
792	&& $self->{on_read} # but we still have on_read	908	&& $self->{on_read} # but we still have on_read
793	) {	909	) {
794	# no further data will arrive	910	# no further data will arrive
795	# so no progress can be made	911	# so no progress can be made
796	$self->_error (&Errno::EPIPE, 1), return	912	$self->_error (Errno::EPIPE, 1), return
797	if $self->{_eof};	913	if $self->{_eof};
798		914
799	last; # more data might arrive	915	last; # more data might arrive
800	}	916	}
801	} else {	917	} else {
…		…
807		923
808	if ($self->{_eof}) {	924	if ($self->{_eof}) {
809	if ($self->{on_eof}) {	925	if ($self->{on_eof}) {
810	$self->{on_eof}($self)	926	$self->{on_eof}($self)
811	} else {	927	} else {
812	$self->_error (0, 1);	928	$self->_error (0, 1, "Unexpected end-of-file");
813	}	929	}
814	}	930	}
815		931
816	# may need to restart read watcher	932	# may need to restart read watcher
817	unless ($self->{_rw}) {	933	unless ($self->{_rw}) {
…		…
837		953
838	=item $handle->rbuf	954	=item $handle->rbuf
839		955
840	Returns the read buffer (as a modifiable lvalue).	956	Returns the read buffer (as a modifiable lvalue).
841		957
842	You can access the read buffer directly as the C<< ->{rbuf} >> member, if	958	You can access the read buffer directly as the C<< ->{rbuf} >>
843	you want.	959	member, if you want. However, the only operation allowed on the
		960	read buffer (apart from looking at it) is removing data from its
		961	beginning. Otherwise modifying or appending to it is not allowed and will
		962	lead to hard-to-track-down bugs.
844		963
845	NOTE: The read buffer should only be used or modified if the C<on_read>,	964	NOTE: The read buffer should only be used or modified if the C<on_read>,
846	C<push_read> or C<unshift_read> methods are used. The other read methods	965	C<push_read> or C<unshift_read> methods are used. The other read methods
847	automatically manage the read buffer.	966	automatically manage the read buffer.
848		967
…		…
1048	return 1;	1167	return 1;
1049	}	1168	}
1050		1169
1051	# reject	1170	# reject
1052	if ($reject && $$rbuf =~ $reject) {	1171	if ($reject && $$rbuf =~ $reject) {
1053	$self->_error (&Errno::EBADMSG);	1172	$self->_error (Errno::EBADMSG);
1054	}	1173	}
1055		1174
1056	# skip	1175	# skip
1057	if ($skip && $$rbuf =~ $skip) {	1176	if ($skip && $$rbuf =~ $skip) {
1058	$data .= substr $$rbuf, 0, $+[0], "";	1177	$data .= substr $$rbuf, 0, $+[0], "";
…		…
1074	my ($self, $cb) = @_;	1193	my ($self, $cb) = @_;
1075		1194
1076	sub {	1195	sub {
1077	unless ($_[0]{rbuf} =~ s/^(0\|[1-9][0-9]*)://) {	1196	unless ($_[0]{rbuf} =~ s/^(0\|[1-9][0-9]*)://) {
1078	if ($_[0]{rbuf} =~ /[^0-9]/) {	1197	if ($_[0]{rbuf} =~ /[^0-9]/) {
1079	$self->_error (&Errno::EBADMSG);	1198	$self->_error (Errno::EBADMSG);
1080	}	1199	}
1081	return;	1200	return;
1082	}	1201	}
1083		1202
1084	my $len = $1;	1203	my $len = $1;
…		…
1087	my $string = $_[1];	1206	my $string = $_[1];
1088	$_[0]->unshift_read (chunk => 1, sub {	1207	$_[0]->unshift_read (chunk => 1, sub {
1089	if ($_[1] eq ",") {	1208	if ($_[1] eq ",") {
1090	$cb->($_[0], $string);	1209	$cb->($_[0], $string);
1091	} else {	1210	} else {
1092	$self->_error (&Errno::EBADMSG);	1211	$self->_error (Errno::EBADMSG);
1093	}	1212	}
1094	});	1213	});
1095	});	1214	});
1096		1215
1097	1	1216	1
…		…
1164	=cut	1283	=cut
1165		1284
1166	register_read_type json => sub {	1285	register_read_type json => sub {
1167	my ($self, $cb) = @_;	1286	my ($self, $cb) = @_;
1168		1287
1169	require JSON;	1288	my $json = $self->{json} \|\|=
		1289	eval { require JSON::XS; JSON::XS->new->utf8 }
		1290	\|\| do { require JSON; JSON->new->utf8 };
1170		1291
1171	my $data;	1292	my $data;
1172	my $rbuf = \$self->{rbuf};	1293	my $rbuf = \$self->{rbuf};
1173		1294
1174	my $json = $self->{json} \|\|= JSON->new->utf8;
1175
1176	sub {	1295	sub {
1177	eval {
1178	my $ref = $json->incr_parse ($self->{rbuf});	1296	my $ref = eval { $json->incr_parse ($self->{rbuf}) };
1179		1297
1180	if ($ref) {	1298	if ($ref) {
1181	$self->{rbuf} = $json->incr_text;	1299	$self->{rbuf} = $json->incr_text;
1182	$json->incr_text = "";	1300	$json->incr_text = "";
1183	$cb->($self, $ref);	1301	$cb->($self, $ref);
1184
1185	1
1186	} else {
1187	$self->{rbuf} = "";
1188	()
1189	}
1190		1302
1191	1	1303	1
1192	} or do {	1304	} elsif ($@) {
1193	# error case	1305	# error case
1194	$json->incr_skip;	1306	$json->incr_skip;
1195		1307
1196	$self->{rbuf} = $json->incr_text;	1308	$self->{rbuf} = $json->incr_text;
1197	$json->incr_text = "";	1309	$json->incr_text = "";
1198		1310
1199	$self->_error (&Errno::EBADMSG);	1311	$self->_error (Errno::EBADMSG);
		1312
		1313	()
		1314	} else {
		1315	$self->{rbuf} = "";
		1316
		1317	()
1200	};	1318	}
1201	}	1319	}
1202	};	1320	};
1203		1321
1204	=item storable => $cb->($handle, $ref)	1322	=item storable => $cb->($handle, $ref)
1205		1323
…		…
1235	# read remaining chunk	1353	# read remaining chunk
1236	$_[0]->unshift_read (chunk => $len, sub {	1354	$_[0]->unshift_read (chunk => $len, sub {
1237	if (my $ref = eval { Storable::thaw ($_[1]) }) {	1355	if (my $ref = eval { Storable::thaw ($_[1]) }) {
1238	$cb->($_[0], $ref);	1356	$cb->($_[0], $ref);
1239	} else {	1357	} else {
1240	$self->_error (&Errno::EBADMSG);	1358	$self->_error (Errno::EBADMSG);
1241	}	1359	}
1242	});	1360	});
1243	}	1361	}
1244		1362
1245	1	1363	1
…		…
1324	}	1442	}
1325	});	1443	});
1326	}	1444	}
1327	}	1445	}
1328		1446
		1447	our $ERROR_SYSCALL;
		1448	our $ERROR_WANT_READ;
		1449
		1450	sub _tls_error {
		1451	my ($self, $err) = @_;
		1452
		1453	return $self->_error ($!, 1)
		1454	if $err == Net::SSLeay::ERROR_SYSCALL ();
		1455
		1456	my $err =Net::SSLeay::ERR_error_string (Net::SSLeay::ERR_get_error ());
		1457
		1458	# reduce error string to look less scary
		1459	$err =~ s/^error:[0-9a-fA-F]{8}:[^:]+:([^:]+):/\L$1: /;
		1460
		1461	if ($self->{_on_starttls}) {
		1462	(delete $self->{_on_starttls})->($self, undef, $err);
		1463	&_freetls;
		1464	} else {
		1465	&_freetls;
		1466	$self->_error (Errno::EPROTO, 1, $err);
		1467	}
		1468	}
		1469
1329	# poll the write BIO and send the data if applicable	1470	# poll the write BIO and send the data if applicable
		1471	# also decode read data if possible
		1472	# this is basiclaly our TLS state machine
		1473	# more efficient implementations are possible with openssl,
		1474	# but not with the buggy and incomplete Net::SSLeay.
1330	sub _dotls {	1475	sub _dotls {
1331	my ($self) = @_;	1476	my ($self) = @_;
1332		1477
1333	my $tmp;	1478	my $tmp;
1334		1479
1335	if (length $self->{_tls_wbuf}) {	1480	if (length $self->{_tls_wbuf}) {
1336	while (($tmp = Net::SSLeay::write ($self->{tls}, $self->{_tls_wbuf})) > 0) {	1481	while (($tmp = Net::SSLeay::write ($self->{tls}, $self->{_tls_wbuf})) > 0) {
1337	substr $self->{_tls_wbuf}, 0, $tmp, "";	1482	substr $self->{_tls_wbuf}, 0, $tmp, "";
1338	}	1483	}
		1484
		1485	$tmp = Net::SSLeay::get_error ($self->{tls}, $tmp);
		1486	return $self->_tls_error ($tmp)
		1487	if $tmp != $ERROR_WANT_READ
		1488	&& ($tmp != $ERROR_SYSCALL \|\| $!);
1339	}	1489	}
1340		1490
1341	while (defined ($tmp = Net::SSLeay::read ($self->{tls}))) {	1491	while (defined ($tmp = Net::SSLeay::read ($self->{tls}))) {
1342	unless (length $tmp) {	1492	unless (length $tmp) {
1343	# let's treat SSL-eof as we treat normal EOF	1493	$self->{_on_starttls}
1344	delete $self->{_rw};	1494	and (delete $self->{_on_starttls})->($self, undef, "EOF during handshake"); # ???
1345	$self->{_eof} = 1;
1346	&_freetls;	1495	&_freetls;
		1496
		1497	if ($self->{on_stoptls}) {
		1498	$self->{on_stoptls}($self);
		1499	return;
		1500	} else {
		1501	# let's treat SSL-eof as we treat normal EOF
		1502	delete $self->{_rw};
		1503	$self->{_eof} = 1;
		1504	}
1347	}	1505	}
1348		1506
1349	$self->{rbuf} .= $tmp;	1507	$self->{_tls_rbuf} .= $tmp;
1350	$self->_drain_rbuf unless $self->{_in_drain};	1508	$self->_drain_rbuf unless $self->{_in_drain};
1351	$self->{tls} or return; # tls session might have gone away in callback	1509	$self->{tls} or return; # tls session might have gone away in callback
1352	}	1510	}
1353		1511
1354	$tmp = Net::SSLeay::get_error ($self->{tls}, -1);	1512	$tmp = Net::SSLeay::get_error ($self->{tls}, -1);
1355
1356	if ($tmp != Net::SSLeay::ERROR_WANT_READ ()) {
1357	if ($tmp == Net::SSLeay::ERROR_SYSCALL ()) {
1358	return $self->_error ($!, 1);	1513	return $self->_tls_error ($tmp)
1359	} elsif ($tmp == Net::SSLeay::ERROR_SSL ()) {	1514	if $tmp != $ERROR_WANT_READ
1360	return $self->_error (&Errno::EIO, 1);	1515	&& ($tmp != $ERROR_SYSCALL \|\| $!);
1361	}
1362
1363	# all other errors are fine for our purposes
1364	}
1365		1516
1366	while (length ($tmp = Net::SSLeay::BIO_read ($self->{_wbio}))) {	1517	while (length ($tmp = Net::SSLeay::BIO_read ($self->{_wbio}))) {
1367	$self->{wbuf} .= $tmp;	1518	$self->{wbuf} .= $tmp;
1368	$self->_drain_wbuf;	1519	$self->_drain_wbuf;
1369	}	1520	}
		1521
		1522	$self->{_on_starttls}
		1523	and Net::SSLeay::state ($self->{tls}) == Net::SSLeay::ST_OK ()
		1524	and (delete $self->{_on_starttls})->($self, 1, "TLS/SSL connection established");
1370	}	1525	}
1371		1526
1372	=item $handle->starttls ($tls[, $tls_ctx])	1527	=item $handle->starttls ($tls[, $tls_ctx])
1373		1528
1374	Instead of starting TLS negotiation immediately when the AnyEvent::Handle	1529	Instead of starting TLS negotiation immediately when the AnyEvent::Handle
1375	object is created, you can also do that at a later time by calling	1530	object is created, you can also do that at a later time by calling
1376	C<starttls>.	1531	C<starttls>.
1377		1532
		1533	Starting TLS is currently an asynchronous operation - when you push some
		1534	write data and then call C<< ->starttls >> then TLS negotiation will start
		1535	immediately, after which the queued write data is then sent.
		1536
1378	The first argument is the same as the C<tls> constructor argument (either	1537	The first argument is the same as the C<tls> constructor argument (either
1379	C<"connect">, C<"accept"> or an existing Net::SSLeay object).	1538	C<"connect">, C<"accept"> or an existing Net::SSLeay object).
1380		1539
1381	The second argument is the optional C<Net::SSLeay::CTX> object that is	1540	The second argument is the optional C<AnyEvent::TLS> object that is used
1382	used when AnyEvent::Handle has to create its own TLS connection object.	1541	when AnyEvent::Handle has to create its own TLS connection object, or
		1542	a hash reference with C<< key => value >> pairs that will be used to
		1543	construct a new context.
1383		1544
1384	The TLS connection object will end up in C<< $handle->{tls} >> after this	1545	The TLS connection object will end up in C<< $handle->{tls} >>, the TLS
1385	call and can be used or changed to your liking. Note that the handshake	1546	context in C<< $handle->{tls_ctx} >> after this call and can be used or
1386	might have already started when this function returns.	1547	changed to your liking. Note that the handshake might have already started
		1548	when this function returns.
1387		1549
1388	If it an error to start a TLS handshake more than once per	1550	If it an error to start a TLS handshake more than once per
1389	AnyEvent::Handle object (this is due to bugs in OpenSSL).	1551	AnyEvent::Handle object (this is due to bugs in OpenSSL).
1390		1552
1391	=cut	1553	=cut
1392		1554
		1555	our %TLS_CACHE; #TODO not yet documented, should we?
		1556
1393	sub starttls {	1557	sub starttls {
1394	my ($self, $ssl, $ctx) = @_;	1558	my ($self, $ssl, $ctx) = @_;
1395		1559
1396	require Net::SSLeay;	1560	require Net::SSLeay;
1397		1561
1398	Carp::croak "it is an error to call starttls more than once on an AnyEvent::Handle object"	1562	Carp::croak "it is an error to call starttls more than once on an AnyEvent::Handle object"
1399	if $self->{tls};	1563	if $self->{tls};
		1564
		1565	$ERROR_SYSCALL = Net::SSLeay::ERROR_SYSCALL ();
		1566	$ERROR_WANT_READ = Net::SSLeay::ERROR_WANT_READ ();
		1567
		1568	$ctx \|\|= $self->{tls_ctx};
		1569
		1570	local $Carp::CarpLevel = 1; # skip ourselves when creating a new context or session
		1571
		1572	if ("HASH" eq ref $ctx) {
		1573	require AnyEvent::TLS;
		1574
		1575	if ($ctx->{cache}) {
		1576	my $key = $ctx+0;
		1577	$ctx = $TLS_CACHE{$key} \|\|= new AnyEvent::TLS %$ctx;
		1578	} else {
		1579	$ctx = new AnyEvent::TLS %$ctx;
		1580	}
		1581	}
1400		1582
1401	if ($ssl eq "accept") {	1583	$self->{tls_ctx} = $ctx \|\| TLS_CTX ();
1402	$ssl = Net::SSLeay::new ($ctx \|\| TLS_CTX ());	1584	$self->{tls} = $ssl = $self->{tls_ctx}->_get_session ($ssl, $self, $self->{peername});
1403	Net::SSLeay::set_accept_state ($ssl);
1404	} elsif ($ssl eq "connect") {
1405	$ssl = Net::SSLeay::new ($ctx \|\| TLS_CTX ());
1406	Net::SSLeay::set_connect_state ($ssl);
1407	}
1408
1409	$self->{tls} = $ssl;
1410		1585
1411	# basically, this is deep magic (because SSL_read should have the same issues)	1586	# basically, this is deep magic (because SSL_read should have the same issues)
1412	# but the openssl maintainers basically said: "trust us, it just works".	1587	# but the openssl maintainers basically said: "trust us, it just works".
1413	# (unfortunately, we have to hardcode constants because the abysmally misdesigned	1588	# (unfortunately, we have to hardcode constants because the abysmally misdesigned
1414	# and mismaintained ssleay-module doesn't even offer them).	1589	# and mismaintained ssleay-module doesn't even offer them).
…		…
1418	#	1593	#
1419	# note that we do not try to keep the length constant between writes as we are required to do.	1594	# note that we do not try to keep the length constant between writes as we are required to do.
1420	# we assume that most (but not all) of this insanity only applies to non-blocking cases,	1595	# we assume that most (but not all) of this insanity only applies to non-blocking cases,
1421	# and we drive openssl fully in blocking mode here. Or maybe we don't - openssl seems to	1596	# and we drive openssl fully in blocking mode here. Or maybe we don't - openssl seems to
1422	# have identity issues in that area.	1597	# have identity issues in that area.
1423	Net::SSLeay::CTX_set_mode ($self->{tls},	1598	# Net::SSLeay::CTX_set_mode ($ssl,
1424	(eval { local $SIG{__DIE__}; Net::SSLeay::MODE_ENABLE_PARTIAL_WRITE () } \|\| 1)	1599	# (eval { local $SIG{__DIE__}; Net::SSLeay::MODE_ENABLE_PARTIAL_WRITE () } \|\| 1)
1425	\| (eval { local $SIG{__DIE__}; Net::SSLeay::MODE_ACCEPT_MOVING_WRITE_BUFFER () } \|\| 2));	1600	# \| (eval { local $SIG{__DIE__}; Net::SSLeay::MODE_ACCEPT_MOVING_WRITE_BUFFER () } \|\| 2));
		1601	Net::SSLeay::CTX_set_mode ($ssl, 1\|2);
1426		1602
1427	$self->{_rbio} = Net::SSLeay::BIO_new (Net::SSLeay::BIO_s_mem ());	1603	$self->{_rbio} = Net::SSLeay::BIO_new (Net::SSLeay::BIO_s_mem ());
1428	$self->{_wbio} = Net::SSLeay::BIO_new (Net::SSLeay::BIO_s_mem ());	1604	$self->{_wbio} = Net::SSLeay::BIO_new (Net::SSLeay::BIO_s_mem ());
1429		1605
1430	Net::SSLeay::set_bio ($ssl, $self->{_rbio}, $self->{_wbio});	1606	Net::SSLeay::set_bio ($ssl, $self->{_rbio}, $self->{_wbio});
		1607
		1608	$self->{_on_starttls} = sub { $_[0]{on_starttls}(@_) }
		1609	if $self->{on_starttls};
1431		1610
1432	&_dotls; # need to trigger the initial handshake	1611	&_dotls; # need to trigger the initial handshake
1433	$self->start_read; # make sure we actually do read	1612	$self->start_read; # make sure we actually do read
1434	}	1613	}
1435		1614
…		…
1448	if ($self->{tls}) {	1627	if ($self->{tls}) {
1449	Net::SSLeay::shutdown ($self->{tls});	1628	Net::SSLeay::shutdown ($self->{tls});
1450		1629
1451	&_dotls;	1630	&_dotls;
1452		1631
1453	# we don't give a shit. no, we do, but we can't. no...	1632	# # we don't give a shit. no, we do, but we can't. no...#d#
1454	# we, we... have to use openssl :/	1633	# # we, we... have to use openssl :/#d#
1455	&_freetls;	1634	# &_freetls;#d#
1456	}	1635	}
1457	}	1636	}
1458		1637
1459	sub _freetls {	1638	sub _freetls {
1460	my ($self) = @_;	1639	my ($self) = @_;
1461		1640
1462	return unless $self->{tls};	1641	return unless $self->{tls};
1463		1642
1464	Net::SSLeay::free (delete $self->{tls});	1643	$self->{tls_ctx}->_put_session (delete $self->{tls});
1465		1644
1466	delete @$self{qw(_rbio _wbio _tls_wbuf)};	1645	delete @$self{qw(_rbio _wbio _tls_wbuf _on_starttls)};
1467	}	1646	}
1468		1647
1469	sub DESTROY {	1648	sub DESTROY {
1470	my $self = shift;	1649	my ($self) = @_;
1471		1650
1472	&_freetls;	1651	&_freetls;
1473		1652
1474	my $linger = exists $self->{linger} ? $self->{linger} : 3600;	1653	my $linger = exists $self->{linger} ? $self->{linger} : 3600;
1475		1654
1476	if ($linger && length $self->{wbuf}) {	1655	if ($linger && length $self->{wbuf} && $self->{fh}) {
1477	my $fh = delete $self->{fh};	1656	my $fh = delete $self->{fh};
1478	my $wbuf = delete $self->{wbuf};	1657	my $wbuf = delete $self->{wbuf};
1479		1658
1480	my @linger;	1659	my @linger;
1481		1660
…		…
1495	}	1674	}
1496		1675
1497	=item $handle->destroy	1676	=item $handle->destroy
1498		1677
1499	Shuts down the handle object as much as possible - this call ensures that	1678	Shuts down the handle object as much as possible - this call ensures that
1500	no further callbacks will be invoked and resources will be freed as much	1679	no further callbacks will be invoked and as many resources as possible
1501	as possible. You must not call any methods on the object afterwards.	1680	will be freed. You must not call any methods on the object afterwards.
1502		1681
1503	Normally, you can just "forget" any references to an AnyEvent::Handle	1682	Normally, you can just "forget" any references to an AnyEvent::Handle
1504	object and it will simply shut down. This works in fatal error and EOF	1683	object and it will simply shut down. This works in fatal error and EOF
1505	callbacks, as well as code outside. It does I<NOT> work in a read or write	1684	callbacks, as well as code outside. It does I<NOT> work in a read or write
1506	callback, so when you want to destroy the AnyEvent::Handle object from	1685	callback, so when you want to destroy the AnyEvent::Handle object from
1507	within such an callback. You I<MUST> call C<< ->destroy >> explicitly in	1686	within such an callback. You I<MUST> call C<< ->destroy >> explicitly in
1508	that case.	1687	that case.
1509		1688
		1689	Destroying the handle object in this way has the advantage that callbacks
		1690	will be removed as well, so if those are the only reference holders (as
		1691	is common), then one doesn't need to do anything special to break any
		1692	reference cycles.
		1693
1510	The handle might still linger in the background and write out remaining	1694	The handle might still linger in the background and write out remaining
1511	data, as specified by the C<linger> option, however.	1695	data, as specified by the C<linger> option, however.
1512		1696
1513	=cut	1697	=cut
1514		1698
…		…
1519	%$self = ();	1703	%$self = ();
1520	}	1704	}
1521		1705
1522	=item AnyEvent::Handle::TLS_CTX	1706	=item AnyEvent::Handle::TLS_CTX
1523		1707
1524	This function creates and returns the Net::SSLeay::CTX object used by	1708	This function creates and returns the AnyEvent::TLS object used by default
1525	default for TLS mode.	1709	for TLS mode.
1526		1710
1527	The context is created like this:	1711	The context is created by calling L<AnyEvent::TLS> without any arguments.
1528
1529	Net::SSLeay::load_error_strings;
1530	Net::SSLeay::SSLeay_add_ssl_algorithms;
1531	Net::SSLeay::randomize;
1532
1533	my $CTX = Net::SSLeay::CTX_new;
1534
1535	Net::SSLeay::CTX_set_options $CTX, Net::SSLeay::OP_ALL
1536		1712
1537	=cut	1713	=cut
1538		1714
1539	our $TLS_CTX;	1715	our $TLS_CTX;
1540		1716
1541	sub TLS_CTX() {	1717	sub TLS_CTX() {
1542	$TLS_CTX \|\| do {	1718	$TLS_CTX \|\|= do {
1543	require Net::SSLeay;	1719	require AnyEvent::TLS;
1544		1720
1545	Net::SSLeay::load_error_strings ();	1721	new AnyEvent::TLS
1546	Net::SSLeay::SSLeay_add_ssl_algorithms ();
1547	Net::SSLeay::randomize ();
1548
1549	$TLS_CTX = Net::SSLeay::CTX_new ();
1550
1551	Net::SSLeay::CTX_set_options ($TLS_CTX, Net::SSLeay::OP_ALL ());
1552
1553	$TLS_CTX
1554	}	1722	}
1555	}	1723	}
1556		1724
1557	=back	1725	=back
1558		1726
…		…
1597		1765
1598	$handle->on_read (sub { });	1766	$handle->on_read (sub { });
1599	$handle->on_eof (undef);	1767	$handle->on_eof (undef);
1600	$handle->on_error (sub {	1768	$handle->on_error (sub {
1601	my $data = delete $_[0]{rbuf};	1769	my $data = delete $_[0]{rbuf};
1602	undef $handle;
1603	});	1770	});
1604		1771
1605	The reason to use C<on_error> is that TCP connections, due to latencies	1772	The reason to use C<on_error> is that TCP connections, due to latencies
1606	and packets loss, might get closed quite violently with an error, when in	1773	and packets loss, might get closed quite violently with an error, when in
1607	fact, all data has been received.	1774	fact, all data has been received.
…		…
1623	$handle->on_drain (sub {	1790	$handle->on_drain (sub {
1624	warn "all data submitted to the kernel\n";	1791	warn "all data submitted to the kernel\n";
1625	undef $handle;	1792	undef $handle;
1626	});	1793	});
1627		1794
		1795	If you just want to queue some data and then signal EOF to the other side,
		1796	consider using C<< ->push_shutdown >> instead.
		1797
		1798	=item I want to contact a TLS/SSL server, I don't care about security.
		1799
		1800	If your TLS server is a pure TLS server (e.g. HTTPS) that only speaks TLS,
		1801	simply connect to it and then create the AnyEvent::Handle with the C<tls>
		1802	parameter:
		1803
		1804	tcp_connect $host, $port, sub {
		1805	my ($fh) = @_;
		1806
		1807	my $handle = new AnyEvent::Handle
		1808	fh => $fh,
		1809	tls => "connect",
		1810	on_error => sub { ... };
		1811
		1812	$handle->push_write (...);
		1813	};
		1814
		1815	=item I want to contact a TLS/SSL server, I do care about security.
		1816
		1817	Then you should additionally enable certificate verification, including
		1818	peername verification, if the protocol you use supports it (see
		1819	L<AnyEvent::TLS>, C<verify_peername>).
		1820
		1821	E.g. for HTTPS:
		1822
		1823	tcp_connect $host, $port, sub {
		1824	my ($fh) = @_;
		1825
		1826	my $handle = new AnyEvent::Handle
		1827	fh => $fh,
		1828	peername => $host,
		1829	tls => "connect",
		1830	tls_ctx => { verify => 1, verify_peername => "https" },
		1831	...
		1832
		1833	Note that you must specify the hostname you connected to (or whatever
		1834	"peername" the protocol needs) as the C<peername> argument, otherwise no
		1835	peername verification will be done.
		1836
		1837	The above will use the system-dependent default set of trusted CA
		1838	certificates. If you want to check against a specific CA, add the
		1839	C<ca_file> (or C<ca_cert>) arguments to C<tls_ctx>:
		1840
		1841	tls_ctx => {
		1842	verify => 1,
		1843	verify_peername => "https",
		1844	ca_file => "my-ca-cert.pem",
		1845	},
		1846
		1847	=item I want to create a TLS/SSL server, how do I do that?
		1848
		1849	Well, you first need to get a server certificate and key. You have
		1850	three options: a) ask a CA (buy one, use cacert.org etc.) b) create a
		1851	self-signed certificate (cheap. check the search engine of your choice,
		1852	there are many tutorials on the net) or c) make your own CA (tinyca2 is a
		1853	nice program for that purpose).
		1854
		1855	Then create a file with your private key (in PEM format, see
		1856	L<AnyEvent::TLS>), followed by the certificate (also in PEM format). The
		1857	file should then look like this:
		1858
		1859	-----BEGIN RSA PRIVATE KEY-----
		1860	...header data
		1861	... lots of base64'y-stuff
		1862	-----END RSA PRIVATE KEY-----
		1863
		1864	-----BEGIN CERTIFICATE-----
		1865	... lots of base64'y-stuff
		1866	-----END CERTIFICATE-----
		1867
		1868	The important bits are the "PRIVATE KEY" and "CERTIFICATE" parts. Then
		1869	specify this file as C<cert_file>:
		1870
		1871	tcp_server undef, $port, sub {
		1872	my ($fh) = @_;
		1873
		1874	my $handle = new AnyEvent::Handle
		1875	fh => $fh,
		1876	tls => "accept",
		1877	tls_ctx => { cert_file => "my-server-keycert.pem" },
		1878	...
		1879
		1880	When you have intermediate CA certificates that your clients might not
		1881	know about, just append them to the C<cert_file>.
		1882
1628	=back	1883	=back
1629		1884
1630		1885
1631	=head1 SUBCLASSING AnyEvent::Handle	1886	=head1 SUBCLASSING AnyEvent::Handle
1632		1887

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing AnyEvent/lib/AnyEvent/Handle.pm (file contents): Revision 1.112 by root, Wed Jan 21 06:01:35 2009 UTC vs. Revision 1.158 by root, Fri Jul 24 08:40:35 2009 UTC

Diff Legend

Comparing AnyEvent/lib/AnyEvent/Handle.pm (file contents):
Revision 1.112 by root, Wed Jan 21 06:01:35 2009 UTC vs.
Revision 1.158 by root, Fri Jul 24 08:40:35 2009 UTC