diff options
| author |   Ping Yu <ping.yu@intel.com> | 2018-07-16 05:44:48 -0400 |
|---|---|---|
| committer | Ping Yu <ping.yu@intel.com> | 2018-07-16 06:09:35 -0400 |
| commit | cd2fc207cfd052de2b57fe0bb32d6376829c0324 (patch) | |
| tree | 1d78ae2a32c9fd81d83015e164181e616ef8e174 /src | |
| parent | 635ec3bdd073101dd513083be4f1edfb64e29098 (diff) | |
Enable openssl TLS async support in client for HW accleration
Change-Id: I003e41786c549c6451a1e9e178f5871d32c20e6e
Signed-off-by: Ping Yu <ping.yu@intel.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/plugins/tlsopenssl/tls_openssl.c | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/src/plugins/tlsopenssl/tls_openssl.c b/src/plugins/tlsopenssl/tls_openssl.c index f5722917bcc..91c9de758b4 100644 --- a/src/plugins/tlsopenssl/tls_openssl.c +++ b/src/plugins/tlsopenssl/tls_openssl.c @@ -427,6 +427,9 @@ openssl_ctx_init_client (tls_ctx_t * ctx) stream_session_t *tls_session; const SSL_METHOD *method; int rv, err; +#ifdef HAVE_OPENSSL_ASYNC + openssl_resume_handler *handler; +#endif method = SSLv23_client_method (); if (method == NULL) @@ -444,6 +447,10 @@ openssl_ctx_init_client (tls_ctx_t * ctx) SSL_CTX_set_ecdh_auto (oc->ssl_ctx, 1); SSL_CTX_set_mode (oc->ssl_ctx, SSL_MODE_ENABLE_PARTIAL_WRITE); +#ifdef HAVE_OPENSSL_ASYNC + if (om->async) + SSL_CTX_set_mode (oc->ssl_ctx, SSL_MODE_ASYNC); +#endif rv = SSL_CTX_set_cipher_list (oc->ssl_ctx, (const char *) ciphers); if (rv != 1) { @@ -489,6 +496,14 @@ openssl_ctx_init_client (tls_ctx_t * ctx) rv = SSL_do_handshake (oc->ssl); err = SSL_get_error (oc->ssl, rv); openssl_try_handshake_write (oc, tls_session); +#ifdef HAVE_OPENSSL_ASYNC + if (err == SSL_ERROR_WANT_ASYNC) + { + handler = (openssl_resume_handler *) openssl_ctx_handshake_rx; + vpp_ssl_async_process_event (ctx, handler); + break; + } +#endif if (err != SSL_ERROR_WANT_WRITE) break; } |