: TcpAcceptor(wp_loop)

, ssl_ctx_(ssl_ctx)

, tls_config_(tls_config)

{

//! accept 后不立即创建 Connection，而是开始 SSL 握手

startSslHandshake(fd, peer_addr);

{

//! 创建 SSL 对象（server 端使用 SSL_accept）

handshake_ssl_ = SSL_new(ssl_ctx_);

if (handshake_ssl_ == nullptr) {

LogErr("SSL_new fail");

fd.close();

return;

}

//! 将 fd 绑定到 SSL

SSL_set_fd(handshake_ssl_, fd.get());

//! 设置 SSL 为 server 模式

SSL_set_accept_state(handshake_ssl_);

//! 保存握手需要的参数

handshake_fd_ = fd; //! 不要使用 handshake_fd_.swap(fd) 否则会有问题

handshake_peer_addr_ = peer_addr;

//! 开始 SSL_accept

ERR_clear_error();

int ret = SSL_accept(handshake_ssl_);

if (ret == 1) {

//! SSL 握手立即完成

onSslHandshakeSuccess();

return;

}

int ssl_error = SSL_get_error(handshake_ssl_, ret);

if (ssl_error == SSL_ERROR_WANT_READ || ssl_error == SSL_ERROR_WANT_WRITE) {

//! 正常的异步握手过程

short events = (ssl_error == SSL_ERROR_WANT_READ) ? event::FdEvent::kReadEvent : event::FdEvent::kWriteEvent;

CHECK_DELETE_RESET_OBJ(sp_handshake_ev_);

sp_handshake_ev_ = wp_loop_->newFdEvent("TcpTlsAcceptor::sp_handshake_ev_");

sp_handshake_ev_->initialize(fd.get(), events, event::Event::Mode::kOneshot);

sp_handshake_ev_->setCallback(std::bind(&TcpTlsAcceptor::onSslHandshakeEvent, this, std::placeholders::_1));

sp_handshake_ev_->enable();

LogDbg("SSL accept in progress, waiting for %s", (ssl_error == SSL_ERROR_WANT_READ) ? "READ" : "WRITE");

} else {

//! SSL 握手失败

LogErr("SSL_accept fail, error:%d", ssl_error);

onSslHandshakeFail();

}

{

//! 继续 SSL_accept

ERR_clear_error();

int ret = SSL_accept(handshake_ssl_);

if (ret == 1) {

//! 握手成功

onSslHandshakeSuccess();

return;

}

int ssl_error = SSL_get_error(handshake_ssl_, ret);

if (ssl_error == SSL_ERROR_WANT_READ || ssl_error == SSL_ERROR_WANT_WRITE) {

//! 需要继续等待

//! kOneshot 事件触发后已自动 disable，可以直接 reinitialize，无需重新创建 FdEvent

//! 这避免了在回调中删除 FdEvent 导致的 assert 失败

short next_events = (ssl_error == SSL_ERROR_WANT_READ) ? event::FdEvent::kReadEvent : event::FdEvent::kWriteEvent;

sp_handshake_ev_->initialize(handshake_fd_.get(), next_events, event::Event::Mode::kOneshot);

sp_handshake_ev_->enable();

LogDbg("SSL accept continue, waiting for %s", (ssl_error == SSL_ERROR_WANT_READ) ? "READ" : "WRITE");

} else {

//! 握手失败

LogErr("SSL accept fail, error:%d", ssl_error);

onSslHandshakeFail();

}

{

RECORD_SCOPE();

//! 清理握手相关的 FdEvent

//! 不能在回调中直接删除 FdEvent（cb_level_ > 0），需要延后删除

if (sp_handshake_ev_ != nullptr) {

sp_handshake_ev_->disable();

event::FdEvent *tmp = nullptr;

std::swap(tmp, sp_handshake_ev_);

wp_loop_->runNext(

[tmp] { delete tmp; },

"TcpTlsAcceptor::onSslHandshakeSuccess, delete ev"

);

}

//! 将 SSL 和 fd 从握手状态转移到 TcpTlsConnection

SSL *ssl = handshake_ssl_;

handshake_ssl_ = nullptr;

SocketFd fd = handshake_fd_;

handshake_fd_.reset();

SockAddr peer_addr = handshake_peer_addr_;

LogInfo("TLS handshake from %s success", peer_addr.toString().c_str());

//! 创建 TcpTlsConnection 并触发回调

if (new_conn_cb_) {

auto sp_connection = new TcpTlsConnection(wp_loop_, fd, peer_addr, ssl);

sp_connection->enable();

++cb_level_;

new_conn_cb_(sp_connection);

--cb_level_;

} else {

LogWarn("%s need connect cb", bind_addr_.toString().c_str());

SSL_free(ssl);

fd.close();

}

{

//! 清理握手相关的资源

//! 不能在回调中直接删除 FdEvent（cb_level_ > 0），需要延后删除

if (sp_handshake_ev_ != nullptr) {

sp_handshake_ev_->disable();

event::FdEvent *tmp = nullptr;

std::swap(tmp, sp_handshake_ev_);

wp_loop_->runNext(

[tmp] { delete tmp; },

"TcpTlsAcceptor::onSslHandshakeFail, delete ev"

);

}

SSL_free(handshake_ssl_);

handshake_ssl_ = nullptr;

handshake_fd_.close();

//! 握手失败不影响其他连接，仅关闭当前 fd

LogNotice("TLS handshake fail, close connection");