The cl+ssl Reference Manual

Table of Contents

The cl+ssl Reference Manual

This is the cl+ssl Reference Manual, generated automatically by Declt version 3.0 "Montgomery Scott" on Mon Apr 19 14:26:12 2021 GMT+0.

1 Introduction

Homepage: http://common-lisp.net/project/cl-plus-ssl/

2 Systems

The main system appears first, followed by any subsystem dependency.

2.1 cl+ssl

Author

Eric Marsden, Jochen Schmidt, David Lichteblau

License

MIT

Description

Common Lisp interface to OpenSSL.

Dependencies

• cffi
• trivial-gray-streams
• flexi-streams
• sb-posix
• bordeaux-threads
• trivial-garbage
• uiop
• usocket
• alexandria
• trivial-features

Source

cl+ssl.asd (file)

Component

src (module)

3 Modules

Modules are listed depth-first from the system components tree.

3.1 cl+ssl/src

Parent

cl+ssl (system)

Location

src/

Components

• package.lisp (file)
• reload.lisp (file)
• conditions.lisp (file)
• ffi.lisp (file)
• x509.lisp (file)
• ffi-buffer-all.lisp (file)
• ffi-buffer.lisp (file)
• streams.lisp (file)
• bio.lisp (file)
• random.lisp (file)
• context.lisp (file)
• verify-hostname.lisp (file)

4 Files

Files are sorted by type and then listed depth-first from the systems components trees.

4.1 Lisp

4.1.1 cl+ssl.asd

Location

cl+ssl.asd

Systems

cl+ssl (system)

Packages

cl+ssl-system

4.1.2 cl+ssl/src/package.lisp

Parent

src (module)

Location

src/package.lisp

Packages

cl+ssl

4.1.3 cl+ssl/src/reload.lisp

Dependency

package.lisp (file)

Parent

src (module)

Location

src/reload.lisp

4.1.4 cl+ssl/src/conditions.lisp

Dependency

reload.lisp (file)

Parent

src (module)

Location

src/conditions.lisp

Exported Definitions

• ssl-error-code (method)
• ssl-error-initialize (condition)
• ssl-error-stream (method)
• ssl-error-verify (condition)

Internal Definitions

• *ssl-verify-error-alist* (special variable)
• +ssl-error-none+ (constant)
• +ssl-error-ssl+ (constant)
• +ssl-error-syscall+ (constant)
• +ssl-error-want-connect+ (constant)
• +ssl-error-want-read+ (constant)
• +ssl-error-want-write+ (constant)
• +ssl-error-want-x509-lookup+ (constant)
• +ssl-error-zero-return+ (constant)
• asn1-error (condition)
• cl+ssl-error (condition)
• format-ssl-error-queue (function)
• invalid-asn1-string (condition)
• read-ssl-error-queue (function)
• server-certificate-missing (condition)
• ssl-error (condition)
• ssl-error-call (condition)
• ssl-error-handle (method)
• ssl-error-none (condition)
• ssl-error-queue (method)
• ssl-error-reason (method)
• ssl-error-ret (method)
• ssl-error-ssl (condition)
• ssl-error-syscall (condition)
• ssl-error-want-connect (condition)
• ssl-error-want-read (condition)
• ssl-error-want-something (condition)
• ssl-error-want-write (condition)
• ssl-error-want-x509-lookup (condition)
• ssl-error-zero-return (condition)
• ssl-error/handle (condition)
• ssl-signal-error (function)
• ssl-verify-error-code (function)
• ssl-verify-error-keyword (function)

4.1.5 cl+ssl/src/ffi.lisp

Dependency

conditions.lisp (file)

Parent

src (module)

Location

src/ffi.lisp

Exported Definitions

• +ssl-op-no-sslv2+ (constant)
• +ssl-op-no-sslv3+ (constant)
• +ssl-op-no-tlsv1+ (constant)
• +ssl-op-no-tlsv1-1+ (constant)
• +ssl-op-no-tlsv1-2+ (constant)
• +ssl-sess-cache-both+ (constant)
• +ssl-sess-cache-client+ (constant)
• +ssl-sess-cache-no-auto-clear+ (constant)
• +ssl-sess-cache-no-internal+ (constant)
• +ssl-sess-cache-no-internal-lookup+ (constant)
• +ssl-sess-cache-no-internal-store+ (constant)
• +ssl-sess-cache-off+ (constant)
• +ssl-sess-cache-server+ (constant)
• +ssl-verify-client-once+ (constant)
• +ssl-verify-fail-if-no-peer-cert+ (constant)
• +ssl-verify-none+ (constant)
• +ssl-verify-peer+ (constant)
• ensure-initialized (function)
• reload (function)
• ssl-ctx-free (function)
• use-certificate-chain-file (function)
• with-pem-password (macro)

Internal Definitions

• *bio-lisp-method* (special variable)
• *blockp* (special variable)
• *cl+ssl-crypto-foreign-function-names* (special variable)
• *cl+ssl-ssl-foreign-function-names* (special variable)
• *global-lock* (special variable)
• *late-bound-foreign-function-pointers* (special variable)
• *locks* (special variable)
• *partial-read-p* (special variable)
• *pem-password* (special variable)
• *socket* (special variable)
• *ssl-check-verify-p* (special variable)
• *ssl-global-context* (special variable)
• *ssl-global-method* (special variable)
• *thread-counter* (special variable)
• *threads* (special variable)
• *tmp-rsa-key-1024* (special variable)
• *tmp-rsa-key-2048* (special variable)
• *tmp-rsa-key-512* (special variable)
• +crypto-lock+ (constant)
• +crypto-read+ (constant)
• +crypto-unlock+ (constant)
• +crypto-write+ (constant)
• +dtls1-2-version+ (constant)
• +dtls1-version+ (constant)
• +gen-dirname+ (constant)
• +gen-dns+ (constant)
• +gen-ediparty+ (constant)
• +gen-email+ (constant)
• +gen-ipadd+ (constant)
• +gen-othername+ (constant)
• +gen-rid+ (constant)
• +gen-uri+ (constant)
• +gen-x400+ (constant)
• +nid-commonname+ (constant)
• +nid-subject-alt-name+ (constant)
• +rsa_f4+ (constant)
• +ssl-ctrl-options+ (constant)
• +ssl-ctrl-set-max-proto-version+ (constant)
• +ssl-ctrl-set-min-proto-version+ (constant)
• +ssl-filetype-asn1+ (constant)
• +ssl-filetype-default+ (constant)
• +ssl-filetype-pem+ (constant)
• +ssl-op-all+ (constant)
• +ssl3-version+ (constant)
• +ssl_ctrl_mode+ (constant)
• +ssl_ctrl_set_sess_cache_mode+ (constant)
• +ssl_mode_accept_moving_write_buffer+ (constant)
• +tls1-1-version+ (constant)
• +tls1-2-version+ (constant)
• +tls1-3-version+ (constant)
• +tls1-version+ (constant)
• +v-asn1-bmpstring+ (constant)
• +v-asn1-iastring+ (constant)
• +v-asn1-octet-string+ (constant)
• +v-asn1-printablestring+ (constant)
• +v-asn1-teletexstring+ (constant)
• +v-asn1-universalstring+ (constant)
• +v-asn1-utf8string+ (constant)
• asn1-string-data (function)
• asn1-string-length (function)
• asn1-string-type (function)
• asn1-time-check (function)
• asn1_string_st-tclass (class)
• bio-new (function)
• bio-new-socket (function)
• bio-set-fd (function)
• close-socket (function)
• compat-openssl-version (function)
• crypto-num-locks (function)
• crypto-set-id-callback (function)
• crypto-set-locking-callback (function)
• d2i-x509 (function)
• default-ssl-method (function)
• defcfun-late-bound (macro)
• defcfun-versioned (macro)
• define-crypto-function (macro)
• define-crypto-function-ex (macro)
• define-ssl-function (macro)
• define-ssl-function-ex (macro)
• encode-openssl-version (function)
• ensure-ssl-funcall (function)
• err-error-string (function)
• err-get-error (function)
• general-name-tclass (class)
• general-names-free (function)
• init-prng (function)
• initialize (function)
• input-wait (function)
• libresslp (function)
• nonblocking-ssl-funcall (function)
• openssl-is-at-least (function)
• openssl-is-not-even (function)
• openssl-sk-num (function)
• openssl-sk-value (function)
• openssl-version-num (function)
• output-wait (function)
• rand-bytes (function)
• rand-seed (function)
• rsa-free (function)
• rsa-generate-key (function)
• seconds-until-deadline (function)
• sk-general-name-num (function)
• sk-general-name-value (function)
• sk-num (function)
• sk-value (function)
• ssl-accept (function)
• ssl-connect (function)
• ssl-ctrl (function)
• ssl-ctx-ctrl (function)
• ssl-ctx-load-verify-locations (function)
• ssl-ctx-new (function)
• ssl-ctx-set-cipher-list (function)
• ssl-ctx-set-cipher-list% (function)
• ssl-ctx-set-client-ca-list (function)
• ssl-ctx-set-default-passwd-cb (function)
• ssl-ctx-set-default-verify-dir (function)
• ssl-ctx-set-default-verify-file (function)
• ssl-ctx-set-default-verify-paths (function)
• ssl-ctx-set-max-proto-version (function)
• ssl-ctx-set-min-proto-version (function)
• ssl-ctx-set-options (function)
• ssl-ctx-set-session-cache-mode (function)
• ssl-ctx-set-tmp-rsa-callback (function)
• ssl-ctx-set-verify (function)
• ssl-ctx-set-verify-depth (function)
• ssl-ctx-use-certificate-chain-file (function)
• ssl-ctx-use-privatekey-file (function)
• ssl-ctx-use-rsa-privatekey-file (function)
• ssl-eay (function)
• ssl-free (function)
• ssl-get-error (function)
• ssl-get-fd (function)
• ssl-get-peer-certificate (function)
• ssl-get-verify-result (function)
• ssl-get-version (function)
• ssl-initialized-p (function)
• ssl-library-init (function)
• ssl-load-client-ca-file (function)
• ssl-load-error-strings (function)
• ssl-new (function)
• ssl-read (function)
• ssl-set-accept-state (function)
• ssl-set-bio (function)
• ssl-set-cipher-list (function)
• ssl-set-connect-state (function)
• ssl-set-fd (function)
• ssl-set-tlsext-host-name (function)
• ssl-shutdown (function)
• ssl-tlsv1-1-client-method (function)
• ssl-tlsv1-1-method (function)
• ssl-tlsv1-1-server-method (function)
• ssl-tlsv1-2-client-method (function)
• ssl-tlsv1-2-method (function)
• ssl-tlsv1-2-server-method (function)
• ssl-tlsv1-client-method (function)
• ssl-tlsv1-method (function)
• ssl-tlsv1-server-method (function)
• ssl-use-certificate-file (function)
• ssl-use-privatekey-file (function)
• ssl-use-rsa-privatekey-file (function)
• ssl-v23-client-method (function)
• ssl-v23-method (function)
• ssl-v23-server-method (function)
• ssl-v3-client-method (function)
• ssl-v3-method (function)
• ssl-v3-server-method (function)
• ssl-write (function)
• tls-method (function)
• while (macro)
• x509-free (function)
• x509-get-ext-d2i (function)
• x509-get-issuer-name (function)
• x509-get-subject-name (function)
• x509-get0-not-after (function)
• x509-get0-not-before (function)
• x509-name-entry-get-data (function)
• x509-name-get-entry (function)
• x509-name-get-index-by-nid (function)
• x509-name-oneline (function)
• x509-store-ctx-get-error (function)

4.1.6 cl+ssl/src/x509.lisp

Dependency

ffi.lisp (file)

Parent

src (module)

Location

src/x509.lisp

Exported Definitions

• certificate-not-after-time (function)
• certificate-not-before-time (function)
• certificate-subject-common-names (function)
• decode-certificate (generic function)
• decode-certificate (method)
• decode-certificate-from-file (function)

Internal Definitions

• asn1-iastring-char-p (function)
• asn1-iastring-p (function)
• asn1-printable-char-p (function)
• asn1-printable-string-p (function)
• asn1-string-bytes-vector (function)
• asn1-teletex-char-p (function)
• asn1-teletex-string-p (function)
• cert-format-from-path (function)
• certificate-alt-names (function)
• certificate-dns-alt-names (function)
• copy-bytes-to-lisp-vector (function)
• decode-asn1-string (generic function)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-utctime (function)
• slurp-stream (function)
• try-get-asn1-string-data (function)

4.1.7 cl+ssl/src/ffi-buffer-all.lisp

Dependency

x509.lisp (file)

Parent

src (module)

Location

src/ffi-buffer-all.lisp

4.1.8 cl+ssl/src/ffi-buffer.lisp

Dependency

ffi-buffer-all.lisp (file)

Parent

src (module)

Location

src/ffi-buffer.lisp

Internal Definitions

• b/s-replace (function)
• buffer-elt (function)
• (setf buffer-elt) (setf expander)
• buffer-length (function)
• make-buffer (function)
• s/b-replace (function)
• set-buffer-elt (function)
• with-pointer-to-vector-data (macro)

4.1.9 cl+ssl/src/streams.lisp

Dependency

ffi-buffer.lisp (file)

Parent

src (module)

Location

src/streams.lisp

Exported Definitions

• *default-buffer-size* (special variable)
• *default-cipher-list* (special variable)
• *make-ssl-client-stream-verify-default* (special variable)
• make-ssl-client-stream (function)
• make-ssl-server-stream (function)
• ssl-check-verify-p (function)
• (setf ssl-check-verify-p) (function)
• ssl-load-global-verify-locations (function)
• ssl-set-global-default-verify-paths (function)
• ssl-stream-x509-certificate (function)
• stream-fd (generic function)
• stream-fd (method)
• stream-fd (method)

Internal Definitions

• handle-external-format (function)
• install-handle-and-bio (function)
• install-key-and-cert (function)
• install-nonblock-flag (function)
• maybe-verify-client-stream (function)
• ssl-close-callback (method)
• (setf ssl-close-callback) (method)
• ssl-server-stream (class)
• ssl-stream (class)
• ssl-stream-certificate (method)
• (setf ssl-stream-certificate) (method)
• ssl-stream-deadline (method)
• (setf ssl-stream-deadline) (method)
• ssl-stream-handle (method)
• ssl-stream-handle (method)
• (setf ssl-stream-handle) (method)
• ssl-stream-input-buffer (method)
• (setf ssl-stream-input-buffer) (method)
• ssl-stream-key (method)
• (setf ssl-stream-key) (method)
• ssl-stream-output-buffer (method)
• (setf ssl-stream-output-buffer) (method)
• ssl-stream-output-pointer (method)
• (setf ssl-stream-output-pointer) (method)
• ssl-stream-peeked-byte (method)
• (setf ssl-stream-peeked-byte) (method)
• ssl-stream-socket (method)
• (setf ssl-stream-socket) (method)
• ssl-verify-init (function)
• with-new-ssl (macro)
• x509-certificate-names (function)

4.1.10 cl+ssl/src/bio.lisp

Dependency

streams.lisp (file)

Parent

src (module)

Location

src/bio.lisp

Internal Definitions

• +bio-type-socket+ (constant)
• +bio_ctrl_flush+ (constant)
• +bio_flags_read+ (constant)
• +bio_flags_should_retry+ (constant)
• +bio_flags_write+ (constant)
• bio-method-tclass (class)
• bio-new-lisp (function)
• bio-tclass (class)
• clear-retry-flags (function)
• make-bio-lisp-method (function)
• set-retry-read (function)

4.1.11 cl+ssl/src/random.lisp

Dependency

bio.lisp (file)

Parent

src (module)

Location

src/random.lisp

Exported Definitions

random-bytes (function)

4.1.12 cl+ssl/src/context.lisp

Dependency

random.lisp (file)

Parent

src (module)

Location

src/context.lisp

Exported Definitions

• make-context (function)
• with-global-context (macro)

Internal Definitions

• +default-cipher-list+ (constant)
• add-verify-locations (function)
• call-with-global-context (function)
• ssl-ctx-set-verify-location (function)
• validate-verify-location (function)
• verify-location-not-found-error (condition)

4.1.13 cl+ssl/src/verify-hostname.lisp

Dependency

context.lisp (file)

Parent

src (module)

Location

src/verify-hostname.lisp

Exported Definitions

verify-hostname (function)

Internal Definitions

• case-insensitive-match (function)
• check-single-wildcard (function)
• check-two-labels-after-wildcard (function)
• check-wildcard-in-leftmost-label (function)
• hostname-verification-error (condition)
• maybe-check-subject-cn (function)
• maybe-try-match-wildcard (function)
• remove-trailing-dot (function)
• try-match-hostname (function)
• try-match-hostnames (function)
• try-match-wildcard (function)
• unable-to-decode-common-name (condition)
• unable-to-match-altnames (condition)
• unable-to-match-common-name (condition)
• validate-and-parse-wildcard-identifier (function)
• wildcard-not-in-a-label (function)

5 Packages

Packages are listed by definition order.

5.1 cl+ssl-system

Source

cl+ssl.asd

Use List

• asdf/interface
• common-lisp

5.2 cl+ssl

Source

package.lisp (file)

Use List

• trivial-gray-streams
• common-lisp

Exported Definitions

• *default-buffer-size* (special variable)
• *default-cipher-list* (special variable)
• *make-ssl-client-stream-verify-default* (special variable)
• +ssl-op-no-sslv2+ (constant)
• +ssl-op-no-sslv3+ (constant)
• +ssl-op-no-tlsv1+ (constant)
• +ssl-op-no-tlsv1-1+ (constant)
• +ssl-op-no-tlsv1-2+ (constant)
• +ssl-sess-cache-both+ (constant)
• +ssl-sess-cache-client+ (constant)
• +ssl-sess-cache-no-auto-clear+ (constant)
• +ssl-sess-cache-no-internal+ (constant)
• +ssl-sess-cache-no-internal-lookup+ (constant)
• +ssl-sess-cache-no-internal-store+ (constant)
• +ssl-sess-cache-off+ (constant)
• +ssl-sess-cache-server+ (constant)
• +ssl-verify-client-once+ (constant)
• +ssl-verify-fail-if-no-peer-cert+ (constant)
• +ssl-verify-none+ (constant)
• +ssl-verify-peer+ (constant)
• certificate-not-after-time (function)
• certificate-not-before-time (function)
• certificate-subject-common-names (function)
• decode-certificate (generic function)
• decode-certificate (method)
• decode-certificate-from-file (function)
• ensure-initialized (function)
• make-context (function)
• make-ssl-client-stream (function)
• make-ssl-server-stream (function)
• random-bytes (function)
• reload (function)
• ssl-check-verify-p (function)
• (setf ssl-check-verify-p) (function)
• ssl-ctx-free (function)
• ssl-error-code (generic function)
• ssl-error-code (method)
• ssl-error-initialize (condition)
• ssl-error-stream (generic function)
• ssl-error-stream (method)
• ssl-error-verify (condition)
• ssl-load-global-verify-locations (function)
• ssl-set-global-default-verify-paths (function)
• ssl-stream-x509-certificate (function)
• stream-fd (generic function)
• stream-fd (method)
• stream-fd (method)
• use-certificate-chain-file (function)
• verify-hostname (function)
• with-global-context (macro)
• with-pem-password (macro)

Internal Definitions

• *bio-lisp-method* (special variable)
• *blockp* (special variable)
• *cl+ssl-crypto-foreign-function-names* (special variable)
• *cl+ssl-ssl-foreign-function-names* (special variable)
• *global-lock* (special variable)
• *late-bound-foreign-function-pointers* (special variable)
• *locks* (special variable)
• *partial-read-p* (special variable)
• *pem-password* (special variable)
• *socket* (special variable)
• *ssl-check-verify-p* (special variable)
• *ssl-global-context* (special variable)
• *ssl-global-method* (special variable)
• *ssl-verify-error-alist* (special variable)
• *thread-counter* (special variable)
• *threads* (special variable)
• *tmp-rsa-key-1024* (special variable)
• *tmp-rsa-key-2048* (special variable)
• *tmp-rsa-key-512* (special variable)
• +bio-type-socket+ (constant)
• +bio_ctrl_flush+ (constant)
• +bio_flags_read+ (constant)
• +bio_flags_should_retry+ (constant)
• +bio_flags_write+ (constant)
• +crypto-lock+ (constant)
• +crypto-read+ (constant)
• +crypto-unlock+ (constant)
• +crypto-write+ (constant)
• +default-cipher-list+ (constant)
• +dtls1-2-version+ (constant)
• +dtls1-version+ (constant)
• +gen-dirname+ (constant)
• +gen-dns+ (constant)
• +gen-ediparty+ (constant)
• +gen-email+ (constant)
• +gen-ipadd+ (constant)
• +gen-othername+ (constant)
• +gen-rid+ (constant)
• +gen-uri+ (constant)
• +gen-x400+ (constant)
• +nid-commonname+ (constant)
• +nid-subject-alt-name+ (constant)
• +rsa_f4+ (constant)
• +ssl-ctrl-options+ (constant)
• +ssl-ctrl-set-max-proto-version+ (constant)
• +ssl-ctrl-set-min-proto-version+ (constant)
• +ssl-error-none+ (constant)
• +ssl-error-ssl+ (constant)
• +ssl-error-syscall+ (constant)
• +ssl-error-want-connect+ (constant)
• +ssl-error-want-read+ (constant)
• +ssl-error-want-write+ (constant)
• +ssl-error-want-x509-lookup+ (constant)
• +ssl-error-zero-return+ (constant)
• +ssl-filetype-asn1+ (constant)
• +ssl-filetype-default+ (constant)
• +ssl-filetype-pem+ (constant)
• +ssl-op-all+ (constant)
• +ssl3-version+ (constant)
• +ssl_ctrl_mode+ (constant)
• +ssl_ctrl_set_sess_cache_mode+ (constant)
• +ssl_mode_accept_moving_write_buffer+ (constant)
• +tls1-1-version+ (constant)
• +tls1-2-version+ (constant)
• +tls1-3-version+ (constant)
• +tls1-version+ (constant)
• +v-asn1-bmpstring+ (constant)
• +v-asn1-iastring+ (constant)
• +v-asn1-octet-string+ (constant)
• +v-asn1-printablestring+ (constant)
• +v-asn1-teletexstring+ (constant)
• +v-asn1-universalstring+ (constant)
• +v-asn1-utf8string+ (constant)
• add-verify-locations (function)
• asn1-error (condition)
• asn1-iastring-char-p (function)
• asn1-iastring-p (function)
• asn1-printable-char-p (function)
• asn1-printable-string-p (function)
• asn1-string-bytes-vector (function)
• asn1-string-data (function)
• asn1-string-length (function)
• asn1-string-type (function)
• asn1-teletex-char-p (function)
• asn1-teletex-string-p (function)
• asn1-time-check (function)
• asn1_string_st-tclass (class)
• b/s-replace (function)
• bio-method-tclass (class)
• bio-new (function)
• bio-new-lisp (function)
• bio-new-socket (function)
• bio-set-fd (function)
• bio-tclass (class)
• buffer-elt (function)
• (setf buffer-elt) (setf expander)
• buffer-length (function)
• call-with-global-context (function)
• case-insensitive-match (function)
• cert-format-from-path (function)
• certificate-alt-names (function)
• certificate-dns-alt-names (function)
• check-single-wildcard (function)
• check-two-labels-after-wildcard (function)
• check-wildcard-in-leftmost-label (function)
• cl+ssl-error (condition)
• clear-retry-flags (function)
• close-socket (function)
• compat-openssl-version (function)
• copy-bytes-to-lisp-vector (function)
• crypto-num-locks (function)
• crypto-set-id-callback (function)
• crypto-set-locking-callback (function)
• d2i-x509 (function)
• decode-asn1-string (generic function)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-string (method)
• decode-asn1-utctime (function)
• default-ssl-method (function)
• defcfun-late-bound (macro)
• defcfun-versioned (macro)
• define-crypto-function (macro)
• define-crypto-function-ex (macro)
• define-ssl-function (macro)
• define-ssl-function-ex (macro)
• encode-openssl-version (function)
• ensure-ssl-funcall (function)
• err-error-string (function)
• err-get-error (function)
• format-ssl-error-queue (function)
• general-name-tclass (class)
• general-names-free (function)
• handle-external-format (function)
• hostname-verification-error (condition)
• init-prng (function)
• initialize (function)
• input-wait (function)
• install-handle-and-bio (function)
• install-key-and-cert (function)
• install-nonblock-flag (function)
• invalid-asn1-string (condition)
• libresslp (function)
• make-bio-lisp-method (function)
• make-buffer (function)
• maybe-check-subject-cn (function)
• maybe-try-match-wildcard (function)
• maybe-verify-client-stream (function)
• nonblocking-ssl-funcall (function)
• openssl-is-at-least (function)
• openssl-is-not-even (function)
• openssl-sk-num (function)
• openssl-sk-value (function)
• openssl-version-num (function)
• output-wait (function)
• rand-bytes (function)
• rand-seed (function)
• read-ssl-error-queue (function)
• remove-trailing-dot (function)
• rsa-free (function)
• rsa-generate-key (function)
• s/b-replace (function)
• seconds-until-deadline (function)
• server-certificate-missing (condition)
• set-buffer-elt (function)
• set-retry-read (function)
• sk-general-name-num (function)
• sk-general-name-value (function)
• sk-num (function)
• sk-value (function)
• slurp-stream (function)
• ssl-accept (function)
• ssl-close-callback (generic function)
• ssl-close-callback (method)
• (setf ssl-close-callback) (method)
• (setf ssl-close-callback) (generic function)
• ssl-connect (function)
• ssl-ctrl (function)
• ssl-ctx-ctrl (function)
• ssl-ctx-load-verify-locations (function)
• ssl-ctx-new (function)
• ssl-ctx-set-cipher-list (function)
• ssl-ctx-set-cipher-list% (function)
• ssl-ctx-set-client-ca-list (function)
• ssl-ctx-set-default-passwd-cb (function)
• ssl-ctx-set-default-verify-dir (function)
• ssl-ctx-set-default-verify-file (function)
• ssl-ctx-set-default-verify-paths (function)
• ssl-ctx-set-max-proto-version (function)
• ssl-ctx-set-min-proto-version (function)
• ssl-ctx-set-options (function)
• ssl-ctx-set-session-cache-mode (function)
• ssl-ctx-set-tmp-rsa-callback (function)
• ssl-ctx-set-verify (function)
• ssl-ctx-set-verify-depth (function)
• ssl-ctx-set-verify-location (function)
• ssl-ctx-use-certificate-chain-file (function)
• ssl-ctx-use-privatekey-file (function)
• ssl-ctx-use-rsa-privatekey-file (function)
• ssl-eay (function)
• ssl-error (condition)
• ssl-error-call (condition)
• ssl-error-handle (generic function)
• ssl-error-handle (method)
• ssl-error-none (condition)
• ssl-error-queue (generic function)
• ssl-error-queue (method)
• ssl-error-reason (generic function)
• ssl-error-reason (method)
• ssl-error-ret (generic function)
• ssl-error-ret (method)
• ssl-error-ssl (condition)
• ssl-error-syscall (condition)
• ssl-error-want-connect (condition)
• ssl-error-want-read (condition)
• ssl-error-want-something (condition)
• ssl-error-want-write (condition)
• ssl-error-want-x509-lookup (condition)
• ssl-error-zero-return (condition)
• ssl-error/handle (condition)
• ssl-free (function)
• ssl-get-error (function)
• ssl-get-fd (function)
• ssl-get-peer-certificate (function)
• ssl-get-verify-result (function)
• ssl-get-version (function)
• ssl-initialized-p (function)
• ssl-library-init (function)
• ssl-load-client-ca-file (function)
• ssl-load-error-strings (function)
• ssl-new (function)
• ssl-read (function)
• ssl-server-stream (class)
• ssl-set-accept-state (function)
• ssl-set-bio (function)
• ssl-set-cipher-list (function)
• ssl-set-connect-state (function)
• ssl-set-fd (function)
• ssl-set-tlsext-host-name (function)
• ssl-shutdown (function)
• ssl-signal-error (function)
• ssl-stream (class)
• ssl-stream-certificate (generic function)
• ssl-stream-certificate (method)
• (setf ssl-stream-certificate) (method)
• (setf ssl-stream-certificate) (generic function)
• ssl-stream-deadline (generic function)
• ssl-stream-deadline (method)
• (setf ssl-stream-deadline) (method)
• (setf ssl-stream-deadline) (generic function)
• ssl-stream-handle (generic function)
• ssl-stream-handle (method)
• ssl-stream-handle (method)
• (setf ssl-stream-handle) (method)
• (setf ssl-stream-handle) (generic function)
• ssl-stream-input-buffer (generic function)
• ssl-stream-input-buffer (method)
• (setf ssl-stream-input-buffer) (method)
• (setf ssl-stream-input-buffer) (generic function)
• ssl-stream-key (generic function)
• ssl-stream-key (method)
• (setf ssl-stream-key) (method)
• (setf ssl-stream-key) (generic function)
• ssl-stream-output-buffer (generic function)
• ssl-stream-output-buffer (method)
• (setf ssl-stream-output-buffer) (method)
• (setf ssl-stream-output-buffer) (generic function)
• ssl-stream-output-pointer (generic function)
• ssl-stream-output-pointer (method)
• (setf ssl-stream-output-pointer) (method)
• (setf ssl-stream-output-pointer) (generic function)
• ssl-stream-peeked-byte (generic function)
• ssl-stream-peeked-byte (method)
• (setf ssl-stream-peeked-byte) (method)
• (setf ssl-stream-peeked-byte) (generic function)
• ssl-stream-socket (generic function)
• ssl-stream-socket (method)
• (setf ssl-stream-socket) (method)
• (setf ssl-stream-socket) (generic function)
• ssl-tlsv1-1-client-method (function)
• ssl-tlsv1-1-method (function)
• ssl-tlsv1-1-server-method (function)
• ssl-tlsv1-2-client-method (function)
• ssl-tlsv1-2-method (function)
• ssl-tlsv1-2-server-method (function)
• ssl-tlsv1-client-method (function)
• ssl-tlsv1-method (function)
• ssl-tlsv1-server-method (function)
• ssl-use-certificate-file (function)
• ssl-use-privatekey-file (function)
• ssl-use-rsa-privatekey-file (function)
• ssl-v23-client-method (function)
• ssl-v23-method (function)
• ssl-v23-server-method (function)
• ssl-v3-client-method (function)
• ssl-v3-method (function)
• ssl-v3-server-method (function)
• ssl-verify-error-code (function)
• ssl-verify-error-keyword (function)
• ssl-verify-init (function)
• ssl-write (function)
• tls-method (function)
• try-get-asn1-string-data (function)
• try-match-hostname (function)
• try-match-hostnames (function)
• try-match-wildcard (function)
• unable-to-decode-common-name (condition)
• unable-to-match-altnames (condition)
• unable-to-match-common-name (condition)
• validate-and-parse-wildcard-identifier (function)
• validate-verify-location (function)
• verify-location-not-found-error (condition)
• while (macro)
• wildcard-not-in-a-label (function)
• with-new-ssl (macro)
• with-pointer-to-vector-data (macro)
• x509-certificate-names (function)
• x509-free (function)
• x509-get-ext-d2i (function)
• x509-get-issuer-name (function)
• x509-get-subject-name (function)
• x509-get0-not-after (function)
• x509-get0-not-before (function)
• x509-name-entry-get-data (function)
• x509-name-get-entry (function)
• x509-name-get-index-by-nid (function)
• x509-name-oneline (function)
• x509-store-ctx-get-error (function)

6 Definitions

Definitions are sorted by export status, category, package, and then by lexicographic order.

6.1 Exported definitions

6.1.1 Constants

Constant: +ssl-op-no-sslv2+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-op-no-sslv3+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-op-no-tlsv1+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-op-no-tlsv1-1+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-op-no-tlsv1-2+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-both+

Enable both +SSL-SESS-CACHE-CLIENT+ and +SSL-SESS-CACHE-SERVER+ at the same time.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-client+

Client sessions are added to the session cache.
As there is no reliable way for the OpenSSL library to know whether a session should be reused or which session to choose (due to the abstract BIO layer the SSL engine does not have details about the connection), the application must select the session to be reused by using the SSL-SET-SESSION function. This option is not activated by default.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-no-auto-clear+

Normally the session cache is checked for expired sessions every 255 connections using the SSL-CTX-FLUSH-SESSIONS function. Since this may lead to a delay which cannot be controlled, the automatic flushing may be disabled and SSL-CTX-FLUSH-SESSIONS can be called explicitly by the application.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-no-internal+

Enable both +SSL-SESS-CACHE-NO-INTERNAL-LOOKUP+ and +SSL-SESS-CACHE-NO-INTERNAL-STORE+ at the same time.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-no-internal-lookup+

By setting this flag, session-resume operations in an SSL/TLS server will not automatically look up sessions in the internal cache, even if sessions are automatically stored there. If external session caching callbacks are in use, this flag guarantees that all lookups are directed to the external cache. As automatic lookup only applies for SSL/TLS servers, the flag has no effect on clients.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-no-internal-store+

Depending on the presence of +SSL-SESS-CACHE-CLIENT+ and/or +SSL-SESS-CACHE-SERVER+, sessions negotiated in an SSL/TLS handshake may be cached for possible reuse. Normally a new session is added to the internal cache as well as any external session caching (callback) that is configured for the SSL-CTX. This flag will prevent sessions being stored in the internal cache (though the application can add them manually using SSL-CTX-ADD-SESSION). Note: in any SSL/TLS servers where external caching is configured, any successful session lookups in the external cache (ie. for session-resume requests) would normally be copied into the local cache before processing continues - this flag prevents these additions to the internal cache as well.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-off+

No session caching for client or server takes place.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-sess-cache-server+

Server sessions are added to the session cache.
When a client proposes a session to be reused, the server looks for the corresponding session in (first) the internal session cache (unless +SSL-SESS-CACHE-NO-INTERNAL-LOOKUP+ is set), then (second) in the external cache if available. If the session is found, the server will try to reuse the session. This is the default.

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-verify-client-once+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-verify-fail-if-no-peer-cert+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-verify-none+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-verify-peer+

Package

cl+ssl

Source

ffi.lisp (file)

6.1.2 Special variables

Special Variable: *default-buffer-size*

The default input and output buffers size of the SSL-STREAM objects

Package

cl+ssl

Source

streams.lisp (file)

Special Variable: *default-cipher-list*

Package

cl+ssl

Source

streams.lisp (file)

Special Variable: *make-ssl-client-stream-verify-default*

Helps to mitigate the change in default behaviour of MAKE-SSL-CLIENT-STREAM - previously it worked as if :VERIFY NIL
but then :VERIFY :REQUIRED became the default on non-Windows platforms. Change this variable if you want the previous behaviour.

Package

cl+ssl

Source

streams.lisp (file)

6.1.3 Macros

Macro: with-global-context (CONTEXT &key AUTO-FREE-P) &body BODY

Package

cl+ssl

Source

context.lisp (file)

Macro: with-pem-password ()

Package

cl+ssl

Source

ffi.lisp (file)

6.1.4 Functions

Function: certificate-not-after-time CERTIFICATE

Returns a universal-time representing the time after which the certificate is not valid.

Package

cl+ssl

Source

x509.lisp (file)

Function: certificate-not-before-time CERTIFICATE

Returns a universal-time representing the time before which the certificate is not valid.

Package

cl+ssl

Source

x509.lisp (file)

Function: certificate-subject-common-names CERT

Package

cl+ssl

Source

x509.lisp (file)

Function: decode-certificate-from-file PATH &key FORMAT

Package

cl+ssl

Source

x509.lisp (file)

Function: ensure-initialized ()

In most cases you do *not* need to call this function, because it
is called automatically by all other functions. The only reason to
call it explicitly is to supply the RAND-SEED parameter. In this case
do it before calling any other functions.

Just leave the default value for the METHOD parameter.

RAND-SEED is an octet sequence to initialize OpenSSL random number generator. On many platforms, including Linux and Windows, it may be leaved NIL (default), because OpenSSL initializes the random number generator from OS specific service. But for example on Solaris it may be necessary to supply this value.
The minimum length required by OpenSSL is 128 bits.
See ttp://www.openssl.org/support/faq.html#USER1 for details.

Hint: do not use Common Lisp RANDOM function to generate the RAND-SEED, because the function usually returns predictable values.

Package

cl+ssl

Source

ffi.lisp (file)

Function: make-context &key METHOD DISABLED-PROTOCOLS OPTIONS MIN-PROTO-VERSION SESSION-CACHE-MODE VERIFY-LOCATION VERIFY-DEPTH VERIFY-MODE VERIFY-CALLBACK CIPHER-LIST PEM-PASSWORD-CALLBACK

Package

cl+ssl

Source

context.lisp (file)

Function: make-ssl-client-stream ()

Returns an SSL stream for the client socket descriptor SOCKET. CERTIFICATE is the path to a file containing the PEM-encoded certificate for your client. KEY is the path to the PEM-encoded key for the client, which may be associated with the passphrase PASSWORD.

VERIFY can be specified either as NIL if no check should be performed, :OPTIONAL to verify the server’s certificate if it presented one or :REQUIRED to verify the server’s certificate and fail if an invalid
or no certificate was presented.

HOSTNAME if specified, will be sent by client during TLS negotiation, according to the Server Name Indication (SNI) extension to the TLS.
When server handles several domain names, this extension enables the server to choose certificate for right domain. Also the HOSTNAME is used for hostname verification if verification is enabled by VERIFY.

Package

cl+ssl

Source

streams.lisp (file)

Function: make-ssl-server-stream ()

Returns an SSL stream for the server socket descriptor SOCKET. CERTIFICATE is the path to a file containing the PEM-encoded certificate for your server. KEY is the path to the PEM-encoded key for the server, which may be associated with the passphrase PASSWORD.

Package

cl+ssl

Source

streams.lisp (file)

Function: random-bytes COUNT

Generates COUNT cryptographically strong pseudo-random bytes. Returns the bytes as a SIMPLE-ARRAY with ELEMENT-TYPE ’(UNSIGNED-BYTE 8). Signals an ERROR in case of problems, for example when the OpenSSL random number generator has not been seeded with enough randomness to ensure an unpredictable byte sequence.

Package

cl+ssl

Source

random.lisp (file)

Function: reload ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-check-verify-p ()

DEPRECATED. Use the (MAKE-SSL-CLIENT-STREAM .. :VERIFY ?) to enable/disable verification. MAKE-CONTEXT also allows to enab/disable verification.

Return true if SSL connections will error if the certificate doesn’t verify.

Package

cl+ssl

Source

streams.lisp (file)

Writer

(setf ssl-check-verify-p) (function)

Function: (setf ssl-check-verify-p) ()

DEPRECATED. Use the (MAKE-SSL-CLIENT-STREAM .. :VERIFY ?) to enable/disable verification. MAKE-CONTEXT also allows to enab/disable verification.

If CHECK-VERIFY-P is true, signal connection errors if the server certificate doesn’t verify.

Package

cl+ssl

Source

streams.lisp (file)

Reader

ssl-check-verify-p (function)

Function: ssl-ctx-free ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-load-global-verify-locations ()

PATHNAMES is a list of pathnames to PEM files containing server and CA certificates. Install these certificates to use for verifying on all SSL connections.
After RELOAD, you need to call this again.

Package

cl+ssl

Source

streams.lisp (file)

Function: ssl-set-global-default-verify-paths ()

Load the system default verification certificates. After RELOAD, you need to call this again.

Package

cl+ssl

Source

streams.lisp (file)

Function: ssl-stream-x509-certificate ()

Package

cl+ssl

Source

streams.lisp (file)

Function: use-certificate-chain-file ()

Loads a PEM encoded certificate chain file CERTIFICATE-CHAIN-FILE
and adds the chain to global context. The certificates must be sorted starting with the subject’s certificate (actual client or server certificate), followed by intermediate CA certificates if applicable, and ending at
the highest level (root) CA. Note: the RELOAD function clears the global context and in particular the loaded certificate chain.

Package

cl+ssl

Source

ffi.lisp (file)

Function: verify-hostname CERT HOSTNAME

Package

cl+ssl

Source

verify-hostname.lisp (file)

6.1.5 Generic functions

Generic Function: decode-certificate FORMAT BYTES

The BYTES must be created by CFFI:MAKE-SHAREABLE-BYTE-VECTOR (because we are going to pass them to CFFI:WITH-POINTER-TO-VECTOR-DATA)

Package

cl+ssl

Source

x509.lisp (file)

Methods

Method: decode-certificate (FORMAT (eql der)) BYTES

Generic Function: ssl-error-code CONDITION

Package

cl+ssl

Methods

Method: ssl-error-code (CONDITION ssl-error-verify)

Source

conditions.lisp (file)

Generic Function: ssl-error-stream CONDITION

Package

cl+ssl

Methods

Method: ssl-error-stream (CONDITION ssl-error-verify)

Source

conditions.lisp (file)

Generic Function: stream-fd STREAM

Package

cl+ssl

Source

streams.lisp (file)

Methods

Method: stream-fd (STREAM fd-stream)

Method: stream-fd STREAM

6.1.6 Conditions

Condition: ssl-error-initialize ()

Package

cl+ssl

Source

conditions.lisp (file)

Direct superclasses

ssl-error (condition)

Direct methods

ssl-error-reason (method)

Direct slots

Slot: reason

Initargs

:reason

Readers

ssl-error-reason (generic function)

Condition: ssl-error-verify ()

This condition is signalled on SSL connection when a peer certificate doesn’t verify.

Package

cl+ssl

Source

conditions.lisp (file)

Direct superclasses

ssl-error (condition)

Direct methods

• ssl-error-code (method)
• ssl-error-stream (method)

Direct slots

Slot: stream

The SSL stream whose peer certificate didn’t verify.

Initargs

:stream

Readers

ssl-error-stream (generic function)

Slot: error-code

The peer certificate verification error code.

Initargs

:error-code

Readers

ssl-error-code (generic function)

6.2 Internal definitions

6.2.1 Constants

Constant: +bio-type-socket+

Package

cl+ssl

Source

bio.lisp (file)

Constant: +bio_ctrl_flush+

Package

cl+ssl

Source

bio.lisp (file)

Constant: +bio_flags_read+

Package

cl+ssl

Source

bio.lisp (file)

Constant: +bio_flags_should_retry+

Package

cl+ssl

Source

bio.lisp (file)

Constant: +bio_flags_write+

Package

cl+ssl

Source

bio.lisp (file)

Constant: +crypto-lock+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +crypto-read+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +crypto-unlock+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +crypto-write+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +default-cipher-list+

Package

cl+ssl

Source

context.lisp (file)

Constant: +dtls1-2-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +dtls1-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-dirname+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-dns+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-ediparty+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-email+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-ipadd+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-othername+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-rid+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-uri+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +gen-x400+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +nid-commonname+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +nid-subject-alt-name+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +rsa_f4+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-ctrl-options+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-ctrl-set-max-proto-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-ctrl-set-min-proto-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-error-none+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-ssl+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-syscall+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-want-connect+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-want-read+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-want-write+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-want-x509-lookup+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-error-zero-return+

Package

cl+ssl

Source

conditions.lisp (file)

Constant: +ssl-filetype-asn1+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-filetype-default+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-filetype-pem+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl-op-all+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl3-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl_ctrl_mode+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl_ctrl_set_sess_cache_mode+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +ssl_mode_accept_moving_write_buffer+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +tls1-1-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +tls1-2-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +tls1-3-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +tls1-version+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-bmpstring+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-iastring+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-octet-string+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-printablestring+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-teletexstring+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-universalstring+

Package

cl+ssl

Source

ffi.lisp (file)

Constant: +v-asn1-utf8string+

Package

cl+ssl

Source

ffi.lisp (file)

6.2.2 Special variables

Special Variable: *bio-lisp-method*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *blockp*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *cl+ssl-crypto-foreign-function-names*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *cl+ssl-ssl-foreign-function-names*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *global-lock*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *late-bound-foreign-function-pointers*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *locks*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *partial-read-p*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *pem-password*

The callback registered with SSL_CTX_set_default_passwd_cb will use this value.

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *socket*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *ssl-check-verify-p*

DEPRECATED.
Use the (MAKE-SSL-CLIENT-STREAM .. :VERIFY ?) to enable/disable verification. MAKE-CONTEXT also allows to enab/disable verification.

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *ssl-global-context*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *ssl-global-method*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *ssl-verify-error-alist*

Package

cl+ssl

Source

conditions.lisp (file)

Special Variable: *thread-counter*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *threads*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *tmp-rsa-key-1024*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *tmp-rsa-key-2048*

Package

cl+ssl

Source

ffi.lisp (file)

Special Variable: *tmp-rsa-key-512*

Package

cl+ssl

Source

ffi.lisp (file)

6.2.3 Macros

Macro: defcfun-late-bound ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: defcfun-versioned ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: define-crypto-function ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: define-crypto-function-ex ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: define-ssl-function ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: define-ssl-function-ex ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: while ()

Package

cl+ssl

Source

ffi.lisp (file)

Macro: with-new-ssl ()

Package

cl+ssl

Source

streams.lisp (file)

Macro: with-pointer-to-vector-data (PTR BUF) &body BODY

Package

cl+ssl

Source

ffi-buffer.lisp (file)

6.2.4 Functions

Function: add-verify-locations CTX LOCATIONS

Package

cl+ssl

Source

context.lisp (file)

Function: asn1-iastring-char-p ()

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-iastring-p ()

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-printable-char-p ()

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-printable-string-p ()

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-string-bytes-vector ASN1-STRING

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-string-data ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: asn1-string-length ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: asn1-string-type ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: asn1-teletex-char-p ()

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-teletex-string-p ()

Package

cl+ssl

Source

x509.lisp (file)

Function: asn1-time-check ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: b/s-replace BUF SEQ &key START1 END1 START2 END2

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Function: bio-new ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: bio-new-lisp ()

Package

cl+ssl

Source

bio.lisp (file)

Function: bio-new-socket ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: bio-set-fd ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: buffer-elt BUF INDEX

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Setf Expander

(setf buffer-elt) (setf expander)

Setf Expander: (setf buffer-elt) BUF INDEX VAL

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Reader

buffer-elt (function)

Writer

set-buffer-elt (function)

Function: buffer-length BUF

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Function: call-with-global-context CONTEXT AUTO-FREE-P BODY-FN

Package

cl+ssl

Source

context.lisp (file)

Function: case-insensitive-match NAME HOSTNAME

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: cert-format-from-path PATH

Package

cl+ssl

Source

x509.lisp (file)

Function: certificate-alt-names CERT

Package

cl+ssl

Source

x509.lisp (file)

Function: certificate-dns-alt-names CERT

Package

cl+ssl

Source

x509.lisp (file)

Function: check-single-wildcard IDENTIFIER WILDCARD-POS

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: check-two-labels-after-wildcard AFTER-WILDCARD

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: check-wildcard-in-leftmost-label IDENTIFIER WILDCARD-POS

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: clear-retry-flags BIO

Package

cl+ssl

Source

bio.lisp (file)

Function: close-socket ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: compat-openssl-version ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: copy-bytes-to-lisp-vector ()

Package

cl+ssl

Source

x509.lisp (file)

Function: crypto-num-locks ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: crypto-set-id-callback ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: crypto-set-locking-callback ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: d2i-x509 ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: decode-asn1-utctime ASN1-TIME

Package

cl+ssl

Source

x509.lisp (file)

Function: default-ssl-method ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: encode-openssl-version ()

Builds a version number to compare OpenSSL against. Note: the _really_ old formats (<= 0.9.4) are not supported.

Package

cl+ssl

Source

ffi.lisp (file)

Function: ensure-ssl-funcall ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: err-error-string ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: err-get-error ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: format-ssl-error-queue STREAM-DESIGNATOR QUEUE-DESIGNATOR

STREAM-DESIGNATOR is the same as CL:FORMAT accepts: T, NIL, or a stream. QUEUE-DESIGNATOR is either a list of error codes (as returned
by READ-SSL-ERROR-QUEUE) or an SSL-ERROR condition.

Package

cl+ssl

Source

conditions.lisp (file)

Function: general-names-free ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: handle-external-format ()

Package

cl+ssl

Source

streams.lisp (file)

Function: init-prng ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: initialize ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: input-wait ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: install-handle-and-bio ()

Package

cl+ssl

Source

streams.lisp (file)

Function: install-key-and-cert ()

Package

cl+ssl

Source

streams.lisp (file)

Function: install-nonblock-flag ()

Package

cl+ssl

Source

streams.lisp (file)

Function: libresslp ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: make-bio-lisp-method ()

Package

cl+ssl

Source

bio.lisp (file)

Function: make-buffer SIZE

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Function: maybe-check-subject-cn DNS-NAMES CERT HOSTNAME

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: maybe-try-match-wildcard NAME HOSTNAME

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: maybe-verify-client-stream ()

Package

cl+ssl

Source

streams.lisp (file)

Function: nonblocking-ssl-funcall ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: openssl-is-at-least ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: openssl-is-not-even ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: openssl-sk-num ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: openssl-sk-value ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: openssl-version-num ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: output-wait ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: rand-bytes ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: rand-seed ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: read-ssl-error-queue ()

Package

cl+ssl

Source

conditions.lisp (file)

Function: remove-trailing-dot STRING

Package

cl+ssl

Source

verify-hostname.lisp (file)

Function: rsa-free ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: rsa-generate-key ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: s/b-replace SEQ BUF &key START1 END1 START2 END2

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Function: seconds-until-deadline ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: set-buffer-elt BUF INDEX VAL

Package

cl+ssl

Source

ffi-buffer.lisp (file)

Setf Expander

(setf buffer-elt) (setf expander)

Function: set-retry-read BIO

Package

cl+ssl

Source

bio.lisp (file)

Function: sk-general-name-num ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: sk-general-name-value ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: sk-num ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: sk-value ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: slurp-stream STREAM

Returns a sequence containing the STREAM bytes; the sequence is created by CFFI:MAKE-SHAREABLE-BYTE-VECTOR, therefore it can safely be passed to CFFI:WITH-POINTER-TO-VECTOR-DATA.

Package

cl+ssl

Source

x509.lisp (file)

Function: ssl-accept ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-connect ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctrl ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-ctrl ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-load-verify-locations ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-new ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-cipher-list ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-cipher-list% ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-client-ca-list ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-default-passwd-cb ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-default-verify-dir ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-default-verify-file ()

Package

cl+ssl

Source

ffi.lisp (file)

Function: ssl-ctx-set-default-verify-paths ()

Package

cl+ssl

Source

ffi.lisp (file)