/usr/share/lua/5.1/http/client.lua is in lua-http 0.1-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 | local ca = require "cqueues.auxlib"
local cs = require "cqueues.socket"
local http_tls = require "http.tls"
local connection_common = require "http.connection_common"
local onerror = connection_common.onerror
local new_h1_connection = require "http.h1_connection".new
local new_h2_connection = require "http.h2_connection".new
local openssl_ssl = require "openssl.ssl"
local openssl_ctx = require "openssl.ssl.context"
local openssl_verify_param = require "openssl.x509.verify_param"
local EOF = require "lpeg".P(-1)
local IPv4address = require "lpeg_patterns.IPv4".IPv4address
local IPv6addrz = require "lpeg_patterns.IPv6".IPv6addrz
local IPaddress = (IPv4address + IPv6addrz) * EOF
-- Create a shared 'default' TLS context
local default_ctx = http_tls.new_client_context()
local function negotiate(s, options, timeout)
s:onerror(onerror)
local tls = options.tls
local version = options.version
if tls then
local ctx = options.ctx or default_ctx
local ssl = openssl_ssl.new(ctx)
local ip = options.host and IPaddress:match(options.host)
if options.sendname ~= nil then
if options.sendname then -- false indicates no sendname wanted
ssl:setHostName(options.sendname)
end
elseif options.host and not ip then
ssl:setHostName(options.host)
end
if http_tls.has_alpn then
if version == nil then
ssl:setAlpnProtos({"h2", "http/1.1"})
elseif version == 1.1 then
ssl:setAlpnProtos({"http/1.1"})
elseif version == 2 then
ssl:setAlpnProtos({"h2"})
end
end
if version == 2 then
ssl:setOptions(openssl_ctx.OP_NO_TLSv1 + openssl_ctx.OP_NO_TLSv1_1)
end
if options.host and http_tls.has_hostname_validation then
local params = openssl_verify_param.new()
if ip then
params:setIP(options.host)
else
params:setHost(options.host)
end
-- Allow user defined params to override
local old = ssl:getParam()
old:inherit(params)
ssl:setParam(old)
end
local ok, err, errno = s:starttls(ssl, timeout)
if not ok then
return nil, err, errno
end
end
if version == nil then
local ssl = s:checktls()
if ssl then
if http_tls.has_alpn and ssl:getAlpnSelected() == "h2" then
version = 2
else
version = 1.1
end
else
-- TODO: attempt upgrading http1 to http2
version = 1.1
end
end
if version < 2 then
return new_h1_connection(s, "client", version)
elseif version == 2 then
return new_h2_connection(s, "client", options.h2_settings)
else
error("Unknown HTTP version: " .. tostring(version))
end
end
local function connect(options, timeout)
local s, err, errno = ca.fileresult(cs.connect {
family = options.family;
host = options.host;
port = options.port;
path = options.path;
sendname = false;
v6only = options.v6only;
nodelay = true;
})
if s == nil then
return nil, err, errno
end
return negotiate(s, options, timeout)
end
return {
negotiate = negotiate;
connect = connect;
}
|