Provide a default ntci::EncryptionDriver implemented using OpenSSL

cmake/templates/ntccfg_config.h

@@ -106,6 +106,9 @@ namespace ntccfg {
 // driver for a proactor. This driver is available on Linux.
 #define NTC_BUILD_WITH_IORING @NTF_BUILD_WITH_IORING@
 
+// Build with support for OpenSSL as the driver for TLS.
+#define NTC_BUILD_WITH_OPENSSL @NTF_BUILD_WITH_OPENSSL@
+
 // Build with support for being able to configure a processing model where
 // any thread can process I/O for a socket, rather than just a particular
 // thread chosen at the time the socket was created.

configure

@@ -299,6 +299,10 @@ else
     NTF_CONFIGURE_WITH_IORING=0
 fi
 
+if [[ -z "${NTF_CONFIGURE_WITH_OPENSSL}" ]]; then
+    NTF_CONFIGURE_WITH_OPENSSL=1
+fi
+
 if [[ -z "${NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING}" ]]; then
     NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING=1
 fi
@@ -477,6 +481,8 @@ usage()
     echo "    --with-iocp                        Enable the proactor driver implemented with I/O completion ports (Windows only) [${NTF_CONFIGURE_WITH_IOCP}]"
     echo "    --with-ioring                      Enable the proactor driver implemented with 'io_uring' (Linux only) [${NTF_CONFIGURE_WITH_IORING}]"
 
+    echo "    --with-openssl                     Enable the encryption driver implemented with OpenSSL [${NTF_CONFIGURE_WITH_OPENSSL}]"
+
     echo "    --with-dynamic-load-balancing      Enable processing I/O on any thread, rather than a single thread [${NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING}]"
     echo "    --with-thread-scaling              Enable automatic scaling of thread pools [${NTF_CONFIGURE_WITH_THREAD_SCALING}]"
     echo "    --with-deprecated-features         Enable deprecated features [${NTF_CONFIGURE_WITH_DEPRECATED_FEATURES}]"
@@ -648,6 +654,9 @@ while true ; do
         --with-ioring)
             NTF_CONFIGURE_WITH_IORING=1 ; shift ;;
 
+        --with-openssl)
+            NTF_CONFIGURE_WITH_OPENSSL=1 ; shift ;;
+
         --with-dynamic-load-balancing)
             NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING=1 ; shift ;;
         --with-thread-scaling)
@@ -757,6 +766,9 @@ while true ; do
         --without-ioring)
             NTF_CONFIGURE_WITH_IORING=0 ; shift ;;
 
+        --without-openssl)
+            NTF_CONFIGURE_WITH_OPENSSL=0 ; shift ;;
+
         --without-dynamic-load-balancing)
             NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING=0 ; shift ;;
         --without-thread-scaling)
@@ -879,6 +891,8 @@ export NTF_CONFIGURE_WITH_KQUEUE
 export NTF_CONFIGURE_WITH_IOCP
 export NTF_CONFIGURE_WITH_IORING
 
+export NTF_CONFIGURE_WITH_OPENSSL
+
 export NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING
 export NTF_CONFIGURE_WITH_THREAD_SCALING
 export NTF_CONFIGURE_WITH_DEPRECATED_FEATURES

configure.cmd

@@ -105,6 +105,10 @@ IF NOT DEFINED NTF_CONFIGURE_WITH_IOCP (
     set NTF_CONFIGURE_WITH_IOCP=1
 )
 
+IF NOT DEFINED NTF_CONFIGURE_WITH_OPENSSL (
+    set NTF_CONFIGURE_WITH_OPENSSL=1
+)
+
 IF NOT DEFINED NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING (
     set NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING=1
 )
@@ -322,6 +326,10 @@ if not "%1"=="" (
         set NTF_CONFIGURE_WITH_IOCP=1
     )
 
+    if "%1"=="--with-openssl" (
+        set NTF_CONFIGURE_WITH_OPENSSL=1
+    )
+
     if "%1"=="--with-dynamic-load-balancing" (
         set NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING=1
     )
@@ -450,6 +458,10 @@ if not "%1"=="" (
         set NTF_CONFIGURE_WITH_IOCP=0
     )
 
+    if "%1"=="--without-openssl" (
+        set NTF_CONFIGURE_WITH_OPENSSL=0
+    )
+
     if "%1"=="--without-dynamic-load-balancing" (
         set NTF_CONFIGURE_WITH_DYNAMIC_LOAD_BALANCING=0
     )
@@ -840,6 +852,8 @@ echo     --with-select                    Enable the reactor driver implemented
 echo     --with-poll                      Enable the reactor driver implemented with 'poll'
 echo     --with-iocp                      Enable the proactor driver that depends on I/O completion ports
 
+echo     --with-openssl                   Enable the encryption driver implemented with OpenSSL
+
 echo     --with-dynamic-load-balancing    Enable processing I/O on any thread, rather than a single thread
 echo     --with-thread-scaling            Enable automatic scaling of thread pools
 echo     --with-deprecated-features       Enable deprecated features

groups/ntc/CMakeLists.txt

@@ -28,7 +28,7 @@ add_library(ntc STATIC)
 bbs_setup_target_uor(
     ntc
     NO_EMIT_PKG_CONFIG_FILE
-    PRIVATE_PACKAGES ntcm ntcs ntcq ntcd ntcdns ntcu ntcr ntcp ntco)
+    PRIVATE_PACKAGES ntcm ntcs ntcq ntcd ntcdns ntctls ntcu ntcr ntcp ntco)
 
 target_include_directories(
     ntc

groups/ntc/group/ntc.dep

@@ -2,3 +2,4 @@ nts
 bal
 bdl
 bsl
+openssl

groups/ntc/group/ntc.mem

@@ -11,4 +11,5 @@ ntcu
 ntcr
 ntcp
 ntco
+ntctls
 ntcf

groups/ntc/ntcf/ntcf_system.cpp

@@ -59,6 +59,8 @@ BSLS_IDENT_RCSID(ntcf_system_cpp, "$Id$ $CSID$")
 #include <ntco_pollset.h>
 #include <ntco_select.h>
 
+#include <ntctls_plugin.h>
+
 #include <bdlbb_pooledblobbufferfactory.h>
 
 #include <bslma_allocator.h>
@@ -1339,6 +1341,10 @@ ntsa::Error System::createEncryptionClient(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {
@@ -1361,6 +1367,10 @@ ntsa::Error System::createEncryptionClient(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {
@@ -1384,6 +1394,10 @@ ntsa::Error System::createEncryptionClient(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {
@@ -1406,6 +1420,10 @@ ntsa::Error System::createEncryptionServer(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {
@@ -1426,6 +1444,10 @@ ntsa::Error System::createEncryptionResource(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {
@@ -1446,6 +1468,10 @@ ntsa::Error System::createEncryptionServer(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {
@@ -1469,6 +1495,10 @@ ntsa::Error System::createEncryptionServer(
     error = ntcf::System::initialize();
     BSLS_ASSERT_OPT(!error);
 
+#if NTC_BUILD_WITH_OPENSSL
+    ntctls::Plugin::initialize();
+#endif
+
     bsl::shared_ptr<ntci::EncryptionDriver> encryptionDriver;
     error = ntcs::Plugin::lookupEncryptionDriver(&encryptionDriver);
     if (error) {