From 8f59665f6635c0376c88bb886c635496d2cf3479 Mon Sep 17 00:00:00 2001 From: Sebastiaan Koppe Date: Sat, 8 Apr 2023 13:17:07 +0200 Subject: [PATCH] Add staticssl dub config to link to openssl statically (linux only) --- README.md | 7 ++ dub.json | 7 ++ source/requests/ssl_adapter.d | 4 + source/requests/ssl_adapter_static.d | 128 +++++++++++++++++++++++++++ 4 files changed, 146 insertions(+) create mode 100644 source/requests/ssl_adapter_static.d diff --git a/README.md b/README.md index b5564e8..fabcd48 100644 --- a/README.md +++ b/README.md @@ -30,6 +30,7 @@ API docs: [Wiki](https://ikod.github.io/dlang-requests/) - [SSL](#ssl-settings) - [FTP](#ftp-requests) - [Request pool](#requests-pool) +- [Static build](#static-build) ### Library configurations ### @@ -1060,3 +1061,9 @@ Exception: 2 redirects reached maxRedirects 2. dlang-requests supports IDNA through `idna` package. It provide correct conversion between unicode domain names and punycode, but have limited ability to check names for standard compliance. + +### Static Build ### + +By default dlang-requests links to the openssl and crypto libraries dynamically. There is a `staticssl` dub configuration (linux only!) in order to link statically to these libraries. + +This is often used to generate a "distro-less" binaries, typically done on `alpine` using musl's libc. diff --git a/dub.json b/dub.json index ddac5c9..a47bf86 100755 --- a/dub.json +++ b/dub.json @@ -12,6 +12,13 @@ "configurations": [ { "name": "std" + }, + { + "name": "staticssl", + "versions": ["staticssl"], + "dflags" : ["-static"], + "libs": ["ssl", "crypto"], + "platforms": ["linux"] } ], "subPackages": [ diff --git a/source/requests/ssl_adapter.d b/source/requests/ssl_adapter.d index 2b6f571..28774fd 100755 --- a/source/requests/ssl_adapter.d +++ b/source/requests/ssl_adapter.d @@ -1,5 +1,9 @@ module requests.ssl_adapter; +version(staticssl) { + public import requests.ssl_adapter_static; +} else: + import std.stdio; import std.string; import std.format; diff --git a/source/requests/ssl_adapter_static.d b/source/requests/ssl_adapter_static.d new file mode 100644 index 0000000..00a2059 --- /dev/null +++ b/source/requests/ssl_adapter_static.d @@ -0,0 +1,128 @@ +module requests.ssl_adapter_static; + +version(staticssl): + +import std.typecons; +import core.stdc.stdlib; +import core.stdc.config; + +version(Windows) { + static assert("static build not implemented for windows"); +} + +struct SSL {}; +struct SSL_CTX {}; +struct SSL_METHOD {}; + +immutable int TLS_ANY_VERSION = 0x10000; +immutable int TLS1_VERSION = 0x0301; +immutable int TLS1_2_VERSION = 0x0303; + +private alias Version = Tuple!(int, "major", int, "minor"); + +struct openssl { + static Version reportVersion() @nogc nothrow pure { + return OpenSSL_version_detect(); + } + + static private Version OpenSSL_version_detect() @nogc nothrow pure { + auto v = OpenSSL_version_num() & 0xffffffff; + return Version((v>>>20) & 0xff, (v>>>28) & 0xff); + } + + static int SSL_CTX_set_min_proto_version(SSL_CTX* ctx, int v) @nogc nothrow { + int r = cast(int)SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, cast(c_long)v, null); + return r; + } + static int SSL_CTX_set_max_proto_version(SSL_CTX* ctx, int v) @nogc nothrow { + int r = cast(int)SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MAX_PROTO_VERSION, cast(c_long)v, null); + return r; + } + + static c_long SSL_set_tlsext_host_name(SSL* ssl, const char* host) @nogc nothrow { + enum SSL_CTRL_SET_TLSEXT_HOSTNAME = 55; + enum TLSEXT_NAMETYPE_host_name = 0; + return SSL_ctrl(ssl, SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name, cast(void*)host); + } + // extern (C) { + alias SSL_library_init = .SSL_library_init; + alias OpenSSL_add_all_ciphers = .OpenSSL_add_all_ciphers; + alias OpenSSL_add_all_digests = .OpenSSL_add_all_digests; + alias OpenSSL_version_num = .OpenSSL_version_num; + alias SSL_load_error_strings = .SSL_load_error_strings; + alias OPENSSL_init_ssl = .OPENSSL_init_ssl; + alias OPENSSL_init_crypto = .OPENSSL_init_crypto; + alias TLSv1_client_method = .TLSv1_client_method; + alias TLSv1_2_client_method = .TLSv1_2_client_method; + alias SSLv23_client_method = .SSLv23_client_method; + alias TLS_method = .TLS_method; + alias SSL_CTX_new = .SSL_CTX_new; + alias SSL_CTX_set_default_verify_paths = .SSL_CTX_set_default_verify_paths; + alias SSL_CTX_load_verify_locations = .SSL_CTX_load_verify_locations; + alias SSL_CTX_set_verify = .SSL_CTX_set_verify; + alias SSL_CTX_use_PrivateKey_file = .SSL_CTX_use_PrivateKey_file; + alias SSL_CTX_use_certificate_file = .SSL_CTX_use_certificate_file; + alias SSL_CTX_set_cipher_list = .SSL_CTX_set_cipher_list; + + /* + * + * # define SSL_CTRL_SET_MIN_PROTO_VERSION 123 + * # define SSL_CTRL_SET_MAX_PROTO_VERSION 124 + */ + enum int SSL_CTRL_SET_MIN_PROTO_VERSION = 123; + enum int SSL_CTRL_SET_MAX_PROTO_VERSION = 124; + alias SSL_new = .SSL_new; + alias SSL_set_fd = .SSL_set_fd; + alias SSL_connect = .SSL_connect; + alias SSL_read = .SSL_read; + alias SSL_write = .SSL_write; + alias SSL_free = .SSL_free; + alias SSL_CTX_free = .SSL_CTX_free; + alias SSL_get_error = .SSL_get_error; + alias ERR_reason_error_string = .ERR_reason_error_string; + alias ERR_get_error = .ERR_get_error; + alias SSL_CTX_ctrl = .SSL_CTX_ctrl; + alias SSL_ctrl = .SSL_ctrl; + // } +} + +extern (C) { + static int SSL_library_init() @nogc nothrow @trusted; + static void OpenSSL_add_all_ciphers() @nogc nothrow @trusted; + static void OpenSSL_add_all_digests() @nogc nothrow @trusted; + static c_ulong OpenSSL_version_num() @nogc nothrow @trusted pure; + static void SSL_load_error_strings() @nogc nothrow @trusted; + static int OPENSSL_init_ssl(ulong, void*) @nogc nothrow @trusted; + static int OPENSSL_init_crypto(ulong, void*) @nogc nothrow @trusted; + static SSL_METHOD* TLSv1_client_method() nothrow @trusted; + static SSL_METHOD* TLSv1_2_client_method() nothrow @trusted; + static SSL_METHOD* SSLv23_client_method() nothrow @trusted; + static SSL_METHOD* TLS_method() nothrow @trusted; + static SSL_CTX* SSL_CTX_new(SSL_METHOD* method) @nogc nothrow @trusted; + static int SSL_CTX_set_default_verify_paths(SSL_CTX* ctx) @nogc nothrow; + static int SSL_CTX_load_verify_locations(SSL_CTX* ctx, char* CAFile, char* CAPath) @nogc nothrow; + static void SSL_CTX_set_verify(SSL_CTX* ctx, int mode, void* callback) @nogc nothrow; + static int SSL_CTX_use_PrivateKey_file(SSL_CTX* ctx, const char* file, int type) @nogc nothrow; + static int SSL_CTX_use_certificate_file(SSL_CTX* ctx, const char* file, int type) @nogc nothrow; + static int SSL_CTX_set_cipher_list(SSL_CTX* ssl_ctx, const char* c) @nogc nothrow; + + /* + * + * # define SSL_CTRL_SET_MIN_PROTO_VERSION 123 + * # define SSL_CTRL_SET_MAX_PROTO_VERSION 124 + */ + enum int SSL_CTRL_SET_MIN_PROTO_VERSION = 123; + enum int SSL_CTRL_SET_MAX_PROTO_VERSION = 124; + static SSL* SSL_new(SSL_CTX* ctx) @nogc nothrow; + static int SSL_set_fd(SSL* ssl, int fd) @nogc nothrow; + static int SSL_connect(SSL* ssl) @nogc nothrow; + static int SSL_read(SSL* ssl, void *b, int n) @nogc nothrow; + static int SSL_write(SSL* ssl, const void *b, int n) @nogc nothrow; + static void SSL_free(SSL* ssl) @nogc nothrow @trusted; + static void SSL_CTX_free(SSL_CTX* ctx) @nogc nothrow @trusted; + static int SSL_get_error(SSL* ssl, int err) @nogc nothrow; + static char* ERR_reason_error_string(c_ulong code) @nogc nothrow; + static c_ulong ERR_get_error() @nogc nothrow; + static c_ulong SSL_CTX_ctrl(SSL_CTX*, int, c_long, void*) @nogc nothrow; + static c_ulong SSL_ctrl(SSL*, int, c_long, void*) @nogc nothrow; +}