/* Licensed to the Apache Software Foundation (ASF) under one or more

 * contributor license agreements.  See the NOTICE file distributed with

 * this work for additional information regarding copyright ownership.

 * The ASF licenses this file to You under the Apache License, Version 2.0

 * (the "License"); you may not use this file except in compliance with

 * the License.  You may obtain a copy of the License at

 *

 *     http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

/*

   ** This program is based on ZeusBench V1.0 written by Adam Twiss

   ** which is Copyright (c) 1996 by Zeus Technology Ltd. http://www.zeustech.net/

   **

   ** This software is provided "as is" and any express or implied waranties,

   ** including but not limited to, the implied warranties of merchantability and

   ** fitness for a particular purpose are disclaimed.  In no event shall

   ** Zeus Technology Ltd. be liable for any direct, indirect, incidental, special,

   ** exemplary, or consequential damaged (including, but not limited to,

   ** procurement of substitute good or services; loss of use, data, or profits;

   ** or business interruption) however caused and on theory of liability.  Whether

   ** in contract, strict liability or tort (including negligence or otherwise)

   ** arising in any way out of the use of this software, even if advised of the

   ** possibility of such damage.

   **

 */

/*

   ** HISTORY:

   **    - Originally written by Adam Twiss <adam@zeus.co.uk>, March 1996

   **      with input from Mike Belshe <mbelshe@netscape.com> and

   **      Michael Campanella <campanella@stevms.enet.dec.com>

   **    - Enhanced by Dean Gaudet <dgaudet@apache.org>, November 1997

   **    - Cleaned up by Ralf S. Engelschall <rse@apache.org>, March 1998

   **    - POST and verbosity by Kurt Sussman <kls@merlot.com>, August 1998

   **    - HTML table output added by David N. Welton <davidw@prosa.it>, January 1999

   **    - Added Cookie, Arbitrary header and auth support. <dirkx@webweaving.org>, April 1999

   ** Version 1.3d

   **    - Increased version number - as some of the socket/error handling has

   **      fundamentally changed - and will give fundamentally different results

   **      in situations where a server is dropping requests. Therefore you can

   **      no longer compare results of AB as easily. Hence the inc of the version.

   **      They should be closer to the truth though. Sander & <dirkx@covalent.net>, End 2000.

   **    - Fixed proxy functionality, added median/mean statistics, added gnuplot

   **      output option, added _experimental/rudimentary_ SSL support. Added

   **      confidence guestimators and warnings. Sander & <dirkx@covalent.net>, End 2000

   **    - Fixed serious int overflow issues which would cause realistic (longer

   **      than a few minutes) run's to have wrong (but believable) results. Added

   **      trapping of connection errors which influenced measurements.

   **      Contributed by Sander Temme, Early 2001

   ** Version 1.3e

   **    - Changed timeout behavour during write to work whilst the sockets

   **      are filling up and apr_write() does writes a few - but not all.

   **      This will potentially change results. <dirkx@webweaving.org>, April 2001

   ** Version 2.0.36-dev

   **    Improvements to concurrent processing:

   **      - Enabled non-blocking connect()s.

   **      - Prevent blocking calls to apr_socket_recv() (thereby allowing AB to

   **        manage its entire set of socket descriptors).

   **      - Any error returned from apr_socket_recv() that is not EAGAIN or EOF

   **        is now treated as fatal.

   **      Contributed by Aaron Bannert, April 24, 2002

   **

   ** Version 2.0.36-2

   **     Internalized the version string - this string is part

   **     of the Agent: header and the result output.

   **

   ** Version 2.0.37-dev

   **     Adopted SSL code by Madhu Mathihalli <madhusudan_mathihalli@hp.com>

   **     [PATCH] ab with SSL support  Posted Wed, 15 Aug 2001 20:55:06 GMT

   **     Introduces four 'if (int == value)' tests per non-ssl request.

   **

   ** Version 2.0.40-dev

   **     Switched to the new abstract pollset API, allowing ab to

   **     take advantage of future apr_pollset_t scalability improvements.

   **     Contributed by Brian Pane, August 31, 2002

   **

   ** Version 2.3

   **     SIGINT now triggers output_results().

   **     Contributed by colm, March 30, 2006

   **/

/* Note: this version string should start with \d+[\d\.]* and be a valid

 * string for an HTTP Agent: header when prefixed with 'ApacheBench/'.

 * It should reflect the version of AB - and not that of the apache server

 * it happens to accompany. And it should be updated or changed whenever

 * the results are no longer fundamentally comparable to the results of

 * a previous version of ab. Either due to a change in the logic of

 * ab - or to due to a change in the distribution it is compiled with

 * (such as an APR change in for example blocking).

 */

#define AP_AB_BASEREVISION "2.3"

/*

 * BUGS:

 *

 * - uses strcpy/etc.

 * - has various other poor buffer attacks related to the lazy parsing of

 *   response headers from the server

 * - doesn't implement much of HTTP/1.x, only accepts certain forms of

 *   responses

 * - (performance problem) heavy use of strstr shows up top in profile

 *   only an issue for loopback usage

 */

/*  -------------------------------------------------------------------- */

#if 'A' != 0x41

/* Hmmm... This source code isn't being compiled in ASCII.

 * In order for data that flows over the network to make

 * sense, we need to translate to/from ASCII.

 */

#define NOT_ASCII

#endif

/* affects include files on Solaris */

#define BSD_COMP

#include "apr.h"

#include "apr_signal.h"

#include "apr_strings.h"

#include "apr_network_io.h"

#include "apr_file_io.h"

#include "apr_time.h"

#include "apr_getopt.h"

#include "apr_general.h"

#include "apr_lib.h"

#include "apr_portable.h"

#include "ap_release.h"

#include "apr_poll.h"

#define APR_WANT_STRFUNC

#include "apr_want.h"

#include "apr_base64.h"

#ifdef NOT_ASCII

#include "apr_xlate.h"

#endif

#if APR_HAVE_STDIO_H

#include <stdio.h>

#endif

#if APR_HAVE_STDLIB_H

#include <stdlib.h>

#endif

#if APR_HAVE_UNISTD_H

#include <unistd.h> /* for getpid() */

#endif

#if !defined(WIN32) && !defined(NETWARE)

#include "ap_config_auto.h"

#endif

#if defined(HAVE_OPENSSL)

#include <openssl/rsa.h>

#include <openssl/crypto.h>

#include <openssl/x509.h>

#include <openssl/pem.h>

#include <openssl/err.h>

#include <openssl/ssl.h>

#include <openssl/rand.h>

#define USE_SSL

#define SK_NUM(x) sk_X509_num(x)

#define SK_VALUE(x,y) sk_X509_value(x,y)

typedef STACK_OF(X509) X509_STACK_TYPE;

#if defined(_MSC_VER) && !defined(LIBRESSL_VERSION_NUMBER)

/* The following logic ensures we correctly glue FILE* within one CRT used

 * by the OpenSSL library build to another CRT used by the ab.exe build.

 * This became especially problematic with Visual Studio 2015.

 */

#include <openssl/applink.c>

#endif

#endif

#if defined(USE_SSL)

#if (OPENSSL_VERSION_NUMBER >= 0x00909000)

#define AB_SSL_METHOD_CONST const

#else

#define AB_SSL_METHOD_CONST

#endif

#if (OPENSSL_VERSION_NUMBER >= 0x0090707f)

#define AB_SSL_CIPHER_CONST const

#else

#define AB_SSL_CIPHER_CONST

#endif

#ifdef SSL_OP_NO_TLSv1_2

#define HAVE_TLSV1_X

#endif

#if !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name)

#define HAVE_TLSEXT

#endif

#if defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x2060000f

#define SSL_CTRL_SET_MIN_PROTO_VERSION 123

#define SSL_CTRL_SET_MAX_PROTO_VERSION 124

#define SSL_CTX_set_min_proto_version(ctx, version) \

   SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, version, NULL)

#define SSL_CTX_set_max_proto_version(ctx, version) \

   SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL)

#endif

#endif

#include <math.h>

#if APR_HAVE_CTYPE_H

#include <ctype.h>

#endif

#if APR_HAVE_LIMITS_H

#include <limits.h>

#endif

/* ------------------- DEFINITIONS -------------------------- */

#ifndef LLONG_MAX

#define AB_MAX APR_INT64_C(0x7fffffffffffffff)

#else

#define AB_MAX LLONG_MAX

#endif

/* maximum number of requests on a time limited test */

#define MAX_REQUESTS (INT_MAX > 50000 ? 50000 : INT_MAX)

/* connection state

 * don't add enums or rearrange or otherwise change values without

 * visiting set_conn_state()

 */

typedef enum {

    STATE_UNCONNECTED = 0,

    STATE_CONNECTING,           /* TCP connect initiated, but we don't

                                 * know if it worked yet

                                 */

    STATE_CONNECTED,            /* we know TCP connect completed */

    STATE_READ

} connect_state_e;

#define CBUFFSIZE (8192)

struct connection {

    apr_pool_t *ctx;

    apr_socket_t *aprsock;

    apr_pollfd_t pollfd;

    int state;

    apr_size_t read;            /* amount of bytes read */

    apr_size_t bread;           /* amount of body read */

    apr_size_t rwrite, rwrote;  /* keep pointers in what we write - across

                                 * EAGAINs */

    apr_size_t length;          /* Content-Length value used for keep-alive */

    char cbuff[CBUFFSIZE];      /* a buffer to store server response header */

    int cbx;                    /* offset in cbuffer */

    int keepalive;              /* non-zero if a keep-alive request */

    int gotheader;              /* non-zero if we have the entire header in

                                 * cbuff */

    apr_time_t start,           /* Start of connection */

               connect,         /* Connected, start writing */

               endwrite,        /* Request written */

               beginread,       /* First byte of input */

               done;            /* Connection closed */

    int socknum;

#ifdef USE_SSL

    SSL *ssl;

#endif

};

struct data {

    apr_time_t starttime;         /* start time of connection */

    apr_interval_time_t waittime; /* between request and reading response */

    apr_interval_time_t ctime;    /* time to connect */

    apr_interval_time_t time;     /* time for connection */

};

#define ap_min(a,b) (((a)<(b))?(a):(b))

#define ap_max(a,b) (((a)>(b))?(a):(b))

#define ap_round_ms(a) ((apr_time_t)((a) + 500)/1000)

#define ap_double_ms(a) ((double)(a)/1000.0)

#define MAX_CONCURRENCY 20000

/* --------------------- GLOBALS ---------------------------- */

int verbosity = 0;      /* no verbosity by default */

int recverrok = 0;      /* ok to proceed after socket receive errors */

enum {NO_METH = 0, GET, HEAD, PUT, POST, CUSTOM_METHOD} method = NO_METH;

const char *method_str[] = {"bug", "GET", "HEAD", "PUT", "POST", ""};

int send_body = 0;      /* non-zero if sending body with request */

int requests = 1;       /* Number of requests to make */

int heartbeatres = 100; /* How often do we say we're alive */

int concurrency = 1;    /* Number of multiple requests to make */

int percentile = 1;     /* Show percentile served */

int nolength = 0;       /* Accept variable document length */

int confidence = 1;     /* Show confidence estimator and warnings */

int tlimit = 0;         /* time limit in secs */

int keepalive = 0;      /* try and do keepalive connections */

int windowsize = 0;     /* we use the OS default window size */

char servername[1024];  /* name that server reports */

char *hostname;         /* host name from URL */

const char *host_field;       /* value of "Host:" header field */

const char *path;             /* path name */

char *postdata;         /* *buffer containing data from postfile */

apr_size_t postlen = 0; /* length of data to be POSTed */

char *content_type = NULL;     /* content type to put in POST header */

const char *cookie,           /* optional cookie line */

           *auth,             /* optional (basic/uuencoded) auhentication */

           *hdrs;             /* optional arbitrary headers */

apr_port_t port;        /* port number */

char *proxyhost = NULL; /* proxy host name */

int proxyport = 0;      /* proxy port */

const char *connecthost;

const char *myhost;

apr_port_t connectport;

const char *gnuplot;          /* GNUplot file */

const char *csvperc;          /* CSV Percentile file */

const char *fullurl;

const char *colonhost;

int isproxy = 0;

apr_interval_time_t aprtimeout = apr_time_from_sec(30); /* timeout value */

/* overrides for ab-generated common headers */

const char *opt_host;   /* which optional "Host:" header specified, if any */

int opt_useragent = 0;  /* was an optional "User-Agent:" header specified? */

int opt_accept = 0;     /* was an optional "Accept:" header specified? */

 /*

  * XXX - this is now a per read/write transact type of value

  */

int use_html = 0;       /* use html in the report */

const char *tablestring;

const char *trstring;

const char *tdstring;

apr_size_t doclen = 0;     /* the length the document should be */

apr_int64_t totalread = 0;    /* total number of bytes read */

apr_int64_t totalbread = 0;   /* totoal amount of entity body read */

apr_int64_t totalposted = 0;  /* total number of bytes posted, inc. headers */

int started = 0;           /* number of requests started, so no excess */

int done = 0;              /* number of requests we have done */

int doneka = 0;            /* number of keep alive connections done */

int good = 0, bad = 0;     /* number of good and bad requests */

int epipe = 0;             /* number of broken pipe writes */

int err_length = 0;        /* requests failed due to response length */

int err_conn = 0;          /* requests failed due to connection drop */

int err_recv = 0;          /* requests failed due to broken read */

int err_except = 0;        /* requests failed due to exception */

int err_response = 0;      /* requests with invalid or non-200 response */

#ifdef USE_SSL

int is_ssl;

SSL_CTX *ssl_ctx;

char *ssl_cipher = NULL;

char *ssl_info = NULL;

char *ssl_cert = NULL;

#if OPENSSL_VERSION_NUMBER >= 0x10002000L

char *ssl_tmp_key = NULL;

#endif

BIO *bio_out,*bio_err;

#ifdef HAVE_TLSEXT

int tls_use_sni = 1;         /* used by default, -I disables it */

const char *tls_sni = NULL; /* 'opt_host' if any, 'hostname' otherwise */

#endif

#endif

apr_time_t start, lasttime, stoptime;

/* global request (and its length) */

char _request[8192];

char *request = _request;

apr_size_t reqlen;

int requests_initialized = 0;

/* one global throw-away buffer to read stuff into */

char buffer[8192];

/* interesting percentiles */

int percs[] = {50, 66, 75, 80, 90, 95, 98, 99, 100};

struct connection *con;     /* connection array */

struct data *stats;         /* data for each request */

apr_pool_t *cntxt;

apr_pollset_t *readbits;

apr_sockaddr_t *mysa;

apr_sockaddr_t *destsa;

#ifdef NOT_ASCII

apr_xlate_t *from_ascii, *to_ascii;

#endif

static void write_request(struct connection * c);

static void close_connection(struct connection * c);

/* --------------------------------------------------------- */

/* simple little function to write an error string and exit */

static void err(const char *s)

{

    fprintf(stderr, "%s\n", s);

    if (done)

        printf("Total of %d requests completed\n" , done);

    exit(1);

}

/* simple little function to write an APR error string and exit */

static void apr_err(const char *s, apr_status_t rv)

{

    char buf[120];

    fprintf(stderr,

        "%s: %s (%d)\n",

        s, apr_strerror(rv, buf, sizeof buf), rv);

    if (done)

        printf("Total of %d requests completed\n" , done);

    exit(rv);

}

static void *xmalloc(size_t size)

{

    void *ret = malloc(size);

    if (ret == NULL) {

        fprintf(stderr, "Could not allocate memory (%"

                APR_SIZE_T_FMT" bytes)\n", size);

        exit(1);

    }

    return ret;

}

static void *xcalloc(size_t num, size_t size)

{

    void *ret = calloc(num, size);

    if (ret == NULL) {

        fprintf(stderr, "Could not allocate memory (%"

                APR_SIZE_T_FMT" bytes)\n", size*num);

        exit(1);

    }

    return ret;

}

static char *xstrdup(const char *s)

{

    char *ret = strdup(s);

    if (ret == NULL) {

        fprintf(stderr, "Could not allocate memory (%"

                APR_SIZE_T_FMT " bytes)\n", strlen(s));

        exit(1);

    }

    return ret;

}

/*

 * Similar to standard strstr() but we ignore case in this version.

 * Copied from ap_strcasestr().

 */

static char *xstrcasestr(const char *s1, const char *s2)

{

    char *p1, *p2;

    if (*s2 == '\0') {

        /* an empty s2 */

        return((char *)s1);

    }

    while(1) {

        for ( ; (*s1 != '\0') && (apr_tolower(*s1) != apr_tolower(*s2)); s1++);

        if (*s1 == '\0') {

            return(NULL);

        }

        /* found first character of s2, see if the rest matches */

        p1 = (char *)s1;

        p2 = (char *)s2;

        for (++p1, ++p2; apr_tolower(*p1) == apr_tolower(*p2); ++p1, ++p2) {

            if (*p1 == '\0') {

                /* both strings ended together */

                return((char *)s1);

            }

        }

        if (*p2 == '\0') {

            /* second string ended, a match */

            break;

        }

        /* didn't find a match here, try starting at next character in s1 */

        s1++;

    }

    return((char *)s1);

}

/* pool abort function */

static int abort_on_oom(int retcode)

{

    fprintf(stderr, "Could not allocate memory\n");

    exit(1);

    /* not reached */

    return retcode;

}

static void set_polled_events(struct connection *c, apr_int16_t new_reqevents)

{

    apr_status_t rv;

    if (c->pollfd.reqevents != new_reqevents) {

        if (c->pollfd.reqevents != 0) {

            rv = apr_pollset_remove(readbits, &c->pollfd);

            if (rv != APR_SUCCESS) {

                apr_err("apr_pollset_remove()", rv);

            }

        }

        if (new_reqevents != 0) {

            c->pollfd.reqevents = new_reqevents;

            rv = apr_pollset_add(readbits, &c->pollfd);

            if (rv != APR_SUCCESS) {

                apr_err("apr_pollset_add()", rv);

            }

        }

    }

}

static void set_conn_state(struct connection *c, connect_state_e new_state)

{

    apr_int16_t events_by_state[] = {

        0,           /* for STATE_UNCONNECTED */

        APR_POLLOUT, /* for STATE_CONNECTING */

        APR_POLLIN,  /* for STATE_CONNECTED; we don't poll in this state,

                      * so prepare for polling in the following state --

                      * STATE_READ

                      */

        APR_POLLIN   /* for STATE_READ */

    };

    c->state = new_state;

    set_polled_events(c, events_by_state[new_state]);

}

/* --------------------------------------------------------- */

/* write out request to a connection - assumes we can write

 * (small) request out in one go into our new socket buffer

 *

 */

#ifdef USE_SSL

static long ssl_print_cb(BIO *bio,int cmd,const char *argp,int argi,long argl,long ret)

{

    BIO *out;

    out=(BIO *)BIO_get_callback_arg(bio);

    if (out == NULL) return(ret);

    if (cmd == (BIO_CB_READ|BIO_CB_RETURN)) {

        BIO_printf(out,"read from %p [%p] (%d bytes => %ld (0x%lX))\n",

                   bio, argp, argi, ret, ret);

        BIO_dump(out,(char *)argp,(int)ret);

        return(ret);

    }

    else if (cmd == (BIO_CB_WRITE|BIO_CB_RETURN)) {

        BIO_printf(out,"write to %p [%p] (%d bytes => %ld (0x%lX))\n",

                   bio, argp, argi, ret, ret);

        BIO_dump(out,(char *)argp,(int)ret);

    }

    return ret;

}

static void ssl_state_cb(const SSL *s, int w, int r)

{

    if (w & SSL_CB_ALERT) {

        BIO_printf(bio_err, "SSL/TLS Alert [%s] %s:%s\n",

                   (w & SSL_CB_READ ? "read" : "write"),

                   SSL_alert_type_string_long(r),

                   SSL_alert_desc_string_long(r));

    } else if (w & SSL_CB_LOOP) {

        BIO_printf(bio_err, "SSL/TLS State [%s] %s\n",

                   (SSL_in_connect_init((SSL*)s) ? "connect" : "-"),

                   SSL_state_string_long(s));

    } else if (w & (SSL_CB_HANDSHAKE_START|SSL_CB_HANDSHAKE_DONE)) {

        BIO_printf(bio_err, "SSL/TLS Handshake [%s] %s\n",

                   (w & SSL_CB_HANDSHAKE_START ? "Start" : "Done"),

                   SSL_state_string_long(s));

    }

}

#ifndef RAND_MAX

#define RAND_MAX INT_MAX

#endif

static int ssl_rand_choosenum(int l, int h)

{

    int i;

    char buf[50];

    srand((unsigned int)time(NULL));

    apr_snprintf(buf, sizeof(buf), "%.0f",

                 (((double)(rand()%RAND_MAX)/RAND_MAX)*(h-l)));

    i = atoi(buf)+1;

    if (i < l) i = l;

    if (i > h) i = h;

    return i;

}

static void ssl_rand_seed(void)

{

    int n, l;

    time_t t;

    pid_t pid;

    unsigned char stackdata[256];

    /*

     * seed in the current time (usually just 4 bytes)

     */

    t = time(NULL);

    l = sizeof(time_t);

    RAND_seed((unsigned char *)&t, l);

    /*

     * seed in the current process id (usually just 4 bytes)

     */

    pid = getpid();

    l = sizeof(pid_t);

    RAND_seed((unsigned char *)&pid, l);

    /*

     * seed in some current state of the run-time stack (128 bytes)

     */

    n = ssl_rand_choosenum(0, sizeof(stackdata)-128-1);

    RAND_seed(stackdata+n, 128);

}

static int ssl_print_connection_info(BIO *bio, SSL *ssl)

{

    AB_SSL_CIPHER_CONST SSL_CIPHER *c;

    int alg_bits,bits;

    BIO_printf(bio,"Transport Protocol      :%s\n", SSL_get_version(ssl));

    c = SSL_get_current_cipher(ssl);

    BIO_printf(bio,"Cipher Suite Protocol   :%s\n", SSL_CIPHER_get_version(c));

    BIO_printf(bio,"Cipher Suite Name       :%s\n",SSL_CIPHER_get_name(c));

    bits = SSL_CIPHER_get_bits(c,&alg_bits);

    BIO_printf(bio,"Cipher Suite Cipher Bits:%d (%d)\n",bits,alg_bits);

    return(1);

}

static void ssl_print_cert_info(BIO *bio, X509 *cert)

{

    X509_NAME *dn;

    EVP_PKEY *pk;

    char buf[1024];

    BIO_printf(bio, "Certificate version: %ld\n", X509_get_version(cert)+1);

    BIO_printf(bio,"Valid from: ");

    ASN1_UTCTIME_print(bio, X509_get_notBefore(cert));

    BIO_printf(bio,"\n");

    BIO_printf(bio,"Valid to  : ");

    ASN1_UTCTIME_print(bio, X509_get_notAfter(cert));

    BIO_printf(bio,"\n");

    pk = X509_get_pubkey(cert);

    BIO_printf(bio,"Public key is %d bits\n",

               EVP_PKEY_bits(pk));

    EVP_PKEY_free(pk);

    dn = X509_get_issuer_name(cert);

    X509_NAME_oneline(dn, buf, sizeof(buf));

    BIO_printf(bio,"The issuer name is %s\n", buf);

    dn=X509_get_subject_name(cert);

    X509_NAME_oneline(dn, buf, sizeof(buf));

    BIO_printf(bio,"The subject name is %s\n", buf);

    /* dump the extension list too */

    BIO_printf(bio, "Extension Count: %d\n", X509_get_ext_count(cert));

}

static void ssl_print_info(struct connection *c)

{

    X509_STACK_TYPE *sk;

    X509 *cert;

    int count;

    BIO_printf(bio_err, "\n");

    sk = SSL_get_peer_cert_chain(c->ssl);

    if ((count = SK_NUM(sk)) > 0) {

        int i;

        for (i=1; i

            cert = (X509 *)SK_VALUE(sk, i);

            ssl_print_cert_info(bio_out, cert);

    }

    }

    cert = SSL_get_peer_certificate(c->ssl);

    if (cert == NULL) {

        BIO_printf(bio_out, "Anon DH\n");

    } else {

        BIO_printf(bio_out, "Peer certificate\n");

        ssl_print_cert_info(bio_out, cert);

        X509_free(cert);

    }

    ssl_print_connection_info(bio_err,c->ssl);

    SSL_SESSION_print(bio_err, SSL_get_session(c->ssl));

    }

static void ssl_proceed_handshake(struct connection *c)

{

    int do_next = 1;

    while (do_next) {

        int ret, ecode;

        ret = SSL_do_handshake(c->ssl);

        ecode = SSL_get_error(c->ssl, ret);

        switch (ecode) {

        case SSL_ERROR_NONE:

            if (verbosity >= 2)

                ssl_print_info(c);

            if (ssl_info == NULL) {

                AB_SSL_CIPHER_CONST SSL_CIPHER *ci;

                X509 *cert;

                int sk_bits, pk_bits, swork;

                ci = SSL_get_current_cipher(c->ssl);

                sk_bits = SSL_CIPHER_get_bits(ci, &swork);

                cert = SSL_get_peer_certificate(c->ssl);

                if (cert)

                    pk_bits = EVP_PKEY_bits(X509_get_pubkey(cert));

                else

                    pk_bits = 0;  /* Anon DH */

                ssl_info = xmalloc(128);

                apr_snprintf(ssl_info, 128, "%s,%s,%d,%d",

                             SSL_get_version(c->ssl),

                             SSL_CIPHER_get_name(ci),

                             pk_bits, sk_bits);

            }

#if OPENSSL_VERSION_NUMBER >= 0x10002000L

            if (ssl_tmp_key == NULL) {

                EVP_PKEY *key;

                if (SSL_get_server_tmp_key(c->ssl, &key)) {

                    ssl_tmp_key = xmalloc(128);

                    switch (EVP_PKEY_id(key)) {

                    case EVP_PKEY_RSA:

                        apr_snprintf(ssl_tmp_key, 128, "RSA %d bits",

                                     EVP_PKEY_bits(key));

                        break;

                    case EVP_PKEY_DH:

                        apr_snprintf(ssl_tmp_key, 128, "DH %d bits",

                                     EVP_PKEY_bits(key));

                        break;

#ifndef OPENSSL_NO_EC

                    case EVP_PKEY_EC: {

                        const char *cname = NULL;

                        EC_KEY *ec = EVP_PKEY_get1_EC_KEY(key);

                        int nid = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));

                        EC_KEY_free(ec);

                        cname = EC_curve_nid2nist(nid);

                        if (!cname)

                            cname = OBJ_nid2sn(nid);

                        apr_snprintf(ssl_tmp_key, 128, "ECDH %s %d bits",

                                     cname,

                                     EVP_PKEY_bits(key));

                        break;

                        }

#endif

                    default:

                        apr_snprintf(ssl_tmp_key, 128, "%s %d bits",

                                     OBJ_nid2sn(EVP_PKEY_id(key)),

                                     EVP_PKEY_bits(key));

                        break;

                    }

                    EVP_PKEY_free(key);

                }

            }

#endif

            write_request(c);

            do_next = 0;

            break;

        case SSL_ERROR_WANT_READ:

            set_polled_events(c, APR_POLLIN);

            do_next = 0;

            break;

        case SSL_ERROR_WANT_WRITE:

            set_polled_events(c, APR_POLLOUT);

            do_next = 0;

            break;

        case SSL_ERROR_WANT_CONNECT:

        case SSL_ERROR_SSL:

        case SSL_ERROR_SYSCALL:

            /* Unexpected result */

            BIO_printf(bio_err, "SSL handshake failed (%d).\n", ecode);

            ERR_print_errors(bio_err);

            close_connection(c);

            do_next = 0;

            break;

        }

    }

}

#endif /* USE_SSL */

static void write_request(struct connection * c)

{

    if (started >= requests) {

        return;

    }

    do {

        apr_time_t tnow;

        apr_size_t l = c->rwrite;

        apr_status_t e = APR_SUCCESS; /* prevent gcc warning */

        tnow = lasttime = apr_time_now();

        /*

         * First time round ?

         */

        if (c->rwrite == 0) {

            apr_socket_timeout_set(c->aprsock, 0);

            c->connect = tnow;

            c->rwrote = 0;

            c->rwrite = reqlen;

            if (send_body)

                c->rwrite += postlen;

            l = c->rwrite;

        }

        else if (tnow > c->connect + aprtimeout) {

            printf("Send request timed out!\n");

            close_connection(c);

            return;

        }

#ifdef USE_SSL

        if (c->ssl) {

            e = SSL_write(c->ssl, request + c->rwrote, l);

            if (e <= 0) {

                switch (SSL_get_error(c->ssl, e)) {

                case SSL_ERROR_WANT_READ:

                    set_polled_events(c, APR_POLLIN);

                    break;

                case SSL_ERROR_WANT_WRITE:

                    set_polled_events(c, APR_POLLOUT);

                    break;

                default:

                    BIO_printf(bio_err, "SSL write failed - closing connection\n");

                    ERR_print_errors(bio_err);

                    close_connection (c);

                    break;

                }

                return;

            }

            l = e;

        }

        else

#endif

        {

            e = apr_socket_send(c->aprsock, request + c->rwrote, &l);

            if (e != APR_SUCCESS && !l) {

                if (!APR_STATUS_IS_EAGAIN(e)) {

                    epipe++;

                    printf("Send request failed!\n");

                    close_connection(c);

                }

                else {

                    set_polled_events(c, APR_POLLOUT);

                }

                return;

            }

        }

        totalposted += l;

        c->rwrote += l;

        c->rwrite -= l;

    } while (c->rwrite);

    c->endwrite = lasttime = apr_time_now();

    started++;

    set_conn_state(c, STATE_READ);