modules/ssl/ssl_engine_log.c

	ssl_engine_log.c revision 01e8aca9299a0b872414c24c8b7724d6f88ae665
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny/*                      _             _
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny**  _ __ ___   ___   __| |    ___ ___| |  mod_ssl
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny** | '_ ` _ \ / _ \ / _` |   / __/ __| |  Apache Interface to OpenSSL
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny** | | | | | | (_) | (_| |   \__ \__ \ |  www.modssl.org
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny** |_| |_| |_|\___/ \__,_|___|___/___/_|  ftp.modssl.org
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny**                      |_____|
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny**  ssl_engine_log.c
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny**  Logging Facility
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny*/
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny/* ====================================================================
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * The Apache Software License, Version 1.1
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * Copyright (c) 2000-2001 The Apache Software Foundation.  All rights
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * reserved.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * Redistribution and use in source and binary forms, with or without
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * modification, are permitted provided that the following conditions
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * are met:
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * 1. Redistributions of source code must retain the above copyright
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    notice, this list of conditions and the following disclaimer.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * 2. Redistributions in binary form must reproduce the above copyright
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    notice, this list of conditions and the following disclaimer in
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    the documentation and/or other materials provided with the
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny *    distribution.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * 3. The end-user documentation included with the redistribution,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    if any, must include the following acknowledgment:
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *       "This product includes software developed by the
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *        Apache Software Foundation (http://www.apache.org/)."
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    Alternately, this acknowledgment may appear in the software itself,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    if and wherever such third-party acknowledgments normally appear.
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny *
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny * 4. The names "Apache" and "Apache Software Foundation" must
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    not be used to endorse or promote products derived from this
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    software without prior written permission. For written
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    permission, please contact apache@apache.org.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * 5. Products derived from this software may not be called "Apache",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    nor may "Apache" appear in their name, without prior written
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *    permission of the Apache Software Foundation.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny *
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * DISCLAIMED.  IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * SUCH DAMAGE.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny * ====================================================================
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             /* ``The difference between a computer
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                                  industry job and open-source software
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                                  hacking is about 30 hours a week.''
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                                         -- Ralf S. Engelschall     */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny#include "mod_ssl.h"
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny/*  _________________________________________________________________
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny**
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny**  Logfile Support
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny**  _________________________________________________________________
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny*/
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny/*
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny * Open the SSL logfile
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zelenyvoid ssl_log_open(server_rec *s_main, server_rec *s, apr_pool_t *p)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny{
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    const char *szLogFile;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    SSLSrvConfigRec *sc_main = mySrvConfig(s_main);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    SSLSrvConfigRec *sc = mySrvConfig(s);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    piped_log *pl;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    /*
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny     * Short-circuit for inherited logfiles in order to save
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     * filedescriptors in mass-vhost situation. Be careful, this works
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     * fine because the close happens implicitly by the pool facility.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (   s != s_main
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        && sc_main->fileLogFile != NULL
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        && (   (sc->szLogFile == NULL)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            || (   sc->szLogFile != NULL
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                && sc_main->szLogFile != NULL
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                && strEQ(sc->szLogFile, sc_main->szLogFile)))) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        sc->fileLogFile = sc_main->fileLogFile;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    else if (sc->szLogFile != NULL) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        if (strEQ(sc->szLogFile, "/dev/null"))
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            return;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        else if (sc->szLogFile[0] == '|') {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            /* XXX:This is broken, may have arguments! */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            szLogFile = ap_server_root_relative(p, sc->szLogFile+1);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            if ((pl = ap_open_piped_log(p, szLogFile)) == NULL) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                ssl_log(s, SSL_LOG_ERROR|SSL_ADD_ERRNO,
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny                        "Cannot open reliable pipe to SSL logfile filter %s", szLogFile);
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny                ssl_die();
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny            }
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny            sc->fileLogFile = ap_piped_log_write_fd(pl);
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny        }
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny        else {
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny            szLogFile = ap_server_root_relative(p, sc->szLogFile);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            if ((apr_file_open(&(sc->fileLogFile), szLogFile,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                               APR_WRITE|APR_APPEND|APR_CREATE, APR_OS_DEFAULT, p))
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                               != APR_SUCCESS) {
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny                ssl_log(s, SSL_LOG_ERROR|SSL_ADD_ERRNO,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                        "Cannot open SSL logfile %s", szLogFile);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                ssl_die();
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny            }
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny        }
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    return;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny}
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zelenystatic struct {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    int   nLevel;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *szLevel;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny} ssl_log_level2string[] = {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { SSL_LOG_ERROR, "error" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { SSL_LOG_WARN,  "warn"  },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { SSL_LOG_INFO,  "info"  },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { SSL_LOG_TRACE, "trace" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { SSL_LOG_DEBUG, "debug" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { 0, NULL }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny};
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zelenystatic struct {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *cpPattern;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *cpAnnotation;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny} ssl_log_annotate[] = {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*envelope*bad*decrypt*", "wrong pass phrase!?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*CLIENT_HELLO*unknown*protocol*", "speaking not SSL to HTTPS port!?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*CLIENT_HELLO*http*request*", "speaking HTTP to HTTPS port!?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*SSL3_READ_BYTES:sslv3*alert*bad*certificate*", "Subject CN in certificate not server name or identical to CA!?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*self signed certificate in certificate chain*", "Client certificate signed by CA not known to server?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*peer did not return a certificate*", "No CAs known to server for verification?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*no shared cipher*", "Too restrictive SSLCipherSuite or using DSA server certificate?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*no start line*", "Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*bad password read*", "You entered an incorrect pass phrase!?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { "*bad mac decode*", "Browser still remembered details of a re-created server certificate?" },
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    { NULL, NULL }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny};
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zelenystatic char *ssl_log_annotation(char *error)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny{
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *errstr;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    int i;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    errstr = NULL;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    for (i = 0; ssl_log_annotate[i].cpPattern != NULL; i++) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        if (ap_strcmp_match(error, ssl_log_annotate[i].cpPattern) == 0) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            errstr = ssl_log_annotate[i].cpAnnotation;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            break;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    return errstr;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny}
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zelenyvoid ssl_log(server_rec *s, int level, const char *msg, ...)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny{
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    char tstr[80];
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    char lstr[20];
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char vstr[1024];
2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher    char str[1024];
2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher    char *nstr;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    apr_size_t len;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    apr_time_exp_t t;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    va_list ap;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    int add;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    int i;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *astr;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    int safe_errno;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    unsigned long e;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    SSLSrvConfigRec *sc;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *cpE;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    char *cpA;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  initialization  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    safe_errno = errno;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    sc = mySrvConfig(s);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  strip out additional flags  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    add   = (level & ~SSL_LOG_MASK);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    level = (level & SSL_LOG_MASK);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  reduce flags when not reasonable in context  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (add & SSL_ADD_ERRNO && errno == 0)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        add &= ~SSL_ADD_ERRNO;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (add & SSL_ADD_SSLERR && ERR_peek_error() == 0)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        add &= ~SSL_ADD_SSLERR;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  we log only levels below, except for errors */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (   sc->fileLogFile == NULL
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        && !(level & SSL_LOG_ERROR))
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        return;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (   level > sc->nLogLevel
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        && !(level & SSL_LOG_ERROR))
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        return;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  determine the time entry string  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (add & SSL_NO_TIMESTAMP)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        tstr[0] = NUL;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    else {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        apr_explode_localtime(&t, apr_time_now());
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        apr_strftime(tstr, &len, 80, "[%d/%b/%Y %H:%M:%S", &t);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        apr_snprintf(tstr + strlen(tstr), 80 - strlen(tstr), " %05d] ",
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny                     (unsigned int)getpid());
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    }
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    /*  determine whether newline should be written */
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    if (add & SSL_NO_NEWLINE)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        nstr = "";
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    else {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        nstr = APR_EOL_STR;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  determine level name  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    lstr[0] = NUL;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (!(add & SSL_NO_LEVELID)) {
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny        for (i = 0; ssl_log_level2string[i].nLevel != 0; i++) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            if (ssl_log_level2string[i].nLevel == level) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                apr_snprintf(lstr, sizeof(lstr), "[%s]", ssl_log_level2string[i].szLevel);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                break;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        for (i = strlen(lstr); i <= 7; i++)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            lstr[i] = ' ';
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        lstr[i] = NUL;
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  create custom message  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    va_start(ap, msg);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    apr_vsnprintf(vstr, sizeof(vstr), msg, ap);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    va_end(ap);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  write out SSLog message  */
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    if ((add & SSL_ADD_ERRNO) && (add & SSL_ADD_SSLERR))
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny        astr = " (System and " SSL_LIBRARY_NAME " library errors follow)";
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    else if (add & SSL_ADD_ERRNO)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        astr = " (System error follows)";
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    else if (add & SSL_ADD_SSLERR)
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny        astr = " (" SSL_LIBRARY_NAME " library error follows)";
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    else
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        astr = "";
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (level <= sc->nLogLevel && sc->fileLogFile != NULL) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        apr_snprintf(str, sizeof(str), "%s%s%s%s%s",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                     tstr, lstr, vstr, astr, nstr);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        apr_file_printf(sc->fileLogFile, "%s", str);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (level & SSL_LOG_ERROR)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny                     "mod_ssl: %s%s", vstr, astr);
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    /*  write out additional attachment messages  */
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    if (add & SSL_ADD_ERRNO) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        if (level <= sc->nLogLevel && sc->fileLogFile != NULL) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            apr_snprintf(str, sizeof(str), "%s%sSystem: %s (errno: %d)%s",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                         tstr, lstr, strerror(safe_errno), safe_errno, nstr);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            apr_file_printf(sc->fileLogFile, "%s", str);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        if (level & SSL_LOG_ERROR)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,
74f857536411b46712f9b3dc0f1c53924b36dc02Stephen Gallagher                         "System: %s (errno: %d)",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                         strerror(safe_errno), safe_errno);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (add & SSL_ADD_SSLERR) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        while ((e = ERR_get_error())) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            cpE = ERR_error_string(e, NULL);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            cpA = ssl_log_annotation(cpE);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            if (level <= sc->nLogLevel && sc->fileLogFile != NULL) {
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                apr_snprintf(str, sizeof(str), "%s%s%s: %s%s%s%s%s",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             tstr, lstr, SSL_LIBRARY_NAME, cpE,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             cpA != NULL ? " [Hint: " : "",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             cpA != NULL ? cpA : "", cpA != NULL ? "]" : "",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             nstr);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                apr_file_printf(sc->fileLogFile, "%s", str);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny            if (level & SSL_LOG_ERROR)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             "%s: %s%s%s%s", SSL_LIBRARY_NAME, cpE,
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             cpA != NULL ? " [Hint: " : "",
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny                             cpA != NULL ? cpA : "", cpA != NULL ? "]" : "");
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    }
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /* make sure the next log starts from a clean base */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /* ERR_clear_error(); */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*  cleanup and return  */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    if (sc->fileLogFile != NULL)
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny        apr_file_flush(sc->fileLogFile);
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    errno = safe_errno;
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny    return;
fdab7bbf8933351f6254438c30ff361cd748b15aJan Zeleny}
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallaghervoid ssl_die(void)
2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher{
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    /*
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     * This is used for fatal errors and here
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     * it is common module practice to really
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     * exit from the complete program.
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny     */
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny    exit(1);
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny}
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny
ad07ed37b6b51ef134d4524edaf2259e19ac984fJan Zeleny