D_TLS
DPRINTF((D_NET|D_TLS), "Preparing sockets for TLS\n");
DPRINTF(D_TLS, "abort send_queue(cnt@%p = %zu) "
DPRINTF(D_TLS, "get_f_by_conninfo() called on invalid conn_info\n");
DPRINTF((D_TLS|D_CALL|D_EVENT), "dispatch_force_tls_reconnect()\n");
DPRINTF(D_TLS, "Initializing PRNG\n");
#define D_ALL (D_CALL | D_DATA | D_NET | D_FILE | D_TLS | D_PARSE | \
#define D_DEFAULT (D_CALL | D_NET | D_FILE | D_TLS | D_MISC)
DPRINTF(D_TLS, "Unable to establish TLS: %s\n", buf);
DPRINTF(D_TLS, "Unable to connect TLS to socket: %s\n",
DPRINTF(D_TLS, "Found SSL error in queue: %s\n", buf);
DPRINTF((D_TLS|D_NET), "Unable to establish a TCP connection to %s\n",
DPRINTF(D_TLS, "%s returned rc %d and error %s: %s\n", functionname,
DPRINTF(D_TLS, "SSL_ERROR_SYSCALL: ");
DPRINTF(D_TLS, "socket I/O error: %s\n",
DPRINTF(D_TLS, "unexpected EOF from %s\n",
DPRINTF(D_TLS, "no further info\n");
DPRINTF((D_TLS|D_PARSE),
DPRINTF(D_TLS, "Change state: %s --> %s\n", \
DPRINTF((D_TLS|D_CALL|D_EVENT), "tls_reconnect(conn_info@%p, "
DPRINTF((D_TLS|D_CALL),
DPRINTF((D_TLS|D_NET), "incoming TCP connection\n");
DPRINTF(D_TLS, "Unable to establish TLS: %s\n",
DPRINTF(D_TLS, "Unable to connect TLS to socket %d: %s\n",
DPRINTF(D_TLS, "socket connection from %s accept()ed with fd %d, "
DPRINTF((D_TLS|D_EVENT|D_CALL), "dispatch_eof_tls(%d, %d, %p)\n",
DPRINTF((D_TLS|D_EVENT|D_CALL), "active TLS socket %d\n", fd);
DPRINTF(D_TLS, "calling SSL_read(%p, %p, %zu)\n", c->tls_conn->sslptr,
DPRINTF(D_TLS, "SSL_read() returned %d\n", rc);
DPRINTF((D_TLS|D_CALL|D_DATA), "tls_split_messages() -- "
DPRINTF((D_TLS|D_CALL), "tls_send(f=%p, line=\"%.*s%s\", "
DPRINTF((D_TLS|D_CALL), "dispatch_tls_send(f=%p, buffer=%p, "
DPRINTF((D_TLS|D_DATA), "TLS: SSL_write() wrote %d out of %zu "
DPRINTF((D_TLS|D_DATA), "TLS: SSL_write() complete\n");
DPRINTF((D_TLS|D_DATA), "unreachable code after SSL_write()\n");
DPRINTF((D_TLS|D_CALL),
DPRINTF((D_TLS|D_NET), "Closed TLS connection to %s\n",
DPRINTF(D_TLS, "Unexpected connection state %d\n",
DPRINTF((D_TLS|D_NET), "Ignore error in SSL_shutdown()"
DPRINTF((D_TLS|D_NET), "Closed TCP connection to %s\n",
DPRINTF((D_CALL|D_TLS), "mk_x509_cert(%p, %p, %d, %d, %d)\n",
DPRINTF(D_TLS, "EVP_PKEY_new() failed\n");
DPRINTF(D_TLS, "X509_new() failed\n");
DPRINTF(D_TLS, "DSA_new() failed\n");
DPRINTF(D_TLS, "DSA_generate_parameters_ex() failed\n");
DPRINTF(D_TLS, "DSA_generate_key() failed\n");
DPRINTF(D_TLS, "EVP_PKEY_assign_DSA() failed\n");
DPRINTF(D_TLS, "X509_set_pubkey() failed\n");
DPRINTF(D_TLS, "X509_sign() failed\n");
DPRINTF(D_TLS, "X509_verify() failed\n");
DPRINTF(D_TLS, "loaded trust anchors\n");
DPRINTF(D_TLS, "loaded and checked own certificate\n");
DPRINTF(D_TLS, "get_fingerprint(cert@%p, return@%p, alg \"%s\")\n",
DPRINTF(D_TLS, "unknown digest algorithm %s\n",
DPRINTF(D_TLS, "cannot get %s digest\n", openssl_algname);
DPRINTF((D_TLS|D_CALL), "match_hostnames(%p, \"%s\", \"%s\")\n",
DPRINTF(D_TLS, "X509_get_ext_d2i() returned (%p,%d,%d) "
DPRINTF(D_TLS, "found CN: %.*s\n", len, ubuf);
DPRINTF((D_TLS|D_CALL), "match_fingerprint(cert@%p, fp \"%s\")\n",
DPRINTF(D_TLS, "cannot get %s digest\n", alg);
DPRINTF(D_TLS, "fail: fingerprints do not match\n");
DPRINTF(D_TLS, "accepted: fingerprints match\n");
DPRINTF((D_TLS|D_CALL), "match_certfile(cert@%p, file \"%s\") "
DPRINTF((D_TLS|D_CALL), "read_certfile(%p, \"%s\")\n",
DPRINTF((D_TLS), "Unable to read certificate from %s\n",
DPRINTF((D_TLS), "Read certificate from %s\n", certfilename);
DPRINTF((D_TLS|D_CALL), "check cert for connection with %s. "
DPRINTF(D_TLS, "openssl verify error:"
DPRINTF(D_TLS, "openssl verify error:missing "
DPRINTF((D_TLS|D_CALL), "dispatch_SSL_connect(conn_info@%p, fd %d)\n",
DPRINTF(D_TLS, "TLS connection established.\n");
DPRINTF((D_TLS|D_CALL), "tls_connect(conn_info@%p)\n", conn_info);