SSLSocket - where does the encryption happen?

[Bill Kelly]

Howdy all, and Happy New Year.

I'm looking at OpenSSL::SSL::SSLSocket (openssl/ssl.rb), and
also the code in drb/ssl.rb and webrick/ssl.rb ... trying to
understand where the actual encryption/decryption takes place.

All three of these are pretty similar - they set up an
SSLContext, and they also wrap a plain ol' TCPSocket. But I'm
having trouble locating any code that would be performing the
encryption/decryption on the actual I/O.

Is it right in front of my eyes and I'm not seeing it? If
anyone could help shed some light on this I'd be grateful.


Thanks,

Regards,

Bill

 

[Ilmari Heikkinen]

T24gMS8yLzA2LCBCaWxsIEtlbGx5IDxiaWxsa0BjdHMuY29tPiB3cm90ZToKPiBIb3dkeSBhbGws
IGFuZCBIYXBweSBOZXcgWWVhci4KPgo+IEknbSBsb29raW5nIGF0IE9wZW5TU0w6OlNTTDo6U1NM
U29ja2V0IChvcGVuc3NsL3NzbC5yYiksIGFuZAo+IGFsc28gdGhlIGNvZGUgaW4gZHJiL3NzbC5y
YiBhbmQgd2Vicmljay9zc2wucmIgLi4uIHRyeWluZyB0bwo+IHVuZGVyc3RhbmQgd2hlcmUgdGhl
IGFjdHVhbCBlbmNyeXB0aW9uL2RlY3J5cHRpb24gdGFrZXMgcGxhY2UuCj4KPiBBbGwgdGhyZWUg
b2YgdGhlc2UgYXJlIHByZXR0eSBzaW1pbGFyIC0gdGhleSBzZXQgdXAgYW4KPiBTU0xDb250ZXh0
LCBhbmQgdGhleSBhbHNvIHdyYXAgYSBwbGFpbiBvbCcgVENQU29ja2V0LiAgQnV0IEknbQo+IGhh
dmluZyB0cm91YmxlIGxvY2F0aW5nIGFueSBjb2RlIHRoYXQgd291bGQgYmUgcGVyZm9ybWluZyB0
aGUKPiBlbmNyeXB0aW9uL2RlY3J5cHRpb24gb24gdGhlIGFjdHVhbCBJL08uCj4KPiBJcyBpdCBy
aWdodCBpbiBmcm9udCBvZiBteSBleWVzIGFuZCBJJ20gbm90IHNlZWluZyBpdD8gIElmCj4gYW55
b25lIGNvdWxkIGhlbHAgc2hlZCBzb21lIGxpZ2h0IG9uIHRoaXMgSSdkIGJlIGdyYXRlZnVsLgo+
CgpJZiBJJ20gbm90IHRlcnJpYmx5IG1pc3Rha2VuLCBhbGwgdGhlIGFjdHVhbCB3b3JrIHRha2Vz
IHBsYWNlIGluIHRoZSBDCmV4dGVuc2lvbi4KaHR0cDovL3d3dy5ydWJ5LWxhbmcub3JnL2NnaS1i
aW4vY3Zzd2ViLmNnaS9ydWJ5L2V4dC9vcGVuc3NsL29zc2xfc3NsLmMKPC0gdGhlcmUncyB0aGUg
U1NMU29ja2V0IGZ1bmN0aW9ucyBhdCBsZWFzdAo=

 

[Bill Kelly]

Hi Ilmari,

If I'm not terribly mistaken, all the actual work takes place in the C
extension.
http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/ext/openssl/ossl_ssl.c
<- there's the SSLSocket functions at least

Thanks much! I should have realized... After all, the ruby-side SSLSocket
class has no initialize()

class SSLSocket
include Buffering
include SocketForwarder
end


Thanks,

Bill