feat: LWP::Protocol::https support — Java-backed IO::Socket::SSL

[fglock]

Summary

Implement LWP::Protocol::https support for PerlOnJava by creating a Java-backed IO::Socket::SSL using javax.net.ssl instead of the native OpenSSL bindings that Net::SSLeay normally provides.

LWP::UserAgent can now make HTTPS requests:

use LWP::UserAgent;
my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 1 });
my $res = $ua->get("https://www.google.com/");
# Status: 200 OK

Phase 1: Socket constants + Net::SSLeay stub

• Added missing Socket constants: MSG_PEEK, MSG_OOB, MSG_DONTROUTE, MSG_DONTWAIT, SO_RCVBUF/SO_SNDBUF exports, CR/LF/CRLF
• Created NetSSLeay.java — minimal stub with ~40 SSL constants and constant() lookup (prevents AUTOLOAD infinite recursion that caused StackOverflowError)
• Created bundled Net/SSLeay.pm Perl stub

Phase 2: Java IO::Socket::SSL core implementation

• IOSocketSSL.java — Java XS backend providing:

  • _start_ssl(): upgrades TCP socket to TLS via SSLSocketFactory.createSocket()
  • Certificate inspection: _get_cipher(), _get_sslversion(), _peer_certificate_*()
  • Capability queries: can_client_sni(), can_alpn(), etc.
  • Custom CA trust store loading from file/directory
  • Insecure mode (trust-all) for SSL_VERIFY_NONE

• IO/Socket/SSL.pm — Perl module inheriting IO::Socket::IP:

  • configure() intercepts SSL_* args, does TCP connect, then SSL upgrade
  • connect_SSL(), start_SSL() for handshake and socket upgrade
  • get_cipher(), get_sslversion(), get_peer_certificate() for LWP headers
  • SSL constants: SSL_VERIFY_NONE, SSL_VERIFY_PEER, etc.

• SocketIO.java: Added replaceSocket() and getSocket() for SSL wrapping

• IOOperator.java: Fixed select() for SSL sockets — after SSL upgrade the NIO SocketChannel is null, so SSL sockets now correctly report as ready for I/O instead of timing out

Key design decisions

• Uses javax.net.ssl (SSLSocket/SSLContext) rather than reimplementing ~127 Net::SSLeay OpenSSL C API functions
• SNI hostname resolved from original PeerAddr (not resolved IP from peerhost())
• Works around PerlOnJava's IO::Socket::IP Timeout bug (non-blocking connect fails) by clearing io_socket_timeout

New files

File	Purpose
IOSocketSSL.java	Java XS backend for IO::Socket::SSL
NetSSLeay.java	Minimal Net::SSLeay stub (constants + no-op inits)
IO/Socket/SSL.pm	Bundled Perl IO::Socket::SSL (replaces CPAN version)
Net/SSLeay.pm	Bundled Perl Net::SSLeay stub

Modified files

File	Change
SocketIO.java	replaceSocket(), getSocket() for SSL wrapping
IOOperator.java	select() fix for null-channel SSL sockets
Socket.java	MSG_PEEK, MSG_OOB, SO_RCVBUF/SNDBUF, CR/LF/CRLF
Socket.pm	New constants in @export

Test plan

• use Net::SSLeay; print Net::SSLeay::VERIFY_PEER() works without crash
• IO::Socket::SSL->new(PeerHost => "www.google.com", PeerPort => 443, SSL_verify_mode => 1) connects with TLS
• LWP::UserAgent->new->get("https://www.google.com/") returns 200 OK with SSL headers
• All unit tests pass (make)
• Phase 3: ./jcpan -t LWP::Protocol::https passes

Generated with Devin