BIO_S_CONNECT(3ossl)

💖 BIO_S_CONNECT 💖 — it's giving "connect BIO" energy, bestie

okay so welcome to the OpenSSL manual page for the connect BIO, and honestly? this one is a whole vibe. it's the thing that lets you do TCP/IP networking without ever touching a raw socket call yourself. iconic. let's get into it 🫶

---

✨ NAME ✨

BIO_s_connect, BIO_new_connect, BIO_set_conn_hostname, BIO_set_conn_port, BIO_set_conn_address, BIO_set_conn_ip_family, BIO_get_conn_hostname, BIO_get_conn_port, BIO_get_conn_address, BIO_get_conn_ip_family, BIO_set_nbio, BIO_set_sock_type, BIO_get_sock_type, BIO_get0_dgram_bio, BIO_do_connect — all of these are the connect BIO squad 💅

---

🌸 SYNOPSIS 🌸

#include <openssl/bio.h>

const BIO_METHOD *BIO_s_connect(void);

BIO *BIO_new_connect(const char *name);

long BIO_set_conn_hostname(BIO *b, char *name);
long BIO_set_conn_port(BIO *b, char *port);
long BIO_set_conn_address(BIO *b, BIO_ADDR *addr);
long BIO_set_conn_ip_family(BIO *b, long family);
const char *BIO_get_conn_hostname(BIO *b);
const char *BIO_get_conn_port(BIO *b);
const BIO_ADDR *BIO_get_conn_address(BIO *b);
const long BIO_get_conn_ip_family(BIO *b);

long BIO_set_nbio(BIO *b, long n);

int BIO_set_sock_type(BIO *b, int sock_type);
int BIO_get_sock_type(BIO *b);
int BIO_get0_dgram_bio(BIO *B, BIO **dgram_bio);

long BIO_do_connect(BIO *b);

no cap, that's the whole toolbox 🔧

---

🦋 DESCRIPTION 🦋

BIO_s_connect() returns the connect BIO method. it's literally a little wrapper round your platform's TCP/IP socket connection routines. so you get to pretend sockets don't exist, which is the dream fr fr 🌈

with connect BIOs you can make TCP/IP connections and move data around using only BIO routines. the whole point is that any platform specific operation gets hidden behind the BIO abstraction. main character energy for the abstraction layer, honestly ✨

read and write operations on a connect BIO will do I/O on the underlying connection. and if there's no connection established yet, but the port and hostname (see below bestie) are set up properly, then a connection gets established first. it just handles it. so thoughtful 🥹

connect BIOs support BIO_puts() and BIO_gets().

if the close flag is set on a connect BIO then any active connection is shutdown and the socket closed when the BIO is freed. clean exit, periodt 💅

calling BIO_reset() on a connect BIO will close any active connection and reset the BIO into a state where it can connect to the same host again. it's giving "we're so back" 🔥

BIO_new_connect() combines BIO_new() and BIO_set_conn_hostname() into a single call: that is, it creates a new connect BIO with hostname name. one call, zero drama.

BIO_set_conn_hostname() uses the string name to set the hostname. the hostname can be an IP address; if the address is an IPv6 one, it must be enclosed in brackets "[" and "]". the hostname can also include the port in the form hostname:port; see BIO_parse_hostserv(3) and BIO_set_conn_port() for details.

BIO_set_conn_port() sets the port to port. port can be the numerical form or a service string such as "http", which will be mapped to a port number using the system function getservbyname(). yes she's translating for you, that's just what she does 💖

BIO_set_conn_address() sets the address and port information using a BIO_ADDR(3ssl).

BIO_set_conn_ip_family() sets the IP family.

BIO_get_conn_hostname() returns the hostname of the connect BIO or NULL if the BIO is initialized but no hostname is set. ⚠️ this return value is an internal pointer which should not be modified. do not touch, she's not yours 😤

BIO_get_conn_port() returns the port as a string. ⚠️ this return value is an internal pointer which should not be modified.

BIO_get_conn_address() returns the address information as a BIO_ADDR. ⚠️ this return value is an internal pointer which should not be modified.

BIO_get_conn_ip_family() returns the IP family of the connect BIO.

BIO_set_nbio() sets the non blocking I/O flag to n. if n is zero then blocking I/O is set. if n is 1 then non blocking I/O is set. blocking I/O is the default. the call to BIO_set_nbio() should be made before the connection is established because non blocking I/O is set during the connect process. order matters bestie, don't be late 🙈

BIO_do_connect() attempts to connect the supplied BIO. this performs an SSL/TLS handshake as far as supported by the BIO. for non-SSL BIOs the connection is done typically at TCP level. if domain name resolution yields multiple IP addresses, all of them are tried after connect() failures. she's persistent, she's trying every door 🚪

the function returns 1 if the connection was established successfully. a zero or negative value is returned if the connection could not be established. the call BIO_should_retry() should be used for non blocking connect BIOs to determine if the call should be retried. and if a connection has already been established, this call has no effect. nothing to see here, we already connected 💅

BIO_set_sock_type() can be used to set a socket type value as would be passed in a call to socket(2). the only currently supported values are SOCK_STREAM (the default) and SOCK_DGRAM. if SOCK_DGRAM is configured, the connection created is a UDP datagram socket handled via BIO_s_datagram(3). I/O calls such as BIO_read(3) and BIO_write(3) are forwarded transparently to an internal BIO_s_datagram(3) instance. that internal BIO_s_datagram(3) instance can be retrieved using BIO_get0_dgram_bio() if desired, which writes a pointer to the BIO_s_datagram(3) instance to *dgram_bio. the lifetime of the internal BIO_s_datagram(3) is managed by BIO_s_connect() and does not need to be freed by the caller. so don't you dare free it, it's not your kid 🍼

BIO_get_sock_type() retrieves the value set using BIO_set_sock_type().

---

🧚 NOTES 🧚

if blocking I/O is set then a non positive return value from any I/O call is caused by an error condition, although a zero return will normally mean that the connection was closed. zero = she left 👋

if the port name is supplied as part of the hostname then this will override any value set with BIO_set_conn_port(). this may be undesirable if the application does not wish to allow connection to arbitrary ports. this can be avoided by checking for the presence of the ':' character in the passed hostname and either indicating an error or truncating the string at that point. sneaky colon behavior, watch for it 👀

the values returned by BIO_get_conn_hostname(), BIO_get_conn_address(), and BIO_get_conn_port() are updated when a connection attempt is made. before any connection attempt the values returned are those set by the application itself.

applications do not have to call BIO_do_connect() but may wish to do so to separate the connection process from other I/O processing.

if non blocking I/O is set then retries will be requested as appropriate.

it addition to BIO_should_read() and BIO_should_write() it is also possible for BIO_should_io_special() to be true during the initial connection process with the reason BIO_RR_CONNECT. if this is returned then this is an indication that a connection attempt would block, the application should then take appropriate action to wait until the underlying socket has connected and retry the call. (and yes, the original really does say "it addition", we're keeping it exactly as written, that's canon now 🎀)

🫶 heads up bestie: BIO_set_conn_hostname(), BIO_set_conn_port(), BIO_get_conn_hostname(), BIO_set_conn_address(), BIO_get_conn_port(), BIO_get_conn_address(), BIO_set_conn_ip_family(), BIO_get_conn_ip_family(), BIO_set_nbio(), and BIO_do_connect() are macros.

---

💜 RETURN VALUES 💜

BIO_s_connect() returns the connect BIO method.

BIO_set_conn_address(), BIO_set_conn_port(), and BIO_set_conn_ip_family() return 1 or <=0 if an error occurs.

BIO_set_conn_hostname() returns 1 on success and <=0 on failure.

BIO_get_conn_address() returns the address information or NULL if none was set.

BIO_get_conn_hostname() returns the connected hostname or NULL if none was set.

BIO_get_conn_ip_family() returns the address family or -1 if none was set.

BIO_get_conn_port() returns a string representing the connected port or NULL if not set.

BIO_set_nbio() returns 1 or <=0 if an error occurs.

BIO_do_connect() returns 1 if the connection was successfully established and <=0 if the connection failed.

BIO_set_sock_type() returns 1 on success or 0 on failure.

BIO_get_sock_type() returns a socket type or 0 if the call is not supported.

BIO_get0_dgram_bio() returns 1 on success or 0 on failure.

---

⭐ EXAMPLES ⭐

this example connects to a webserver on the local host and attempts to retrieve a page and copy the result to standard output. it's a little legend, we love her 💖

BIO *cbio, *out;
int len;
char tmpbuf[1024];

cbio = BIO_new_connect("localhost:http");
out = BIO_new_fp(stdout, BIO_NOCLOSE);
if (BIO_do_connect(cbio) <= 0) {
    fprintf(stderr, "Error connecting to server\n");
    ERR_print_errors_fp(stderr);
    exit(1);
}
BIO_puts(cbio, "GET / HTTP/1.0\n\n");
for (;;) {
    len = BIO_read(cbio, tmpbuf, 1024);
    if (len <= 0)
        break;
    BIO_write(out, tmpbuf, len);
}
BIO_free(cbio);
BIO_free(out);

ate. no crumbs. 🔥

---

👑 SEE ALSO 👑

BIO_ADDR(3), BIO_parse_hostserv(3)

---

🌈 HISTORY 🌈

BIO_set_conn_int_port(), BIO_get_conn_int_port(), BIO_set_conn_ip(), and BIO_get_conn_ip() were removed in OpenSSL 1.1.0. use BIO_set_conn_address() and BIO_get_conn_address() instead. they're gone, we don't talk about them anymore 💀

connect BIOs support BIO_gets() since OpenSSL 3.2. glow up ✨

---

🍓 COPYRIGHT 🍓

Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

and that's the whole page bestie 🎀 this was BIO_S_CONNECT(3ossl) from the OpenSSL manual, version 3.5.9, dated 2026-09-29. go make some connections (the TCP kind, and also maybe some friends) 💅💖🦋