Defines SSLServerSocket and implements SSLServerSocketNSS

net/base/ssl_config_service.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_
 #define NET_BASE_SSL_CONFIG_SERVICE_H_
 #pragma once
 
 #include <vector>
 
@@ skipping 13 matching lines @@
 
   bool rev_checking_enabled;  // True if server certificate revocation
                               // checking is enabled.
   // SSL 2.0 is not supported.
   bool ssl3_enabled;  // True if SSL 3.0 is enabled.
   bool tls1_enabled;  // True if TLS 1.0 is enabled.
   bool dnssec_enabled;  // True if we'll accept DNSSEC chains in certificates.
   bool snap_start_enabled;  // True if we'll try Snap Start handshakes.
   // True if we'll do async checks for certificate provenance using DNS.
   bool dns_cert_provenance_checking_enabled;
+  bool no_cache_enabled;  // Disable caching.

[wtc, 2010/12/17 00:16:26]

no_cache_enabled => session_cache_disabled

More important, we should avoid adding this config setting
if we can.  Can we use a small SSL session cache for
SSLServerSocket?

[Alpha Left Google, 2010/12/17 08:30:43]

I'd like to simply the implementations in the first version. What about adding a
TODO and file a bug to complete this feature?

[wtc, 2010/12/17 16:38:32]

Adding a TODO for enabling server session cache is fine.

But you should not need to disable client session cache.
Why do you need to do that in SSLServerSocketTest?

[Alpha Left Google, 2010/12/17 20:09:57]

SSLClientSocketNSS uses session key between tests. Since server implementation
doesn't support session key, tests after the one will fail since it fails
handshaking.

 
   // Cipher suites which should be explicitly prevented from being used. By
   // default, all cipher suites supported by the underlying SSL implementation
   // will be enabled, except for:
   // - Null encryption cipher suites.
   // - Weak cipher suites: < 80 bits of security strength.
   // - FORTEZZA cipher suites (obsolete).
   // - IDEA cipher suites (RFC 5469 explains why).
   // - Anonymous cipher suites.
   //
@@ skipping 142 matching lines @@
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_SSL_CONFIG_SERVICE_H_