Use separate SSL session caches per profile

net/base/ssl_config_service.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_
 #define NET_BASE_SSL_CONFIG_SERVICE_H_
 #pragma once
 
 #include <vector>
 
 #include "base/basictypes.h"
 #include "base/observer_list.h"
 #include "base/ref_counted.h"
 #include "net/base/x509_certificate.h"
 
 namespace net {
 
+// TODO(davidben): Make this a more interesting ref-counted object if
+// we move to an SSL library which allows creating and deleting "ssl
+// session cache" objects or so.
+typedef int SSLSessionCacheId;
+
 // A collection of SSL-related configuration settings.
 struct SSLConfig {
   // Default to revocation checking.
   // Default to SSL 3.0 on and TLS 1.0 on.
   SSLConfig();
   ~SSLConfig();
 
   bool rev_checking_enabled;  // True if server certificate revocation
                               // checking is enabled.
   // SSL 2.0 is not supported.
@@ skipping 33 matching lines @@
   // True if we allow this connection to be MITM attacked. This sounds a little
   // worse than it is: large networks sometimes MITM attack all SSL connections
   // on egress. We want to know this because we might not have the end-to-end
   // connection that we believe that we have based on the hostname. Therefore,
   // certain certificate checks can't be performed and we can't use outside
   // knowledge about whether the server has the renegotiation extension.
   bool mitm_proxies_allowed;
 
   bool false_start_enabled;  // True if we'll use TLS False Start.
 
+  // A uniquifier to be incorporated into the session cache entry; NSS
+  // provides only a global session cache.
+  SSLSessionCacheId session_cache_id;
+
   // TODO(wtc): move the following members to a new SSLParams structure.  They
   // are not SSL configuration settings.
 
   struct CertAndStatus {
     CertAndStatus();
     ~CertAndStatus();
 
     scoped_refptr<X509Certificate> cert;
     int cert_status;
   };
@@ skipping 97 matching lines @@
 
   // Add an observer of this service.
   void AddObserver(Observer* observer);
 
   // Remove an observer of this service.
   void RemoveObserver(Observer* observer);
 
  protected:
   friend class base::RefCountedThreadSafe<SSLConfigService>;
 
+  SSLSessionCacheId session_cache_id_;
+
   virtual ~SSLConfigService();
 
   // SetFlags sets the values of several flags based on global configuration.
-  static void SetSSLConfigFlags(SSLConfig* ssl_config);
+  void SetSSLConfigFlags(SSLConfig* ssl_config);
 
   // Process before/after config update.
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_SSL_CONFIG_SERVICE_H_