| OLD | NEW |
| (Empty) |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "net/ssl/ssl_client_session_cache_openssl.h" | |
| 6 | |
| 7 #include <utility> | |
| 8 | |
| 9 #include "base/time/clock.h" | |
| 10 #include "base/time/default_clock.h" | |
| 11 | |
| 12 namespace net { | |
| 13 | |
| 14 SSLClientSessionCacheOpenSSL::SSLClientSessionCacheOpenSSL(const Config& config) | |
| 15 : clock_(new base::DefaultClock), | |
| 16 config_(config), | |
| 17 cache_(config.max_entries), | |
| 18 lookups_since_flush_(0) { | |
| 19 } | |
| 20 | |
| 21 SSLClientSessionCacheOpenSSL::~SSLClientSessionCacheOpenSSL() { | |
| 22 Flush(); | |
| 23 } | |
| 24 | |
| 25 size_t SSLClientSessionCacheOpenSSL::size() const { | |
| 26 return cache_.size(); | |
| 27 } | |
| 28 | |
| 29 ScopedSSL_SESSION SSLClientSessionCacheOpenSSL::Lookup( | |
| 30 const std::string& cache_key) { | |
| 31 base::AutoLock lock(lock_); | |
| 32 | |
| 33 // Expire stale sessions. | |
| 34 lookups_since_flush_++; | |
| 35 if (lookups_since_flush_ >= config_.expiration_check_count) { | |
| 36 lookups_since_flush_ = 0; | |
| 37 FlushExpiredSessions(); | |
| 38 } | |
| 39 | |
| 40 CacheEntryMap::iterator iter = cache_.Get(cache_key); | |
| 41 if (iter == cache_.end()) | |
| 42 return nullptr; | |
| 43 if (IsExpired(iter->second.get(), clock_->Now())) { | |
| 44 cache_.Erase(iter); | |
| 45 return nullptr; | |
| 46 } | |
| 47 return ScopedSSL_SESSION(SSL_SESSION_up_ref(iter->second->session.get())); | |
| 48 } | |
| 49 | |
| 50 void SSLClientSessionCacheOpenSSL::Insert(const std::string& cache_key, | |
| 51 SSL_SESSION* session) { | |
| 52 base::AutoLock lock(lock_); | |
| 53 | |
| 54 // Make a new entry. | |
| 55 std::unique_ptr<CacheEntry> entry(new CacheEntry); | |
| 56 entry->session.reset(SSL_SESSION_up_ref(session)); | |
| 57 entry->creation_time = clock_->Now(); | |
| 58 | |
| 59 // Takes ownership. | |
| 60 cache_.Put(cache_key, std::move(entry)); | |
| 61 } | |
| 62 | |
| 63 void SSLClientSessionCacheOpenSSL::Flush() { | |
| 64 base::AutoLock lock(lock_); | |
| 65 | |
| 66 cache_.Clear(); | |
| 67 } | |
| 68 | |
| 69 void SSLClientSessionCacheOpenSSL::SetClockForTesting( | |
| 70 std::unique_ptr<base::Clock> clock) { | |
| 71 clock_ = std::move(clock); | |
| 72 } | |
| 73 | |
| 74 SSLClientSessionCacheOpenSSL::CacheEntry::CacheEntry() { | |
| 75 } | |
| 76 | |
| 77 SSLClientSessionCacheOpenSSL::CacheEntry::~CacheEntry() { | |
| 78 } | |
| 79 | |
| 80 bool SSLClientSessionCacheOpenSSL::IsExpired( | |
| 81 SSLClientSessionCacheOpenSSL::CacheEntry* entry, | |
| 82 const base::Time& now) { | |
| 83 return now < entry->creation_time || | |
| 84 entry->creation_time + config_.timeout < now; | |
| 85 } | |
| 86 | |
| 87 void SSLClientSessionCacheOpenSSL::FlushExpiredSessions() { | |
| 88 base::Time now = clock_->Now(); | |
| 89 CacheEntryMap::iterator iter = cache_.begin(); | |
| 90 while (iter != cache_.end()) { | |
| 91 if (IsExpired(iter->second.get(), now)) { | |
| 92 iter = cache_.Erase(iter); | |
| 93 } else { | |
| 94 ++iter; | |
| 95 } | |
| 96 } | |
| 97 } | |
| 98 | |
| 99 } // namespace net | |
| OLD | NEW |