SSL Connect Job Waiting

net/socket/ssl_client_socket.h

Index: net/socket/ssl_client_socket.h
diff --git a/net/socket/ssl_client_socket.h b/net/socket/ssl_client_socket.h
index a43e58cc26b852fb86d92a1a5ac7c4e7c357b286..5f442fe7277a5c0e85a229b940d6d31e1f992bf3 100644
--- a/net/socket/ssl_client_socket.h
+++ b/net/socket/ssl_client_socket.h
@@ -81,6 +81,8 @@ class NET_EXPORT SSLClientSocket : public SSLSocket {
   virtual bool WasNpnNegotiated() const OVERRIDE;
   virtual NextProto GetNegotiatedProtocol() const OVERRIDE;
 
+  static bool InSessionCache(std::string cache_key);

[wtc, 2014/06/13 22:47:24]

The input parameter should be const reference.

Please document the method.

[Ryan Sleevi, 2014/06/13 23:24:22]

First reaction: I generally reaction negatively against new static methods,
because they imply global state (in this case, it tightly couples the interface
of SSLClientSocket to the idea of a 'global' SSL session cache)

However, what we 'want' is a per-profile SSL session cache, so that as profiles
are deleted, we evict old sessions. As currently implemented, we actually hold
on to the memory for these structures even after the Profile is deleted. The
only reason this hasn't killed us on memory usage (yet) is the eviction rate of
Chrome, but it's something we should fix.

As such, the idea of what session cache a given socket belongs to is likely
something that the SSLClientSocketPool would pass to the SSLConnectJob - the
Pool would get its value from Params (which would come from the ProfileIOData in
Chrome), would pass just that value to the Job, and the Job would pass that to
the Socket.

That would get rid of the |ssl_session_cache_shard_arg| in the
SSLClientSocketContext, in favor of the new structure.

The other "coupling smell" is that the computing of |cache_key| is done internal
to the SSLClientSocket, as part of Connect() [eg: when it has a host/port],
whereas this method expects callers to be able to recreate that same logic. We
would likely want to keep that centralized.

[mshelley1, 2014/06/16 19:02:49]

Done.

+
   // Gets the SSL CertificateRequest info of the socket after Connect failed
   // with ERR_SSL_CLIENT_AUTH_CERT_NEEDED.
   virtual void GetSSLCertRequestInfo(