Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(76)

Side by Side Diff: net/socket/ssl_session_cache_openssl.cc

Issue 353713005: Implements new, more robust design for communicating between SSLConnectJobs. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Fixed comment I missed in the last patch. Created 6 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright 2013 The Chromium Authors. All rights reserved. 1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "net/socket/ssl_session_cache_openssl.h" 5 #include "net/socket/ssl_session_cache_openssl.h"
6 6
7 #include <list> 7 #include <list>
8 #include <map> 8 #include <map>
9 9
10 #include <openssl/rand.h> 10 #include <openssl/rand.h>
11 #include <openssl/ssl.h> 11 #include <openssl/ssl.h>
12 12
13 #include "base/callback.h"
13 #include "base/containers/hash_tables.h" 14 #include "base/containers/hash_tables.h"
14 #include "base/lazy_instance.h" 15 #include "base/lazy_instance.h"
15 #include "base/logging.h" 16 #include "base/logging.h"
16 #include "base/synchronization/lock.h" 17 #include "base/synchronization/lock.h"
17 18
18 namespace net { 19 namespace net {
19 20
20 namespace { 21 namespace {
21 22
22 // A helper class to lazily create a new EX_DATA index to map SSL_CTX handles 23 // A helper class to lazily create a new EX_DATA index to map SSL_CTX handles
(...skipping 206 matching lines...) Expand 10 before | Expand all | Expand 10 after
229 return false; // Session has not yet been marked good. Treat as a miss. 230 return false; // Session has not yet been marked good. Treat as a miss.
230 231
231 // Move to front of MRU list. 232 // Move to front of MRU list.
232 ordering_.push_front(session); 233 ordering_.push_front(session);
233 ordering_.erase(it->second); 234 ordering_.erase(it->second);
234 it->second = ordering_.begin(); 235 it->second = ordering_.begin();
235 236
236 return SSL_set_session(ssl, session) == 1; 237 return SSL_set_session(ssl, session) == 1;
237 } 238 }
238 239
240 bool SSLSessionIsInCache(const std::string& cache_key) const {
241 base::AutoLock locked(lock_);
242 KeyIndex::const_iterator it = key_index_.find(cache_key);
243 if (it == key_index_.end())
244 return false;
245
246 SSL_SESSION* session = *it->second;
247 DCHECK(session);
248
249 void* session_is_good =
250 SSL_SESSION_get_ex_data(session, GetSSLSessionExIndex());
251
252 return session_is_good;
253 }
254
255 void SetSessionAddedCallback(SSL* ssl, const base::Closure& callback) {
256 // Add this SSL* to the SSLtoCallbackMap.
257 ssl_to_callback_map_.insert(SSLToCallbackMap::value_type(
258 ssl, CallbackAndCompletionCount(callback, 0)));
259 }
260
261 // Determines if the session for |ssl| is in the cache, and calls the
262 // appropriate callback if that is the case.
263 void CheckIfSessionFinished(SSL* ssl) {
264 SSLToCallbackMap::iterator it = ssl_to_callback_map_.find(ssl);
265 if (it == ssl_to_callback_map_.end())
266 return;
267 // Increment the session's completion count.
268 if (++it->second.count == 2) {
269 // The session has been MarkedAsGood and Added, so it can be used.
270 // These two events can occur in either order.
271 base::Closure callback = it->second.callback;
272 ssl_to_callback_map_.erase(it);
273 callback.Run();
274 }
275 }
276
277 void RemoveSessionAddedCallback(SSL* ssl) { ssl_to_callback_map_.erase(ssl); }
278
239 void MarkSSLSessionAsGood(SSL* ssl) { 279 void MarkSSLSessionAsGood(SSL* ssl) {
240 SSL_SESSION* session = SSL_get_session(ssl); 280 SSL_SESSION* session = SSL_get_session(ssl);
241 if (!session) 281
282 if (!session) {
283 CHECK(session);
242 return; 284 return;
285 }
wtc 2014/07/23 22:53:33 Please replace lines 282-285 with CHECK(session)
mshelley 2014/07/24 20:37:49 Done.
243 286
244 // Mark the session as good, allowing it to be used for future connections. 287 // Mark the session as good, allowing it to be used for future connections.
245 SSL_SESSION_set_ex_data( 288 SSL_SESSION_set_ex_data(
246 session, GetSSLSessionExIndex(), reinterpret_cast<void*>(1)); 289 session, GetSSLSessionExIndex(), reinterpret_cast<void*>(1));
290
291 CheckIfSessionFinished(ssl);
247 } 292 }
248 293
249 // Flush all entries from the cache. 294 // Flush all entries from the cache.
250 void Flush() { 295 void Flush() {
251 base::AutoLock lock(lock_); 296 base::AutoLock lock(lock_);
252 id_index_.clear(); 297 id_index_.clear();
253 key_index_.clear(); 298 key_index_.clear();
254 while (!ordering_.empty()) { 299 while (!ordering_.empty()) {
255 SSL_SESSION* session = ordering_.front(); 300 SSL_SESSION* session = ordering_.front();
256 ordering_.pop_front(); 301 ordering_.pop_front();
257 SSL_SESSION_free(session); 302 SSL_SESSION_free(session);
258 } 303 }
259 } 304 }
260 305
261 private: 306 private:
307 // CallbackAndCompletionCounts are used to group a callback that should be
308 // run when a certian sesssion is added to the session cache with an integer
309 // indicating the status of that session.
310 struct CallbackAndCompletionCount {
311 CallbackAndCompletionCount(const base::Closure& completion_callback,
312 int completion_count)
313 : callback(completion_callback), count(completion_count) {}
314
315 const base::Closure callback;
316 // |count| < 2 means that the ssl session associated with this object
317 // has not been added to the session cache or has not been marked as good.
318 // |count| is incremented when a session is added to the cache or marked as
319 // good, thus |count| == 2 means that the session is ready for use.
320 int count;
321 };
322
262 // Type for list of SSL_SESSION handles, ordered in MRU order. 323 // Type for list of SSL_SESSION handles, ordered in MRU order.
263 typedef std::list<SSL_SESSION*> MRUSessionList; 324 typedef std::list<SSL_SESSION*> MRUSessionList;
264 // Type for a dictionary from unique cache keys to session list nodes. 325 // Type for a dictionary from unique cache keys to session list nodes.
265 typedef base::hash_map<std::string, MRUSessionList::iterator> KeyIndex; 326 typedef base::hash_map<std::string, MRUSessionList::iterator> KeyIndex;
266 // Type for a dictionary from SessionId values to key index nodes. 327 // Type for a dictionary from SessionId values to key index nodes.
267 typedef base::hash_map<SessionId, KeyIndex::iterator> SessionIdIndex; 328 typedef base::hash_map<SessionId, KeyIndex::iterator> SessionIdIndex;
329 // Type for a map from SSL* to associated callbacks
330 typedef std::map<SSL*, CallbackAndCompletionCount> SSLToCallbackMap;
268 331
269 // Return the key associated with a given session, or the empty string if 332 // Return the key associated with a given session, or the empty string if
270 // none exist. This shall only be used for debugging. 333 // none exist. This shall only be used for debugging.
271 std::string SessionKey(SSL_SESSION* session) { 334 std::string SessionKey(SSL_SESSION* session) {
272 if (!session) 335 if (!session)
273 return std::string("<null-session>"); 336 return std::string("<null-session>");
274 337
275 if (session->session_id_length == 0) 338 if (session->session_id_length == 0)
276 return std::string("<empty-session-id>"); 339 return std::string("<empty-session-id>");
277 340
(...skipping 57 matching lines...) Expand 10 before | Expand all | Expand 10 after
335 DCHECK(result); 398 DCHECK(result);
336 return reinterpret_cast<SSLSessionCacheOpenSSLImpl*>(result); 399 return reinterpret_cast<SSLSessionCacheOpenSSLImpl*>(result);
337 } 400 }
338 401
339 // Called by OpenSSL when a new |session| was created and added to a given 402 // Called by OpenSSL when a new |session| was created and added to a given
340 // |ssl| connection. Note that the session's reference count was already 403 // |ssl| connection. Note that the session's reference count was already
341 // incremented before the function is entered. The function must return 1 404 // incremented before the function is entered. The function must return 1
342 // to indicate that it took ownership of the session, i.e. that the caller 405 // to indicate that it took ownership of the session, i.e. that the caller
343 // should not decrement its reference count after completion. 406 // should not decrement its reference count after completion.
344 static int NewSessionCallbackStatic(SSL* ssl, SSL_SESSION* session) { 407 static int NewSessionCallbackStatic(SSL* ssl, SSL_SESSION* session) {
345 GetCache(ssl->ctx)->OnSessionAdded(ssl, session); 408 SSLSessionCacheOpenSSLImpl* cache = GetCache(ssl->ctx);
409 cache->OnSessionAdded(ssl, session);
410 cache->CheckIfSessionFinished(ssl);
346 return 1; 411 return 1;
347 } 412 }
348 413
349 // Called by OpenSSL to indicate that a session must be removed from the 414 // Called by OpenSSL to indicate that a session must be removed from the
350 // cache. This happens when SSL_CTX is destroyed. 415 // cache. This happens when SSL_CTX is destroyed.
351 static void RemoveSessionCallbackStatic(SSL_CTX* ctx, SSL_SESSION* session) { 416 static void RemoveSessionCallbackStatic(SSL_CTX* ctx, SSL_SESSION* session) {
352 GetCache(ctx)->OnSessionRemoved(session); 417 GetCache(ctx)->OnSessionRemoved(session);
353 } 418 }
354 419
355 // Called by OpenSSL to generate a new session ID. This happens during a 420 // Called by OpenSSL to generate a new session ID. This happens during a
(...skipping 103 matching lines...) Expand 10 before | Expand all | Expand 10 after
459 if (id_index_.find(SessionId(id, id_len)) == id_index_.end()) 524 if (id_index_.find(SessionId(id, id_len)) == id_index_.end())
460 return true; 525 return true;
461 } 526 }
462 DLOG(ERROR) << "Couldn't generate unique session ID of " << id_len 527 DLOG(ERROR) << "Couldn't generate unique session ID of " << id_len
463 << "bytes after " << kMaxTries << " tries."; 528 << "bytes after " << kMaxTries << " tries.";
464 return false; 529 return false;
465 } 530 }
466 531
467 SSL_CTX* ctx_; 532 SSL_CTX* ctx_;
468 SSLSessionCacheOpenSSL::Config config_; 533 SSLSessionCacheOpenSSL::Config config_;
534 SSLToCallbackMap ssl_to_callback_map_;
469 535
470 // method to get the index which can later be used with SSL_CTX_get_ex_data() 536 // method to get the index which can later be used with SSL_CTX_get_ex_data()
471 // or SSL_CTX_set_ex_data(). 537 // or SSL_CTX_set_ex_data().
472 base::Lock lock_; // Protects access to containers below. 538 mutable base::Lock lock_; // Protects access to containers below.
473 539
474 MRUSessionList ordering_; 540 MRUSessionList ordering_;
475 KeyIndex key_index_; 541 KeyIndex key_index_;
476 SessionIdIndex id_index_; 542 SessionIdIndex id_index_;
477 543
478 size_t expiration_check_; 544 size_t expiration_check_;
479 }; 545 };
480 546
481 SSLSessionCacheOpenSSL::~SSLSessionCacheOpenSSL() { delete impl_; } 547 SSLSessionCacheOpenSSL::~SSLSessionCacheOpenSSL() { delete impl_; }
482 548
483 size_t SSLSessionCacheOpenSSL::size() const { return impl_->size(); } 549 size_t SSLSessionCacheOpenSSL::size() const { return impl_->size(); }
484 550
485 void SSLSessionCacheOpenSSL::Reset(SSL_CTX* ctx, const Config& config) { 551 void SSLSessionCacheOpenSSL::Reset(SSL_CTX* ctx, const Config& config) {
486 if (impl_) 552 if (impl_)
487 delete impl_; 553 delete impl_;
488 554
489 impl_ = new SSLSessionCacheOpenSSLImpl(ctx, config); 555 impl_ = new SSLSessionCacheOpenSSLImpl(ctx, config);
490 } 556 }
491 557
492 bool SSLSessionCacheOpenSSL::SetSSLSession(SSL* ssl) { 558 bool SSLSessionCacheOpenSSL::SetSSLSession(SSL* ssl) {
493 return impl_->SetSSLSession(ssl); 559 return impl_->SetSSLSession(ssl);
494 } 560 }
495 561
496 bool SSLSessionCacheOpenSSL::SetSSLSessionWithKey( 562 bool SSLSessionCacheOpenSSL::SetSSLSessionWithKey(
497 SSL* ssl, 563 SSL* ssl,
498 const std::string& cache_key) { 564 const std::string& cache_key) {
499 return impl_->SetSSLSessionWithKey(ssl, cache_key); 565 return impl_->SetSSLSessionWithKey(ssl, cache_key);
500 } 566 }
501 567
568 bool SSLSessionCacheOpenSSL::SSLSessionIsInCache(
569 const std::string& cache_key) const {
570 return impl_->SSLSessionIsInCache(cache_key);
571 }
572
573 void SSLSessionCacheOpenSSL::RemoveSessionAddedCallback(SSL* ssl) {
574 impl_->RemoveSessionAddedCallback(ssl);
575 }
576
577 void SSLSessionCacheOpenSSL::SetSessionAddedCallback(SSL* ssl,
578 const base::Closure& cb) {
579 impl_->SetSessionAddedCallback(ssl, cb);
580 }
581
502 void SSLSessionCacheOpenSSL::MarkSSLSessionAsGood(SSL* ssl) { 582 void SSLSessionCacheOpenSSL::MarkSSLSessionAsGood(SSL* ssl) {
503 return impl_->MarkSSLSessionAsGood(ssl); 583 return impl_->MarkSSLSessionAsGood(ssl);
504 } 584 }
505 585
506 void SSLSessionCacheOpenSSL::Flush() { impl_->Flush(); } 586 void SSLSessionCacheOpenSSL::Flush() { impl_->Flush(); }
507 587
508 } // namespace net 588 } // namespace net
OLDNEW
« net/socket/ssl_client_socket_pool_unittest.cc ('K') | « net/socket/ssl_session_cache_openssl.h ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698