Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(135)

Side by Side Diff: net/socket/ssl_session_cache_openssl.cc

Issue 353713005: Implements new, more robust design for communicating between SSLConnectJobs. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Rewrote the MockSSLClientSocket connect state loop to use the typical Chrome structure & fixed bugs… Created 6 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright 2013 The Chromium Authors. All rights reserved. 1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "net/socket/ssl_session_cache_openssl.h" 5 #include "net/socket/ssl_session_cache_openssl.h"
6 6
7 #include <list> 7 #include <list>
8 #include <map> 8 #include <map>
9 9
10 #include <openssl/rand.h> 10 #include <openssl/rand.h>
11 #include <openssl/ssl.h> 11 #include <openssl/ssl.h>
12 12
13 #include "base/callback.h"
13 #include "base/containers/hash_tables.h" 14 #include "base/containers/hash_tables.h"
14 #include "base/lazy_instance.h" 15 #include "base/lazy_instance.h"
15 #include "base/logging.h" 16 #include "base/logging.h"
16 #include "base/synchronization/lock.h" 17 #include "base/synchronization/lock.h"
17 18
18 namespace net { 19 namespace net {
19 20
20 namespace { 21 namespace {
21 22
22 // A helper class to lazily create a new EX_DATA index to map SSL_CTX handles 23 // A helper class to lazily create a new EX_DATA index to map SSL_CTX handles
(...skipping 206 matching lines...) Expand 10 before | Expand all | Expand 10 after
229 return false; // Session has not yet been marked good. Treat as a miss. 230 return false; // Session has not yet been marked good. Treat as a miss.
230 231
231 // Move to front of MRU list. 232 // Move to front of MRU list.
232 ordering_.push_front(session); 233 ordering_.push_front(session);
233 ordering_.erase(it->second); 234 ordering_.erase(it->second);
234 it->second = ordering_.begin(); 235 it->second = ordering_.begin();
235 236
236 return SSL_set_session(ssl, session) == 1; 237 return SSL_set_session(ssl, session) == 1;
237 } 238 }
238 239
240 bool SSLSessionIsInCache(const std::string& cache_key) const {
241 base::AutoLock locked(lock_);
242 KeyIndex::const_iterator it = key_index_.find(cache_key);
243 if (it == key_index_.end())
244 return false;
245
246 SSL_SESSION* session = *it->second;
247 DCHECK(session);
248
249 void* session_is_good =
250 SSL_SESSION_get_ex_data(session, GetSSLSessionExIndex());
251
252 return session_is_good;
253 }
254
255 void SetSessionAddedCallback(SSL* ssl, const base::Closure& callback) {
256 // Add |ssl| to the SSLtoCallbackMap.
257 ssl_to_callback_map_.insert(SSLToCallbackMap::value_type(
258 ssl, CallbackAndCompletionCount(callback, 0)));
259 }
260
261 // Determines if the session for |ssl| is in the cache, and calls the
262 // appropriate callback if that is the case.
263 void CheckIfSessionFinished(SSL* ssl) {
264 SSLToCallbackMap::iterator it = ssl_to_callback_map_.find(ssl);
265 if (it == ssl_to_callback_map_.end())
266 return;
267 // Increment the session's completion count.
268 if (++it->second.count == 2) {
269 // The session has been MarkedAsGood and Added, so it can be used.
270 // These two events can occur in either order.
271 base::Closure callback = it->second.callback;
272 ssl_to_callback_map_.erase(it);
273 callback.Run();
274 }
275 }
276
277 void RemoveSessionAddedCallback(SSL* ssl) { ssl_to_callback_map_.erase(ssl); }
278
239 void MarkSSLSessionAsGood(SSL* ssl) { 279 void MarkSSLSessionAsGood(SSL* ssl) {
240 SSL_SESSION* session = SSL_get_session(ssl); 280 SSL_SESSION* session = SSL_get_session(ssl);
241 if (!session) 281
242 return; 282 CHECK(session);
243 283
244 // Mark the session as good, allowing it to be used for future connections. 284 // Mark the session as good, allowing it to be used for future connections.
245 SSL_SESSION_set_ex_data( 285 SSL_SESSION_set_ex_data(
246 session, GetSSLSessionExIndex(), reinterpret_cast<void*>(1)); 286 session, GetSSLSessionExIndex(), reinterpret_cast<void*>(1));
287
288 CheckIfSessionFinished(ssl);
247 } 289 }
248 290
249 // Flush all entries from the cache. 291 // Flush all entries from the cache.
250 void Flush() { 292 void Flush() {
251 base::AutoLock lock(lock_); 293 base::AutoLock lock(lock_);
252 id_index_.clear(); 294 id_index_.clear();
253 key_index_.clear(); 295 key_index_.clear();
254 while (!ordering_.empty()) { 296 while (!ordering_.empty()) {
255 SSL_SESSION* session = ordering_.front(); 297 SSL_SESSION* session = ordering_.front();
256 ordering_.pop_front(); 298 ordering_.pop_front();
257 SSL_SESSION_free(session); 299 SSL_SESSION_free(session);
258 } 300 }
259 } 301 }
260 302
261 private: 303 private:
304 // CallbackAndCompletionCounts are used to group a callback that should be
305 // run when a certian sesssion is added to the session cache with an integer
306 // indicating the status of that session.
307 struct CallbackAndCompletionCount {
308 CallbackAndCompletionCount(const base::Closure& completion_callback,
309 int completion_count)
310 : callback(completion_callback), count(completion_count) {}
311
312 const base::Closure callback;
313 // |count| < 2 means that the ssl session associated with this object
314 // has not been added to the session cache or has not been marked as good.
315 // |count| is incremented when a session is added to the cache or marked as
316 // good, thus |count| == 2 means that the session is ready for use.
317 int count;
318 };
319
262 // Type for list of SSL_SESSION handles, ordered in MRU order. 320 // Type for list of SSL_SESSION handles, ordered in MRU order.
263 typedef std::list<SSL_SESSION*> MRUSessionList; 321 typedef std::list<SSL_SESSION*> MRUSessionList;
264 // Type for a dictionary from unique cache keys to session list nodes. 322 // Type for a dictionary from unique cache keys to session list nodes.
265 typedef base::hash_map<std::string, MRUSessionList::iterator> KeyIndex; 323 typedef base::hash_map<std::string, MRUSessionList::iterator> KeyIndex;
266 // Type for a dictionary from SessionId values to key index nodes. 324 // Type for a dictionary from SessionId values to key index nodes.
267 typedef base::hash_map<SessionId, KeyIndex::iterator> SessionIdIndex; 325 typedef base::hash_map<SessionId, KeyIndex::iterator> SessionIdIndex;
326 // Type for a map from SSL* to associated callbacks
327 typedef std::map<SSL*, CallbackAndCompletionCount> SSLToCallbackMap;
268 328
269 // Return the key associated with a given session, or the empty string if 329 // Return the key associated with a given session, or the empty string if
270 // none exist. This shall only be used for debugging. 330 // none exist. This shall only be used for debugging.
271 std::string SessionKey(SSL_SESSION* session) { 331 std::string SessionKey(SSL_SESSION* session) {
272 if (!session) 332 if (!session)
273 return std::string("<null-session>"); 333 return std::string("<null-session>");
274 334
275 if (session->session_id_length == 0) 335 if (session->session_id_length == 0)
276 return std::string("<empty-session-id>"); 336 return std::string("<empty-session-id>");
277 337
(...skipping 57 matching lines...) Expand 10 before | Expand all | Expand 10 after
335 DCHECK(result); 395 DCHECK(result);
336 return reinterpret_cast<SSLSessionCacheOpenSSLImpl*>(result); 396 return reinterpret_cast<SSLSessionCacheOpenSSLImpl*>(result);
337 } 397 }
338 398
339 // Called by OpenSSL when a new |session| was created and added to a given 399 // Called by OpenSSL when a new |session| was created and added to a given
340 // |ssl| connection. Note that the session's reference count was already 400 // |ssl| connection. Note that the session's reference count was already
341 // incremented before the function is entered. The function must return 1 401 // incremented before the function is entered. The function must return 1
342 // to indicate that it took ownership of the session, i.e. that the caller 402 // to indicate that it took ownership of the session, i.e. that the caller
343 // should not decrement its reference count after completion. 403 // should not decrement its reference count after completion.
344 static int NewSessionCallbackStatic(SSL* ssl, SSL_SESSION* session) { 404 static int NewSessionCallbackStatic(SSL* ssl, SSL_SESSION* session) {
345 GetCache(ssl->ctx)->OnSessionAdded(ssl, session); 405 SSLSessionCacheOpenSSLImpl* cache = GetCache(ssl->ctx);
406 cache->OnSessionAdded(ssl, session);
407 cache->CheckIfSessionFinished(ssl);
346 return 1; 408 return 1;
347 } 409 }
348 410
349 // Called by OpenSSL to indicate that a session must be removed from the 411 // Called by OpenSSL to indicate that a session must be removed from the
350 // cache. This happens when SSL_CTX is destroyed. 412 // cache. This happens when SSL_CTX is destroyed.
351 static void RemoveSessionCallbackStatic(SSL_CTX* ctx, SSL_SESSION* session) { 413 static void RemoveSessionCallbackStatic(SSL_CTX* ctx, SSL_SESSION* session) {
352 GetCache(ctx)->OnSessionRemoved(session); 414 GetCache(ctx)->OnSessionRemoved(session);
353 } 415 }
354 416
355 // Called by OpenSSL to generate a new session ID. This happens during a 417 // Called by OpenSSL to generate a new session ID. This happens during a
(...skipping 103 matching lines...) Expand 10 before | Expand all | Expand 10 after
459 if (id_index_.find(SessionId(id, id_len)) == id_index_.end()) 521 if (id_index_.find(SessionId(id, id_len)) == id_index_.end())
460 return true; 522 return true;
461 } 523 }
462 DLOG(ERROR) << "Couldn't generate unique session ID of " << id_len 524 DLOG(ERROR) << "Couldn't generate unique session ID of " << id_len
463 << "bytes after " << kMaxTries << " tries."; 525 << "bytes after " << kMaxTries << " tries.";
464 return false; 526 return false;
465 } 527 }
466 528
467 SSL_CTX* ctx_; 529 SSL_CTX* ctx_;
468 SSLSessionCacheOpenSSL::Config config_; 530 SSLSessionCacheOpenSSL::Config config_;
531 SSLToCallbackMap ssl_to_callback_map_;
469 532
470 // method to get the index which can later be used with SSL_CTX_get_ex_data() 533 // method to get the index which can later be used with SSL_CTX_get_ex_data()
471 // or SSL_CTX_set_ex_data(). 534 // or SSL_CTX_set_ex_data().
472 base::Lock lock_; // Protects access to containers below. 535 mutable base::Lock lock_; // Protects access to containers below.
473 536
474 MRUSessionList ordering_; 537 MRUSessionList ordering_;
475 KeyIndex key_index_; 538 KeyIndex key_index_;
476 SessionIdIndex id_index_; 539 SessionIdIndex id_index_;
477 540
478 size_t expiration_check_; 541 size_t expiration_check_;
479 }; 542 };
480 543
481 SSLSessionCacheOpenSSL::~SSLSessionCacheOpenSSL() { delete impl_; } 544 SSLSessionCacheOpenSSL::~SSLSessionCacheOpenSSL() { delete impl_; }
482 545
483 size_t SSLSessionCacheOpenSSL::size() const { return impl_->size(); } 546 size_t SSLSessionCacheOpenSSL::size() const { return impl_->size(); }
484 547
485 void SSLSessionCacheOpenSSL::Reset(SSL_CTX* ctx, const Config& config) { 548 void SSLSessionCacheOpenSSL::Reset(SSL_CTX* ctx, const Config& config) {
486 if (impl_) 549 if (impl_)
487 delete impl_; 550 delete impl_;
488 551
489 impl_ = new SSLSessionCacheOpenSSLImpl(ctx, config); 552 impl_ = new SSLSessionCacheOpenSSLImpl(ctx, config);
490 } 553 }
491 554
492 bool SSLSessionCacheOpenSSL::SetSSLSession(SSL* ssl) { 555 bool SSLSessionCacheOpenSSL::SetSSLSession(SSL* ssl) {
493 return impl_->SetSSLSession(ssl); 556 return impl_->SetSSLSession(ssl);
494 } 557 }
495 558
496 bool SSLSessionCacheOpenSSL::SetSSLSessionWithKey( 559 bool SSLSessionCacheOpenSSL::SetSSLSessionWithKey(
497 SSL* ssl, 560 SSL* ssl,
498 const std::string& cache_key) { 561 const std::string& cache_key) {
499 return impl_->SetSSLSessionWithKey(ssl, cache_key); 562 return impl_->SetSSLSessionWithKey(ssl, cache_key);
500 } 563 }
501 564
565 bool SSLSessionCacheOpenSSL::SSLSessionIsInCache(
566 const std::string& cache_key) const {
567 return impl_->SSLSessionIsInCache(cache_key);
568 }
569
570 void SSLSessionCacheOpenSSL::RemoveSessionAddedCallback(SSL* ssl) {
571 impl_->RemoveSessionAddedCallback(ssl);
572 }
573
574 void SSLSessionCacheOpenSSL::SetSessionAddedCallback(SSL* ssl,
575 const base::Closure& cb) {
576 impl_->SetSessionAddedCallback(ssl, cb);
577 }
578
502 void SSLSessionCacheOpenSSL::MarkSSLSessionAsGood(SSL* ssl) { 579 void SSLSessionCacheOpenSSL::MarkSSLSessionAsGood(SSL* ssl) {
503 return impl_->MarkSSLSessionAsGood(ssl); 580 return impl_->MarkSSLSessionAsGood(ssl);
504 } 581 }
505 582
506 void SSLSessionCacheOpenSSL::Flush() { impl_->Flush(); } 583 void SSLSessionCacheOpenSSL::Flush() { impl_->Flush(); }
507 584
508 } // namespace net 585 } // namespace net
OLDNEW
« net/socket/ssl_client_socket_pool_unittest.cc ('K') | « net/socket/ssl_session_cache_openssl.h ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698