Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(653)

Unified Diff: net/socket/ssl_client_socket_pool.cc

Issue 353713005: Implements new, more robust design for communicating between SSLConnectJobs. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Implements new, more robust design for communicating between SSLConectJobs. Created 6 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/socket/ssl_client_socket_pool.cc
diff --git a/net/socket/ssl_client_socket_pool.cc b/net/socket/ssl_client_socket_pool.cc
index 2c704658820bc06a8404679c2f796be269657387..7257bf12ce14654dc2087668065c7b339c28a00e 100644
--- a/net/socket/ssl_client_socket_pool.cc
+++ b/net/socket/ssl_client_socket_pool.cc
@@ -94,6 +94,47 @@ SSLSocketParams::GetHttpProxyConnectionParams() const {
return http_proxy_params_;
}
+SSLClientSocket* SSLConnectJobMessenger::CanProceed(
+ scoped_ptr<SSLClientSocket> ssl_socket,
+ int& rv) {
+ rv = false;
+ // If the session is in the session cache, or there are no connecting
+ // sockets allow the connection to proceed.
+ if (ssl_socket->InSessionCache() || connecting_sockets_.empty()) {
+ // Watch the socket to see if it fails.
+ ssl_socket->OnSocketFailure(base::Bind(&SSLConnectJobMessenger::OnJobFailed,
+ base::Unretained(this)));
+ connecting_sockets_.push_back(&ssl_socket);
+ rv = true;
+ }
+ return ssl_socket.release();
Ryan Sleevi 2014/06/26 01:47:16 STYLE: We prefer to return a scoped_ptr<SSLClientS
mshelley 2014/07/01 02:35:22 Done.
+}
+
+SSLClientSocket* SSLConnectJobMessenger::NotifyOfCompletion(
+ scoped_ptr<SSLClientSocket> ssl_socket,
+ const base::Closure& cb) {
+ ssl_socket.reset(
+ pending_sockets_and_callbacks_.push_back(ssl_socket.Pass(), cb));
+ ssl_socket->OnSessionComplete(base::Bind(
+ &SSLConnectJobMessenger::OnJobSucceeded, base::Unretained(this)));
+ return ssl_socket.release();
Ryan Sleevi 2014/06/26 01:47:16 DANGER! You just gave up ownership of ssl_socket o
mshelley 2014/07/01 02:35:22 Done.
+}
+
+void SSLConnectJobMessenger::OnJobSucceeded() {
+ SSLPendingSocketsAndCallbacks temp_list(pending_sockets_and_callbacks_);
+ pending_sockets_and_callbacks_.clear();
+ connecting_sockets_.clear();
+ temp_list.RunAllJobs();
+}
+
+void SSLConnectJobMessenger::OnJobFailed() {
+ base::Closure cb = pending_sockets_and_callbacks_.GetFirstCallback();
+ pending_sockets_and_callbacks_.GetFirstSocket()->OnSocketFailure(
+ base::Bind(&SSLConnectJobMessenger::OnJobFailed, base::Unretained(this)));
+ pending_sockets_and_callbacks_.EraseFirstEntry();
+ cb.Run();
+}
+
// Timeout for the SSL handshake portion of the connect.
static const int kSSLHandshakeTimeoutInSeconds = 30;
@@ -107,6 +148,7 @@ SSLConnectJob::SSLConnectJob(const std::string& group_name,
ClientSocketFactory* client_socket_factory,
HostResolver* host_resolver,
const SSLClientSocketContext& context,
+ SSLConnectJobMessenger* messenger,
Delegate* delegate,
NetLog* net_log)
: ConnectJob(group_name,
@@ -127,11 +169,17 @@ SSLConnectJob::SSLConnectJob(const std::string& group_name,
(params->privacy_mode() == PRIVACY_MODE_ENABLED
? "pm/" + context.ssl_session_cache_shard
: context.ssl_session_cache_shard)),
- callback_(base::Bind(&SSLConnectJob::OnIOComplete,
- base::Unretained(this))) {}
+ io_callback_(
+ base::Bind(&SSLConnectJob::OnIOComplete, base::Unretained(this))),
+ messenger_(messenger),
+ weak_factory_(this) {
+}
SSLConnectJob::~SSLConnectJob() {}
+// static
+bool SSLConnectJob::enable_job_waiting_ = false;
+
LoadState SSLConnectJob::GetLoadState() const {
switch (next_state_) {
case STATE_TUNNEL_CONNECT_COMPLETE:
@@ -144,6 +192,8 @@ LoadState SSLConnectJob::GetLoadState() const {
case STATE_SOCKS_CONNECT_COMPLETE:
case STATE_TUNNEL_CONNECT:
return transport_socket_handle_->GetLoadState();
+ case STATE_CREATE_SSL_SOCKET:
+ case STATE_CHECK_FOR_RESUME:
case STATE_SSL_CONNECT:
case STATE_SSL_CONNECT_COMPLETE:
return LOAD_STATE_SSL_HANDSHAKE;
@@ -165,6 +215,14 @@ void SSLConnectJob::GetAdditionalErrorState(ClientSocketHandle* handle) {
handle->set_is_ssl_error(true);
}
+base::WeakPtr<SSLConnectJob> SSLConnectJob::GetWeakPtr() {
+ return weak_factory_.GetWeakPtr();
+}
+
+void SSLConnectJob::EnableJobWaiting(bool enable) {
+ enable_job_waiting_ = enable;
+}
+
void SSLConnectJob::OnIOComplete(int result) {
int rv = DoLoop(result);
if (rv != ERR_IO_PENDING)
@@ -200,6 +258,12 @@ int SSLConnectJob::DoLoop(int result) {
case STATE_TUNNEL_CONNECT_COMPLETE:
rv = DoTunnelConnectComplete(rv);
break;
+ case STATE_CREATE_SSL_SOCKET:
+ rv = DoCreateSSLSocket();
+ break;
+ case STATE_CHECK_FOR_RESUME:
+ rv = DoCheckForResume();
+ break;
case STATE_SSL_CONNECT:
DCHECK_EQ(OK, rv);
rv = DoSSLConnect();
@@ -227,14 +291,16 @@ int SSLConnectJob::DoTransportConnect() {
return transport_socket_handle_->Init(group_name(),
direct_params,
priority(),
- callback_,
+ io_callback_,
transport_pool_,
net_log());
}
int SSLConnectJob::DoTransportConnectComplete(int result) {
- if (result == OK)
- next_state_ = STATE_SSL_CONNECT;
+ if (result != OK)
+ return result;
+
+ next_state_ = STATE_CREATE_SSL_SOCKET;
return result;
}
@@ -248,14 +314,16 @@ int SSLConnectJob::DoSOCKSConnect() {
return transport_socket_handle_->Init(group_name(),
socks_proxy_params,
priority(),
- callback_,
+ io_callback_,
socks_pool_,
net_log());
}
int SSLConnectJob::DoSOCKSConnectComplete(int result) {
- if (result == OK)
- next_state_ = STATE_SSL_CONNECT;
+ if (result != OK)
+ return result;
+
+ next_state_ = STATE_CREATE_SSL_SOCKET;
return result;
}
@@ -270,7 +338,7 @@ int SSLConnectJob::DoTunnelConnect() {
return transport_socket_handle_->Init(group_name(),
http_proxy_params,
priority(),
- callback_,
+ io_callback_,
http_proxy_pool_,
net_log());
}
@@ -291,12 +359,15 @@ int SSLConnectJob::DoTunnelConnectComplete(int result) {
if (result < 0)
return result;
- next_state_ = STATE_SSL_CONNECT;
+ next_state_ = STATE_CREATE_SSL_SOCKET;
return result;
}
-int SSLConnectJob::DoSSLConnect() {
- next_state_ = STATE_SSL_CONNECT_COMPLETE;
+int SSLConnectJob::DoCreateSSLSocket() {
+ if (enable_job_waiting_)
+ next_state_ = STATE_CHECK_FOR_RESUME;
+ else
+ next_state_ = STATE_SSL_CONNECT;
// Reset the timeout to just the time allowed for the SSL handshake.
ResetTimer(base::TimeDelta::FromSeconds(kSSLHandshakeTimeoutInSeconds));
@@ -314,14 +385,32 @@ int SSLConnectJob::DoSSLConnect() {
connect_timing_.dns_end = socket_connect_timing.dns_end;
}
- connect_timing_.ssl_start = base::TimeTicks::Now();
-
ssl_socket_ = client_socket_factory_->CreateSSLClientSocket(
transport_socket_handle_.Pass(),
params_->host_and_port(),
params_->ssl_config(),
context_);
- return ssl_socket_->Connect(callback_);
+ return OK;
+}
+
+int SSLConnectJob::DoCheckForResume() {
+ next_state_ = STATE_SSL_CONNECT;
+ int rv;
+ ssl_socket_.reset(messenger_->CanProceed(ssl_socket_.Pass(), rv));
+ if (rv)
+ return OK;
+ ssl_socket_.reset(messenger_->NotifyOfCompletion(
+ ssl_socket_.Pass(),
+ base::Bind(&net::SSLConnectJob::ResumeSSLConnection, GetWeakPtr())));
+ return ERR_IO_PENDING;
+}
+
+int SSLConnectJob::DoSSLConnect() {
+ next_state_ = STATE_SSL_CONNECT_COMPLETE;
+
+ connect_timing_.ssl_start = base::TimeTicks::Now();
+
+ return ssl_socket_->Connect(io_callback_);
}
int SSLConnectJob::DoSSLConnectComplete(int result) {
@@ -351,8 +440,9 @@ int SSLConnectJob::DoSSLConnectComplete(int result) {
ssl_socket_->set_was_spdy_negotiated(true);
}
}
- if (params_->want_spdy_over_npn() && !ssl_socket_->was_spdy_negotiated())
+ if (params_->want_spdy_over_npn() && !ssl_socket_->was_spdy_negotiated()) {
return ERR_NPN_NEGOTIATION_FAILED;
+ }
// Spdy might be turned on by default, or it might be over npn.
bool using_spdy = params_->force_spdy_over_ssl() ||
@@ -411,9 +501,9 @@ int SSLConnectJob::DoSSLConnectComplete(int result) {
}
const std::string& host = params_->host_and_port().host();
- bool is_google = host == "google.com" ||
- (host.size() > 11 &&
- host.rfind(".google.com") == host.size() - 11);
+ bool is_google =
+ host == "google.com" ||
+ (host.size() > 11 && host.rfind(".google.com") == host.size() - 11);
if (is_google) {
UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency_Google2",
connect_duration,
@@ -449,6 +539,16 @@ int SSLConnectJob::DoSSLConnectComplete(int result) {
return result;
}
+void SSLConnectJob::ResumeSSLConnection() {
+ DCHECK_EQ(next_state_, STATE_SSL_CONNECT);
+ next_state_ = STATE_SSL_CONNECT;
+ OnIOComplete(OK);
+}
+
+bool SSLConnectJob::GetEnableJobWaiting() {
+ return enable_job_waiting_;
+}
+
SSLConnectJob::State SSLConnectJob::GetInitialState(
SSLSocketParams::ConnectionType connection_type) {
switch (connection_type) {
@@ -482,7 +582,8 @@ SSLClientSocketPool::SSLConnectJobFactory::SSLConnectJobFactory(
client_socket_factory_(client_socket_factory),
host_resolver_(host_resolver),
context_(context),
- net_log_(net_log) {
+ net_log_(net_log),
+ pending_jobs_map_(new PendingJobMap) {
base::TimeDelta max_transport_timeout = base::TimeDelta();
base::TimeDelta pool_timeout;
if (transport_pool_)
@@ -520,21 +621,24 @@ SSLClientSocketPool::SSLClientSocketPool(
: transport_pool_(transport_pool),
socks_pool_(socks_pool),
http_proxy_pool_(http_proxy_pool),
- base_(this, max_sockets, max_sockets_per_group, histograms,
+ base_(this,
+ max_sockets,
+ max_sockets_per_group,
+ histograms,
ClientSocketPool::unused_idle_socket_timeout(),
ClientSocketPool::used_idle_socket_timeout(),
- new SSLConnectJobFactory(transport_pool,
- socks_pool,
- http_proxy_pool,
- client_socket_factory,
- host_resolver,
- SSLClientSocketContext(
- cert_verifier,
- server_bound_cert_service,
- transport_security_state,
- cert_transparency_verifier,
- ssl_session_cache_shard),
- net_log)),
+ new SSLConnectJobFactory(
+ transport_pool,
+ socks_pool,
+ http_proxy_pool,
+ client_socket_factory,
+ host_resolver,
+ SSLClientSocketContext(cert_verifier,
+ server_bound_cert_service,
+ transport_security_state,
+ cert_transparency_verifier,
+ ssl_session_cache_shard),
+ net_log)),
ssl_config_service_(ssl_config_service) {
if (ssl_config_service_.get())
ssl_config_service_->AddObserver(this);
@@ -556,11 +660,33 @@ SSLClientSocketPool::SSLConnectJobFactory::NewConnectJob(
const std::string& group_name,
const PoolBase::Request& request,
ConnectJob::Delegate* delegate) const {
- return scoped_ptr<ConnectJob>(
- new SSLConnectJob(group_name, request.priority(), request.params(),
- ConnectionTimeout(), transport_pool_, socks_pool_,
- http_proxy_pool_, client_socket_factory_,
- host_resolver_, context_, delegate, net_log_));
+ // NOTE need to change all of this to use cache key and not group name
+ SSLConnectJobMessenger* messenger;
+ if (SSLConnectJob::GetEnableJobWaiting()) {
+ PendingJobMap::const_iterator it = pending_jobs_map_->find(group_name);
+ if (it == pending_jobs_map_->end()) {
+ std::pair<PendingJobMap::iterator, bool> iter = pending_jobs_map_->insert(
+ PendingJobMap::value_type(group_name, new SSLConnectJobMessenger()));
+ it = iter.first;
+ }
+ messenger = it->second;
+ } else {
+ messenger = NULL;
+ }
+
+ return scoped_ptr<ConnectJob>(new SSLConnectJob(group_name,
+ request.priority(),
+ request.params(),
+ ConnectionTimeout(),
+ transport_pool_,
+ socks_pool_,
+ http_proxy_pool_,
+ client_socket_factory_,
+ host_resolver_,
+ context_,
+ messenger,
+ delegate,
+ net_log_));
}
base::TimeDelta

Powered by Google App Engine
This is Rietveld 408576698