Allow two SSL Server Socket parameters to be tuned by the caller

net/socket/ssl_server_socket_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/ssl_server_socket_nss.h"
 
 #if defined(OS_WIN)
 #include <winsock2.h>
 #endif
 
@@ skipping 35 matching lines @@
 static const int kRecvBufferSize = 17 * 1024;
 static const int kSendBufferSize = 17 * 1024;
 
 #define GotoState(s) next_handshake_state_ = s
 
 namespace net {
 
 namespace {
 
 bool g_nss_server_sockets_init = false;
+int g_max_session_id_cache_entries = 1024;
+int g_ssl_session_id_cache_timeout = 5;
 
 class NSSSSLServerInitSingleton {
  public:
   NSSSSLServerInitSingleton() {
     EnsureNSSSSLInit();
 
-    SSL_ConfigServerSessionIDCache(1024, 5, 5, NULL);
+    SSL_ConfigServerSessionIDCache(g_max_session_id_cache_entries,
+                                   g_ssl_session_id_cache_timeout,
+                                   g_ssl_session_id_cache_timeout,
+                                   NULL);
     g_nss_server_sockets_init = true;
   }
 
   ~NSSSSLServerInitSingleton() {
     SSL_ShutdownServerSessionIDCache();
     g_nss_server_sockets_init = false;
   }
 };
 
 static base::LazyInstance<NSSSSLServerInitSingleton>
     g_nss_ssl_server_init_singleton = LAZY_INSTANCE_INITIALIZER;
 
 }  // namespace
 
+void SetSSLServerSessionCacheParameters(
+    int max_session_id_cache_entries,
+    int ssl_session_id_cache_timeout) {
+  DCHECK(!g_nss_server_sockets_init) << "SetSSLServerSessionCacheParameters"
+                                     << " cannot be called after"
+                                     << " EnableSSLServerSockets.";
+  g_max_session_id_cache_entries = max_session_id_cache_entries;
+  g_ssl_session_id_cache_timeout = ssl_session_id_cache_timeout;
+}
+
 void EnableSSLServerSockets() {
   g_nss_ssl_server_init_singleton.Get();
 }
 
 scoped_ptr<SSLServerSocket> CreateSSLServerSocket(
     scoped_ptr<StreamSocket> socket,
     X509Certificate* cert,
     crypto::RSAPrivateKey* key,
     const SSLConfig& ssl_config) {
   DCHECK(g_nss_server_sockets_init) << "EnableSSLServerSockets() has not been"
-                                    << "called yet!";
+                                    << " called yet!";
 
   return scoped_ptr<SSLServerSocket>(
       new SSLServerSocketNSS(socket.Pass(), cert, key, ssl_config));
 }
 
 SSLServerSocketNSS::SSLServerSocketNSS(
     scoped_ptr<StreamSocket> transport_socket,
     scoped_refptr<X509Certificate> cert,
     crypto::RSAPrivateKey* key,
     const SSLConfig& ssl_config)
@@ skipping 732 matching lines @@
   // initializes the NSS base library.
   EnsureNSSSSLInit();
   if (!NSS_IsInitialized())
     return ERR_UNEXPECTED;
 
   EnableSSLServerSockets();
   return OK;
 }
 
 }  // namespace net