| Index: net/ssl/ssl_client_session_cache_openssl.h
|
| diff --git a/net/ssl/ssl_client_session_cache_openssl.h b/net/ssl/ssl_client_session_cache_openssl.h
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..bfe912b983a334ecc29bc1152d982541e1bcc9d6
|
| --- /dev/null
|
| +++ b/net/ssl/ssl_client_session_cache_openssl.h
|
| @@ -0,0 +1,92 @@
|
| +// Copyright 2015 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#ifndef NET_SSL_SSL_CLIENT_SESSION_CACHE_OPENSSL_H
|
| +#define NET_SSL_SSL_CLIENT_SESSION_CACHE_OPENSSL_H
|
| +
|
| +#include <openssl/ssl.h>
|
| +
|
| +#include <string>
|
| +
|
| +#include "base/containers/mru_cache.h"
|
| +#include "base/macros.h"
|
| +#include "base/memory/scoped_ptr.h"
|
| +#include "base/threading/thread_checker.h"
|
| +#include "base/time/time.h"
|
| +#include "net/base/net_export.h"
|
| +#include "net/ssl/scoped_openssl_types.h"
|
| +
|
| +namespace base {
|
| +class Clock;
|
| +}
|
| +
|
| +namespace net {
|
| +
|
| +class NET_EXPORT SSLClientSessionCacheOpenSSL {
|
| + public:
|
| + struct Config {
|
| + // The maximum number of entries in the cache.
|
| + size_t max_entries = 1024;
|
| + // The number of calls to Lookup before a new check for expired sessions.
|
| + size_t expiration_check_count = 256;
|
| + // How long each session should last.
|
| + base::TimeDelta timeout = base::TimeDelta::FromHours(1);
|
| + };
|
| +
|
| + explicit SSLClientSessionCacheOpenSSL(const Config& config);
|
| + ~SSLClientSessionCacheOpenSSL();
|
| +
|
| + size_t size() const;
|
| +
|
| + // Returns the session associated with |cache_key| and moves it to the front
|
| + // of the MRU list. Returns null if there is none. The caller is responsible
|
| + // for taking a reference to the pointer if the cache is destroyed or a call
|
| + // to Insert is made.
|
| + SSL_SESSION* Lookup(const std::string& cache_key);
|
| +
|
| + // Inserts |session| into the cache at |cache_key|. If there is an existing
|
| + // one, it is released. Every |expiration_check_count| calls, the cache is
|
| + // checked for stale entries.
|
| + void Insert(const std::string& cache_key, SSL_SESSION* session);
|
| +
|
| + // Removes all entries from the cache.
|
| + void Flush();
|
| +
|
| + void SetClockForTesting(scoped_ptr<base::Clock> clock);
|
| +
|
| + private:
|
| + struct CacheEntry {
|
| + CacheEntry();
|
| + ~CacheEntry();
|
| +
|
| + ScopedSSL_SESSION session;
|
| + // The time at which this entry was created.
|
| + base::Time creation_time;
|
| + };
|
| +
|
| + using CacheEntryMap =
|
| + base::MRUCacheBase<std::string,
|
| + CacheEntry*,
|
| + base::MRUCachePointerDeletor<CacheEntry*>,
|
| + base::MRUCacheHashMap>;
|
| +
|
| + // Returns true if |entry| is expired as of |now|.
|
| + bool IsExpired(CacheEntry* entry, const base::Time& now);
|
| +
|
| + // Removes all expired sessions from the cache.
|
| + void FlushExpiredSessions();
|
| +
|
| + scoped_ptr<base::Clock> clock_;
|
| + Config config_;
|
| + CacheEntryMap cache_;
|
| + size_t lookups_since_flush_;
|
| +
|
| + base::ThreadChecker thread_checker_;
|
| +
|
| + DISALLOW_COPY_AND_ASSIGN(SSLClientSessionCacheOpenSSL);
|
| +};
|
| +
|
| +} // namespace net
|
| +
|
| +#endif // NET_SSL_SSL_CLIENT_SESSION_CACHE_OPENSSL_H
|
|
|