mbedtls ported to mbed-classic
Fork of mbedtls by
source/ssl_cache.c@4:bef26f687287, 2016-04-07 (annotated)
- Committer:
- Brian Daniels
- Date:
- Thu Apr 07 11:11:18 2016 +0100
- Revision:
- 4:bef26f687287
- Parent:
- 1:24750b9ad5ef
Adding ported selftest test case
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
Christopher Haster |
1:24750b9ad5ef | 1 | /* |
Christopher Haster |
1:24750b9ad5ef | 2 | * SSL session cache implementation |
Christopher Haster |
1:24750b9ad5ef | 3 | * |
Christopher Haster |
1:24750b9ad5ef | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
Christopher Haster |
1:24750b9ad5ef | 5 | * SPDX-License-Identifier: Apache-2.0 |
Christopher Haster |
1:24750b9ad5ef | 6 | * |
Christopher Haster |
1:24750b9ad5ef | 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
Christopher Haster |
1:24750b9ad5ef | 8 | * not use this file except in compliance with the License. |
Christopher Haster |
1:24750b9ad5ef | 9 | * You may obtain a copy of the License at |
Christopher Haster |
1:24750b9ad5ef | 10 | * |
Christopher Haster |
1:24750b9ad5ef | 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
Christopher Haster |
1:24750b9ad5ef | 12 | * |
Christopher Haster |
1:24750b9ad5ef | 13 | * Unless required by applicable law or agreed to in writing, software |
Christopher Haster |
1:24750b9ad5ef | 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
Christopher Haster |
1:24750b9ad5ef | 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
Christopher Haster |
1:24750b9ad5ef | 16 | * See the License for the specific language governing permissions and |
Christopher Haster |
1:24750b9ad5ef | 17 | * limitations under the License. |
Christopher Haster |
1:24750b9ad5ef | 18 | * |
Christopher Haster |
1:24750b9ad5ef | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
Christopher Haster |
1:24750b9ad5ef | 20 | */ |
Christopher Haster |
1:24750b9ad5ef | 21 | /* |
Christopher Haster |
1:24750b9ad5ef | 22 | * These session callbacks use a simple chained list |
Christopher Haster |
1:24750b9ad5ef | 23 | * to store and retrieve the session information. |
Christopher Haster |
1:24750b9ad5ef | 24 | */ |
Christopher Haster |
1:24750b9ad5ef | 25 | |
Christopher Haster |
1:24750b9ad5ef | 26 | #if !defined(MBEDTLS_CONFIG_FILE) |
Christopher Haster |
1:24750b9ad5ef | 27 | #include "mbedtls/config.h" |
Christopher Haster |
1:24750b9ad5ef | 28 | #else |
Christopher Haster |
1:24750b9ad5ef | 29 | #include MBEDTLS_CONFIG_FILE |
Christopher Haster |
1:24750b9ad5ef | 30 | #endif |
Christopher Haster |
1:24750b9ad5ef | 31 | |
Christopher Haster |
1:24750b9ad5ef | 32 | #if defined(MBEDTLS_SSL_CACHE_C) |
Christopher Haster |
1:24750b9ad5ef | 33 | |
Christopher Haster |
1:24750b9ad5ef | 34 | #include "mbedtls/ssl_cache.h" |
Christopher Haster |
1:24750b9ad5ef | 35 | |
Christopher Haster |
1:24750b9ad5ef | 36 | #include <string.h> |
Christopher Haster |
1:24750b9ad5ef | 37 | |
Christopher Haster |
1:24750b9ad5ef | 38 | #if defined(MBEDTLS_PLATFORM_C) |
Christopher Haster |
1:24750b9ad5ef | 39 | #include "mbedtls/platform.h" |
Christopher Haster |
1:24750b9ad5ef | 40 | #else |
Christopher Haster |
1:24750b9ad5ef | 41 | #include <stdlib.h> |
Christopher Haster |
1:24750b9ad5ef | 42 | #define mbedtls_calloc calloc |
Christopher Haster |
1:24750b9ad5ef | 43 | #define mbedtls_free free |
Christopher Haster |
1:24750b9ad5ef | 44 | #endif |
Christopher Haster |
1:24750b9ad5ef | 45 | |
Christopher Haster |
1:24750b9ad5ef | 46 | void mbedtls_ssl_cache_init( mbedtls_ssl_cache_context *cache ) |
Christopher Haster |
1:24750b9ad5ef | 47 | { |
Christopher Haster |
1:24750b9ad5ef | 48 | memset( cache, 0, sizeof( mbedtls_ssl_cache_context ) ); |
Christopher Haster |
1:24750b9ad5ef | 49 | |
Christopher Haster |
1:24750b9ad5ef | 50 | cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; |
Christopher Haster |
1:24750b9ad5ef | 51 | cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; |
Christopher Haster |
1:24750b9ad5ef | 52 | |
Christopher Haster |
1:24750b9ad5ef | 53 | #if defined(MBEDTLS_THREADING_C) |
Christopher Haster |
1:24750b9ad5ef | 54 | mbedtls_mutex_init( &cache->mutex ); |
Christopher Haster |
1:24750b9ad5ef | 55 | #endif |
Christopher Haster |
1:24750b9ad5ef | 56 | } |
Christopher Haster |
1:24750b9ad5ef | 57 | |
Christopher Haster |
1:24750b9ad5ef | 58 | int mbedtls_ssl_cache_get( void *data, mbedtls_ssl_session *session ) |
Christopher Haster |
1:24750b9ad5ef | 59 | { |
Christopher Haster |
1:24750b9ad5ef | 60 | int ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 61 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 62 | time_t t = time( NULL ); |
Christopher Haster |
1:24750b9ad5ef | 63 | #endif |
Christopher Haster |
1:24750b9ad5ef | 64 | mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; |
Christopher Haster |
1:24750b9ad5ef | 65 | mbedtls_ssl_cache_entry *cur, *entry; |
Christopher Haster |
1:24750b9ad5ef | 66 | |
Christopher Haster |
1:24750b9ad5ef | 67 | #if defined(MBEDTLS_THREADING_C) |
Christopher Haster |
1:24750b9ad5ef | 68 | if( mbedtls_mutex_lock( &cache->mutex ) != 0 ) |
Christopher Haster |
1:24750b9ad5ef | 69 | return( 1 ); |
Christopher Haster |
1:24750b9ad5ef | 70 | #endif |
Christopher Haster |
1:24750b9ad5ef | 71 | |
Christopher Haster |
1:24750b9ad5ef | 72 | cur = cache->chain; |
Christopher Haster |
1:24750b9ad5ef | 73 | entry = NULL; |
Christopher Haster |
1:24750b9ad5ef | 74 | |
Christopher Haster |
1:24750b9ad5ef | 75 | while( cur != NULL ) |
Christopher Haster |
1:24750b9ad5ef | 76 | { |
Christopher Haster |
1:24750b9ad5ef | 77 | entry = cur; |
Christopher Haster |
1:24750b9ad5ef | 78 | cur = cur->next; |
Christopher Haster |
1:24750b9ad5ef | 79 | |
Christopher Haster |
1:24750b9ad5ef | 80 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 81 | if( cache->timeout != 0 && |
Christopher Haster |
1:24750b9ad5ef | 82 | (int) ( t - entry->timestamp ) > cache->timeout ) |
Christopher Haster |
1:24750b9ad5ef | 83 | continue; |
Christopher Haster |
1:24750b9ad5ef | 84 | #endif |
Christopher Haster |
1:24750b9ad5ef | 85 | |
Christopher Haster |
1:24750b9ad5ef | 86 | if( session->ciphersuite != entry->session.ciphersuite || |
Christopher Haster |
1:24750b9ad5ef | 87 | session->compression != entry->session.compression || |
Christopher Haster |
1:24750b9ad5ef | 88 | session->id_len != entry->session.id_len ) |
Christopher Haster |
1:24750b9ad5ef | 89 | continue; |
Christopher Haster |
1:24750b9ad5ef | 90 | |
Christopher Haster |
1:24750b9ad5ef | 91 | if( memcmp( session->id, entry->session.id, |
Christopher Haster |
1:24750b9ad5ef | 92 | entry->session.id_len ) != 0 ) |
Christopher Haster |
1:24750b9ad5ef | 93 | continue; |
Christopher Haster |
1:24750b9ad5ef | 94 | |
Christopher Haster |
1:24750b9ad5ef | 95 | memcpy( session->master, entry->session.master, 48 ); |
Christopher Haster |
1:24750b9ad5ef | 96 | |
Christopher Haster |
1:24750b9ad5ef | 97 | session->verify_result = entry->session.verify_result; |
Christopher Haster |
1:24750b9ad5ef | 98 | |
Christopher Haster |
1:24750b9ad5ef | 99 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Christopher Haster |
1:24750b9ad5ef | 100 | /* |
Christopher Haster |
1:24750b9ad5ef | 101 | * Restore peer certificate (without rest of the original chain) |
Christopher Haster |
1:24750b9ad5ef | 102 | */ |
Christopher Haster |
1:24750b9ad5ef | 103 | if( entry->peer_cert.p != NULL ) |
Christopher Haster |
1:24750b9ad5ef | 104 | { |
Christopher Haster |
1:24750b9ad5ef | 105 | if( ( session->peer_cert = mbedtls_calloc( 1, |
Christopher Haster |
1:24750b9ad5ef | 106 | sizeof(mbedtls_x509_crt) ) ) == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 107 | { |
Christopher Haster |
1:24750b9ad5ef | 108 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 109 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 110 | } |
Christopher Haster |
1:24750b9ad5ef | 111 | |
Christopher Haster |
1:24750b9ad5ef | 112 | mbedtls_x509_crt_init( session->peer_cert ); |
Christopher Haster |
1:24750b9ad5ef | 113 | if( mbedtls_x509_crt_parse( session->peer_cert, entry->peer_cert.p, |
Christopher Haster |
1:24750b9ad5ef | 114 | entry->peer_cert.len ) != 0 ) |
Christopher Haster |
1:24750b9ad5ef | 115 | { |
Christopher Haster |
1:24750b9ad5ef | 116 | mbedtls_free( session->peer_cert ); |
Christopher Haster |
1:24750b9ad5ef | 117 | session->peer_cert = NULL; |
Christopher Haster |
1:24750b9ad5ef | 118 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 119 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 120 | } |
Christopher Haster |
1:24750b9ad5ef | 121 | } |
Christopher Haster |
1:24750b9ad5ef | 122 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Christopher Haster |
1:24750b9ad5ef | 123 | |
Christopher Haster |
1:24750b9ad5ef | 124 | ret = 0; |
Christopher Haster |
1:24750b9ad5ef | 125 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 126 | } |
Christopher Haster |
1:24750b9ad5ef | 127 | |
Christopher Haster |
1:24750b9ad5ef | 128 | exit: |
Christopher Haster |
1:24750b9ad5ef | 129 | #if defined(MBEDTLS_THREADING_C) |
Christopher Haster |
1:24750b9ad5ef | 130 | if( mbedtls_mutex_unlock( &cache->mutex ) != 0 ) |
Christopher Haster |
1:24750b9ad5ef | 131 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 132 | #endif |
Christopher Haster |
1:24750b9ad5ef | 133 | |
Christopher Haster |
1:24750b9ad5ef | 134 | return( ret ); |
Christopher Haster |
1:24750b9ad5ef | 135 | } |
Christopher Haster |
1:24750b9ad5ef | 136 | |
Christopher Haster |
1:24750b9ad5ef | 137 | int mbedtls_ssl_cache_set( void *data, const mbedtls_ssl_session *session ) |
Christopher Haster |
1:24750b9ad5ef | 138 | { |
Christopher Haster |
1:24750b9ad5ef | 139 | int ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 140 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 141 | time_t t = time( NULL ), oldest = 0; |
Christopher Haster |
1:24750b9ad5ef | 142 | mbedtls_ssl_cache_entry *old = NULL; |
Christopher Haster |
1:24750b9ad5ef | 143 | #endif |
Christopher Haster |
1:24750b9ad5ef | 144 | mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; |
Christopher Haster |
1:24750b9ad5ef | 145 | mbedtls_ssl_cache_entry *cur, *prv; |
Christopher Haster |
1:24750b9ad5ef | 146 | int count = 0; |
Christopher Haster |
1:24750b9ad5ef | 147 | |
Christopher Haster |
1:24750b9ad5ef | 148 | #if defined(MBEDTLS_THREADING_C) |
Christopher Haster |
1:24750b9ad5ef | 149 | if( ( ret = mbedtls_mutex_lock( &cache->mutex ) ) != 0 ) |
Christopher Haster |
1:24750b9ad5ef | 150 | return( ret ); |
Christopher Haster |
1:24750b9ad5ef | 151 | #endif |
Christopher Haster |
1:24750b9ad5ef | 152 | |
Christopher Haster |
1:24750b9ad5ef | 153 | cur = cache->chain; |
Christopher Haster |
1:24750b9ad5ef | 154 | prv = NULL; |
Christopher Haster |
1:24750b9ad5ef | 155 | |
Christopher Haster |
1:24750b9ad5ef | 156 | while( cur != NULL ) |
Christopher Haster |
1:24750b9ad5ef | 157 | { |
Christopher Haster |
1:24750b9ad5ef | 158 | count++; |
Christopher Haster |
1:24750b9ad5ef | 159 | |
Christopher Haster |
1:24750b9ad5ef | 160 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 161 | if( cache->timeout != 0 && |
Christopher Haster |
1:24750b9ad5ef | 162 | (int) ( t - cur->timestamp ) > cache->timeout ) |
Christopher Haster |
1:24750b9ad5ef | 163 | { |
Christopher Haster |
1:24750b9ad5ef | 164 | cur->timestamp = t; |
Christopher Haster |
1:24750b9ad5ef | 165 | break; /* expired, reuse this slot, update timestamp */ |
Christopher Haster |
1:24750b9ad5ef | 166 | } |
Christopher Haster |
1:24750b9ad5ef | 167 | #endif |
Christopher Haster |
1:24750b9ad5ef | 168 | |
Christopher Haster |
1:24750b9ad5ef | 169 | if( memcmp( session->id, cur->session.id, cur->session.id_len ) == 0 ) |
Christopher Haster |
1:24750b9ad5ef | 170 | break; /* client reconnected, keep timestamp for session id */ |
Christopher Haster |
1:24750b9ad5ef | 171 | |
Christopher Haster |
1:24750b9ad5ef | 172 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 173 | if( oldest == 0 || cur->timestamp < oldest ) |
Christopher Haster |
1:24750b9ad5ef | 174 | { |
Christopher Haster |
1:24750b9ad5ef | 175 | oldest = cur->timestamp; |
Christopher Haster |
1:24750b9ad5ef | 176 | old = cur; |
Christopher Haster |
1:24750b9ad5ef | 177 | } |
Christopher Haster |
1:24750b9ad5ef | 178 | #endif |
Christopher Haster |
1:24750b9ad5ef | 179 | |
Christopher Haster |
1:24750b9ad5ef | 180 | prv = cur; |
Christopher Haster |
1:24750b9ad5ef | 181 | cur = cur->next; |
Christopher Haster |
1:24750b9ad5ef | 182 | } |
Christopher Haster |
1:24750b9ad5ef | 183 | |
Christopher Haster |
1:24750b9ad5ef | 184 | if( cur == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 185 | { |
Christopher Haster |
1:24750b9ad5ef | 186 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 187 | /* |
Christopher Haster |
1:24750b9ad5ef | 188 | * Reuse oldest entry if max_entries reached |
Christopher Haster |
1:24750b9ad5ef | 189 | */ |
Christopher Haster |
1:24750b9ad5ef | 190 | if( count >= cache->max_entries ) |
Christopher Haster |
1:24750b9ad5ef | 191 | { |
Christopher Haster |
1:24750b9ad5ef | 192 | if( old == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 193 | { |
Christopher Haster |
1:24750b9ad5ef | 194 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 195 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 196 | } |
Christopher Haster |
1:24750b9ad5ef | 197 | |
Christopher Haster |
1:24750b9ad5ef | 198 | cur = old; |
Christopher Haster |
1:24750b9ad5ef | 199 | } |
Christopher Haster |
1:24750b9ad5ef | 200 | #else /* MBEDTLS_HAVE_TIME */ |
Christopher Haster |
1:24750b9ad5ef | 201 | /* |
Christopher Haster |
1:24750b9ad5ef | 202 | * Reuse first entry in chain if max_entries reached, |
Christopher Haster |
1:24750b9ad5ef | 203 | * but move to last place |
Christopher Haster |
1:24750b9ad5ef | 204 | */ |
Christopher Haster |
1:24750b9ad5ef | 205 | if( count >= cache->max_entries ) |
Christopher Haster |
1:24750b9ad5ef | 206 | { |
Christopher Haster |
1:24750b9ad5ef | 207 | if( cache->chain == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 208 | { |
Christopher Haster |
1:24750b9ad5ef | 209 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 210 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 211 | } |
Christopher Haster |
1:24750b9ad5ef | 212 | |
Christopher Haster |
1:24750b9ad5ef | 213 | cur = cache->chain; |
Christopher Haster |
1:24750b9ad5ef | 214 | cache->chain = cur->next; |
Christopher Haster |
1:24750b9ad5ef | 215 | cur->next = NULL; |
Christopher Haster |
1:24750b9ad5ef | 216 | prv->next = cur; |
Christopher Haster |
1:24750b9ad5ef | 217 | } |
Christopher Haster |
1:24750b9ad5ef | 218 | #endif /* MBEDTLS_HAVE_TIME */ |
Christopher Haster |
1:24750b9ad5ef | 219 | else |
Christopher Haster |
1:24750b9ad5ef | 220 | { |
Christopher Haster |
1:24750b9ad5ef | 221 | /* |
Christopher Haster |
1:24750b9ad5ef | 222 | * max_entries not reached, create new entry |
Christopher Haster |
1:24750b9ad5ef | 223 | */ |
Christopher Haster |
1:24750b9ad5ef | 224 | cur = mbedtls_calloc( 1, sizeof(mbedtls_ssl_cache_entry) ); |
Christopher Haster |
1:24750b9ad5ef | 225 | if( cur == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 226 | { |
Christopher Haster |
1:24750b9ad5ef | 227 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 228 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 229 | } |
Christopher Haster |
1:24750b9ad5ef | 230 | |
Christopher Haster |
1:24750b9ad5ef | 231 | if( prv == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 232 | cache->chain = cur; |
Christopher Haster |
1:24750b9ad5ef | 233 | else |
Christopher Haster |
1:24750b9ad5ef | 234 | prv->next = cur; |
Christopher Haster |
1:24750b9ad5ef | 235 | } |
Christopher Haster |
1:24750b9ad5ef | 236 | |
Christopher Haster |
1:24750b9ad5ef | 237 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 238 | cur->timestamp = t; |
Christopher Haster |
1:24750b9ad5ef | 239 | #endif |
Christopher Haster |
1:24750b9ad5ef | 240 | } |
Christopher Haster |
1:24750b9ad5ef | 241 | |
Christopher Haster |
1:24750b9ad5ef | 242 | memcpy( &cur->session, session, sizeof( mbedtls_ssl_session ) ); |
Christopher Haster |
1:24750b9ad5ef | 243 | |
Christopher Haster |
1:24750b9ad5ef | 244 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Christopher Haster |
1:24750b9ad5ef | 245 | /* |
Christopher Haster |
1:24750b9ad5ef | 246 | * If we're reusing an entry, free its certificate first |
Christopher Haster |
1:24750b9ad5ef | 247 | */ |
Christopher Haster |
1:24750b9ad5ef | 248 | if( cur->peer_cert.p != NULL ) |
Christopher Haster |
1:24750b9ad5ef | 249 | { |
Christopher Haster |
1:24750b9ad5ef | 250 | mbedtls_free( cur->peer_cert.p ); |
Christopher Haster |
1:24750b9ad5ef | 251 | memset( &cur->peer_cert, 0, sizeof(mbedtls_x509_buf) ); |
Christopher Haster |
1:24750b9ad5ef | 252 | } |
Christopher Haster |
1:24750b9ad5ef | 253 | |
Christopher Haster |
1:24750b9ad5ef | 254 | /* |
Christopher Haster |
1:24750b9ad5ef | 255 | * Store peer certificate |
Christopher Haster |
1:24750b9ad5ef | 256 | */ |
Christopher Haster |
1:24750b9ad5ef | 257 | if( session->peer_cert != NULL ) |
Christopher Haster |
1:24750b9ad5ef | 258 | { |
Christopher Haster |
1:24750b9ad5ef | 259 | cur->peer_cert.p = mbedtls_calloc( 1, session->peer_cert->raw.len ); |
Christopher Haster |
1:24750b9ad5ef | 260 | if( cur->peer_cert.p == NULL ) |
Christopher Haster |
1:24750b9ad5ef | 261 | { |
Christopher Haster |
1:24750b9ad5ef | 262 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 263 | goto exit; |
Christopher Haster |
1:24750b9ad5ef | 264 | } |
Christopher Haster |
1:24750b9ad5ef | 265 | |
Christopher Haster |
1:24750b9ad5ef | 266 | memcpy( cur->peer_cert.p, session->peer_cert->raw.p, |
Christopher Haster |
1:24750b9ad5ef | 267 | session->peer_cert->raw.len ); |
Christopher Haster |
1:24750b9ad5ef | 268 | cur->peer_cert.len = session->peer_cert->raw.len; |
Christopher Haster |
1:24750b9ad5ef | 269 | |
Christopher Haster |
1:24750b9ad5ef | 270 | cur->session.peer_cert = NULL; |
Christopher Haster |
1:24750b9ad5ef | 271 | } |
Christopher Haster |
1:24750b9ad5ef | 272 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Christopher Haster |
1:24750b9ad5ef | 273 | |
Christopher Haster |
1:24750b9ad5ef | 274 | ret = 0; |
Christopher Haster |
1:24750b9ad5ef | 275 | |
Christopher Haster |
1:24750b9ad5ef | 276 | exit: |
Christopher Haster |
1:24750b9ad5ef | 277 | #if defined(MBEDTLS_THREADING_C) |
Christopher Haster |
1:24750b9ad5ef | 278 | if( mbedtls_mutex_unlock( &cache->mutex ) != 0 ) |
Christopher Haster |
1:24750b9ad5ef | 279 | ret = 1; |
Christopher Haster |
1:24750b9ad5ef | 280 | #endif |
Christopher Haster |
1:24750b9ad5ef | 281 | |
Christopher Haster |
1:24750b9ad5ef | 282 | return( ret ); |
Christopher Haster |
1:24750b9ad5ef | 283 | } |
Christopher Haster |
1:24750b9ad5ef | 284 | |
Christopher Haster |
1:24750b9ad5ef | 285 | #if defined(MBEDTLS_HAVE_TIME) |
Christopher Haster |
1:24750b9ad5ef | 286 | void mbedtls_ssl_cache_set_timeout( mbedtls_ssl_cache_context *cache, int timeout ) |
Christopher Haster |
1:24750b9ad5ef | 287 | { |
Christopher Haster |
1:24750b9ad5ef | 288 | if( timeout < 0 ) timeout = 0; |
Christopher Haster |
1:24750b9ad5ef | 289 | |
Christopher Haster |
1:24750b9ad5ef | 290 | cache->timeout = timeout; |
Christopher Haster |
1:24750b9ad5ef | 291 | } |
Christopher Haster |
1:24750b9ad5ef | 292 | #endif /* MBEDTLS_HAVE_TIME */ |
Christopher Haster |
1:24750b9ad5ef | 293 | |
Christopher Haster |
1:24750b9ad5ef | 294 | void mbedtls_ssl_cache_set_max_entries( mbedtls_ssl_cache_context *cache, int max ) |
Christopher Haster |
1:24750b9ad5ef | 295 | { |
Christopher Haster |
1:24750b9ad5ef | 296 | if( max < 0 ) max = 0; |
Christopher Haster |
1:24750b9ad5ef | 297 | |
Christopher Haster |
1:24750b9ad5ef | 298 | cache->max_entries = max; |
Christopher Haster |
1:24750b9ad5ef | 299 | } |
Christopher Haster |
1:24750b9ad5ef | 300 | |
Christopher Haster |
1:24750b9ad5ef | 301 | void mbedtls_ssl_cache_free( mbedtls_ssl_cache_context *cache ) |
Christopher Haster |
1:24750b9ad5ef | 302 | { |
Christopher Haster |
1:24750b9ad5ef | 303 | mbedtls_ssl_cache_entry *cur, *prv; |
Christopher Haster |
1:24750b9ad5ef | 304 | |
Christopher Haster |
1:24750b9ad5ef | 305 | cur = cache->chain; |
Christopher Haster |
1:24750b9ad5ef | 306 | |
Christopher Haster |
1:24750b9ad5ef | 307 | while( cur != NULL ) |
Christopher Haster |
1:24750b9ad5ef | 308 | { |
Christopher Haster |
1:24750b9ad5ef | 309 | prv = cur; |
Christopher Haster |
1:24750b9ad5ef | 310 | cur = cur->next; |
Christopher Haster |
1:24750b9ad5ef | 311 | |
Christopher Haster |
1:24750b9ad5ef | 312 | mbedtls_ssl_session_free( &prv->session ); |
Christopher Haster |
1:24750b9ad5ef | 313 | |
Christopher Haster |
1:24750b9ad5ef | 314 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Christopher Haster |
1:24750b9ad5ef | 315 | mbedtls_free( prv->peer_cert.p ); |
Christopher Haster |
1:24750b9ad5ef | 316 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Christopher Haster |
1:24750b9ad5ef | 317 | |
Christopher Haster |
1:24750b9ad5ef | 318 | mbedtls_free( prv ); |
Christopher Haster |
1:24750b9ad5ef | 319 | } |
Christopher Haster |
1:24750b9ad5ef | 320 | |
Christopher Haster |
1:24750b9ad5ef | 321 | #if defined(MBEDTLS_THREADING_C) |
Christopher Haster |
1:24750b9ad5ef | 322 | mbedtls_mutex_free( &cache->mutex ); |
Christopher Haster |
1:24750b9ad5ef | 323 | #endif |
Christopher Haster |
1:24750b9ad5ef | 324 | } |
Christopher Haster |
1:24750b9ad5ef | 325 | |
Christopher Haster |
1:24750b9ad5ef | 326 | #endif /* MBEDTLS_SSL_CACHE_C */ |