![](/media/cache/img/default_profile.jpg.50x50_q85.jpg)
Rtos API example
mbed-os/features/mbedtls/src/ssl_cache.c@0:9fca2b23d0ba, 2019-02-23 (annotated)
- Committer:
- marcozecchini
- Date:
- Sat Feb 23 12:13:36 2019 +0000
- Revision:
- 0:9fca2b23d0ba
final commit
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
marcozecchini | 0:9fca2b23d0ba | 1 | /* |
marcozecchini | 0:9fca2b23d0ba | 2 | * SSL session cache implementation |
marcozecchini | 0:9fca2b23d0ba | 3 | * |
marcozecchini | 0:9fca2b23d0ba | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
marcozecchini | 0:9fca2b23d0ba | 5 | * SPDX-License-Identifier: Apache-2.0 |
marcozecchini | 0:9fca2b23d0ba | 6 | * |
marcozecchini | 0:9fca2b23d0ba | 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
marcozecchini | 0:9fca2b23d0ba | 8 | * not use this file except in compliance with the License. |
marcozecchini | 0:9fca2b23d0ba | 9 | * You may obtain a copy of the License at |
marcozecchini | 0:9fca2b23d0ba | 10 | * |
marcozecchini | 0:9fca2b23d0ba | 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
marcozecchini | 0:9fca2b23d0ba | 12 | * |
marcozecchini | 0:9fca2b23d0ba | 13 | * Unless required by applicable law or agreed to in writing, software |
marcozecchini | 0:9fca2b23d0ba | 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
marcozecchini | 0:9fca2b23d0ba | 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
marcozecchini | 0:9fca2b23d0ba | 16 | * See the License for the specific language governing permissions and |
marcozecchini | 0:9fca2b23d0ba | 17 | * limitations under the License. |
marcozecchini | 0:9fca2b23d0ba | 18 | * |
marcozecchini | 0:9fca2b23d0ba | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
marcozecchini | 0:9fca2b23d0ba | 20 | */ |
marcozecchini | 0:9fca2b23d0ba | 21 | /* |
marcozecchini | 0:9fca2b23d0ba | 22 | * These session callbacks use a simple chained list |
marcozecchini | 0:9fca2b23d0ba | 23 | * to store and retrieve the session information. |
marcozecchini | 0:9fca2b23d0ba | 24 | */ |
marcozecchini | 0:9fca2b23d0ba | 25 | |
marcozecchini | 0:9fca2b23d0ba | 26 | #if !defined(MBEDTLS_CONFIG_FILE) |
marcozecchini | 0:9fca2b23d0ba | 27 | #include "mbedtls/config.h" |
marcozecchini | 0:9fca2b23d0ba | 28 | #else |
marcozecchini | 0:9fca2b23d0ba | 29 | #include MBEDTLS_CONFIG_FILE |
marcozecchini | 0:9fca2b23d0ba | 30 | #endif |
marcozecchini | 0:9fca2b23d0ba | 31 | |
marcozecchini | 0:9fca2b23d0ba | 32 | #if defined(MBEDTLS_SSL_CACHE_C) |
marcozecchini | 0:9fca2b23d0ba | 33 | |
marcozecchini | 0:9fca2b23d0ba | 34 | #if defined(MBEDTLS_PLATFORM_C) |
marcozecchini | 0:9fca2b23d0ba | 35 | #include "mbedtls/platform.h" |
marcozecchini | 0:9fca2b23d0ba | 36 | #else |
marcozecchini | 0:9fca2b23d0ba | 37 | #include <stdlib.h> |
marcozecchini | 0:9fca2b23d0ba | 38 | #define mbedtls_calloc calloc |
marcozecchini | 0:9fca2b23d0ba | 39 | #define mbedtls_free free |
marcozecchini | 0:9fca2b23d0ba | 40 | #endif |
marcozecchini | 0:9fca2b23d0ba | 41 | |
marcozecchini | 0:9fca2b23d0ba | 42 | #include "mbedtls/ssl_cache.h" |
marcozecchini | 0:9fca2b23d0ba | 43 | |
marcozecchini | 0:9fca2b23d0ba | 44 | #include <string.h> |
marcozecchini | 0:9fca2b23d0ba | 45 | |
marcozecchini | 0:9fca2b23d0ba | 46 | void mbedtls_ssl_cache_init( mbedtls_ssl_cache_context *cache ) |
marcozecchini | 0:9fca2b23d0ba | 47 | { |
marcozecchini | 0:9fca2b23d0ba | 48 | memset( cache, 0, sizeof( mbedtls_ssl_cache_context ) ); |
marcozecchini | 0:9fca2b23d0ba | 49 | |
marcozecchini | 0:9fca2b23d0ba | 50 | cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; |
marcozecchini | 0:9fca2b23d0ba | 51 | cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; |
marcozecchini | 0:9fca2b23d0ba | 52 | |
marcozecchini | 0:9fca2b23d0ba | 53 | #if defined(MBEDTLS_THREADING_C) |
marcozecchini | 0:9fca2b23d0ba | 54 | mbedtls_mutex_init( &cache->mutex ); |
marcozecchini | 0:9fca2b23d0ba | 55 | #endif |
marcozecchini | 0:9fca2b23d0ba | 56 | } |
marcozecchini | 0:9fca2b23d0ba | 57 | |
marcozecchini | 0:9fca2b23d0ba | 58 | int mbedtls_ssl_cache_get( void *data, mbedtls_ssl_session *session ) |
marcozecchini | 0:9fca2b23d0ba | 59 | { |
marcozecchini | 0:9fca2b23d0ba | 60 | int ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 61 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 62 | mbedtls_time_t t = mbedtls_time( NULL ); |
marcozecchini | 0:9fca2b23d0ba | 63 | #endif |
marcozecchini | 0:9fca2b23d0ba | 64 | mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; |
marcozecchini | 0:9fca2b23d0ba | 65 | mbedtls_ssl_cache_entry *cur, *entry; |
marcozecchini | 0:9fca2b23d0ba | 66 | |
marcozecchini | 0:9fca2b23d0ba | 67 | #if defined(MBEDTLS_THREADING_C) |
marcozecchini | 0:9fca2b23d0ba | 68 | if( mbedtls_mutex_lock( &cache->mutex ) != 0 ) |
marcozecchini | 0:9fca2b23d0ba | 69 | return( 1 ); |
marcozecchini | 0:9fca2b23d0ba | 70 | #endif |
marcozecchini | 0:9fca2b23d0ba | 71 | |
marcozecchini | 0:9fca2b23d0ba | 72 | cur = cache->chain; |
marcozecchini | 0:9fca2b23d0ba | 73 | entry = NULL; |
marcozecchini | 0:9fca2b23d0ba | 74 | |
marcozecchini | 0:9fca2b23d0ba | 75 | while( cur != NULL ) |
marcozecchini | 0:9fca2b23d0ba | 76 | { |
marcozecchini | 0:9fca2b23d0ba | 77 | entry = cur; |
marcozecchini | 0:9fca2b23d0ba | 78 | cur = cur->next; |
marcozecchini | 0:9fca2b23d0ba | 79 | |
marcozecchini | 0:9fca2b23d0ba | 80 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 81 | if( cache->timeout != 0 && |
marcozecchini | 0:9fca2b23d0ba | 82 | (int) ( t - entry->timestamp ) > cache->timeout ) |
marcozecchini | 0:9fca2b23d0ba | 83 | continue; |
marcozecchini | 0:9fca2b23d0ba | 84 | #endif |
marcozecchini | 0:9fca2b23d0ba | 85 | |
marcozecchini | 0:9fca2b23d0ba | 86 | if( session->ciphersuite != entry->session.ciphersuite || |
marcozecchini | 0:9fca2b23d0ba | 87 | session->compression != entry->session.compression || |
marcozecchini | 0:9fca2b23d0ba | 88 | session->id_len != entry->session.id_len ) |
marcozecchini | 0:9fca2b23d0ba | 89 | continue; |
marcozecchini | 0:9fca2b23d0ba | 90 | |
marcozecchini | 0:9fca2b23d0ba | 91 | if( memcmp( session->id, entry->session.id, |
marcozecchini | 0:9fca2b23d0ba | 92 | entry->session.id_len ) != 0 ) |
marcozecchini | 0:9fca2b23d0ba | 93 | continue; |
marcozecchini | 0:9fca2b23d0ba | 94 | |
marcozecchini | 0:9fca2b23d0ba | 95 | memcpy( session->master, entry->session.master, 48 ); |
marcozecchini | 0:9fca2b23d0ba | 96 | |
marcozecchini | 0:9fca2b23d0ba | 97 | session->verify_result = entry->session.verify_result; |
marcozecchini | 0:9fca2b23d0ba | 98 | |
marcozecchini | 0:9fca2b23d0ba | 99 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
marcozecchini | 0:9fca2b23d0ba | 100 | /* |
marcozecchini | 0:9fca2b23d0ba | 101 | * Restore peer certificate (without rest of the original chain) |
marcozecchini | 0:9fca2b23d0ba | 102 | */ |
marcozecchini | 0:9fca2b23d0ba | 103 | if( entry->peer_cert.p != NULL ) |
marcozecchini | 0:9fca2b23d0ba | 104 | { |
marcozecchini | 0:9fca2b23d0ba | 105 | if( ( session->peer_cert = mbedtls_calloc( 1, |
marcozecchini | 0:9fca2b23d0ba | 106 | sizeof(mbedtls_x509_crt) ) ) == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 107 | { |
marcozecchini | 0:9fca2b23d0ba | 108 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 109 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 110 | } |
marcozecchini | 0:9fca2b23d0ba | 111 | |
marcozecchini | 0:9fca2b23d0ba | 112 | mbedtls_x509_crt_init( session->peer_cert ); |
marcozecchini | 0:9fca2b23d0ba | 113 | if( mbedtls_x509_crt_parse( session->peer_cert, entry->peer_cert.p, |
marcozecchini | 0:9fca2b23d0ba | 114 | entry->peer_cert.len ) != 0 ) |
marcozecchini | 0:9fca2b23d0ba | 115 | { |
marcozecchini | 0:9fca2b23d0ba | 116 | mbedtls_free( session->peer_cert ); |
marcozecchini | 0:9fca2b23d0ba | 117 | session->peer_cert = NULL; |
marcozecchini | 0:9fca2b23d0ba | 118 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 119 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 120 | } |
marcozecchini | 0:9fca2b23d0ba | 121 | } |
marcozecchini | 0:9fca2b23d0ba | 122 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
marcozecchini | 0:9fca2b23d0ba | 123 | |
marcozecchini | 0:9fca2b23d0ba | 124 | ret = 0; |
marcozecchini | 0:9fca2b23d0ba | 125 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 126 | } |
marcozecchini | 0:9fca2b23d0ba | 127 | |
marcozecchini | 0:9fca2b23d0ba | 128 | exit: |
marcozecchini | 0:9fca2b23d0ba | 129 | #if defined(MBEDTLS_THREADING_C) |
marcozecchini | 0:9fca2b23d0ba | 130 | if( mbedtls_mutex_unlock( &cache->mutex ) != 0 ) |
marcozecchini | 0:9fca2b23d0ba | 131 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 132 | #endif |
marcozecchini | 0:9fca2b23d0ba | 133 | |
marcozecchini | 0:9fca2b23d0ba | 134 | return( ret ); |
marcozecchini | 0:9fca2b23d0ba | 135 | } |
marcozecchini | 0:9fca2b23d0ba | 136 | |
marcozecchini | 0:9fca2b23d0ba | 137 | int mbedtls_ssl_cache_set( void *data, const mbedtls_ssl_session *session ) |
marcozecchini | 0:9fca2b23d0ba | 138 | { |
marcozecchini | 0:9fca2b23d0ba | 139 | int ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 140 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 141 | mbedtls_time_t t = mbedtls_time( NULL ), oldest = 0; |
marcozecchini | 0:9fca2b23d0ba | 142 | mbedtls_ssl_cache_entry *old = NULL; |
marcozecchini | 0:9fca2b23d0ba | 143 | #endif |
marcozecchini | 0:9fca2b23d0ba | 144 | mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; |
marcozecchini | 0:9fca2b23d0ba | 145 | mbedtls_ssl_cache_entry *cur, *prv; |
marcozecchini | 0:9fca2b23d0ba | 146 | int count = 0; |
marcozecchini | 0:9fca2b23d0ba | 147 | |
marcozecchini | 0:9fca2b23d0ba | 148 | #if defined(MBEDTLS_THREADING_C) |
marcozecchini | 0:9fca2b23d0ba | 149 | if( ( ret = mbedtls_mutex_lock( &cache->mutex ) ) != 0 ) |
marcozecchini | 0:9fca2b23d0ba | 150 | return( ret ); |
marcozecchini | 0:9fca2b23d0ba | 151 | #endif |
marcozecchini | 0:9fca2b23d0ba | 152 | |
marcozecchini | 0:9fca2b23d0ba | 153 | cur = cache->chain; |
marcozecchini | 0:9fca2b23d0ba | 154 | prv = NULL; |
marcozecchini | 0:9fca2b23d0ba | 155 | |
marcozecchini | 0:9fca2b23d0ba | 156 | while( cur != NULL ) |
marcozecchini | 0:9fca2b23d0ba | 157 | { |
marcozecchini | 0:9fca2b23d0ba | 158 | count++; |
marcozecchini | 0:9fca2b23d0ba | 159 | |
marcozecchini | 0:9fca2b23d0ba | 160 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 161 | if( cache->timeout != 0 && |
marcozecchini | 0:9fca2b23d0ba | 162 | (int) ( t - cur->timestamp ) > cache->timeout ) |
marcozecchini | 0:9fca2b23d0ba | 163 | { |
marcozecchini | 0:9fca2b23d0ba | 164 | cur->timestamp = t; |
marcozecchini | 0:9fca2b23d0ba | 165 | break; /* expired, reuse this slot, update timestamp */ |
marcozecchini | 0:9fca2b23d0ba | 166 | } |
marcozecchini | 0:9fca2b23d0ba | 167 | #endif |
marcozecchini | 0:9fca2b23d0ba | 168 | |
marcozecchini | 0:9fca2b23d0ba | 169 | if( memcmp( session->id, cur->session.id, cur->session.id_len ) == 0 ) |
marcozecchini | 0:9fca2b23d0ba | 170 | break; /* client reconnected, keep timestamp for session id */ |
marcozecchini | 0:9fca2b23d0ba | 171 | |
marcozecchini | 0:9fca2b23d0ba | 172 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 173 | if( oldest == 0 || cur->timestamp < oldest ) |
marcozecchini | 0:9fca2b23d0ba | 174 | { |
marcozecchini | 0:9fca2b23d0ba | 175 | oldest = cur->timestamp; |
marcozecchini | 0:9fca2b23d0ba | 176 | old = cur; |
marcozecchini | 0:9fca2b23d0ba | 177 | } |
marcozecchini | 0:9fca2b23d0ba | 178 | #endif |
marcozecchini | 0:9fca2b23d0ba | 179 | |
marcozecchini | 0:9fca2b23d0ba | 180 | prv = cur; |
marcozecchini | 0:9fca2b23d0ba | 181 | cur = cur->next; |
marcozecchini | 0:9fca2b23d0ba | 182 | } |
marcozecchini | 0:9fca2b23d0ba | 183 | |
marcozecchini | 0:9fca2b23d0ba | 184 | if( cur == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 185 | { |
marcozecchini | 0:9fca2b23d0ba | 186 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 187 | /* |
marcozecchini | 0:9fca2b23d0ba | 188 | * Reuse oldest entry if max_entries reached |
marcozecchini | 0:9fca2b23d0ba | 189 | */ |
marcozecchini | 0:9fca2b23d0ba | 190 | if( count >= cache->max_entries ) |
marcozecchini | 0:9fca2b23d0ba | 191 | { |
marcozecchini | 0:9fca2b23d0ba | 192 | if( old == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 193 | { |
marcozecchini | 0:9fca2b23d0ba | 194 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 195 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 196 | } |
marcozecchini | 0:9fca2b23d0ba | 197 | |
marcozecchini | 0:9fca2b23d0ba | 198 | cur = old; |
marcozecchini | 0:9fca2b23d0ba | 199 | } |
marcozecchini | 0:9fca2b23d0ba | 200 | #else /* MBEDTLS_HAVE_TIME */ |
marcozecchini | 0:9fca2b23d0ba | 201 | /* |
marcozecchini | 0:9fca2b23d0ba | 202 | * Reuse first entry in chain if max_entries reached, |
marcozecchini | 0:9fca2b23d0ba | 203 | * but move to last place |
marcozecchini | 0:9fca2b23d0ba | 204 | */ |
marcozecchini | 0:9fca2b23d0ba | 205 | if( count >= cache->max_entries ) |
marcozecchini | 0:9fca2b23d0ba | 206 | { |
marcozecchini | 0:9fca2b23d0ba | 207 | if( cache->chain == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 208 | { |
marcozecchini | 0:9fca2b23d0ba | 209 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 210 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 211 | } |
marcozecchini | 0:9fca2b23d0ba | 212 | |
marcozecchini | 0:9fca2b23d0ba | 213 | cur = cache->chain; |
marcozecchini | 0:9fca2b23d0ba | 214 | cache->chain = cur->next; |
marcozecchini | 0:9fca2b23d0ba | 215 | cur->next = NULL; |
marcozecchini | 0:9fca2b23d0ba | 216 | prv->next = cur; |
marcozecchini | 0:9fca2b23d0ba | 217 | } |
marcozecchini | 0:9fca2b23d0ba | 218 | #endif /* MBEDTLS_HAVE_TIME */ |
marcozecchini | 0:9fca2b23d0ba | 219 | else |
marcozecchini | 0:9fca2b23d0ba | 220 | { |
marcozecchini | 0:9fca2b23d0ba | 221 | /* |
marcozecchini | 0:9fca2b23d0ba | 222 | * max_entries not reached, create new entry |
marcozecchini | 0:9fca2b23d0ba | 223 | */ |
marcozecchini | 0:9fca2b23d0ba | 224 | cur = mbedtls_calloc( 1, sizeof(mbedtls_ssl_cache_entry) ); |
marcozecchini | 0:9fca2b23d0ba | 225 | if( cur == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 226 | { |
marcozecchini | 0:9fca2b23d0ba | 227 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 228 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 229 | } |
marcozecchini | 0:9fca2b23d0ba | 230 | |
marcozecchini | 0:9fca2b23d0ba | 231 | if( prv == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 232 | cache->chain = cur; |
marcozecchini | 0:9fca2b23d0ba | 233 | else |
marcozecchini | 0:9fca2b23d0ba | 234 | prv->next = cur; |
marcozecchini | 0:9fca2b23d0ba | 235 | } |
marcozecchini | 0:9fca2b23d0ba | 236 | |
marcozecchini | 0:9fca2b23d0ba | 237 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 238 | cur->timestamp = t; |
marcozecchini | 0:9fca2b23d0ba | 239 | #endif |
marcozecchini | 0:9fca2b23d0ba | 240 | } |
marcozecchini | 0:9fca2b23d0ba | 241 | |
marcozecchini | 0:9fca2b23d0ba | 242 | memcpy( &cur->session, session, sizeof( mbedtls_ssl_session ) ); |
marcozecchini | 0:9fca2b23d0ba | 243 | |
marcozecchini | 0:9fca2b23d0ba | 244 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
marcozecchini | 0:9fca2b23d0ba | 245 | /* |
marcozecchini | 0:9fca2b23d0ba | 246 | * If we're reusing an entry, free its certificate first |
marcozecchini | 0:9fca2b23d0ba | 247 | */ |
marcozecchini | 0:9fca2b23d0ba | 248 | if( cur->peer_cert.p != NULL ) |
marcozecchini | 0:9fca2b23d0ba | 249 | { |
marcozecchini | 0:9fca2b23d0ba | 250 | mbedtls_free( cur->peer_cert.p ); |
marcozecchini | 0:9fca2b23d0ba | 251 | memset( &cur->peer_cert, 0, sizeof(mbedtls_x509_buf) ); |
marcozecchini | 0:9fca2b23d0ba | 252 | } |
marcozecchini | 0:9fca2b23d0ba | 253 | |
marcozecchini | 0:9fca2b23d0ba | 254 | /* |
marcozecchini | 0:9fca2b23d0ba | 255 | * Store peer certificate |
marcozecchini | 0:9fca2b23d0ba | 256 | */ |
marcozecchini | 0:9fca2b23d0ba | 257 | if( session->peer_cert != NULL ) |
marcozecchini | 0:9fca2b23d0ba | 258 | { |
marcozecchini | 0:9fca2b23d0ba | 259 | cur->peer_cert.p = mbedtls_calloc( 1, session->peer_cert->raw.len ); |
marcozecchini | 0:9fca2b23d0ba | 260 | if( cur->peer_cert.p == NULL ) |
marcozecchini | 0:9fca2b23d0ba | 261 | { |
marcozecchini | 0:9fca2b23d0ba | 262 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 263 | goto exit; |
marcozecchini | 0:9fca2b23d0ba | 264 | } |
marcozecchini | 0:9fca2b23d0ba | 265 | |
marcozecchini | 0:9fca2b23d0ba | 266 | memcpy( cur->peer_cert.p, session->peer_cert->raw.p, |
marcozecchini | 0:9fca2b23d0ba | 267 | session->peer_cert->raw.len ); |
marcozecchini | 0:9fca2b23d0ba | 268 | cur->peer_cert.len = session->peer_cert->raw.len; |
marcozecchini | 0:9fca2b23d0ba | 269 | |
marcozecchini | 0:9fca2b23d0ba | 270 | cur->session.peer_cert = NULL; |
marcozecchini | 0:9fca2b23d0ba | 271 | } |
marcozecchini | 0:9fca2b23d0ba | 272 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
marcozecchini | 0:9fca2b23d0ba | 273 | |
marcozecchini | 0:9fca2b23d0ba | 274 | ret = 0; |
marcozecchini | 0:9fca2b23d0ba | 275 | |
marcozecchini | 0:9fca2b23d0ba | 276 | exit: |
marcozecchini | 0:9fca2b23d0ba | 277 | #if defined(MBEDTLS_THREADING_C) |
marcozecchini | 0:9fca2b23d0ba | 278 | if( mbedtls_mutex_unlock( &cache->mutex ) != 0 ) |
marcozecchini | 0:9fca2b23d0ba | 279 | ret = 1; |
marcozecchini | 0:9fca2b23d0ba | 280 | #endif |
marcozecchini | 0:9fca2b23d0ba | 281 | |
marcozecchini | 0:9fca2b23d0ba | 282 | return( ret ); |
marcozecchini | 0:9fca2b23d0ba | 283 | } |
marcozecchini | 0:9fca2b23d0ba | 284 | |
marcozecchini | 0:9fca2b23d0ba | 285 | #if defined(MBEDTLS_HAVE_TIME) |
marcozecchini | 0:9fca2b23d0ba | 286 | void mbedtls_ssl_cache_set_timeout( mbedtls_ssl_cache_context *cache, int timeout ) |
marcozecchini | 0:9fca2b23d0ba | 287 | { |
marcozecchini | 0:9fca2b23d0ba | 288 | if( timeout < 0 ) timeout = 0; |
marcozecchini | 0:9fca2b23d0ba | 289 | |
marcozecchini | 0:9fca2b23d0ba | 290 | cache->timeout = timeout; |
marcozecchini | 0:9fca2b23d0ba | 291 | } |
marcozecchini | 0:9fca2b23d0ba | 292 | #endif /* MBEDTLS_HAVE_TIME */ |
marcozecchini | 0:9fca2b23d0ba | 293 | |
marcozecchini | 0:9fca2b23d0ba | 294 | void mbedtls_ssl_cache_set_max_entries( mbedtls_ssl_cache_context *cache, int max ) |
marcozecchini | 0:9fca2b23d0ba | 295 | { |
marcozecchini | 0:9fca2b23d0ba | 296 | if( max < 0 ) max = 0; |
marcozecchini | 0:9fca2b23d0ba | 297 | |
marcozecchini | 0:9fca2b23d0ba | 298 | cache->max_entries = max; |
marcozecchini | 0:9fca2b23d0ba | 299 | } |
marcozecchini | 0:9fca2b23d0ba | 300 | |
marcozecchini | 0:9fca2b23d0ba | 301 | void mbedtls_ssl_cache_free( mbedtls_ssl_cache_context *cache ) |
marcozecchini | 0:9fca2b23d0ba | 302 | { |
marcozecchini | 0:9fca2b23d0ba | 303 | mbedtls_ssl_cache_entry *cur, *prv; |
marcozecchini | 0:9fca2b23d0ba | 304 | |
marcozecchini | 0:9fca2b23d0ba | 305 | cur = cache->chain; |
marcozecchini | 0:9fca2b23d0ba | 306 | |
marcozecchini | 0:9fca2b23d0ba | 307 | while( cur != NULL ) |
marcozecchini | 0:9fca2b23d0ba | 308 | { |
marcozecchini | 0:9fca2b23d0ba | 309 | prv = cur; |
marcozecchini | 0:9fca2b23d0ba | 310 | cur = cur->next; |
marcozecchini | 0:9fca2b23d0ba | 311 | |
marcozecchini | 0:9fca2b23d0ba | 312 | mbedtls_ssl_session_free( &prv->session ); |
marcozecchini | 0:9fca2b23d0ba | 313 | |
marcozecchini | 0:9fca2b23d0ba | 314 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
marcozecchini | 0:9fca2b23d0ba | 315 | mbedtls_free( prv->peer_cert.p ); |
marcozecchini | 0:9fca2b23d0ba | 316 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
marcozecchini | 0:9fca2b23d0ba | 317 | |
marcozecchini | 0:9fca2b23d0ba | 318 | mbedtls_free( prv ); |
marcozecchini | 0:9fca2b23d0ba | 319 | } |
marcozecchini | 0:9fca2b23d0ba | 320 | |
marcozecchini | 0:9fca2b23d0ba | 321 | #if defined(MBEDTLS_THREADING_C) |
marcozecchini | 0:9fca2b23d0ba | 322 | mbedtls_mutex_free( &cache->mutex ); |
marcozecchini | 0:9fca2b23d0ba | 323 | #endif |
marcozecchini | 0:9fca2b23d0ba | 324 | } |
marcozecchini | 0:9fca2b23d0ba | 325 | |
marcozecchini | 0:9fca2b23d0ba | 326 | #endif /* MBEDTLS_SSL_CACHE_C */ |