Important changes to repositories hosted on mbed.com
Mbed hosted mercurial repositories are deprecated and are due to be permanently deleted in July 2026.
To keep a copy of this software download the repository Zip archive or clone locally using Mercurial.
It is also possible to export all your personal repositories from the account settings page.
mbed-os/features/mbedtls/src/ssl_cache.c@0:fb8047b156bb, 2020-01-15 (annotated)
- Committer:
- rahul_dahiya
- Date:
- Wed Jan 15 15:57:15 2020 +0530
- Revision:
- 0:fb8047b156bb
STM32F7 LWIP
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
rahul_dahiya |
0:fb8047b156bb | 1 | /* |
rahul_dahiya |
0:fb8047b156bb | 2 | * SSL session cache implementation |
rahul_dahiya |
0:fb8047b156bb | 3 | * |
rahul_dahiya |
0:fb8047b156bb | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
rahul_dahiya |
0:fb8047b156bb | 5 | * SPDX-License-Identifier: Apache-2.0 |
rahul_dahiya |
0:fb8047b156bb | 6 | * |
rahul_dahiya |
0:fb8047b156bb | 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
rahul_dahiya |
0:fb8047b156bb | 8 | * not use this file except in compliance with the License. |
rahul_dahiya |
0:fb8047b156bb | 9 | * You may obtain a copy of the License at |
rahul_dahiya |
0:fb8047b156bb | 10 | * |
rahul_dahiya |
0:fb8047b156bb | 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
rahul_dahiya |
0:fb8047b156bb | 12 | * |
rahul_dahiya |
0:fb8047b156bb | 13 | * Unless required by applicable law or agreed to in writing, software |
rahul_dahiya |
0:fb8047b156bb | 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
rahul_dahiya |
0:fb8047b156bb | 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
rahul_dahiya |
0:fb8047b156bb | 16 | * See the License for the specific language governing permissions and |
rahul_dahiya |
0:fb8047b156bb | 17 | * limitations under the License. |
rahul_dahiya |
0:fb8047b156bb | 18 | * |
rahul_dahiya |
0:fb8047b156bb | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
rahul_dahiya |
0:fb8047b156bb | 20 | */ |
rahul_dahiya |
0:fb8047b156bb | 21 | /* |
rahul_dahiya |
0:fb8047b156bb | 22 | * These session callbacks use a simple chained list |
rahul_dahiya |
0:fb8047b156bb | 23 | * to store and retrieve the session information. |
rahul_dahiya |
0:fb8047b156bb | 24 | */ |
rahul_dahiya |
0:fb8047b156bb | 25 | |
rahul_dahiya |
0:fb8047b156bb | 26 | #if !defined(MBEDTLS_CONFIG_FILE) |
rahul_dahiya |
0:fb8047b156bb | 27 | #include "mbedtls/config.h" |
rahul_dahiya |
0:fb8047b156bb | 28 | #else |
rahul_dahiya |
0:fb8047b156bb | 29 | #include MBEDTLS_CONFIG_FILE |
rahul_dahiya |
0:fb8047b156bb | 30 | #endif |
rahul_dahiya |
0:fb8047b156bb | 31 | |
rahul_dahiya |
0:fb8047b156bb | 32 | #if defined(MBEDTLS_SSL_CACHE_C) |
rahul_dahiya |
0:fb8047b156bb | 33 | |
rahul_dahiya |
0:fb8047b156bb | 34 | #if defined(MBEDTLS_PLATFORM_C) |
rahul_dahiya |
0:fb8047b156bb | 35 | #include "mbedtls/platform.h" |
rahul_dahiya |
0:fb8047b156bb | 36 | #else |
rahul_dahiya |
0:fb8047b156bb | 37 | #include <stdlib.h> |
rahul_dahiya |
0:fb8047b156bb | 38 | #define mbedtls_calloc calloc |
rahul_dahiya |
0:fb8047b156bb | 39 | #define mbedtls_free free |
rahul_dahiya |
0:fb8047b156bb | 40 | #endif |
rahul_dahiya |
0:fb8047b156bb | 41 | |
rahul_dahiya |
0:fb8047b156bb | 42 | #include "mbedtls/ssl_cache.h" |
rahul_dahiya |
0:fb8047b156bb | 43 | |
rahul_dahiya |
0:fb8047b156bb | 44 | #include <string.h> |
rahul_dahiya |
0:fb8047b156bb | 45 | |
rahul_dahiya |
0:fb8047b156bb | 46 | void mbedtls_ssl_cache_init( mbedtls_ssl_cache_context *cache ) |
rahul_dahiya |
0:fb8047b156bb | 47 | { |
rahul_dahiya |
0:fb8047b156bb | 48 | memset( cache, 0, sizeof( mbedtls_ssl_cache_context ) ); |
rahul_dahiya |
0:fb8047b156bb | 49 | |
rahul_dahiya |
0:fb8047b156bb | 50 | cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; |
rahul_dahiya |
0:fb8047b156bb | 51 | cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; |
rahul_dahiya |
0:fb8047b156bb | 52 | |
rahul_dahiya |
0:fb8047b156bb | 53 | #if defined(MBEDTLS_THREADING_C) |
rahul_dahiya |
0:fb8047b156bb | 54 | mbedtls_mutex_init( &cache->mutex ); |
rahul_dahiya |
0:fb8047b156bb | 55 | #endif |
rahul_dahiya |
0:fb8047b156bb | 56 | } |
rahul_dahiya |
0:fb8047b156bb | 57 | |
rahul_dahiya |
0:fb8047b156bb | 58 | int mbedtls_ssl_cache_get( void *data, mbedtls_ssl_session *session ) |
rahul_dahiya |
0:fb8047b156bb | 59 | { |
rahul_dahiya |
0:fb8047b156bb | 60 | int ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 61 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 62 | mbedtls_time_t t = mbedtls_time( NULL ); |
rahul_dahiya |
0:fb8047b156bb | 63 | #endif |
rahul_dahiya |
0:fb8047b156bb | 64 | mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; |
rahul_dahiya |
0:fb8047b156bb | 65 | mbedtls_ssl_cache_entry *cur, *entry; |
rahul_dahiya |
0:fb8047b156bb | 66 | |
rahul_dahiya |
0:fb8047b156bb | 67 | #if defined(MBEDTLS_THREADING_C) |
rahul_dahiya |
0:fb8047b156bb | 68 | if( mbedtls_mutex_lock( &cache->mutex ) != 0 ) |
rahul_dahiya |
0:fb8047b156bb | 69 | return( 1 ); |
rahul_dahiya |
0:fb8047b156bb | 70 | #endif |
rahul_dahiya |
0:fb8047b156bb | 71 | |
rahul_dahiya |
0:fb8047b156bb | 72 | cur = cache->chain; |
rahul_dahiya |
0:fb8047b156bb | 73 | entry = NULL; |
rahul_dahiya |
0:fb8047b156bb | 74 | |
rahul_dahiya |
0:fb8047b156bb | 75 | while( cur != NULL ) |
rahul_dahiya |
0:fb8047b156bb | 76 | { |
rahul_dahiya |
0:fb8047b156bb | 77 | entry = cur; |
rahul_dahiya |
0:fb8047b156bb | 78 | cur = cur->next; |
rahul_dahiya |
0:fb8047b156bb | 79 | |
rahul_dahiya |
0:fb8047b156bb | 80 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 81 | if( cache->timeout != 0 && |
rahul_dahiya |
0:fb8047b156bb | 82 | (int) ( t - entry->timestamp ) > cache->timeout ) |
rahul_dahiya |
0:fb8047b156bb | 83 | continue; |
rahul_dahiya |
0:fb8047b156bb | 84 | #endif |
rahul_dahiya |
0:fb8047b156bb | 85 | |
rahul_dahiya |
0:fb8047b156bb | 86 | if( session->ciphersuite != entry->session.ciphersuite || |
rahul_dahiya |
0:fb8047b156bb | 87 | session->compression != entry->session.compression || |
rahul_dahiya |
0:fb8047b156bb | 88 | session->id_len != entry->session.id_len ) |
rahul_dahiya |
0:fb8047b156bb | 89 | continue; |
rahul_dahiya |
0:fb8047b156bb | 90 | |
rahul_dahiya |
0:fb8047b156bb | 91 | if( memcmp( session->id, entry->session.id, |
rahul_dahiya |
0:fb8047b156bb | 92 | entry->session.id_len ) != 0 ) |
rahul_dahiya |
0:fb8047b156bb | 93 | continue; |
rahul_dahiya |
0:fb8047b156bb | 94 | |
rahul_dahiya |
0:fb8047b156bb | 95 | memcpy( session->master, entry->session.master, 48 ); |
rahul_dahiya |
0:fb8047b156bb | 96 | |
rahul_dahiya |
0:fb8047b156bb | 97 | session->verify_result = entry->session.verify_result; |
rahul_dahiya |
0:fb8047b156bb | 98 | |
rahul_dahiya |
0:fb8047b156bb | 99 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
rahul_dahiya |
0:fb8047b156bb | 100 | /* |
rahul_dahiya |
0:fb8047b156bb | 101 | * Restore peer certificate (without rest of the original chain) |
rahul_dahiya |
0:fb8047b156bb | 102 | */ |
rahul_dahiya |
0:fb8047b156bb | 103 | if( entry->peer_cert.p != NULL ) |
rahul_dahiya |
0:fb8047b156bb | 104 | { |
rahul_dahiya |
0:fb8047b156bb | 105 | if( ( session->peer_cert = mbedtls_calloc( 1, |
rahul_dahiya |
0:fb8047b156bb | 106 | sizeof(mbedtls_x509_crt) ) ) == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 107 | { |
rahul_dahiya |
0:fb8047b156bb | 108 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 109 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 110 | } |
rahul_dahiya |
0:fb8047b156bb | 111 | |
rahul_dahiya |
0:fb8047b156bb | 112 | mbedtls_x509_crt_init( session->peer_cert ); |
rahul_dahiya |
0:fb8047b156bb | 113 | if( mbedtls_x509_crt_parse( session->peer_cert, entry->peer_cert.p, |
rahul_dahiya |
0:fb8047b156bb | 114 | entry->peer_cert.len ) != 0 ) |
rahul_dahiya |
0:fb8047b156bb | 115 | { |
rahul_dahiya |
0:fb8047b156bb | 116 | mbedtls_free( session->peer_cert ); |
rahul_dahiya |
0:fb8047b156bb | 117 | session->peer_cert = NULL; |
rahul_dahiya |
0:fb8047b156bb | 118 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 119 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 120 | } |
rahul_dahiya |
0:fb8047b156bb | 121 | } |
rahul_dahiya |
0:fb8047b156bb | 122 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
rahul_dahiya |
0:fb8047b156bb | 123 | |
rahul_dahiya |
0:fb8047b156bb | 124 | ret = 0; |
rahul_dahiya |
0:fb8047b156bb | 125 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 126 | } |
rahul_dahiya |
0:fb8047b156bb | 127 | |
rahul_dahiya |
0:fb8047b156bb | 128 | exit: |
rahul_dahiya |
0:fb8047b156bb | 129 | #if defined(MBEDTLS_THREADING_C) |
rahul_dahiya |
0:fb8047b156bb | 130 | if( mbedtls_mutex_unlock( &cache->mutex ) != 0 ) |
rahul_dahiya |
0:fb8047b156bb | 131 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 132 | #endif |
rahul_dahiya |
0:fb8047b156bb | 133 | |
rahul_dahiya |
0:fb8047b156bb | 134 | return( ret ); |
rahul_dahiya |
0:fb8047b156bb | 135 | } |
rahul_dahiya |
0:fb8047b156bb | 136 | |
rahul_dahiya |
0:fb8047b156bb | 137 | int mbedtls_ssl_cache_set( void *data, const mbedtls_ssl_session *session ) |
rahul_dahiya |
0:fb8047b156bb | 138 | { |
rahul_dahiya |
0:fb8047b156bb | 139 | int ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 140 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 141 | mbedtls_time_t t = mbedtls_time( NULL ), oldest = 0; |
rahul_dahiya |
0:fb8047b156bb | 142 | mbedtls_ssl_cache_entry *old = NULL; |
rahul_dahiya |
0:fb8047b156bb | 143 | #endif |
rahul_dahiya |
0:fb8047b156bb | 144 | mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; |
rahul_dahiya |
0:fb8047b156bb | 145 | mbedtls_ssl_cache_entry *cur, *prv; |
rahul_dahiya |
0:fb8047b156bb | 146 | int count = 0; |
rahul_dahiya |
0:fb8047b156bb | 147 | |
rahul_dahiya |
0:fb8047b156bb | 148 | #if defined(MBEDTLS_THREADING_C) |
rahul_dahiya |
0:fb8047b156bb | 149 | if( ( ret = mbedtls_mutex_lock( &cache->mutex ) ) != 0 ) |
rahul_dahiya |
0:fb8047b156bb | 150 | return( ret ); |
rahul_dahiya |
0:fb8047b156bb | 151 | #endif |
rahul_dahiya |
0:fb8047b156bb | 152 | |
rahul_dahiya |
0:fb8047b156bb | 153 | cur = cache->chain; |
rahul_dahiya |
0:fb8047b156bb | 154 | prv = NULL; |
rahul_dahiya |
0:fb8047b156bb | 155 | |
rahul_dahiya |
0:fb8047b156bb | 156 | while( cur != NULL ) |
rahul_dahiya |
0:fb8047b156bb | 157 | { |
rahul_dahiya |
0:fb8047b156bb | 158 | count++; |
rahul_dahiya |
0:fb8047b156bb | 159 | |
rahul_dahiya |
0:fb8047b156bb | 160 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 161 | if( cache->timeout != 0 && |
rahul_dahiya |
0:fb8047b156bb | 162 | (int) ( t - cur->timestamp ) > cache->timeout ) |
rahul_dahiya |
0:fb8047b156bb | 163 | { |
rahul_dahiya |
0:fb8047b156bb | 164 | cur->timestamp = t; |
rahul_dahiya |
0:fb8047b156bb | 165 | break; /* expired, reuse this slot, update timestamp */ |
rahul_dahiya |
0:fb8047b156bb | 166 | } |
rahul_dahiya |
0:fb8047b156bb | 167 | #endif |
rahul_dahiya |
0:fb8047b156bb | 168 | |
rahul_dahiya |
0:fb8047b156bb | 169 | if( memcmp( session->id, cur->session.id, cur->session.id_len ) == 0 ) |
rahul_dahiya |
0:fb8047b156bb | 170 | break; /* client reconnected, keep timestamp for session id */ |
rahul_dahiya |
0:fb8047b156bb | 171 | |
rahul_dahiya |
0:fb8047b156bb | 172 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 173 | if( oldest == 0 || cur->timestamp < oldest ) |
rahul_dahiya |
0:fb8047b156bb | 174 | { |
rahul_dahiya |
0:fb8047b156bb | 175 | oldest = cur->timestamp; |
rahul_dahiya |
0:fb8047b156bb | 176 | old = cur; |
rahul_dahiya |
0:fb8047b156bb | 177 | } |
rahul_dahiya |
0:fb8047b156bb | 178 | #endif |
rahul_dahiya |
0:fb8047b156bb | 179 | |
rahul_dahiya |
0:fb8047b156bb | 180 | prv = cur; |
rahul_dahiya |
0:fb8047b156bb | 181 | cur = cur->next; |
rahul_dahiya |
0:fb8047b156bb | 182 | } |
rahul_dahiya |
0:fb8047b156bb | 183 | |
rahul_dahiya |
0:fb8047b156bb | 184 | if( cur == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 185 | { |
rahul_dahiya |
0:fb8047b156bb | 186 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 187 | /* |
rahul_dahiya |
0:fb8047b156bb | 188 | * Reuse oldest entry if max_entries reached |
rahul_dahiya |
0:fb8047b156bb | 189 | */ |
rahul_dahiya |
0:fb8047b156bb | 190 | if( count >= cache->max_entries ) |
rahul_dahiya |
0:fb8047b156bb | 191 | { |
rahul_dahiya |
0:fb8047b156bb | 192 | if( old == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 193 | { |
rahul_dahiya |
0:fb8047b156bb | 194 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 195 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 196 | } |
rahul_dahiya |
0:fb8047b156bb | 197 | |
rahul_dahiya |
0:fb8047b156bb | 198 | cur = old; |
rahul_dahiya |
0:fb8047b156bb | 199 | } |
rahul_dahiya |
0:fb8047b156bb | 200 | #else /* MBEDTLS_HAVE_TIME */ |
rahul_dahiya |
0:fb8047b156bb | 201 | /* |
rahul_dahiya |
0:fb8047b156bb | 202 | * Reuse first entry in chain if max_entries reached, |
rahul_dahiya |
0:fb8047b156bb | 203 | * but move to last place |
rahul_dahiya |
0:fb8047b156bb | 204 | */ |
rahul_dahiya |
0:fb8047b156bb | 205 | if( count >= cache->max_entries ) |
rahul_dahiya |
0:fb8047b156bb | 206 | { |
rahul_dahiya |
0:fb8047b156bb | 207 | if( cache->chain == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 208 | { |
rahul_dahiya |
0:fb8047b156bb | 209 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 210 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 211 | } |
rahul_dahiya |
0:fb8047b156bb | 212 | |
rahul_dahiya |
0:fb8047b156bb | 213 | cur = cache->chain; |
rahul_dahiya |
0:fb8047b156bb | 214 | cache->chain = cur->next; |
rahul_dahiya |
0:fb8047b156bb | 215 | cur->next = NULL; |
rahul_dahiya |
0:fb8047b156bb | 216 | prv->next = cur; |
rahul_dahiya |
0:fb8047b156bb | 217 | } |
rahul_dahiya |
0:fb8047b156bb | 218 | #endif /* MBEDTLS_HAVE_TIME */ |
rahul_dahiya |
0:fb8047b156bb | 219 | else |
rahul_dahiya |
0:fb8047b156bb | 220 | { |
rahul_dahiya |
0:fb8047b156bb | 221 | /* |
rahul_dahiya |
0:fb8047b156bb | 222 | * max_entries not reached, create new entry |
rahul_dahiya |
0:fb8047b156bb | 223 | */ |
rahul_dahiya |
0:fb8047b156bb | 224 | cur = mbedtls_calloc( 1, sizeof(mbedtls_ssl_cache_entry) ); |
rahul_dahiya |
0:fb8047b156bb | 225 | if( cur == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 226 | { |
rahul_dahiya |
0:fb8047b156bb | 227 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 228 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 229 | } |
rahul_dahiya |
0:fb8047b156bb | 230 | |
rahul_dahiya |
0:fb8047b156bb | 231 | if( prv == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 232 | cache->chain = cur; |
rahul_dahiya |
0:fb8047b156bb | 233 | else |
rahul_dahiya |
0:fb8047b156bb | 234 | prv->next = cur; |
rahul_dahiya |
0:fb8047b156bb | 235 | } |
rahul_dahiya |
0:fb8047b156bb | 236 | |
rahul_dahiya |
0:fb8047b156bb | 237 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 238 | cur->timestamp = t; |
rahul_dahiya |
0:fb8047b156bb | 239 | #endif |
rahul_dahiya |
0:fb8047b156bb | 240 | } |
rahul_dahiya |
0:fb8047b156bb | 241 | |
rahul_dahiya |
0:fb8047b156bb | 242 | memcpy( &cur->session, session, sizeof( mbedtls_ssl_session ) ); |
rahul_dahiya |
0:fb8047b156bb | 243 | |
rahul_dahiya |
0:fb8047b156bb | 244 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
rahul_dahiya |
0:fb8047b156bb | 245 | /* |
rahul_dahiya |
0:fb8047b156bb | 246 | * If we're reusing an entry, free its certificate first |
rahul_dahiya |
0:fb8047b156bb | 247 | */ |
rahul_dahiya |
0:fb8047b156bb | 248 | if( cur->peer_cert.p != NULL ) |
rahul_dahiya |
0:fb8047b156bb | 249 | { |
rahul_dahiya |
0:fb8047b156bb | 250 | mbedtls_free( cur->peer_cert.p ); |
rahul_dahiya |
0:fb8047b156bb | 251 | memset( &cur->peer_cert, 0, sizeof(mbedtls_x509_buf) ); |
rahul_dahiya |
0:fb8047b156bb | 252 | } |
rahul_dahiya |
0:fb8047b156bb | 253 | |
rahul_dahiya |
0:fb8047b156bb | 254 | /* |
rahul_dahiya |
0:fb8047b156bb | 255 | * Store peer certificate |
rahul_dahiya |
0:fb8047b156bb | 256 | */ |
rahul_dahiya |
0:fb8047b156bb | 257 | if( session->peer_cert != NULL ) |
rahul_dahiya |
0:fb8047b156bb | 258 | { |
rahul_dahiya |
0:fb8047b156bb | 259 | cur->peer_cert.p = mbedtls_calloc( 1, session->peer_cert->raw.len ); |
rahul_dahiya |
0:fb8047b156bb | 260 | if( cur->peer_cert.p == NULL ) |
rahul_dahiya |
0:fb8047b156bb | 261 | { |
rahul_dahiya |
0:fb8047b156bb | 262 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 263 | goto exit; |
rahul_dahiya |
0:fb8047b156bb | 264 | } |
rahul_dahiya |
0:fb8047b156bb | 265 | |
rahul_dahiya |
0:fb8047b156bb | 266 | memcpy( cur->peer_cert.p, session->peer_cert->raw.p, |
rahul_dahiya |
0:fb8047b156bb | 267 | session->peer_cert->raw.len ); |
rahul_dahiya |
0:fb8047b156bb | 268 | cur->peer_cert.len = session->peer_cert->raw.len; |
rahul_dahiya |
0:fb8047b156bb | 269 | |
rahul_dahiya |
0:fb8047b156bb | 270 | cur->session.peer_cert = NULL; |
rahul_dahiya |
0:fb8047b156bb | 271 | } |
rahul_dahiya |
0:fb8047b156bb | 272 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
rahul_dahiya |
0:fb8047b156bb | 273 | |
rahul_dahiya |
0:fb8047b156bb | 274 | ret = 0; |
rahul_dahiya |
0:fb8047b156bb | 275 | |
rahul_dahiya |
0:fb8047b156bb | 276 | exit: |
rahul_dahiya |
0:fb8047b156bb | 277 | #if defined(MBEDTLS_THREADING_C) |
rahul_dahiya |
0:fb8047b156bb | 278 | if( mbedtls_mutex_unlock( &cache->mutex ) != 0 ) |
rahul_dahiya |
0:fb8047b156bb | 279 | ret = 1; |
rahul_dahiya |
0:fb8047b156bb | 280 | #endif |
rahul_dahiya |
0:fb8047b156bb | 281 | |
rahul_dahiya |
0:fb8047b156bb | 282 | return( ret ); |
rahul_dahiya |
0:fb8047b156bb | 283 | } |
rahul_dahiya |
0:fb8047b156bb | 284 | |
rahul_dahiya |
0:fb8047b156bb | 285 | #if defined(MBEDTLS_HAVE_TIME) |
rahul_dahiya |
0:fb8047b156bb | 286 | void mbedtls_ssl_cache_set_timeout( mbedtls_ssl_cache_context *cache, int timeout ) |
rahul_dahiya |
0:fb8047b156bb | 287 | { |
rahul_dahiya |
0:fb8047b156bb | 288 | if( timeout < 0 ) timeout = 0; |
rahul_dahiya |
0:fb8047b156bb | 289 | |
rahul_dahiya |
0:fb8047b156bb | 290 | cache->timeout = timeout; |
rahul_dahiya |
0:fb8047b156bb | 291 | } |
rahul_dahiya |
0:fb8047b156bb | 292 | #endif /* MBEDTLS_HAVE_TIME */ |
rahul_dahiya |
0:fb8047b156bb | 293 | |
rahul_dahiya |
0:fb8047b156bb | 294 | void mbedtls_ssl_cache_set_max_entries( mbedtls_ssl_cache_context *cache, int max ) |
rahul_dahiya |
0:fb8047b156bb | 295 | { |
rahul_dahiya |
0:fb8047b156bb | 296 | if( max < 0 ) max = 0; |
rahul_dahiya |
0:fb8047b156bb | 297 | |
rahul_dahiya |
0:fb8047b156bb | 298 | cache->max_entries = max; |
rahul_dahiya |
0:fb8047b156bb | 299 | } |
rahul_dahiya |
0:fb8047b156bb | 300 | |
rahul_dahiya |
0:fb8047b156bb | 301 | void mbedtls_ssl_cache_free( mbedtls_ssl_cache_context *cache ) |
rahul_dahiya |
0:fb8047b156bb | 302 | { |
rahul_dahiya |
0:fb8047b156bb | 303 | mbedtls_ssl_cache_entry *cur, *prv; |
rahul_dahiya |
0:fb8047b156bb | 304 | |
rahul_dahiya |
0:fb8047b156bb | 305 | cur = cache->chain; |
rahul_dahiya |
0:fb8047b156bb | 306 | |
rahul_dahiya |
0:fb8047b156bb | 307 | while( cur != NULL ) |
rahul_dahiya |
0:fb8047b156bb | 308 | { |
rahul_dahiya |
0:fb8047b156bb | 309 | prv = cur; |
rahul_dahiya |
0:fb8047b156bb | 310 | cur = cur->next; |
rahul_dahiya |
0:fb8047b156bb | 311 | |
rahul_dahiya |
0:fb8047b156bb | 312 | mbedtls_ssl_session_free( &prv->session ); |
rahul_dahiya |
0:fb8047b156bb | 313 | |
rahul_dahiya |
0:fb8047b156bb | 314 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
rahul_dahiya |
0:fb8047b156bb | 315 | mbedtls_free( prv->peer_cert.p ); |
rahul_dahiya |
0:fb8047b156bb | 316 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
rahul_dahiya |
0:fb8047b156bb | 317 | |
rahul_dahiya |
0:fb8047b156bb | 318 | mbedtls_free( prv ); |
rahul_dahiya |
0:fb8047b156bb | 319 | } |
rahul_dahiya |
0:fb8047b156bb | 320 | |
rahul_dahiya |
0:fb8047b156bb | 321 | #if defined(MBEDTLS_THREADING_C) |
rahul_dahiya |
0:fb8047b156bb | 322 | mbedtls_mutex_free( &cache->mutex ); |
rahul_dahiya |
0:fb8047b156bb | 323 | #endif |
rahul_dahiya |
0:fb8047b156bb | 324 | } |
rahul_dahiya |
0:fb8047b156bb | 325 | |
rahul_dahiya |
0:fb8047b156bb | 326 | #endif /* MBEDTLS_SSL_CACHE_C */ |