ssl_cache.h 5.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175
  1. /**
  2. * \file ssl_cache.h
  3. *
  4. * \brief SSL session cache implementation
  5. */
  6. /*
  7. * Copyright The Mbed TLS Contributors
  8. * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
  9. *
  10. * This file is provided under the Apache License 2.0, or the
  11. * GNU General Public License v2.0 or later.
  12. *
  13. * **********
  14. * Apache License 2.0:
  15. *
  16. * Licensed under the Apache License, Version 2.0 (the "License"); you may
  17. * not use this file except in compliance with the License.
  18. * You may obtain a copy of the License at
  19. *
  20. * http://www.apache.org/licenses/LICENSE-2.0
  21. *
  22. * Unless required by applicable law or agreed to in writing, software
  23. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
  24. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  25. * See the License for the specific language governing permissions and
  26. * limitations under the License.
  27. *
  28. * **********
  29. *
  30. * **********
  31. * GNU General Public License v2.0 or later:
  32. *
  33. * This program is free software; you can redistribute it and/or modify
  34. * it under the terms of the GNU General Public License as published by
  35. * the Free Software Foundation; either version 2 of the License, or
  36. * (at your option) any later version.
  37. *
  38. * This program is distributed in the hope that it will be useful,
  39. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  40. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  41. * GNU General Public License for more details.
  42. *
  43. * You should have received a copy of the GNU General Public License along
  44. * with this program; if not, write to the Free Software Foundation, Inc.,
  45. * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  46. *
  47. * **********
  48. */
  49. #ifndef MBEDTLS_SSL_CACHE_H
  50. #define MBEDTLS_SSL_CACHE_H
  51. #if !defined(MBEDTLS_CONFIG_FILE)
  52. #include "config.h"
  53. #else
  54. #include MBEDTLS_CONFIG_FILE
  55. #endif
  56. #include "ssl.h"
  57. #if defined(MBEDTLS_THREADING_C)
  58. #include "threading.h"
  59. #endif
  60. /**
  61. * \name SECTION: Module settings
  62. *
  63. * The configuration options you can set for this module are in this section.
  64. * Either change them in config.h or define them on the compiler command line.
  65. * \{
  66. */
  67. #if !defined(MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT)
  68. #define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT 86400 /*!< 1 day */
  69. #endif
  70. #if !defined(MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES)
  71. #define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /*!< Maximum entries in cache */
  72. #endif
  73. /* \} name SECTION: Module settings */
  74. #ifdef __cplusplus
  75. extern "C" {
  76. #endif
  77. typedef struct mbedtls_ssl_cache_context mbedtls_ssl_cache_context;
  78. typedef struct mbedtls_ssl_cache_entry mbedtls_ssl_cache_entry;
  79. /**
  80. * \brief This structure is used for storing cache entries
  81. */
  82. struct mbedtls_ssl_cache_entry
  83. {
  84. #if defined(MBEDTLS_HAVE_TIME)
  85. mbedtls_time_t timestamp; /*!< entry timestamp */
  86. #endif
  87. mbedtls_ssl_session session; /*!< entry session */
  88. #if defined(MBEDTLS_X509_CRT_PARSE_C)
  89. mbedtls_x509_buf peer_cert; /*!< entry peer_cert */
  90. #endif
  91. mbedtls_ssl_cache_entry *next; /*!< chain pointer */
  92. };
  93. /**
  94. * \brief Cache context
  95. */
  96. struct mbedtls_ssl_cache_context
  97. {
  98. mbedtls_ssl_cache_entry *chain; /*!< start of the chain */
  99. int timeout; /*!< cache entry timeout */
  100. int max_entries; /*!< maximum entries */
  101. #if defined(MBEDTLS_THREADING_C)
  102. mbedtls_threading_mutex_t mutex; /*!< mutex */
  103. #endif
  104. };
  105. /**
  106. * \brief Initialize an SSL cache context
  107. *
  108. * \param cache SSL cache context
  109. */
  110. void mbedtls_ssl_cache_init( mbedtls_ssl_cache_context *cache );
  111. /**
  112. * \brief Cache get callback implementation
  113. * (Thread-safe if MBEDTLS_THREADING_C is enabled)
  114. *
  115. * \param data SSL cache context
  116. * \param session session to retrieve entry for
  117. */
  118. int mbedtls_ssl_cache_get( void *data, mbedtls_ssl_session *session );
  119. /**
  120. * \brief Cache set callback implementation
  121. * (Thread-safe if MBEDTLS_THREADING_C is enabled)
  122. *
  123. * \param data SSL cache context
  124. * \param session session to store entry for
  125. */
  126. int mbedtls_ssl_cache_set( void *data, const mbedtls_ssl_session *session );
  127. #if defined(MBEDTLS_HAVE_TIME)
  128. /**
  129. * \brief Set the cache timeout
  130. * (Default: MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT (1 day))
  131. *
  132. * A timeout of 0 indicates no timeout.
  133. *
  134. * \param cache SSL cache context
  135. * \param timeout cache entry timeout in seconds
  136. */
  137. void mbedtls_ssl_cache_set_timeout( mbedtls_ssl_cache_context *cache, int timeout );
  138. #endif /* MBEDTLS_HAVE_TIME */
  139. /**
  140. * \brief Set the maximum number of cache entries
  141. * (Default: MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES (50))
  142. *
  143. * \param cache SSL cache context
  144. * \param max cache entry maximum
  145. */
  146. void mbedtls_ssl_cache_set_max_entries( mbedtls_ssl_cache_context *cache, int max );
  147. /**
  148. * \brief Free referenced items in a cache context and clear memory
  149. *
  150. * \param cache SSL cache context
  151. */
  152. void mbedtls_ssl_cache_free( mbedtls_ssl_cache_context *cache );
  153. #ifdef __cplusplus
  154. }
  155. #endif
  156. #endif /* ssl_cache.h */