1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
/*
* Copyright (c) 2002-2009 Moxie Marlinspike
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License as
* published by the Free Software Foundation; either version 3 of the
* License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
* USA
*/
#include "SessionCache.hpp"
#include "Logger.hpp"
SessionCache* SessionCache::sessionCache = NULL;
boost::mutex SessionCache::singletonLock;
SessionCache* SessionCache::getInstance() {
boost::mutex::scoped_lock lock(singletonLock);
if (sessionCache == NULL)
sessionCache = new SessionCache();
return sessionCache;
}
SessionCache::SessionCache() {
bzero((void*)&cache, sizeof(SessionCacheBlock));
}
void SessionCache::removeSessionId(unsigned char* id, int idLength) {
int i;
for (i=0;i<CACHE_SIZE;i++) {
if (memcmp(cache.sessions[i].id, id, idLength) == 0) {
bzero(cache.sessions[i].id, idLength);
}
}
}
int SessionCache::setNewSessionId(SSL *s, SSL_SESSION *session) {
unsigned int id_length;
const unsigned char *id = SSL_SESSION_get_id(session, &id_length);
return setNewSessionId(s, session, (unsigned char*)id, id_length);
}
int SessionCache::setNewSessionId(SSL *s, SSL_SESSION *session,
unsigned char *id, int idLength)
{
int encodedLength = i2d_SSL_SESSION(session, NULL);
unsigned char* b;
int current;
if (encodedLength > MAX_ENCODING_SIZE) {
std::stringstream errorStream;
errorStream << "Encoded Length: " << encodedLength << " too big for session cache, skipping...";
std::string error = errorStream.str();
Logger::logError(error);
return 1;
}
if (idLength > MAX_ID_SIZE) {
std::stringstream errorStream;
errorStream << "ID Length: " << idLength << " too big for session cache, skipping...";
std::string error = errorStream.str();
Logger::logError(error);
return 1;
}
boost::mutex::scoped_lock lock(cacheLock);
removeSessionId(id, idLength);
current = cache.current;
b = cache.sessions[current].encoding;
i2d_SSL_SESSION(session, &b);
memcpy(cache.sessions[current].id, id, idLength);
cache.sessions[current].encodingLength = encodedLength;
cache.sessions[current].idLength = idLength;
cache.current = (current + 1) % CACHE_SIZE;
return 1;
}
SSL_SESSION * SessionCache::getSessionId(SSL *s, const unsigned char *id, int idLength, int *ref) {
int i;
unsigned char *b;
*ref = 0;
boost::mutex::scoped_lock lock(cacheLock);
for (i=0;i<CACHE_SIZE;i++) {
if (memcmp(cache.sessions[i].id, id, idLength) == 0) {
b = (unsigned char*)malloc(cache.sessions[i].encodingLength);
memcpy(b, cache.sessions[i].encoding, cache.sessions[i].encodingLength);
return d2i_SSL_SESSION(NULL, (const unsigned char **)&b,
cache.sessions[i].encodingLength);
}
}
return NULL;
}
// Trampoline Functions. Yay C.
SSL_SESSION * SessionCache::getSessionIdTramp(SSL *s, const unsigned char *id, int idLength, int *ref) {
return SessionCache::getInstance()->getSessionId(s, id, idLength, ref);
}
int SessionCache::setNewSessionIdTramp(SSL *s, SSL_SESSION *session) {
return SessionCache::getInstance()->setNewSessionId(s, session);
}
|
