1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
/*
* TLS Session Management
* (C) 2011,2012 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
#include <botan/tls_session_manager.h>
#include <botan/hex.h>
#include <botan/rng.h>
#include <chrono>
namespace Botan {
namespace TLS {
Session_Manager_In_Memory::Session_Manager_In_Memory(
RandomNumberGenerator& rng,
size_t max_sessions,
std::chrono::seconds session_lifetime) :
m_max_sessions(max_sessions),
m_session_lifetime(session_lifetime),
m_rng(rng),
m_session_key(m_rng.random_vec(32))
{}
bool Session_Manager_In_Memory::load_from_session_str(
const std::string& session_str, Session& session)
{
// assert(lock is held)
auto i = m_sessions.find(session_str);
if(i == m_sessions.end())
return false;
try
{
session = Session::decrypt(i->second, m_session_key);
}
catch(...)
{
return false;
}
// if session has expired, remove it
const auto now = std::chrono::system_clock::now();
if(session.start_time() + session_lifetime() < now)
{
m_sessions.erase(i);
return false;
}
return true;
}
bool Session_Manager_In_Memory::load_from_session_id(
const std::vector<uint8_t>& session_id, Session& session)
{
lock_guard_type<mutex_type> lock(m_mutex);
return load_from_session_str(hex_encode(session_id), session);
}
bool Session_Manager_In_Memory::load_from_server_info(
const Server_Information& info, Session& session)
{
lock_guard_type<mutex_type> lock(m_mutex);
auto i = m_info_sessions.find(info);
if(i == m_info_sessions.end())
return false;
if(load_from_session_str(i->second, session))
return true;
/*
* It existed at one point but was removed from the sessions map,
* remove m_info_sessions entry as well
*/
m_info_sessions.erase(i);
return false;
}
void Session_Manager_In_Memory::remove_entry(
const std::vector<uint8_t>& session_id)
{
lock_guard_type<mutex_type> lock(m_mutex);
auto i = m_sessions.find(hex_encode(session_id));
if(i != m_sessions.end())
m_sessions.erase(i);
}
size_t Session_Manager_In_Memory::remove_all()
{
const size_t removed = m_sessions.size();
m_info_sessions.clear();
m_sessions.clear();
m_rng.random_vec(m_session_key, 32);
return removed;
}
void Session_Manager_In_Memory::save(const Session& session)
{
lock_guard_type<mutex_type> lock(m_mutex);
if(m_max_sessions != 0)
{
/*
We generate new session IDs with the first 4 bytes being a
timestamp, so this actually removes the oldest sessions first.
*/
while(m_sessions.size() >= m_max_sessions)
m_sessions.erase(m_sessions.begin());
}
const std::string session_id_str = hex_encode(session.session_id());
m_sessions[session_id_str] = session.encrypt(m_session_key, m_rng);
if(session.side() == CLIENT && !session.server_info().empty())
m_info_sessions[session.server_info()] = session_id_str;
}
}
}
|
