mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-10-22 15:17:29 +09:00
Remove support for TLS session caches in TLSServerSocket.
This resolves #738
This commit is contained in:
parent
1bb41a8652
commit
e2e197cada
10 changed files with 15 additions and 43 deletions
|
|
@ -52,12 +52,12 @@ TLSServerSocket::SetSocketDefaults()
|
|||
SSL_OptionSet(mFD, SSL_SECURITY, true);
|
||||
SSL_OptionSet(mFD, SSL_HANDSHAKE_AS_CLIENT, false);
|
||||
SSL_OptionSet(mFD, SSL_HANDSHAKE_AS_SERVER, true);
|
||||
|
||||
SSL_OptionSet(mFD, SSL_NO_CACHE, true);
|
||||
|
||||
// We don't currently notify the server API consumer of renegotiation events
|
||||
// (to revalidate peer certs, etc.), so disable it for now.
|
||||
SSL_OptionSet(mFD, SSL_ENABLE_RENEGOTIATION, SSL_RENEGOTIATE_NEVER);
|
||||
|
||||
SetSessionCache(true);
|
||||
SetSessionTickets(true);
|
||||
SetRequestClientCertificate(REQUEST_NEVER);
|
||||
|
||||
|
|
@ -171,18 +171,6 @@ TLSServerSocket::SetServerCert(nsIX509Cert* aCert)
|
|||
return NS_OK;
|
||||
}
|
||||
|
||||
NS_IMETHODIMP
|
||||
TLSServerSocket::SetSessionCache(bool aEnabled)
|
||||
{
|
||||
// If AsyncListen was already called (and set mListener), it's too late to set
|
||||
// this.
|
||||
if (NS_WARN_IF(mListener)) {
|
||||
return NS_ERROR_IN_PROGRESS;
|
||||
}
|
||||
SSL_OptionSet(mFD, SSL_NO_CACHE, !aEnabled);
|
||||
return NS_OK;
|
||||
}
|
||||
|
||||
NS_IMETHODIMP
|
||||
TLSServerSocket::SetSessionTickets(bool aEnabled)
|
||||
{
|
||||
|
|
|
|||
|
|
@ -19,15 +19,6 @@ interface nsITLSServerSocket : nsIServerSocket
|
|||
*/
|
||||
attribute nsIX509Cert serverCert;
|
||||
|
||||
/**
|
||||
* setSessionCache
|
||||
*
|
||||
* Whether the server should use a session cache. Defaults to true. This
|
||||
* should be set before calling |asyncListen| if you wish to change the
|
||||
* default.
|
||||
*/
|
||||
void setSessionCache(in boolean aSessionCache);
|
||||
|
||||
/**
|
||||
* setSessionTickets
|
||||
*
|
||||
|
|
|
|||
|
|
@ -140,7 +140,6 @@ function startServer(cert, minServerVersion, maxServerVersion) {
|
|||
tlsServer.init(-1, true, -1);
|
||||
tlsServer.serverCert = cert;
|
||||
tlsServer.setVersionRange(minServerVersion, maxServerVersion);
|
||||
tlsServer.setSessionCache(false);
|
||||
tlsServer.setSessionTickets(false);
|
||||
tlsServer.asyncListen(new ServerSocketListener());
|
||||
return tlsServer;
|
||||
|
|
|
|||
|
|
@ -90,7 +90,6 @@ function startServer(cert, expectingPeerCert, clientCertificateConfig,
|
|||
onStopListening: function() {}
|
||||
};
|
||||
|
||||
tlsServer.setSessionCache(false);
|
||||
tlsServer.setSessionTickets(false);
|
||||
tlsServer.setRequestClientCertificate(clientCertificateConfig);
|
||||
|
||||
|
|
|
|||
|
|
@ -67,7 +67,6 @@ function startServer(cert) {
|
|||
onStopListening: function() {}
|
||||
};
|
||||
|
||||
tlsServer.setSessionCache(true);
|
||||
tlsServer.setSessionTickets(false);
|
||||
|
||||
tlsServer.asyncListen(listener);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue