| // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "net/socket/ssl_client_socket_pool.h" |
| |
| #include "base/bind.h" |
| #include "base/bind_helpers.h" |
| #include "base/metrics/field_trial.h" |
| #include "base/metrics/histogram.h" |
| #include "base/values.h" |
| #include "net/base/net_errors.h" |
| #include "net/base/host_port_pair.h" |
| #include "net/base/ssl_cert_request_info.h" |
| #include "net/http/http_proxy_client_socket.h" |
| #include "net/http/http_proxy_client_socket_pool.h" |
| #include "net/socket/client_socket_factory.h" |
| #include "net/socket/client_socket_handle.h" |
| #include "net/socket/socks_client_socket_pool.h" |
| #include "net/socket/ssl_client_socket.h" |
| #include "net/socket/transport_client_socket_pool.h" |
| |
| namespace net { |
| |
| SSLSocketParams::SSLSocketParams( |
| const scoped_refptr<TransportSocketParams>& transport_params, |
| const scoped_refptr<SOCKSSocketParams>& socks_params, |
| const scoped_refptr<HttpProxySocketParams>& http_proxy_params, |
| ProxyServer::Scheme proxy, |
| const HostPortPair& host_and_port, |
| const SSLConfig& ssl_config, |
| int load_flags, |
| bool force_spdy_over_ssl, |
| bool want_spdy_over_npn) |
| : transport_params_(transport_params), |
| http_proxy_params_(http_proxy_params), |
| socks_params_(socks_params), |
| proxy_(proxy), |
| host_and_port_(host_and_port), |
| ssl_config_(ssl_config), |
| load_flags_(load_flags), |
| force_spdy_over_ssl_(force_spdy_over_ssl), |
| want_spdy_over_npn_(want_spdy_over_npn), |
| ignore_limits_(false) { |
| switch (proxy_) { |
| case ProxyServer::SCHEME_DIRECT: |
| DCHECK(transport_params_.get() != NULL); |
| DCHECK(http_proxy_params_.get() == NULL); |
| DCHECK(socks_params_.get() == NULL); |
| ignore_limits_ = transport_params_->ignore_limits(); |
| break; |
| case ProxyServer::SCHEME_HTTP: |
| case ProxyServer::SCHEME_HTTPS: |
| DCHECK(transport_params_.get() == NULL); |
| DCHECK(http_proxy_params_.get() != NULL); |
| DCHECK(socks_params_.get() == NULL); |
| ignore_limits_ = http_proxy_params_->ignore_limits(); |
| break; |
| case ProxyServer::SCHEME_SOCKS4: |
| case ProxyServer::SCHEME_SOCKS5: |
| DCHECK(transport_params_.get() == NULL); |
| DCHECK(http_proxy_params_.get() == NULL); |
| DCHECK(socks_params_.get() != NULL); |
| ignore_limits_ = socks_params_->ignore_limits(); |
| break; |
| default: |
| LOG(DFATAL) << "unknown proxy type"; |
| break; |
| } |
| } |
| |
| SSLSocketParams::~SSLSocketParams() {} |
| |
| // Timeout for the SSL handshake portion of the connect. |
| static const int kSSLHandshakeTimeoutInSeconds = 30; |
| |
| SSLConnectJob::SSLConnectJob(const std::string& group_name, |
| const scoped_refptr<SSLSocketParams>& params, |
| const base::TimeDelta& timeout_duration, |
| TransportClientSocketPool* transport_pool, |
| SOCKSClientSocketPool* socks_pool, |
| HttpProxyClientSocketPool* http_proxy_pool, |
| ClientSocketFactory* client_socket_factory, |
| HostResolver* host_resolver, |
| const SSLClientSocketContext& context, |
| Delegate* delegate, |
| NetLog* net_log) |
| : ConnectJob(group_name, timeout_duration, delegate, |
| BoundNetLog::Make(net_log, NetLog::SOURCE_CONNECT_JOB)), |
| params_(params), |
| transport_pool_(transport_pool), |
| socks_pool_(socks_pool), |
| http_proxy_pool_(http_proxy_pool), |
| client_socket_factory_(client_socket_factory), |
| host_resolver_(host_resolver), |
| context_(context), |
| ALLOW_THIS_IN_INITIALIZER_LIST( |
| callback_(base::Bind(&SSLConnectJob::OnIOComplete, |
| base::Unretained(this)))) {} |
| |
| SSLConnectJob::~SSLConnectJob() {} |
| |
| LoadState SSLConnectJob::GetLoadState() const { |
| switch (next_state_) { |
| case STATE_TUNNEL_CONNECT_COMPLETE: |
| if (transport_socket_handle_->socket()) |
| return LOAD_STATE_ESTABLISHING_PROXY_TUNNEL; |
| // else, fall through. |
| case STATE_TRANSPORT_CONNECT: |
| case STATE_TRANSPORT_CONNECT_COMPLETE: |
| case STATE_SOCKS_CONNECT: |
| case STATE_SOCKS_CONNECT_COMPLETE: |
| case STATE_TUNNEL_CONNECT: |
| return transport_socket_handle_->GetLoadState(); |
| case STATE_SSL_CONNECT: |
| case STATE_SSL_CONNECT_COMPLETE: |
| return LOAD_STATE_SSL_HANDSHAKE; |
| default: |
| NOTREACHED(); |
| return LOAD_STATE_IDLE; |
| } |
| } |
| |
| void SSLConnectJob::GetAdditionalErrorState(ClientSocketHandle* handle) { |
| // Headers in |error_response_info_| indicate a proxy tunnel setup |
| // problem. See DoTunnelConnectComplete. |
| if (error_response_info_.headers) { |
| handle->set_pending_http_proxy_connection( |
| transport_socket_handle_.release()); |
| } |
| handle->set_ssl_error_response_info(error_response_info_); |
| if (!ssl_connect_start_time_.is_null()) |
| handle->set_is_ssl_error(true); |
| } |
| |
| void SSLConnectJob::OnIOComplete(int result) { |
| int rv = DoLoop(result); |
| if (rv != ERR_IO_PENDING) |
| NotifyDelegateOfCompletion(rv); // Deletes |this|. |
| } |
| |
| int SSLConnectJob::DoLoop(int result) { |
| DCHECK_NE(next_state_, STATE_NONE); |
| |
| int rv = result; |
| do { |
| State state = next_state_; |
| next_state_ = STATE_NONE; |
| switch (state) { |
| case STATE_TRANSPORT_CONNECT: |
| DCHECK_EQ(OK, rv); |
| rv = DoTransportConnect(); |
| break; |
| case STATE_TRANSPORT_CONNECT_COMPLETE: |
| rv = DoTransportConnectComplete(rv); |
| break; |
| case STATE_SOCKS_CONNECT: |
| DCHECK_EQ(OK, rv); |
| rv = DoSOCKSConnect(); |
| break; |
| case STATE_SOCKS_CONNECT_COMPLETE: |
| rv = DoSOCKSConnectComplete(rv); |
| break; |
| case STATE_TUNNEL_CONNECT: |
| DCHECK_EQ(OK, rv); |
| rv = DoTunnelConnect(); |
| break; |
| case STATE_TUNNEL_CONNECT_COMPLETE: |
| rv = DoTunnelConnectComplete(rv); |
| break; |
| case STATE_SSL_CONNECT: |
| DCHECK_EQ(OK, rv); |
| rv = DoSSLConnect(); |
| break; |
| case STATE_SSL_CONNECT_COMPLETE: |
| rv = DoSSLConnectComplete(rv); |
| break; |
| default: |
| NOTREACHED() << "bad state"; |
| rv = ERR_FAILED; |
| break; |
| } |
| } while (rv != ERR_IO_PENDING && next_state_ != STATE_NONE); |
| |
| return rv; |
| } |
| |
| int SSLConnectJob::DoTransportConnect() { |
| DCHECK(transport_pool_); |
| |
| next_state_ = STATE_TRANSPORT_CONNECT_COMPLETE; |
| transport_socket_handle_.reset(new ClientSocketHandle()); |
| scoped_refptr<TransportSocketParams> transport_params = |
| params_->transport_params(); |
| return transport_socket_handle_->Init( |
| group_name(), transport_params, |
| transport_params->destination().priority(), callback_, transport_pool_, |
| net_log()); |
| } |
| |
| int SSLConnectJob::DoTransportConnectComplete(int result) { |
| if (result == OK) |
| next_state_ = STATE_SSL_CONNECT; |
| |
| return result; |
| } |
| |
| int SSLConnectJob::DoSOCKSConnect() { |
| DCHECK(socks_pool_); |
| next_state_ = STATE_SOCKS_CONNECT_COMPLETE; |
| transport_socket_handle_.reset(new ClientSocketHandle()); |
| scoped_refptr<SOCKSSocketParams> socks_params = params_->socks_params(); |
| return transport_socket_handle_->Init( |
| group_name(), socks_params, socks_params->destination().priority(), |
| callback_, socks_pool_, net_log()); |
| } |
| |
| int SSLConnectJob::DoSOCKSConnectComplete(int result) { |
| if (result == OK) |
| next_state_ = STATE_SSL_CONNECT; |
| |
| return result; |
| } |
| |
| int SSLConnectJob::DoTunnelConnect() { |
| DCHECK(http_proxy_pool_); |
| next_state_ = STATE_TUNNEL_CONNECT_COMPLETE; |
| |
| transport_socket_handle_.reset(new ClientSocketHandle()); |
| scoped_refptr<HttpProxySocketParams> http_proxy_params = |
| params_->http_proxy_params(); |
| return transport_socket_handle_->Init( |
| group_name(), http_proxy_params, |
| http_proxy_params->destination().priority(), callback_, http_proxy_pool_, |
| net_log()); |
| } |
| |
| int SSLConnectJob::DoTunnelConnectComplete(int result) { |
| // Extract the information needed to prompt for appropriate proxy |
| // authentication so that when ClientSocketPoolBaseHelper calls |
| // |GetAdditionalErrorState|, we can easily set the state. |
| if (result == ERR_SSL_CLIENT_AUTH_CERT_NEEDED) { |
| error_response_info_ = transport_socket_handle_->ssl_error_response_info(); |
| } else if (result == ERR_PROXY_AUTH_REQUESTED || |
| result == ERR_HTTPS_PROXY_TUNNEL_RESPONSE) { |
| StreamSocket* socket = transport_socket_handle_->socket(); |
| HttpProxyClientSocket* tunnel_socket = |
| static_cast<HttpProxyClientSocket*>(socket); |
| error_response_info_ = *tunnel_socket->GetConnectResponseInfo(); |
| } |
| if (result < 0) |
| return result; |
| |
| next_state_ = STATE_SSL_CONNECT; |
| return result; |
| } |
| |
| int SSLConnectJob::DoSSLConnect() { |
| next_state_ = STATE_SSL_CONNECT_COMPLETE; |
| // Reset the timeout to just the time allowed for the SSL handshake. |
| ResetTimer(base::TimeDelta::FromSeconds(kSSLHandshakeTimeoutInSeconds)); |
| ssl_connect_start_time_ = base::TimeTicks::Now(); |
| |
| ssl_socket_.reset(client_socket_factory_->CreateSSLClientSocket( |
| transport_socket_handle_.release(), params_->host_and_port(), |
| params_->ssl_config(), context_)); |
| return ssl_socket_->Connect(callback_); |
| } |
| |
| int SSLConnectJob::DoSSLConnectComplete(int result) { |
| SSLClientSocket::NextProtoStatus status = |
| SSLClientSocket::kNextProtoUnsupported; |
| std::string proto; |
| std::string server_protos; |
| // GetNextProto will fail and and trigger a NOTREACHED if we pass in a socket |
| // that hasn't had SSL_ImportFD called on it. If we get a certificate error |
| // here, then we know that we called SSL_ImportFD. |
| if (result == OK || IsCertificateError(result)) |
| status = ssl_socket_->GetNextProto(&proto, &server_protos); |
| |
| // If we want spdy over npn, make sure it succeeded. |
| if (status == SSLClientSocket::kNextProtoNegotiated) { |
| ssl_socket_->set_was_npn_negotiated(true); |
| NextProto protocol_negotiated = |
| SSLClientSocket::NextProtoFromString(proto); |
| ssl_socket_->set_protocol_negotiated(protocol_negotiated); |
| // If we negotiated either version of SPDY, we must have |
| // advertised it, so allow it. |
| // TODO(mbelshe): verify it was a protocol we advertised? |
| if (protocol_negotiated == kProtoSPDY1 || |
| protocol_negotiated == kProtoSPDY2 || |
| protocol_negotiated == kProtoSPDY3) { |
| ssl_socket_->set_was_spdy_negotiated(true); |
| } |
| } |
| if (params_->want_spdy_over_npn() && !ssl_socket_->was_spdy_negotiated()) |
| return ERR_NPN_NEGOTIATION_FAILED; |
| |
| // Spdy might be turned on by default, or it might be over npn. |
| bool using_spdy = params_->force_spdy_over_ssl() || |
| params_->want_spdy_over_npn(); |
| |
| if (result == OK || |
| ssl_socket_->IgnoreCertError(result, params_->load_flags())) { |
| DCHECK(ssl_connect_start_time_ != base::TimeTicks()); |
| base::TimeDelta connect_duration = |
| base::TimeTicks::Now() - ssl_connect_start_time_; |
| if (using_spdy) { |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SpdyConnectionLatency", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(10), |
| 100); |
| } |
| |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(10), |
| 100); |
| |
| SSLInfo ssl_info; |
| ssl_socket_->GetSSLInfo(&ssl_info); |
| |
| if (ssl_info.handshake_type == SSLInfo::HANDSHAKE_RESUME) { |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency_Resume_Handshake", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(1), |
| 100); |
| } else if (ssl_info.handshake_type == SSLInfo::HANDSHAKE_FULL) { |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency_Full_Handshake", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(1), |
| 100); |
| } |
| |
| const std::string& host = params_->host_and_port().host(); |
| bool is_google = host == "google.com" || |
| (host.size() > 11 && |
| host.rfind(".google.com") == host.size() - 11); |
| if (is_google) { |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency_Google", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(10), |
| 100); |
| if (ssl_info.handshake_type == SSLInfo::HANDSHAKE_RESUME) { |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency_Google_" |
| "Resume_Handshake", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(1), |
| 100); |
| } else if (ssl_info.handshake_type == SSLInfo::HANDSHAKE_FULL) { |
| UMA_HISTOGRAM_CUSTOM_TIMES("Net.SSL_Connection_Latency_Google_" |
| "Full_Handshake", |
| connect_duration, |
| base::TimeDelta::FromMilliseconds(1), |
| base::TimeDelta::FromMinutes(1), |
| 100); |
| } |
| } |
| } |
| |
| if (result == OK || IsCertificateError(result)) { |
| set_socket(ssl_socket_.release()); |
| } else if (result == ERR_SSL_CLIENT_AUTH_CERT_NEEDED) { |
| error_response_info_.cert_request_info = new SSLCertRequestInfo; |
| ssl_socket_->GetSSLCertRequestInfo(error_response_info_.cert_request_info); |
| } |
| |
| return result; |
| } |
| |
| int SSLConnectJob::ConnectInternal() { |
| switch (params_->proxy()) { |
| case ProxyServer::SCHEME_DIRECT: |
| next_state_ = STATE_TRANSPORT_CONNECT; |
| break; |
| case ProxyServer::SCHEME_HTTP: |
| case ProxyServer::SCHEME_HTTPS: |
| next_state_ = STATE_TUNNEL_CONNECT; |
| break; |
| case ProxyServer::SCHEME_SOCKS4: |
| case ProxyServer::SCHEME_SOCKS5: |
| next_state_ = STATE_SOCKS_CONNECT; |
| break; |
| default: |
| NOTREACHED() << "unknown proxy type"; |
| break; |
| } |
| return DoLoop(OK); |
| } |
| |
| SSLClientSocketPool::SSLConnectJobFactory::SSLConnectJobFactory( |
| TransportClientSocketPool* transport_pool, |
| SOCKSClientSocketPool* socks_pool, |
| HttpProxyClientSocketPool* http_proxy_pool, |
| ClientSocketFactory* client_socket_factory, |
| HostResolver* host_resolver, |
| const SSLClientSocketContext& context, |
| NetLog* net_log) |
| : transport_pool_(transport_pool), |
| socks_pool_(socks_pool), |
| http_proxy_pool_(http_proxy_pool), |
| client_socket_factory_(client_socket_factory), |
| host_resolver_(host_resolver), |
| context_(context), |
| net_log_(net_log) { |
| base::TimeDelta max_transport_timeout = base::TimeDelta(); |
| base::TimeDelta pool_timeout; |
| if (transport_pool_) |
| max_transport_timeout = transport_pool_->ConnectionTimeout(); |
| if (socks_pool_) { |
| pool_timeout = socks_pool_->ConnectionTimeout(); |
| if (pool_timeout > max_transport_timeout) |
| max_transport_timeout = pool_timeout; |
| } |
| if (http_proxy_pool_) { |
| pool_timeout = http_proxy_pool_->ConnectionTimeout(); |
| if (pool_timeout > max_transport_timeout) |
| max_transport_timeout = pool_timeout; |
| } |
| timeout_ = max_transport_timeout + |
| base::TimeDelta::FromSeconds(kSSLHandshakeTimeoutInSeconds); |
| } |
| |
| SSLClientSocketPool::SSLClientSocketPool( |
| int max_sockets, |
| int max_sockets_per_group, |
| ClientSocketPoolHistograms* histograms, |
| HostResolver* host_resolver, |
| CertVerifier* cert_verifier, |
| ServerBoundCertService* server_bound_cert_service, |
| TransportSecurityState* transport_security_state, |
| const std::string& ssl_session_cache_shard, |
| ClientSocketFactory* client_socket_factory, |
| TransportClientSocketPool* transport_pool, |
| SOCKSClientSocketPool* socks_pool, |
| HttpProxyClientSocketPool* http_proxy_pool, |
| SSLConfigService* ssl_config_service, |
| NetLog* net_log) |
| : transport_pool_(transport_pool), |
| socks_pool_(socks_pool), |
| http_proxy_pool_(http_proxy_pool), |
| base_(max_sockets, max_sockets_per_group, histograms, |
| ClientSocketPool::unused_idle_socket_timeout(), |
| ClientSocketPool::used_idle_socket_timeout(), |
| new SSLConnectJobFactory(transport_pool, |
| socks_pool, |
| http_proxy_pool, |
| client_socket_factory, |
| host_resolver, |
| SSLClientSocketContext( |
| cert_verifier, |
| server_bound_cert_service, |
| transport_security_state, |
| ssl_session_cache_shard), |
| net_log)), |
| ssl_config_service_(ssl_config_service) { |
| if (ssl_config_service_) |
| ssl_config_service_->AddObserver(this); |
| if (transport_pool_) |
| transport_pool_->AddLayeredPool(this); |
| if (socks_pool_) |
| socks_pool_->AddLayeredPool(this); |
| if (http_proxy_pool_) |
| http_proxy_pool_->AddLayeredPool(this); |
| } |
| |
| SSLClientSocketPool::~SSLClientSocketPool() { |
| if (http_proxy_pool_) |
| http_proxy_pool_->RemoveLayeredPool(this); |
| if (socks_pool_) |
| socks_pool_->RemoveLayeredPool(this); |
| if (transport_pool_) |
| transport_pool_->RemoveLayeredPool(this); |
| if (ssl_config_service_) |
| ssl_config_service_->RemoveObserver(this); |
| } |
| |
| ConnectJob* SSLClientSocketPool::SSLConnectJobFactory::NewConnectJob( |
| const std::string& group_name, |
| const PoolBase::Request& request, |
| ConnectJob::Delegate* delegate) const { |
| return new SSLConnectJob(group_name, request.params(), ConnectionTimeout(), |
| transport_pool_, socks_pool_, http_proxy_pool_, |
| client_socket_factory_, host_resolver_, |
| context_, delegate, net_log_); |
| } |
| |
| base::TimeDelta |
| SSLClientSocketPool::SSLConnectJobFactory::ConnectionTimeout() const { |
| return timeout_; |
| } |
| |
| int SSLClientSocketPool::RequestSocket(const std::string& group_name, |
| const void* socket_params, |
| RequestPriority priority, |
| ClientSocketHandle* handle, |
| const CompletionCallback& callback, |
| const BoundNetLog& net_log) { |
| const scoped_refptr<SSLSocketParams>* casted_socket_params = |
| static_cast<const scoped_refptr<SSLSocketParams>*>(socket_params); |
| |
| return base_.RequestSocket(group_name, *casted_socket_params, priority, |
| handle, callback, net_log); |
| } |
| |
| void SSLClientSocketPool::RequestSockets( |
| const std::string& group_name, |
| const void* params, |
| int num_sockets, |
| const BoundNetLog& net_log) { |
| const scoped_refptr<SSLSocketParams>* casted_params = |
| static_cast<const scoped_refptr<SSLSocketParams>*>(params); |
| |
| base_.RequestSockets(group_name, *casted_params, num_sockets, net_log); |
| } |
| |
| void SSLClientSocketPool::CancelRequest(const std::string& group_name, |
| ClientSocketHandle* handle) { |
| base_.CancelRequest(group_name, handle); |
| } |
| |
| void SSLClientSocketPool::ReleaseSocket(const std::string& group_name, |
| StreamSocket* socket, int id) { |
| base_.ReleaseSocket(group_name, socket, id); |
| } |
| |
| void SSLClientSocketPool::FlushWithError(int error) { |
| base_.FlushWithError(error); |
| } |
| |
| bool SSLClientSocketPool::IsStalled() const { |
| return base_.IsStalled() || |
| (transport_pool_ && transport_pool_->IsStalled()) || |
| (socks_pool_ && socks_pool_->IsStalled()) || |
| (http_proxy_pool_ && http_proxy_pool_->IsStalled()); |
| } |
| |
| void SSLClientSocketPool::CloseIdleSockets() { |
| base_.CloseIdleSockets(); |
| } |
| |
| int SSLClientSocketPool::IdleSocketCount() const { |
| return base_.idle_socket_count(); |
| } |
| |
| int SSLClientSocketPool::IdleSocketCountInGroup( |
| const std::string& group_name) const { |
| return base_.IdleSocketCountInGroup(group_name); |
| } |
| |
| LoadState SSLClientSocketPool::GetLoadState( |
| const std::string& group_name, const ClientSocketHandle* handle) const { |
| return base_.GetLoadState(group_name, handle); |
| } |
| |
| void SSLClientSocketPool::AddLayeredPool(LayeredPool* layered_pool) { |
| base_.AddLayeredPool(layered_pool); |
| } |
| |
| void SSLClientSocketPool::RemoveLayeredPool(LayeredPool* layered_pool) { |
| base_.RemoveLayeredPool(layered_pool); |
| } |
| |
| DictionaryValue* SSLClientSocketPool::GetInfoAsValue( |
| const std::string& name, |
| const std::string& type, |
| bool include_nested_pools) const { |
| DictionaryValue* dict = base_.GetInfoAsValue(name, type); |
| if (include_nested_pools) { |
| ListValue* list = new ListValue(); |
| if (transport_pool_) { |
| list->Append(transport_pool_->GetInfoAsValue("transport_socket_pool", |
| "transport_socket_pool", |
| false)); |
| } |
| if (socks_pool_) { |
| list->Append(socks_pool_->GetInfoAsValue("socks_pool", |
| "socks_pool", |
| true)); |
| } |
| if (http_proxy_pool_) { |
| list->Append(http_proxy_pool_->GetInfoAsValue("http_proxy_pool", |
| "http_proxy_pool", |
| true)); |
| } |
| dict->Set("nested_pools", list); |
| } |
| return dict; |
| } |
| |
| base::TimeDelta SSLClientSocketPool::ConnectionTimeout() const { |
| return base_.ConnectionTimeout(); |
| } |
| |
| ClientSocketPoolHistograms* SSLClientSocketPool::histograms() const { |
| return base_.histograms(); |
| } |
| |
| void SSLClientSocketPool::OnSSLConfigChanged() { |
| FlushWithError(ERR_NETWORK_CHANGED); |
| } |
| |
| bool SSLClientSocketPool::CloseOneIdleConnection() { |
| if (base_.CloseOneIdleSocket()) |
| return true; |
| return base_.CloseOneIdleConnectionInLayeredPool(); |
| } |
| |
| } // namespace net |
