FilesExpand file tree

main

/

cache.go

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

44 lines (37 loc) · 1.26 KB

main

/

cache.go

Copy path

Top

File metadata and controls

• Code
• Blame

44 lines (37 loc) · 1.26 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

// Copyright 2022 The Go Authors. All rights reserved.

// Use of this source code is governed by a BSD-style

// license that can be found in the LICENSE-Go file.

package reality

import (

"crypto/x509"

"runtime"

"sync"

"weak"

)

// weakCertCache provides a cache of *x509.Certificates, allowing multiple

// connections to reuse parsed certificates, instead of re-parsing the

// certificate for every connection, which is an expensive operation.

type weakCertCache struct{ sync.Map }

func (wcc *weakCertCache) newCert(der []byte) (*x509.Certificate, error) {

if entry, ok := wcc.Load(string(der)); ok {

if v := entry.(weak.Pointer[x509.Certificate]).Value(); v != nil {

return v, nil

}

}

cert, err := x509.ParseCertificate(der)

if err != nil {

return nil, err

}

wp := weak.Make(cert)

if entry, loaded := wcc.LoadOrStore(string(der), wp); !loaded {

runtime.AddCleanup(cert, func(_ any) { wcc.CompareAndDelete(string(der), entry) }, any(string(der)))

} else if v := entry.(weak.Pointer[x509.Certificate]).Value(); v != nil {

return v, nil

} else {

if wcc.CompareAndSwap(string(der), entry, wp) {

runtime.AddCleanup(cert, func(_ any) { wcc.CompareAndDelete(string(der), wp) }, any(string(der)))

}

}

return cert, nil

}

var globalCertCache = new(weakCertCache)