Defines SSLServerSocket and implements SSLServerSocketNSS

net/base/ssl_config_service.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_
 #define NET_BASE_SSL_CONFIG_SERVICE_H_
 #pragma once
 
 #include <vector>
 
@@ skipping 14 matching lines @@
   bool rev_checking_enabled;  // True if server certificate revocation
                               // checking is enabled.
   // SSL 2.0 is not supported.
   bool ssl3_enabled;  // True if SSL 3.0 is enabled.
   bool tls1_enabled;  // True if TLS 1.0 is enabled.
   bool dnssec_enabled;  // True if we'll accept DNSSEC chains in certificates.
   bool snap_start_enabled;  // True if we'll try Snap Start handshakes.
   // True if we'll do async checks for certificate provenance using DNS.
   bool dns_cert_provenance_checking_enabled;
 
+  // TODO(hclam): This option is used to simplify SSLServerSocketNSS

[agl, 2010/12/17 18:30:50]

s/simplify/simplify the/

+  // implementation and should be removed when session cache is implemented.

[agl, 2010/12/17 18:30:50]

s/cache/caching/

+  // See http://crbug.com/67236 for more details.
+  bool session_cache_disabled;  // Disable caching.

[wtc, 2010/12/17 18:08:04]

Please change the comment to say
  Don't use the session cache.
because "disabling cache" may be misunderstood as
disabling the session cache globally.  Perhaps this
member should be named session_resume_disabled.

[Alpha Left Google, 2010/12/17 20:09:57]

Done.

[Alpha Left Google, 2010/12/17 20:09:57]

Done.

+
   // Cipher suites which should be explicitly prevented from being used in
   // addition to those disabled by the net built-in policy -- by default, all
   // cipher suites supported by the underlying SSL implementation will be
   // enabled except for:
   // - Null encryption cipher suites.
   // - Weak cipher suites: < 80 bits of security strength.
   // - FORTEZZA cipher suites (obsolete).
   // - IDEA cipher suites (RFC 5469 explains why).
   // - Anonymous cipher suites.
   // The ciphers listed in |disabled_cipher_suites| will be removed in addition
@@ skipping 144 matching lines @@
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_SSL_CONFIG_SERVICE_H_