| OLD | NEW |
| 1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ | 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ |
| 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ | 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ |
| 7 #pragma once | 7 #pragma once |
| 8 | 8 |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| (...skipping 17 matching lines...) Expand all Loading... |
| 28 bool rev_checking_enabled; // True if server certificate revocation | 28 bool rev_checking_enabled; // True if server certificate revocation |
| 29 // checking is enabled. | 29 // checking is enabled. |
| 30 // SSL 2.0 is not supported. | 30 // SSL 2.0 is not supported. |
| 31 bool ssl3_enabled; // True if SSL 3.0 is enabled. | 31 bool ssl3_enabled; // True if SSL 3.0 is enabled. |
| 32 bool tls1_enabled; // True if TLS 1.0 is enabled. | 32 bool tls1_enabled; // True if TLS 1.0 is enabled. |
| 33 bool dnssec_enabled; // True if we'll accept DNSSEC chains in certificates. | 33 bool dnssec_enabled; // True if we'll accept DNSSEC chains in certificates. |
| 34 bool snap_start_enabled; // True if we'll try Snap Start handshakes. | 34 bool snap_start_enabled; // True if we'll try Snap Start handshakes. |
| 35 // True if we'll do async checks for certificate provenance using DNS. | 35 // True if we'll do async checks for certificate provenance using DNS. |
| 36 bool dns_cert_provenance_checking_enabled; | 36 bool dns_cert_provenance_checking_enabled; |
| 37 | 37 |
| 38 // TODO(hclam): This option is used to simplify the SSLServerSocketNSS | |
| 39 // implementation and should be removed when session caching is implemented. | |
| 40 // See http://crbug.com/67236 for more details. | |
| 41 bool session_resume_disabled; // Don't allow session resume. | |
| 42 | |
| 43 // Cipher suites which should be explicitly prevented from being used in | 38 // Cipher suites which should be explicitly prevented from being used in |
| 44 // addition to those disabled by the net built-in policy -- by default, all | 39 // addition to those disabled by the net built-in policy -- by default, all |
| 45 // cipher suites supported by the underlying SSL implementation will be | 40 // cipher suites supported by the underlying SSL implementation will be |
| 46 // enabled except for: | 41 // enabled except for: |
| 47 // - Null encryption cipher suites. | 42 // - Null encryption cipher suites. |
| 48 // - Weak cipher suites: < 80 bits of security strength. | 43 // - Weak cipher suites: < 80 bits of security strength. |
| 49 // - FORTEZZA cipher suites (obsolete). | 44 // - FORTEZZA cipher suites (obsolete). |
| 50 // - IDEA cipher suites (RFC 5469 explains why). | 45 // - IDEA cipher suites (RFC 5469 explains why). |
| 51 // - Anonymous cipher suites. | 46 // - Anonymous cipher suites. |
| 52 // The ciphers listed in |disabled_cipher_suites| will be removed in addition | 47 // The ciphers listed in |disabled_cipher_suites| will be removed in addition |
| (...skipping 141 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 194 void ProcessConfigUpdate(const SSLConfig& orig_config, | 189 void ProcessConfigUpdate(const SSLConfig& orig_config, |
| 195 const SSLConfig& new_config); | 190 const SSLConfig& new_config); |
| 196 | 191 |
| 197 private: | 192 private: |
| 198 ObserverList<Observer> observer_list_; | 193 ObserverList<Observer> observer_list_; |
| 199 }; | 194 }; |
| 200 | 195 |
| 201 } // namespace net | 196 } // namespace net |
| 202 | 197 |
| 203 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ | 198 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ |
| OLD | NEW |