Add TLS-SRP (RFC 5054) support

net/http/http_stream_request.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_stream_request.h"
 
 #include "base/stl_util-inl.h"
 #include "base/string_number_conversions.h"
 #include "base/string_util.h"
 #include "base/stringprintf.h"
@@ skipping 188 matching lines @@
     const HttpResponseInfo& response,
     HttpAuthController* auth_controller) {
   delegate_->OnNeedsProxyAuth(response, auth_controller);
 }
 
 void HttpStreamRequest::OnNeedsClientAuthCallback(
     SSLCertRequestInfo* cert_info) {
   delegate_->OnNeedsClientAuth(cert_info);
 }
 
+void HttpStreamRequest::OnNeedsTLSLoginCallback(
+    AuthChallengeInfo* login_info) {
+  delegate_->OnNeedsTLSLogin(login_info);
+}
+
 void HttpStreamRequest::OnHttpsProxyTunnelResponseCallback(
     const HttpResponseInfo& response_info,
     HttpStream* stream) {
   delegate_->OnHttpsProxyTunnelResponse(response_info, stream);
 }
 
 void HttpStreamRequest::OnPreconnectsComplete(int result) {
   preconnect_delegate_->OnPreconnectsComplete(this, result);
 }
 
@@ skipping 53 matching lines @@
       return ERR_IO_PENDING;
 
     case ERR_SSL_CLIENT_AUTH_CERT_NEEDED:
       MessageLoop::current()->PostTask(
           FROM_HERE,
           method_factory_.NewRunnableMethod(
               &HttpStreamRequest::OnNeedsClientAuthCallback,
               connection_->ssl_error_response_info().cert_request_info));
       return ERR_IO_PENDING;
 
+    case ERR_TLS_CLIENT_LOGIN_NEEDED:
+      MessageLoop::current()->PostTask(
+          FROM_HERE,
+          method_factory_.NewRunnableMethod(
+              &HttpStreamRequest::OnNeedsTLSLoginCallback,
+              connection_->ssl_error_response_info().login_request_info));
+      return ERR_TLS_CLIENT_LOGIN_NEEDED;
+
     case ERR_HTTPS_PROXY_TUNNEL_RESPONSE:
       {
         DCHECK(connection_.get());
         DCHECK(connection_->socket());
         DCHECK(establishing_tunnel_);
 
         ProxyClientSocket* proxy_socket =
             static_cast<ProxyClientSocket*>(connection_->socket());
         MessageLoop::current()->PostTask(
             FROM_HERE,
@@ skipping 184 matching lines @@
 
 int HttpStreamRequest::DoInitConnection() {
   DCHECK(!connection_->is_initialized());
   DCHECK(proxy_info()->proxy_server().is_valid());
   next_state_ = STATE_INIT_CONNECTION_COMPLETE;
 
   bool want_spdy_over_npn =
       alternate_protocol_mode_ == kUsingAlternateProtocol &&
       alternate_protocol_ == HttpAlternateProtocols::NPN_SPDY_2;
   using_ssl_ = request_info().url.SchemeIs("https") ||
+      request_info().url.SchemeIs("httpsv") ||
       ShouldForceSpdySSL() || want_spdy_over_npn;
   using_spdy_ = false;
 
   // If spdy has been turned off on-the-fly, then there may be SpdySessions
   // still active.  But don't use them unless spdy is currently on.
   if (HttpStreamFactory::spdy_enabled()) {
     // Check first if we have a spdy session for this group.  If so, then go
     // straight to using that.
     HostPortProxyPair pair(endpoint_, proxy_info()->proxy_server());
     if (session_->spdy_session_pool()->HasSession(pair)) {
@@ skipping 44 matching lines @@
                                      disable_resolver_cache);
   } else {
     ProxyServer proxy_server = proxy_info()->proxy_server();
     proxy_host_port.reset(new HostPortPair(proxy_server.host_port_pair()));
     scoped_refptr<TCPSocketParams> proxy_tcp_params(
         new TCPSocketParams(*proxy_host_port, request_info().priority,
                             request_info().referrer, disable_resolver_cache));
 
     if (proxy_info()->is_http() || proxy_info()->is_https()) {
       GURL authentication_url = request_info().url;
-      if (using_ssl_ && !authentication_url.SchemeIs("https")) {
+      if (using_ssl_ && !authentication_url.SchemeIs("https") &&
+          !authentication_url.SchemeIs("httpsv")) {
         // If a proxy tunnel connection needs to be established due to
         // an Alternate-Protocol, the URL needs to be changed to indicate
         // https or digest authentication attempts will fail.
         // For example, suppose the initial request was for
         // "http://www.example.com/index.html". If this is an SSL
         // upgrade due to alternate protocol, the digest authorization
         // should have a uri="www.example.com:443" field rather than a
         // "/index.html" entry, even though the original request URL has not
         // changed.
         authentication_url = UpgradeUrlToHttps(authentication_url);
@@ skipping 535 matching lines @@
                                  base::TimeDelta::FromMinutes(6),
                                  100);
       break;
     default:
       NOTREACHED();
       break;
   }
 }
 
 }  // namespace net