| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ | 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ |
| 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ | 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ |
| 7 #pragma once | 7 #pragma once |
| 8 | 8 |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| (...skipping 124 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 135 | 135 |
| 136 // Disables False Start in SSL connections. | 136 // Disables False Start in SSL connections. |
| 137 static void DisableFalseStart(); | 137 static void DisableFalseStart(); |
| 138 // True if we use False Start for SSL and TLS. | 138 // True if we use False Start for SSL and TLS. |
| 139 static bool false_start_enabled(); | 139 static bool false_start_enabled(); |
| 140 | 140 |
| 141 // Enables DNS side checks for certificates. | 141 // Enables DNS side checks for certificates. |
| 142 static void EnableDNSCertProvenanceChecking(); | 142 static void EnableDNSCertProvenanceChecking(); |
| 143 static bool dns_cert_provenance_checking_enabled(); | 143 static bool dns_cert_provenance_checking_enabled(); |
| 144 | 144 |
| 145 // Disabled revocation checking for some sites that we have additional |
| 146 // security on. |
| 147 static void DisableRevCheckingForPinnedSites(); |
| 148 static bool rev_checking_disabled_for_pinned_sites(); |
| 149 |
| 145 // Is SNI available in this configuration? | 150 // Is SNI available in this configuration? |
| 146 static bool IsSNIAvailable(SSLConfigService* service); | 151 static bool IsSNIAvailable(SSLConfigService* service); |
| 147 | 152 |
| 148 // Add an observer of this service. | 153 // Add an observer of this service. |
| 149 void AddObserver(Observer* observer); | 154 void AddObserver(Observer* observer); |
| 150 | 155 |
| 151 // Remove an observer of this service. | 156 // Remove an observer of this service. |
| 152 void RemoveObserver(Observer* observer); | 157 void RemoveObserver(Observer* observer); |
| 153 | 158 |
| 154 protected: | 159 protected: |
| 155 friend class base::RefCountedThreadSafe<SSLConfigService>; | 160 friend class base::RefCountedThreadSafe<SSLConfigService>; |
| 156 | 161 |
| 157 virtual ~SSLConfigService(); | 162 virtual ~SSLConfigService(); |
| 158 | 163 |
| 159 // SetFlags sets the values of several flags based on global configuration. | 164 // SetFlags sets the values of several flags based on global configuration. |
| 160 static void SetSSLConfigFlags(SSLConfig* ssl_config); | 165 static void SetSSLConfigFlags(SSLConfig* ssl_config); |
| 161 | 166 |
| 162 // Process before/after config update. | 167 // Process before/after config update. |
| 163 void ProcessConfigUpdate(const SSLConfig& orig_config, | 168 void ProcessConfigUpdate(const SSLConfig& orig_config, |
| 164 const SSLConfig& new_config); | 169 const SSLConfig& new_config); |
| 165 | 170 |
| 166 private: | 171 private: |
| 167 ObserverList<Observer> observer_list_; | 172 ObserverList<Observer> observer_list_; |
| 168 }; | 173 }; |
| 169 | 174 |
| 170 } // namespace net | 175 } // namespace net |
| 171 | 176 |
| 172 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ | 177 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ |
| OLD | NEW |