OLD | NEW |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ | 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ |
6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ | 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ |
7 #pragma once | 7 #pragma once |
8 | 8 |
9 #include <vector> | 9 #include <vector> |
10 | 10 |
(...skipping 124 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
135 | 135 |
136 // Disables False Start in SSL connections. | 136 // Disables False Start in SSL connections. |
137 static void DisableFalseStart(); | 137 static void DisableFalseStart(); |
138 // True if we use False Start for SSL and TLS. | 138 // True if we use False Start for SSL and TLS. |
139 static bool false_start_enabled(); | 139 static bool false_start_enabled(); |
140 | 140 |
141 // Enables DNS side checks for certificates. | 141 // Enables DNS side checks for certificates. |
142 static void EnableDNSCertProvenanceChecking(); | 142 static void EnableDNSCertProvenanceChecking(); |
143 static bool dns_cert_provenance_checking_enabled(); | 143 static bool dns_cert_provenance_checking_enabled(); |
144 | 144 |
| 145 // Disabled revocation checking for some sites that we have additional |
| 146 // security on. |
| 147 static void DisableRevCheckingForPinnedSites(); |
| 148 static bool rev_checking_disabled_for_pinned_sites(); |
| 149 |
145 // Is SNI available in this configuration? | 150 // Is SNI available in this configuration? |
146 static bool IsSNIAvailable(SSLConfigService* service); | 151 static bool IsSNIAvailable(SSLConfigService* service); |
147 | 152 |
148 // Add an observer of this service. | 153 // Add an observer of this service. |
149 void AddObserver(Observer* observer); | 154 void AddObserver(Observer* observer); |
150 | 155 |
151 // Remove an observer of this service. | 156 // Remove an observer of this service. |
152 void RemoveObserver(Observer* observer); | 157 void RemoveObserver(Observer* observer); |
153 | 158 |
154 protected: | 159 protected: |
155 friend class base::RefCountedThreadSafe<SSLConfigService>; | 160 friend class base::RefCountedThreadSafe<SSLConfigService>; |
156 | 161 |
157 virtual ~SSLConfigService(); | 162 virtual ~SSLConfigService(); |
158 | 163 |
159 // SetFlags sets the values of several flags based on global configuration. | 164 // SetFlags sets the values of several flags based on global configuration. |
160 static void SetSSLConfigFlags(SSLConfig* ssl_config); | 165 static void SetSSLConfigFlags(SSLConfig* ssl_config); |
161 | 166 |
162 // Process before/after config update. | 167 // Process before/after config update. |
163 void ProcessConfigUpdate(const SSLConfig& orig_config, | 168 void ProcessConfigUpdate(const SSLConfig& orig_config, |
164 const SSLConfig& new_config); | 169 const SSLConfig& new_config); |
165 | 170 |
166 private: | 171 private: |
167 ObserverList<Observer> observer_list_; | 172 ObserverList<Observer> observer_list_; |
168 }; | 173 }; |
169 | 174 |
170 } // namespace net | 175 } // namespace net |
171 | 176 |
172 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ | 177 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ |
OLD | NEW |