Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(79)

Side by Side Diff: net/base/ssl_config_service.h

Issue 8772014: Add a preference for enabling the TLS origin-bound certificates extension. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Change policy_templates.json as mnissler suggested Created 9 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « content/browser/browser_main_loop.cc ('k') | net/base/ssl_config_service.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_
6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_
7 #pragma once 7 #pragma once
8 8
9 #include <vector> 9 #include <vector>
10 10
(...skipping 141 matching lines...) Expand 10 before | Expand all | Expand 10 after
152 152
153 // Sets and gets the current, global CRL set. 153 // Sets and gets the current, global CRL set.
154 static void SetCRLSet(scoped_refptr<CRLSet> crl_set); 154 static void SetCRLSet(scoped_refptr<CRLSet> crl_set);
155 static scoped_refptr<CRLSet> GetCRLSet(); 155 static scoped_refptr<CRLSet> GetCRLSet();
156 156
157 // Enables the TLS cached info extension, which allows the server to send 157 // Enables the TLS cached info extension, which allows the server to send
158 // just a digest of its certificate chain. 158 // just a digest of its certificate chain.
159 static void EnableCachedInfo(); 159 static void EnableCachedInfo();
160 static bool cached_info_enabled(); 160 static bool cached_info_enabled();
161 161
162 // Enables the TLS origin bound cert extension.
163 static void EnableOriginBoundCerts();
164 static bool origin_bound_certs_enabled();
165
166 // Is SNI available in this configuration? 162 // Is SNI available in this configuration?
167 static bool IsSNIAvailable(SSLConfigService* service); 163 static bool IsSNIAvailable(SSLConfigService* service);
168 164
169 // Add an observer of this service. 165 // Add an observer of this service.
170 void AddObserver(Observer* observer); 166 void AddObserver(Observer* observer);
171 167
172 // Remove an observer of this service. 168 // Remove an observer of this service.
173 void RemoveObserver(Observer* observer); 169 void RemoveObserver(Observer* observer);
174 170
175 protected: 171 protected:
176 friend class base::RefCountedThreadSafe<SSLConfigService>; 172 friend class base::RefCountedThreadSafe<SSLConfigService>;
177 173
178 virtual ~SSLConfigService(); 174 virtual ~SSLConfigService();
179 175
180 // SetFlags sets the values of several flags based on global configuration. 176 // SetFlags sets the values of several flags based on global configuration.
181 static void SetSSLConfigFlags(SSLConfig* ssl_config); 177 static void SetSSLConfigFlags(SSLConfig* ssl_config);
182 178
183 // Process before/after config update. 179 // Process before/after config update.
184 void ProcessConfigUpdate(const SSLConfig& orig_config, 180 void ProcessConfigUpdate(const SSLConfig& orig_config,
185 const SSLConfig& new_config); 181 const SSLConfig& new_config);
186 182
187 private: 183 private:
188 ObserverList<Observer> observer_list_; 184 ObserverList<Observer> observer_list_;
189 }; 185 };
190 186
191 } // namespace net 187 } // namespace net
192 188
193 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ 189 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_
OLDNEW
« no previous file with comments | « content/browser/browser_main_loop.cc ('k') | net/base/ssl_config_service.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698