net: add test for TLS_FALLBACK_SCSV

net/test/spawned_test_server/base_test_server.h

Index: net/test/spawned_test_server/base_test_server.h
diff --git a/net/test/spawned_test_server/base_test_server.h b/net/test/spawned_test_server/base_test_server.h
index 9d5cda8dab9583f22efe4d8b288bb2c80f4ee18f..f099cc6c683b8dd847893205a6db2f4e0de7facb 100644
--- a/net/test/spawned_test_server/base_test_server.h
+++ b/net/test/spawned_test_server/base_test_server.h
@@ -155,6 +155,13 @@ class BaseTestServer {
     // affect handshaking behaviour.
     // TODO(ekasper): replace with valid SCT files for test certs.
     std::string signed_cert_timestamps;
+
+    // fallback_scsv_enabled, if true, causes the server to process
+    // TLS_FALLBACK_SCSV cipher suites. This cipher suite is sent by Chrome

[wtc, 2013/12/10 16:28:27]

Nit: "cipher suites" should be singular. There is only one fallback SCSV.

[agl, 2013/12/10 17:53:43]

Done.

+    // when performing TLS version fallback in response to an SSL handshake
+    // failure. If this option is enabled then the server will reject fallback
+    // connections.
+    bool fallback_scsv_enabled;

[wtc, 2013/12/10 16:28:27]

Emilia is adding a new option for OCSP stapling here. To avoid merge conflicts,
I suggest we list fallback_scsv_enabled after "TLSIntolerantLevel
tls_intolerant" (which happens to be related).

Emilia's CL: https://codereview.chromium.org/92443002/

[agl, 2013/12/10 17:53:43]

Done.

   };
 
   // Pass as the 'host' parameter during construction to server on 127.0.0.1