Reject renegotiations in SSLClientSocket by default.

net/ssl/ssl_config.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CONFIG_H_
 #define NET_SSL_SSL_CONFIG_H_
 
 #include "base/basictypes.h"
 #include "base/memory/ref_counted.h"
 #include "net/base/net_export.h"
@@ skipping 143 matching lines @@
   bool cert_io_enabled;
 
   // The list of application level protocols supported. If set, this will
   // enable Next Protocol Negotiation (if supported). The order of the
   // protocols doesn't matter expect for one case: if the server supports Next
   // Protocol Negotiation, but there is no overlap between the server's and
   // client's protocol sets, then the first protocol in this list will be
   // requested by the client.
   NextProtoVector next_protos;
 
+  // True if renegotiation should be allowed for the default application-level
+  // protocol when the peer negotiates neither ALPN nor NPN.
+  bool renego_allowed_default;
+
+  // The list of application-level protocols to enable renegotiation for.
+  NextProtoVector renego_allowed_for_protos;
+
   scoped_refptr<X509Certificate> client_cert;
 
   // Information about how to proceed with fastradio padding.
   // |fastradio_padding_enabled| determines if the feature is enabled globally.
   // |fastradio_padding_eligible| determines if the endpoint associated with
   // this config should use it.
   // |fastradio_padding_eligible| can be true when |fastradio_padding_enabled|
   // is false: in this case, fastradio padding would not be enabled, but
   // metrics can be collected for experiments.
   bool fastradio_padding_enabled;
   bool fastradio_padding_eligible;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CONFIG_H_