| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ | 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ |
| 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ | 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ |
| 7 | 7 |
| 8 #include <vector> | 8 #include <vector> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| (...skipping 67 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 78 // certificates, as servers may use the presence of such ciphersuites as a | 78 // certificates, as servers may use the presence of such ciphersuites as a |
| 79 // hint to send an ECDSA certificate. | 79 // hint to send an ECDSA certificate. |
| 80 // The ciphers listed in |disabled_cipher_suites| will be removed in addition | 80 // The ciphers listed in |disabled_cipher_suites| will be removed in addition |
| 81 // to the above list. | 81 // to the above list. |
| 82 // | 82 // |
| 83 // Though cipher suites are sent in TLS as "uint8 CipherSuite[2]", in | 83 // Though cipher suites are sent in TLS as "uint8 CipherSuite[2]", in |
| 84 // big-endian form, they should be declared in host byte order, with the | 84 // big-endian form, they should be declared in host byte order, with the |
| 85 // first uint8 occupying the most significant byte. | 85 // first uint8 occupying the most significant byte. |
| 86 // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to | 86 // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to |
| 87 // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002. | 87 // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002. |
| 88 // | |
| 89 // Note: Not implemented when using Schannel/SSLClientSocketWin. | |
| 90 std::vector<uint16> disabled_cipher_suites; | 88 std::vector<uint16> disabled_cipher_suites; |
| 91 | 89 |
| 92 bool cached_info_enabled; // True if TLS cached info extension is enabled. | 90 bool cached_info_enabled; // True if TLS cached info extension is enabled. |
| 93 bool channel_id_enabled; // True if TLS channel ID extension is enabled. | 91 bool channel_id_enabled; // True if TLS channel ID extension is enabled. |
| 94 bool false_start_enabled; // True if we'll use TLS False Start. | 92 bool false_start_enabled; // True if we'll use TLS False Start. |
| 95 | 93 |
| 96 // TODO(wtc): move the following members to a new SSLParams structure. They | 94 // TODO(wtc): move the following members to a new SSLParams structure. They |
| 97 // are not SSL configuration settings. | 95 // are not SSL configuration settings. |
| 98 | 96 |
| 99 struct NET_EXPORT CertAndStatus { | 97 struct NET_EXPORT CertAndStatus { |
| (...skipping 108 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 208 void ProcessConfigUpdate(const SSLConfig& orig_config, | 206 void ProcessConfigUpdate(const SSLConfig& orig_config, |
| 209 const SSLConfig& new_config); | 207 const SSLConfig& new_config); |
| 210 | 208 |
| 211 private: | 209 private: |
| 212 ObserverList<Observer> observer_list_; | 210 ObserverList<Observer> observer_list_; |
| 213 }; | 211 }; |
| 214 | 212 |
| 215 } // namespace net | 213 } // namespace net |
| 216 | 214 |
| 217 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ | 215 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ |
| OLD | NEW |