OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ | 5 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_ |
6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ | 6 #define NET_BASE_SSL_CONFIG_SERVICE_H_ |
7 | 7 |
8 #include <vector> | 8 #include <vector> |
9 | 9 |
10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
(...skipping 67 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
78 // certificates, as servers may use the presence of such ciphersuites as a | 78 // certificates, as servers may use the presence of such ciphersuites as a |
79 // hint to send an ECDSA certificate. | 79 // hint to send an ECDSA certificate. |
80 // The ciphers listed in |disabled_cipher_suites| will be removed in addition | 80 // The ciphers listed in |disabled_cipher_suites| will be removed in addition |
81 // to the above list. | 81 // to the above list. |
82 // | 82 // |
83 // Though cipher suites are sent in TLS as "uint8 CipherSuite[2]", in | 83 // Though cipher suites are sent in TLS as "uint8 CipherSuite[2]", in |
84 // big-endian form, they should be declared in host byte order, with the | 84 // big-endian form, they should be declared in host byte order, with the |
85 // first uint8 occupying the most significant byte. | 85 // first uint8 occupying the most significant byte. |
86 // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to | 86 // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to |
87 // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002. | 87 // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002. |
88 // | |
89 // Note: Not implemented when using Schannel/SSLClientSocketWin. | |
90 std::vector<uint16> disabled_cipher_suites; | 88 std::vector<uint16> disabled_cipher_suites; |
91 | 89 |
92 bool cached_info_enabled; // True if TLS cached info extension is enabled. | 90 bool cached_info_enabled; // True if TLS cached info extension is enabled. |
93 bool channel_id_enabled; // True if TLS channel ID extension is enabled. | 91 bool channel_id_enabled; // True if TLS channel ID extension is enabled. |
94 bool false_start_enabled; // True if we'll use TLS False Start. | 92 bool false_start_enabled; // True if we'll use TLS False Start. |
95 | 93 |
96 // TODO(wtc): move the following members to a new SSLParams structure. They | 94 // TODO(wtc): move the following members to a new SSLParams structure. They |
97 // are not SSL configuration settings. | 95 // are not SSL configuration settings. |
98 | 96 |
99 struct NET_EXPORT CertAndStatus { | 97 struct NET_EXPORT CertAndStatus { |
(...skipping 108 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
208 void ProcessConfigUpdate(const SSLConfig& orig_config, | 206 void ProcessConfigUpdate(const SSLConfig& orig_config, |
209 const SSLConfig& new_config); | 207 const SSLConfig& new_config); |
210 | 208 |
211 private: | 209 private: |
212 ObserverList<Observer> observer_list_; | 210 ObserverList<Observer> observer_list_; |
213 }; | 211 }; |
214 | 212 |
215 } // namespace net | 213 } // namespace net |
216 | 214 |
217 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ | 215 #endif // NET_BASE_SSL_CONFIG_SERVICE_H_ |
OLD | NEW |