Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(168)

Side by Side Diff: net/ssl/ssl_config.h

Issue 1191623002: Require ECDHE cipher in remoting client. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 5 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef NET_SSL_SSL_CONFIG_H_ 5 #ifndef NET_SSL_SSL_CONFIG_H_
6 #define NET_SSL_SSL_CONFIG_H_ 6 #define NET_SSL_SSL_CONFIG_H_
7 7
8 #include "base/basictypes.h" 8 #include "base/basictypes.h"
9 #include "base/memory/ref_counted.h" 9 #include "base/memory/ref_counted.h"
10 #include "net/base/net_export.h" 10 #include "net/base/net_export.h"
(...skipping 94 matching lines...) Expand 10 before | Expand all | Expand 10 after
105 105
106 // Enables deprecated cipher suites. Currently, RC4 is deprecated. 106 // Enables deprecated cipher suites. Currently, RC4 is deprecated.
107 bool enable_deprecated_cipher_suites; 107 bool enable_deprecated_cipher_suites;
108 108
109 bool channel_id_enabled; // True if TLS channel ID extension is enabled. 109 bool channel_id_enabled; // True if TLS channel ID extension is enabled.
110 bool false_start_enabled; // True if we'll use TLS False Start. 110 bool false_start_enabled; // True if we'll use TLS False Start.
111 // True if the Certificate Transparency signed_certificate_timestamp 111 // True if the Certificate Transparency signed_certificate_timestamp
112 // TLS extension is enabled. 112 // TLS extension is enabled.
113 bool signed_cert_timestamps_enabled; 113 bool signed_cert_timestamps_enabled;
114 114
115 // If true, causes only ECDHE cipher suites to be enabled. NOTE: This only 115 // If true, causes only ECDHE cipher suites to be enabled.
116 // applies to server sockets currently, although that could be extended if
117 // needed.
118 bool require_ecdhe; 116 bool require_ecdhe;
119 117
120 // TODO(wtc): move the following members to a new SSLParams structure. They 118 // TODO(wtc): move the following members to a new SSLParams structure. They
121 // are not SSL configuration settings. 119 // are not SSL configuration settings.
122 120
123 struct NET_EXPORT CertAndStatus { 121 struct NET_EXPORT CertAndStatus {
124 CertAndStatus(); 122 CertAndStatus();
125 ~CertAndStatus(); 123 ~CertAndStatus();
126 124
127 std::string der_cert; 125 std::string der_cert;
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after
174 // |fastradio_padding_eligible| can be true when |fastradio_padding_enabled| 172 // |fastradio_padding_eligible| can be true when |fastradio_padding_enabled|
175 // is false: in this case, fastradio padding would not be enabled, but 173 // is false: in this case, fastradio padding would not be enabled, but
176 // metrics can be collected for experiments. 174 // metrics can be collected for experiments.
177 bool fastradio_padding_enabled; 175 bool fastradio_padding_enabled;
178 bool fastradio_padding_eligible; 176 bool fastradio_padding_eligible;
179 }; 177 };
180 178
181 } // namespace net 179 } // namespace net
182 180
183 #endif // NET_SSL_SSL_CONFIG_H_ 181 #endif // NET_SSL_SSL_CONFIG_H_
OLDNEW
« no previous file with comments | « net/socket/ssl_server_socket_nss.cc ('k') | remoting/protocol/ssl_hmac_channel_authenticator.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698