Implement Token Binding negotiation TLS extension

net/ssl/ssl_info.cc

Index: net/ssl/ssl_info.cc
diff --git a/net/ssl/ssl_info.cc b/net/ssl/ssl_info.cc
index d3aae9d8f54e77708ffc78e65f3b38a813bebc3c..3e8316d18e327a2d37d5ac1092394e42a49b51e6 100644
--- a/net/ssl/ssl_info.cc
+++ b/net/ssl/ssl_info.cc
@@ -32,6 +32,8 @@ SSLInfo& SSLInfo::operator=(const SSLInfo& info) {
   is_issued_by_known_root = info.is_issued_by_known_root;
   client_cert_sent = info.client_cert_sent;
   channel_id_sent = info.channel_id_sent;
+  token_binding_negotiated = info.token_binding_negotiated;
+  token_binding_key_param = info.token_binding_key_param;
   handshake_type = info.handshake_type;
   public_key_hashes = info.public_key_hashes;
   signed_certificate_timestamps = info.signed_certificate_timestamps;
@@ -50,6 +52,7 @@ void SSLInfo::Reset() {
   is_issued_by_known_root = false;
   client_cert_sent = false;
   channel_id_sent = false;
+  token_binding_negotiated = false;

[davidben, 2015/10/15 21:52:09]

It is documented to be invalid unless token_binding_negotiated, but we probably
should still initialize token_binding_key_param to avoid tempting valgrind and
the *Sans.

[nharper, 2015/10/20 22:52:19]

Done.

   handshake_type = HANDSHAKE_UNKNOWN;
   public_key_hashes.clear();
   signed_certificate_timestamps.clear();