Set Token-Binding HTTP header

net/http/http_stream.h

Index: net/http/http_stream.h
diff --git a/net/http/http_stream.h b/net/http/http_stream.h
index b7e7888ac2018df0ef43bc3aff171701e8ba51da..220dee30b5275a65fa1b2547407b72d9845b5094 100644
--- a/net/http/http_stream.h
+++ b/net/http/http_stream.h
@@ -13,6 +13,8 @@
 
 #include <stdint.h>
 
+#include <vector>
+
 #include "base/macros.h"
 #include "base/memory/scoped_ptr.h"
 #include "net/base/completion_callback.h"
@@ -21,6 +23,10 @@
 #include "net/base/request_priority.h"
 #include "net/base/upload_progress.h"
 
+namespace crypto {
+class ECPrivateKey;
+}
+
 namespace net {
 
 class BoundNetLog;
@@ -151,6 +157,11 @@ class NET_EXPORT_PRIVATE HttpStream {
   // and does not modify |endpoint| if it is unavailable.
   virtual bool GetRemoteEndpoint(IPEndPoint* endpoint) = 0;
 
+  // Signs the EKM value for Token Binding from the TLS layer using |*key| and
+  // puts the result in |*out|. Returns OK or ERR_FAILED.
+  virtual int GetSignedEKMForTokenBinding(crypto::ECPrivateKey* key,
+                                          std::vector<uint8_t>* out) = 0;
+
   // In the case of an HTTP error or redirect, flush the response body (usually
   // a simple error or "this page has moved") so that we can re-use the
   // underlying connection. This stream is responsible for deleting itself when