OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_QUIC_CRYPTO_QUIC_CRYPTO_SERVER_CONFIG_H_ | 5 #ifndef NET_QUIC_CRYPTO_QUIC_CRYPTO_SERVER_CONFIG_H_ |
6 #define NET_QUIC_CRYPTO_QUIC_CRYPTO_SERVER_CONFIG_H_ | 6 #define NET_QUIC_CRYPTO_QUIC_CRYPTO_SERVER_CONFIG_H_ |
7 | 7 |
8 #include <map> | 8 #include <map> |
9 #include <string> | 9 #include <string> |
10 #include <vector> | 10 #include <vector> |
(...skipping 125 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
136 // generation since P-256 key generation doesn't use the QuicRandom given | 136 // generation since P-256 key generation doesn't use the QuicRandom given |
137 // to DefaultConfig(). | 137 // to DefaultConfig(). |
138 bool p256; | 138 bool p256; |
139 }; | 139 }; |
140 | 140 |
141 // |source_address_token_secret|: secret key material used for encrypting and | 141 // |source_address_token_secret|: secret key material used for encrypting and |
142 // decrypting source address tokens. It can be of any length as it is fed | 142 // decrypting source address tokens. It can be of any length as it is fed |
143 // into a KDF before use. In tests, use TESTING. | 143 // into a KDF before use. In tests, use TESTING. |
144 // |server_nonce_entropy|: an entropy source used to generate the orbit and | 144 // |server_nonce_entropy|: an entropy source used to generate the orbit and |
145 // key for server nonces, which are always local to a given instance of a | 145 // key for server nonces, which are always local to a given instance of a |
146 // server. | 146 // server. Not owned. |
| 147 // |proof_source|: provides certificate chains and signatures. This class |
| 148 // takes ownership of |proof_source|. |
147 QuicCryptoServerConfig(base::StringPiece source_address_token_secret, | 149 QuicCryptoServerConfig(base::StringPiece source_address_token_secret, |
148 QuicRandom* server_nonce_entropy, | 150 QuicRandom* server_nonce_entropy, |
149 ProofSource* proof_source); | 151 ProofSource* proof_source); |
150 ~QuicCryptoServerConfig(); | 152 ~QuicCryptoServerConfig(); |
151 | 153 |
152 // TESTING is a magic parameter for passing to the constructor in tests. | 154 // TESTING is a magic parameter for passing to the constructor in tests. |
153 static const char TESTING[]; | 155 static const char TESTING[]; |
154 | 156 |
155 // Generates a QuicServerConfigProtobuf protobuf suitable for | 157 // Generates a QuicServerConfigProtobuf protobuf suitable for |
156 // AddConfig and SetConfigs. | 158 // AddConfig and SetConfigs. |
(...skipping 433 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
590 uint32 source_address_token_lifetime_secs_; | 592 uint32 source_address_token_lifetime_secs_; |
591 uint32 server_nonce_strike_register_max_entries_; | 593 uint32 server_nonce_strike_register_max_entries_; |
592 uint32 server_nonce_strike_register_window_secs_; | 594 uint32 server_nonce_strike_register_window_secs_; |
593 | 595 |
594 DISALLOW_COPY_AND_ASSIGN(QuicCryptoServerConfig); | 596 DISALLOW_COPY_AND_ASSIGN(QuicCryptoServerConfig); |
595 }; | 597 }; |
596 | 598 |
597 } // namespace net | 599 } // namespace net |
598 | 600 |
599 #endif // NET_QUIC_CRYPTO_QUIC_CRYPTO_SERVER_CONFIG_H_ | 601 #endif // NET_QUIC_CRYPTO_QUIC_CRYPTO_SERVER_CONFIG_H_ |
OLD | NEW |