Support tls-server-end-point channel bindings for HTTP authentication.

net/cert/x509_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_X509_UTIL_H_
 #define NET_CERT_X509_UTIL_H_
 
 #include <stdint.h>
 
 #include <string>
@@ skipping 13 matching lines @@
 class X509Certificate;
 
 namespace x509_util {
 
 // Supported digest algorithms for signing certificates.
 enum DigestAlgorithm {
   DIGEST_SHA1,
   DIGEST_SHA256
 };
 
+// Generate a 'tls-server-end-point' channel binding based on the specified
+// certificate. Channel bindings are based on RFC 5929.
+NET_EXPORT_PRIVATE bool GetTLSServerEndPointChannelBinding(
+    const X509Certificate& certificate,
+    std::string* token);
+
 // Creates a public-private keypair and a self-signed certificate.
 // Subject, serial number and validity period are given as parameters.
 // The certificate is signed by the private key in |key|. The key length and
 // signature algorithm may be updated periodically to match best practices.
 //
 // |subject| is a distinguished name defined in RFC4514 with _only_ a CN
 // component, as in:
 //   CN=Michael Wong
 //
 // SECURITY WARNING
@@ skipping 43 matching lines @@
 
  private:
   base::Time now_;
 };
 
 } // namespace x509_util
 
 } // namespace net
 
 #endif  // NET_CERT_X509_UTIL_H_