| Index: net/quic/crypto/quic_crypto_server_config.h
|
| diff --git a/net/quic/crypto/quic_crypto_server_config.h b/net/quic/crypto/quic_crypto_server_config.h
|
| index 02d0523348589ea6c5505079c61f63afdeaddbb8..8f4b38f2e850ff54f06a4a6f9df1e2bb9345667b 100644
|
| --- a/net/quic/crypto/quic_crypto_server_config.h
|
| +++ b/net/quic/crypto/quic_crypto_server_config.h
|
| @@ -271,6 +271,7 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| //
|
| // |cached_network_params| is optional, and can be nullptr.
|
| bool BuildServerConfigUpdateMessage(
|
| + QuicVersion version,
|
| const SourceAddressTokens& previous_source_address_tokens,
|
| const IPAddressNumber& server_ip,
|
| const IPAddressNumber& client_ip,
|
| @@ -338,6 +339,10 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| // uniqueness.
|
| void set_server_nonce_strike_register_window_secs(uint32 window_secs);
|
|
|
| + // set_enable_serving_sct enables or disables serving signed cert timestamp
|
| + // (RFC6962) in server hello.
|
| + void set_enable_serving_sct(bool enable_serving_sct);
|
| +
|
| // Set and take ownership of the callback to invoke on primary config changes.
|
| void AcquirePrimaryConfigChangedCb(PrimaryConfigChangedCallback* cb);
|
|
|
| @@ -438,14 +443,13 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| ValidateClientHelloResultCallback* done_cb) const;
|
|
|
| // BuildRejection sets |out| to be a REJ message in reply to |client_hello|.
|
| - void BuildRejection(const Config& config,
|
| + void BuildRejection(QuicVersion version, const Config& config,
|
| const CryptoHandshakeMessage& client_hello,
|
| const ClientHelloInfo& info,
|
| const CachedNetworkParameters& cached_network_params,
|
| bool use_stateless_rejects,
|
| QuicConnectionId server_designated_connection_id,
|
| - QuicRandom* rand,
|
| - QuicCryptoNegotiatedParameters* params,
|
| + QuicRandom* rand, QuicCryptoNegotiatedParameters* params,
|
| const QuicCryptoProof& crypto_proof,
|
| CryptoHandshakeMessage* out) const;
|
|
|
| @@ -593,6 +597,9 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| uint32 server_nonce_strike_register_max_entries_;
|
| uint32 server_nonce_strike_register_window_secs_;
|
|
|
| + // Enable serving SCT or not.
|
| + bool enable_serving_sct_;
|
| +
|
| DISALLOW_COPY_AND_ASSIGN(QuicCryptoServerConfig);
|
| };
|
|
|
|
|