| Index: net/quic/crypto/quic_crypto_server_config.h
|
| diff --git a/net/quic/crypto/quic_crypto_server_config.h b/net/quic/crypto/quic_crypto_server_config.h
|
| index 02d0523348589ea6c5505079c61f63afdeaddbb8..3bf6d7c801ffd6e8b354a8193f0007722cd8cdb0 100644
|
| --- a/net/quic/crypto/quic_crypto_server_config.h
|
| +++ b/net/quic/crypto/quic_crypto_server_config.h
|
| @@ -271,6 +271,7 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| //
|
| // |cached_network_params| is optional, and can be nullptr.
|
| bool BuildServerConfigUpdateMessage(
|
| + QuicVersion version,
|
| const SourceAddressTokens& previous_source_address_tokens,
|
| const IPAddressNumber& server_ip,
|
| const IPAddressNumber& client_ip,
|
| @@ -338,6 +339,10 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| // uniqueness.
|
| void set_server_nonce_strike_register_window_secs(uint32 window_secs);
|
|
|
| + // set_enable_serving_sct enables or disables serving signed cert timestamp
|
| + // (RFC6962) in server hello.
|
| + void set_enable_serving_sct(bool enable_serving_sct);
|
| +
|
| // Set and take ownership of the callback to invoke on primary config changes.
|
| void AcquirePrimaryConfigChangedCb(PrimaryConfigChangedCallback* cb);
|
|
|
| @@ -438,7 +443,8 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| ValidateClientHelloResultCallback* done_cb) const;
|
|
|
| // BuildRejection sets |out| to be a REJ message in reply to |client_hello|.
|
| - void BuildRejection(const Config& config,
|
| + void BuildRejection(QuicVersion version,
|
| + const Config& config,
|
| const CryptoHandshakeMessage& client_hello,
|
| const ClientHelloInfo& info,
|
| const CachedNetworkParameters& cached_network_params,
|
| @@ -593,6 +599,9 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig {
|
| uint32 server_nonce_strike_register_max_entries_;
|
| uint32 server_nonce_strike_register_window_secs_;
|
|
|
| + // Enable serving SCT or not.
|
| + bool enable_serving_sct_;
|
| +
|
| DISALLOW_COPY_AND_ASSIGN(QuicCryptoServerConfig);
|
| };
|
|
|
|
|