Index: net/quic/crypto/quic_crypto_server_config.h |
diff --git a/net/quic/crypto/quic_crypto_server_config.h b/net/quic/crypto/quic_crypto_server_config.h |
index 02d0523348589ea6c5505079c61f63afdeaddbb8..3bf6d7c801ffd6e8b354a8193f0007722cd8cdb0 100644 |
--- a/net/quic/crypto/quic_crypto_server_config.h |
+++ b/net/quic/crypto/quic_crypto_server_config.h |
@@ -271,6 +271,7 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig { |
// |
// |cached_network_params| is optional, and can be nullptr. |
bool BuildServerConfigUpdateMessage( |
+ QuicVersion version, |
const SourceAddressTokens& previous_source_address_tokens, |
const IPAddressNumber& server_ip, |
const IPAddressNumber& client_ip, |
@@ -338,6 +339,10 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig { |
// uniqueness. |
void set_server_nonce_strike_register_window_secs(uint32 window_secs); |
+ // set_enable_serving_sct enables or disables serving signed cert timestamp |
+ // (RFC6962) in server hello. |
+ void set_enable_serving_sct(bool enable_serving_sct); |
+ |
// Set and take ownership of the callback to invoke on primary config changes. |
void AcquirePrimaryConfigChangedCb(PrimaryConfigChangedCallback* cb); |
@@ -438,7 +443,8 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig { |
ValidateClientHelloResultCallback* done_cb) const; |
// BuildRejection sets |out| to be a REJ message in reply to |client_hello|. |
- void BuildRejection(const Config& config, |
+ void BuildRejection(QuicVersion version, |
+ const Config& config, |
const CryptoHandshakeMessage& client_hello, |
const ClientHelloInfo& info, |
const CachedNetworkParameters& cached_network_params, |
@@ -593,6 +599,9 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig { |
uint32 server_nonce_strike_register_max_entries_; |
uint32 server_nonce_strike_register_window_secs_; |
+ // Enable serving SCT or not. |
+ bool enable_serving_sct_; |
+ |
DISALLOW_COPY_AND_ASSIGN(QuicCryptoServerConfig); |
}; |