Support for client certs in ssl_server_socket.

net/socket/ssl_server_socket_openssl.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_SERVER_SOCKET_OPENSSL_H_
 #define NET_SOCKET_SSL_SERVER_SOCKET_OPENSSL_H_
 
 #include <stdint.h>
 
 #include "base/macros.h"
 #include "base/memory/scoped_ptr.h"
 #include "net/base/completion_callback.h"
 #include "net/base/io_buffer.h"
 #include "net/log/net_log.h"
 #include "net/socket/ssl_server_socket.h"
 #include "net/ssl/ssl_server_config.h"
 
 // Avoid including misc OpenSSL headers, i.e.:
 // <openssl/bio.h>
 typedef struct bio_st BIO;
 // <openssl/ssl.h>
 typedef struct ssl_st SSL;
+typedef struct x509_store_ctx_st X509_STORE_CTX;
 
 namespace net {
 
 class SSLInfo;
 
 class SSLServerSocketOpenSSL : public SSLServerSocket {
  public:
   // See comments on CreateSSLServerSocket for details of how these
   // parameters are used.
   SSLServerSocketOpenSSL(scoped_ptr<StreamSocket> socket,
                          scoped_refptr<X509Certificate> certificate,
                          const crypto::RSAPrivateKey& key,
-                         const SSLServerConfig& ssl_config);
+                         const SSLServerConfig& ssl_server_config);
   ~SSLServerSocketOpenSSL() override;
 
   // SSLServerSocket interface.
   int Handshake(const CompletionCallback& callback) override;
 
   // SSLSocket interface.
   int ExportKeyingMaterial(const base::StringPiece& label,
                            bool has_context,
                            const base::StringPiece& context,
                            unsigned char* out,
@@ skipping 52 matching lines @@
 
   int DoHandshakeLoop(int last_io_result);
   int DoReadLoop(int result);
   int DoWriteLoop(int result);
   int DoHandshake();
   void DoHandshakeCallback(int result);
   void DoReadCallback(int result);
   void DoWriteCallback(int result);
 
   int Init();
+  void ExtractClientCert();

[davidben, 2016/01/25 20:56:10]

This function does not seem to exist.

[ryanchung, 2016/01/29 23:22:13]

Done. Removed.

+  static int CertVerifyCallback(X509_STORE_CTX* store_ctx, void* arg);
 
   // Members used to send and receive buffer.
   bool transport_send_busy_;
   bool transport_recv_busy_;
   bool transport_recv_eof_;
 
   scoped_refptr<DrainableIOBuffer> send_buffer_;
   scoped_refptr<IOBuffer> recv_buffer_;
 
   BoundNetLog net_log_;
@@ skipping 15 matching lines @@
   int transport_write_error_;
 
   // OpenSSL stuff
   SSL* ssl_;
   BIO* transport_bio_;
 
   // StreamSocket for sending and receiving data.
   scoped_ptr<StreamSocket> transport_socket_;
 
   // Options for the SSL socket.
-  SSLServerConfig ssl_config_;
+  SSLServerConfig ssl_server_config_;
 
   // Certificate for the server.
   scoped_refptr<X509Certificate> cert_;
 
   // Private key used by the server.
   scoped_ptr<crypto::RSAPrivateKey> key_;
 
+  // Certificate for the client.
+  scoped_refptr<X509Certificate> client_cert_;
+
   State next_handshake_state_;
   bool completed_handshake_;
 
   DISALLOW_COPY_AND_ASSIGN(SSLServerSocketOpenSSL);
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_SERVER_SOCKET_OPENSSL_H_