Support for client certs in ssl_server_socket.

net/ssl/scoped_openssl_types.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SCOPED_OPENSSL_TYPES_H_
 #define NET_SSL_SCOPED_OPENSSL_TYPES_H_
 
 #include <openssl/ssl.h>
 #include <openssl/x509.h>
 
 #include "crypto/scoped_openssl_types.h"
 
 namespace net {
 
+void FreeX509Stack(STACK_OF(X509)* ptr);
+void FreeX509NameStack(STACK_OF(X509_NAME)* ptr);
+
 using ScopedPKCS8_PRIV_KEY_INFO =
     crypto::ScopedOpenSSL<PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_free>;
 using ScopedSSL = crypto::ScopedOpenSSL<SSL, SSL_free>;
 using ScopedSSL_CTX = crypto::ScopedOpenSSL<SSL_CTX, SSL_CTX_free>;
 using ScopedSSL_SESSION = crypto::ScopedOpenSSL<SSL_SESSION, SSL_SESSION_free>;
 using ScopedX509 = crypto::ScopedOpenSSL<X509, X509_free>;
+using ScopedX509_NAME = crypto::ScopedOpenSSL<X509_NAME, X509_NAME_free>;
+using ScopedX509_STACK = crypto::ScopedOpenSSL<STACK_OF(X509), FreeX509Stack>;

[davidben, 2016/01/25 20:56:11]

#include <openssl/stack.h>

[davidben, 2016/01/25 20:56:11]

This is confusing. The OpenSSL type is not called X509_STACK. I would stick with
the original naming.

[ryanchung, 2016/01/29 23:22:14]

Done.

[ryanchung, 2016/01/29 23:22:14]

Done.

+using ScopedX509_NAME_STACK =
+    crypto::ScopedOpenSSL<STACK_OF(X509_NAME), FreeX509NameStack>;
 
 }  // namespace net
 
 #endif  // NET_SSL_SCOPED_OPENSSL_TYPES_H_