Support for client certs in ssl_server_socket.

net/cert/client_cert_verifier.h

+// Copyright (c) 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_CERT_CLIENT_CERT_VERIFIER_H_
+#define NET_CERT_CLIENT_CERT_VERIFIER_H_
+
+#include "base/macros.h"
+#include "net/base/completion_callback.h"
+#include "net/base/net_export.h"
+
+namespace net {
+
+class X509Certificate;
+
+// ClientCertVerifier represents a service for verifying certificates.
+class NET_EXPORT ClientCertVerifier {
+ public:
+  class Request {
+   public:
+    Request() {}
+
+    // Destruction of the Request cancels it.
+    virtual ~Request() {}
+
+   private:
+    DISALLOW_COPY_AND_ASSIGN(Request);
+  };
+
+  virtual ~ClientCertVerifier() {}
+
+  // Verifies the given certificate as a client certificate.
+  // Returns OK if successful or an error code upon failure.
+  virtual int Verify(X509Certificate* cert,
+                     const CompletionCallback& callback,
+                     scoped_ptr<Request>* out_req) = 0;
+};
+
+}  // namespace net
+
+#endif  // NET_CERT_CLIENT_CERT_VERIFIER_H_