Support for client certs in ssl_server_socket.

net/cert/client_cert_verifier.h

Index: net/cert/client_cert_verifier.h
diff --git a/net/cert/client_cert_verifier.h b/net/cert/client_cert_verifier.h
new file mode 100644
index 0000000000000000000000000000000000000000..53104c3e842bcfc53528a6e9c8768bb868cd2cad
--- /dev/null
+++ b/net/cert/client_cert_verifier.h
@@ -0,0 +1,24 @@
+// Copyright (c) 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_CERT_CLIENT_CERT_VERIFIER_H_
+#define NET_CERT_CLIENT_CERT_VERIFIER_H_
+
+namespace net {
+
+class BoundNetLog;
+class X509Certificate;
+
+// ClientCertVerifier represents a service for verifying certificates.
+class ClientCertVerifier {
+ public:
+  virtual ~ClientCertVerifier() {}
+  // Verifies the given certificate as a client certificate.
+  // Returns OK if successful or an error code upon failure.
+  virtual int Verify(X509Certificate* cert, const BoundNetLog& net_log) = 0;
+};
+
+}  // namespace net
+
+#endif  // NET_CERT_CLIENT_CERT_VERIFIER_H_