Support for client certs in ssl_server_socket.

net/cert/client_cert_verifier.h

Index: net/cert/client_cert_verifier.h
diff --git a/net/cert/client_cert_verifier.h b/net/cert/client_cert_verifier.h
new file mode 100644
index 0000000000000000000000000000000000000000..25870d65170c2a5b43ecad051ed7eef1708c5cf5
--- /dev/null
+++ b/net/cert/client_cert_verifier.h
@@ -0,0 +1,24 @@
+// Copyright (c) 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_CERT_CLIENT_CERT_VERIFIER_H_
+#define NET_CERT_CLIENT_CERT_VERIFIER_H_
+
+namespace net {
+
+class BoundNetLog;
+class X509Certificate;
+
+// ClientCertVerifier represents a service for verifying certificates.
+class ClientCertVerifier {
+ public:
+  virtual ~ClientCertVerifier() {}

[davidben, 2015/12/14 23:56:49]

Nit: I'd put a newline here.

[ryanchung, 2015/12/16 22:40:01]

Done.

+  // Verifies the given certificate as a client certificate.
+  // Returns OK if successful or an error code upon failure.
+  virtual int Verify(X509Certificate* cert) = 0;
+};
+
+}  // namespace net
+
+#endif  // NET_CERT_CLIENT_CERT_VERIFIER_H_