OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_SSL_SSL_SERVER_CONFIG_H_ | 5 #ifndef NET_SSL_SSL_SERVER_CONFIG_H_ |
6 #define NET_SSL_SSL_SERVER_CONFIG_H_ | 6 #define NET_SSL_SSL_SERVER_CONFIG_H_ |
7 | 7 |
8 #include <stdint.h> | 8 #include <stdint.h> |
| 9 |
9 #include <vector> | 10 #include <vector> |
10 | 11 |
11 #include "base/basictypes.h" | |
12 #include "net/base/net_export.h" | 12 #include "net/base/net_export.h" |
13 #include "net/ssl/ssl_config.h" | 13 #include "net/ssl/ssl_config.h" |
14 | 14 |
15 namespace net { | 15 namespace net { |
16 | 16 |
17 // A collection of server-side SSL-related configuration settings. | 17 // A collection of server-side SSL-related configuration settings. |
18 struct NET_EXPORT SSLServerConfig { | 18 struct NET_EXPORT SSLServerConfig { |
19 // Defaults | 19 // Defaults |
20 SSLServerConfig(); | 20 SSLServerConfig(); |
21 ~SSLServerConfig(); | 21 ~SSLServerConfig(); |
(...skipping 14 matching lines...) Expand all Loading... |
36 // - Weak cipher suites: < 80 bits of security strength. | 36 // - Weak cipher suites: < 80 bits of security strength. |
37 // - FORTEZZA cipher suites (obsolete). | 37 // - FORTEZZA cipher suites (obsolete). |
38 // - IDEA cipher suites (RFC 5469 explains why). | 38 // - IDEA cipher suites (RFC 5469 explains why). |
39 // - Anonymous cipher suites. | 39 // - Anonymous cipher suites. |
40 // - ECDSA cipher suites on platforms that do not support ECDSA signed | 40 // - ECDSA cipher suites on platforms that do not support ECDSA signed |
41 // certificates, as servers may use the presence of such ciphersuites as a | 41 // certificates, as servers may use the presence of such ciphersuites as a |
42 // hint to send an ECDSA certificate. | 42 // hint to send an ECDSA certificate. |
43 // The ciphers listed in |disabled_cipher_suites| will be removed in addition | 43 // The ciphers listed in |disabled_cipher_suites| will be removed in addition |
44 // to the above list. | 44 // to the above list. |
45 // | 45 // |
46 // Though cipher suites are sent in TLS as "uint8 CipherSuite[2]", in | 46 // Though cipher suites are sent in TLS as "uint8_t CipherSuite[2]", in |
47 // big-endian form, they should be declared in host byte order, with the | 47 // big-endian form, they should be declared in host byte order, with the |
48 // first uint8 occupying the most significant byte. | 48 // first uint8_t occupying the most significant byte. |
49 // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to | 49 // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to |
50 // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002. | 50 // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002. |
51 std::vector<uint16_t> disabled_cipher_suites; | 51 std::vector<uint16_t> disabled_cipher_suites; |
52 | 52 |
53 // If true, causes only ECDHE cipher suites to be enabled. | 53 // If true, causes only ECDHE cipher suites to be enabled. |
54 bool require_ecdhe; | 54 bool require_ecdhe; |
55 | 55 |
56 // Requires a client certificate for client authentication from the client. | 56 // Requires a client certificate for client authentication from the client. |
57 // This doesn't currently enforce certificate validity. | 57 // This doesn't currently enforce certificate validity. |
58 bool require_client_cert; | 58 bool require_client_cert; |
59 }; | 59 }; |
60 | 60 |
61 } // namespace net | 61 } // namespace net |
62 | 62 |
63 #endif // NET_SSL_SSL_SERVER_CONFIG_H_ | 63 #endif // NET_SSL_SSL_SERVER_CONFIG_H_ |
OLD | NEW |