OpenSSL/NSS implementation of ProofVerfifier.

net/quic/quic_crypto_client_stream.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_QUIC_QUIC_CRYPTO_CLIENT_STREAM_H_
 #define NET_QUIC_QUIC_CRYPTO_CLIENT_STREAM_H_
 
 #include <string>
 
 #include "net/quic/crypto/crypto_handshake.h"
@@ skipping 29 matching lines @@
   // than the number of round-trips needed for the handshake.
   int num_sent_client_hellos() const;
 
  private:
   friend class test::CryptoTestUtils;
 
   enum State {
     STATE_IDLE,
     STATE_SEND_CHLO,
     STATE_RECV_REJ,
+    STATE_PROOF_VERIFY,
+    STATE_PROOF_VERIFICATION_COMPLETED,
     STATE_RECV_SHLO,
   };
 
   // DoHandshakeLoop performs a step of the handshake state machine. Note that
   // |in| is NULL for the first call.
-  void DoHandshakeLoop(const CryptoHandshakeMessage* in);
+  void DoHandshakeLoop(const CryptoHandshakeMessage* in, int result);
+
+  void VerifyProofCompleted(int result);
+
+  base::WeakPtrFactory<QuicCryptoClientStream> weak_factory_;

[agl2, 2013/06/28 20:30:09]

This code needs to work in google3 as well. I think concepts like WeakPtrFactory
don't exist there.

[ramant (doing other things), 2013/06/29 04:08:44]

Will not port this CL back. Will use google3 API calls if/when we port this code
back.

 
   State next_state_;
   // num_client_hellos_ contains the number of client hello messages that this
   // connection has sent.
   int num_client_hellos_;
 
   QuicCryptoClientConfig* const crypto_config_;
 
   // Client's connection nonce (4-byte timestamp + 28 random bytes)
   std::string nonce_;
   // Server's hostname
   std::string server_hostname_;
 
   DISALLOW_COPY_AND_ASSIGN(QuicCryptoClientStream);
 };
 
 }  // namespace net
 
 #endif  // NET_QUIC_QUIC_CRYPTO_CLIENT_STREAM_H_