OpenSSL/NSS implementation of ProofVerfifier.

net/quic/crypto/proof_verifier.h

Index: net/quic/crypto/proof_verifier.h
diff --git a/net/quic/crypto/proof_verifier.h b/net/quic/crypto/proof_verifier.h
index 29ed7ea3fc3c339f79b0c196d80450224eb27227..0b970393b0233034de9a30e40156006f3c8b94bc 100644
--- a/net/quic/crypto/proof_verifier.h
+++ b/net/quic/crypto/proof_verifier.h
@@ -8,6 +8,7 @@
 #include <string>
 #include <vector>
 
+#include "net/base/completion_callback.h"
 #include "net/base/net_export.h"
 
 namespace net {
@@ -20,20 +21,21 @@ class NET_EXPORT_PRIVATE ProofVerifier {
 
   // VerifyProof checks that |signature| is a valid signature of
   // |server_config| by the public key in the leaf certificate of |certs|, and
-  // that |certs| is a valid chain for |hostname|. On success, it returns true.
+  // that |certs| is a valid chain for |hostname|. On success, it returns OK.
   // On failure, it returns false and sets |*error_details| to a description of
-  // the problem.
+  // the problem and returns ERR_FAILED.

[wtc, 2013/06/24 22:36:56]

"returns ERR_FAILED" should replace the "returns false" on the previous line.

We also need to add comments to document the |callback| argument and the
async behavior (the function may return ERR_IO_PENDING, in which case the
|callback| will be run with the final OK/ERR_FAILED result when the proof is
verified).

[ramant (doing other things), 2013/06/28 19:16:56]

Done.

   //
   // The signature uses SHA-256 as the hash function and PSS padding in the
   // case of RSA.
   //
   // Note: this is just for testing. The CN of the certificate is ignored and
   // wildcards in the SANs are not supported.
-  virtual bool VerifyProof(const std::string& hostname,
-                           const std::string& server_config,
-                           const std::vector<std::string>& certs,
-                           const std::string& signature,
-                           std::string* error_details) const = 0;
+  virtual int VerifyProof(const std::string& hostname,
+                          const std::string& server_config,
+                          const std::vector<std::string>& certs,
+                          const std::string& signature,
+                          const CompletionCallback& callback,

[wtc, 2013/06/24 22:36:56]

The |callback| argument seems to be the last argument by convention.
Could you check some other methods in net that take a |callback| argument?
Thanks.

[ramant (doing other things), 2013/06/28 19:16:56]

./socket/client_socket_pool_manager.h:106, socet_test_util.h and others don't
seem to follow that convention (they have callback argument in the middle).
Should I change it? thanks.

+                          std::string* error_details) = 0;
 };
 
 }  // namespace net