Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(381)

Side by Side Diff: net/ssl/ssl_config.h

Issue 2030263002: Remove the last vestiges of RC4. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/socket/ssl_client_socket_unittest.cc ('k') | net/ssl/ssl_config.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef NET_SSL_SSL_CONFIG_H_ 5 #ifndef NET_SSL_SSL_CONFIG_H_
6 #define NET_SSL_SSL_CONFIG_H_ 6 #define NET_SSL_SSL_CONFIG_H_
7 7
8 #include <stdint.h> 8 #include <stdint.h>
9 9
10 #include "base/memory/ref_counted.h" 10 #include "base/memory/ref_counted.h"
(...skipping 96 matching lines...) Expand 10 before | Expand all | Expand 10 after
107 // Enables deprecated cipher suites. These cipher suites are selected under a 107 // Enables deprecated cipher suites. These cipher suites are selected under a
108 // fallback to distinguish servers which require them from servers which 108 // fallback to distinguish servers which require them from servers which
109 // merely prefer them. 109 // merely prefer them.
110 // 110 //
111 // NOTE: because they are under a fallback, connections are still vulnerable 111 // NOTE: because they are under a fallback, connections are still vulnerable
112 // to them as far as downgrades are concerned, so this should only be used for 112 // to them as far as downgrades are concerned, so this should only be used for
113 // measurement of ciphers not to be carried long-term. It is no fix for 113 // measurement of ciphers not to be carried long-term. It is no fix for
114 // servers with bad configurations without full removal. 114 // servers with bad configurations without full removal.
115 bool deprecated_cipher_suites_enabled; 115 bool deprecated_cipher_suites_enabled;
116 116
117 // Enables RC4 cipher suites.
118 bool rc4_enabled;
119
120 bool channel_id_enabled; // True if TLS channel ID extension is enabled. 117 bool channel_id_enabled; // True if TLS channel ID extension is enabled.
121 118
122 // List of Token Binding key parameters supported by the client. If empty, 119 // List of Token Binding key parameters supported by the client. If empty,
123 // Token Binding will be disabled, even if token_binding_enabled is true. 120 // Token Binding will be disabled, even if token_binding_enabled is true.
124 std::vector<TokenBindingParam> token_binding_params; 121 std::vector<TokenBindingParam> token_binding_params;
125 122
126 bool false_start_enabled; // True if we'll use TLS False Start. 123 bool false_start_enabled; // True if we'll use TLS False Start.
127 // True if the Certificate Transparency signed_certificate_timestamp 124 // True if the Certificate Transparency signed_certificate_timestamp
128 // TLS extension is enabled. 125 // TLS extension is enabled.
129 bool signed_cert_timestamps_enabled; 126 bool signed_cert_timestamps_enabled;
(...skipping 56 matching lines...) Expand 10 before | Expand all | Expand 10 after
186 // The list of application-level protocols to enable renegotiation for. 183 // The list of application-level protocols to enable renegotiation for.
187 NextProtoVector renego_allowed_for_protos; 184 NextProtoVector renego_allowed_for_protos;
188 185
189 scoped_refptr<X509Certificate> client_cert; 186 scoped_refptr<X509Certificate> client_cert;
190 scoped_refptr<SSLPrivateKey> client_private_key; 187 scoped_refptr<SSLPrivateKey> client_private_key;
191 }; 188 };
192 189
193 } // namespace net 190 } // namespace net
194 191
195 #endif // NET_SSL_SSL_CONFIG_H_ 192 #endif // NET_SSL_SSL_CONFIG_H_
OLDNEW
« no previous file with comments | « net/socket/ssl_client_socket_unittest.cc ('k') | net/ssl/ssl_config.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698