| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_SSL_SSL_CONFIG_H_ | 5 #ifndef NET_SSL_SSL_CONFIG_H_ |
| 6 #define NET_SSL_SSL_CONFIG_H_ | 6 #define NET_SSL_SSL_CONFIG_H_ |
| 7 | 7 |
| 8 #include <stdint.h> | 8 #include <stdint.h> |
| 9 | 9 |
| 10 #include "base/memory/ref_counted.h" | 10 #include "base/memory/ref_counted.h" |
| (...skipping 96 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 107 // Enables deprecated cipher suites. These cipher suites are selected under a | 107 // Enables deprecated cipher suites. These cipher suites are selected under a |
| 108 // fallback to distinguish servers which require them from servers which | 108 // fallback to distinguish servers which require them from servers which |
| 109 // merely prefer them. | 109 // merely prefer them. |
| 110 // | 110 // |
| 111 // NOTE: because they are under a fallback, connections are still vulnerable | 111 // NOTE: because they are under a fallback, connections are still vulnerable |
| 112 // to them as far as downgrades are concerned, so this should only be used for | 112 // to them as far as downgrades are concerned, so this should only be used for |
| 113 // measurement of ciphers not to be carried long-term. It is no fix for | 113 // measurement of ciphers not to be carried long-term. It is no fix for |
| 114 // servers with bad configurations without full removal. | 114 // servers with bad configurations without full removal. |
| 115 bool deprecated_cipher_suites_enabled; | 115 bool deprecated_cipher_suites_enabled; |
| 116 | 116 |
| 117 // Enables RC4 cipher suites. | |
| 118 bool rc4_enabled; | |
| 119 | |
| 120 bool channel_id_enabled; // True if TLS channel ID extension is enabled. | 117 bool channel_id_enabled; // True if TLS channel ID extension is enabled. |
| 121 | 118 |
| 122 // List of Token Binding key parameters supported by the client. If empty, | 119 // List of Token Binding key parameters supported by the client. If empty, |
| 123 // Token Binding will be disabled, even if token_binding_enabled is true. | 120 // Token Binding will be disabled, even if token_binding_enabled is true. |
| 124 std::vector<TokenBindingParam> token_binding_params; | 121 std::vector<TokenBindingParam> token_binding_params; |
| 125 | 122 |
| 126 bool false_start_enabled; // True if we'll use TLS False Start. | 123 bool false_start_enabled; // True if we'll use TLS False Start. |
| 127 // True if the Certificate Transparency signed_certificate_timestamp | 124 // True if the Certificate Transparency signed_certificate_timestamp |
| 128 // TLS extension is enabled. | 125 // TLS extension is enabled. |
| 129 bool signed_cert_timestamps_enabled; | 126 bool signed_cert_timestamps_enabled; |
| (...skipping 56 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 186 // The list of application-level protocols to enable renegotiation for. | 183 // The list of application-level protocols to enable renegotiation for. |
| 187 NextProtoVector renego_allowed_for_protos; | 184 NextProtoVector renego_allowed_for_protos; |
| 188 | 185 |
| 189 scoped_refptr<X509Certificate> client_cert; | 186 scoped_refptr<X509Certificate> client_cert; |
| 190 scoped_refptr<SSLPrivateKey> client_private_key; | 187 scoped_refptr<SSLPrivateKey> client_private_key; |
| 191 }; | 188 }; |
| 192 | 189 |
| 193 } // namespace net | 190 } // namespace net |
| 194 | 191 |
| 195 #endif // NET_SSL_SSL_CONFIG_H_ | 192 #endif // NET_SSL_SSL_CONFIG_H_ |
| OLD | NEW |