Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(369)

Side by Side Diff: net/ssl/ssl_config.h

Issue 2056343006: Remove DHE. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: actually connect up the feature flag Created 4 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/socket/ssl_client_socket_unittest.cc ('k') | net/ssl/ssl_config.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef NET_SSL_SSL_CONFIG_H_ 5 #ifndef NET_SSL_SSL_CONFIG_H_
6 #define NET_SSL_SSL_CONFIG_H_ 6 #define NET_SSL_SSL_CONFIG_H_
7 7
8 #include <stdint.h> 8 #include <stdint.h>
9 9
10 #include "base/memory/ref_counted.h" 10 #include "base/memory/ref_counted.h"
(...skipping 96 matching lines...) Expand 10 before | Expand all | Expand 10 after
107 // Enables deprecated cipher suites. These cipher suites are selected under a 107 // Enables deprecated cipher suites. These cipher suites are selected under a
108 // fallback to distinguish servers which require them from servers which 108 // fallback to distinguish servers which require them from servers which
109 // merely prefer them. 109 // merely prefer them.
110 // 110 //
111 // NOTE: because they are under a fallback, connections are still vulnerable 111 // NOTE: because they are under a fallback, connections are still vulnerable
112 // to them as far as downgrades are concerned, so this should only be used for 112 // to them as far as downgrades are concerned, so this should only be used for
113 // measurement of ciphers not to be carried long-term. It is no fix for 113 // measurement of ciphers not to be carried long-term. It is no fix for
114 // servers with bad configurations without full removal. 114 // servers with bad configurations without full removal.
115 bool deprecated_cipher_suites_enabled; 115 bool deprecated_cipher_suites_enabled;
116 116
117 // Enables DHE cipher suites.
118 bool dhe_enabled;
119
117 bool channel_id_enabled; // True if TLS channel ID extension is enabled. 120 bool channel_id_enabled; // True if TLS channel ID extension is enabled.
118 121
119 // List of Token Binding key parameters supported by the client. If empty, 122 // List of Token Binding key parameters supported by the client. If empty,
120 // Token Binding will be disabled, even if token_binding_enabled is true. 123 // Token Binding will be disabled, even if token_binding_enabled is true.
121 std::vector<TokenBindingParam> token_binding_params; 124 std::vector<TokenBindingParam> token_binding_params;
122 125
123 bool false_start_enabled; // True if we'll use TLS False Start. 126 bool false_start_enabled; // True if we'll use TLS False Start.
124 // True if the Certificate Transparency signed_certificate_timestamp 127 // True if the Certificate Transparency signed_certificate_timestamp
125 // TLS extension is enabled. 128 // TLS extension is enabled.
126 bool signed_cert_timestamps_enabled; 129 bool signed_cert_timestamps_enabled;
(...skipping 56 matching lines...) Expand 10 before | Expand all | Expand 10 after
183 // The list of application-level protocols to enable renegotiation for. 186 // The list of application-level protocols to enable renegotiation for.
184 NextProtoVector renego_allowed_for_protos; 187 NextProtoVector renego_allowed_for_protos;
185 188
186 scoped_refptr<X509Certificate> client_cert; 189 scoped_refptr<X509Certificate> client_cert;
187 scoped_refptr<SSLPrivateKey> client_private_key; 190 scoped_refptr<SSLPrivateKey> client_private_key;
188 }; 191 };
189 192
190 } // namespace net 193 } // namespace net
191 194
192 #endif // NET_SSL_SSL_CONFIG_H_ 195 #endif // NET_SSL_SSL_CONFIG_H_
OLDNEW
« no previous file with comments | « net/socket/ssl_client_socket_unittest.cc ('k') | net/ssl/ssl_config.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698