Add False Start tests

net/test/spawned_test_server/base_test_server.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_
 #define NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_
 
 #include <string>
 #include <utility>
 #include <vector>
@@ skipping 54 matching lines @@
     // OCSPStatus enumerates the types of OCSP response that the testserver
     // can produce.
     enum OCSPStatus {
       OCSP_OK,
       OCSP_REVOKED,
       OCSP_INVALID,
       OCSP_UNAUTHORIZED,
       OCSP_UNKNOWN,
     };
 
+    // Bitmask of key exchange algorithms that the test server supports and that
+    // can be selectively enabled or disabled.
+    enum KeyExchange {
+      // Special value used to indicate that any algorithm the server supports
+      // is acceptable. Preferred over explicitly OR-ing all ciphers.

[wtc, 2014/04/02 19:26:55]

Typo: ciphers => key exchange algorithms

[davidben, 2014/04/03 19:38:36]

Done.

+      KEY_EXCHANGE_ANY     = 0,
+
+      KEY_EXCHANGE_RSA     = (1 << 0),
+      KEY_EXCHANGE_DHE_RSA = (1 << 1),

[wtc, 2014/04/02 19:26:55]

The test server actually supports more key exchange algorithms than just these
two. Should the other supported key exchange algorithms also be exposed here?

[Ryan Sleevi, 2014/04/02 22:09:13]

Not until we need em :)

[davidben, 2014/04/03 19:38:36]

tlslite does, but the test server will need to pass along other parameters to
tlslite before they're supported anyway.

+    };
+
     // Bitmask of bulk encryption algorithms that the test server supports
     // and that can be selectively enabled or disabled.
     enum BulkCipher {
       // Special value used to indicate that any algorithm the server supports
       // is acceptable. Preferred over explicitly OR-ing all ciphers.
       BULK_CIPHER_ANY    = 0,
 
       BULK_CIPHER_RC4    = (1 << 0),
       BULK_CIPHER_AES128 = (1 << 1),
       BULK_CIPHER_AES256 = (1 << 2),
@@ skipping 42 matching lines @@
     // True if a CertificateRequest should be sent to the client during
     // handshaking.
     bool request_client_certificate;
 
     // If |request_client_certificate| is true, an optional list of files,
     // each containing a single, PEM-encoded X.509 certificates. The subject
     // from each certificate will be added to the certificate_authorities
     // field of the CertificateRequest.
     std::vector<base::FilePath> client_authorities;
 
+    // A bitwise-OR of KeyExchnage that should be used by the
+    // HTTPS server, or KEY_EXCHANGE_ANY to indicate that all implemented
+    // key exchange algorithms are acceptable.
+    int key_exchanges;
+
     // A bitwise-OR of BulkCipher that should be used by the
     // HTTPS server, or BULK_CIPHER_ANY to indicate that all implemented
     // ciphers are acceptable.
     int bulk_ciphers;
 
     // If true, pass the --https-record-resume argument to testserver.py which
     // causes it to log session cache actions and echo the log on
     // /ssl-session-cache.
     bool record_resume;
 
@@ skipping 11 matching lines @@
     // Temporary glue for testing: validation of SCTs is application-controlled
     // and can be appropriately mocked out, so sending fake data here does not
     // affect handshaking behaviour.
     // TODO(ekasper): replace with valid SCT files for test certs.
     // (Fake) SignedCertificateTimestampList (as a raw binary string) to send in
     // a TLS extension.
     std::string signed_cert_timestamps_tls_ext;
 
     // Whether to staple the OCSP response.
     bool staple_ocsp_response;
+
+    // Whether to enable NPN support.
+    bool support_npn;

[wtc, 2014/04/02 19:26:55]

Nit: support_npn => enable_npn?

[Ryan Sleevi, 2014/04/02 22:09:13]

+1

[davidben, 2014/04/03 19:38:36]

Done.

   };
 
   // Pass as the 'host' parameter during construction to server on 127.0.0.1
   static const char kLocalhost[];
 
   // Initialize a TestServer listening on a specific host (IP or hostname).
   BaseTestServer(Type type,  const std::string& host);
 
   // Initialize a TestServer with a specific set of SSLOptions for HTTPS or WSS.
   BaseTestServer(Type type, const SSLOptions& ssl_options);
@@ skipping 93 matching lines @@
   bool log_to_console_;
 
   scoped_ptr<ScopedPortException> allowed_port_;
 
   DISALLOW_COPY_AND_ASSIGN(BaseTestServer);
 };
 
 }  // namespace net
 
 #endif  // NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_