Move Window's specific logic for disabling ECDSA from QuicCryptoyclientConfig

net/quic/crypto/quic_crypto_client_config.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_QUIC_CRYPTO_QUIC_CRYPTO_CLIENT_CONFIG_H_
 #define NET_QUIC_CRYPTO_QUIC_CRYPTO_CLIENT_CONFIG_H_
 
 #include <map>
 #include <string>
 #include <vector>
@@ skipping 206 matching lines @@
   void InitializeFrom(const QuicSessionKey& server_key,
                       const QuicSessionKey& canonical_server_key,
                       QuicCryptoClientConfig* canonical_crypto_config);
 
   // Adds |suffix| as a domain suffix for which the server's crypto config
   // is expected to be shared among servers with the domain suffix. If a server
   // matches this suffix, then the server config from another server with the
   // suffix will be used to initialize the cached state for this server.
   void AddCanonicalSuffix(const std::string& suffix);
 
+  // Disables the use of ECDSA for certificate validation.

[wtc, 2014/03/25 14:58:11]

Nit: we should refer to this as "proof validation" or "proof verification". The
proof can also be an ECDSA signature, so the lack of ECDSA support affects more
than certificate verification.

[Ryan Hamilton, 2014/03/27 19:06:39]

Done.

+  void DisableEcdsa();
+
  private:
   typedef std::map<QuicSessionKey, CachedState*> CachedStateMap;
 
   // If the suffix of the hostname in |server_key| is in |canoncial_suffixes_|,
   // then populate |cached| with the canonical cached state from
   // |canonical_server_map_| for that suffix.
   void PopulateFromCanonicalConfig(const QuicSessionKey& server_key,
                                    CachedState* cached);
 
   // cached_states_ maps from the server_key to the cached information about
   // that server.
   CachedStateMap cached_states_;
 
   // Contains a map of servers which could share the same server config. Map
   // from a canonical host suffix/port/scheme to a representative server with
   // the canonical suffix, which has a plausible set of initial certificates
   // (or at least server public key).
   std::map<QuicSessionKey, QuicSessionKey> canonical_server_map_;
 
   // Contains list of suffixes (for exmaple ".c.youtube.com",
   // ".googlevideo.com") of canoncial hostnames.
   std::vector<std::string> canoncial_suffixes_;
 
   scoped_ptr<ProofVerifier> proof_verifier_;
   scoped_ptr<ChannelIDSigner> channel_id_signer_;
 
+  // True if ECDSA should be disabled.
+  bool disable_ecdsa_;
+
   DISALLOW_COPY_AND_ASSIGN(QuicCryptoClientConfig);
 };
 
 }  // namespace net
 
 #endif  // NET_QUIC_CRYPTO_QUIC_CRYPTO_CLIENT_CONFIG_H_