Index: net/quic/crypto/quic_crypto_client_config.h |
diff --git a/net/quic/crypto/quic_crypto_client_config.h b/net/quic/crypto/quic_crypto_client_config.h |
index d68f437477d8acf6d90964d102a4ce7ffa102076..5da99a6bd97352fcc084fd236b7e2ecfd233f3a4 100644 |
--- a/net/quic/crypto/quic_crypto_client_config.h |
+++ b/net/quic/crypto/quic_crypto_client_config.h |
@@ -224,6 +224,9 @@ class NET_EXPORT_PRIVATE QuicCryptoClientConfig : public QuicCryptoConfig { |
// suffix will be used to initialize the cached state for this server. |
void AddCanonicalSuffix(const std::string& suffix); |
+ // Disables the use of ECDSA for certificate validation. |
wtc
2014/03/25 14:58:11
Nit: we should refer to this as "proof validation"
Ryan Hamilton
2014/03/27 19:06:39
Done.
|
+ void DisableEcdsa(); |
+ |
private: |
typedef std::map<QuicSessionKey, CachedState*> CachedStateMap; |
@@ -250,6 +253,9 @@ class NET_EXPORT_PRIVATE QuicCryptoClientConfig : public QuicCryptoConfig { |
scoped_ptr<ProofVerifier> proof_verifier_; |
scoped_ptr<ChannelIDSigner> channel_id_signer_; |
+ // True if ECDSA should be disabled. |
+ bool disable_ecdsa_; |
+ |
DISALLOW_COPY_AND_ASSIGN(QuicCryptoClientConfig); |
}; |