Add support to QUIC for QUIC_VERSION_8: for RSA-PSS signatures, set

net/quic/crypto/crypto_server_config.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/crypto/crypto_server_config.h"
 
 #include <stdlib.h>
 #include <algorithm>
 
 #include "base/stl_util.h"
@@ skipping 286 matching lines @@
   bool valid_source_address_token;
   bool client_nonce_well_formed;
   bool unique;
   StringPiece sni;
   StringPiece client_nonce;
   StringPiece server_nonce;
 };
 
 QuicErrorCode QuicCryptoServerConfig::ProcessClientHello(
     const CryptoHandshakeMessage& client_hello,
+    QuicVersion version,
     QuicGuid guid,
     const IPEndPoint& client_ip,
     const QuicClock* clock,
     QuicRandom* rand,
     QuicCryptoNegotiatedParameters *params,
     CryptoHandshakeMessage* out,
     string* error_details) const {
   DCHECK(error_details);
 
   StringPiece requested_scid;
@@ skipping 34 matching lines @@
   if (error != QUIC_NO_ERROR) {
     return error;
   }
 
   out->Clear();
 
   if (!info.valid_source_address_token ||
       !info.client_nonce_well_formed ||
       !info.unique ||
       !requested_config.get()) {
-    BuildRejection(primary_config, client_hello, info, rand, out);
+    BuildRejection(version, primary_config.get(), client_hello, info, rand,
+                   out);
     return QUIC_NO_ERROR;
   }
 
   const QuicTag* their_aeads;
   const QuicTag* their_key_exchanges;
   size_t num_their_aeads, num_their_key_exchanges;
   if (client_hello.GetTaglist(kAEAD, &their_aeads,
                               &num_their_aeads) != QUIC_NO_ERROR ||
       client_hello.GetTaglist(kKEXS, &their_key_exchanges,
                               &num_their_key_exchanges) != QUIC_NO_ERROR ||
@@ skipping 283 matching lines @@
   }
 
   info->unique = !replay_protection_ ||
                  unique_by_strike_register ||
                  unique_by_server_nonce;
 
   return QUIC_NO_ERROR;
 }
 
 void QuicCryptoServerConfig::BuildRejection(
+    QuicVersion version,
     const scoped_refptr<Config>& config,
     const CryptoHandshakeMessage& client_hello,
     const ClientHelloInfo& info,
     QuicRandom* rand,
     CryptoHandshakeMessage* out) const {
   out->set_tag(kREJ);
   out->SetStringPiece(kSCFG, config->serialized);
   out->SetStringPiece(kSourceAddressTokenTag,
                       NewSourceAddressToken(info.client_ip, rand, info.now));
   if (replay_protection_) {
@@ skipping 23 matching lines @@
         break;
     }
   }
 
   if (!x509_supported) {
     return;
   }
 
   const vector<string>* certs;
   string signature;
-  if (!proof_source_->GetProof(info.sni.as_string(), config->serialized,
-                               x509_ecdsa_supported, &certs, &signature)) {
+  if (!proof_source_->GetProof(version, info.sni.as_string(),
+                               config->serialized, x509_ecdsa_supported,
+                               &certs, &signature)) {
     return;
   }
 
   StringPiece their_common_set_hashes;
   StringPiece their_cached_cert_hashes;
   client_hello.GetStringPiece(kCCS, &their_common_set_hashes);
   client_hello.GetStringPiece(kCCRT, &their_cached_cert_hashes);
 
   const string compressed = CertCompressor::CompressChain(
       *certs, their_common_set_hashes, their_cached_cert_hashes,
@@ skipping 337 matching lines @@
 }
 
 QuicCryptoServerConfig::Config::Config()
     : channel_id_enabled(false),
       is_primary(false),
       primary_time(QuicWallTime::Zero()) {}
 
 QuicCryptoServerConfig::Config::~Config() { STLDeleteElements(&key_exchanges); }
 
 }  // namespace net