Route key_exchange_group over to DevTools.

net/ssl/ssl_info.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/ssl_info.h"
 
+#include <openssl/ssl.h>
+
 #include "base/pickle.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/ct_policy_status.h"
 #include "net/cert/signed_certificate_timestamp.h"
 #include "net/cert/x509_certificate.h"
+#include "net/ssl/ssl_connection_status_flags.h"
 
 namespace net {
 
 SSLInfo::SSLInfo() {
   Reset();
 }
 
 SSLInfo::SSLInfo(const SSLInfo& info) {
   *this = info;
 }
@@ skipping 42 matching lines @@
   public_key_hashes.clear();
   pinning_failure_log.clear();
   signed_certificate_timestamps.clear();
   ct_compliance_details_available = false;
   ct_ev_policy_compliance = ct::EVPolicyCompliance::EV_POLICY_DOES_NOT_APPLY;
   ct_cert_policy_compliance =
       ct::CertPolicyCompliance::CERT_POLICY_COMPLIES_VIA_SCTS;
   ocsp_result = OCSPVerifyResult();
 }
 
+uint16_t SSLInfo::GetKeyExchangeGroup() const {
+  // key_exchange_info is sometimes the (EC)DH group ID and sometimes a
+  // completely different value.
+  //
+  // TODO(davidben): Once the DHE removal has stuck, remove key_exchange_info
+  // from this struct, doing all necessary conversions when parsing out of
+  // legacy cache entries. At that point, this accessor may be replaced with the
+  // struct field. See https://crbug.com/639421.
+  //
+  // TODO(davidben): When TLS 1.3 draft 15's new negotiation is implemented,
+  // also report key_exchange_info for the new AEAD/PRF ciphers.
+  uint16_t cipher_value = SSLConnectionStatusToCipherSuite(connection_status);
+  const SSL_CIPHER* cipher = SSL_get_cipher_by_value(cipher_value);
+  if (cipher && SSL_CIPHER_is_ECDHE(cipher))
+    return static_cast<uint16_t>(key_exchange_info);
+  return 0;
+}
+
 void SSLInfo::SetCertError(int error) {
   cert_status |= MapNetErrorToCertStatus(error);
 }
 
 void SSLInfo::UpdateCertificateTransparencyInfo(
     const ct::CTVerifyResult& ct_verify_result) {
   signed_certificate_timestamps.insert(signed_certificate_timestamps.end(),
                                        ct_verify_result.scts.begin(),
                                        ct_verify_result.scts.end());
 
   ct_compliance_details_available = ct_verify_result.ct_policies_applied;
   ct_cert_policy_compliance = ct_verify_result.cert_policy_compliance;
   ct_ev_policy_compliance = ct_verify_result.ev_policy_compliance;
 }
 
 }  // namespace net