Route key_exchange_group over to DevTools.

net/ssl/ssl_info.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/ssl_info.h"
 
+#include <openssl/ssl.h>
+
 #include "base/pickle.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/ct_policy_status.h"
 #include "net/cert/signed_certificate_timestamp.h"
 #include "net/cert/x509_certificate.h"
+#include "net/ssl/ssl_connection_status_flags.h"
 
 namespace net {
 
 SSLInfo::SSLInfo() {
   Reset();
 }
 
 SSLInfo::SSLInfo(const SSLInfo& info) {
   *this = info;
 }
@@ skipping 42 matching lines @@
   public_key_hashes.clear();
   pinning_failure_log.clear();
   signed_certificate_timestamps.clear();
   ct_compliance_details_available = false;
   ct_ev_policy_compliance = ct::EVPolicyCompliance::EV_POLICY_DOES_NOT_APPLY;
   ct_cert_policy_compliance =
       ct::CertPolicyCompliance::CERT_POLICY_COMPLIES_VIA_SCTS;
   ocsp_result = OCSPVerifyResult();
 }
 
+uint16_t SSLInfo::GetKeyExchangeGroup() const {
+  // key_exchange_info is sometimes the (EC)DH group ID and sometimes a

[lgarron, 2016/08/30 22:13:51]

That makes is sound like you can end up with a grinning cat emoji. :-P
How about "key_exchange_info either the (EC)DH group ID or a synthesized name
for the key exchange, depending on the version of TLS."?

[davidben, 2016/08/30 22:24:26]

Cat emoji is... basically right. For DHE ciphers, it's the number of bits in the
group. For FFDHE in TLS 1.3 which we won't implement, it's back to being the
group ID. For static RSA it was, at one point, the number of bits in the RSA key
and then I took that out because it was useless.

key_exchange_info was just a mistake. :-)

+  // completely different value.
+  //
+  // TODO(davidben): Once the DHE removal has stuck, remove key_exchange_info
+  // from this struct, doing all necessary conversions when parsing out of
+  // legacy cache entries. At that point, this accessor may be replaced with the
+  // struct field. See https://crbug.com/639421.
+  //
+  // TODO(davidben): When TLS 1.3 draft 15's new negotiation is implemented,
+  // also report key_exchange_info for the new AEAD/PRF ciphers.
+  uint16_t cipher_value = SSLConnectionStatusToCipherSuite(connection_status);
+  const SSL_CIPHER* cipher = SSL_get_cipher_by_value(cipher_value);
+  if (cipher && SSL_CIPHER_is_ECDHE(cipher))
+    return static_cast<uint16_t>(key_exchange_info);
+  return 0;
+}
+
 void SSLInfo::SetCertError(int error) {
   cert_status |= MapNetErrorToCertStatus(error);
 }
 
 void SSLInfo::UpdateCertificateTransparencyInfo(
     const ct::CTVerifyResult& ct_verify_result) {
   signed_certificate_timestamps.insert(signed_certificate_timestamps.end(),
                                        ct_verify_result.scts.begin(),
                                        ct_verify_result.scts.end());
 
   ct_compliance_details_available = ct_verify_result.ct_policies_applied;
   ct_cert_policy_compliance = ct_verify_result.cert_policy_compliance;
   ct_ev_policy_compliance = ct_verify_result.ev_policy_compliance;
 }
 
 }  // namespace net