Populate cert_key_types on OpenSSL.

net/test/spawned_test_server/base_test_server.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_
 #define NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_
 
 #include <string>
 #include <utility>
 #include <vector>
 
 #include "base/compiler_specific.h"
 #include "base/files/file_path.h"
 #include "base/memory/scoped_ptr.h"
 #include "net/base/host_port_pair.h"
+#include "net/ssl/ssl_client_cert_type.h"
 
 class GURL;
 
 namespace base {
 class DictionaryValue;
 }
 
 namespace net {
 
 class AddressList;
@@ skipping 68 matching lines @@
       BULK_CIPHER_RC4    = (1 << 0),
       BULK_CIPHER_AES128 = (1 << 1),
       BULK_CIPHER_AES256 = (1 << 2),
 
       // NOTE: 3DES support in the Python test server has external
       // dependencies and not be available on all machines. Clients may not
       // be able to connect if only 3DES is specified.
       BULK_CIPHER_3DES   = (1 << 3),
     };
 
+    enum ClientKeyType {

[wtc, 2014/04/25 18:52:40]

Nit: I suggest naming this type "ClientCertType" because TLS refers to this as
"certificate_types" as opposed to "key_types".

Update: I believe this enum type is not used, so it can be simply deleted.

[davidben, 2014/04/25 20:52:31]

Oops. Removed.

+      // Special value used to indicate the default setting (rsa_sign).
+      CLIENT_KEY_TYPE_DEFAULT    = 0,
+
+      CLIENT_KEY_TYPE_RSA_SIGN   = (1 << 0),
+      CLIENT_KEY_TYPE_DSS_SIGN   = (1 << 1),
+      CLIENT_KEY_TYPE_ECDSA_SIGN = (1 << 2),
+    };
+
     // NOTE: the values of these enumerators are passed to the the Python test
     // server. Do not change them.
     enum TLSIntolerantLevel {
       TLS_INTOLERANT_NONE = 0,
       TLS_INTOLERANT_ALL = 1,  // Intolerant of all TLS versions.
       TLS_INTOLERANT_TLS1_1 = 2,  // Intolerant of TLS 1.1 or higher.
       TLS_INTOLERANT_TLS1_2 = 3,  // Intolerant of TLS 1.2 or higher.
     };
 
     // Initialize a new SSLOptions using CERT_OK as the certificate.
@@ skipping 25 matching lines @@
     // True if a CertificateRequest should be sent to the client during
     // handshaking.
     bool request_client_certificate;
 
     // If |request_client_certificate| is true, an optional list of files,
     // each containing a single, PEM-encoded X.509 certificates. The subject
     // from each certificate will be added to the certificate_authorities
     // field of the CertificateRequest.
     std::vector<base::FilePath> client_authorities;
 
+    // If |request_client_certificate| is true, an optional list of
+    // SSLClientCertType values to populate the certificate_types field of the
+    // CertificateRequest.
+    std::vector<SSLClientCertType> client_cert_types;
+
     // A bitwise-OR of KeyExchnage that should be used by the
     // HTTPS server, or KEY_EXCHANGE_ANY to indicate that all implemented
     // key exchange algorithms are acceptable.
     int key_exchanges;
 
     // A bitwise-OR of BulkCipher that should be used by the
     // HTTPS server, or BULK_CIPHER_ANY to indicate that all implemented
     // ciphers are acceptable.
     int bulk_ciphers;
 
@@ skipping 132 matching lines @@
   bool log_to_console_;
 
   scoped_ptr<ScopedPortException> allowed_port_;
 
   DISALLOW_COPY_AND_ASSIGN(BaseTestServer);
 };
 
 }  // namespace net
 
 #endif  // NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_