Preserve transport errors for OpenSSL sockets.

net/test/spawned_test_server/base_test_server.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_
 #define NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_
 
 #include <string>
 #include <utility>
 #include <vector>
@@ skipping 93 matching lines @@
 
     // NOTE: the values of these enumerators are passed to the the Python test
     // server. Do not change them.
     enum TLSIntolerantLevel {
       TLS_INTOLERANT_NONE = 0,
       TLS_INTOLERANT_ALL = 1,  // Intolerant of all TLS versions.
       TLS_INTOLERANT_TLS1_1 = 2,  // Intolerant of TLS 1.1 or higher.
       TLS_INTOLERANT_TLS1_2 = 3,  // Intolerant of TLS 1.2 or higher.
     };
 
+    // Values which control how the server reacts in response to a ClientHello
+    // it is intolerant of.
+    enum TLSIntoleranceType {
+      TLS_INTOLERANCE_ALERT = 0,  // Send a handshake_failure alert.
+      TLS_INTOLERANCE_CLOSE = 1,  // Close the connection.
+      TLS_INTOLERANCE_RESET = 2,  // Send a TCP reset.
+    };
+
     // Initialize a new SSLOptions using CERT_OK as the certificate.
     SSLOptions();
 
     // Initialize a new SSLOptions that will use the specified certificate.
     explicit SSLOptions(ServerCertificate cert);
     ~SSLOptions();
 
     // Returns the relative filename of the file that contains the
     // |server_certificate|.
     base::FilePath GetCertificateFile() const;
@@ skipping 40 matching lines @@
 
     // If true, pass the --https-record-resume argument to testserver.py which
     // causes it to log session cache actions and echo the log on
     // /ssl-session-cache.
     bool record_resume;
 
     // If not TLS_INTOLERANT_NONE, the server will abort any handshake that
     // negotiates an intolerant TLS version in order to test version fallback.
     TLSIntolerantLevel tls_intolerant;
 
+    // If |tls_intolerant| is not TLS_INTOLERANT_NONE, how the server reacts to
+    // an intolerant TLS version.
+    TLSIntoleranceType tls_intolerance_type;
+
     // fallback_scsv_enabled, if true, causes the server to process the
     // TLS_FALLBACK_SCSV cipher suite. This cipher suite is sent by Chrome
     // when performing TLS version fallback in response to an SSL handshake
     // failure. If this option is enabled then the server will reject fallback
     // connections.
     bool fallback_scsv_enabled;
 
     // Temporary glue for testing: validation of SCTs is application-controlled
     // and can be appropriately mocked out, so sending fake data here does not
     // affect handshaking behaviour.
@@ skipping 113 matching lines @@
   bool log_to_console_;
 
   scoped_ptr<ScopedPortException> allowed_port_;
 
   DISALLOW_COPY_AND_ASSIGN(BaseTestServer);
 };
 
 }  // namespace net
 
 #endif  // NET_TEST_SPAWNED_TEST_SERVER_BASE_TEST_SERVER_H_