Fail the SPDY transaction if it does not meet TLS base requirements.

net/ssl/ssl_connection_status_flags.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CONNECTION_STATUS_FLAGS_H_
 #define NET_SSL_SSL_CONNECTION_STATUS_FLAGS_H_
 
+#include "base/logging.h"
+#include "base/macros.h"
+
 namespace net {
 
 // Status flags for SSLInfo::connection_status.
 enum {
   // The lower 16 bits are reserved for the TLS ciphersuite id.
   SSL_CONNECTION_CIPHERSUITE_SHIFT = 0,
   SSL_CONNECTION_CIPHERSUITE_MASK = 0xffff,
 
   // The next two bits are reserved for the compression used.
   SSL_CONNECTION_COMPRESSION_SHIFT = 16,
@@ skipping 35 matching lines @@
 inline int SSLConnectionStatusToCipherSuite(int connection_status) {
   return (connection_status >> SSL_CONNECTION_CIPHERSUITE_SHIFT) &
          SSL_CONNECTION_CIPHERSUITE_MASK;
 }
 
 inline int SSLConnectionStatusToVersion(int connection_status) {
   return (connection_status >> SSL_CONNECTION_VERSION_SHIFT) &
          SSL_CONNECTION_VERSION_MASK;
 }
 
+inline void SSLConnectionStatusSetCipherSuite(int cipher_suite,
+                                              int* connection_status) {
+  int tmp = *connection_status;
+  // Clear out the old ciphersuite.
+  tmp &= ~(SSL_CONNECTION_CIPHERSUITE_MASK << SSL_CONNECTION_CIPHERSUITE_SHIFT);
+  // Set the new ciphersuite.
+  tmp |= ((cipher_suite & SSL_CONNECTION_CIPHERSUITE_MASK)
+          << SSL_CONNECTION_CIPHERSUITE_SHIFT);
+
+  *connection_status = tmp;
+}
+
+inline void SSLConnectionStatusSetVersion(int version, int* connection_status) {
+  DCHECK_GT(version, 0);

[agl, 2014/05/20 02:45:13]

The minimum should be SSLv3 (and then be >=).

+  DCHECK_LT(version, SSL_CONNECTION_VERSION_MAX);
+
+  int tmp = *connection_status;
+  // Clear out the old version.
+  tmp &= ~(SSL_CONNECTION_VERSION_MASK << SSL_CONNECTION_VERSION_SHIFT);
+  // Set the new version.
+  tmp |=
+      ((version & SSL_CONNECTION_VERSION_MASK) << SSL_CONNECTION_VERSION_SHIFT);
+
+  *connection_status = tmp;
+}
+
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CONNECTION_STATUS_FLAGS_H_