| Index: net/quic/crypto/crypto_handshake.h
|
| diff --git a/net/quic/crypto/crypto_handshake.h b/net/quic/crypto/crypto_handshake.h
|
| index fec53935326005abe9ab0be06f27a474aec04940..be137ee3c7ec91a616db26d1b8ee36acd62c0f8a 100644
|
| --- a/net/quic/crypto/crypto_handshake.h
|
| +++ b/net/quic/crypto/crypto_handshake.h
|
| @@ -19,6 +19,46 @@ class KeyExchange;
|
| class QuicDecrypter;
|
| class QuicEncrypter;
|
|
|
| +enum HandshakeFailureReason {
|
| + HANDSHAKE_OK = 0,
|
| +
|
| + // Failure reasons for an invalid client nonce in CHLO.
|
| + //
|
| + // TODO(rtenneti): Implement capturing of error from strike register.
|
| + CLIENT_NONCE_UNKNOWN_FAILURE = 100,
|
| + // Invalid client nonce. A possible reason, client nonce had incorrect length.
|
| + CLIENT_NONCE_INVALID_FAILURE,
|
| +
|
| + // Failure reasons for an invalid server nonce in CHLO.
|
| + SERVER_NONCE_INVALID_FAILURE = 200, // Nonce had incorrect length.
|
| + SERVER_NONCE_DECRYPTION_FAILURE, // Unbox of nonce failed.
|
| + SERVER_NONCE_NOT_UNIQUE_FAILURE, // Nonce is not unique.
|
| +
|
| + // Failure reasons for an invalid server config in CHLO.
|
| + //
|
| + // Missing Server config id (kSCID) tag.
|
| + SERVER_CONFIG_INCHOATE_HELLO_FAILURE = 300,
|
| + // GetConfigWithScid couldn't find the Server config id (kSCID).
|
| + SERVER_CONFIG_UNKNOWN_CONFIG_FAILURE,
|
| +
|
| + // Failure reasons for an invalid source-address token.
|
| + //
|
| + // Missing Source-address token (kSourceAddressTokenTag) tag.
|
| + SOURCE_ADDRESS_TOKEN_INVALID_FAILURE = 400,
|
| + // Unbox of Source-address token failed.
|
| + SOURCE_ADDRESS_TOKEN_DECRYPTION_FAILURE,
|
| + // Couldn't parse the unbox'ed Source-address token.
|
| + SOURCE_ADDRESS_TOKEN_PARSE_FAILURE,
|
| + // Source-address token is for a different IP address.
|
| + SOURCE_ADDRESS_TOKEN_DIFFERENT_IP_ADDRESS_FAILURE,
|
| + // The difference between the time in source-address token and |now| is more
|
| + // than |source_address_token_future_secs_|.
|
| + SOURCE_ADDRESS_TOKEN_CLOCK_SKEW_FAILURE,
|
| + // The difference between the time in source-address token and |now| is more
|
| + // than |source_address_token_lifetime_secs_|.
|
| + SOURCE_ADDRESS_TOKEN_EXPIRED_FAILURE,
|
| +};
|
| +
|
| // A CrypterPair contains the encrypter and decrypter for an encryption level.
|
| struct NET_EXPORT_PRIVATE CrypterPair {
|
| CrypterPair();
|
|
|