Index: net/quic/crypto/quic_crypto_server_config.h |
diff --git a/net/quic/crypto/quic_crypto_server_config.h b/net/quic/crypto/quic_crypto_server_config.h |
index 3ece064376fcc557ff57a46cbe6968c85e5c8017..e9fe02579d2d0db6c598c6cd193b7b2778aefaa9 100644 |
--- a/net/quic/crypto/quic_crypto_server_config.h |
+++ b/net/quic/crypto/quic_crypto_server_config.h |
@@ -43,26 +43,40 @@ class QuicCryptoServerConfigPeer; |
enum HandshakeFailureReason { |
HANDSHAKE_OK = 0, |
- // Failure reasons for an invalid client nonce. |
+ // Failure reasons for an invalid client nonce in CHLO. |
+ // |
// TODO(rtenneti): Implement capturing of error from strike register. |
CLIENT_NONCE_UNKNOWN_FAILURE = 100, |
+ // Invalid client nonce. A possible reason, client nonce had incorrect length. |
CLIENT_NONCE_INVALID_FAILURE, |
- // Failure reasons for an invalid server nonce. |
- SERVER_NONCE_INVALID_FAILURE = 200, |
- SERVER_NONCE_DECRYPTION_FAILURE, |
- SERVER_NONCE_NOT_UNIQUE_FAILURE, |
+ // Failure reasons for an invalid server nonce in CHLO. |
+ SERVER_NONCE_INVALID_FAILURE = 200, // Nonce had incorrect length. |
+ SERVER_NONCE_DECRYPTION_FAILURE, // Unbox of nonce failed. |
+ SERVER_NONCE_NOT_UNIQUE_FAILURE, // Nonce is not unique. |
- // Failure reasons for an invalid server config. |
+ // Failure reasons for an invalid server config in CHLO. |
+ // |
+ // Missing Server config id (kSCID) tag. |
SERVER_CONFIG_INCHOATE_HELLO_FAILURE = 300, |
+ // GetConfigWithScid couldn't find the Server config id (kSCID). |
SERVER_CONFIG_UNKNOWN_CONFIG_FAILURE, |
- // Failure reasons for an invalid source adddress token. |
+ // Failure reasons for an invalid source-address token. |
+ // |
+ // Missing Source-address token (kSourceAddressTokenTag) tag. |
SOURCE_ADDRESS_TOKEN_INVALID_FAILURE = 400, |
+ // Unbox of Source-address token failed. |
SOURCE_ADDRESS_TOKEN_DECRYPTION_FAILURE, |
+ // Couldn't parse the unbox'ed Source-address token. |
SOURCE_ADDRESS_TOKEN_PARSE_FAILURE, |
+ // Source-address token is for a different IP address. |
SOURCE_ADDRESS_TOKEN_DIFFERENT_IP_ADDRESS_FAILURE, |
+ // The difference between the time in source-address token and |now| is more |
+ // than |source_address_token_future_secs_|. |
SOURCE_ADDRESS_TOKEN_CLOCK_SKEW_FAILURE, |
+ // The difference between the time in source-address token and |now| is more |
+ // than |source_address_token_lifetime_secs_|. |
SOURCE_ADDRESS_TOKEN_EXPIRED_FAILURE, |
}; |