Persist the server config that is received via kSCUP.

net/quic/quic_crypto_client_stream.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/quic_crypto_client_stream.h"
 
 #include "net/quic/crypto/crypto_protocol.h"
 #include "net/quic/crypto/crypto_utils.h"
 #include "net/quic/crypto/null_encrypter.h"
 #include "net/quic/quic_client_session_base.h"
@@ skipping 140 matching lines @@
       session()->connection()->clock()->WallNow(),
       cached,
       &crypto_negotiated_params_,
       &error_details);
 
   if (error != QUIC_NO_ERROR) {
     CloseConnectionWithDetails(
         error, "Server config update invalid: " + error_details);
     return;
   }
+  // Persist the new source address token and server config.
+  if (cached->proof_valid()) {

[wtc, 2014/07/31 00:43:06]

If we have access to the proof verifier here, we should verify the proof (for an
https server) that is not yet verified.

[ramant (doing other things), 2014/08/01 19:52:21]

Base on internal CL: 71770356, it looks like  we are not getting certs and proof
when we receive kSCUP message.

Would like to talk to you about async proof verification (may be we could
separate out the state machine for proof verification).

Will hold off checking this change until we merge 71770356. rjshade@: what do
you think? Or is there any advantage to add a TODO for proof verification and
check-in this change for proof's that are already valid.

+    client_session()->OnProofValid(*cached);
+  }
 }
 
 // kMaxClientHellos is the maximum number of times that we'll send a client
 // hello. The value 3 accounts for:
 //   * One failure due to an incorrect or missing source-address token.
 //   * One failure due the server's certificate chain being unavailible and the
 //     server being unwilling to send it without a valid source-address token.
 static const int kMaxClientHellos = 3;
 
 void QuicCryptoClientStream::DoHandshakeLoop(
@@ skipping 338 matching lines @@
     }
   }
   return false;
 }
 
 QuicClientSessionBase* QuicCryptoClientStream::client_session() {
   return reinterpret_cast<QuicClientSessionBase*>(session());
 }
 
 }  // namespace net