Add TLS-SRP (RFC 5054) support

net/base/ssl_config_service.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H_
 #define NET_BASE_SSL_CONFIG_SERVICE_H_
 #pragma once
 
 #include <vector>
 
@@ skipping 73 matching lines @@
   std::vector<CertAndStatus> allowed_bad_certs;
 
   // True if we should send client_cert to the server.
   bool send_client_cert;
 
   bool verify_ev_cert;  // True if we should verify the certificate for EV.
 
   bool ssl3_fallback;  // True if we are falling back to SSL 3.0 (one still
                        // needs to clear tls1_enabled).
 
+  bool use_tls_auth; // True if we should allow the use of SRP cipher suites.
+  bool require_tls_auth; // True if we should only use SRP cipher suites.
+  std::string tls_username;
+  std::string tls_password;
+
   // The list of application level protocols supported. If set, this will
   // enable Next Protocol Negotiation (if supported). This is a list of 8-bit
   // length prefixed strings. The order of the protocols doesn't matter expect
   // for one case: if the server supports Next Protocol Negotiation, but there
   // is no overlap between the server's and client's protocol sets, then the
   // first protocol in this list will be requested by the client.
   std::string next_protos;
 
   scoped_refptr<X509Certificate> client_cert;
 };
@@ skipping 85 matching lines @@
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_SSL_CONFIG_SERVICE_H_