An implementation of chrome.socket.secure().

chrome/common/extensions/api/socket.idl

Index: chrome/common/extensions/api/socket.idl
diff --git a/chrome/common/extensions/api/socket.idl b/chrome/common/extensions/api/socket.idl
index 5b76525352e0cf564682d8f25b2dcb06988b5acb..09ea872b8055a2762ef20f4227d95331b8aa0eef 100644
--- a/chrome/common/extensions/api/socket.idl
+++ b/chrome/common/extensions/api/socket.idl
@@ -107,6 +107,15 @@ namespace socket {
     long prefixLength;
   };
 
+  dictionary TLSVersionConstraints {
+    DOMString? min;
+    DOMString? max;

[Ryan Sleevi, 2013/11/25 17:30:13]

Does this IDL support enums instead? Seems like a good way to make it a stronger
API guarantee (that is, trying to use a newer socket version on an older version
of chrome = throw a WebIDL exception)

[Lally Singh, 2013/12/05 17:07:12]

It does, but not with the identifiers the API spec gave (e.g., "tls1.1").  Would
you prefer to keep the identifiers the same as the flag, or swap the periods
with _ and use the IDL?

+  };
+
+  dictionary SecureOptions {
+    TLSVersionConstraints? tlsVersion;
+  };
+
   callback RecvFromCallback = void (RecvFromInfo recvFromInfo);
 
   callback SendToCallback = void (WriteInfo writeInfo);
@@ -332,6 +341,14 @@ namespace socket {
     // |callback| : Called with an array of strings of the result.
     static void getJoinedGroups(long socketId,
                                 GetJoinedGroupsCallback callback);
+
+    // Start a TLS client connection over the socket.
+    // |socketId| : The existing, connected socket to use.
+    // |options| : Constraints and parameters for the TLS connection.
+    // |callback| : Called when the connection attempt is complete.
+    static void secure(long socketId,
+                       optional SecureOptions options,
+                       ConnectCallback callback);
   };
 
 };