Index: net/quic/crypto/proof_source.h |
diff --git a/net/quic/crypto/proof_source.h b/net/quic/crypto/proof_source.h |
deleted file mode 100644 |
index fe36c9af9c220b025349609fc55430b42ae64af6..0000000000000000000000000000000000000000 |
--- a/net/quic/crypto/proof_source.h |
+++ /dev/null |
@@ -1,59 +0,0 @@ |
-// Copyright (c) 2013 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#ifndef NET_QUIC_CRYPTO_PROOF_SOURCE_H_ |
-#define NET_QUIC_CRYPTO_PROOF_SOURCE_H_ |
- |
-#include <string> |
-#include <vector> |
- |
-#include "net/base/ip_endpoint.h" |
-#include "net/base/net_export.h" |
- |
-namespace net { |
- |
-// ProofSource is an interface by which a QUIC server can obtain certificate |
-// chains and signatures that prove its identity. |
-class NET_EXPORT_PRIVATE ProofSource { |
- public: |
- virtual ~ProofSource() {} |
- |
- // GetProof finds a certificate chain for |hostname|, sets |out_certs| to |
- // point to it (in leaf-first order), calculates a signature of |
- // |server_config| using that chain and puts the result in |out_signature|. |
- // |
- // The signature uses SHA-256 as the hash function and PSS padding when the |
- // key is RSA. |
- // |
- // The signature uses SHA-256 as the hash function when the key is ECDSA. |
- // |
- // If |ecdsa_ok| is true, the signature may use an ECDSA key. Otherwise, the |
- // signature must use an RSA key. |
- // |
- // |out_certs| is a pointer to a pointer, not a pointer to an array. |
- // |
- // The number of certificate chains is expected to be small and fixed thus |
- // the ProofSource retains ownership of the contents of |out_certs|. The |
- // expectation is that they will be cached forever. |
- // |
- // The signature values should be cached because |server_config| will be |
- // somewhat static. However, since they aren't bounded, the ProofSource may |
- // wish to evicit entries from that cache, thus the caller takes ownership of |
- // |*out_signature|. |
- // |
- // |hostname| may be empty to signify that a default certificate should be |
- // used. |
- // |
- // This function may be called concurrently. |
- virtual bool GetProof(const IPEndPoint& server_ip, |
- const std::string& hostname, |
- const std::string& server_config, |
- bool ecdsa_ok, |
- const std::vector<std::string>** out_certs, |
- std::string* out_signature) = 0; |
-}; |
- |
-} // namespace net |
- |
-#endif // NET_QUIC_CRYPTO_PROOF_SOURCE_H_ |