| Index: net/quic/crypto/proof_source.h
|
| diff --git a/net/quic/crypto/proof_source.h b/net/quic/crypto/proof_source.h
|
| deleted file mode 100644
|
| index fe36c9af9c220b025349609fc55430b42ae64af6..0000000000000000000000000000000000000000
|
| --- a/net/quic/crypto/proof_source.h
|
| +++ /dev/null
|
| @@ -1,59 +0,0 @@
|
| -// Copyright (c) 2013 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#ifndef NET_QUIC_CRYPTO_PROOF_SOURCE_H_
|
| -#define NET_QUIC_CRYPTO_PROOF_SOURCE_H_
|
| -
|
| -#include <string>
|
| -#include <vector>
|
| -
|
| -#include "net/base/ip_endpoint.h"
|
| -#include "net/base/net_export.h"
|
| -
|
| -namespace net {
|
| -
|
| -// ProofSource is an interface by which a QUIC server can obtain certificate
|
| -// chains and signatures that prove its identity.
|
| -class NET_EXPORT_PRIVATE ProofSource {
|
| - public:
|
| - virtual ~ProofSource() {}
|
| -
|
| - // GetProof finds a certificate chain for |hostname|, sets |out_certs| to
|
| - // point to it (in leaf-first order), calculates a signature of
|
| - // |server_config| using that chain and puts the result in |out_signature|.
|
| - //
|
| - // The signature uses SHA-256 as the hash function and PSS padding when the
|
| - // key is RSA.
|
| - //
|
| - // The signature uses SHA-256 as the hash function when the key is ECDSA.
|
| - //
|
| - // If |ecdsa_ok| is true, the signature may use an ECDSA key. Otherwise, the
|
| - // signature must use an RSA key.
|
| - //
|
| - // |out_certs| is a pointer to a pointer, not a pointer to an array.
|
| - //
|
| - // The number of certificate chains is expected to be small and fixed thus
|
| - // the ProofSource retains ownership of the contents of |out_certs|. The
|
| - // expectation is that they will be cached forever.
|
| - //
|
| - // The signature values should be cached because |server_config| will be
|
| - // somewhat static. However, since they aren't bounded, the ProofSource may
|
| - // wish to evicit entries from that cache, thus the caller takes ownership of
|
| - // |*out_signature|.
|
| - //
|
| - // |hostname| may be empty to signify that a default certificate should be
|
| - // used.
|
| - //
|
| - // This function may be called concurrently.
|
| - virtual bool GetProof(const IPEndPoint& server_ip,
|
| - const std::string& hostname,
|
| - const std::string& server_config,
|
| - bool ecdsa_ok,
|
| - const std::vector<std::string>** out_certs,
|
| - std::string* out_signature) = 0;
|
| -};
|
| -
|
| -} // namespace net
|
| -
|
| -#endif // NET_QUIC_CRYPTO_PROOF_SOURCE_H_
|
|
|