Support for client certs in ssl_server_socket.

net/socket/ssl_server_socket_nss.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_SERVER_SOCKET_NSS_H_
 #define NET_SOCKET_SSL_SERVER_SOCKET_NSS_H_
 
 #include <certt.h>
 #include <keyt.h>
 #include <nspr.h>
@@ skipping 14 matching lines @@
   // See comments on CreateSSLServerSocket for details of how these
   // parameters are used.
   SSLServerSocketNSS(scoped_ptr<StreamSocket> socket,
                      scoped_refptr<X509Certificate> certificate,
                      crypto::RSAPrivateKey* key,
                      const SSLConfig& ssl_config);
   ~SSLServerSocketNSS() override;
 
   // SSLServerSocket interface.
   int Handshake(const CompletionCallback& callback) override;
+  void SetAllowClientCert(bool allow_client_cert) override;
+  void SetClientCertCAList(const CertificateList& client_cert_ca_list) override;
+  void SetClientCertVerifier(CertVerifier* client_cert_verifier) override;
 
   // SSLSocket interface.
   int ExportKeyingMaterial(const base::StringPiece& label,
                            bool has_context,
                            const base::StringPiece& context,
                            unsigned char* out,
                            unsigned int outlen) override;
   int GetTLSUniqueChannelBinding(std::string* out) override;
 
   // Socket interface (via StreamSocket).
@@ skipping 50 matching lines @@
   void DoReadCallback(int result);
   void DoWriteCallback(int result);
 
   static SECStatus OwnAuthCertHandler(void* arg,
                                       PRFileDesc* socket,
                                       PRBool checksig,
                                       PRBool is_server);
   static void HandshakeCallback(PRFileDesc* socket, void* arg);
 
   int Init();
+  void ExtractClientCert();
 
   // Members used to send and receive buffer.
   bool transport_send_busy_;
   bool transport_recv_busy_;
 
   scoped_refptr<IOBuffer> recv_buffer_;
 
   BoundNetLog net_log_;
 
   CompletionCallback user_handshake_callback_;
@@ skipping 19 matching lines @@
 
   // Options for the SSL socket.
   SSLConfig ssl_config_;
 
   // Certificate for the server.
   scoped_refptr<X509Certificate> cert_;
 
   // Private key used by the server.
   scoped_ptr<crypto::RSAPrivateKey> key_;
 
+  // Certificate of the client.
+  scoped_refptr<X509Certificate> client_cert_;
+
   State next_handshake_state_;
   bool completed_handshake_;
 
+  // Information to be used in CertificateRequest message.
+  CertificateList client_cert_ca_list_;
+
+  // Used to provide callback for client certificate verification.
+  CertVerifier* client_cert_verifier_;
+
   DISALLOW_COPY_AND_ASSIGN(SSLServerSocketNSS);
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_SERVER_SOCKET_NSS_H_