Support for client certs in ssl_server_socket.

net/ssl/ssl_cert_request_info.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CERT_REQUEST_INFO_H_
 #define NET_SSL_SSL_CERT_REQUEST_INFO_H_
 
 #include <string>
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "net/base/host_port_pair.h"
 #include "net/base/net_export.h"
 #include "net/ssl/ssl_client_cert_type.h"
 
 namespace net {
 
 class X509Certificate;
 
 // The SSLCertRequestInfo class represents server criteria regarding client
 // certificate required for a secure connection.
 //
 // In TLS 1.1, the CertificateRequest

[Ryan Sleevi, 2015/03/19 04:38:25]

Aside (Unrelated to this CL, strictly speaking): This should be updated for TLS
1.2

In which SupportedSignatureAlgorithms is part of the CertificateRequest

https://tools.ietf.org/html/rfc5246#section-7.4.4

 // message is defined as:
 //   enum {
 //   rsa_sign(1), dss_sign(2), rsa_fixed_dh(3), dss_fixed_dh(4),
 //   rsa_ephemeral_dh_RESERVED(5), dss_ephemeral_dh_RESERVED(6),
 //   fortezza_dms_RESERVED(20), (255)
 //   } ClientCertificateType;
 //
 //   opaque DistinguishedName<1..2^16-1>;
 //
 //   struct {
 //       ClientCertificateType certificate_types<1..2^8-1>;
-//       DistinguishedName certificate_authorities<3..2^16-1>;
+//       DistinguishedName certificate_authorities<0..2^16-1>;
 //   } CertificateRequest;
 class NET_EXPORT SSLCertRequestInfo
     : public base::RefCountedThreadSafe<SSLCertRequestInfo> {
  public:
   SSLCertRequestInfo();
 
   void Reset();
 
   // The host and port of the SSL server that requested client authentication.
   HostPortPair host_and_port;
@@ skipping 14 matching lines @@
 
  private:
   friend class base::RefCountedThreadSafe<SSLCertRequestInfo>;
 
   ~SSLCertRequestInfo();
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CERT_REQUEST_INFO_H_