Support for client certs in ssl_server_socket.

net/ssl/ssl_config.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CONFIG_H_
 #define NET_SSL_SSL_CONFIG_H_
 
 #include "base/basictypes.h"
 #include "base/memory/ref_counted.h"
 #include "net/base/net_export.h"
@@ skipping 116 matching lines @@
     std::string der_cert;
     CertStatus cert_status;
   };
 
   // Add any known-bad SSL certificate (with its cert status) to
   // |allowed_bad_certs| that should not trigger an ERR_CERT_* error when
   // calling SSLClientSocket::Connect.  This would normally be done in
   // response to the user explicitly accepting the bad certificate.
   std::vector<CertAndStatus> allowed_bad_certs;
 
-  // True if we should send client_cert to the server.
+  // True if we should send client_cert to the server (when acting as client).
+  // When acting as server, overloaded to mean that we should request the client
+  // to send a cert.
   bool send_client_cert;
 
   bool verify_ev_cert;  // True if we should verify the certificate for EV.
 
   bool version_fallback;  // True if we are falling back to an older protocol
                           // version (one still needs to decrement
                           // version_max).
 
   // If cert_io_enabled is false, then certificate verification will not
   // result in additional HTTP requests. (For example: to fetch missing
@@ skipping 19 matching lines @@
   // |fastradio_padding_eligible| can be true when |fastradio_padding_enabled|
   // is false: in this case, fastradio padding would not be enabled, but
   // metrics can be collected for experiments.
   bool fastradio_padding_enabled;
   bool fastradio_padding_eligible;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CONFIG_H_