Set Token-Binding HTTP header

net/socket/ssl_client_socket.h

Index: net/socket/ssl_client_socket.h
diff --git a/net/socket/ssl_client_socket.h b/net/socket/ssl_client_socket.h
index 53170827ec9a185ad6e826d1a880ecb1e9aad76e..3b8e3ee5c7f4dbd88f52425006d80c4a5edfd049 100644
--- a/net/socket/ssl_client_socket.h
+++ b/net/socket/ssl_client_socket.h
@@ -126,6 +126,12 @@ class NET_EXPORT SSLClientSocket : public SSLSocket {
   // channel ids are not supported.
   virtual ChannelIDService* GetChannelIDService() const = 0;
 
+  // Returns the provided token binding as a serialized TokenBinding struct as
+  // defined in section 3 of draft-ietf-tokbind-protocol-02. This method has
+  // undefined behavior if the token_binding_negotiated field of SSLInfo is
+  // false (as set by GetSSLInfo).
+  virtual std::string GetProvidedTokenBinding() = 0;
+
   // Returns the state of the handshake when it failed, or |SSL_FAILURE_NONE| if
   // the handshake succeeded. This is used to classify causes of the TLS version
   // fallback.