OpenSSL/NSS implementation of ProofVerfifier.

net/quic/quic_crypto_client_stream.h

Index: net/quic/quic_crypto_client_stream.h
diff --git a/net/quic/quic_crypto_client_stream.h b/net/quic/quic_crypto_client_stream.h
index e85a764049a22c9c5ab6511895406f6ae86567d3..86633da2bee323b12081dfa69c24cb1cf463b004 100644
--- a/net/quic/quic_crypto_client_stream.h
+++ b/net/quic/quic_crypto_client_stream.h
@@ -47,12 +47,18 @@ class NET_EXPORT_PRIVATE QuicCryptoClientStream : public QuicCryptoStream {
     STATE_IDLE,
     STATE_SEND_CHLO,
     STATE_RECV_REJ,
+    STATE_VERIFY_PROOF,
+    STATE_VERIFY_PROOF_COMPLETED,

[wtc, 2013/07/03 00:20:26]

Nit: COMPLETED => COMPLETE

by our convention of state machines.

[ramant (doing other things), 2013/07/03 05:46:34]

Done.

     STATE_RECV_SHLO,
   };
 
   // DoHandshakeLoop performs a step of the handshake state machine. Note that
   // |in| is NULL for the first call.

[wtc, 2013/07/03 00:20:26]

Nit: document the |result| argument.

[ramant (doing other things), 2013/07/03 05:46:34]

Done.

-  void DoHandshakeLoop(const CryptoHandshakeMessage* in);
+  void DoHandshakeLoop(const CryptoHandshakeMessage* in, int result);
+
+  void OnVerifyProofComplete(int result);
+
+  base::WeakPtrFactory<QuicCryptoClientStream> weak_factory_;
 
   State next_state_;
   // num_client_hellos_ contains the number of client hello messages that this
@@ -66,6 +72,12 @@ class NET_EXPORT_PRIVATE QuicCryptoClientStream : public QuicCryptoStream {
   // Server's hostname
   std::string server_hostname_;
 
+  // Generation counter from QuicCryptoClientConfig's CachedState.
+  uint64 generation_counter_;
+
+  // Error details for ProofVerifier's VerifyProof call.
+  std::string error_details_;
+
   DISALLOW_COPY_AND_ASSIGN(QuicCryptoClientStream);
 };