ChromeOS: Add more host verification options for OpenVpn.

Support the --verify-hash and --verify-x509-name options of OpenVPN via ONC.

Note that the ONC validator restricts the possible types passable to --verify-x509-name to "name", "name-prefix" and "subject". See also https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage .

BUG=276291
R=armansito@chromium.org, bartfab@chromium.org, pstew@chromium.org

Review URL: https://codereview.chromium.org/61903002

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@234495 0039d316-1c4b-4281-b951-d872f2087c98

1 files changed, 13 insertions, 0 deletions

diff --git a/components/onc/onc_constants.cc b/components/onc/onc_constants.cc
index 04df0b4..5b65f69 100644
--- a/components/onc/onc_constants.cc
+++ b/components/onc/onc_constants.cc
@@ -265,8 +265,21 @@ const char kStaticChallenge[] = "StaticChallenge";
 const char kTLSAuthContents[] = "TLSAuthContents";
 const char kTLSRemote[] = "TLSRemote";
 const char kVerb[] = "Verb";
+const char kVerifyHash[] = "VerifyHash";
+const char kVerifyX509[] = "VerifyX509";
 }  // namespace openvpn
 
+namespace verify_x509 {
+const char kName[] = "Name";
+const char kType[] = "Type";
+
+namespace types {
+const char kName[] = "name";
+const char kNamePrefix[] = "name-prefix";
+const char kSubject[] = "subject";
+}  // namespace types
+}  // namespace verify_x509
+
 namespace proxy {
 const char kDirect[] = "Direct";
 const char kExcludeDomains[] = "ExcludeDomains";