Set Token-Binding HTTP header

Adds a new method to SSLClientSocket to get the Token Binding from an SSL
connection where Token Binding was negotiated, and uses that to add the
Set-Token-Binding HTTP header (only when Token Binding was negotiated).

BUG=467312

Review URL: https://codereview.chromium.org/1378613004

Cr-Commit-Position: refs/heads/master@{#371347}

1 files changed, 39 insertions, 0 deletions

diff --git a/net/ssl/token_binding_nss.cc b/net/ssl/token_binding_nss.cc
new file mode 100644
index 0000000..bb18498
--- /dev/null
+++ b/net/ssl/token_binding_nss.cc
@@ -0,0 +1,39 @@
+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "token_binding.h"
+
+#include "net/base/net_errors.h"
+
+namespace net {
+
+Error BuildTokenBindingMessageFromTokenBindings(
+    const std::vector<base::StringPiece>& token_bindings,
+    std::string* out) {
+  NOTREACHED();
+  return ERR_NOT_IMPLEMENTED;
+}
+
+Error BuildProvidedTokenBinding(crypto::ECPrivateKey* key,
+                                const std::vector<uint8_t>& ekm,
+                                std::string* out) {
+  NOTREACHED();
+  return ERR_NOT_IMPLEMENTED;
+}
+
+bool ParseTokenBindingMessage(base::StringPiece token_binding_message,
+                              base::StringPiece* ec_point,
+                              base::StringPiece* signature) {
+  NOTREACHED();
+  return false;
+}
+
+bool VerifyEKMSignature(base::StringPiece ec_point,
+                        base::StringPiece signature,
+                        base::StringPiece ekm) {
+  NOTREACHED();
+  return false;
+}
+
+}  // namespace net