tree 03bc050e8acdaf7c8691157f653228aa3c6ec253
parent 2f2915d4697d68e0c28bf6392b8ba7ae48ecf95d
author QUICHE team <quiche-dev@google.com> 1579900720 -0800
committer Copybara-Service <copybara-worker@google.com> 1579900753 -0800

Add a ServerProofVerifier interface to QUIC.

This is a server-side equivalent of ProofVerifier.  It is used to verify a
client's certificate chain.  It will only be used when the server needs to
request client certificates.

ServerProofVerifier drops the VerifyProof() function (not used in TLS 1.3) and
the |hostname|, |ocsp_response|, and |cert_sct| parameters of VerifyCertChain()
(those aren't really meaningful to a server).

See go/quic-tls-client-certificates for the full design doc and context.

gfe-relnote: no functional changes (only adds an interface).
PiperOrigin-RevId: 291429810
Change-Id: Ifd7deb6e72294b2626572b6555e3b5e2976b286e