commit d2866526315d69e0d0331d940f8f9009f72ed3cb
author fayang <fayang@google.com> Wed Feb 12 11:15:27 2020 -0800
committer Copybara-Service <copybara-worker@google.com> Wed Feb 12 11:16:05 2020 -0800
tree f728006621b3d0b3e1f4c18ef6e36789cf422d49
parent f3c80c9af0976661a25986a00cf1ac1e083fabec

gfe-relnote: In QUIC, close connection if decryption key is available before encryption key when TLS handshaker is used. Protected by disabled v99 flag.

Also route the error up to BoringSSL layer.

PiperOrigin-RevId: 294710276
Change-Id: I2af93903e76a81a0578e9791c1ccc25d35f9b5c5

quic/core/tls_handshaker.h

diff --git a/quic/core/tls_handshaker.h b/quic/core/tls_handshaker.h
index 6fa22d0..d6df69b 100644
--- a/quic/core/tls_handshaker.h
+++ b/quic/core/tls_handshaker.h
@@ -75,7 +75,8 @@
   // secrets and application traffic secrets. For a given secret |secret|,
   // |level| indicates which EncryptionLevel it is to be used at, and |is_write|
   // indicates whether it is used for encryption or decryption.
-  void SetEncryptionSecret(EncryptionLevel level,
+  // Returns true if secret is sucessfully set, otherwise, returns false.
+  bool SetEncryptionSecret(EncryptionLevel level,
                            const std::vector<uint8_t>& read_secret,
                            const std::vector<uint8_t>& write_secret) override;