tree 4e19e7d5b7d477f905a68c8720c014580da82c45
parent 0d5d9b338f480bd5256eb58edb06a950d1f77583
author wub <wub@google.com> 1638400298 -0800
committer Copybara-Service <copybara-worker@google.com> 1638400353 -0800

Automated g4 rollback of changelist 291429810.

*** Reason for rollback ***

No needed for mTLS. quic::TlsHandshaker::VerifyCert is sufficient for a QUIC server to verify client certs.

*** Original change description ***

Add a ServerProofVerifier interface to QUIC.

This is a server-side equivalent of ProofVerifier.  It is used to verify a
client's certificate chain.  It will only be used when the server needs to
request client certificates.

ServerProofVerifier drops the VerifyProof() function (not used in TLS 1.3) and
the |hostname|, |ocsp_response|, and |cert_sct| parameters of VerifyCertChain()
(those aren't really meaningful to a server).

See go/quic-tls-client-certificates for the full design doc and cont...

***

PiperOrigin-RevId: 413521549