Add a ServerProofVerifier interface to QUIC.
This is a server-side equivalent of ProofVerifier. It is used to verify a
client's certificate chain. It will only be used when the server needs to
request client certificates.
ServerProofVerifier drops the VerifyProof() function (not used in TLS 1.3) and
the |hostname|, |ocsp_response|, and |cert_sct| parameters of VerifyCertChain()
(those aren't really meaningful to a server).
See go/quic-tls-client-certificates for the full design doc and context.
gfe-relnote: no functional changes (only adds an interface).
PiperOrigin-RevId: 291429810
Change-Id: Ifd7deb6e72294b2626572b6555e3b5e2976b286e
1 file changed
