tree 3de448b6fa8fe5b99a504be8d70ece98f43de7c0
parent db520aba017abbfdac45e3fa550449026efe706b
author wub <wub@google.com> 1635877375 -0700
committer Copybara-Service <copybara-worker@google.com> 1635877427 -0700

Add mTLS support for IETF QUIC.

In QUICHE, this CL adds the code that allows embeders to enable TLS client certificates. In GFE, this CL adds client cert support for Google domains in two types of client cert configurations:
- REQUEST_CLIENT_CERTIFICATE_BUT_DONT_VERIFY
- REQUEST_AND_REQUIRE_CLIENT_CERTIFICATE_BUT_DONT_VERIFY
Other config types are not supported and will cause QUIC_HANDSHAKE_FAILED if such request is received.

Protected by FLAGS_quic_restart_flag_quic_tls_server_support_client_cert.

PiperOrigin-RevId: 407133294