tree 2187604398cb8dab1ba946c789be392257edaea5
parent 7e9fac71bc1f4d907f7cfd1b73cf31a64432c44f
author QUICHE team <quiche-dev@google.com> 1760115990 -0700
committer Copybara-Service <copybara-worker@google.com> 1760116044 -0700

Support configuring client key shares and SSL compliance policy

This change adds two client config params needed by Chromium to support configuring QUIC connections under certain Chrome enterprise policies that affect TLS handshake configuration.

1. Client key shares: Configure the groups sent in the key_share extension of the initial ClientHello. This is gated by BORINGSSL_API_VERSION because the API to configure client key shares was recently added, and the code to configure it is a no-op unless the caller sets a non-empty list.

2. SSL compliance policy: This allows configuring TLS 1.3 ciphers to reflect a non-default preference order. This code is a no-op unless the caller sets a non-default value.

Protected by No behavior changes unless caller configures non-default values.

PiperOrigin-RevId: 817690837