tree 15f0128fe1d3663b00a9a61adb9f24509b9bfc63
parent 83760d3323bb88e46761382cb17f0ea3e62ebc63
author QUICHE team <quiche-dev@google.com> 1579907556 -0800
committer Copybara-Service <copybara-worker@google.com> 1579907584 -0800

Add an enumeration of client certificate modes to quic_types.h.

ClientCertMode is used to configure server endpoints.  It tells the endpoint
whether it should request a client certificate, and whether it should allow
"unauthenticated" connections (when the client does not have a certificate).

TLS 1.3 supports three modes for the server:
 - No client certificate requested
 - Request a client certificate but allow unauthenticated connections
 - Request a client certificate and reject unauthenticated connections

See go/quic-tls-client-certificates for details.

gfe-relnote: no change in behavior (new enum definition only).
PiperOrigin-RevId: 291452671
Change-Id: Iaab64381451af7ea0cd2a324d3262ae1e46d0bcd