Add support for GCM cipher suites from RFC 7714.

webrtc/p2p/base/dtlstransport.h

 /*
  *  Copyright 2012 The WebRTC Project Authors. All rights reserved.
  *
  *  Use of this source code is governed by a BSD-style license
  *  that can be found in the LICENSE file in the root of the source
  *  tree. An additional intellectual property rights grant can be found
  *  in the file PATENTS.  All contributing project authors may
  *  be found in the AUTHORS file in the root of the source tree.
  */
 
@@ skipping 17 matching lines @@
 // Everything in this class should be called on the worker thread.
 template<class Base>
 class DtlsTransport : public Base {
  public:
   DtlsTransport(const std::string& name,
                 PortAllocator* allocator,
                 const rtc::scoped_refptr<rtc::RTCCertificate>& certificate)
       : Base(name, allocator),
         certificate_(certificate),
         secure_role_(rtc::SSL_CLIENT),
-        ssl_max_version_(rtc::SSL_PROTOCOL_DTLS_10) {}
+        ssl_max_version_(rtc::SSL_PROTOCOL_DTLS_10),
+        enable_gcm_ciphers_(false) {}
 
   ~DtlsTransport() {
     Base::DestroyAllChannels();
   }
 
   void SetLocalCertificate(
       const rtc::scoped_refptr<rtc::RTCCertificate>& certificate) override {
     certificate_ = certificate;
   }
   bool GetLocalCertificate(
       rtc::scoped_refptr<rtc::RTCCertificate>* certificate) override {
     if (!certificate_)
       return false;
 
     *certificate = certificate_;
     return true;
   }
 
   bool SetSslMaxProtocolVersion(rtc::SSLProtocolVersion version) override {
     ssl_max_version_ = version;
     return true;
   }
 
+  bool SetEnableGcmCiphers(bool enable) override {
+    enable_gcm_ciphers_ = enable;
+    return true;
+  }
+
   bool ApplyLocalTransportDescription(TransportChannelImpl* channel,
                                       std::string* error_desc) override {
     rtc::SSLFingerprint* local_fp =
         Base::local_description()->identity_fingerprint.get();
 
     if (local_fp) {
       // Sanity check local fingerprint.
       if (certificate_) {
         rtc::scoped_ptr<rtc::SSLFingerprint> local_fp_tmp(
             rtc::SSLFingerprint::Create(local_fp->algorithm,
@@ skipping 122 matching lines @@
     }
 
     // Now run the negotiation for the base class.
     return Base::NegotiateTransportDescription(local_role, error_desc);
   }
 
   DtlsTransportChannelWrapper* CreateTransportChannel(int component) override {
     DtlsTransportChannelWrapper* channel = new DtlsTransportChannelWrapper(
         this, Base::CreateTransportChannel(component));
     channel->SetSslMaxProtocolVersion(ssl_max_version_);
+    channel->SetEnableGcmCiphers(enable_gcm_ciphers_);
     return channel;
   }
 
   void DestroyTransportChannel(TransportChannelImpl* channel) override {
     // Kind of ugly, but this lets us do the exact inverse of the create.
     DtlsTransportChannelWrapper* dtls_channel =
         static_cast<DtlsTransportChannelWrapper*>(channel);
     TransportChannelImpl* base_channel = dtls_channel->channel();
     delete dtls_channel;
     Base::DestroyTransportChannel(base_channel);
@@ skipping 21 matching lines @@
                                        remote_fingerprint_->digest.size())) {
       return BadTransportDescription("Failed to apply remote fingerprint.",
                                      error_desc);
     }
     return Base::ApplyNegotiatedTransportDescription(channel, error_desc);
   }
 
   rtc::scoped_refptr<rtc::RTCCertificate> certificate_;
   rtc::SSLRole secure_role_;
   rtc::SSLProtocolVersion ssl_max_version_;
+  bool enable_gcm_ciphers_;
   rtc::scoped_ptr<rtc::SSLFingerprint> remote_fingerprint_;
 };
 
 }  // namespace cricket
 
 #endif  // WEBRTC_P2P_BASE_DTLSTRANSPORT_H_