summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authoragl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-10-14 18:23:54 +0000
committeragl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-10-14 18:23:54 +0000
commitb736e5057cbfaf261c36d61cbc3b8018d202c0a5 (patch)
tree35aa3e87f86e51ed46e3ede300000248186f4a09
parent65b12342acf69cc589a8e3f96ec86f08a25018ee (diff)
downloadchromium_src-b736e5057cbfaf261c36d61cbc3b8018d202c0a5.zip
chromium_src-b736e5057cbfaf261c36d61cbc3b8018d202c0a5.tar.gz
chromium_src-b736e5057cbfaf261c36d61cbc3b8018d202c0a5.tar.bz2
net: update DNSSEC chain embedded extension OID.
We now have an assigned OID in the Google corporate OID subspace. BUG=none TEST=none git-svn-id: svn://svn.chromium.org/chrome/trunk/src@62593 0039d316-1c4b-4281-b951-d872f2087c98
-rw-r--r--net/socket/ssl_client_socket_nss.cc7
1 files changed, 4 insertions, 3 deletions
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index aa8c7fc..9766654 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -2202,9 +2202,10 @@ static DNSValidationResult CheckDNSSECChain(
if (!dnssec_chain_tag_valid) {
// It's harmless if multiple threads enter this block concurrently.
static const uint8 kDNSSECChainOID[] =
- // 1.3.6.1.4.1.11129.13172
- // (iso.org.dod.internet.private.enterprises.google.13172)
- {0x2b, 0x06, 0x01, 0x04, 0x01, 0xd6, 0x79, 0xe6, 0x74};
+ // 1.3.6.1.4.1.11129.2.1.4
+ // (iso.org.dod.internet.private.enterprises.google.googleSecurity.
+ // certificateExtensions.dnssecEmbeddedChain)
+ {0x2b, 0x06, 0x01, 0x04, 0x01, 0xd6, 0x79, 0x02, 0x01, 0x04};
SECOidData oid_data;
memset(&oid_data, 0, sizeof(oid_data));
oid_data.oid.data = const_cast<uint8*>(kDNSSECChainOID);