summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authoragl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-02-21 20:17:24 +0000
committeragl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-02-21 20:17:24 +0000
commitc292ea748c83c95f8ed50ad30cc94a6c0aedd68d (patch)
treec88d6507000c0254ba191ecf53d083323e6067ad
parentfd596127c051e635bafbd3d10cc36348765b25da (diff)
downloadchromium_src-c292ea748c83c95f8ed50ad30cc94a6c0aedd68d.zip
chromium_src-c292ea748c83c95f8ed50ad30cc94a6c0aedd68d.tar.gz
chromium_src-c292ea748c83c95f8ed50ad30cc94a6c0aedd68d.tar.bz2
Merge 122166 - Display an interstitial for weak key errors.
Without this, the request is canceled, but no interstitial is shown. I have checked that all other ERR_CERT_ errors are handled and only ERR_CERT_NON_UNIQUE_NAME is missing. However, I don't see that ERR_CERT_NON_UNIQUE_NAME can actually be returned, so that's probably fine. (There is also ERR_CERT_NOT_IN_DNS, but that should be removed.) BUG=113645 TEST=Import a 512-bit CA (see bug) and try to navigate to a site which uses it. Verify that an interstitial is shown. https://chromiumcodereview.appspot.com/9358060/ TBR=agl@chromium.org Review URL: https://chromiumcodereview.appspot.com/9432007 git-svn-id: svn://svn.chromium.org/chrome/branches/1025/src@122861 0039d316-1c4b-4281-b951-d872f2087c98
-rw-r--r--chrome/renderer/security_filter_peer.cc1
-rw-r--r--content/browser/ssl/ssl_policy.cc1
2 files changed, 2 insertions, 0 deletions
diff --git a/chrome/renderer/security_filter_peer.cc b/chrome/renderer/security_filter_peer.cc
index 994543c..df770a4 100644
--- a/chrome/renderer/security_filter_peer.cc
+++ b/chrome/renderer/security_filter_peer.cc
@@ -38,6 +38,7 @@ SecurityFilterPeer*
case net::ERR_CERT_REVOKED:
case net::ERR_CERT_INVALID:
case net::ERR_CERT_WEAK_SIGNATURE_ALGORITHM:
+ case net::ERR_CERT_WEAK_KEY:
case net::ERR_INSECURE_RESPONSE:
case net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN:
if (ResourceType::IsFrame(resource_type))
diff --git a/content/browser/ssl/ssl_policy.cc b/content/browser/ssl/ssl_policy.cc
index 8bdcb10..d2941cd 100644
--- a/content/browser/ssl/ssl_policy.cc
+++ b/content/browser/ssl/ssl_policy.cc
@@ -64,6 +64,7 @@ void SSLPolicy::OnCertError(SSLCertErrorHandler* handler) {
case net::ERR_CERT_DATE_INVALID:
case net::ERR_CERT_AUTHORITY_INVALID:
case net::ERR_CERT_WEAK_SIGNATURE_ALGORITHM:
+ case net::ERR_CERT_WEAK_KEY:
OnCertErrorInternal(handler, !handler->fatal());
break;
case net::ERR_CERT_NO_REVOCATION_MECHANISM: