summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorrsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2011-11-05 04:32:59 +0000
committerrsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2011-11-05 04:32:59 +0000
commitfe697a2f570379091050ac3dc0b3a122883c63ab (patch)
treee82971535c03f20ec15bb3c933c1c6631808ea07
parent9a7ff66bb194b612ba1a2caed8daa2897f3606bf (diff)
downloadchromium_src-fe697a2f570379091050ac3dc0b3a122883c63ab.zip
chromium_src-fe697a2f570379091050ac3dc0b3a122883c63ab.tar.gz
chromium_src-fe697a2f570379091050ac3dc0b3a122883c63ab.tar.bz2
Do not chase AIA information when locating client certificates on Windows.
BUG=103099 Review URL: http://codereview.chromium.org/8437078 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@108775 0039d316-1c4b-4281-b951-d872f2087c98
-rw-r--r--net/socket/ssl_client_socket_nss.cc4
-rw-r--r--net/socket/ssl_client_socket_win.cc4
2 files changed, 6 insertions, 2 deletions
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index 7426c10..0c948a4 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -2278,12 +2278,14 @@ SECStatus SSLClientSocketNSS::PlatformClientAuthHandler(
find_by_issuer_para.pfnFindCallback = ClientCertFindCallback;
PCCERT_CHAIN_CONTEXT chain_context = NULL;
+ DWORD find_flags = CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_FLAG |
+ CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_URL_FLAG;
for (;;) {
// Find a certificate chain.
chain_context = CertFindChainInStore(my_cert_store,
X509_ASN_ENCODING,
- 0,
+ find_flags,
CERT_CHAIN_FIND_BY_ISSUER,
&find_by_issuer_para,
chain_context);
diff --git a/net/socket/ssl_client_socket_win.cc b/net/socket/ssl_client_socket_win.cc
index 98dde95..138265a 100644
--- a/net/socket/ssl_client_socket_win.cc
+++ b/net/socket/ssl_client_socket_win.cc
@@ -506,12 +506,14 @@ void SSLClientSocketWin::GetSSLCertRequestInfo(
find_by_issuer_para.pfnFindCallback = ClientCertFindCallback;
PCCERT_CHAIN_CONTEXT chain_context = NULL;
+ DWORD find_flags = CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_FLAG |
+ CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_URL_FLAG;
for (;;) {
// Find a certificate chain.
chain_context = CertFindChainInStore(my_cert_store,
X509_ASN_ENCODING,
- 0,
+ find_flags,
CERT_CHAIN_FIND_BY_ISSUER,
&find_by_issuer_para,
chain_context);