diff options
| author | wtc@chromium.org <wtc@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-01-28 08:42:20 +0000 |
|---|---|---|
| committer | wtc@chromium.org <wtc@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-01-28 08:42:20 +0000 |
| commit | 73346c964c46f80e37633e5d3c9561d22339e91f (patch) | |
| tree | f1e8eea18f5744e916586c29f148f9933913f030 /base/DEPS | |
| parent | 9bc1a2007193467f3ab9dea938c753e6876df267 (diff) | |
| download | chromium_src-73346c964c46f80e37633e5d3c9561d22339e91f.zip chromium_src-73346c964c46f80e37633e5d3c9561d22339e91f.tar.gz chromium_src-73346c964c46f80e37633e5d3c9561d22339e91f.tar.bz2 | |
Check cert->isRoot to skip extraneous root certificates in certificate
chains.
NSS bug 721288 causes CERT_PKIXVerifyCert to continue extending the
certificate chain after it has reached a root certificate. Detect that
bug and ignore such extraneous root certificates in certificate chains
when checking for weak signature algorithms.
R=rsleevi@chromium.org
BUG=108514
TEST=a new unit test (to be added) that uses the certificate chain sent
by https://images.etrade.wallst.com/ during SSL handshake.
Review URL: http://codereview.chromium.org/9271060
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@119595 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'base/DEPS')
0 files changed, 0 insertions, 0 deletions