diff options
| author | rsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-04-25 23:25:48 +0000 |
|---|---|---|
| committer | rsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-04-25 23:25:48 +0000 |
| commit | b5c40cd46e1225a737b2397f598518276ee22388 (patch) | |
| tree | 1c280ba9898831916b19f0fe61224dda54d7dc53 /crypto/mac_security_services_lock.h | |
| parent | cfa6f4e66a10dc138ab923dc402c99867ae27f4c (diff) | |
| download | chromium_src-b5c40cd46e1225a737b2397f598518276ee22388.zip chromium_src-b5c40cd46e1225a737b2397f598518276ee22388.tar.gz chromium_src-b5c40cd46e1225a737b2397f598518276ee22388.tar.bz2 | |
Fix client certificate authentication on Mac and Linux introduced in r178732
When requesting client authentication, the SSL server may send a list of
acceptable CAs. When discovering matching client certificates, the Mac and
Linux implementations were not fully considering all intermediate certificates
when attempting to discover client certificates.
For example, if the client certficate chain was CC -> Intermediate -> Root, and
the server sent a list of acceptable CAs as Root, then on Mac and Linux, CC
would not be considered, whereas on Windows it would. Further, if the server
listed Intermediate as an acceptable CA, then it would work on all platforms.
BUG=224280, 224897
TEST=See https://docs.google.com/a/chromium.org/document/d/19V5_PBSm7OaFLXzTXdiCdSpt1r1yFYJhuH9X41O2oOs/edit?usp=sharing
R=wtc@chromium.org
Review URL: https://chromiumcodereview.appspot.com/13866049
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@196535 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'crypto/mac_security_services_lock.h')
| -rw-r--r-- | crypto/mac_security_services_lock.h | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/crypto/mac_security_services_lock.h b/crypto/mac_security_services_lock.h index 06850cd..fe56c6f 100644 --- a/crypto/mac_security_services_lock.h +++ b/crypto/mac_security_services_lock.h @@ -11,7 +11,6 @@ namespace base { class Lock; } - namespace crypto { // The Mac OS X certificate and key management wrappers over CSSM are not |