diff options
| author | wtc@chromium.org <wtc@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-10-19 23:57:45 +0000 |
|---|---|---|
| committer | wtc@chromium.org <wtc@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-10-19 23:57:45 +0000 |
| commit | e83b25595db2fb55a6ca22c2585d83d6e1eb231d (patch) | |
| tree | dcfe6bce429c138917a8d432b475f3a3af284df8 /crypto | |
| parent | 69fc792fddb2f8fbd5f6467a555dd4320d25e21a (diff) | |
| download | chromium_src-e83b25595db2fb55a6ca22c2585d83d6e1eb231d.zip chromium_src-e83b25595db2fb55a6ca22c2585d83d6e1eb231d.tar.gz chromium_src-e83b25595db2fb55a6ca22c2585d83d6e1eb231d.tar.bz2 | |
Enable MD5 certificate signatures until we figure out how to deal
with the weak certificate signature unit tests.
Map the new NSS error code SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED
to net::ERR_CERT_WEAK_SIGNATURE.
Refactor MapCertErrorToCertStatusto avoid duplicating code with
MapSecurityError.
R=rsleevi@chromium.org
BUG=151692
TEST=none
Review URL: https://chromiumcodereview.appspot.com/11192076
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@163098 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/nss_util.cc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/crypto/nss_util.cc b/crypto/nss_util.cc index 47b4d06..6af70a4 100644 --- a/crypto/nss_util.cc +++ b/crypto/nss_util.cc @@ -504,6 +504,11 @@ class NSSInitSingleton { } root_ = InitDefaultRootCerts(); + + // MD5 certificate signatures are disabled by default in NSS 3.14. + // Enable MD5 certificate signatures until we figure out how to deal + // with the weak certificate signature unit tests. + NSS_SetAlgorithmPolicy(SEC_OID_MD5, NSS_USE_ALG_IN_CERT_SIGNATURE, 0); #endif // defined(USE_NSS) } } |