diff options
| author | palmer@chromium.org <palmer@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-12-15 22:39:58 +0000 |
|---|---|---|
| committer | palmer@chromium.org <palmer@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-12-15 22:39:58 +0000 |
| commit | 39a6d21d254773c175a852fc38aadc83a58aa17c (patch) | |
| tree | 37110e4ac7185dedb649f9dc7a61eee507bd58f7 /net/base/cert_status_flags.h | |
| parent | 8658ac6d02565f95fc440da5689fc5c72d5f69da (diff) | |
| download | chromium_src-39a6d21d254773c175a852fc38aadc83a58aa17c.zip chromium_src-39a6d21d254773c175a852fc38aadc83a58aa17c.tar.gz chromium_src-39a6d21d254773c175a852fc38aadc83a58aa17c.tar.bz2 | |
Reject certificate chains containing small RSA and DSA keys.
"Small" means less than 1024 bits.
BUG=102949
TEST=net_unittests, X509CertificateTest.*
Review URL: http://codereview.chromium.org/8568040
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@114709 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/base/cert_status_flags.h')
| -rw-r--r-- | net/base/cert_status_flags.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/base/cert_status_flags.h b/net/base/cert_status_flags.h index 79ac1b0..7adddc5 100644 --- a/net/base/cert_status_flags.h +++ b/net/base/cert_status_flags.h @@ -32,6 +32,7 @@ static const CertStatus CERT_STATUS_INVALID = 1 << 7; static const CertStatus CERT_STATUS_WEAK_SIGNATURE_ALGORITHM = 1 << 8; static const CertStatus CERT_STATUS_NOT_IN_DNS = 1 << 9; static const CertStatus CERT_STATUS_NON_UNIQUE_NAME = 1 << 10; +static const CertStatus CERT_STATUS_WEAK_KEY = 1 << 11; // Bits 16 to 31 are for non-error statuses. static const CertStatus CERT_STATUS_IS_EV = 1 << 16; |