summaryrefslogtreecommitdiffstats
path: root/net/base/ssl_config_service_win.cc
diff options
context:
space:
mode:
authorrsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-11-11 04:12:53 +0000
committerrsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-11-11 04:12:53 +0000
commit47f7d746b1468ec3b2de9c293749e347234996ba (patch)
tree5a4093494d5e7991001bb3350ccd27fe74f227d8 /net/base/ssl_config_service_win.cc
parent8b70d0ce73dd36bc0042ba7a6d8c4521c369b9fe (diff)
downloadchromium_src-47f7d746b1468ec3b2de9c293749e347234996ba.zip
chromium_src-47f7d746b1468ec3b2de9c293749e347234996ba.tar.gz
chromium_src-47f7d746b1468ec3b2de9c293749e347234996ba.tar.bz2
Add support for restricting the cipher suites that SSLClientSocket(Mac,NSS) use. Restricting SSLClientSocketWin is handled by the existing Windows system policy (which deals in algorithms, not cipher suites).
R=wtc BUG=58831 TEST=SSLClientSocketTest.CipherSuiteDisables Review URL: http://codereview.chromium.org/3845005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@65773 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/base/ssl_config_service_win.cc')
-rw-r--r--net/base/ssl_config_service_win.cc7
1 files changed, 7 insertions, 0 deletions
diff --git a/net/base/ssl_config_service_win.cc b/net/base/ssl_config_service_win.cc
index debea7d..d4153c3 100644
--- a/net/base/ssl_config_service_win.cc
+++ b/net/base/ssl_config_service_win.cc
@@ -82,6 +82,13 @@ bool SSLConfigServiceWin::GetSSLConfigNow(SSLConfig* config) {
config->tls1_enabled = ((protocols & TLS1) != 0);
SSLConfigService::SetSSLConfigFlags(config);
+ // TODO(rsleevi): Possibly respect the registry keys defined in
+ // http://support.microsoft.com/kb/245030 (pre-Vista) or
+ // http://msdn.microsoft.com/en-us/library/bb870930(VS.85).aspx (post-Vista).
+ // Currently, these values are respected implicitly when using
+ // SSLClientSocketWin, but they do not propogate to SSLClientSocketNSS
+ // because we're not currently translating the keys.
+
return true;
}