diff options
| author | rsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-10-25 02:19:17 +0000 |
|---|---|---|
| committer | rsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-10-25 02:19:17 +0000 |
| commit | 121202abd9e6edd5b8df26ea0d5c8945cae4db5a (patch) | |
| tree | 5bd16e42b992b6e5d53bcda1bc9e6c0feddb4abf /net/base | |
| parent | da7d86e75fe4a37ef12f3ae4bd28b043932d2aa0 (diff) | |
| download | chromium_src-121202abd9e6edd5b8df26ea0d5c8945cae4db5a.zip chromium_src-121202abd9e6edd5b8df26ea0d5c8945cae4db5a.tar.gz chromium_src-121202abd9e6edd5b8df26ea0d5c8945cae4db5a.tar.bz2 | |
Treat an invalid key usage as an invalid certificate when using OpenSSL
BUG=none
TEST=none
Review URL: http://codereview.chromium.org/8387012
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@107043 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/base')
| -rw-r--r-- | net/base/x509_certificate_openssl.cc | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/net/base/x509_certificate_openssl.cc b/net/base/x509_certificate_openssl.cc index 80e2517..8cc4ef0 100644 --- a/net/base/x509_certificate_openssl.cc +++ b/net/base/x509_certificate_openssl.cc @@ -164,8 +164,6 @@ CertStatus MapCertErrorToCertStatus(int err) { #endif case X509_V_ERR_CERT_REVOKED: return CERT_STATUS_REVOKED; - case X509_V_ERR_KEYUSAGE_NO_CERTSIGN: - return CERT_STATUS_WEAK_SIGNATURE_ALGORITHM; // All these status are mapped to CERT_STATUS_INVALID. case X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE: case X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE: @@ -182,6 +180,7 @@ CertStatus MapCertErrorToCertStatus(int err) { case X509_V_ERR_AKID_SKID_MISMATCH: case X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH: case X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION: + case X509_V_ERR_KEYUSAGE_NO_CERTSIGN: case X509_V_ERR_KEYUSAGE_NO_CRL_SIGN: case X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION: case X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED: |