diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-07-01 16:22:27 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-07-01 16:22:27 +0000 |
| commit | 30bd4e355cc33a44a3f8a17a935807b062e57089 (patch) | |
| tree | 2388711ae1441fc2008efce7787d83a76f7e2c49 /net/base | |
| parent | e0cd5d03d07b1354beb04414ef5d69869c4c037f (diff) | |
| download | chromium_src-30bd4e355cc33a44a3f8a17a935807b062e57089.zip chromium_src-30bd4e355cc33a44a3f8a17a935807b062e57089.tar.gz chromium_src-30bd4e355cc33a44a3f8a17a935807b062e57089.tar.bz2 | |
Detect Kaspersky SSL MITM and give a helpful error message.
BUG=86208
TEST=Install Kaspersky Internet security and configure SSL MITM. Navigate to an HTTPS page. Check that the error message is helpful and not generic.
Review URL: http://codereview.chromium.org/7275027
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@91298 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/base')
| -rw-r--r-- | net/base/net_error_list.h | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/net/base/net_error_list.h b/net/base/net_error_list.h index ef44b46..cfde9d8 100644 --- a/net/base/net_error_list.h +++ b/net/base/net_error_list.h @@ -187,6 +187,7 @@ NET_ERROR(MANDATORY_PROXY_CONFIGURATION_FAILED, -131) // We detected an ESET product intercepting our HTTPS connections. Since these // products are False Start intolerant, we return this error so that we can // give the user a helpful error message rather than have the connection hang. +// See also: KASPERSKY_ANTI_VIRUS_SSL_INTERCEPTION NET_ERROR(ESET_ANTI_VIRUS_SSL_INTERCEPTION, -132) // We've hit the max socket limit for the socket pool while preconnecting. We @@ -231,6 +232,13 @@ NET_ERROR(SSL_CLIENT_AUTH_SIGNATURE_FAILED, -141) // which exceeds size threshold). NET_ERROR(MSG_TOO_BIG, -142) +// We detected a Kaspersky product intercepting our HTTPS connections. This +// interacts badly with our SSL stack for unknown reasons (disabling False +// Start doesn't help). We return this error so that we can give the user a +// helpful error message rather than have the connection hang. +// See also: ESET_ANTI_VIRUS_SSL_INTERCEPTION +NET_ERROR(KASPERSKY_ANTI_VIRUS_SSL_INTERCEPTION, -143) + // Connection was aborted for switching to another ptotocol. // WebSocket abort SocketStream connection when alternate protocol is found. NET_ERROR(PROTOCOL_SWITCHED, -146) @@ -238,7 +246,7 @@ NET_ERROR(PROTOCOL_SWITCHED, -146) // Returned when attempting to bind an address that is already in use. NET_ERROR(ADDRESS_IN_USE, -147) -// NOTE: error codes 143-145 are available, please use those before adding +// NOTE: error codes 144-145 are available, please use those before adding // 148. // Certificate error codes |