diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-03-20 20:04:01 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-03-20 20:04:01 +0000 |
| commit | 05454a435deac9bce39960ea21e218ebde7d17b5 (patch) | |
| tree | 45960c1d2bec94ee1b9b3ec54d9467ba7e1f4b1a /net/data/ssl | |
| parent | 86cd1df6450f0838b670fdff392dd0d8401fc5ae (diff) | |
| download | chromium_src-05454a435deac9bce39960ea21e218ebde7d17b5.zip chromium_src-05454a435deac9bce39960ea21e218ebde7d17b5.tar.gz chromium_src-05454a435deac9bce39960ea21e218ebde7d17b5.tar.bz2 | |
net: fallback to online revocation checks for EV status when CRLSet has expired.
After this change our CRLSet logic is:
* If we have a fresh CRLSet then we don't do online revocation checks unless the
user has configured them. (It can be configured either via the settings UI,
or with the EnableOnlineRevocationChecks policy option.)
* If we don't have a CRLSet, or if it has expired, and we're trying EV verification,
then we require a positive online revocation check in order to show the EV badge.
An invalid revocation check reply will prevent the EV badge, but not hard-fail
the whole verification.
BUG=none
TEST=net_unittests
Review URL: https://chromiumcodereview.appspot.com/9699043
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127757 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/data/ssl')
| -rw-r--r-- | net/data/ssl/certificates/README | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/data/ssl/certificates/README b/net/data/ssl/certificates/README index 2006d58..2aedd66 100644 --- a/net/data/ssl/certificates/README +++ b/net/data/ssl/certificates/README @@ -105,5 +105,8 @@ unit tests. 26 Feb 2022 and are generated by net/data/ssl/scripts/generate-redundant-test-chains.sh. +- comodo.chain.pem : A certificate chain for www.comodo.com which should be + recognised as EV. Expires Jun 21 2013. + - ocsp-test-root.pem : A root certificate for the code in net/tools/testserver/minica.py |