diff options
| author | dgrogan@chromium.org <dgrogan@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-03-20 20:43:12 +0000 |
|---|---|---|
| committer | dgrogan@chromium.org <dgrogan@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-03-20 20:43:12 +0000 |
| commit | 3db41215d4528adfe590e02b3f7907adec4d9e4b (patch) | |
| tree | 1e79dbf6f5c364ac0648dfe9b01e0422020b9a80 /net/data/ssl | |
| parent | 40caa4c2b0101f6c0fb88db9dd82bfdb2ad8f11b (diff) | |
| download | chromium_src-3db41215d4528adfe590e02b3f7907adec4d9e4b.zip chromium_src-3db41215d4528adfe590e02b3f7907adec4d9e4b.tar.gz chromium_src-3db41215d4528adfe590e02b3f7907adec4d9e4b.tar.bz2 | |
Revert 127757 - net: fallback to online revocation checks for EV status when CRLSet has expired.
After this change our CRLSet logic is:
* If we have a fresh CRLSet then we don't do online revocation checks unless the
user has configured them. (It can be configured either via the settings UI,
or with the EnableOnlineRevocationChecks policy option.)
* If we don't have a CRLSet, or if it has expired, and we're trying EV verification,
then we require a positive online revocation check in order to show the EV badge.
An invalid revocation check reply will prevent the EV badge, but not hard-fail
the whole verification.
BUG=none
TEST=net_unittests
Review URL: https://chromiumcodereview.appspot.com/9699043
TBR=agl@chromium.org
Review URL: https://chromiumcodereview.appspot.com/9783001
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127773 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/data/ssl')
| -rw-r--r-- | net/data/ssl/certificates/README | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/net/data/ssl/certificates/README b/net/data/ssl/certificates/README index 2aedd66..2006d58 100644 --- a/net/data/ssl/certificates/README +++ b/net/data/ssl/certificates/README @@ -105,8 +105,5 @@ unit tests. 26 Feb 2022 and are generated by net/data/ssl/scripts/generate-redundant-test-chains.sh. -- comodo.chain.pem : A certificate chain for www.comodo.com which should be - recognised as EV. Expires Jun 21 2013. - - ocsp-test-root.pem : A root certificate for the code in net/tools/testserver/minica.py |