diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-03-20 21:45:02 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-03-20 21:45:02 +0000 |
| commit | a13234c7614c1eadd4dc0236b7afe9e5fcb1c8a1 (patch) | |
| tree | 1d3fb9274bdd8d6db122a2785822a1f7dec7a7a3 /net/data | |
| parent | c51a2e54f5a72553e7b4e27795342dd15596e058 (diff) | |
| download | chromium_src-a13234c7614c1eadd4dc0236b7afe9e5fcb1c8a1.zip chromium_src-a13234c7614c1eadd4dc0236b7afe9e5fcb1c8a1.tar.gz chromium_src-a13234c7614c1eadd4dc0236b7afe9e5fcb1c8a1.tar.bz2 | |
Revert "Revert "net: fallback to online revocation checks for EV status when CRLSet has expired.""
(First landed in r127757, reverted in r127773 because a unittest failed
in debug mode.)
After this change our CRLSet logic is:
* If we have a fresh CRLSet then we don't do online revocation checks unless the
user has configured them. (It can be configured either via the settings UI,
or with the EnableOnlineRevocationChecks policy option.)
* If we don't have a CRLSet, or if it has expired, and we're trying EV verification,
then we require a positive online revocation check in order to show the EV badge.
An invalid revocation check reply will prevent the EV badge, but not hard-fail
the whole verification.
BUG=none
TEST=net_unittests
Review URL: https://chromiumcodereview.appspot.com/9699043
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127800 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/data')
| -rw-r--r-- | net/data/ssl/certificates/README | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/data/ssl/certificates/README b/net/data/ssl/certificates/README index 2006d58..2aedd66 100644 --- a/net/data/ssl/certificates/README +++ b/net/data/ssl/certificates/README @@ -105,5 +105,8 @@ unit tests. 26 Feb 2022 and are generated by net/data/ssl/scripts/generate-redundant-test-chains.sh. +- comodo.chain.pem : A certificate chain for www.comodo.com which should be + recognised as EV. Expires Jun 21 2013. + - ocsp-test-root.pem : A root certificate for the code in net/tools/testserver/minica.py |