diff options
author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-03-12 23:05:56 +0000 |
---|---|---|
committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-03-12 23:05:56 +0000 |
commit | 24c3938589c45f9425adb2d57c5bde24f06a0f3a (patch) | |
tree | 61eb66c1fd983cd1489649b504fd637e32a39ef8 /net/http | |
parent | d667da0289e1a8b0b582b9a9b3ea1845d1f87aa2 (diff) | |
download | chromium_src-24c3938589c45f9425adb2d57c5bde24f06a0f3a.zip chromium_src-24c3938589c45f9425adb2d57c5bde24f06a0f3a.tar.gz chromium_src-24c3938589c45f9425adb2d57c5bde24f06a0f3a.tar.bz2 |
Add additional information to pinning reports.
We suspect that malware might be corrupting our pinning information somehow.
BUG=none
Review URL: https://codereview.chromium.org/197663004
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@256689 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/http')
-rw-r--r-- | net/http/transport_security_state.cc | 5 | ||||
-rw-r--r-- | net/http/transport_security_state.h | 6 |
2 files changed, 11 insertions, 0 deletions
diff --git a/net/http/transport_security_state.cc b/net/http/transport_security_state.cc index 6a7a14f..8498d26 100644 --- a/net/http/transport_security_state.cc +++ b/net/http/transport_security_state.cc @@ -718,6 +718,11 @@ bool TransportSecurityState::IsGooglePinnedProperty(const std::string& host, } // static +const char* const* TransportSecurityState::GooglePinsForDebugging() { + return kGoogleAcceptableCerts; +} + +// static void TransportSecurityState::ReportUMAOnPinFailure(const std::string& host) { std::string canonicalized_host = CanonicalizeHost(host); diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h index 3511b69..7696cbb 100644 --- a/net/http/transport_security_state.h +++ b/net/http/transport_security_state.h @@ -248,6 +248,12 @@ class NET_EXPORT TransportSecurityState static bool IsGooglePinnedProperty(const std::string& host, bool sni_enabled); + // GooglePinsForDebugging returns an array of SHA-1 pins for Google + // properties - each 20 bytes long - with a NULL pointer signalling the end + // of the array. This is a temporary debugging measure to check for binary + // alteration / corruption. + static const char* const* GooglePinsForDebugging(); + // The maximum number of seconds for which we'll cache an HSTS request. static const long int kMaxHSTSAgeSecs; |