summaryrefslogtreecommitdiffstats
path: root/net/http
diff options
context:
space:
mode:
authoragl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2014-03-12 23:05:56 +0000
committeragl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2014-03-12 23:05:56 +0000
commit24c3938589c45f9425adb2d57c5bde24f06a0f3a (patch)
tree61eb66c1fd983cd1489649b504fd637e32a39ef8 /net/http
parentd667da0289e1a8b0b582b9a9b3ea1845d1f87aa2 (diff)
downloadchromium_src-24c3938589c45f9425adb2d57c5bde24f06a0f3a.zip
chromium_src-24c3938589c45f9425adb2d57c5bde24f06a0f3a.tar.gz
chromium_src-24c3938589c45f9425adb2d57c5bde24f06a0f3a.tar.bz2
Add additional information to pinning reports.
We suspect that malware might be corrupting our pinning information somehow. BUG=none Review URL: https://codereview.chromium.org/197663004 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@256689 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/http')
-rw-r--r--net/http/transport_security_state.cc5
-rw-r--r--net/http/transport_security_state.h6
2 files changed, 11 insertions, 0 deletions
diff --git a/net/http/transport_security_state.cc b/net/http/transport_security_state.cc
index 6a7a14f..8498d26 100644
--- a/net/http/transport_security_state.cc
+++ b/net/http/transport_security_state.cc
@@ -718,6 +718,11 @@ bool TransportSecurityState::IsGooglePinnedProperty(const std::string& host,
}
// static
+const char* const* TransportSecurityState::GooglePinsForDebugging() {
+ return kGoogleAcceptableCerts;
+}
+
+// static
void TransportSecurityState::ReportUMAOnPinFailure(const std::string& host) {
std::string canonicalized_host = CanonicalizeHost(host);
diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h
index 3511b69..7696cbb 100644
--- a/net/http/transport_security_state.h
+++ b/net/http/transport_security_state.h
@@ -248,6 +248,12 @@ class NET_EXPORT TransportSecurityState
static bool IsGooglePinnedProperty(const std::string& host,
bool sni_enabled);
+ // GooglePinsForDebugging returns an array of SHA-1 pins for Google
+ // properties - each 20 bytes long - with a NULL pointer signalling the end
+ // of the array. This is a temporary debugging measure to check for binary
+ // alteration / corruption.
+ static const char* const* GooglePinsForDebugging();
+
// The maximum number of seconds for which we'll cache an HSTS request.
static const long int kMaxHSTSAgeSecs;