diff options
| author | hawk@chromium.org <hawk@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-10-16 00:05:41 +0000 |
|---|---|---|
| committer | hawk@chromium.org <hawk@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-10-16 00:05:41 +0000 |
| commit | 9566343c2165c5823b33932ec836c58953ea4ecb (patch) | |
| tree | 8fff55ed87ccef8a9106c81572f936743eed513d /net/socket | |
| parent | 426e871872cc12212843c3e2b457e86e2c7915b2 (diff) | |
| download | chromium_src-9566343c2165c5823b33932ec836c58953ea4ecb.zip chromium_src-9566343c2165c5823b33932ec836c58953ea4ecb.tar.gz chromium_src-9566343c2165c5823b33932ec836c58953ea4ecb.tar.bz2 | |
Enable certificate revocation and EV certificate validation for Mac
BUG=13377,10910
TEST=none yet, awaiting aonther CL that hooks up the UI
Review URL: http://codereview.chromium.org/209040
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@29219 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/socket')
| -rw-r--r-- | net/socket/ssl_client_socket_mac.cc | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/net/socket/ssl_client_socket_mac.cc b/net/socket/ssl_client_socket_mac.cc index 1a0c6a5..9eef727 100644 --- a/net/socket/ssl_client_socket_mac.cc +++ b/net/socket/ssl_client_socket_mac.cc @@ -635,9 +635,11 @@ int SSLClientSocketMac::DoVerifyCert() { if (!server_cert_) return ERR_UNEXPECTED; - // TODO(hawk): set flags based on the SSLConfig, once SSLConfig is - // fully fleshed out on Mac OS X. int flags = 0; + if (ssl_config_.rev_checking_enabled) + flags |= X509Certificate::VERIFY_REV_CHECKING_ENABLED; + if (ssl_config_.verify_ev_cert) + flags |= X509Certificate::VERIFY_EV_CERT; verifier_.reset(new CertVerifier); return verifier_->Verify(server_cert_, hostname_, flags, &server_cert_verify_result_, &io_callback_); |