diff options
| author | rsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-09-01 02:22:02 +0000 |
|---|---|---|
| committer | rsleevi@chromium.org <rsleevi@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-09-01 02:22:02 +0000 |
| commit | 881b80f580ae99aabf729fc5b4c79cc3ed77da58 (patch) | |
| tree | 4516fca25287bb44f0227e96cd86ded7385095ee /net | |
| parent | 789f0704460436bf8f47e6aa7063be799a754692 (diff) | |
| download | chromium_src-881b80f580ae99aabf729fc5b4c79cc3ed77da58.zip chromium_src-881b80f580ae99aabf729fc5b4c79cc3ed77da58.tar.gz chromium_src-881b80f580ae99aabf729fc5b4c79cc3ed77da58.tar.bz2 | |
Force certificate trust preferences checking on OS X.
BUG=94732
TEST=none
Review URL: http://codereview.chromium.org/7776028
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@99102 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net')
| -rw-r--r-- | net/base/x509_certificate_mac.cc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/net/base/x509_certificate_mac.cc b/net/base/x509_certificate_mac.cc index 9b39de6..5d84068 100644 --- a/net/base/x509_certificate_mac.cc +++ b/net/base/x509_certificate_mac.cc @@ -782,7 +782,8 @@ int X509Certificate::VerifyInternal(const std::string& hostname, tp_action_data.Version = CSSM_APPLE_TP_ACTION_VERSION; // Allow CSSM to download any missing intermediate certificates if an // authorityInfoAccess extension or issuerAltName extension is present. - tp_action_data.ActionFlags = CSSM_TP_ACTION_FETCH_CERT_FROM_NET; + tp_action_data.ActionFlags = CSSM_TP_ACTION_FETCH_CERT_FROM_NET | + CSSM_TP_ACTION_TRUST_SETTINGS; if (flags & VERIFY_REV_CHECKING_ENABLED) { // Require a positive result from an OCSP responder or a CRL (or both) |