diff options
| author | sergeyu@chromium.org <sergeyu@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-08-23 21:10:02 +0000 |
|---|---|---|
| committer | sergeyu@chromium.org <sergeyu@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-08-23 21:10:02 +0000 |
| commit | 4f38ffc015c54cb3e50443b1797e7753d49d5957 (patch) | |
| tree | f328e16915384ae9e9732c7b1019f7f19c32f0b8 /remoting | |
| parent | 2cb588db952bc9e265c45849907aa1c4d0c6655a (diff) | |
| download | chromium_src-4f38ffc015c54cb3e50443b1797e7753d49d5957.zip chromium_src-4f38ffc015c54cb3e50443b1797e7753d49d5957.tar.gz chromium_src-4f38ffc015c54cb3e50443b1797e7753d49d5957.tar.bz2 | |
Remove DisableOCSP().
Instead of calling DisableOCSP() all SSL socket used in sandbox should be created with reb_checking_enabled flag set to false.
BUG=93273
TEST=None
Review URL: http://codereview.chromium.org/7685040
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@97918 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'remoting')
| -rw-r--r-- | remoting/protocol/jingle_stream_connector.cc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/remoting/protocol/jingle_stream_connector.cc b/remoting/protocol/jingle_stream_connector.cc index 57e0fcd..f953a54 100644 --- a/remoting/protocol/jingle_stream_connector.cc +++ b/remoting/protocol/jingle_stream_connector.cc @@ -44,6 +44,11 @@ net::SSLClientSocket* CreateSSLClientSocket( cert_and_status.der_cert = der_cert; ssl_config.allowed_bad_certs.push_back(cert_and_status); + // Revocation checking is not needed because we use self-signed + // certs. Disable it so that SSL layer doesn't try to initialize + // OCSP (OCSP works only on IO thread). + ssl_config.rev_checking_enabled = false; + // SSLClientSocket takes ownership of the adapter. net::HostPortPair host_and_port( ContentDescription::kChromotingContentName, 0); |