Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(159)

Issue 3170019: Remove dependency on X509Certificate::Cache behaviour when selecting a client certificate on Win (Closed)

Created:
10 years, 4 months ago by Ryan Sleevi
Modified:
9 years, 7 months ago
Reviewers:
wtc, davidben
CC:
chromium-reviews, ben+cc_chromium.org
Visibility:
Public.

Description

Remove dependency on X509Certificate::Cache behaviour when selecting a client certificate on Win On OS X and Linux (cocoa/gtk), the original X509Certificate pointer supplied in SSLCertRequestInfo's client_certs is the one returned when a user selects a certificate. On Windows, a new X509Certificate is created from the selected certificate and returned, rather than the original X509Certificate. This translates to a dependency on X509Certificate::Cache to return the same certificate, which, while presently is true, is an implementation specific detail that should not be relied upon. BUG=none TEST=SSL client authentication continues to work on Windows Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=57003

Patch Set 1 #

Total comments: 2

Patch Set 2 : Address feedback #

Unified diffs Side-by-side diffs Delta from patch set Stats (+10 lines, -5 lines) Patch
M chrome/browser/views/ssl_client_certificate_selector_win.cc View 1 2 chunks +10 lines, -5 lines 0 comments Download

Messages

Total messages: 3 (0 generated)
Ryan Sleevi
David, Since you last touched these, would you mind reviewing? Nothing major, and matches what's ...
10 years, 4 months ago (2010-08-15 07:38:49 UTC) #1
davidben
LGTM http://codereview.chromium.org/3170019/diff/1/2 File chrome/browser/views/ssl_client_certificate_selector_win.cc (right): http://codereview.chromium.org/3170019/diff/1/2#newcode29 chrome/browser/views/ssl_client_certificate_selector_win.cc:29: net::X509Certificate* cert = NULL; Nit: I guess while ...
10 years, 4 months ago (2010-08-16 17:43:07 UTC) #2
wtc
10 years, 4 months ago (2010-08-17 23:43:45 UTC) #3
LGTM.

I agree we don't need to create a new X509Certificate object when we
already have an array of them as input.

http://codereview.chromium.org/3170019/diff/1/2
File chrome/browser/views/ssl_client_certificate_selector_win.cc (right):

http://codereview.chromium.org/3170019/diff/1/2#newcode59
chrome/browser/views/ssl_client_certificate_selector_win.cc:59: cert =
client_cert;
Add a 'break' statement here after you found a match.
Don't forget to add the curly braces.

Powered by Google App Engine
This is Rietveld 408576698