Index: net/base/ssl_config_service.h |
diff --git a/net/base/ssl_config_service.h b/net/base/ssl_config_service.h |
index de2ebef7e904d49656cbec3b5dbb77510e858e8a..0a9d569e6d5f6122a2eb9c9bd0b91e4a302de4b3 100644 |
--- a/net/base/ssl_config_service.h |
+++ b/net/base/ssl_config_service.h |
@@ -22,6 +22,9 @@ struct SSLConfig { |
SSLConfig(); |
~SSLConfig(); |
+ // Returns true if |cert| is one of the certs in |allowed_bad_certs|. |
+ bool IsAllowedBadCert(X509Certificate* cert) const; |
+ |
bool rev_checking_enabled; // True if server certificate revocation |
// checking is enabled. |
// SSL 2.0 is not supported. |
@@ -79,9 +82,6 @@ struct SSLConfig { |
int cert_status; |
}; |
- // Returns true if |cert| is one of the certs in |allowed_bad_certs|. |
- bool IsAllowedBadCert(X509Certificate* cert) const; |
- |
// Add any known-bad SSL certificate (with its cert status) to |
// |allowed_bad_certs| that should not trigger an ERR_CERT_* error when |
// calling SSLClientSocket::Connect. This would normally be done in |