| Index: net/base/ssl_config_service.h
|
| diff --git a/net/base/ssl_config_service.h b/net/base/ssl_config_service.h
|
| index de2ebef7e904d49656cbec3b5dbb77510e858e8a..0a9d569e6d5f6122a2eb9c9bd0b91e4a302de4b3 100644
|
| --- a/net/base/ssl_config_service.h
|
| +++ b/net/base/ssl_config_service.h
|
| @@ -22,6 +22,9 @@ struct SSLConfig {
|
| SSLConfig();
|
| ~SSLConfig();
|
|
|
| + // Returns true if |cert| is one of the certs in |allowed_bad_certs|.
|
| + bool IsAllowedBadCert(X509Certificate* cert) const;
|
| +
|
| bool rev_checking_enabled; // True if server certificate revocation
|
| // checking is enabled.
|
| // SSL 2.0 is not supported.
|
| @@ -79,9 +82,6 @@ struct SSLConfig {
|
| int cert_status;
|
| };
|
|
|
| - // Returns true if |cert| is one of the certs in |allowed_bad_certs|.
|
| - bool IsAllowedBadCert(X509Certificate* cert) const;
|
| -
|
| // Add any known-bad SSL certificate (with its cert status) to
|
| // |allowed_bad_certs| that should not trigger an ERR_CERT_* error when
|
| // calling SSLClientSocket::Connect. This would normally be done in
|
|
|