Index: net/http/transport_security_state.cc |
diff --git a/net/http/transport_security_state.cc b/net/http/transport_security_state.cc |
index 3fb95dde9a30666d7ca20abd212c06be775ed026..1df2f86669991ecbc0dd8bb46af20761cb7103b0 100644 |
--- a/net/http/transport_security_state.cc |
+++ b/net/http/transport_security_state.cc |
@@ -545,6 +545,7 @@ struct HSTSPreload { |
bool https_required; |
PublicKeyPins pins; |
SecondLevelDomainName second_level_domain_name; |
+ SSL_CONNECTION_VERSION ssl_version_min; |
}; |
static bool HasPreload(const struct HSTSPreload* entries, size_t num_entries, |
@@ -558,6 +559,7 @@ static bool HasPreload(const struct HSTSPreload* entries, size_t num_entries, |
*ret = false; |
} else { |
out->include_subdomains = entries[j].include_subdomains; |
+ out->ssl_version_min = entries[j].ssl_version_min; |
*ret = true; |
if (!entries[j].https_required) |
out->upgrade_mode = TransportSecurityState::DomainState::MODE_DEFAULT; |
@@ -789,7 +791,8 @@ void TransportSecurityState::AddOrUpdateForcedHosts( |
TransportSecurityState::DomainState::DomainState() |
: upgrade_mode(MODE_FORCE_HTTPS), |
created(base::Time::Now()), |
- include_subdomains(false) { |
+ include_subdomains(false), |
+ ssl_version_min(SSL_CONNECTION_VERSION_SSL3) { |
} |
TransportSecurityState::DomainState::~DomainState() { |