Index: net/socket/ssl_client_socket_nss.cc |
=================================================================== |
--- net/socket/ssl_client_socket_nss.cc (revision 44586) |
+++ net/socket/ssl_client_socket_nss.cc (working copy) |
@@ -1223,8 +1223,8 @@ |
continue; |
// Only check unexpired certs. |
if (CERT_CheckCertValidTimes(cert, PR_Now(), PR_TRUE) == |
- secCertTimeValid && |
- NSS_CmpCertChainWCANames(cert, ca_names) == SECSuccess) { |
+ secCertTimeValid && (!ca_names->nnames || |
+ NSS_CmpCertChainWCANames(cert, ca_names) == SECSuccess)) { |
privkey = PK11_FindKeyByAnyCert(cert, wincx); |
if (privkey) { |
X509Certificate* x509_cert = X509Certificate::CreateFromHandle( |