| Index: net/socket/ssl_client_socket_nss.cc
|
| ===================================================================
|
| --- net/socket/ssl_client_socket_nss.cc (revision 44586)
|
| +++ net/socket/ssl_client_socket_nss.cc (working copy)
|
| @@ -1223,8 +1223,8 @@
|
| continue;
|
| // Only check unexpired certs.
|
| if (CERT_CheckCertValidTimes(cert, PR_Now(), PR_TRUE) ==
|
| - secCertTimeValid &&
|
| - NSS_CmpCertChainWCANames(cert, ca_names) == SECSuccess) {
|
| + secCertTimeValid && (!ca_names->nnames ||
|
| + NSS_CmpCertChainWCANames(cert, ca_names) == SECSuccess)) {
|
| privkey = PK11_FindKeyByAnyCert(cert, wincx);
|
| if (privkey) {
|
| X509Certificate* x509_cert = X509Certificate::CreateFromHandle(
|
|
|