Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(92)

Side by Side Diff: net/ssl/ssl_config.cc

Issue 1682623002: Disable the TLS version fallback. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: atwilson comments Created 4 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "net/ssl/ssl_config.h" 5 #include "net/ssl/ssl_config.h"
6 6
7 #include "net/cert/cert_verifier.h" 7 #include "net/cert/cert_verifier.h"
8 8
9 namespace net { 9 namespace net {
10 10
11 const uint16_t kDefaultSSLVersionMin = SSL_PROTOCOL_VERSION_TLS1; 11 const uint16_t kDefaultSSLVersionMin = SSL_PROTOCOL_VERSION_TLS1;
12 12
13 const uint16_t kDefaultSSLVersionMax = SSL_PROTOCOL_VERSION_TLS1_2; 13 const uint16_t kDefaultSSLVersionMax = SSL_PROTOCOL_VERSION_TLS1_2;
14 14
15 const uint16_t kDefaultSSLVersionFallbackMin = SSL_PROTOCOL_VERSION_TLS1_1; 15 const uint16_t kDefaultSSLVersionFallbackMin = SSL_PROTOCOL_VERSION_TLS1_2;
16 16
17 SSLConfig::CertAndStatus::CertAndStatus() : cert_status(0) {} 17 SSLConfig::CertAndStatus::CertAndStatus() : cert_status(0) {}
18 18
19 SSLConfig::CertAndStatus::~CertAndStatus() {} 19 SSLConfig::CertAndStatus::~CertAndStatus() {}
20 20
21 SSLConfig::SSLConfig() 21 SSLConfig::SSLConfig()
22 : rev_checking_enabled(false), 22 : rev_checking_enabled(false),
23 rev_checking_required_local_anchors(false), 23 rev_checking_required_local_anchors(false),
24 version_min(kDefaultSSLVersionMin), 24 version_min(kDefaultSSLVersionMin),
25 version_max(kDefaultSSLVersionMax), 25 version_max(kDefaultSSLVersionMax),
(...skipping 39 matching lines...) Expand 10 before | Expand all | Expand 10 after
65 if (verify_ev_cert) 65 if (verify_ev_cert)
66 flags |= CertVerifier::VERIFY_EV_CERT; 66 flags |= CertVerifier::VERIFY_EV_CERT;
67 if (cert_io_enabled) 67 if (cert_io_enabled)
68 flags |= CertVerifier::VERIFY_CERT_IO_ENABLED; 68 flags |= CertVerifier::VERIFY_CERT_IO_ENABLED;
69 if (rev_checking_required_local_anchors) 69 if (rev_checking_required_local_anchors)
70 flags |= CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS; 70 flags |= CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS;
71 return flags; 71 return flags;
72 } 72 }
73 73
74 } // namespace net 74 } // namespace net
OLDNEW
« no previous file with comments | « net/http/http_network_transaction_ssl_unittest.cc ('k') | net/url_request/url_request_unittest.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698