Ignore host certificate in remoting::V2Authenticator on the client side.

remoting/protocol/ssl_hmac_channel_authenticator_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "remoting/protocol/ssl_hmac_channel_authenticator.h"
 
 #include <utility>
 
 #include "base/base64.h"
 #include "base/bind.h"
@@ skipping 134 matching lines @@
   MockChannelDoneCallback client_callback_;
   MockChannelDoneCallback host_callback_;
   scoped_ptr<P2PStreamSocket> client_socket_;
   scoped_ptr<P2PStreamSocket> host_socket_;
 
   DISALLOW_COPY_AND_ASSIGN(SslHmacChannelAuthenticatorTest);
 };
 
 // Verify that a channel can be connected using a valid shared secret.
 TEST_F(SslHmacChannelAuthenticatorTest, SuccessfulAuth) {
-  client_auth_ = SslHmacChannelAuthenticator::CreateForClient(
-      host_cert_, kTestSharedSecret);
-  host_auth_ = SslHmacChannelAuthenticator::CreateForHost(
-      host_cert_, key_pair_, kTestSharedSecret);
+  client_auth_ =
+      SslHmacChannelAuthenticator::CreateForClient(kTestSharedSecret);
+  host_auth_ = SslHmacChannelAuthenticator::CreateForHost(host_cert_, key_pair_,
+                                                          kTestSharedSecret);
 
   RunChannelAuth(net::OK, net::OK);
 
   ASSERT_TRUE(client_socket_.get() != nullptr);
   ASSERT_TRUE(host_socket_.get() != nullptr);
 
   StreamConnectionTester tester(host_socket_.get(), client_socket_.get(),
                                 100, 2);
 
   tester.Start();
   message_loop_.Run();
   tester.CheckResults();
 }
 
-// Verify that channels cannot be using invalid shared secret.
+// Verify that channels cannot be connected using invalid shared secret.
 TEST_F(SslHmacChannelAuthenticatorTest, InvalidChannelSecret) {
-  client_auth_ = SslHmacChannelAuthenticator::CreateForClient(
-      host_cert_, kTestSharedSecretBad);
+  client_auth_ =
+      SslHmacChannelAuthenticator::CreateForClient(kTestSharedSecretBad);
   host_auth_ = SslHmacChannelAuthenticator::CreateForHost(
       host_cert_, key_pair_, kTestSharedSecret);
 
   RunChannelAuth(net::ERR_FAILED, net::ERR_FAILED);
 
   ASSERT_TRUE(host_socket_.get() == nullptr);
 }
 
-// Verify that channels cannot be using invalid certificate.
-TEST_F(SslHmacChannelAuthenticatorTest, InvalidCertificate) {
-  // Import a second certificate for the client to expect.
-  scoped_refptr<net::X509Certificate> host_cert2(
-      net::ImportCertFromFile(net::GetTestCertsDirectory(), "ok_cert.pem"));
-  std::string host_cert2_der;
-  ASSERT_TRUE(net::X509Certificate::GetDEREncoded(host_cert2->os_cert_handle(),
-                                                  &host_cert2_der));
-
-  client_auth_ = SslHmacChannelAuthenticator::CreateForClient(
-      host_cert2_der, kTestSharedSecret);
-  host_auth_ = SslHmacChannelAuthenticator::CreateForHost(
-      host_cert_, key_pair_, kTestSharedSecret);
-
-  RunChannelAuth(net::ERR_CERT_INVALID, net::ERR_CONNECTION_CLOSED);
-
-  ASSERT_TRUE(host_socket_.get() == nullptr);
-}
-
 }  // namespace protocol
 }  // namespace remoting