Ignore host certificate in remoting::V2Authenticator on the client side.

remoting/protocol/v2_authenticator.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "remoting/protocol/v2_authenticator.h"
 
 #include <utility>
 
 #include "base/base64.h"
 #include "base/logging.h"
@@ skipping 74 matching lines @@
 
 void V2Authenticator::ProcessMessage(const buzz::XmlElement* message,
                                      const base::Closure& resume_callback) {
   ProcessMessageInternal(message);
   resume_callback.Run();
 }
 
 void V2Authenticator::ProcessMessageInternal(const buzz::XmlElement* message) {
   DCHECK_EQ(state(), WAITING_MESSAGE);
 
-  // Parse the certificate.
-  std::string base64_cert = message->TextNamed(kCertificateTag);
-  if (!base64_cert.empty()) {
-    if (!base::Base64Decode(base64_cert, &remote_cert_)) {
-      LOG(WARNING) << "Failed to decode certificate received from the peer.";
-      remote_cert_.clear();
-    }
-  }
-
-  // Client always expect certificate in the first message.
-  if (!is_host_side() && remote_cert_.empty()) {
-    LOG(WARNING) << "No valid host certificate.";
-    state_ = REJECTED;
-    rejection_reason_ = PROTOCOL_ERROR;
-    return;
-  }
-
   const buzz::XmlElement* eke_element = message->FirstNamed(kEkeTag);
   if (!eke_element) {
     LOG(WARNING) << "No eke-message found.";
     state_ = REJECTED;
     rejection_reason_ = PROTOCOL_ERROR;
     return;
   }
 
   for (; eke_element; eke_element = eke_element->NextNamed(kEkeTag)) {
     std::string base64_message = eke_element->BodyText();
@@ skipping 67 matching lines @@
 
 scoped_ptr<ChannelAuthenticator>
 V2Authenticator::CreateChannelAuthenticator() const {
   DCHECK_EQ(state(), ACCEPTED);
   CHECK(!auth_key_.empty());
 
   if (is_host_side()) {
     return SslHmacChannelAuthenticator::CreateForHost(
         local_cert_, local_key_pair_, auth_key_);
   } else {
-    return SslHmacChannelAuthenticator::CreateForClient(
-        remote_cert_, auth_key_);
+    return SslHmacChannelAuthenticator::CreateForClient(auth_key_);
   }
 }
 
 bool V2Authenticator::is_host_side() const {
   return local_key_pair_.get() != nullptr;
 }
 
 }  // namespace protocol
 }  // namespace remoting