Index: build/config/crypto.gni |
diff --git a/build/config/crypto.gni b/build/config/crypto.gni |
index 99ce428d7a1a8ec9667306b9a6ade5eb832b8d74..7d671cf819deeb7e4aa07eb352a9bde42bd4952c 100644 |
--- a/build/config/crypto.gni |
+++ b/build/config/crypto.gni |
@@ -24,7 +24,12 @@ declare_args() { |
# is unsupported. |
use_openssl_certs = is_android || is_nacl |
-# True if NSS is used for certificate verification. Note that this is |
-# independent from use_openssl. It is possible to use OpenSSL for the crypto |
-# library, but NSS for the platform certificate library. |
+# True if NSS is used for certificate handling. Note that this is independent |
+# from use_openssl. It is possible to use OpenSSL for the crypto library, but |
+# NSS for the platform certificate library. |
use_nss_certs = is_linux |
+ |
+# True if NSS is used for certificate verification. On non-OpenSSL iOS |
+# configurations, certificates use the operating system library, but the |
+# verifier uses the bundled copy of NSS. |
+use_nss_verifier = use_nss_certs || (is_ios && !use_openssl) |