Index: net/spdy/spdy_session.cc |
diff --git a/net/spdy/spdy_session.cc b/net/spdy/spdy_session.cc |
index d316ea2cc457686d57c240b99bb31c2fcfb8ab60..051f2e795f2289e729142bd5e3cfa2b97794bd9a 100644 |
--- a/net/spdy/spdy_session.cc |
+++ b/net/spdy/spdy_session.cc |
@@ -663,7 +663,8 @@ bool SpdySession::CanPool(TransportSecurityState* transport_security_state, |
ssl_info.public_key_hashes, ssl_info.unverified_cert.get(), |
ssl_info.cert.get(), TransportSecurityState::DISABLE_PIN_REPORTS, |
&pinning_failure_log)) { |
- return false; |
+ if (ssl_info.is_issued_by_known_root) |
estark
2016/06/08 17:09:28
optional nit: we might as well bypass CheckPublicK
dadrian
2016/06/08 17:38:51
Done.
|
+ return false; |
} |
return true; |