Chromium Code Reviews| Index: net/quic/crypto/proof_verifier_chromium.cc |
| diff --git a/net/quic/crypto/proof_verifier_chromium.cc b/net/quic/crypto/proof_verifier_chromium.cc |
| index eb5f20ae70d74a1d1ac194b7e95eba770a4d0136..529570af035963d78dbc15aacf4f000dccb84a61 100644 |
| --- a/net/quic/crypto/proof_verifier_chromium.cc |
| +++ b/net/quic/crypto/proof_verifier_chromium.cc |
| @@ -335,7 +335,10 @@ int ProofVerifierChromium::Job::DoVerifyCertComplete(int result) { |
| cert_verify_result.verified_cert.get(), |
| TransportSecurityState::ENABLE_PIN_REPORTS, |
| &verify_details_->pinning_failure_log)) { |
| - result = ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN; |
| + if (cert_verify_result.is_issued_by_known_root) |
| + result = ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN; |
| + else |
| + verify_details_->cert_verify_result.pkp_bypassed = true; |
|
Ryan Sleevi
2016/06/09 22:09:05
Move this to be on ProofVerifyDetailsChromium (e.g
|
| } |
| if (result != OK) { |