Index: net/quic/crypto/proof_verifier_chromium.cc |
diff --git a/net/quic/crypto/proof_verifier_chromium.cc b/net/quic/crypto/proof_verifier_chromium.cc |
index eb5f20ae70d74a1d1ac194b7e95eba770a4d0136..529570af035963d78dbc15aacf4f000dccb84a61 100644 |
--- a/net/quic/crypto/proof_verifier_chromium.cc |
+++ b/net/quic/crypto/proof_verifier_chromium.cc |
@@ -335,7 +335,10 @@ int ProofVerifierChromium::Job::DoVerifyCertComplete(int result) { |
cert_verify_result.verified_cert.get(), |
TransportSecurityState::ENABLE_PIN_REPORTS, |
&verify_details_->pinning_failure_log)) { |
- result = ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN; |
+ if (cert_verify_result.is_issued_by_known_root) |
+ result = ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN; |
+ else |
+ verify_details_->cert_verify_result.pkp_bypassed = true; |
} |
if (result != OK) { |