net/http/transport_security_state.h - Issue 2052363002: Enable public key pinning of local trust anchors

Unified Diff: net/http/transport_security_state.h

Issue 2052363002: Enable public key pinning of local trust anchors (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: Created 4 years, 6 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

Index: net/http/transport_security_state.h

diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h

index b74b78d64fdb60664dfd3de3b0c2cd41e420b0dc..9ada895a031c6870c2bbab14aeb05901d8aa08c5 100644

--- a/net/http/transport_security_state.h

+++ b/net/http/transport_security_state.h

@@ -364,6 +364,9 @@ class NET_EXPORT TransportSecurityState

const HashValueVector& hashes,

const GURL& report_uri);

+ // Enables pinning of local trust anchors.

+ void EnableLocalTrustAnchorPinning(bool value);

Ryan Sleevi 2016/06/13 17:03:11 Naming: This does not follow the style guide Docum

Ryan Sleevi 2016/06/13 17:03:12 DESIGN: See the discussion on https://codereview.c

kapishnikov 2016/06/15 00:56:20 Done.

kapishnikov 2016/06/15 00:56:20 I will take a look at the change.

// Parses |value| as a Public-Key-Pins-Report-Only header value and

// sends a HPKP report for |host_port_pair| if |ssl_info| violates the

// pin. Returns true if |value| parses and includes a valid

@@ -493,6 +496,9 @@ class NET_EXPORT TransportSecurityState

// True if static expect-staple state should be used.

bool enable_static_expect_staple_;

+ // True if pinning of local trust anchors is enabled

+ bool enable_local_trust_anchor_pinning_;

ExpectCTReporter* expect_ct_reporter_;

// Keeps track of reports that have been sent recently for