| Index: components/cronet/android/test/mock_cert_verifier.cc
|
| diff --git a/components/cronet/android/test/mock_cert_verifier.cc b/components/cronet/android/test/mock_cert_verifier.cc
|
| index 945f5ea2d67e48cbd807c1d1fe9e7a40578fb60e..a70a9ea9c2cbfda3630a46d7fc1384078d0c75c4 100644
|
| --- a/components/cronet/android/test/mock_cert_verifier.cc
|
| +++ b/components/cronet/android/test/mock_cert_verifier.cc
|
| @@ -55,6 +55,7 @@ static jlong CreateMockCertVerifier(
|
| JNIEnv* env,
|
| const JavaParamRef<jclass>& jcaller,
|
| const JavaParamRef<jobjectArray>& jcerts,
|
| + const jboolean jknown_root,
|
| const JavaParamRef<jstring>& jtest_data_dir) {
|
| base::FilePath test_data_dir(
|
| base::android::ConvertJavaStringToUTF8(env, jtest_data_dir));
|
| @@ -68,9 +69,8 @@ static jlong CreateMockCertVerifier(
|
| verify_result.verified_cert =
|
| net::ImportCertFromFile(net::GetTestCertsDirectory(), cert);
|
|
|
| - // Let the cert be treated as a known root cert.
|
| - // This will enable HPKP verification.
|
| - verify_result.is_issued_by_known_root = true;
|
| + // By default, HPKP verification is enabled for known trust roots only.
|
| + verify_result.is_issued_by_known_root = jknown_root;
|
|
|
| // Calculate the public key hash and add it to the verify_result.
|
| net::HashValue hashValue;
|
|
|