Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(490)

Unified Diff: net/url_request/url_request_context_builder.cc

Issue 2067843003: Require a CTVerifier and CTPolicyEnforcer for TLS/QUIC sockets (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Extensions Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/url_request/url_request_context_builder.cc
diff --git a/net/url_request/url_request_context_builder.cc b/net/url_request/url_request_context_builder.cc
index edbca15f96b577560041462c57db7494f57d517c..2b3721378d58606dc74f8b2cff469dd35c3f0f03 100644
--- a/net/url_request/url_request_context_builder.cc
+++ b/net/url_request/url_request_context_builder.cc
@@ -21,6 +21,8 @@
#include "net/base/network_delegate_impl.h"
#include "net/base/sdch_manager.h"
#include "net/cert/cert_verifier.h"
+#include "net/cert/ct_policy_enforcer.h"
+#include "net/cert/multi_log_ct_verifier.h"
#include "net/cookies/cookie_monster.h"
#include "net/dns/host_resolver.h"
#include "net/http/http_auth_handler_factory.h"
@@ -223,6 +225,7 @@ void URLRequestContextBuilder::SetHttpNetworkSessionComponents(
params->cert_verifier = context->cert_verifier();
params->transport_security_state = context->transport_security_state();
params->cert_transparency_verifier = context->cert_transparency_verifier();
+ params->ct_policy_enforcer = context->ct_policy_enforcer();
params->proxy_service = context->proxy_service();
params->ssl_config_service = context->ssl_config_service();
params->http_auth_handler_factory = context->http_auth_handler_factory();
@@ -386,6 +389,10 @@ std::unique_ptr<URLRequestContext> URLRequestContextBuilder::Build() {
storage->set_cert_verifier(CertVerifier::CreateDefault());
}
+ storage->set_cert_transparency_verifier(
+ base::MakeUnique<MultiLogCTVerifier>());
+ storage->set_ct_policy_enforcer(base::MakeUnique<CTPolicyEnforcer>());
+
if (throttling_enabled_) {
storage->set_throttler_manager(
base::WrapUnique(new URLRequestThrottlerManager()));

Powered by Google App Engine
This is Rietveld 408576698