Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(91)

Unified Diff: extensions/browser/api/socket/tls_socket.cc

Issue 2067843003: Require a CTVerifier and CTPolicyEnforcer for TLS/QUIC sockets (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Fixup Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « extensions/browser/api/socket/tls_socket.h ('k') | extensions/browser/api/sockets_tcp/sockets_tcp_api.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: extensions/browser/api/socket/tls_socket.cc
diff --git a/extensions/browser/api/socket/tls_socket.cc b/extensions/browser/api/socket/tls_socket.cc
index 686d37f5ba8110e10a3cf5c8cec3a0463eb654c5..f9df61032a173888412d2f72302b6a984c4f0224 100644
--- a/extensions/browser/api/socket/tls_socket.cc
+++ b/extensions/browser/api/socket/tls_socket.cc
@@ -181,6 +181,8 @@ void TLSSocket::UpgradeSocketToTLS(
scoped_refptr<net::SSLConfigService> ssl_config_service,
net::CertVerifier* cert_verifier,
net::TransportSecurityState* transport_security_state,
+ net::CTVerifier* ct_verifier,
+ net::CTPolicyEnforcer* ct_policy_enforcer,
const std::string& extension_id,
api::socket::SecureOptions* options,
const TLSSocket::SecureCallback& callback) {
@@ -241,6 +243,8 @@ void TLSSocket::UpgradeSocketToTLS(
net::SSLClientSocketContext context;
context.cert_verifier = cert_verifier;
context.transport_security_state = transport_security_state;
+ context.cert_transparency_verifier = ct_verifier;
+ context.ct_policy_enforcer = ct_policy_enforcer;
// Fill in the SSL socket params.
net::SSLConfig ssl_config;
« no previous file with comments | « extensions/browser/api/socket/tls_socket.h ('k') | extensions/browser/api/sockets_tcp/sockets_tcp_api.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698