Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(125)

Unified Diff: ios/web/shell/shell_url_request_context_getter.mm

Issue 2067843003: Require a CTVerifier and CTPolicyEnforcer for TLS/QUIC sockets (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Fixup Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « ios/crnet/crnet_environment.mm ('k') | jingle/glue/proxy_resolving_client_socket.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: ios/web/shell/shell_url_request_context_getter.mm
diff --git a/ios/web/shell/shell_url_request_context_getter.mm b/ios/web/shell/shell_url_request_context_getter.mm
index eeb855ecc1f584b0faf2176cb40772a9e79e044c..3440a612146b36200075656f8828a2af6dd9d941 100644
--- a/ios/web/shell/shell_url_request_context_getter.mm
+++ b/ios/web/shell/shell_url_request_context_getter.mm
@@ -19,6 +19,8 @@
#include "ios/web/shell/shell_network_delegate.h"
#include "net/base/cache_type.h"
#include "net/cert/cert_verifier.h"
+#include "net/cert/ct_policy_enforcer.h"
+#include "net/cert/multi_log_ct_verifier.h"
#include "net/dns/host_resolver.h"
#include "net/extras/sqlite/sqlite_persistent_cookie_store.h"
#include "net/http/http_auth_handler_factory.h"
@@ -99,6 +101,10 @@ net::URLRequestContext* ShellURLRequestContextGetter::GetURLRequestContext() {
storage_->set_transport_security_state(
base::WrapUnique(new net::TransportSecurityState()));
+ storage_->set_cert_transparency_verifier(
+ base::WrapUnique(new net::MultiLogCTVerifier));
+ storage_->set_ct_policy_enforcer(
+ base::WrapUnique(new net::CTPolicyEnforcer));
transport_security_persister_.reset(new net::TransportSecurityPersister(
url_request_context_->transport_security_state(), base_path_,
file_task_runner_, false));
@@ -121,6 +127,10 @@ net::URLRequestContext* ShellURLRequestContextGetter::GetURLRequestContext() {
url_request_context_->cert_verifier();
network_session_params.transport_security_state =
url_request_context_->transport_security_state();
+ network_session_params.cert_transparency_verifier =
+ url_request_context_->cert_transparency_verifier();
+ network_session_params.ct_policy_enforcer =
+ url_request_context_->ct_policy_enforcer();
network_session_params.channel_id_service =
url_request_context_->channel_id_service();
network_session_params.net_log = url_request_context_->net_log();
« no previous file with comments | « ios/crnet/crnet_environment.mm ('k') | jingle/glue/proxy_resolving_client_socket.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698