Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(764)

Unified Diff: net/quic/chromium/crypto/proof_verifier_chromium.cc

Issue 2225223002: Certificate Transparency: Change CTVerifyResult to have a single list (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: NetLog int to string Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/quic/chromium/crypto/proof_verifier_chromium.cc
diff --git a/net/quic/chromium/crypto/proof_verifier_chromium.cc b/net/quic/chromium/crypto/proof_verifier_chromium.cc
index 9a7396eb798887a98bd60d23f7cff066ae7cb61f..a9b19c66fae5ec223d4953ab270a7bd98858daaf 100644
--- a/net/quic/chromium/crypto/proof_verifier_chromium.cc
+++ b/net/quic/chromium/crypto/proof_verifier_chromium.cc
@@ -397,12 +397,14 @@ int ProofVerifierChromium::Job::DoVerifyCertComplete(int result) {
if (enforce_policy_checking_ &&
(result == OK ||
(IsCertificateError(result) && IsCertStatusMinorError(cert_status)))) {
+ SCTList verified_scts = ct::SCTsMatchingStatus(
+ verify_details_->ct_verify_result.scts, ct::SCT_STATUS_OK);
if ((cert_verify_result.cert_status & CERT_STATUS_IS_EV)) {
ct::EVPolicyCompliance ev_policy_compliance =
policy_enforcer_->DoesConformToCTEVPolicy(
cert_verify_result.verified_cert.get(),
- SSLConfigService::GetEVCertsWhitelist().get(),
- verify_details_->ct_verify_result.verified_scts, net_log_);
+ SSLConfigService::GetEVCertsWhitelist().get(), verified_scts,
+ net_log_);
verify_details_->ct_verify_result.ev_policy_compliance =
ev_policy_compliance;
if (ev_policy_compliance !=
@@ -419,8 +421,7 @@ int ProofVerifierChromium::Job::DoVerifyCertComplete(int result) {
verify_details_->ct_verify_result.cert_policy_compliance =
policy_enforcer_->DoesConformToCertPolicy(
- cert_verify_result.verified_cert.get(),
- verify_details_->ct_verify_result.verified_scts, net_log_);
+ cert_verify_result.verified_cert.get(), verified_scts, net_log_);
int ct_result = OK;
if (verify_details_->ct_verify_result.cert_policy_compliance !=
« no previous file with comments | « net/cert/multi_log_ct_verifier_unittest.cc ('k') | net/quic/chromium/crypto/proof_verifier_chromium_test.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698