| Index: components/cast_certificate/cast_crl.cc
|
| diff --git a/components/cast_certificate/cast_crl.cc b/components/cast_certificate/cast_crl.cc
|
| index d4402ea53bbfda9142f978fcef3255b82eba22e2..25be1d251c072ae43ee46db4827037d4671ba6a5 100644
|
| --- a/components/cast_certificate/cast_crl.cc
|
| +++ b/components/cast_certificate/cast_crl.cc
|
| @@ -125,10 +125,12 @@ bool VerifyCRL(const Crl& crl,
|
| auto signature_policy = CreateCastSignaturePolicy();
|
| std::unique_ptr<net::SignatureAlgorithm> signature_algorithm_type =
|
| net::SignatureAlgorithm::CreateRsaPkcs1(net::DigestAlgorithm::Sha256);
|
| + net::CertErrors errors;
|
| if (!VerifySignedData(*signature_algorithm_type,
|
| net::der::Input(&crl.tbs_crl()),
|
| signature_value_bit_string, parsed_cert->tbs().spki_tlv,
|
| - signature_policy.get())) {
|
| + signature_policy.get(), &errors)) {
|
| + // TODO(634443): Dump the error information.
|
| VLOG(2) << "CRL - Signature verification failed.";
|
| return false;
|
| }
|
|
|