Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(26)

Unified Diff: chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc

Issue 2494843002: Don't pass domain and verification key to validation when not required (Closed)
Patch Set: Address feedback Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
diff --git a/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc b/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
index b3bfde5f21bf78f3fa2c780e86239b174fc0ab6d..3993ab416042aa05cda3a90b584d0a84102bfde1 100644
--- a/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
+++ b/chrome/browser/chromeos/policy/device_cloud_policy_store_chromeos.cc
@@ -55,10 +55,9 @@ void DeviceCloudPolicyStoreChromeOS::Store(
std::unique_ptr<DeviceCloudPolicyValidator> validator(
CreateValidator(policy));
- validator->ValidateSignature(public_key->as_string(),
- GetPolicyVerificationKey(),
- install_attributes_->GetDomain(),
- true);
+ validator->ValidateSignatureAllowingRotation(
+ public_key->as_string(), GetPolicyVerificationKey(),
+ install_attributes_->GetDomain());
validator->ValidateAgainstCurrentPolicy(
device_settings_service_->policy_data(),
CloudPolicyValidatorBase::TIMESTAMP_FULLY_VALIDATED,

Powered by Google App Engine
This is Rietveld 408576698