Disable commonName matching for certificates

net/ssl/ssl_config_service.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/ssl_config_service.h"
 
 #include "base/lazy_instance.h"
 #include "base/synchronization/lock.h"
 #include "net/ssl/ssl_config_service_defaults.h"
 
@@ skipping 69 matching lines @@
 
 SSLConfigService::~SSLConfigService() {
 }
 
 void SSLConfigService::ProcessConfigUpdate(const SSLConfig& orig_config,
                                            const SSLConfig& new_config) {
   bool config_changed =
       (orig_config.rev_checking_enabled != new_config.rev_checking_enabled) ||
       (orig_config.rev_checking_required_local_anchors !=
        new_config.rev_checking_required_local_anchors) ||
+      (orig_config.sha1_local_anchors_enabled !=
+       new_config.sha1_local_anchors_enabled) ||

[Ryan Sleevi, 2017/02/28 02:16:58]

I'm going to split this part out into a separate CL and request merging for it,
since it'd affect policy propagation in M57.

[mattm, 2017/02/28 18:50:48]

doh, thanks.

+      (orig_config.common_name_fallback_local_anchors_enabled !=
+       new_config.common_name_fallback_local_anchors_enabled) ||
       (orig_config.version_min != new_config.version_min) ||
       (orig_config.version_max != new_config.version_max) ||
       (orig_config.disabled_cipher_suites !=
        new_config.disabled_cipher_suites) ||
       (orig_config.channel_id_enabled != new_config.channel_id_enabled) ||
       (orig_config.false_start_enabled != new_config.false_start_enabled) ||
       (orig_config.require_ecdhe != new_config.require_ecdhe);
 
   if (config_changed)
     NotifySSLConfigChange();
 }
 
 }  // namespace net