Disable commonName matching for certificates

net/ssl/ssl_config_service.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/ssl_config_service.h"
 
 #include <tuple>
 
 #include "base/lazy_instance.h"
 #include "base/synchronization/lock.h"
@@ skipping 70 matching lines @@
 }
 
 SSLConfigService::~SSLConfigService() {
 }
 
 void SSLConfigService::ProcessConfigUpdate(const SSLConfig& orig_config,
                                            const SSLConfig& new_config) {
   bool config_changed =
       std::tie(orig_config.rev_checking_enabled,
                orig_config.rev_checking_required_local_anchors,
-               orig_config.sha1_local_anchors_enabled, orig_config.version_min,
-               orig_config.version_max, orig_config.disabled_cipher_suites,
+               orig_config.sha1_local_anchors_enabled,
+               orig_config.common_name_fallback_local_anchors_enabled,
+               orig_config.version_min, orig_config.version_max,
+               orig_config.disabled_cipher_suites,
                orig_config.channel_id_enabled, orig_config.false_start_enabled,
                orig_config.require_ecdhe) !=

[mattm, 2017/03/01 23:56:47]

nit: maybe rename orig_config to old_config so it is the same length as
new_config and the lines wrap the same.

[Ryan Sleevi, 2017/03/02 00:15:31]

Excellent suggestion!

       std::tie(new_config.rev_checking_enabled,
                new_config.rev_checking_required_local_anchors,
-               new_config.sha1_local_anchors_enabled, new_config.version_min,
-               new_config.version_max, new_config.disabled_cipher_suites,
-               new_config.channel_id_enabled, new_config.false_start_enabled,
-               new_config.require_ecdhe);
+               new_config.sha1_local_anchors_enabled,
+               new_config.common_name_fallback_local_anchors_enabled,
+               new_config.version_min, new_config.version_max,
+               new_config.disabled_cipher_suites, new_config.channel_id_enabled,
+               new_config.false_start_enabled, new_config.require_ecdhe);
 
   if (config_changed)
     NotifySSLConfigChange();
 }
 
 }  // namespace net