Disable commonName matching for certificates

net/cert/cert_verify_proc_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc_nss.h"
 
 #include <cert.h>
 #include <nss.h>
 #include <prerror.h>
 #include <secerr.h>
@@ skipping 780 matching lines @@
     // API.
     SECItem ocsp_response_item;
     ocsp_response_item.data = reinterpret_cast<unsigned char*>(
         const_cast<char*>(ocsp_response.data()));
     ocsp_response_item.len = ocsp_response.size();
     cache_ocsp_response_from_side_channel_(CERT_GetDefaultCertDB(), cert_handle,
                                            PR_Now(), &ocsp_response_item,
                                            nullptr);
   }
 
-  if (!cert->VerifyNameMatch(hostname,
-                             &verify_result->common_name_fallback_used)) {
-    verify_result->cert_status |= CERT_STATUS_COMMON_NAME_INVALID;
-  }
-
   // Setup a callback to call into CheckChainRevocationWithCRLSet with the
   // current CRLSet. If the CRLSet revokes a given chain, |was_revoked|
   // will be set to true.
   // The same callback and args are used for every invocation of
   // PKIXVerifyCert, as CheckChainRevocationWithCRLSet handles resetting
   // |was_revoked| as necessary.
   CheckChainRevocationArgs check_chain_revocation_args;
   check_chain_revocation_args.crl_set = crl_set;
   check_chain_revocation_args.next_callback = chain_verify_callback;
 
@@ skipping 143 matching lines @@
     CRLSet* crl_set,
     const CertificateList& additional_trust_anchors,
     CertVerifyResult* verify_result) {
   return VerifyInternalImpl(cert, hostname, ocsp_response, flags, crl_set,
                             additional_trust_anchors,
                             NULL,  // chain_verify_callback
                             verify_result);
 }
 
 }  // namespace net