Index: net/ssl/ssl_config.cc |
diff --git a/net/ssl/ssl_config.cc b/net/ssl/ssl_config.cc |
index 62e192e1b84d5acde6780cd8c9749d9469a2b99b..726ce48f1e9b53eb14f1bf0c9762a2a3b356a9b2 100644 |
--- a/net/ssl/ssl_config.cc |
+++ b/net/ssl/ssl_config.cc |
@@ -24,6 +24,7 @@ SSLConfig::SSLConfig() |
: rev_checking_enabled(false), |
rev_checking_required_local_anchors(false), |
sha1_local_anchors_enabled(true), |
+ common_name_fallback_local_anchors_enabled(true), |
version_min(kDefaultSSLVersionMin), |
version_max(kDefaultSSLVersionMax), |
deprecated_cipher_suites_enabled(false), |
@@ -64,6 +65,8 @@ int SSLConfig::GetCertVerifyFlags() const { |
flags |= CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS; |
if (sha1_local_anchors_enabled) |
flags |= CertVerifier::VERIFY_ENABLE_SHA1_LOCAL_ANCHORS; |
+ if (common_name_fallback_local_anchors_enabled) |
+ flags |= CertVerifier::VERIFY_ENABLE_COMMON_NAME_FALLBACK_LOCAL_ANCHORS; |
return flags; |
} |