DescriptionUpdate SSL error handling code to account for Subject CN deprecation
In Issue 308330, Chrome deprecated the use of the Subject CN field in
certificate hostname validation. However, the certificate error
interstitial and error classification logic were left unchanged,
leading to misleading error messages and doomed error recovery attempts
in the event that a certificate lacked SubjectAltNames.
In this change, Chrome's Certificate Error interstitial and error
recovery will no longer fallback to the certificate's Subject CN field
when evaluating the certificate's valid dns names.
BUG=703614
Review-Url: https://codereview.chromium.org/2777383002
Cr-Commit-Position: refs/heads/master@{#462230}
Committed: https://chromium.googlesource.com/chromium/src/+/c7484f52b8ceb68e4334cad505e894aeef6cba83
Patch Set 1 : First try #Patch Set 2 : Add and Fix tests #Patch Set 3 : Generate certificate via script #Patch Set 4 : Update build script #
Total comments: 19
Patch Set 5 : Address nits #
Total comments: 11
Patch Set 6 : Address Emily's feedback, add new histogram values. #
Total comments: 12
Patch Set 7 : Update histogram text #
Total comments: 14
Patch Set 8 : Privatize GetCertificate in subclass #Patch Set 9 : Address Mark Feedback #Messages
Total messages: 53 (35 generated)
|