Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(702)

Unified Diff: net/socket/ssl_client_socket_impl.cc

Issue 2850033002: Check Expect-CT at connection setup (Closed)
Patch Set: fix CanPool check Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/socket/ssl_client_socket_impl.cc
diff --git a/net/socket/ssl_client_socket_impl.cc b/net/socket/ssl_client_socket_impl.cc
index 9bbc41d8f0c4b869120d59839ebbe4f608f16dc4..1b3aaa853a51291195cc7ac20d94716797ca4f5d 100644
--- a/net/socket/ssl_client_socket_impl.cc
+++ b/net/socket/ssl_client_socket_impl.cc
@@ -1576,8 +1576,11 @@ int SSLClientSocketImpl::VerifyCT() {
ct_verify_result_.cert_policy_compliance !=
ct::CertPolicyCompliance::CERT_POLICY_BUILD_NOT_TIMELY &&
transport_security_state_->ShouldRequireCT(
- host_and_port_.host(), server_cert_verify_result_.verified_cert.get(),
- server_cert_verify_result_.public_key_hashes)) {
+ host_and_port_, server_cert_verify_result_.is_issued_by_known_root,
+ server_cert_verify_result_.public_key_hashes,
+ server_cert_verify_result_.verified_cert.get(), server_cert_.get(),
+ ct_verify_result_.scts,
+ TransportSecurityState::ENABLE_EXPECT_CT_REPORTS)) {
server_cert_verify_result_.cert_status |=
CERT_STATUS_CERTIFICATE_TRANSPARENCY_REQUIRED;
return ERR_CERTIFICATE_TRANSPARENCY_REQUIRED;

Powered by Google App Engine
This is Rietveld 408576698