Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(902)

Unified Diff: net/cert/cert_verify_proc_builtin.cc

Issue 2898303005: Wire up certificate policies support in PathBuilder. (Closed)
Patch Set: rebase Created 3 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/cert/cert_verify_proc_builtin.cc
diff --git a/net/cert/cert_verify_proc_builtin.cc b/net/cert/cert_verify_proc_builtin.cc
index efba79bfe5e092ce407d22d1650e6a961040da10..2ed89b649df10cb610d1a0d5d2de4bacffd5fee0 100644
--- a/net/cert/cert_verify_proc_builtin.cc
+++ b/net/cert/cert_verify_proc_builtin.cc
@@ -221,9 +221,12 @@ void DoVerify(X509Certificate* input_cert,
// Initialize the path builder.
CertPathBuilder::Result result;
- CertPathBuilder path_builder(target, ssl_trust_store->GetTrustStore(),
- &signature_policy, verification_time,
- KeyPurpose::SERVER_AUTH, &result);
+ CertPathBuilder path_builder(
+ target, ssl_trust_store->GetTrustStore(), &signature_policy,
+ verification_time, KeyPurpose::SERVER_AUTH, InitialExplicitPolicy::kFalse,
+ {AnyPolicy()} /* user_initial_policy_set*/,
+ InitialPolicyMappingInhibit::kFalse, InitialAnyPolicyInhibit::kFalse,
+ &result);
// Allow the path builder to discover the explicitly provided intermediates in
// |input_cert|.

Powered by Google App Engine
This is Rietveld 408576698