Index: chrome/browser/io_thread.cc |
diff --git a/chrome/browser/io_thread.cc b/chrome/browser/io_thread.cc |
index c70c0358122bb0ae1746874e9411614a24d52687..5fa7c579101639edd9d941068aae7137ef16d294 100644 |
--- a/chrome/browser/io_thread.cc |
+++ b/chrome/browser/io_thread.cc |
@@ -52,6 +52,7 @@ |
#include "content/public/browser/cookie_store_factory.h" |
#include "net/base/host_mapping_rules.h" |
#include "net/base/net_util.h" |
+#include "net/cert/cert_policy_enforcer.h" |
#include "net/cert/cert_verifier.h" |
#include "net/cert/cert_verify_proc.h" |
#include "net/cert/ct_known_logs.h" |
@@ -599,6 +600,10 @@ void IOThread::InitAsync() { |
net::MultiLogCTVerifier* ct_verifier = new net::MultiLogCTVerifier(); |
globals_->cert_transparency_verifier.reset(ct_verifier); |
+ if (command_line.HasSwitch(switches::kRequireCTForEV)) { |
+ net::CertPolicyEnforcer::SetEnforceCTEVPolicy(true); |
+ } |
+ |
// Add built-in logs |
ct_verifier->AddLogs(net::ct::CreateLogVerifiersForKnownLogs()); |