| Index: net/base/x509_certificate_nss.cc
|
| diff --git a/net/base/x509_certificate_nss.cc b/net/base/x509_certificate_nss.cc
|
| index 8acd4f8f54f0a7ee1e1fbd64be80db1c7ce72d33..5e4e6a87e81c36b57cd2b717bf76f50137b4ed3e 100644
|
| --- a/net/base/x509_certificate_nss.cc
|
| +++ b/net/base/x509_certificate_nss.cc
|
| @@ -837,6 +837,12 @@ int X509Certificate::Verify(const std::string& hostname,
|
|
|
| if ((flags & VERIFY_EV_CERT) && VerifyEV())
|
| verify_result->cert_status |= CERT_STATUS_IS_EV;
|
| +
|
| + if (IsPublicKeyBlacklisted(verify_result->public_key_hashes)) {
|
| + verify_result->cert_status |= CERT_STATUS_AUTHORITY_INVALID;
|
| + return MapCertStatusToNetError(verify_result->cert_status);
|
| + }
|
| +
|
| return OK;
|
| }
|
|
|
|
|