net/http/transport_security_state_static.h - Issue 23523051: Blacklist semi-private intermediate issuers from issuing for Google domains.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Unified Diff: net/http/transport_security_state_static.h

Issue 23523051: Blacklist semi-private intermediate issuers from issuing for Google domains. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src

Patch Set: Created 7 years, 3 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

Index: net/http/transport_security_state_static.h

diff --git a/net/http/transport_security_state_static.h b/net/http/transport_security_state_static.h

index eb72813753b2c1e1247d431cb0fa75f08d3e369c..13f29b5c17cf257d8942b1f67160ef0041316386 100644

--- a/net/http/transport_security_state_static.h

+++ b/net/http/transport_security_state_static.h

@@ -46,6 +46,10 @@ static const char kSPKIHash_ThawteSGCCA[] =

"\x87\x31\xea\x0e\x3d\xf5\xe8\x70\x3e\x83"

"\x72\x57\x77\xa9\x65\x3b\x3b\xfa\x5e\x14";

+static const char kSPKIHash_VeriSignClass3SSPIntermediateCA[] =

+ "\x99\x6a\x20\x6a\x85\x57\x62\xcb\x9a\xf2"

+ "\x02\x37\xb3\xc0\x69\x5d\xa9\x1e\xc2\x22";

static const char kSPKIHash_EquifaxSecureCA[] =

"\x48\xe6\x68\xf9\x2b\xd2\xb2\x95\xd7\x47"

"\xd8\x23\x20\x10\x4f\x33\x98\x90\x9f\xd4";

@@ -277,6 +281,7 @@ static const char* const kGoogleRejectedCerts[] = {

kSPKIHash_TCTrustCenter,

kSPKIHash_Vodafone,

kSPKIHash_ThawteSGCCA,

+ kSPKIHash_VeriSignClass3SSPIntermediateCA,

NULL,

};

#define kGooglePins { \

« no previous file with comments | « net/cert/cert_verify_proc.cc ('k') | net/http/transport_security_state_static.certs » ('j') | no next file with comments »