commit | 94c9a948334f6d5d910932ba74ce1316c199de04 | [log] [tgz] |
---|---|---|
author | Jesse Selover <jselover@chromium.org> | Wed Jan 16 01:18:04 2019 |
committer | Commit Bot <commit-bot@chromium.org> | Wed Jan 16 01:18:04 2019 |
tree | fcf02364b17a08f916d8e05bb8efeadc4d8a8fd7 | |
parent | a92ab3a5b0939fc02b13e6bcce9e5c0b4080e205 [diff] |
Use the BoringSSL callback for certificate verification. This moves certificate verification to within the handshake, instead of a separate step afterwards, which allows us to verify the certificate before prompting for client certificates. It also means that certificate errors result in incomplete handshakes, so this also changes SSLClientSocket unit tests not to expect connected sockets after certificate errors. Bug: 347402 Change-Id: I0a93da1dee5be697fa7d5c74aae206d370f97d5b Reviewed-on: https://chromium-review.googlesource.com/c/1259123 Commit-Queue: Jesse Selover <jselover@chromium.org> Reviewed-by: Joe Downing <joedow@chromium.org> Reviewed-by: Ryan Sleevi <rsleevi@chromium.org> Reviewed-by: David Benjamin <davidben@chromium.org> Cr-Commit-Position: refs/heads/master@{#622963}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .