summaryrefslogtreecommitdiffstats
path: root/src/core/ssl_host_state_delegate_qt.cpp
diff options
context:
space:
mode:
Diffstat (limited to 'src/core/ssl_host_state_delegate_qt.cpp')
-rw-r--r--src/core/ssl_host_state_delegate_qt.cpp5
1 files changed, 4 insertions, 1 deletions
diff --git a/src/core/ssl_host_state_delegate_qt.cpp b/src/core/ssl_host_state_delegate_qt.cpp
index 9fa62cacb..d8f73abda 100644
--- a/src/core/ssl_host_state_delegate_qt.cpp
+++ b/src/core/ssl_host_state_delegate_qt.cpp
@@ -55,7 +55,10 @@ CertPolicy::~CertPolicy()
{
}
-bool CertPolicy::Check(const net::X509Certificate& cert, net::CertStatus error) const
+// For an allowance, we consider a given |cert| to be a match to a saved
+// allowed cert if the |error| is an exact match to or subset of the errors
+// in the saved CertStatus.
+bool CertPolicy::Check(const net::X509Certificate &cert, net::CertStatus error) const
{
net::SHA256HashValue fingerprint = cert.CalculateChainFingerprint256();
auto allowed_iter = m_allowed.find(fingerprint);