diff options
Diffstat (limited to 'src/core/ssl_host_state_delegate_qt.cpp')
-rw-r--r-- | src/core/ssl_host_state_delegate_qt.cpp | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/core/ssl_host_state_delegate_qt.cpp b/src/core/ssl_host_state_delegate_qt.cpp index 9fa62cacb..d8f73abda 100644 --- a/src/core/ssl_host_state_delegate_qt.cpp +++ b/src/core/ssl_host_state_delegate_qt.cpp @@ -55,7 +55,10 @@ CertPolicy::~CertPolicy() { } -bool CertPolicy::Check(const net::X509Certificate& cert, net::CertStatus error) const +// For an allowance, we consider a given |cert| to be a match to a saved +// allowed cert if the |error| is an exact match to or subset of the errors +// in the saved CertStatus. +bool CertPolicy::Check(const net::X509Certificate &cert, net::CertStatus error) const { net::SHA256HashValue fingerprint = cert.CalculateChainFingerprint256(); auto allowed_iter = m_allowed.find(fingerprint); |