manuel/void-packages
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chromium: fix certificate issue

Browse Source
This commit is contained in:
Andrea Brancaleoni 2016-11-14 10:38:02 +01:00
parent ba81dc6abd
commit c1d85ee4b3
2 changed files with 43 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
srcpkgs/chromium/patches/issue2495583002_1.patch Normal file
View File

@ -0,0 +1,42 @@
Index: net/quic/crypto/proof_verifier_chromium.cc
diff --git net/quic/crypto/proof_verifier_chromium.cc net/quic/crypto/proof_verifier_chromium.cc
index 546b00740fef947a95a109e7e9bc22ffdedce785..160191bf6226292d49997bec94429e3a1d0fe990 100644
--- net/quic/crypto/proof_verifier_chromium.cc
+++ net/quic/crypto/proof_verifier_chromium.cc
@@ -426,6 +426,8 @@ int ProofVerifierChromium::Job::DoVerifyCertComplete(int result) {
int ct_result = OK;
if (verify_details_->ct_verify_result.cert_policy_compliance !=
ct::CertPolicyCompliance::CERT_POLICY_COMPLIES_VIA_SCTS &&
+ verify_details_->ct_verify_result.cert_policy_compliance !=
+ ct::CertPolicyCompliance::CERT_POLICY_BUILD_NOT_TIMELY &&
transport_security_state_->ShouldRequireCT(
hostname_, cert_verify_result.verified_cert.get(),
cert_verify_result.public_key_hashes)) {
Index: net/socket/ssl_client_socket_impl.cc
diff --git net/socket/ssl_client_socket_impl.cc net/socket/ssl_client_socket_impl.cc
index bb76bf8c46d6d84f7d5ad7d48eacfe751204d151..a5d2afd7d8483a4996e04f9b68e3756f55af5d1a 100644
--- net/socket/ssl_client_socket_impl.cc
+++ net/socket/ssl_client_socket_impl.cc
@@ -1556,6 +1556,8 @@ int SSLClientSocketImpl::VerifyCT() {
if (ct_verify_result_.cert_policy_compliance !=
ct::CertPolicyCompliance::CERT_POLICY_COMPLIES_VIA_SCTS &&
+ ct_verify_result_.cert_policy_compliance !=
+ ct::CertPolicyCompliance::CERT_POLICY_BUILD_NOT_TIMELY &&
transport_security_state_->ShouldRequireCT(
host_and_port_.host(), server_cert_verify_result_.verified_cert.get(),
server_cert_verify_result_.public_key_hashes)) {
Index: net/spdy/spdy_session.cc
diff --git net/spdy/spdy_session.cc net/spdy/spdy_session.cc
index b79c5e62e3d17f2745c369428c8ac35d9d663349..9315380e45f7f7d9ebfa5bdfe62d11c93705cddc 100644
--- net/spdy/spdy_session.cc
+++ net/spdy/spdy_session.cc
@@ -617,6 +617,8 @@ bool SpdySession::CanPool(TransportSecurityState* transport_security_state,
if (ssl_info.ct_cert_policy_compliance !=
ct::CertPolicyCompliance::CERT_POLICY_COMPLIES_VIA_SCTS &&
+ ssl_info.ct_cert_policy_compliance !=
+ ct::CertPolicyCompliance::CERT_POLICY_BUILD_NOT_TIMELY &&
transport_security_state->ShouldRequireCT(
new_hostname, ssl_info.cert.get(), ssl_info.public_key_hashes)) {
return false;

2
srcpkgs/chromium/template
View File

@ -2,7 +2,7 @@
pkgname=chromium
# See http://www.chromium.org/developers/calendar for the latest version
version=53.0.2785.143
revision=1
revision=2
short_desc="Google's attempt at creating a safer, faster, and more stable browser"
maintainer="Juan RP <xtraeme@voidlinux.eu>"
homepage="http://www.chromium.org/"