| 12345678910111213141516171819202122232425262728293031323334353637383940414243 |
- From d32e222a2706cb59f9855b9cf4330f88d1af5435 Mon Sep 17 00:00:00 2001
- From: Jan Engelhardt <jengelh@inai.de>
- Date: Thu, 2 Apr 2015 12:44:23 +0200
- Subject: [PATCH 41/66] Remove EV certificates
- The team chose to let EV certificates appear just like normal
- certificates. The web of trust is considered a failure in itself, so
- do not give users a false sense of extra security with EV certs.
- Instead, let them appear just like regular ones.
- ---
- net/cert/ev_root_ca_metadata.cc | 14 +++++++++++++-
- 1 file changed, 13 insertions(+), 1 deletion(-)
- --- a/net/cert/ev_root_ca_metadata.cc
- +++ b/net/cert/ev_root_ca_metadata.cc
- @@ -48,6 +48,16 @@ struct EVMetadata {
-
- // These certificates may be found in net/data/ssl/ev_roots.
- static const EVMetadata kEvRootCaMetadata[] = {
- + // need some dummy thing to make compiler happy, because
- + // arraysize() is implemented as a convoluted template rather than
- + // the traditional sizeof(x)/sizeof(*x)
- + { { { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
- + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff } },
- + {
- + "0",
- + }
- + },
- +#if 0
- // AC Camerfirma S.A. Chambers of Commerce Root - 2008
- // https://www.camerfirma.com
- {
- @@ -750,7 +760,9 @@ static const EVMetadata kEvRootCaMetadat
- 0xd2, 0x09, 0xb7, 0x37, 0xcb, 0xe2, 0xc1, 0x8c, 0xfb, 0x2c, 0x10,
- 0xc0, 0xff, 0x0b, 0xcf, 0x0d, 0x32, 0x86, 0xfc, 0x1a, 0xa2}},
- {"2.16.840.1.114404.1.1.2.4.1", ""},
- - }};
- + }
- +#endif
- +};
-
- #endif // defined(PLATFORM_USES_CHROMIUM_EV_METADATA)
- } // namespace
|
