Issue 3004: Report all the errors of an SSL server certificate
http://code.google.com/p/chromium/issues/detail?id=3004

Comment #2 by [EMAIL PROTECTED]:
I think the fix is to check chain_context->TrustStatus.dwErrorStatus
after the CertGetCertificateChain call in SSLClientSocket::VerifyServerCert.
chain_context->TrustStatus.dwErrorStatus is a bitwise OR of all bit flags
like CERT_TRUST_IS_NOT_TIME_VALID and CERT_TRUST_REVOCATION_STATUS_UNKNOWN.

Note: chain_context is leaked on error paths.  We should fix that.  We
can copy the ScopedCertChainContext code from X509Certificate::IsEV.



-- 
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Chromium-bugs" group.
To post to this group, send email to chromium-bugs@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to