Issue 129209 in chromium: SSLClientSocketNSS should map client certificate related SSL alerts to ERR_BAD_SSL_CLIENT_AUTH_CERT

45 views
Skip to first unread message

chro...@googlecode.com

unread,
May 22, 2012, 3:05:19 PM5/22/12
to chromi...@chromium.org
Status: Started
Owner: w...@chromium.org
CC: rsl...@chromium.org
Labels: Type-Bug Pri-2 Area-Internals Internals-Network-SSL Mstone-21

New issue 129209 by w...@chromium.org: SSLClientSocketNSS should map client
certificate related SSL alerts to ERR_BAD_SSL_CLIENT_AUTH_CERT
http://code.google.com/p/chromium/issues/detail?id=129209

SSLClientSocketNSS should map the following client certificate related SSL
alerts
to ERR_BAD_SSL_CLIENT_AUTH_CERT:

access_denied
bad_certificate
unsupported_certificate
certificate_expired
certificate_revoked
certificate_unknown
unknown_ca

This matches the code in
net/socket/ssl_client_socket_win.cc
net/socket/ssl_client_socket_oenssl.cc
net/socket/ssl_client_socket_mac.cc

chro...@googlecode.com

unread,
Jun 6, 2012, 9:11:35 PM6/6/12
to chromi...@chromium.org

Comment #1 on issue 129209 by bugdro...@chromium.org: SSLClientSocketNSS
should map client certificate related SSL alerts to
ERR_BAD_SSL_CLIENT_AUTH_CERT
http://code.google.com/p/chromium/issues/detail?id=129209#c1

The following revision refers to this bug:
http://src.chromium.org/viewvc/chrome?view=rev&revision=140897

------------------------------------------------------------------------
r140897 | w...@chromium.org | Wed Jun 06 17:18:43 PDT 2012

Changed paths:
M
http://src.chromium.org/viewvc/chrome/trunk/src/net/socket/ssl_client_socket_nss.cc?r1=140897&r2=140896&pathrev=140897
M
http://src.chromium.org/viewvc/chrome/trunk/src/net/socket/nss_ssl_util.cc?r1=140897&r2=140896&pathrev=140897
M
http://src.chromium.org/viewvc/chrome/trunk/src/net/socket/nss_ssl_util.h?r1=140897&r2=140896&pathrev=140897
M
http://src.chromium.org/viewvc/chrome/trunk/src/net/socket/ssl_server_socket_nss.cc?r1=140897&r2=140896&pathrev=140897

Map the certificate related SSL alerts to ERR_BAD_SSL_CLIENT_AUTH_CERT
on the client side.

Move MapNSSHandshakeError to ssl_client_socket_nss.cc (and rename it
MapNSSClientHandshakeError) because it is specific to the client side.

R=rsl...@chromium.org
BUG=129209
TEST=none

Review URL: https://chromiumcodereview.appspot.com/10332300
------------------------------------------------------------------------

Reply all
Reply to author
Forward
0 new messages