Hook up Merkle Tree Certificate verification [chromium/src : main]

0 views
Skip to first unread message

Matt Mueller (Gerrit)

unread,
Dec 18, 2025, 6:15:48 PM (2 days ago) Dec 18
to Matt Mueller, Nick Harper, chromium...@chromium.org, net-r...@chromium.org
Attention needed from Nick Harper

Matt Mueller added 1 comment

Patchset-level comments
File-level comment, Patchset 1 (Latest):
Matt Mueller . resolved

(marking as ready for review, still depends on https://boringssl-review.googlesource.com/c/boringssl/+/86027 landing so can't do a dry-run yet)

Open in Gerrit

Related details

Attention is currently required from:
  • Nick Harper
Submit Requirements:
  • requirement satisfiedCode-Coverage
  • requirement is not satisfiedCode-Owners
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedReview-Enforcement
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: chromium/src
Gerrit-Branch: main
Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
Gerrit-Change-Number: 7269808
Gerrit-PatchSet: 1
Gerrit-Owner: Matt Mueller <ma...@chromium.org>
Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
Gerrit-Attention: Nick Harper <nha...@chromium.org>
Gerrit-Comment-Date: Thu, 18 Dec 2025 23:15:39 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
satisfied_requirement
unsatisfied_requirement
open
diffy

Nick Harper (Gerrit)

unread,
Dec 18, 2025, 7:32:55 PM (2 days ago) Dec 18
to Matt Mueller, chromium...@chromium.org, net-r...@chromium.org
Attention needed from Matt Mueller

Nick Harper voted and added 1 comment

Votes added by Nick Harper

Code-Review+1

1 comment

File net/cert/cert_verify_proc_builtin.cc
Line 540, Patchset 1 (Latest): // MTCs don't use traditional revocation cecks or certificate
Nick Harper . unresolved

nit: "checks"

Open in Gerrit

Related details

Attention is currently required from:
  • Matt Mueller
Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
    Gerrit-Change-Number: 7269808
    Gerrit-PatchSet: 1
    Gerrit-Owner: Matt Mueller <ma...@chromium.org>
    Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
    Gerrit-Attention: Matt Mueller <ma...@chromium.org>
    Gerrit-Comment-Date: Fri, 19 Dec 2025 00:32:37 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: Yes
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Matt Mueller (Gerrit)

    unread,
    Dec 19, 2025, 11:43:29 AM (2 days ago) Dec 19
    to Matt Mueller, Joshua Pawlicki, Chromium LUCI CQ, Nick Harper, chromium...@chromium.org, net-r...@chromium.org
    Attention needed from Joshua Pawlicki and Nick Harper

    Matt Mueller added 2 comments

    Patchset-level comments
    File-level comment, Patchset 5 (Latest):
    Matt Mueller . resolved

    +waffles for chrome/browser/component_updater OWNERS

    File net/cert/cert_verify_proc_builtin.cc
    Line 540, Patchset 1: // MTCs don't use traditional revocation cecks or certificate
    Nick Harper . resolved

    nit: "checks"

    Matt Mueller

    Done

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Joshua Pawlicki
    • Nick Harper
    Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement is not satisfiedCode-Owners
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
      Gerrit-Change-Number: 7269808
      Gerrit-PatchSet: 5
      Gerrit-Owner: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Joshua Pawlicki <waf...@chromium.org>
      Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
      Gerrit-Attention: Joshua Pawlicki <waf...@chromium.org>
      Gerrit-Attention: Nick Harper <nha...@chromium.org>
      Gerrit-Comment-Date: Fri, 19 Dec 2025 16:43:18 +0000
      Gerrit-HasComments: Yes
      Gerrit-Has-Labels: No
      Comment-In-Reply-To: Nick Harper <nha...@chromium.org>
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Matt Mueller (Gerrit)

      unread,
      Dec 19, 2025, 1:52:51 PM (2 days ago) Dec 19
      to Matt Mueller, Sorin Jianu, Chromium LUCI CQ, Nick Harper, chromium...@chromium.org, net-r...@chromium.org
      Attention needed from Nick Harper and Sorin Jianu

      Matt Mueller added 1 comment

      Patchset-level comments
      Matt Mueller . resolved

      Hi Sorin, looks like waffles@ is now marked as OOO, can you do OWNERS review this instead? thanks!

      Open in Gerrit

      Related details

      Attention is currently required from:
      • Nick Harper
      • Sorin Jianu
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement is not satisfiedCode-Owners
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
      Gerrit-Change-Number: 7269808
      Gerrit-PatchSet: 5
      Gerrit-Owner: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
      Gerrit-Reviewer: Sorin Jianu <so...@chromium.org>
      Gerrit-Attention: Sorin Jianu <so...@chromium.org>
      Gerrit-Attention: Nick Harper <nha...@chromium.org>
      Gerrit-Comment-Date: Fri, 19 Dec 2025 18:52:41 +0000
      Gerrit-HasComments: Yes
      Gerrit-Has-Labels: No
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Nick Harper (Gerrit)

      unread,
      Dec 19, 2025, 4:05:41 PM (2 days ago) Dec 19
      to Matt Mueller, Sorin Jianu, Chromium LUCI CQ, chromium...@chromium.org, net-r...@chromium.org
      Attention needed from Matt Mueller and Sorin Jianu

      Nick Harper voted Owners-Override+1

      Owners-Override+1
      Open in Gerrit

      Related details

      Attention is currently required from:
      • Matt Mueller
      • Sorin Jianu
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement satisfiedCode-Owners
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
      Gerrit-Change-Number: 7269808
      Gerrit-PatchSet: 6
      Gerrit-Owner: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
      Gerrit-Reviewer: Sorin Jianu <so...@chromium.org>
      Gerrit-Attention: Sorin Jianu <so...@chromium.org>
      Gerrit-Attention: Matt Mueller <ma...@chromium.org>
      Gerrit-Comment-Date: Fri, 19 Dec 2025 21:05:32 +0000
      Gerrit-HasComments: No
      Gerrit-Has-Labels: Yes
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Matt Mueller (Gerrit)

      unread,
      Dec 19, 2025, 4:22:59 PM (2 days ago) Dec 19
      to Matt Mueller, Nick Harper, Sorin Jianu, Chromium LUCI CQ, chromium...@chromium.org, net-r...@chromium.org
      Attention needed from Sorin Jianu

      Matt Mueller voted Commit-Queue+2

      Commit-Queue+2
      Open in Gerrit

      Related details

      Attention is currently required from:
      • Sorin Jianu
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement satisfiedCode-Owners
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
      Gerrit-Change-Number: 7269808
      Gerrit-PatchSet: 6
      Gerrit-Owner: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
      Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
      Gerrit-Reviewer: Sorin Jianu <so...@chromium.org>
      Gerrit-Attention: Sorin Jianu <so...@chromium.org>
      Gerrit-Comment-Date: Fri, 19 Dec 2025 21:22:49 +0000
      Gerrit-HasComments: No
      Gerrit-Has-Labels: Yes
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Nick Harper (Gerrit)

      unread,
      Dec 19, 2025, 4:31:09 PM (2 days ago) Dec 19
      to Matt Mueller, Sorin Jianu, Chromium LUCI CQ, chromium...@chromium.org, net-r...@chromium.org
      Attention needed from Matt Mueller and Sorin Jianu

      Nick Harper voted

      Code-Review+1
      Commit-Queue+2
      Open in Gerrit

      Related details

      Attention is currently required from:
      • Matt Mueller
      • Sorin Jianu
      Submit Requirements:
        • requirement satisfiedCode-Coverage
        • requirement satisfiedCode-Owners
        • requirement satisfiedCode-Review
        • requirement satisfiedReview-Enforcement
        Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
        Gerrit-MessageType: comment
        Gerrit-Project: chromium/src
        Gerrit-Branch: main
        Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
        Gerrit-Change-Number: 7269808
        Gerrit-PatchSet: 6
        Gerrit-Owner: Matt Mueller <ma...@chromium.org>
        Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
        Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
        Gerrit-Reviewer: Sorin Jianu <so...@chromium.org>
        Gerrit-Attention: Sorin Jianu <so...@chromium.org>
        Gerrit-Attention: Matt Mueller <ma...@chromium.org>
        Gerrit-Comment-Date: Fri, 19 Dec 2025 21:30:54 +0000
        Gerrit-HasComments: No
        Gerrit-Has-Labels: Yes
        satisfied_requirement
        open
        diffy

        Chromium LUCI CQ (Gerrit)

        unread,
        Dec 19, 2025, 4:39:12 PM (2 days ago) Dec 19
        to Matt Mueller, Nick Harper, Sorin Jianu, chromium...@chromium.org, net-r...@chromium.org

        Chromium LUCI CQ submitted the change

        Change information

        Commit message:
        Hook up Merkle Tree Certificate verification
        Bug: 452986180
        Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
        Owners-Override: Nick Harper <nha...@chromium.org>
        Reviewed-by: Nick Harper <nha...@chromium.org>
        Commit-Queue: Nick Harper <nha...@chromium.org>
        Cr-Commit-Position: refs/heads/main@{#1561342}
        Files:
        • M chrome/browser/component_updater/pki_metadata_component_installer_browsertest.cc
        • M net/cert/cert_verify_proc_builtin.cc
        • M net/cert/cert_verify_proc_builtin_unittest.cc
        • M net/cert/internal/system_trust_store.cc
        • M net/cert/internal/system_trust_store.h
        • M net/cert/internal/system_trust_store_unittest.cc
        • M net/cert/internal/trust_store_chrome.cc
        • M net/cert/internal/trust_store_chrome.h
        • M net/cert/internal/trust_store_chrome_unittest.cc
        • M net/tools/cert_verify_tool/cert_verify_tool.cc
        Change size: L
        Delta: 10 files changed, 657 insertions(+), 135 deletions(-)
        Branch: refs/heads/main
        Submit Requirements:
        • requirement satisfiedCode-Review: +1 by Nick Harper
        Open in Gerrit
        Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
        Gerrit-MessageType: merged
        Gerrit-Project: chromium/src
        Gerrit-Branch: main
        Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
        Gerrit-Change-Number: 7269808
        Gerrit-PatchSet: 7
        Gerrit-Owner: Matt Mueller <ma...@chromium.org>
        Gerrit-Reviewer: Chromium LUCI CQ <chromiu...@luci-project-accounts.iam.gserviceaccount.com>
        Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
        Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
        Gerrit-Reviewer: Sorin Jianu <so...@chromium.org>
        open
        diffy
        satisfied_requirement

        Sorin Jianu (Gerrit)

        unread,
        Dec 19, 2025, 5:40:18 PM (2 days ago) Dec 19
        to Matt Mueller, Chromium LUCI CQ, Nick Harper, chromium...@chromium.org, net-r...@chromium.org

        Sorin Jianu voted and added 1 comment

        Votes added by Sorin Jianu

        Code-Review+1

        1 comment

        Patchset-level comments
        File-level comment, Patchset 7 (Latest):
        Sorin Jianu . resolved

        lgtm ty!

        Open in Gerrit

        Related details

        Attention set is empty
        Submit Requirements:
        • requirement satisfiedCode-Coverage
        • requirement satisfiedCode-Owners
        • requirement satisfiedCode-Review
        • requirement satisfiedReview-Enforcement
        Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
        Gerrit-MessageType: comment
        Gerrit-Project: chromium/src
        Gerrit-Branch: main
        Gerrit-Change-Id: Ib12fc995eaded426c6b6b6151810fe334256b5e3
        Gerrit-Change-Number: 7269808
        Gerrit-PatchSet: 7
        Gerrit-Owner: Matt Mueller <ma...@chromium.org>
        Gerrit-Reviewer: Chromium LUCI CQ <chromiu...@luci-project-accounts.iam.gserviceaccount.com>
        Gerrit-Reviewer: Matt Mueller <ma...@chromium.org>
        Gerrit-Reviewer: Nick Harper <nha...@chromium.org>
        Gerrit-Reviewer: Sorin Jianu <so...@chromium.org>
        Gerrit-Comment-Date: Fri, 19 Dec 2025 22:40:10 +0000
        Gerrit-HasComments: Yes
        Gerrit-Has-Labels: Yes
        satisfied_requirement
        open
        diffy
        Reply all
        Reply to author
        Forward
        0 new messages