summaryrefslogtreecommitdiffstats
path: root/patches/README
diff options
context:
space:
mode:
authorBrian Carlstrom <bdc@google.com>2011-08-31 00:11:53 -0700
committerBrian Carlstrom <bdc@google.com>2011-09-01 12:55:50 -0700
commit541e309823a8c4f7746c05cc670e192166217a3a (patch)
treea550e28c5d438d4913f822199d440f37386284e4 /patches/README
parent34c261b1a00029744cfb7de1a69dca4b3ffb51a1 (diff)
downloadandroid_external_bouncycastle-541e309823a8c4f7746c05cc670e192166217a3a.tar.gz
android_external_bouncycastle-541e309823a8c4f7746c05cc670e192166217a3a.tar.bz2
android_external_bouncycastle-541e309823a8c4f7746c05cc670e192166217a3a.zip
Add Chrome-style public key blacklist to CertPathValidator
Based on Chrome's CLs to blacklist the DigiNotar Root CA. http://src.chromium.org/viewvc/chrome?view=rev&revision=98750 Bug: 5232736 (cherry picked from commit b44f0edcf5164b260a2c11207928984f2d84c079) Change-Id: I15454c9ed676b59d8d001b0a18d68fb69e41d828
Diffstat (limited to 'patches/README')
-rw-r--r--patches/README1
1 files changed, 1 insertions, 0 deletions
diff --git a/patches/README b/patches/README
index 685356d..e586dd5 100644
--- a/patches/README
+++ b/patches/README
@@ -37,3 +37,4 @@ Other performance (both speed and memory) changes:
Other security changes:
- blacklist fraudulent Comodo certificates in PKIXCertPathValidatorSpi
+- blacklist compromised DigiNotar Root CA by public key to block cross-signed intermediates