diff options
author | Brian Carlstrom <bdc@google.com> | 2011-08-31 00:11:53 -0700 |
---|---|---|
committer | Brian Carlstrom <bdc@google.com> | 2011-09-01 12:55:50 -0700 |
commit | 541e309823a8c4f7746c05cc670e192166217a3a (patch) | |
tree | a550e28c5d438d4913f822199d440f37386284e4 /patches/README | |
parent | 34c261b1a00029744cfb7de1a69dca4b3ffb51a1 (diff) | |
download | android_external_bouncycastle-541e309823a8c4f7746c05cc670e192166217a3a.tar.gz android_external_bouncycastle-541e309823a8c4f7746c05cc670e192166217a3a.tar.bz2 android_external_bouncycastle-541e309823a8c4f7746c05cc670e192166217a3a.zip |
Add Chrome-style public key blacklist to CertPathValidator
Based on Chrome's CLs to blacklist the DigiNotar Root CA.
http://src.chromium.org/viewvc/chrome?view=rev&revision=98750
Bug: 5232736
(cherry picked from commit b44f0edcf5164b260a2c11207928984f2d84c079)
Change-Id: I15454c9ed676b59d8d001b0a18d68fb69e41d828
Diffstat (limited to 'patches/README')
-rw-r--r-- | patches/README | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/patches/README b/patches/README index 685356d..e586dd5 100644 --- a/patches/README +++ b/patches/README @@ -37,3 +37,4 @@ Other performance (both speed and memory) changes: Other security changes: - blacklist fraudulent Comodo certificates in PKIXCertPathValidatorSpi +- blacklist compromised DigiNotar Root CA by public key to block cross-signed intermediates |