[tor-commits] [flashproxy/master] ChangeLog for intermediate certificate pins.

dcf at torproject.org dcf at torproject.org
Thu Aug 1 03:13:30 UTC 2013


commit 4fee3689d7d838c271744b1fff7a49792cbcc01d
Author: David Fifield <david at bamsoftware.com>
Date:   Wed Jul 31 20:12:13 2013 -0700

    ChangeLog for intermediate certificate pins.
---
 ChangeLog |    6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 37c8b01..19c1bd6 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -53,6 +53,12 @@
     don't log IP addresses by default. Patch by Arlo Breault. Fixes bug
     9185.
 
+  o Certificate pins now match against the public keys of intermediate
+    certificates, not only those of leaves. This will help with
+    flashproxy-reg-appspot, whose leaf key was often changing. It also
+    allows us to copy pin digests directly from the Chromium source
+    code. Patch by David Fifield. Fixed bug 9167.
+
 Changes in version 1.1
   o Programs that use certificate pins now take a --disable-pin option
     that causes pins to be ignored.



More information about the tor-commits mailing list