QuicToyClient provides a hostname to CreateDefaultProofVerifier gfe-relnote: n/a (quic tools only change) PiperOrigin-RevId: 265579643 Change-Id: Ife5e3b2f29cb774e0c99437acefd8db91e468108
diff --git a/quic/platform/api/quic_default_proof_providers.h b/quic/platform/api/quic_default_proof_providers.h index 6f3b636..9890709 100644 --- a/quic/platform/api/quic_default_proof_providers.h +++ b/quic/platform/api/quic_default_proof_providers.h
@@ -13,11 +13,12 @@ namespace quic { -// Provides a default proof verifier. The verifier has to do a good faith -// attempt at verifying the certificate against a reasonable root store, and not -// just always return success. -inline std::unique_ptr<ProofVerifier> CreateDefaultProofVerifier() { - return CreateDefaultProofVerifierImpl(); +// Provides a default proof verifier that can verify a cert chain for |host|. +// The verifier has to do a good faith attempt at verifying the certificate +// against a reasonable root store, and not just always return success. +inline std::unique_ptr<ProofVerifier> CreateDefaultProofVerifier( + const std::string& host) { + return CreateDefaultProofVerifierImpl(host); } // Provides a default proof source for CLI-based tools. The actual certificates
diff --git a/quic/tools/quic_toy_client.cc b/quic/tools/quic_toy_client.cc index 319d3a2..ed05600 100644 --- a/quic/tools/quic_toy_client.cc +++ b/quic/tools/quic_toy_client.cc
@@ -216,7 +216,7 @@ if (GetQuicFlag(FLAGS_disable_certificate_verification)) { proof_verifier = quic::QuicMakeUnique<FakeProofVerifier>(); } else { - proof_verifier = quic::CreateDefaultProofVerifier(); + proof_verifier = quic::CreateDefaultProofVerifier(url.host()); } // Build the client, and try to connect.