| commit | f028d396a3932db8a1b21a0dfda74ee139bc71b7 | [log] [tgz] |
|---|---|---|
| author | Ben Schwartz <bemasc@google.com> | Mon Jul 10 15:07:12 2017 -0400 |
| committer | Ben Schwartz <bemasc@google.com> | Wed Aug 16 10:31:03 2017 -0400 |
| tree | 851e88d6bbdcc9c62dbb95461819ed9ce8e5f71d | |
| parent | cd9c77c5b6ea00563625ab389f95fbd397f6f2d2 [diff] |
Add support for non-leaf DNS-over-TLS pinning This is required by the pinning specification (RFC 7469). It allows more flexible server management than leaf-only pinning. Includes integration tests for fingerprints from the middle and root of a certificate chain. Test: Integration tests pass Bug: 63448475 Change-Id: I65d1255b8dac005d4ab0859c8e8abda84d7b96f8