bug 912582 - false start rc4 and rsa accomodations need exact principal matches r=dkeeler

This commit is contained in:
Patrick McManus 2013-09-04 17:01:02 -04:00
parent d08f66a5b1
commit 3ba6fb1c1b

View File

@ -724,14 +724,17 @@ nsHttpChannel::RetrieveSSLOptions()
return; return;
uint32_t perm; uint32_t perm;
nsresult rv = permMgr->TestPermissionFromPrincipal(principal, nsresult rv = permMgr->TestExactPermissionFromPrincipal(principal,
"falsestart-rsa", &perm); "falsestart-rsa",
&perm);
if (NS_SUCCEEDED(rv) && perm == nsIPermissionManager::ALLOW_ACTION) { if (NS_SUCCEEDED(rv) && perm == nsIPermissionManager::ALLOW_ACTION) {
LOG(("nsHttpChannel::RetrieveSSLOptions [this=%p] " LOG(("nsHttpChannel::RetrieveSSLOptions [this=%p] "
"falsestart-rsa permission found\n", this)); "falsestart-rsa permission found\n", this));
mCaps |= NS_HTTP_ALLOW_RSA_FALSESTART; mCaps |= NS_HTTP_ALLOW_RSA_FALSESTART;
} }
rv = permMgr->TestPermissionFromPrincipal(principal, "falsestart-rc4", &perm); rv = permMgr->TestExactPermissionFromPrincipal(principal,
"falsestart-rc4",
&perm);
if (NS_SUCCEEDED(rv) && perm == nsIPermissionManager::ALLOW_ACTION) { if (NS_SUCCEEDED(rv) && perm == nsIPermissionManager::ALLOW_ACTION) {
LOG(("nsHttpChannel::RetrieveSSLOptions [this=%p] " LOG(("nsHttpChannel::RetrieveSSLOptions [this=%p] "
"falsestart-rc4 permission found\n", this)); "falsestart-rc4 permission found\n", this));