wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 470240 - unrecognized certificate should highlight the case when there's no chain provided. r=kaie

Browse Source
This commit is contained in:
timeless 2009-09-26 21:04:19 +02:00
parent fee99eb3f2
commit 8b08ec8137
2 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
security/manager/locales/en-US/chrome/pipnss/pipnss.properties
View File

@ -344,6 +344,7 @@ certErrorIntro=%S uses an invalid security certificate.
certErrorTrust_SelfSigned=The certificate is not trusted because it is self-signed.
certErrorTrust_UnknownIssuer=The certificate is not trusted because the issuer certificate is unknown.
certErrorTrust_MissingChain=The certificate is not trusted because no issuer chain was provided.
certErrorTrust_CaInvalid=The certificate is not trusted because it was issued by an invalid CA certificate.
certErrorTrust_Issuer=The certificate is not trusted because the issuer certificate is not trusted.
certErrorTrust_ExpiredIssuer=The certificate is not trusted because the issuer certificate has expired.

13
security/manager/ssl/src/nsNSSIOLayer.cpp
View File

@ -86,6 +86,7 @@
#include "nsProxyRelease.h"
#include "nsIClassInfoImpl.h"
#include "nsIProgrammingLanguage.h"
#include "nsIArray.h"
#include "ssl.h"
#include "secerr.h"
@ -922,8 +923,18 @@ AppendErrorTextUntrusted(PRErrorCode errTrust,
if (!errorID) {
switch (errTrust) {
case SEC_ERROR_UNKNOWN_ISSUER:
errorID = "certErrorTrust_UnknownIssuer";
{
nsCOMPtr<nsIArray> chain;
ix509->GetChain(getter_AddRefs(chain));
PRUint32 length = 0;
if (chain && NS_FAILED(chain->GetLength(&length)))
length = 0;
if (length == 1)
errorID = "certErrorTrust_MissingChain";
else
errorID = "certErrorTrust_UnknownIssuer";
break;
}
case SEC_ERROR_INADEQUATE_KEY_USAGE:
// Should get an individual string in the future
// For now, use the same as CaInvalid