wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 938046 - Part 3. Iterate only through valid users on getchain r=dkeeler

Browse Source
This commit is contained in:
Camilo Viecco 2013-12-11 13:04:07 -08:00
parent 77096198a8
commit a07ba7e581
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
security/manager/ssl/src/nsNSSCertificate.cpp
View File

@ -856,10 +856,18 @@ nsNSSCertificate::GetChain(nsIArray **_rvChain)
nullptr, /*XXX fixme*/
CertVerifier::FLAG_LOCAL_ONLY,
&pkixNssChain);
// This is the whitelist of all non-SSLServer usages that are supported by
// verifycert.
const int otherUsagesToTest = certificateUsageSSLClient |
certificateUsageSSLCA |
certificateUsageEmailSigner |
certificateUsageEmailRecipient |
certificateUsageObjectSigner |
certificateUsageStatusResponder;
for (int usage = certificateUsageSSLClient;
usage < certificateUsageAnyCA && !pkixNssChain;
usage = usage << 1) {
if (usage == certificateUsageSSLServer) {
if ((usage & otherUsagesToTest) == 0) {
continue;
}
PR_LOG(gPIPNSSLog, PR_LOG_DEBUG, ("pipnss: PKIX attempting chain(%d) for '%s'\n",usage, mCert->nickname));