wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 945349 - CertVerifier should check early for bad usages. r=briansmith

Browse Source
This commit is contained in:
Camilo Viecco 2013-12-06 13:42:44 -08:00
parent 90002db2bc
commit df14c5d1d1
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
security/manager/ssl/src/CertVerifier.cpp
View File

@ -138,6 +138,21 @@ CertVerifier::VerifyCert(CERTCertificate * cert,
*evOidPolicy = SEC_OID_UNKNOWN;
}
switch(usage){
case certificateUsageSSLClient:
case certificateUsageSSLServer:
case certificateUsageSSLCA:
case certificateUsageEmailSigner:
case certificateUsageEmailRecipient:
case certificateUsageObjectSigner:
case certificateUsageStatusResponder:
break;
default:
NS_WARNING("Calling VerifyCert with invalid usage");
PORT_SetError(SEC_ERROR_INVALID_ARGS);
return SECFailure;
}
ScopedCERTCertList trustAnchors;
SECStatus rv;
SECOidTag evPolicy = SEC_OID_UNKNOWN;

1
security/manager/ssl/src/CertVerifier.h
View File

@ -25,6 +25,7 @@ public:
// XXX: The localonly flag is ignored in the classic verification case
// *evOidPolicy == SEC_OID_UNKNOWN means the cert is NOT EV
// Only one usage per verification is supported.
SECStatus VerifyCert(CERTCertificate * cert,
const SECCertificateUsage usage,
const PRTime time,