Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix chaining bug. Cert's trust needs to be set before call to matchUsage.

Browse Source 
git-svn-id: svn://10.0.0.236/trunk@111842 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
ian.mcgreer%sun.com 2002-01-10 18:10:43 +00:00
parent 28995dfed9
commit 26c0d7a35b
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
mozilla/security/nss/lib/pki/certificate.c
View File

@ -32,7 +32,7 @@
*/
#ifdef DEBUG
static const char CVS_ID[] = "@(#) $RCSfile: certificate.c,v $ $Revision: 1.23 $ $Date: 2002-01-08 18:51:16 $ $Name: not supported by cvs2svn $";
static const char CVS_ID[] = "@(#) $RCSfile: certificate.c,v $ $Revision: 1.24 $ $Date: 2002-01-10 18:10:43 $ $Name: not supported by cvs2svn $";
#endif /* DEBUG */
#ifndef NSSPKI_H
@ -649,8 +649,21 @@ nssBestCertificate_Callback
dc = nssCertificate_GetDecoding(c);
if (!best->cert) {
/* usage */
if (best->usage->anyUsage || dc->matchUsage(dc, best->usage)) {
if (best->usage->anyUsage) {
best->cert = nssCertificate_AddRef(c);
} else {
#ifdef NSS_3_4_CODE
/* For this to work in NSS 3.4, we have to go out and fill in
* all of the CERTCertificate fields. Why? Because the
* matchUsage function calls CERT_IsCACert, which needs to know
* what the trust values are for the cert.
* Ignore the returned pointer, the refcount is in c anyway.
*/
(void)STAN_GetCERTCertificate(c);
#endif
if (dc->matchUsage(dc, best->usage)) {
best->cert = nssCertificate_AddRef(c);
}
}
return PR_SUCCESS;
}