390381 - libpkix rejects cert chain when root CA cert has no basic constraints.
Patch: log correct error info. r=nelson git-svn-id: svn://10.0.0.236/trunk@247880 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
parent
6e7b7dba1d
commit
bcf6f9b92c
@ -835,7 +835,7 @@ cert_PkixErrorToNssCode(
|
||||
}
|
||||
if (pkixLog) {
|
||||
PR_LOG(pkixLog, 1, ("Error at level %d: %s\n", errLevel,
|
||||
PKIX_ErrorText[error->errCode]));
|
||||
PKIX_ErrorText[errPtr->errCode]));
|
||||
}
|
||||
errPtr = errPtr->cause;
|
||||
errLevel += 1;
|
||||
|
||||
@ -1038,6 +1038,7 @@ cleanup:
|
||||
goto cleanup; \
|
||||
} \
|
||||
if (verifyNode) { \
|
||||
PKIX_DECREF(verifyNode->error); \
|
||||
PKIX_INCREF(pkixErrorResult); \
|
||||
verifyNode->error = pkixErrorResult; \
|
||||
} \
|
||||
|
||||
@ -328,7 +328,6 @@ pkix_pl_EkuChecker_Check(
|
||||
void *plContext)
|
||||
{
|
||||
pkix_pl_EkuChecker *state = NULL;
|
||||
PKIX_List *certEkuList = NULL;
|
||||
PKIX_Boolean checkPassed = PKIX_TRUE;
|
||||
|
||||
PKIX_ENTER(EKUCHECKER, "pkix_pl_EkuChecker_Check");
|
||||
@ -357,7 +356,6 @@ pkix_pl_EkuChecker_Check(
|
||||
|
||||
cleanup:
|
||||
|
||||
PKIX_DECREF(certEkuList);
|
||||
PKIX_DECREF(state);
|
||||
|
||||
PKIX_RETURN(EKUCHECKER);
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user