395224 - Don't reject certs with critical NetscapeCertType extensions in libPKIX. r=nelson

git-svn-id: svn://10.0.0.236/trunk@236337 18797224-902f-48f8-a5cc-f745e15eee43
2007-09-20 00:16:32 +00:00
parent d76efb853d
commit eab01b4612
2 changed files with 2 additions and 0 deletions
--- a/mozilla/security/nss/lib/libpkix/include/pkixt.h
+++ b/mozilla/security/nss/lib/libpkix/include/pkixt.h
@@ -478,6 +478,7 @@ PKIX_Error* PKIX_ALLOC_ERROR(void);
 #define PKIX_POLICYCONSTRAINTS_OID "2.5.29.36"
 #define PKIX_EXTENDEDKEYUSAGE_OID "2.5.29.37"
 #define PKIX_INHIBITANYPOLICY_OID "2.5.29.54"
+#define PKIX_NSCERTTYPE_OID "2.16.840.1.113730.1.1"

 #ifdef __cplusplus
 }
--- a/mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c
+++ b/mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c
@@ -57,6 +57,7 @@ static char *buildCheckedCritExtOIDs[] = {
        PKIX_BASICCONSTRAINTS_OID,
        PKIX_NAMECONSTRAINTS_OID,
        PKIX_EXTENDEDKEYUSAGE_OID,
+        PKIX_NSCERTTYPE_OID,
        NULL
 };