From eab01b4612823f3846d433e8308637daecfb941a Mon Sep 17 00:00:00 2001 From: "alexei.volkov.bugs%sun.com" Date: Thu, 20 Sep 2007 00:16:32 +0000 Subject: [PATCH] 395224 - Don't reject certs with critical NetscapeCertType extensions in libPKIX. r=nelson git-svn-id: svn://10.0.0.236/trunk@236337 18797224-902f-48f8-a5cc-f745e15eee43 --- mozilla/security/nss/lib/libpkix/include/pkixt.h | 1 + mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c | 1 + 2 files changed, 2 insertions(+) diff --git a/mozilla/security/nss/lib/libpkix/include/pkixt.h b/mozilla/security/nss/lib/libpkix/include/pkixt.h index 01d38644e94..b44e2473e13 100755 --- a/mozilla/security/nss/lib/libpkix/include/pkixt.h +++ b/mozilla/security/nss/lib/libpkix/include/pkixt.h @@ -478,6 +478,7 @@ PKIX_Error* PKIX_ALLOC_ERROR(void); #define PKIX_POLICYCONSTRAINTS_OID "2.5.29.36" #define PKIX_EXTENDEDKEYUSAGE_OID "2.5.29.37" #define PKIX_INHIBITANYPOLICY_OID "2.5.29.54" +#define PKIX_NSCERTTYPE_OID "2.16.840.1.113730.1.1" #ifdef __cplusplus } diff --git a/mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c b/mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c index 49da22f4ee5..ef670997e91 100755 --- a/mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c +++ b/mozilla/security/nss/lib/libpkix/pkix/top/pkix_build.c @@ -57,6 +57,7 @@ static char *buildCheckedCritExtOIDs[] = { PKIX_BASICCONSTRAINTS_OID, PKIX_NAMECONSTRAINTS_OID, PKIX_EXTENDEDKEYUSAGE_OID, + PKIX_NSCERTTYPE_OID, NULL };