Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-03-03 23:30:46 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Treat non-repudiation-only certs as valid signature certs.

Browse Source 
Bug 240456.  r=wtc, sr=relyea.
This commit is contained in:
nelsonb%netscape.com 2004-07-01 00:26:00 +00:00
parent 3bc297e56b
commit 23b32f634b
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
security/nss/lib/certdb/certdb.c
View File

@ -37,7 +37,7 @@
/*
* Certificate handling code
*
* $Id: certdb.c,v 1.69 2004/05/17 20:08:36 ian.mcgreer%sun.com Exp $
* $Id: certdb.c,v 1.70 2004/07/01 00:26:00 nelsonb%netscape.com Exp $
*/
#include "nssilock.h"
@ -1215,6 +1215,8 @@ loser:
SECStatus
CERT_CheckKeyUsage(CERTCertificate *cert, unsigned int requiredUsage)
{
unsigned int certKeyUsage;
if (!cert) {
PORT_SetError(SEC_ERROR_INVALID_ARGS);
return SECFailure;
@ -1249,8 +1251,12 @@ CERT_CheckKeyUsage(CERTCertificate *cert, unsigned int requiredUsage)
}
}
if ( (cert->keyUsage & requiredUsage) == requiredUsage )
certKeyUsage = cert->keyUsage;
if (certKeyUsage & KU_NON_REPUDIATION)
certKeyUsage |= KU_DIGITAL_SIGNATURE;
if ( (certKeyUsage & requiredUsage) == requiredUsage )
return SECSuccess;
loser:
PORT_SetError(SEC_ERROR_INADEQUATE_KEY_USAGE);
return SECFailure;