Bug 1463936 - Set default security.pki.name_matching_mode to enforce (3) for all builds. r=jcj

MozReview-Commit-ID: CK3zoKfGfEr

--HG--
extra : rebase_source : fe20f240a66d809177d30043fd9f41682073cd34
This commit is contained in:
Dipen Patel 2018-06-11 14:52:07 -07:00
parent 0be64b42c5
commit e9b298da8e

View File

@ -89,11 +89,7 @@ pref("security.signed_app_signatures.policy", 2);
// 2: fall back to the subject common name for certificates valid before 23
// August 2015 if necessary
// 3: only use name information from the subject alternative name extension
#ifdef RELEASE_OR_BETA
pref("security.pki.name_matching_mode", 1);
#else
pref("security.pki.name_matching_mode", 3);
#endif
// security.pki.netscape_step_up_policy controls how the platform handles the
// id-Netscape-stepUp OID in extended key usage extensions of CA certificates.