mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-12-02 01:48:05 +00:00
c470850884
In bug 1406856 the failedCertChain property of nsITransportSecurityInfo was changed to hold the built certificate chain out parameter from the call to CertVerifier::VerifySSLServerCert. However, this was incorrect for two reasons: a) failedCertChain is supposed to be the peer cert chain delivered by the server in the TLS handshake and b) if VerifySSLServerCert returns a failing result, the out parameter is not guaranteed to hold any meaningful information, and must not be used. This patch sets failedCertChain to the appropriate value. MozReview-Commit-ID: BEXs5XH9SpK --HG-- extra : rebase_source : f50ea725ccb67408ab1ce33cd76d3956ebd10e29 |
||
---|---|---|
.. | ||
apps | ||
certverifier | ||
manager | ||
nss | ||
pkix | ||
sandbox | ||
.eslintrc.js | ||
generate_certdata.py | ||
generate_mapfile.py | ||
moz.build | ||
nss.symbols |