gecko-dev/security
David Keeler c470850884 bug 1434831 - ensure nsITransportSecurityInfo.failedCertChain contains the *peer cert chain* r=jcj
In bug 1406856 the failedCertChain property of nsITransportSecurityInfo was
changed to hold the built certificate chain out parameter from the call to
CertVerifier::VerifySSLServerCert. However, this was incorrect for two reasons:
a) failedCertChain is supposed to be the peer cert chain delivered by the server
in the TLS handshake and
b) if VerifySSLServerCert returns a failing result, the out parameter is not
guaranteed to hold any meaningful information, and must not be used.
This patch sets failedCertChain to the appropriate value.

MozReview-Commit-ID: BEXs5XH9SpK

--HG--
extra : rebase_source : f50ea725ccb67408ab1ce33cd76d3956ebd10e29
2018-02-01 12:29:04 -08:00
..
apps bug 1421084 - part 3/4 - remove nsNSSShutDownObject::shutdown and virtualDestroyNSSReference r=mt,ttaubert 2018-01-24 14:29:08 -08:00
certverifier bug 1421084 - part 4/4 - remove nsNSSShutDown.h and (hopefully) all references to it r=mt,ttaubert 2018-01-24 14:44:01 -08:00
manager bug 1434831 - ensure nsITransportSecurityInfo.failedCertChain contains the *peer cert chain* r=jcj 2018-02-01 12:29:04 -08:00
nss Bug 1432177 - land NSS 1b20549e1075 UPGRADE_NSS_RELEASE, r=me 2018-01-29 12:28:20 +01:00
pkix bug 1430906 - don't hold around a test key forever in mozilla::pkix gtests r=franziskus 2018-01-12 13:57:51 -08:00
sandbox Bug 1386404 - Use the full tmpdir finding logic. r=jld 2018-01-30 21:31:07 +01:00
.eslintrc.js
generate_certdata.py
generate_mapfile.py
moz.build Bug 1394734 - Simplify various corner cases r=glandium 2017-12-07 22:10:19 +01:00
nss.symbols bug 1430906 - don't hold around a test key forever in mozilla::pkix gtests r=franziskus 2018-01-12 13:57:51 -08:00