mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-03-07 01:01:43 +00:00

When doing TLS session resumption, Firefox currently does not have enough information to trivially reconstitute the original connection's security information. Consequently, we have to rebuild the certificate chain in the handshake callback. Before this patch, we determined the EV and CT status of the connection but did not set the succeeded cert chain unless the certificate was EV. This was insufficient. In this patch, we set the succeeded cert chain regardless of if the certificate is EV or not (provided we found a valid chain). MozReview-Commit-ID: AuKrlBwX1Qh --HG-- extra : rebase_source : cafb17548666f6330038012e36fa23ef382f361a