mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-03-02 06:22:20 +00:00

When two self-signed certificates have the same issuer and subject but different keys, mozilla::pkix can return a bad signature error or an inadequate key usage error (assuming no other suitable issuer is found). The real issue is that the certificates are self-signed, so this change attempts to detect that and return a more appropriate error. Differential Revision: https://phabricator.services.mozilla.com/D195176