зеркало из https://github.com/mozilla/gecko-dev.git
c470850884
In bug 1406856 the failedCertChain property of nsITransportSecurityInfo was changed to hold the built certificate chain out parameter from the call to CertVerifier::VerifySSLServerCert. However, this was incorrect for two reasons: a) failedCertChain is supposed to be the peer cert chain delivered by the server in the TLS handshake and b) if VerifySSLServerCert returns a failing result, the out parameter is not guaranteed to hold any meaningful information, and must not be used. This patch sets failedCertChain to the appropriate value. MozReview-Commit-ID: BEXs5XH9SpK --HG-- extra : rebase_source : f50ea725ccb67408ab1ce33cd76d3956ebd10e29 |
||
|---|---|---|
| .. | ||
| apps | ||
| certverifier | ||
| manager | ||
| nss | ||
| pkix | ||
| sandbox | ||
| .eslintrc.js | ||
| generate_certdata.py | ||
| generate_mapfile.py | ||
| moz.build | ||
| nss.symbols | ||