зеркало из https://github.com/mozilla/gecko-dev.git
aa7979464f
Before this patch, the certificate verifier would only attempt to build a trusted path to a root with the first recognized EV OID in the end-entity certificate. Thus, if an end-entity certificate had more than one EV OID, it could fail to verify as EV if an intermediate or root had the "wrong" EV OID. This patch addresses this shortcoming by trying to build a path with each recognized EV OID in the end-entity certificate until it finds one that works. Differential Revision: https://phabricator.services.mozilla.com/D149319 |
||
|---|---|---|
| .. | ||
| tests/gtest | ||
| CRLiteTimestamp.h | ||
| CertVerifier.cpp | ||
| CertVerifier.h | ||
| ExtendedValidation.cpp | ||
| ExtendedValidation.h | ||
| NSSCertDBTrustDomain.cpp | ||
| NSSCertDBTrustDomain.h | ||
| OCSPCache.cpp | ||
| OCSPCache.h | ||
| TrustOverride-AppleGoogleDigiCertData.inc | ||
| TrustOverride-SymantecData.inc | ||
| TrustOverrideUtils.h | ||
| moz.build | ||