diff --git a/build/pgo/automation.py.in b/build/pgo/automation.py.in index 49e009ea01f..75dc81954a3 100644 --- a/build/pgo/automation.py.in +++ b/build/pgo/automation.py.in @@ -361,8 +361,11 @@ def fillCertificateDB(profileDir): for item in files: root, ext = os.path.splitext(item) if ext == ".ca": + trustBits = "CT,," + if root.endswith("-object"): + trustBits = "CT,,CT" Process([certutil, "-A", "-i", os.path.join(CERTS_SRC_DIR, item), - "-d", profileDir, "-f", pwfilePath, "-n", root, "-t", "CT,,"], + "-d", profileDir, "-f", pwfilePath, "-n", root, "-t", trustBits], env = environment()).wait() if ext == ".client": Process([pk12util, "-i", os.path.join(CERTS_SRC_DIR, item), "-w", diff --git a/build/pgo/certs/jartests-object.ca b/build/pgo/certs/jartests-object.ca new file mode 100644 index 00000000000..fc6d0ffb5e9 --- /dev/null +++ b/build/pgo/certs/jartests-object.ca @@ -0,0 +1,15 @@ +-----BEGIN CERTIFICATE----- +MIICTTCCAbagAwIBAgIBADANBgkqhkiG9w0BAQUFADBaMRMwEQYDVQQLEwpVbml0 +IFRlc3RzMRgwFgYDVQQKEw9Nb3ppbGxhIFRlc3RpbmcxKTAnBgNVBAMTIFNpZ25l +ZCBKQVIgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTA5MDExNTE0MDkwM1oXDTM0 +MDExNTE0MDkwM1owWjETMBEGA1UECxMKVW5pdCBUZXN0czEYMBYGA1UEChMPTW96 +aWxsYSBUZXN0aW5nMSkwJwYDVQQDEyBTaWduZWQgSkFSIENlcnRpZmljYXRlIEF1 +dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAsQd8eUw4WSK7YoKl +hqe+CjEgI5Rs3TirWtDsfmMtMBmTvRhJpdTeMAFTpWvlOPuXJwkKXMMFLxE8ayNX +fO5ixCgJ7LrpguOVZ3pY4RvEyE6yh3Hv81Ztblbo120IdcrkyN4KMs5EgeauDllU +ehhbq9lmnmQxIQs3KPcoMteqAXcCAwEAAaMjMCEwEQYJYIZIAYb4QgEBBAQDAgAH +MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAAZHhPT133TcavAKnn37X +0VE9davrX7t20CLb06KYpgkg7yO0BjIjTnYeJBQgaH652pZVEFT7dbi0JTn4BMXz +EwOQ2JjzjwNUDHpWAopiCKxAnjwy/kGcZfkKUydwQHKr8m1Faywu1Cyrj0gBHClL +b2b9ywK4pb545mE6V9pi1zg= +-----END CERTIFICATE-----