1404939 - Modify CertBlocklistService to allow storage of intermediate whitelist entries

Status: RESOLVED DUPLICATE of bug 1603834

(Core :: Security: PSM, enhancement, P3)

Description

[Mark Goodwin [:mgoodwin]]

The naming is kind of blocklist specific - also, we need to support a third list to allow us to list the subject and public key hash pairs for the whitelisted intermediates.

Comment 1

[Mark Goodwin [:mgoodwin]]

Probably this will look something like this:

1) Rename nsICertBlocklist and CertBlocklist(.h/.cpp) to nsICertificateList and CertificateList(.h/.cpp)
2) Modify the interfaces to:
  a) rename AddRevokedCert* to AddCertificate*
  b) add a param so the list is specified; e.g. "revocations" for blocklist entries, "intermediates" for disclosed intermediates
3) Rename IsCertRevoked to IsCertIncluded, add a param to specify the list to be checked ("revocations", "intermediates").
3) Rename BlocklistTable, BlocklistItemKey, BlocklistStringSet to CertList*
4) Have a map of lists (revocations, intermediates) to CertListTable instances (formerly BlocklistTable)

Comment 2

[Sylvestre Ledru [:Sylvestre]]

Moving to p3 because no activity for at least 24 weeks.

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

cert_storage took care of this.