1415311 - Make OCSP responses available to the certificate error page.

Status: NEW

(Core :: Security: PSM, enhancement, P2)

Description

[J.C. Jones [:jcj] (he/him)]

In order to give the error analysis code the same context as Mozilla::PKIX, we need to also provide the OCSP response that was used when determining the error. One place to put that response might be nsISSLStatus, where the certificate chain is stored.

[1] http://searchfox.org/mozilla-central/source/security/manager/ssl/nsISSLStatus.idl

Comment 1

[Manish [:manishkk]]

:jcj

nsISSLStatus.idl doesn't exist.

http://searchfox.org/mozilla-central/source/security/manager/ssl/
nsISSLStatus.idl

Comment 2

[J.C. Jones [:jcj] (he/him)]

Apologies, Manish. In Bug 1468222 we consolidated nsISSLStatus info nsITransportSecurityInfo.

https://searchfox.org/mozilla-central/source/netwerk/socket/nsITransportSecurityInfo.idl

So now the idea would be to put the OCSP status there for better error pages. Thanks for the ping!