Closed Bug 1557092 Opened 5 years ago Closed 5 years ago

add fast path to avoid calling CERT_CreateSubjectList in NSSCertDBTrustDomain::FindIssuer

Categories

(Core :: Security: PSM, enhancement, P1)

enhancement

Tracking

()

RESOLVED FIXED
mozilla69
Tracking Status
firefox69 --- fixed

People

(Reporter: keeler, Assigned: keeler)

References

Details

(Whiteboard: [psm-assigned])

Attachments

(1 file)

CERT_CreateSubjectList can be slow, since it traverses all certificates in all tokens. Given intermediate preloading and the builtin roots module, we should be able to avoid it entirely for the majority of certificate verifications.

Bugbug thinks this bug is a enhancement, but please change it back in case of error.

Type: defect → enhancement
Pushed by dkeeler@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/c6167798915a
add fast path to avoid calling CERT_CreateSubjectList for most certificate verifications r=jcj,KevinJacobs
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla69
Regressions: 1558977
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: