Closed Bug 1637404 Opened 5 years ago Closed 5 years ago

osclientcerts: look for intermediate client certificates to help PSM with path building (macos)

Categories

(Core :: Security: PSM, defect, P1)

75 Branch
defect

Tracking

()

RESOLVED FIXED
mozilla78
Tracking Status
firefox78 --- fixed

People

(Reporter: keeler, Assigned: keeler)

References

(Blocks 1 open bug)

Details

(Whiteboard: [psm-assigned])

Attachments

(1 file)

+++ This bug was initially created as a clone of Bug #1631124 +++
This is bug 1631124 but for macOS.

To implement filtering client certificates by the acceptable CAs list sent by
servers when they request client certificates, we need the CAs that issued the
client certificates. To that end, this change modifies the macOS backend of
the osclientcerts module to also gather issuing CAs while looking for client
certificates. These certificates will not affect trust decisions in gecko.

Pushed by dkeeler@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/60872603fdfe osclientcerts: attempt to find issuing certificates when looking for client certificates (macOS) r=kjacobs,mstange
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla78
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: