Closed Bug 1644774 Opened 5 years ago Closed 5 years ago

SSL gtests should use ClearServerCache when resetting self-encrypt keys

Categories

(NSS :: Test, defect)

defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: kjacobs, Assigned: kjacobs)

Details

Attachments

(1 file)

We have a few gtests that rely on SSLInt_ClearSelfEncryptKey to reset self-encrypt keys and invalidate previously-issued tickets.

This doesn't quite accomplish the goal: when there is a subsequent call to ssl_GenerateSelfEncryptKeysOnce (via issuing a new ticket or attempting to decrypt an old one), the previously-used key is retrieved from the cache at [1]. These tests should use ClearServerCache instead.

This is a test correctness issue only.

[1] https://searchfox.org/mozilla-central/source/security/nss/lib/ssl/sslsnce.c#2105

Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → 3.54
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: