Closed Bug 1980429 Opened 4 months ago Closed 4 months ago

Remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain

Categories

(NSS :: Libraries, enhancement, P3)

enhancement

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: jschanck, Assigned: jschanck)

References

Details

Attachments

(1 file)

The last intermediate certificates that required the id-Netscape-stepUp EKU expired in 2020 (see discussion in Bug 982292). We can remove the NetscapeStepUpMatchesServerAuth method from TrustDomain.

Blocks: 1980431
Attachment #9504302 - Attachment description: WIP: Bug 1980429 - remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain. → Bug 1980429 - remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain. r=keeler
Status: NEW → RESOLVED
Closed: 4 months ago
Resolution: --- → FIXED

The new PKCS #11 Trust objects no longer carry the Step up attribute as well.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: