291555 - certutil -R creates a CSR with ext req list even when number of exts is zero.

Status: RESOLVED FIXED

(NSS :: Tools, defect, P1)

Description

[Neil Williams]

This was mentioned in the description for bug 291545. The comment was

"In addition it appears that CSRs created by certutil now always have an
extension request attribute even when the number of extensions is zero. Doesn't
seem correct."

We should probably produce CSRs with zero length extension request lists exactly
as we did in 9.9.5.

Comment 1

[Neil Williams]

Attachment: make null ext req lists null in CSRs

This one line change causes certutil to revert to previous behavior. Now cert
requests with no extension requests cause a null attribute list to be generated
rather than an attribute list with one null extension request in it.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

The fix to this bug will make the cert requests output by certutil the same 
as they were for NSS prior to 3.10 for the case where there are no extensions
being requested.

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 181598 [details] [diff] [review]
make null ext req lists null in CSRs

r=nelson

Comment 4

[Neil Williams]

commited patch.

/cvsroot/mozilla/security/nss/lib/certhigh/certreq.c,v  <--  certreq.c
new revision: 1.5; previous revision: 1.4
done

Comment 5

[Neil Williams]

Resolving this now that the tinderboxes are green.