340040 - certutil does not have an option for verifying OCSP status responder certs

Status: RESOLVED FIXED

(NSS :: Tools, enhancement, P2)

Description

[Julien Pierre]

Patch forthcoming.

Comment 1

[Julien Pierre]

Attachment: add O to the possible usages

Comment 2

[Julien Pierre]

FYI, this functionality was needed to diagnose a customer escalation, hence P2 rather than P3.

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 224147 [details] [diff] [review]
add O to the possible usages

I think that "O" looks confusingly like "0".   
So, I suggest using another alphabet letter. 

Alternatively, the error handling in that switch
could be enhanced to display an error message that
displays the specific option letter that was the
"invalid arg".  

I can't really give this r- just for this, 
so r=nelson, with a request for a better lettter.

Comment 4

[Julien Pierre]

Thanks for the review, Nelson.
I think O is OK because it is the first letter in "OCSP" and there shouldn't be much confusion with 0.

Checked in to the tip :

Checking in certutil.c;
/cvsroot/mozilla/security/nss/cmd/certutil/certutil.c,v  <--  certutil.c
new revision: 1.103; previous revision: 1.102
done

And NSS_3_11_BRANCH :

Checking in certutil.c;
/cvsroot/mozilla/security/nss/cmd/certutil/certutil.c,v  <--  certutil.c
new revision: 1.97.2.5; previous revision: 1.97.2.4
done