pkix_pl_OcspRequest_Create throws an error if it was not able to get AIA location

RESOLVED FIXED in 3.12

Status

NSS
Libraries
P2
normal
RESOLVED FIXED
10 years ago
10 years ago

People

(Reporter: Alexei Volkov, Assigned: Alexei Volkov)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: PKIX)

Attachments

(1 attachment)

1.25 KB, patch
Nelson Bolyard (seldom reads bugmail)
: review+
Details | Diff | Splinter Review
(Assignee)

Description

10 years ago
Created attachment 275039 [details] [diff] [review]
simple fix for the problem

The reason for the failure was the change http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/security/nss/lib/certhigh/ocsp.c&rev=1.26 made to fix bug 287850.

The fix made CERT_GetOCSPAuthorityInfoAccessLocation set code different from what was expected by libpkix in case when AIA extension is not present or undecodeble.

As the result, an error was thrown and taken as cert revocation reason.
Attachment #275039 - Flags: review?(julien.pierre.boogz)
(Assignee)

Updated

10 years ago
Whiteboard: PKIX
(Assignee)

Updated

10 years ago
Priority: -- → P2
Comment on attachment 275039 [details] [diff] [review]
simple fix for the problem

r=nelson for the trunk
Attachment #275039 - Flags: review?(julien.pierre.boogz) → review+
Of course, this is c code, which doesn't really ever "throw" anything. :)
Summary: pkix_pl_OcspRequest_Create trows an error if it was not able to get AIA location → pkix_pl_OcspRequest_Create throws an error if it was not able to get AIA location
(Assignee)

Comment 3

10 years ago
/cvsroot/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocsprequest.c,v  <--  pkix_pl_ocsprequest.c
new revision: 1.3; previous revision: 1.2
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.