391612 - avoid copy der, decode to new CERTCertificate structure while creating PKIX_PL_Cert

Status: NEW

(NSS :: Libraries, defect, P2)

Description

[Alexei Volkov]

Currently libpkix offers inefficient way of creating PKIX_PL_Cert through creating PKIX_PL_ByteArray structure by copying der encoded data into newly allocated memory, and later decode it into new PKIX_PL_Cert.

Creation of the structure could be done more efficiently by reusing existing CERTCertificate object.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

I think this may be more than merely inefficient.  
It may be part of the cause of bug 390381.

There's a bunch of code ifdeffed out in function PKIX_PL_Cert_CreateFromCERTCertificate that looks like it might fix this.
Is that code ready to try?
Is there any known problem with that ifdeffed code?

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Unsetting target milestone in unresolved bugs whose targets have passed.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee is inactive on Bugzilla, and this bug has priority 'P2'.
:beurdouche, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 4

[Marco Castelluccio [:marco]]

We have modified the bot to only consider P1 as high priority, so I'm cancelling the needinfo here.