Bob R requests that we move all pkix functions from certvfy.c to certvfypkix.c, everything below PKIX_CertSelector *cert_GetTargetCertConstraints He also requests that we turn off EV_TEST_HACK. I assume he wants us to remove all the special code that checks for the EV_TEST_HACK env variable, and use the pkix processing.
Created attachment 293219 [details] [diff] [review] Patch v1 Bob, I think this is the change you requested. I did not change any code, only moving and removing.
Comment on attachment 293219 [details] [diff] [review] Patch v1 r+
fixed Checking in certhigh/certvfy.c; /cvsroot/mozilla/security/nss/lib/certhigh/certvfy.c,v <-- certvfy.c new revision: 1.63; previous revision: 1.62 done Checking in certhigh/certvfypkix.c; /cvsroot/mozilla/security/nss/lib/certhigh/certvfypkix.c,v <-- certvfypkix.c new revision: 1.9; previous revision: 1.8 done