489205 - Add chains test for "explicit policy" feature of libPKIX

Status: NEW

(NSS :: Test, enhancement, P2)

Description

[Nelson Bolyard (seldom reads bugmail)]

Attachment: Patch v1, add new explicitPolicy config file to scenarios (checked in)

libpkix implements the "explicit policy" feature defined in RFC 3280.
The feature causes libPKIX to detect chains that are invalid because 
the intermediate CA certificates lack the necessary certificate policies
extensions.  NSS's automated QA test "chains" does not presently have a 
set of test chains for this feature.  

The attached patch adds a new scenarios configuration file to test this
feature.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 373705 [details] [diff] [review]
Patch v1, add new explicitPolicy config file to scenarios (checked in)

You'll be happy to know that these tests all pass with a trunk build.  
Please review.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 373705 [details] [diff] [review]
Patch v1, add new explicitPolicy config file to scenarios (checked in)

Checking in explicitPolicy.cfg; initial revision: 1.1
Checking in scenarios;          new revision: 1.5; previous revision: 1.4

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee is inactive on Bugzilla, and this bug has priority 'P2'.
:beurdouche, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 4

[Marco Castelluccio [:marco]]

We have modified the bot to only consider P1 as high priority, so I'm cancelling the needinfo here.