Closed Bug 606049 Opened 14 years ago Closed 14 years ago

Add the SSL peer's CA certificates to ss->ssl3.peerCertChain in the correct order.

Categories

(NSS :: Libraries, enhancement, P2)

enhancement

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: wtc, Assigned: wtc)

Details

Attachments

(1 file)

Attached patch Proposed patchSplinter Review
ss->ssl3.peerCertChain is a linked list of ssl3CertNode's.

Right now the SSL peer's CA certificates are added to
ss->ssl3.peerCertChain in the opposite order in which they
are received.

The order doesn't matter today, but I plan to add a new
SSL_PeerCertificates (or SSL_PeerCertificateChain) function
that returns all the certificates in the Certificate message,
so I'll need to preserve that order.  This patch is a
prerequisite.
Attachment #484917 - Flags: review?(nelson)
Comment on attachment 484917 [details] [diff] [review]
Proposed patch

r=nelson
Attachment #484917 - Flags: review?(nelson) → review+
Patch checked in on the NSS trunk (NSS 3.13).

Checking in ssl3con.c;
/cvsroot/mozilla/security/nss/lib/ssl/ssl3con.c,v  <--  ssl3con.c
new revision: 1.149; previous revision: 1.148
done
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: