684668 - TestPilot verifies certificate chain on the main thread, thus blocking the main thread on IO

Status: RESOLVED WORKSFORME

(Mozilla Labs Graveyard :: Test Pilot, defect)

Description

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

nsIX509Cert::verifyForUsage should never be called on the main thread, because it will block the calling thread until OCSP and/or CRL and/or AIA cert fetching is complete. I am planning to remove the scriptable verifyForUsage function for this reason.

Also, AFAICT, the call to verifyForUsage should be unnecessary. If this code is trying to verify that the user didn't use a certificate error override, we can add the ablity to detect that to SSLStatus.

Comment 1

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

Since Test Pilot was removed, this is no longer an issue.