JSS hacked secvfy to take the signature when creating the context, instead of at the end of the operation. This requires changing the context struct to include the signature. The code to do this already exists and works in mozilla/security/jss/org/mozilla/jss/hclhacks/secvfy.c.
OK I've made the following changes: 1) VFY_CreateContext now accepts a NULL value for the sig argument. If you specify a NULL sig, you must specify the signature at the VFY_End time. 2) a new function was added called VFY_EndWithSignature() which takes both a context and a signature argument. Again, you can pass NULL, but if you pass NULL to both VFY_CreateContext and VFY_EndWithSignature() then the latter will fail with 'INVALID PARAMETERS'. VFY_End() simply calls VFY_EndWithSignature() passing a NULL signature. bob
Status: NEW → ASSIGNED
Is this fixed?
Priority: -- → P1
yes, I remember fixing this one specifically. bob
Status: ASSIGNED → RESOLVED
Last Resolved: 18 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.