Open Bug 926261 Opened 12 years ago Updated 3 years ago

mozilla::pkix does not enforce certificate policy on OCSP response signing certificates

Categories

(Core :: Security: PSM, defect, P3)

Product:
Core
Component:
Security: PSM
Type:
defect

Tracking

()

People

(Reporter: briansmith, Unassigned)

References

Details

(Whiteboard: [psm-backlog])

insanity::pkix does not enforce certificate policy on OCSP response signing certificates. The classic NSS CERT_VerifyCert doesn't even know about certificate policy at all, so this is not a regression.
See Also: → 921886
See Also: → 915931
Summary: insanity::pkix does not enforce certificate policy on OCSP response signing certificates → mozilla::pkix does not enforce certificate policy on OCSP response signing certificates
Whiteboard: [psm-backlog]
Priority: P4 → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.