Permalink
Browse files

Also skip certs masked as CKT_NSS_TRUST_UNKNOWN.

Fix posted by Tomas Hoger <thoger redhat com>.
  • Loading branch information...
1 parent 98a61d8 commit cd3cf55b47332769a0e737feb9c5a6d48dce5de9 @gknauf gknauf committed Sep 20, 2011
Showing with 2 additions and 1 deletion.
  1. +2 −1 lib/mk-ca-bundle.pl
View
@@ -160,7 +160,8 @@
}
while (<TXT>) {
last if (/^#$/);
- $untrusted = 1 if (/^CKA_TRUST_SERVER_AUTH\s+CK_TRUST\s+CKT_NSS_NOT_TRUSTED$/);
+ $untrusted = 1 if (/^CKA_TRUST_SERVER_AUTH\s+CK_TRUST\s+CKT_NSS_NOT_TRUSTED$/
+ or /^CKA_TRUST_SERVER_AUTH\s+CK_TRUST\s+CKT_NSS_TRUST_UNKNOWN$/);
}
if ($untrusted) {
$skipnum ++;

0 comments on commit cd3cf55

Please sign in to comment.