Skip to content

Conversation

vmiklos
Copy link
Contributor

@vmiklos vmiklos commented Jun 25, 2018

Seems this worked only by accident on Linux so far.

vmiklos added 5 commits June 18, 2018 21:59
This is the case when the issuer certificate is not trusted, parents are not in
the trusted store, but we can find a parent in the untrusted store which has a
parent in the trusted store.

Testcase: XMLSEC_TEST_NAME="merlin-xmldsig-twenty-three/signature" nmake check-dsig
Testcase: XMLSEC_TEST_NAME="signature-big" nmake check-dsig
See <https://lists.gnu.org/archive/html/libtool/2010-04/msg00020.html>,
shrext_cmds is a command to be evaluated. Linux uses .so for both
loadable and shared libraries (in terms of libtool), so the problem is
not visible there, but on macOS this caused configure to literally look
for

libnspr4`test .$module = .yes && echo .so || echo .dylib`

for the nss backend, while nss provides libnspr4.dylib.
if(ret < 0) {
xmlSecInternalError("xmlSecMSCngKeyDataX509AdoptKeyCert",
xmlSecKeyDataGetName(x509Data));
CertFreeCertificateContext(tmpcert);
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You don't need to do it since it is free'd in the done block

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for spotting, I'll fix that later in a follow-up PR. And sorry, I forgot to rebase, these two mscng commits were already merged in a previous PR, so they were not meant to be included here. (Though the squash merge did the right thing.)

@lsh123 lsh123 merged commit 9626654 into lsh123:master Jun 25, 2018
@vmiklos vmiklos deleted the macos-configure branch June 25, 2018 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants