Bug 683449 - DigiNotar patch erroneously blocks one of the two Staat …

…der Nederlanden roots; r=kaie a=johnath
mozilla · Aug 31, 2011 · 93d1ff6 · 93d1ff6
1 parent 132aa47
commit 93d1ff6
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/security/manager/ssl/src/nsNSSCallbacks.cpp b/security/manager/ssl/src/nsNSSCallbacks.cpp
@@ -1069,8 +1069,10 @@ PSM_SSL_BlacklistDigiNotar(CERTCertificate * serverCert,
     }
 
     // By request of the Dutch government
-    if (!strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") &&
+    if ((!strcmp(node->cert->issuerName,
+                "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") ||
+         !strcmp(node->cert->issuerName,
+                "CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL")) &&
         CERT_LIST_END(CERT_LIST_NEXT(node), serverCertChain)) {
       return 0;
     }