Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse code

Bug 683449 - Really remove the exemptions; r=kaie over irc

--HG--
branch : GECKO70_2011083111_RELBRANCH
extra : transplant_source : S%19%DB%18%81%808%E3%60E%DB%8A%F7%E8%A8%A5U/%1F%10
  • Loading branch information...
commit f0debee7a36db24a8594f8595d68c975a05bb959 1 parent e3250df
Ehsan Akhgari authored September 02, 2011
12  security/manager/ssl/src/nsNSSCallbacks.cpp
@@ -1085,18 +1085,6 @@ PSM_SSL_BlacklistDigiNotar(CERTCertificate * serverCert,
1085 1085
     if (!node->cert->issuerName)
1086 1086
       continue;
1087 1087
 
1088  
-    // If it's one of the "Staat der Nederlanden Root"s, then don't blacklist.
1089  
-    // Compare names, and ensure it's a self-signed root.
1090  
-    if ((!strcmp(node->cert->issuerName,
1091  
-                "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") ||
1092  
-         !strcmp(node->cert->issuerName,
1093  
-                "CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL")) &&
1094  
-        SECITEM_ItemsAreEqual(&node->cert->derIssuer,&node->cert->derSubject)
1095  
-        ) {
1096  
-      // keep as valid
1097  
-      return 0;
1098  
-    }
1099  
-
1100 1088
     if (strstr(node->cert->issuerName, "CN=DigiNotar")) {
1101 1089
       isDigiNotarIssuedCert = PR_TRUE;
1102 1090
     }

0 notes on commit f0debee

Please sign in to comment.
Something went wrong with that request. Please try again.