Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse code

Bug 683449 - Really remove the exemptions; r=kaie over irc

--HG--
branch : GECKO70_2011083111_RELBRANCH
extra : transplant_source : S%19%DB%18%81%808%E3%60E%DB%8A%F7%E8%A8%A5U/%1F%10
  • Loading branch information...
commit f0debee7a36db24a8594f8595d68c975a05bb959 1 parent e3250df
Ehsan Akhgari ehsan authored

Showing 1 changed file with 0 additions and 12 deletions. Show diff stats Hide diff stats

  1. +0 12 security/manager/ssl/src/nsNSSCallbacks.cpp
12 security/manager/ssl/src/nsNSSCallbacks.cpp
@@ -1085,18 +1085,6 @@ PSM_SSL_BlacklistDigiNotar(CERTCertificate * serverCert,
1085 1085 if (!node->cert->issuerName)
1086 1086 continue;
1087 1087
1088   - // If it's one of the "Staat der Nederlanden Root"s, then don't blacklist.
1089   - // Compare names, and ensure it's a self-signed root.
1090   - if ((!strcmp(node->cert->issuerName,
1091   - "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") ||
1092   - !strcmp(node->cert->issuerName,
1093   - "CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL")) &&
1094   - SECITEM_ItemsAreEqual(&node->cert->derIssuer,&node->cert->derSubject)
1095   - ) {
1096   - // keep as valid
1097   - return 0;
1098   - }
1099   -
1100 1088 if (strstr(node->cert->issuerName, "CN=DigiNotar")) {
1101 1089 isDigiNotarIssuedCert = PR_TRUE;
1102 1090 }

0 comments on commit f0debee

Please sign in to comment.
Something went wrong with that request. Please try again.