Bug 683449 - Really remove the exemptions; r=kaie over irc

--HG-- branch : GECKO70_2011083111_RELBRANCH extra : transplant_source : S%19%DB%18%81%808%E3%60E%DB%8A%F7%E8%A8%A5U/%1F%10
mozilla · Sep 2, 2011 · f0debee · f0debee
1 parent e3250df
commit f0debee
Showing 1 changed file with 0 additions and 12 deletions.
diff --git a/security/manager/ssl/src/nsNSSCallbacks.cpp b/security/manager/ssl/src/nsNSSCallbacks.cpp
@@ -1085,18 +1085,6 @@ PSM_SSL_BlacklistDigiNotar(CERTCertificate * serverCert,
     if (!node->cert->issuerName)
       continue;
 
-    // If it's one of the "Staat der Nederlanden Root"s, then don't blacklist.
-    // Compare names, and ensure it's a self-signed root.
-    if ((!strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") ||
-         !strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL")) &&
-        SECITEM_ItemsAreEqual(&node->cert->derIssuer,&node->cert->derSubject)
-        ) {
-      // keep as valid
-      return 0;
-    }
-
     if (strstr(node->cert->issuerName, "CN=DigiNotar")) {
       isDigiNotarIssuedCert = PR_TRUE;
     }