Bug 683449 - Really remove the exemptions; r=kaie over irc

--HG-- branch : GECKO602_2011083109_RELBRANCH extra : transplant_source : %E6_L%8B%D2C%1EK%E6%DA%8F%3D1%10%86%7E%0Cf%1F%E4
mozilla · Sep 2, 2011 · 201bc85 · 201bc85
1 parent 8e34590
commit 201bc85
Showing 1 changed file with 0 additions and 12 deletions.
diff --git a/security/manager/ssl/src/nsNSSCallbacks.cpp b/security/manager/ssl/src/nsNSSCallbacks.cpp
@@ -1083,18 +1083,6 @@ PSM_SSL_BlacklistDigiNotar(CERTCertificate * serverCert,
     if (!node->cert->issuerName)
       continue;
 
-    // If it's one of the "Staat der Nederlanden Root"s, then don't blacklist.
-    // Compare names, and ensure it's a self-signed root.
-    if ((!strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") ||
-         !strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL")) &&
-        SECITEM_ItemsAreEqual(&node->cert->derIssuer,&node->cert->derSubject)
-        ) {
-      // keep as valid
-      return 0;
-    }
-
     if (strstr(node->cert->issuerName, "CN=DigiNotar")) {
       isDigiNotarIssuedCert = PR_TRUE;
     }