security/pkix: align pkix with nss' mozpkix and fix CheckRevocation API type in application codes

2026-09-09 01:08:39 +09:00 · 2021-12-17 22:09:38 +08:00 · 2021-12-17 22:09:38 +08:00 · 2a8bbf94bb
commit 2a8bbf94bb
parent a140666918
11 changed files with 22 additions and 23 deletions
--- a/security/pkix/lib/pkixbuild.cpp
+++ b/security/pkix/lib/pkixbuild.cpp
@ -234,9 +234,9 @@ PathBuildingStep::Check(Input potentialIssuerDER,
    }
    Duration validityDuration(notAfter, notBefore);
    rv = trustDomain.CheckRevocation(subject.endEntityOrCA, certID, time,
-                                     validityDuration, stapledOCSPResponse,
-                                     subject.GetAuthorityInfoAccess(),
-                                     subject.GetSignedCertificateTimestamps());
+                                     notBefore, validityDuration,
+                                     stapledOCSPResponse,
+                                     subject.GetAuthorityInfoAccess());
    if (rv != Success) {
      // Since this is actually a problem with the current subject certificate
      // (rather than the issuer), it doesn't make sense to keep going; all