wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-22 00:17:32 +09:00
Code Issues Projects Releases Packages Wiki Activity

re-introduce old nss im too tired for this

Browse source
This commit is contained in:
wuggy 2026-06-30 06:37:32 +01:00
commit 3a838106b9
2871 changed files with 1374431 additions and 1762417 deletions
Download patch file Download diff file Expand all files Collapse all files

6
security/nss/tests/chains/chains.sh Executable file → Normal file
View file

@ -917,7 +917,7 @@ verify_cert()
done
VFY_OPTS_TNAME="${DB_OPT} ${ENGINE} ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${TRUST_OPT}"
VFY_OPTS_ALL="${DB_OPT} ${ENGINE} -vv ${VFY_TIME_OPT} ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${VFY_CERTS} ${TRUST_OPT}"
VFY_OPTS_ALL="${DB_OPT} ${ENGINE} -vv ${TRUST_AND_DB_OPT} ${REV_OPTS} ${FETCH_OPT} ${USAGE_OPT} ${POLICY_OPT} ${VFY_CERTS} ${TRUST_OPT}"
TESTNAME="Verifying certificate(s) ${VFY_LIST} with flags ${VFY_OPTS_TNAME}"
echo "${SCRIPTNAME}: ${TESTNAME}"
@ -1118,7 +1118,6 @@ parse_config()
;;
"verify")
VERIFY="${VALUE}"
VFY_TIME_OPT=
TRUST=
TRUST_AND_DB=
POLICY=
@ -1127,9 +1126,6 @@ parse_config()
REV_OPTS=
USAGE_OPT=
;;
"at_time")
VFY_TIME_OPT="-b ${VALUE}"
;;
"cert")
VERIFY="${VERIFY} ${VALUE}"
;;

0
security/nss/tests/chains/ocspd-config/ocspd-certs.sh Executable file → Normal file
View file

12
security/nss/tests/chains/scenarios/nameconstraints.cfg
View file

@ -159,20 +159,12 @@ verify NameConstraints.dcissblocked:x
verify NameConstraints.dcissallowed:x
result pass
# Subject: "O = IPA.LOCAL 20200120, CN = OCSP and IPSEC"
# EKUs: OCSPSigning,ipsecUser
# Subject: "O = IPA.LOCAL 201901211552, CN = OCSP Subsystem"
#
# This tests that a non server certificate (i.e. id-kp-serverAuth
# not present in EKU) does *NOT* have CN treated as dnsName for
# purposes of Name Constraints validation (certificateUsageStatusResponder)
# https://hg.mozilla.org/projects/nss/rev/0b30eb1c3650
# purposes of Name Constraints validation
verify NameConstraints.ocsp1:x
usage 10
result pass
# This tests that a non server certificate (i.e. id-kp-serverAuth
# not present in EKU) does *NOT* have CN treated as dnsName for
# purposes of Name Constraints validation (certificateUsageIPsec)
verify NameConstraints.ocsp1:x
usage 12
result pass

1
security/nss/tests/chains/scenarios/realcerts.cfg
View file

@ -22,7 +22,6 @@ verify TestUser51:x
verify PayPalEE:x
policy OID.2.16.840.1.114412.2.1
at_time 2201010000Z
result pass
verify BrAirWaysBadSig:x