mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-09-20 15:27:32 +09:00
nss: update to 3.44.1, with vc2013 fix and gyp fix
This commit is contained in:
parent
a2ef5fcde7
commit
d4b834111b
553 changed files with 1515569 additions and 1130 deletions
|
|
@ -3002,17 +3002,8 @@ PKIX_PL_Cert_VerifyCertAndKeyType(
|
|||
if (CERT_CheckKeyUsage(cert->nssCert, requiredKeyUsage) != SECSuccess) {
|
||||
PKIX_ERROR(PKIX_CERTCHECKKEYUSAGEFAILED);
|
||||
}
|
||||
if (certUsage != certUsageIPsec) {
|
||||
if (!(certType & requiredCertType)) {
|
||||
PKIX_ERROR(PKIX_CERTCHECKCERTTYPEFAILED);
|
||||
}
|
||||
} else {
|
||||
PRBool isCritical;
|
||||
PRBool allowed = cert_EKUAllowsIPsecIKE(cert->nssCert, &isCritical);
|
||||
/* If the extension isn't critical, we allow any EKU value. */
|
||||
if (isCritical && !allowed) {
|
||||
PKIX_ERROR(PKIX_CERTCHECKCERTTYPEFAILED);
|
||||
}
|
||||
if (!(certType & requiredCertType)) {
|
||||
PKIX_ERROR(PKIX_CERTCHECKCERTTYPEFAILED);
|
||||
}
|
||||
cleanup:
|
||||
PKIX_DECREF(basicConstraints);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue