Issue #1746 - Update pkix code with later NSS code.

This commit is contained in:
Moonchild 2021-03-14 13:06:22 +00:00 committed by roytam1
commit ed26fe34af
38 changed files with 942 additions and 1432 deletions

View file

@ -348,7 +348,8 @@ NSSCertDBTrustDomain::CheckRevocation(EndEntityOrCA endEntityOrCA,
const CertID& certID, Time time,
Duration validityDuration,
/*optional*/ const Input* stapledOCSPResponse,
/*optional*/ const Input* aiaExtension)
/*optional*/ const Input* aiaExtension,
/*optional*/ const Input* sctExtension)
{
// Actively distrusted certificates will have already been blocked by
// GetCertTrust.
@ -788,7 +789,9 @@ CheckForStartComOrWoSign(const UniqueCERTCertList& certChain)
}
Result
NSSCertDBTrustDomain::IsChainValid(const DERArray& certArray, Time time)
NSSCertDBTrustDomain::IsChainValid(const DERArray& certArray,
Time time,
const CertPolicyId& requiredPolicy)
{
MOZ_LOG(gCertVerifierLog, LogLevel::Debug,
("NSSCertDBTrustDomain: IsChainValid"));