Confirmed users
299
edits
SecurityEngineering/Removing Compatibility Workarounds in mozilla::pkix: Difference between revisions
Jump to navigation
Jump to search
SecurityEngineering/Removing Compatibility Workarounds in mozilla::pkix (view source)
Revision as of 19:52, 28 October 2015
, 28 October 2015fill out DER OPTIONAL BOOLEAN section
(fill out id-Netscape-stepUp section) |
(fill out DER OPTIONAL BOOLEAN section) |
||
| Line 10: | Line 10: | ||
** Code affected: CheckIssuerIndependentProperties -> CheckExtendedKeyUsage -> MatchEKU (pkixcheck.cpp) | ** Code affected: CheckIssuerIndependentProperties -> CheckExtendedKeyUsage -> MatchEKU (pkixcheck.cpp) | ||
** Expected difficulty: easy | ** Expected difficulty: easy | ||
* DER: default | * DER: default value of OPTIONAL BOOLEAN explicitly encoded | ||
** Workaround introduced in [https://bugzilla.mozilla.org/show_bug.cgi?id=989516 bug 989516] for Basic Constraints (cA field) | |||
** Workaround introduced in [https://bugzilla.mozilla.org/show_bug.cgi?id=1060929 bug 1060929] for Extension (critical field) | |||
** Workaround to be removed in [https://bugzilla.mozilla.org/show_bug.cgi?id=989518 bug 989518] | |||
** Code affected: pkixcheck.cpp, pkixder.h, pkixcert.cpp, pkixocsp.cpp | |||
** Expected difficulty: difficult | |||
* pathLenConstraint when cA:False (bug 982878) | * pathLenConstraint when cA:False (bug 982878) | ||
* use of subject CN for naming information | * use of subject CN for naming information | ||
* Non-PrintableString/UTF8String in DNs | * Non-PrintableString/UTF8String in DNs | ||
* nameConstraints/subjectAlternativeName encoding mismatches | * nameConstraints/subjectAlternativeName encoding mismatches | ||