NSS libPKIX Brainstorming

Integrating libPKIX functionality is an important task for the future of NSS.

Open Questions

The following questions need to be discussed/answered before libPKIX can be used in production.

• 1
• 2
• ...

Identified Tasks

• The libPKIX development branch contains changes to existing NSS source files. These have not yet landed on NSS trunk. TODO:
  • File a tracker bug to land the diff
  • The existing NSS functions that are now exported (in order to be accessible by libPKIX) must have their names changed to follow the style.
  • Review the patch and check it in.
  • Alexei and Nelson working on this?

• Ensure consistency of verification decisions across all existing and new certificate verification functions, in particular:
  • add new verification function(s) that offer libPKIX parameters in its API
  • keep all existing verification API, but change their implementation to call libPKIX functions
  • Alexei has already been working on this and might be close already. The code currently lives in test programs.
  • Tracker bug?