diff options
| author | julien.pierre.bugs%sun.com <devnull@localhost> | 2006-09-26 20:19:50 +0000 |
|---|---|---|
| committer | julien.pierre.bugs%sun.com <devnull@localhost> | 2006-09-26 20:19:50 +0000 |
| commit | 5618f1854060a1c91b2b8465c257569cf4fee33c (patch) | |
| tree | 5ef7fd91e796c6016e214d3f321e54991e5a4e09 | |
| parent | fbb8233e1a4022cef65ef1df593dc595e6c1acd3 (diff) | |
| download | nss-hg-5618f1854060a1c91b2b8465c257569cf4fee33c.tar.gz | |
Fix for bug 351897 . OCSP check should only be skipped for certificateStausResponder usage alone . r=rrelyea, nelsonSUNBIRD_0_3rc1_RC1SUNBIRD_0_3_RELEASESUNBIRD_0_3_BASESUNBIRD_0_3_1_RELEASESUNBIRD_0_3_1_RC1NSS_3_11_20060926_TAG
| -rw-r--r-- | security/nss/lib/certhigh/certvfy.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/nss/lib/certhigh/certvfy.c b/security/nss/lib/certhigh/certvfy.c index e55ede89d..3f9bcb80d 100644 --- a/security/nss/lib/certhigh/certvfy.c +++ b/security/nss/lib/certhigh/certvfy.c @@ -1399,7 +1399,7 @@ CERT_VerifyCertificate(CERTCertDBHandle *handle, CERTCertificate *cert, if (PR_FALSE == checkedOCSP) { checkedOCSP = PR_TRUE; /* only check OCSP once */ statusConfig = CERT_GetStatusConfig(handle); - if ( (! (requiredUsages & certificateUsageStatusResponder)) && + if ( (! (requiredUsages == certificateUsageStatusResponder)) && statusConfig != NULL) { if (statusConfig->statusChecker != NULL) { rv = (* statusConfig->statusChecker)(handle, cert, |