Re: nss -- xmlSecNssX509StoreVerify question

Hi,

On Fri, Dec 09, 2016 at 09:19:07AM -0800, Aleksey Sanin <[email protected]> wrote:
> Thanks for investigation. Obviously something is not right with
> the tests. I want to investigate this further though not sure
> if I will have time in the next couple weeks.

At the end I think I hit two issues in parallel:

1) xmlSecNssX509StoreVerify() not verifying the certificate and

2) xmlSecNssX509StoreAdoptCert() ignoring the type parameter, which says
if the cerficate should be trusted or not.

https://github.com/lsh123/xmlsec/pull/72 is my attempt fixing it, but
feel free to tweak it as you like. Certainly no rush. :-)

Regards,

Miklos

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlhLBnEACgkQe81tAgORUJYdLACfY6ZBtqiUCvv4DOvIvrd3mLJj
6g4AmQHXw3zMP4qYUWBxBSoWQJeSB/CR
=FeYj
-----END PGP SIGNATURE-----