Bug 683449 - Remove the exemptions for the Staat der Nederlanden root; rs=LegNeato
authorEhsan Akhgari <ehsan@mozilla.com>
Fri, 02 Sep 2011 13:53:47 -0400
changeset 76446 471f4fbc9c85853e3e91d351c9f57d53124ce22f
parent 76445 095e2524cad947afe60416e67fac3c13086f829b
child 76447 db763ec38c6a5b884a0b7d63079f9a9f953d6ce8
push id3
push userfelipc@gmail.com
push dateFri, 30 Sep 2011 20:09:13 +0000
reviewersLegNeato
bugs683449
milestone9.0a1
Bug 683449 - Remove the exemptions for the Staat der Nederlanden root; rs=LegNeato
security/manager/ssl/src/nsNSSCallbacks.cpp
--- a/security/manager/ssl/src/nsNSSCallbacks.cpp
+++ b/security/manager/ssl/src/nsNSSCallbacks.cpp
@@ -1064,25 +1064,16 @@ PSM_SSL_BlacklistDigiNotar(CERTCertifica
         NS_ASSERTION(status == PR_SUCCESS, "PR_ParseTimeString failed");
         if (status != PR_SUCCESS ||
            CERT_GetCertTimes(serverCert, &notBefore, &notAfter) != SECSuccess ||
            notBefore >= cutoff) {
           return SEC_ERROR_REVOKED_CERTIFICATE;
         }
       }
     }
-
-    // By request of the Dutch government
-    if ((!strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA,O=Staat der Nederlanden,C=NL") ||
-         !strcmp(node->cert->issuerName,
-                "CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL")) &&
-        CERT_LIST_END(CERT_LIST_NEXT(node), serverCertChain)) {
-      return 0;
-    }
   }
 
   if (isDigiNotarIssuedCert)
     return SEC_ERROR_UNTRUSTED_ISSUER; // user can override this
   else
     return 0; // No DigiNotor cert => carry on as normal
 }