Re: (ITS#6703) Patch - Mozilla NSS - reject non-file key and cert files

[rmeggins@redhat.com]

  On 11/15/2010 01:22 PM, Howard Chu wrote:
> rmeggins@redhat.com wrote:
>>    On 11/15/2010 12:39 PM, Howard Chu wrote:
>>> rmeggins@redhat.com wrote:
>>>> Full_Name: Rich Megginson
>>>> Version: 2.4.23 (current CVS HEAD)
>>>> OS: RHEL5
>>>> URL:
>>>> ftp://ftp.openldap.org/incoming/openldap-2.4.23-reject_non_file_key_cert_pem_files-20101111.patch 
>>>>
>>>> Submission from: (NULL) (76.113.111.209)
>>>>
>>>>
>>>> If you specify a directory instead of a file to TLS_CACERT, or if one
>>>> of the
>>>> items in the TLS_CACERTDIR is a directory, the NSS PEM reader will
>>>> crash.  This
>>>> patch rejects any item which looks like a directory.
>>>
>>> It sounds like this is a bug that ought to be patched in the NSS PEM
>>> reader instead, no?
>>>
>> Yes, you are correct.  I have filed this bug -
>> https://bugzilla.redhat.com/show_bug.cgi?id=653619
>> But the patch to openldap will allow it to bypass this problem.
>
> OK. I've reviewed and committed all of your patches 6703-6706.
>
Thanks!