[Date Prev][Date Next]
Re: (ITS#6703) Patch - Mozilla NSS - reject non-file key and cert files
On 11/15/2010 12:39 PM, Howard Chu wrote:
> firstname.lastname@example.org wrote:
>> Full_Name: Rich Megginson
>> Version: 2.4.23 (current CVS HEAD)
>> OS: RHEL5
>> Submission from: (NULL) (188.8.131.52)
>> If you specify a directory instead of a file to TLS_CACERT, or if one
>> of the
>> items in the TLS_CACERTDIR is a directory, the NSS PEM reader will
>> crash. This
>> patch rejects any item which looks like a directory.
> It sounds like this is a bug that ought to be patched in the NSS PEM
> reader instead, no?
Yes, you are correct. I have filed this bug -
But the patch to openldap will allow it to bypass this problem.