diff options
Diffstat (limited to 'chromium/third_party/nss/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c')
| -rw-r--r-- | chromium/third_party/nss/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/chromium/third_party/nss/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c b/chromium/third_party/nss/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c index f13c835699e..2036f5c9fcb 100644 --- a/chromium/third_party/nss/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c +++ b/chromium/third_party/nss/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c @@ -3135,6 +3135,7 @@ PKIX_Error * PKIX_PL_Cert_CheckNameConstraints( PKIX_PL_Cert *cert, PKIX_PL_CertNameConstraints *nameConstraints, + PKIX_Boolean treatCommonNameAsDNSName, void *plContext) { PKIX_Boolean checkPass = PKIX_TRUE; @@ -3151,11 +3152,14 @@ PKIX_PL_Cert_CheckNameConstraints( PKIX_ERROR(PKIX_OUTOFMEMORY); } - /* This NSS call returns both Subject and Subject Alt Names */ + /* This NSS call returns Subject Alt Names. If + * treatCommonNameAsDNSName is true, it also returns the + * Subject Common Name + */ PKIX_CERT_DEBUG ("\t\tCalling CERT_GetConstrainedCertificateNames\n"); nssSubjectNames = CERT_GetConstrainedCertificateNames - (cert->nssCert, arena, PR_TRUE); + (cert->nssCert, arena, treatCommonNameAsDNSName); PKIX_CHECK(pkix_pl_CertNameConstraints_CheckNameSpaceNssNames (nssSubjectNames, |