rpms/ca-certificates
7
0
Fork 0
Code Issues Pull Requests Releases Activity

* certdata2pem.py was checking an obsoleted variable CKT_NSS_UNTRUSTED

Browse Source 
This was recently changed to CKT_NSS_NOT_TRUSTED, so I've changed the
python code to check for both.
This commit is contained in:
Paul Wouters 2012-10-24 13:55:29 -04:00
parent 0a930f04ef
commit d5bb2887a4
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
certdata2pem.py
View File

@ -104,7 +104,8 @@ for obj in objects:
trust[obj['CKA_LABEL']] = True
elif obj['CKA_TRUST_CODE_SIGNING'] == 'CKT_NSS_TRUSTED_DELEGATOR':
trust[obj['CKA_LABEL']] = True
elif obj['CKA_TRUST_SERVER_AUTH'] == 'CKT_NSS_UNTRUSTED':
# NSS recently changed CKT_NSS_UNTRUSTED to CKT_NSS_NOT_TRUSTED
elif obj['CKA_TRUST_SERVER_AUTH'] == 'CKT_NSS_UNTRUSTED' or obj['CKA_TRUST_SERVER_AUTH'] == 'CKT_NSS_NOT_TRUSTED':
print '!'*74
print "UNTRUSTED BUT NOT BLACKLISTED CERTIFICATE FOUND: %s" % obj['CKA_LABEL']
print '!'*74