23 lines
764 B
Diff
23 lines
764 B
Diff
|
commit 470da664cc0afd4aac982806622dbb5d700a7904
|
||
|
|
Author: Martin Cermak <mcermak@redhat.com>
|
||
|
|
Date: Fri Aug 9 07:40:43 2024 +0200
|
||
|
|
|
||
|
|
RHEL-52491: NSS 3.101.0 compatibility
|
||
|
|
|
||
|
|
After NSS rebased to 3.101.0, systemtap stopped being able to grant
|
||
|
|
trust to stap-server: https://issues.redhat.com/browse/RHEL-52491 .
|
||
|
|
This patch fixes it.
|
||
|
|
|
||
|
|
diff --git a/client-nss.cxx b/client-nss.cxx
|
||
|
|
index 55266feb7..c09f99ca9 100644
|
||
|
|
--- a/client-nss.cxx
|
||
|
|
+++ b/client-nss.cxx
|
||
|
|
@@ -184,6 +184,7 @@ badCertHandler(void *arg, PRFileDesc *sslSocket)
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
+ case SEC_ERROR_UNKNOWN_ISSUER:
|
||
|
|
case SEC_ERROR_CA_CERT_INVALID:
|
||
|
|
/* The server's certificate is not trusted. Should we trust it? */
|
||
|
|
secStatus = SECFailure; /* Do not trust by default. */
|