summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPale Moon <git-repo@palemoon.org>2017-10-14 08:43:22 +0200
committerPale Moon <git-repo@palemoon.org>2017-10-14 08:43:22 +0200
commit0066d325df314b29aa96218fbcaba2ee53926318 (patch)
tree209725e7879422eac3554bb560aa2a51d3cec07c
parent451e215f7f94a6aec2c3ee2728836950f131b316 (diff)
downloadpalemoon-gre-0066d325df314b29aa96218fbcaba2ee53926318.tar.gz
Remove certificate issuer organization to common name fallback
Before this change, if a certificate's issuer DN did not have an organization component, nsIX509Cert.issuerOrganization would fall back to using the issuer common name. This was never a good idea, because this gave misleading information to consumers of this interface. Furthermore, it appears that all consumers of this interface already do such a fallback (for display purposes) when they've determined that it's a reasonable thing to do.
-rw-r--r--security/manager/ssl/src/nsNSSCertificate.cpp2
1 files changed, 0 insertions, 2 deletions
diff --git a/security/manager/ssl/src/nsNSSCertificate.cpp b/security/manager/ssl/src/nsNSSCertificate.cpp
index b21b4e002..1202f141c 100644
--- a/security/manager/ssl/src/nsNSSCertificate.cpp
+++ b/security/manager/ssl/src/nsNSSCertificate.cpp
@@ -743,8 +743,6 @@ nsNSSCertificate::GetIssuerOrganization(nsAString& aOrganization)
if (organization) {
aOrganization = NS_ConvertUTF8toUTF16(organization);
PORT_Free(organization);
- } else {
- return GetIssuerCommonName(aOrganization);
}
}
return NS_OK;