| Issue 45: | Certificate validation errors "error -8155" | |
| 1 person starred this issue and may be notified of changes. | Back to list |
Sign in to add a comment
|
Reported by Tim. Currently data.coremetrics.com is the test case. The symptom is "Unable to establish an encrypted connection to data.coremetrics.com error -8155" The certificate checks out on Camino. This is probably a flaw in NSS PKI and likely affects other sites. Critical fix for 9.0.4. |
||||||||||||
,
Aug 11, 2009
The certificate when run through Netscape 4.x generates a path length constraint error, but this might be spurious. |
|||||||||||||
,
Aug 11, 2009
Actually, per http://mxr.mozilla.org/mozilla1.8/source/security/nss/lib/util/secerr.h -8155 is BASE + 37, which is indeed SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID. Go Nav4! Looks like it is thrown by http://mxr.mozilla.org/mozilla1.8/source/security/nss/lib/certhigh/certvfy.c |
|||||||||||||
,
Aug 11, 2009
This looks like our winner: https://bugzilla.mozilla.org/show_bug.cgi?id=221644 I will try to land this on the internal tree tonight and see if it fixes the problem. |
|||||||||||||
,
Aug 11, 2009
While we're at it, let's also fix https://bugzilla.mozilla.org/show_bug.cgi?id=231775 and issue 38 . There was another one I wanted to fix that's on the G5, I'll add that to this list later. |
|||||||||||||
,
Aug 11, 2009
Landed along with bugzilla 384459. Test case resolved. Marking verified.
Status: Verified
|
|||||||||||||
| ► Sign in to add a comment | |||||||||||||
