Issue 100873 - Use intermediate certificates received from server for validation of server certificate
Summary: Use intermediate certificates received from server for validation of server c...
Status: CLOSED FIXED
Alias: None
Product: General
Classification: Code
Component: code (show other issues)
Version: OOo 1.0.0
Hardware: All All
: P3 Trivial (vote)
Target Milestone: OOo 3.2
Assignee: h.ilter
QA Contact: issues@framework
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-04-06 09:55 UTC by joachim.lingner
Modified: 2009-09-16 13:51 UTC (History)
5 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments
mingw port patch (7.36 KB, patch)
2009-06-21 01:43 UTC, tono
no flags Details | Diff
Patch set for connectivity (17.44 KB, patch)
2009-06-27 07:25 UTC, tono
no flags Details | Diff
Patch to modify nss/makefile.mk for mingw gcc-4.4.0 (839 bytes, patch)
2009-07-26 23:02 UTC, tono
no flags Details | Diff
Updated nss module patch for mingw gcc-4.4.0 (5.56 KB, patch)
2009-07-26 23:03 UTC, tono
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this issue.
Description joachim.lingner 2009-04-06 09:55:42 UTC
This may require update to a later version of the NSS libraries.
Comment 1 mdxonefour 2009-04-07 08:07:09 UTC
CCed: md
Comment 2 joachim.lingner 2009-06-17 15:24:36 UTC
.
Comment 3 tono 2009-06-21 01:41:17 UTC
The configure script and nss module need modification for mingw port. Only 
nsinstall.exe from old wintool.zip is the prerequisite.
Please see the patch set, which I will attach.
Comment 4 tono 2009-06-21 01:43:48 UTC
Created attachment 63108 [details]
mingw port patch
Comment 5 joachim.lingner 2009-06-25 08:15:46 UTC
@tono,vg: the built done by the build bot (termite) breaks in nss. Please have a
look.
Comment 6 tono 2009-06-25 22:42:22 UTC
@jl: The configure script is checking the existences of both 
$MOZILLABUILD/moztools and $MOZILLABUILD/msys assuming full installation of 
mozillabuild. As I wrote before, mingw build only requires nsinstall.exe that 
can also be installed from old zipfile wintool.zip or moztools.zip.

So in mingw case I am only checking the existence of $MOZILLABUILD directory 
and assume nsinstall.exe resides in $MOZILLABUILD/bin. The means the builder 
has to specify --with-mozilla-build=${mozillabuild-installation}/moztools 
instead of  --with-mozilla-build=${mozillabuild-installation} in MSVC case.

Maybe it is confusing but I rather hesitate to mandate full installation of 
mozillabuild ...

I have modified the buildbot parameter and queued the test build.

Comment 7 tono 2009-06-27 01:25:32 UTC
Now we have cleard nss build but facing the sal_Unicode-PRUChar incompatibility 
problem. (please see http://www.openoffice.org/issues/show_bug.cgi?id=101763)

The patch set for connectivity module afer seamonkey is not applicable to the 
current trunk and I will complete it in the weekend.
Comment 8 tono 2009-06-27 07:14:17 UTC
Now we have cleard nss build but facing the sal_Unicode-PRUChar incompatibility 
problem. (please see http://www.openoffice.org/issues/show_bug.cgi?id=101763)

The patch set for connectivity module afer seamonkey is not applicable to the 
current trunk and I will complete it in the weekend.
Comment 9 tono 2009-06-27 07:25:09 UTC
Created attachment 63241 [details]
Patch set for connectivity
Comment 10 joachim.lingner 2009-07-07 08:08:30 UTC
All builts are ok now. Mingw was build without using the NSS module.
Comment 11 tono 2009-07-26 22:58:12 UTC
@jl: As moz2seamonkey01 has been integrated, I would like you to resync jl127 
to m53 and test mingw build.

Additionally, I would like you to include mingw port update for gcc-4.4.0 if 
possible. It will work even before other gcc-4.4.0 related modifications are 
integrated.
Comment 12 tono 2009-07-26 23:02:17 UTC
Created attachment 63784 [details]
Patch to modify nss/makefile.mk for mingw gcc-4.4.0
Comment 13 tono 2009-07-26 23:03:20 UTC
Created attachment 63785 [details]
Updated nss module patch for mingw gcc-4.4.0
Comment 14 joachim.lingner 2009-07-27 11:55:18 UTC
@tono: I am not sure if you missed my recent mail. I got a merge conflict in
connectivity while rebasing to m53. I sent you the affected files.  Are your
latest patches to be applied after rebasing to m53?
Comment 15 joachim.lingner 2009-07-27 12:47:14 UTC
.. that is, your patch is based on m53 - not m49?
Comment 16 tono 2009-07-27 12:58:52 UTC
@jl: My latest patches are only within nss module and 
zz_dynamic_gcclib_jl127_mingw.patch is incremental, i. e. applicable to the 
recent nss/makefile.mk in cws jl127. nss_3_12_3.patch.mingw is a replacement.

Most of the modifications in connectivity that I included in 
i100873_connectivity.patch are already in m53. Others should be in the part 
modified in cws moz2seamonkey01, so you can discard my modifications if you 
face merge conflicts.
Comment 17 joachim.lingner 2009-07-30 12:35:20 UTC
.
Comment 18 joachim.lingner 2009-07-30 12:44:43 UTC
@hi: Please contact me so we can work out how to test this.
Comment 19 h.ilter 2009-08-20 12:59:32 UTC
OK, now we are able to open secure sites like https://www.sun.com depending on
certificate settings but I'll do more invetigations.
Set to verified in advance.
Comment 20 h.ilter 2009-09-16 13:51:49 UTC
Still ok in DEV300m58