Commits on Aug 21, 2024

1. Update cert approval callback …

   Previously if a client tries to connect to a server but it does
   not have the CA signing cert installed and trusted it will get an
   UNTRUSTED_ISSUER error from NSS and the cert approval callback
   will ask the user whether to trust the cert. In the latest NSS
   the error has changed to UNKNOWN_ISSUER, so the callback has been
   updated to handle the error in the same way. The tests have also
   been updated accordingly.

   

   edewata committed Aug 21, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for d725b5f
   • Browse repository at this point

   Copy the full SHA

   d725b5f View commit details

   Browse the repository at this point in the history

2. Update sub CA tests …

   The latest NSS requires the client to have the full cert chain
   in order to validate a cert, so most of the sub CA tests have
   been updated to install the sub CA signing cert in addition to
   the root CA signing cert. For some reason the sub CA tests with
   HSM still work without these changes. That will be investigated
   separately later.

   

   edewata committed Aug 21, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 73805a1
   • Browse repository at this point

   Copy the full SHA

   73805a1 View commit details

   Browse the repository at this point in the history