summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorDaiki Ueno <dueno@redhat.com>2018-01-31 14:07:51 +0100
committerDaiki Ueno <ueno@gnu.org>2018-01-31 14:54:43 +0100
commit57697eda68a3343c2e54e5f8f3f4ce65a99383f5 (patch)
tree45aa3d0377cbacf6e9ecb07dd296c841469734b3 /doc
parent14853b1d8466d4e3b5aa23ff14f2abacd4e7e8ef (diff)
trust: Filter out duplicate extensions
The trust policy module keeps all the objects in the database, while PKIX doesn't allow multiple extensions identified by the same OID can be attached to a certificate. Add a check to C_FindObjects to exclude any duplicates and only return the first matching object. It would be better if the module rejects such duplicates when loading, but it would make startup slower. https://bugzilla.redhat.com/show_bug.cgi?id=1141241
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions