diff options
author | Dana Keeler <dkeeler@mozilla.com> | 2022-03-09 02:25:51 +0000 |
---|---|---|
committer | Dana Keeler <dkeeler@mozilla.com> | 2022-03-09 02:25:51 +0000 |
commit | 7d2a566944c72a7347b569de6669c550fe846f6f (patch) | |
tree | 0f40418eeca48e4399043cb568d37686d6ebfc34 /automation | |
parent | a78986a387a20724dc0daafb93b734aeb7260247 (diff) | |
download | nss-hg-7d2a566944c72a7347b569de6669c550fe846f6f.tar.gz |
Bug 1755092 - rework signature verification in mozilla::pkix r=jschanck
The initial implementation of mozilla::pkix split signature verification into
two steps: digesting the data that had been signed and then verifying that
digest. This separation added complexity that was hidden by the VFY_* APIs.
However, those APIs are in need of improvements. This patch avoids the VFY_*
APIs as well as the additional complexity by removing the separate digest step
and using the PK11_Verify* APIs directly.
Differential Revision: https://phabricator.services.mozilla.com/D138605
Diffstat (limited to 'automation')
0 files changed, 0 insertions, 0 deletions