Closed
Bug 1557092
Opened 5 years ago
Closed 5 years ago
add fast path to avoid calling CERT_CreateSubjectList in NSSCertDBTrustDomain::FindIssuer
Categories
(Core :: Security: PSM, enhancement, P1)
Core
Security: PSM
Tracking
()
RESOLVED
FIXED
mozilla69
| Tracking | Status | |
|---|---|---|
| firefox69 | --- | fixed |
People
(Reporter: keeler, Assigned: keeler)
References
Details
(Whiteboard: [psm-assigned])
Attachments
(1 file)
|
(deleted),
text/x-phabricator-request
|
Details |
CERT_CreateSubjectList can be slow, since it traverses all certificates in all tokens. Given intermediate preloading and the builtin roots module, we should be able to avoid it entirely for the majority of certificate verifications.
|
Assignee | |
Comment 1•5 years ago
|
||
|
||
Comment 2•5 years ago
|
||
Bugbug thinks this bug is a enhancement, but please change it back in case of error.
Type: defect → enhancement
Pushed by dkeeler@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/c6167798915a
add fast path to avoid calling CERT_CreateSubjectList for most certificate verifications r=jcj,KevinJacobs
|
||
Comment 4•5 years ago
|
||
| bugherder | ||
Status: NEW → RESOLVED
Closed: 5 years ago
status-firefox69:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla69
You need to log in
before you can comment on or make changes to this bug.
Description
•