update HasUserCertsInstalled to use more efficient client certificate discovery function added in bug 1573542
Categories
(Core :: Security: PSM, task, P1)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox71 | --- | fixed |
People
(Reporter: keeler, Assigned: keeler)
References
(Blocks 1 open bug)
Details
(Whiteboard: [psm-assigned])
Attachments
(1 file)
|
(deleted),
text/x-phabricator-request
|
Details |
Bug 1573542 will add a function (probably FindNonCACertificatesWithPrivateKeys) that will provide an efficient method of finding all known client certificates with private keys (where the definition of "client certificate" is a bit loose at the moment - basically, "not a CA certificate"). nsINSSComponent.hasUserCertsInstalled should use this more efficient method rather than the current function, CERT_FindUserCertsByUsage.
|
Assignee | |
Comment 1•5 years ago
|
||
CERT_FindUserCertsByUsage is inefficient when the corpus of known certificates
consists mostly of certificates that don't have corresponding private keys,
which is expected to be the case for most Firefox users. This change updates
the "does the user have any client certificates" functionality to use the more
efficient "FindNonCACertificatesWithPrivateKeys" function added in bug 1573542.
|
||
Comment 3•5 years ago
|
||
| bugherder | ||
Description
•