Closed Bug 1746529 Opened 3 years ago Closed 3 years ago

only create CERTCertificates on the socket thread during certificate verification

Categories

(Core :: Security: PSM, task)

task

Tracking

()

RESOLVED FIXED
97 Branch
Tracking Status
firefox97 --- fixed

People

(Reporter: keeler, Assigned: keeler)

References

(Blocks 1 open bug)

Details

(Whiteboard: [psm-assigned])

Attachments

(1 file)

NSSCertDBTrustDomain::GetCertTrust and NSSCertDBTrustDomain::FindIssuer should be the remaining two parts of certificate verification that create CERTCertificates off the socket thread currently. Having these functions dispatch to the socket thread to do this work should improve performance and avoid potential crashes due to thread safety issues in NSS.

Pushed by dkeeler@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/0db031b96818 only create CERTCertificates on the socket thread in certificate verification r=jschanck
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → 97 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: