Loren wrote:
loren@home:~/nss/nss-3.6/bin$ ./signtool -d . -l
using certificate directory: .

Object signing certificates
---------------------------------------
Test User One
    Issued by: Test Root CA - Test Company (Test Root CA)
    Expires: Tue Oct 28, 2003
Assertion failure: 0, at certvfy.c:1483
Aborted

using gdb, and run signtool -l again, its stack trace shows that the
PORT_Assertion is failed at the default clause of the switch
(certUsage) block of the function CERT_VerifyCert(), where the value
of certUsage is certUsageAnyCA

certUsage is an argument to the CERT_VerifyCert() function. I looked at the signtool code, and it calls CERT_VerifyCert() with a hardcoded value of certUsageObjectSigner. Can you paste the call stack from gdb when you see that certUsage is certUsageAnyCA?

-Ian


Reply via email to