> Loren wrote:
> >
> > loren@home:~/nss/nss-3.6/bin$ ./signtool -d . -l
> > using certificate directory: .
> >
> > Object signing certificates
> > ---------------------------------------
> > Test User One
> > Issued by: Test Root CA - Test Company (Test Root CA)
> > Expires: Tue Oct 28, 2003
> > Assertion failure: 0, at certvfy.c:1483
> > Aborted
> >
> > using gdb, and run signtool -l again, its stack trace shows that the
> > PORT_Assertion is failed at the default clause of the switch
> > (certUsage) block of the function CERT_VerifyCert(), where the value
> > of certUsage is certUsageAnyCA
>
>
> certUsage is an argument to the CERT_VerifyCert() function. I looked at
> the signtool code, and it calls CERT_VerifyCert() with a hardcoded value
> of certUsageObjectSigner. Can you paste the call stack from gdb when
> you see that certUsage is certUsageAnyCA?
>
> -Ian
>
Here comes the stack dump, please see from #6, in cert_trav_callback(), it
calls CERT_VerifyCertNow with certUsage=certUsageAnyCA:
(gdb) run
Starting program: /home/loren/nss/nss-3.6/bin/./signtool -d . -l
[New Thread 1024 (LWP 8844)]
using certificate directory: .
Object signing certificates
---------------------------------------
Test User One
Issued by: Test Root CA - Test Company (Test Root CA)
Expires: Wed Oct 29, 2003
Assertion failure: 0, at certvfy.c:1483
Program received signal SIGABRT, Aborted.
[Switching to Thread 1024 (LWP 8844)]
0x400c3ba1 in __kill () from /lib/i686/libc.so.6
(gdb) bt
#0 0x400c3ba1 in __kill () from /lib/i686/libc.so.6
#1 0x4008476b in raise (sig=6) at signals.c:65
#2 0x400c5122 in abort () at ../sysdeps/generic/abort.c:88
#3 0x4003265f in PR_Assert () at prlog.c:516
#4 0x08083cd7 in CERT_VerifyCert (handle=0x8182580, cert=0x8188ec0,
checkSig=1, certUsage=certUsageAnyCA, t=1035972082470154, wincx=0x0,
log=0x0) at certvfy.c:1483
#5 0x080840b6 in CERT_VerifyCertNow (handle=0x8182580, cert=0x8188ec0,
checkSig=1, certUsage=certUsageAnyCA, wincx=0x0) at certvfy.c:1625
#6 0x08055a2b in cert_trav_callback (cert=0x82276d0, k=0x822770c,
data=0xbffff824) at list.c:267
#7 0x0808660a in fake_der_cb (c=0x82276d0, a=0xbffff7b0) at pk11cert.c:1017
#8 0x08084ec3 in convert_cert (c=0x8194170, arg=0xbffff7a0) at
pk11cert.c:92
#9 0x080bd382 in nssPKIObjectCollection_Traverse (collection=0x81886a8,
callback=0xbffff760) at pkibase.c:885
#10 0x080b8ceb in NSSTrustDomain_TraverseCertificates (td=0x8182580,
callback=0x8084e74 <convert_cert>, arg=0xbffff7a0) at trustdomain.c:1059
#11 0x08086674 in PK11_TraverseSlotCerts (
callback=0x8055740 <cert_trav_callback>, arg=0xbffff824, wincx=0x0)
at pk11cert.c:1056
#12 0x08055473 in ListCerts (key=0x0, list_certs=1) at list.c:86
#13 0x08050b71 in main (argc=4, argv=0xbffff8c4) at signtool.c:958
#14 0x400b16e7 in __libc_start_main (main=0x805066c <main>, argc=4,
---Type <return> to continue, or q <return> to quit---
ubp_av=0xbffff8c4, init=0x804de9c <_init>, fini=0x813de60 <_fini>,
rtld_fini=0x4000dcd4 <_dl_fini>, stack_end=0xbffff8bc)
at ../sysdeps/generic/libc-start.c:129
(gdb)
