poppler/SignatureHandler.cc | 3 +++
1 file changed, 3 insertions(+)
New commits:
commit f3e3ebe51483050cfdf8773dbd0d6646521f17cb
Author: André Guerreiro <[email protected]>
Date: Wed Mar 2 00:35:05 2016 +0100
Load NSS root certs module
This change is needed to actually do certificate validation, because as it
is NSS is trying to load the module which contains all the builtin root certs
from the Firefox profile directory where it is usually missing. This way it
will load the module from a system library directory.
diff --git a/poppler/SignatureHandler.cc b/poppler/SignatureHandler.cc
index f299b7e..01496e3 100644
--- a/poppler/SignatureHandler.cc
+++ b/poppler/SignatureHandler.cc
@@ -15,6 +15,7 @@
#include "SignatureHandler.h"
#include "goo/gmem.h"
+#include <nss/secmod.h>
#include <dirent.h>
#include <Error.h>
@@ -95,6 +96,8 @@ void SignatureHandler::init_nss()
} else {
NSS_Init(certDBPath->getCString());
}
+ //Make sure NSS root certificates module is loaded
+ SECMOD_AddNewModule("Root Certs", "libnssckbi.so", 0, 0);
delete certDBPath;
}
_______________________________________________
poppler mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/poppler
