Re: [Freeipa-devel] [PATCH] 240 Better cert nickname handling

2009-07-23 Thread Jason Gerard DeRose
On Thu, 2009-07-23 at 12:25 -0400, Rob Crittenden wrote: > A few issues were found in the way we identify the root cert to trust > when importing PKCS#12 files. The regex was not specific enough and > there is no need to explicitly trust root CAs that are built into NSS. > > I also did a little

[Freeipa-devel] [PATCH] 240 Better cert nickname handling

2009-07-23 Thread Rob Crittenden
A few issues were found in the way we identify the root cert to trust when importing PKCS#12 files. The regex was not specific enough and there is no need to explicitly trust root CAs that are built into NSS. I also did a little bit of code cleanup to add logging and remove an unused import.