Commit cd3cf55b authored by Guenter Knauf's avatar Guenter Knauf
Browse files

Also skip certs masked as CKT_NSS_TRUST_UNKNOWN. 

Fix posted by Tomas Hoger <thoger redhat com>.
parent 98a61d8e

lib/mk-ca-bundle.pl

+2 −1
Original line number Diff line number Diff line
@@ -160,7 +160,8 @@ while (<TXT>) { 
    }

    while (<TXT>) {

      last if (/^#$/);

      $untrusted = 1 if (/^CKA_TRUST_SERVER_AUTH\s+CK_TRUST\s+CKT_NSS_NOT_TRUSTED$/);

      $untrusted = 1 if (/^CKA_TRUST_SERVER_AUTH\s+CK_TRUST\s+CKT_NSS_NOT_TRUSTED$/

                     or /^CKA_TRUST_SERVER_AUTH\s+CK_TRUST\s+CKT_NSS_TRUST_UNKNOWN$/);

    }

    if ($untrusted) {

      $skipnum ++;