Boris Zbarsky schrieb:
> I'm not sure what parts of the CERTCertificate are needed for this; I'm 
> hoping 
> someone here will know.
>   

I would propose you always save the full CERTCertificate.

I would prefer that we avoid having to implement special code for an 
after-restore scenario where only a subset of information is availaible.

nsIX509Cert expects the underlying CERTCertificate to be complete and 
valid, and serializing/restoring it based on the DER representation will 
ensure it.

Kai
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to