| Index: nss/lib/certdb/crl.c
|
| ===================================================================
|
| --- nss/lib/certdb/crl.c (revision 195639)
|
| +++ nss/lib/certdb/crl.c (working copy)
|
| @@ -1695,7 +1695,7 @@
|
| return rv;
|
| }
|
|
|
| -static SECStatus CachedCrl_GetEntry(CachedCrl* crl, SECItem* sn,
|
| +static SECStatus CachedCrl_GetEntry(CachedCrl* crl, const SECItem* sn,
|
| CERTCrlEntry** returned)
|
| {
|
| CERTCrlEntry* acrlEntry;
|
| @@ -1722,7 +1722,7 @@
|
| }
|
|
|
| /* check if a particular SN is in the CRL cache and return its entry */
|
| -dpcacheStatus DPCache_Lookup(CRLDPCache* cache, SECItem* sn,
|
| +dpcacheStatus DPCache_Lookup(CRLDPCache* cache, const SECItem* sn,
|
| CERTCrlEntry** returned)
|
| {
|
| SECStatus rv;
|
| @@ -2631,7 +2631,7 @@
|
| *revReason = reason;
|
| }
|
|
|
| - if (t && SECSuccess != CERT_CheckCertValidTimes(issuer, t, PR_FALSE))
|
| + if (t && secCertTimeValid != CERT_CheckCertValidTimes(issuer, t, PR_FALSE))
|
| {
|
| /* we won't be able to check the CRL's signature if the issuer cert
|
| is expired as of the time we are verifying. This may cause a valid
|
|
|