On Mon, 2014-06-30 at 16:26 +0200, Kamil Dudka wrote:
I think it was implemented to use base names of files as nicknames,
which
caused nickname collisions in libcurl-based applications. As a workaround,
we changed it to use full paths (because we could not change the API on an
already released product).
The problem was that subsequent accesses to a file with the same name can
give us different content each time anyway. Hence, libcurl code was later
changed to select client certificates from files by DER, instead of using
their nicknames.
I've implemented a change that guarantees a unique nickname, indepednent
of file names and path.
This patch passes all regression tests in RHEL 7.
https://git.fedorahosted.org/cgit/nss-pem.git/commit/?id=02f6e5a45d59e516...
Kai