On Tuesday, July 22, 2014 17:11:39 Kai Engert wrote:
On Mon, 2014-06-30 at 16:26 +0200, Kamil Dudka wrote:
> I think it was implemented to use base names of files as nicknames, which
> caused nickname collisions in libcurl-based applications. As a
> workaround,
> we changed it to use full paths (because we could not change the API on an
> already released product).
>
> The problem was that subsequent accesses to a file with the same name can
> give us different content each time anyway. Hence, libcurl code was later
> changed to select client certificates from files by DER, instead of using
> their nicknames.
I've implemented a change that guarantees a unique nickname, indepednent
of file names and path.
This patch passes all regression tests in RHEL 7.
https://git.fedorahosted.org/cgit/nss-pem.git/commit/?id=02f6e5a45d59e516381
b6e41f4ba03dbe874e1a7
Kai
What will happen if getUniquePEMNicknameFromFilename() returns NULL?
Kamil