Skip to content

crypto: fix CA trust block parsing #64753

Open
Archkon wants to merge 1 commit into
nodejs:mainfrom
Archkon:cert
Open

crypto: fix CA trust block parsing #64753
Archkon wants to merge 1 commit into
nodejs:mainfrom
Archkon:cert

Conversation

@Archkon

@Archkon Archkon commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

Fixes: #64752

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/crypto

@Archkon
Archkon marked this pull request as draft July 26, 2026 05:51
@nodejs-github-bot nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. lib / src Issues and PRs related to general changes in the lib or src directory. needs-ci PRs that need a full CI run. labels Jul 26, 2026
@Archkon Archkon changed the title stage crypto: honor NSS distrust-after dates Jul 26, 2026
@Archkon

Archkon commented Jul 26, 2026

Copy link
Copy Markdown
Contributor Author

ping @bnoordhuis

@codecov

codecov Bot commented Jul 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.13%. Comparing base (4a5eb1c) to head (8f1e831).

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #64753      +/-   ##
==========================================
- Coverage   90.15%   90.13%   -0.03%     
==========================================
  Files         744      744              
  Lines      242517   242517              
  Branches    45688    45696       +8     
==========================================
- Hits       218642   218583      -59     
- Misses      15358    15434      +76     
+ Partials     8517     8500      -17     

see 30 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Treat blank lines, rather than comments, as trust block boundaries when
parsing certdata.txt. This ensures trust attributes following
CKA_NSS_SERVER_DISTRUST_AFTER comments are still processed.

Signed-off-by: Archkon <180910180+Archkon@users.noreply.github.com>
@Archkon Archkon changed the title crypto: honor NSS distrust-after dates crypto: fix CA trust block parsing Jul 26, 2026
@Archkon
Archkon marked this pull request as ready for review July 26, 2026 10:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c++ Issues and PRs that require attention from people who are familiar with C++. lib / src Issues and PRs related to general changes in the lib or src directory. needs-ci PRs that need a full CI run.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

crypto: mk-ca-bundle.pl drops Izenpe.com and loses NSS SERVER_DISTRUST_AFTER semantics

2 participants