From c534a0ca240e83f0510c590a958361a98e2c9c7e Mon Sep 17 00:00:00 2001 From: wolfbeast Date: Sun, 22 Jul 2018 08:24:16 +0200 Subject: Remove incorrect debug assertion. solves #631, solves #664 --- security/certverifier/ExtendedValidation.cpp | 10 +--------- 1 file changed, 1 insertion(+), 9 deletions(-) diff --git a/security/certverifier/ExtendedValidation.cpp b/security/certverifier/ExtendedValidation.cpp index 8ac5828de..37c028c54 100644 --- a/security/certverifier/ExtendedValidation.cpp +++ b/security/certverifier/ExtendedValidation.cpp @@ -1285,15 +1285,7 @@ LoadExtendedValidationInfo() UniqueCERTCertificate cert(CERT_FindCertByIssuerAndSN(nullptr, &ias)); - // If an entry is missing in the NSS root database, it may be because the - // root database is out of sync with what we expect (e.g. a different - // version of system NSS is installed). - if (!cert) { - // The entries for the debug EV roots are at indices 0 through - // NUM_TEST_EV_ROOTS - 1. Since they're not built-in, they probably - // haven't been loaded yet. - MOZ_ASSERT(iEV < NUM_TEST_EV_ROOTS, "Could not find built-in EV root"); - } else { + if (cert) { unsigned char certFingerprint[SHA256_LENGTH]; srv = PK11_HashBuf(SEC_OID_SHA256, certFingerprint, cert->derCert.data, AssertedCast(cert->derCert.len)); -- cgit v1.2.3