[poppler] Branch 'signatureHandling' - poppler/SignatureHandler.cc

[Albert Astals Cid]

 poppler/SignatureHandler.cc |    3 +++
 1 file changed, 3 insertions(+)

New commits:
commit f3e3ebe51483050cfdf8773dbd0d6646521f17cb
Author: André Guerreiro <aguerreiro1985 at gmail.com>
Date:   Wed Mar 2 00:35:05 2016 +0100

    Load NSS root certs module
    
    This change is needed to actually do certificate validation, because as it is NSS is trying to load the module which contains all the builtin root certs from the Firefox profile directory where it is usually missing. This way it will load the module from a system library directory.

diff --git a/poppler/SignatureHandler.cc b/poppler/SignatureHandler.cc
index f299b7e..01496e3 100644
--- a/poppler/SignatureHandler.cc
+++ b/poppler/SignatureHandler.cc
@@ -15,6 +15,7 @@
 
 #include "SignatureHandler.h"
 #include "goo/gmem.h"
+#include <nss/secmod.h>
 
 #include <dirent.h>
 #include <Error.h>
@@ -95,6 +96,8 @@ void SignatureHandler::init_nss()
   } else {
     NSS_Init(certDBPath->getCString());
   }
+  //Make sure NSS root certificates module is loaded
+  SECMOD_AddNewModule("Root Certs", "libnssckbi.so", 0, 0);
 
   delete certDBPath;
 }