[tor-bugs] #2949 [Tor Browser]: Make Intermediate Cert Store Memory-Only for TorBrowser

[Tor Bug Tracker & Wiki]

#2949: Make Intermediate Cert Store Memory-Only for TorBrowser
----------------------------+-----------------------------------------------
    Reporter:  mikeperry    |       Owner:  mikeperry                 
        Type:  defect       |      Status:  closed                    
    Priority:  normal       |   Milestone:                            
   Component:  Tor Browser  |     Version:                            
  Resolution:  fixed        |    Keywords:  MikePerryIteration20110515
      Parent:  #2877        |      Points:  3                         
Actualpoints:  4            |  
----------------------------+-----------------------------------------------

Comment(by mikeperry):

 Note that the code that causes crashes is essentially the same codepath
 that Firefox itself uses during the profile switching event series. It may
 be the case that we actually need all SSL tabs to be closed for us to be
 able to shutdown and re-initialize NSS. In which case, we can remove the
 early return from this patch and still use it to clear cached certs in our
 implementation of "New Identity" (which would close all tabs as part of
 its mechanisms). But we'll want to test extensively that to make sure the
 race still isn't possible.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2949#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online