mirror of
https://github.com/reactos/wine.git
synced 2025-02-27 08:15:36 +00:00
crypt32: Correct another chain status discrepancy with Windows.
This commit is contained in:
parent
25698f8938
commit
eeec9bf349
@ -754,10 +754,13 @@ static void CRYPT_CheckSimpleChain(PCertificateChainEngine engine,
|
||||
if (CRYPT_IsSimpleChainCyclic(chain))
|
||||
{
|
||||
/* If the chain is cyclic, then the path length constraints
|
||||
* are violated, because the chain is infinitely long.
|
||||
* are violated, because the chain is infinitely long. MS
|
||||
* misleadingly also sets the not supported name constraint bit,
|
||||
* whether or not name constraints were present.
|
||||
*/
|
||||
pathLengthConstraintViolated = TRUE;
|
||||
chain->TrustStatus.dwErrorStatus |=
|
||||
CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT |
|
||||
CERT_TRUST_INVALID_BASIC_CONSTRAINTS;
|
||||
}
|
||||
/* FIXME: check valid usages */
|
||||
|
@ -1530,7 +1530,7 @@ static ChainCheck chainCheck[] = {
|
||||
{ CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT |
|
||||
CERT_TRUST_INVALID_BASIC_CONSTRAINTS | CERT_TRUST_IS_CYCLIC, 0 },
|
||||
1, simpleStatus9 },
|
||||
TODO_ERROR | TODO_INFO },
|
||||
TODO_INFO },
|
||||
{ { sizeof(chain10) / sizeof(chain10[0]), chain10 },
|
||||
{ { 0, CERT_TRUST_HAS_PREFERRED_ISSUER },
|
||||
{ CERT_TRUST_IS_UNTRUSTED_ROOT, 0 }, 1, simpleStatus10 }, 0 },
|
||||
|
Loading…
x
Reference in New Issue
Block a user