1489 Commits

Author	SHA1	Message	Date
Juan Lang	b2ab45b78b	crypt32: Only match RDN attributes whose lengths are identical.	2009-11-21 14:31:46 +01:00
Juan Lang	8e51a866b7	crypt32: When searching for a CRL by the AKI extension, the extension has to be decoded to match.	2009-11-21 14:31:46 +01:00
Juan Lang	7dee971809	crypt32/tests: Fix a typo.	2009-11-21 14:31:46 +01:00
Juan Lang	8646c39bdb	crypt32: Finding a CRL issued by a cert should compare the cert's subject, not its issuer.	2009-11-21 14:31:46 +01:00
Juan Lang	6bc8237c63	crypt32/tests: Test one more certificate against the Verisign CRL.	2009-11-21 14:31:46 +01:00
Juan Lang	22206b909a	crypt32/tests: Fix a typo.	2009-11-21 14:31:46 +01:00
Ken Thomases	3921454398	crypt32: Read trusted root certificates from system keychain on Mac OS X.	2009-11-21 14:31:45 +01:00
Juan Lang	eee179206e	crypt32/tests: Fix tests on Win9x/ME.	2009-11-21 14:31:44 +01:00
Juan Lang	1a392e1a30	crypt32: Support checking the requested usage for a chain.	2009-11-21 14:31:44 +01:00
Juan Lang	30de103485	crypt32: Only trace a usage match if it's not empty.	2009-11-21 14:31:44 +01:00
Juan Lang	e611a83962	crypt32: Test verifying the enhanced key usage of a chain.	2009-11-21 14:31:44 +01:00
Juan Lang	9d9070ae3c	crypt32: CertFindCRLInStore with find type CRL_FIND_ISSUED_FOR shouldn't check whether the CRL is valid for the subject certificate.	2009-11-20 11:15:11 +01:00
Juan Lang	f378394acd	crypt32: Correct CertIsValidCRLForCertificate for certificates that do not contain a CRL dist points extension.	2009-11-20 11:15:06 +01:00
Juan Lang	bcbfddd82a	crypt32: Fix tests on older Windows versions.	2009-11-20 11:15:01 +01:00
Juan Lang	a3c6bc68c8	crypt32: Assume revocation server is offline if revocation status isn't known.	2009-11-20 11:14:52 +01:00
Juan Lang	9e1d31e5e5	crypt32: Fix a typo.	2009-11-20 11:14:47 +01:00
Juan Lang	8ed5a777de	crypt32: Test revocation checking with CertGetCertificateChain.	2009-11-20 11:14:41 +01:00
Juan Lang	27128bb2f8	crypt32: Add more tests for CertVerifyRevocation.	2009-11-20 11:14:00 +01:00
Juan Lang	8fcaa52d5d	crypt32: Add support for CRL_FIND_ISSUED_BY_AKI_FLAG to CertFindCRLInStore.	2009-11-19 11:49:59 +01:00
Juan Lang	b278155616	crypt32: Add more tests for CertFindCRLInStore.	2009-11-19 11:49:53 +01:00
Juan Lang	4727212e01	crypt32: Add support for CRL_FIND_ISSUED_BY_SIGNATURE_FLAG to CertFindCRLInStore.	2009-11-19 11:49:46 +01:00
Juan Lang	8beed85a2c	crypt32: Add basic flags tests flags for CertFindCRLInStore with find type CRL_FIND_ISSUED_BY.	2009-11-19 11:49:40 +01:00
Juan Lang	c84c53b1a6	crypt32: More fully implement CertIsValidCRLForCertificate.	2009-11-19 11:49:33 +01:00
Juan Lang	e5c56b1798	crypt32: Correct tests for CertIsValidCRLForCertificate.	2009-11-19 11:49:21 +01:00
Juan Lang	b16a78baa7	crypt32: Remove a redundant test.	2009-11-19 11:49:14 +01:00
Juan Lang	4fa4f67c79	crypt32: Implement CertFindCRLInStore for find type CRL_FIND_ISSUED_FOR.	2009-11-19 11:49:09 +01:00
Juan Lang	a3b462e3ea	crypt32: Add tests for CertFindCRLInStore with find type CRL_FIND_ISSUED_FOR.	2009-11-19 11:49:05 +01:00
Paul Vriens	7f5b24ed91	crypt32/tests: Fix a test failure on older crypt32.	2009-11-18 15:34:14 +01:00
Juan Lang	96073d5129	crypt32: Remove an unnecessary test for the extended key usage extension in CA certificates.	2009-11-18 11:09:20 +01:00
Juan Lang	d6958d7660	crypt32: Trace reasons for name constraint failure.	2009-11-18 11:09:08 +01:00
Juan Lang	1db8a6abda	crypt32: Only fail directory name comparison if a directory name constraint is present and doesn't match.	2009-11-18 11:09:02 +01:00
Juan Lang	a63affe5e0	crypt32: Don't apply directory name constraints to an empty subject name.	2009-11-18 11:08:55 +01:00
Juan Lang	c464875a6d	crypt32: Accept a certificate if its name matches any permitted subtree of a name constraint.	2009-11-18 11:08:49 +01:00
Juan Lang	d6f7d06cad	crypt32: Check email address in subject name against rfc822 name constraints.	2009-11-18 11:08:44 +01:00
Juan Lang	e4c03521ac	crypt32: Apply name constraints to subject name.	2009-11-18 11:08:37 +01:00
Juan Lang	6f35ae25b8	crypt32: Use helper function to compare a subject alternate name with name constraints.	2009-11-18 11:08:32 +01:00
Juan Lang	a98dad4f93	crypt32: Only apply a name constraint if the name form is present.	2009-11-18 11:08:25 +01:00
Juan Lang	f6d3348b7c	crypt32: Partially implement checking name constraints with directory names.	2009-11-18 11:08:20 +01:00
Juan Lang	7c44544a6d	crypt32: Use helper functions to match excluded and permitted subtrees of name constraints.	2009-11-18 11:08:14 +01:00
Juan Lang	9a40de08de	crypt32: Let caller set error codes when name constraints aren't met.	2009-11-18 11:08:08 +01:00
Juan Lang	f8044948ba	crypt32: Remove an unnecessary if.	2009-11-18 11:08:01 +01:00
Juan Lang	8585203103	crypt32: Prohibit name constraints that contain neither an excluded nor a permitted subtree.	2009-11-18 11:07:53 +01:00
Juan Lang	a299470622	crypt32/tests: Fix another test failure.	2009-11-17 15:14:53 +01:00
Juan Lang	440c702ce4	crypt32: Implement CertIsRDNAttrsInCertificateName.	2009-11-17 15:14:53 +01:00
Juan Lang	ed74536f0c	crypt32: Add tests for CertIsRDNAttrsInCertificateName.	2009-11-17 15:14:53 +01:00
Juan Lang	7d12294f08	crypt32: Add stub for CertIsRDNAttrsInCertificateName.	2009-11-17 15:14:53 +01:00
Juan Lang	4a948fa929	crypt32: Add more tests for CertCompareCertificateName.	2009-11-17 15:14:53 +01:00
Juan Lang	1974e61b59	crypt32: Correctly match subdomains with dns name constraints.	2009-11-17 12:05:11 +01:00
Juan Lang	b74ef17efc	crypt32: If a hostname in a URI or rfc822 name constraint doesn't begin with '.', a match must be exact.	2009-11-17 12:05:04 +01:00
Juan Lang	e82005fe2d	crypt32: Only compare the hostname portion of a URL when checking against a name constraint.	2009-11-17 12:04:58 +01:00