crypt32: Only check revocation on a chain without other errors.
This commit is contained in:
parent
8115c6243b
commit
596cd16fc4
|
@ -2638,6 +2638,7 @@ BOOL WINAPI CertGetCertificateChain(HCERTCHAINENGINE hChainEngine,
|
||||||
if (!(dwFlags & CERT_CHAIN_RETURN_LOWER_QUALITY_CONTEXTS))
|
if (!(dwFlags & CERT_CHAIN_RETURN_LOWER_QUALITY_CONTEXTS))
|
||||||
CRYPT_FreeLowerQualityChains(chain);
|
CRYPT_FreeLowerQualityChains(chain);
|
||||||
pChain = (PCERT_CHAIN_CONTEXT)chain;
|
pChain = (PCERT_CHAIN_CONTEXT)chain;
|
||||||
|
if (!pChain->TrustStatus.dwErrorStatus)
|
||||||
CRYPT_VerifyChainRevocation(pChain, pTime, pChainPara, dwFlags);
|
CRYPT_VerifyChainRevocation(pChain, pTime, pChainPara, dwFlags);
|
||||||
CRYPT_CheckUsages(pChain, pChainPara);
|
CRYPT_CheckUsages(pChain, pChainPara);
|
||||||
if (ppChainContext)
|
if (ppChainContext)
|
||||||
|
|
Loading…
Reference in New Issue