crypt32: Remove iTunes chain from certificate policy tests, there's no guarantee the root cert is trusted.
This commit is contained in:
parent
8240395073
commit
8170acfc35
|
@ -1662,8 +1662,6 @@ static ChainPolicyCheck basePolicyCheck[] = {
|
|||
{ 0, TRUST_E_CERT_SIGNATURE, 0, 1, NULL }, 0 },
|
||||
{ { sizeof(selfSignedChain) / sizeof(selfSignedChain[0]), selfSignedChain },
|
||||
{ 0, CERT_E_UNTRUSTEDROOT, 0, 0, NULL }, 0 },
|
||||
{ { sizeof(iTunesChain) / sizeof(iTunesChain[0]), iTunesChain },
|
||||
{ 0, 0, -1, -1, NULL }, 0 },
|
||||
};
|
||||
|
||||
static ChainPolicyCheck authenticodePolicyCheck[] = {
|
||||
|
@ -1695,8 +1693,6 @@ static ChainPolicyCheck authenticodePolicyCheck[] = {
|
|||
{ 0, TRUST_E_CERT_SIGNATURE, 0, 1, NULL }, 0 },
|
||||
{ { sizeof(selfSignedChain) / sizeof(selfSignedChain[0]), selfSignedChain },
|
||||
{ 0, CERT_E_UNTRUSTEDROOT, 0, 0, NULL }, 0 },
|
||||
{ { sizeof(iTunesChain) / sizeof(iTunesChain[0]), iTunesChain },
|
||||
{ 0, 0, -1, -1, NULL }, 0 },
|
||||
};
|
||||
|
||||
static ChainPolicyCheck basicConstraintsPolicyCheck[] = {
|
||||
|
@ -1730,8 +1726,6 @@ static ChainPolicyCheck basicConstraintsPolicyCheck[] = {
|
|||
{ 0, 0, -1, -1, NULL }, 0 },
|
||||
{ { sizeof(selfSignedChain) / sizeof(selfSignedChain[0]), selfSignedChain },
|
||||
{ 0, 0, -1, -1, NULL }, 0 },
|
||||
{ { sizeof(iTunesChain) / sizeof(iTunesChain[0]), iTunesChain },
|
||||
{ 0, 0, -1, -1, NULL }, 0 },
|
||||
};
|
||||
|
||||
static void checkChainPolicyStatus(LPCSTR policy, ChainPolicyCheck *check,
|
||||
|
|
Loading…
Reference in New Issue