crypt32: Check the issued certificate for name constraint violations, not the issuing certificate.
This commit is contained in:
parent
ef6ce9a590
commit
865f3df35b
|
@ -801,7 +801,7 @@ static void CRYPT_CheckChainNameConstraints(PCERT_SIMPLE_CHAIN chain)
|
|||
chain->rgpElement[j]->pCertContext))
|
||||
{
|
||||
CRYPT_CheckNameConstraints(nameConstraints,
|
||||
chain->rgpElement[i]->pCertContext->pCertInfo,
|
||||
chain->rgpElement[j]->pCertContext->pCertInfo,
|
||||
&errorStatus);
|
||||
chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
|
||||
errorStatus;
|
||||
|
|
Loading…
Reference in New Issue