crypt32: Check the issued certificate for name constraint violations, not the issuing certificate.

This commit is contained in:
Juan Lang 2009-11-09 16:35:43 -08:00 committed by Alexandre Julliard
parent ef6ce9a590
commit 865f3df35b
1 changed files with 1 additions and 1 deletions

View File

@ -801,7 +801,7 @@ static void CRYPT_CheckChainNameConstraints(PCERT_SIMPLE_CHAIN chain)
chain->rgpElement[j]->pCertContext))
{
CRYPT_CheckNameConstraints(nameConstraints,
chain->rgpElement[i]->pCertContext->pCertInfo,
chain->rgpElement[j]->pCertContext->pCertInfo,
&errorStatus);
chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
errorStatus;