crypt32: Implement revocation check in CertVerifySubjectCertificateContext.
This commit is contained in:
parent
1ba6f15153
commit
b0dfe4048b
|
@ -731,12 +731,16 @@ BOOL WINAPI CertVerifySubjectCertificateContext(PCCERT_CONTEXT pSubject,
|
||||||
}
|
}
|
||||||
if (*pdwFlags & CERT_STORE_REVOCATION_FLAG)
|
if (*pdwFlags & CERT_STORE_REVOCATION_FLAG)
|
||||||
{
|
{
|
||||||
PCCRL_CONTEXT crl = CertFindCRLInStore(pSubject->hCertStore,
|
DWORD flags = 0;
|
||||||
pSubject->dwCertEncodingType, 0, CRL_FIND_ISSUED_BY, pSubject, NULL);
|
PCCRL_CONTEXT crl = CertGetCRLFromStore(pSubject->hCertStore, pSubject,
|
||||||
|
NULL, &flags);
|
||||||
|
|
||||||
|
/* FIXME: what if the CRL has expired? */
|
||||||
if (crl)
|
if (crl)
|
||||||
{
|
{
|
||||||
FIXME("check CRL for subject\n");
|
if (CertVerifyCRLRevocation(pSubject->dwCertEncodingType,
|
||||||
|
pSubject->pCertInfo, 1, (PCRL_INFO *)&crl->pCrlInfo))
|
||||||
|
*pdwFlags &= CERT_STORE_REVOCATION_FLAG;
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
*pdwFlags |= CERT_STORE_NO_CRL_FLAG;
|
*pdwFlags |= CERT_STORE_NO_CRL_FLAG;
|
||||||
|
|
Loading…
Reference in New Issue