crypt32: Set CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT when appropriate.
This commit is contained in:
parent
d5bcf21c91
commit
b1899c2066
@ -1971,7 +1971,8 @@ static void CRYPT_CheckSimpleChain(PCertificateChainEngine engine,
|
|||||||
if (!CRYPT_CriticalExtensionsSupported(
|
if (!CRYPT_CriticalExtensionsSupported(
|
||||||
chain->rgpElement[i]->pCertContext))
|
chain->rgpElement[i]->pCertContext))
|
||||||
chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
|
chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
|
||||||
CERT_TRUST_INVALID_EXTENSION;
|
CERT_TRUST_INVALID_EXTENSION |
|
||||||
|
CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT;
|
||||||
CRYPT_CombineTrustStatus(&chain->TrustStatus,
|
CRYPT_CombineTrustStatus(&chain->TrustStatus,
|
||||||
&chain->rgpElement[i]->TrustStatus);
|
&chain->rgpElement[i]->TrustStatus);
|
||||||
}
|
}
|
||||||
|
@ -3491,7 +3491,7 @@ static ChainCheck chainCheck[] = {
|
|||||||
{ CERT_TRUST_IS_UNTRUSTED_ROOT | CERT_TRUST_INVALID_EXTENSION |
|
{ CERT_TRUST_IS_UNTRUSTED_ROOT | CERT_TRUST_INVALID_EXTENSION |
|
||||||
CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT, 0 },
|
CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT, 0 },
|
||||||
1, simpleStatus30 },
|
1, simpleStatus30 },
|
||||||
TODO_ERROR },
|
0 },
|
||||||
{ { sizeof(selfSignedChain) / sizeof(selfSignedChain[0]), selfSignedChain },
|
{ { sizeof(selfSignedChain) / sizeof(selfSignedChain[0]), selfSignedChain },
|
||||||
{ { 0, CERT_TRUST_HAS_PREFERRED_ISSUER },
|
{ { 0, CERT_TRUST_HAS_PREFERRED_ISSUER },
|
||||||
{ CERT_TRUST_IS_NOT_TIME_VALID | CERT_TRUST_IS_UNTRUSTED_ROOT, 0 },
|
{ CERT_TRUST_IS_NOT_TIME_VALID | CERT_TRUST_IS_UNTRUSTED_ROOT, 0 },
|
||||||
|
Loading…
x
Reference in New Issue
Block a user