ReceiveTempSMS
/
Sweden-Number
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

crypt32: Check basic constraints extension for end certs too.

This commit is contained in:
Juan Lang 2009-10-20 18:00:45 -07:00 committed by Alexandre Julliard
parent 77fe22b226
commit f348e3feb7
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
dlls/crypt32/chain.c
View File

@ -905,6 +905,14 @@ static void CRYPT_CheckSimpleChain(PCertificateChainEngine engine,
constraints.dwPathLenConstraint--;
}
}
else
{
/* Check whether end cert has a basic constraints extension */
if (!CRYPT_DecodeBasicConstraints(
chain->rgpElement[i]->pCertContext, &constraints, FALSE))
chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
CERT_TRUST_INVALID_BASIC_CONSTRAINTS;
}
if (CRYPT_IsSimpleChainCyclic(chain))
{
/* If the chain is cyclic, then the path length constraints