Commit 01a7cbf8 authored by Juan Lang's avatar Juan Lang Committed by Alexandre Julliard

crypt32: Accept end certificates with no extended key usage extension if a…

crypt32: Accept end certificates with no extended key usage extension if a particular key usage is requested.
parent 350cdd2f
......@@ -2541,10 +2541,11 @@ static void CRYPT_CheckUsages(PCERT_CHAIN_CONTEXT chain,
* key usage extension be present and that a particular purpose
* be indicated in order for the certificate to be acceptable to
* that application."
* For now I'm being more conservative and disallowing it.
* Not all web sites include the extended key usage extension, so
* accept chains without it.
*/
WARN_(chain)("requested usage from a certificate with no usages\n");
validForUsage = FALSE;
TRACE_(chain)("requested usage from certificate with no usages\n");
validForUsage = TRUE;
}
if (!validForUsage)
{
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment