Commit 4089be25 authored by Juan Lang's avatar Juan Lang Committed by Alexandre Julliard

wintrust: Use verify time rather than current time to check certificate chain.

parent b78c69dd
......@@ -612,7 +612,7 @@ HRESULT WINAPI WintrustCertificateTrust(CRYPT_PROVIDER_DATA *data)
/* Create a certificate chain for each signer */
ret = CertGetCertificateChain(NULL,
data->pasSigners[i].pasCertChain[0].pCert,
NULL, /* FIXME: use data->pasSigners[i].sftVerifyAsOf? */
&data->pasSigners[i].sftVerifyAsOf,
data->chStores ? data->pahStores[0] : NULL,
&chainPara, flags, NULL, &data->pasSigners[i].pChainContext);
if (ret)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment