Juan Lang : crypt32: Trace certificate chain verification parameters.
Alexandre Julliard
julliard at winehq.org
Tue Oct 19 13:03:45 CDT 2010
Module: wine
Branch: master
Commit: ca7512d296754c2bb7630f7ad9aa4a38dcf806a6
URL: http://source.winehq.org/git/wine.git/?a=commit;h=ca7512d296754c2bb7630f7ad9aa4a38dcf806a6
Author: Juan Lang <juan.lang at gmail.com>
Date: Thu Oct 7 05:52:57 2010 -0700
crypt32: Trace certificate chain verification parameters.
---
dlls/crypt32/chain.c | 43 +++++++++++++++++++++++++++++++++++++++++++
1 files changed, 43 insertions(+), 0 deletions(-)
diff --git a/dlls/crypt32/chain.c b/dlls/crypt32/chain.c
index a813b64..af8f386 100644
--- a/dlls/crypt32/chain.c
+++ b/dlls/crypt32/chain.c
@@ -2989,13 +2989,30 @@ static BYTE msTestPubKey2[] = {
0x71,0x9e,0x06,0xd9,0xbf,0xbb,0x31,0x69,0xa3,0xf6,0x30,0xa0,0x78,0x7b,0x18,
0xdd,0x50,0x4d,0x79,0x1e,0xeb,0x61,0xc1,0x02,0x03,0x01,0x00,0x01 };
+static void dump_authenticode_extra_chain_policy_para(
+ AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA *extraPara)
+{
+ if (extraPara)
+ {
+ TRACE_(chain)("cbSize = %d\n", extraPara->cbSize);
+ TRACE_(chain)("dwRegPolicySettings = %08x\n",
+ extraPara->dwRegPolicySettings);
+ TRACE_(chain)("pSignerInfo = %p\n", extraPara->pSignerInfo);
+ }
+}
+
static BOOL WINAPI verify_authenticode_policy(LPCSTR szPolicyOID,
PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara,
PCERT_CHAIN_POLICY_STATUS pPolicyStatus)
{
BOOL ret = verify_base_policy(szPolicyOID, pChainContext, pPolicyPara,
pPolicyStatus);
+ AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA *extraPara = NULL;
+ if (pPolicyPara)
+ extraPara = pPolicyPara->pvExtraPolicyPara;
+ if (TRACE_ON(chain))
+ dump_authenticode_extra_chain_policy_para(extraPara);
if (ret && pPolicyStatus->dwError == CERT_E_UNTRUSTEDROOT)
{
CERT_PUBLIC_KEY_INFO msPubKey = { { 0 } };
@@ -3323,6 +3340,18 @@ static BOOL match_dns_to_subject_dn(PCCERT_CONTEXT cert, LPCWSTR server_name)
return matches;
}
+static void dump_ssl_extra_chain_policy_para(HTTPSPolicyCallbackData *sslPara)
+{
+ if (sslPara)
+ {
+ TRACE_(chain)("cbSize = %d\n", sslPara->u.cbSize);
+ TRACE_(chain)("dwAuthType = %d\n", sslPara->dwAuthType);
+ TRACE_(chain)("fdwChecks = %08x\n", sslPara->fdwChecks);
+ TRACE_(chain)("pwszServerName = %s\n",
+ debugstr_w(sslPara->pwszServerName));
+ }
+}
+
static BOOL WINAPI verify_ssl_policy(LPCSTR szPolicyOID,
PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara,
PCERT_CHAIN_POLICY_STATUS pPolicyStatus)
@@ -3332,6 +3361,8 @@ static BOOL WINAPI verify_ssl_policy(LPCSTR szPolicyOID,
if (pPolicyPara)
sslPara = pPolicyPara->pvExtraPolicyPara;
+ if (TRACE_ON(chain))
+ dump_ssl_extra_chain_policy_para(sslPara);
if (sslPara && sslPara->u.cbSize >= sizeof(HTTPSPolicyCallbackData))
checks = sslPara->fdwChecks;
pPolicyStatus->lChainIndex = pPolicyStatus->lElementIndex = -1;
@@ -3570,6 +3601,16 @@ typedef BOOL (WINAPI *CertVerifyCertificateChainPolicyFunc)(LPCSTR szPolicyOID,
PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara,
PCERT_CHAIN_POLICY_STATUS pPolicyStatus);
+static void dump_policy_para(PCERT_CHAIN_POLICY_PARA para)
+{
+ if (para)
+ {
+ TRACE_(chain)("cbSize = %d\n", para->cbSize);
+ TRACE_(chain)("dwFlags = %08x\n", para->dwFlags);
+ TRACE_(chain)("pvExtraPolicyPara = %p\n", para->pvExtraPolicyPara);
+ }
+}
+
BOOL WINAPI CertVerifyCertificateChainPolicy(LPCSTR szPolicyOID,
PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara,
PCERT_CHAIN_POLICY_STATUS pPolicyStatus)
@@ -3581,6 +3622,8 @@ BOOL WINAPI CertVerifyCertificateChainPolicy(LPCSTR szPolicyOID,
TRACE("(%s, %p, %p, %p)\n", debugstr_a(szPolicyOID), pChainContext,
pPolicyPara, pPolicyStatus);
+ if (TRACE_ON(chain))
+ dump_policy_para(pPolicyPara);
if (IS_INTOID(szPolicyOID))
{
More information about the wine-cvs
mailing list