From eb2ba4e9eff9e3c19cf1b7edd21f6a5bfa0be0d5 Mon Sep 17 00:00:00 2001 From: Juan Lang Date: Wed, 3 Oct 2007 12:01:57 -0700 Subject: [PATCH] Remove bad check that prevents root certificates from appearing time valid --- dlls/wintrust/softpub.c | 6 +----- 1 files changed, 1 insertions(+), 5 deletions(-) diff --git a/dlls/wintrust/softpub.c b/dlls/wintrust/softpub.c index b467464..bef0775 100644 --- a/dlls/wintrust/softpub.c +++ b/dlls/wintrust/softpub.c @@ -526,11 +526,7 @@ BOOL WINAPI SoftpubCheckCert(CRYPT_PROVI { /* Set confidence */ data->pasSigners[idxSigner].pasCertChain[i].dwConfidence = 0; - /* The last element in the chain doesn't have an issuer, so it - * can't have a valid time (with respect to its issuer) - */ - if (i != simpleChain->cElement - 1 && - !(simpleChain->rgpElement[i]->TrustStatus.dwErrorStatus & + if (!(simpleChain->rgpElement[i]->TrustStatus.dwErrorStatus & CERT_TRUST_IS_NOT_TIME_VALID)) data->pasSigners[idxSigner].pasCertChain[i].dwConfidence |= CERT_CONFIDENCE_TIME; -- 1.4.1