From 6b2e0c0bf2a4de525d489d60d31fccff00f46de2 Mon Sep 17 00:00:00 2001 From: Juan Lang Date: Wed, 3 Oct 2007 12:02:54 -0700 Subject: [PATCH] Use verify time rather than current time to check certificate chain --- dlls/wintrust/softpub.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/dlls/wintrust/softpub.c b/dlls/wintrust/softpub.c index bef0775..87e5209 100644 --- a/dlls/wintrust/softpub.c +++ b/dlls/wintrust/softpub.c @@ -612,7 +612,7 @@ HRESULT WINAPI WintrustCertificateTrust( /* Create a certificate chain for each signer */ ret = CertGetCertificateChain(NULL, data->pasSigners[i].pasCertChain[0].pCert, - NULL, /* FIXME: use data->pasSigners[i].sftVerifyAsOf? */ + &data->pasSigners[i].sftVerifyAsOf, data->chStores ? data->pahStores[0] : NULL, &chainPara, flags, NULL, &data->pasSigners[i].pChainContext); if (ret) -- 1.4.1