[Bug 25646] LibertyKeeper: SSL connection does not work

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #9 from Juan Lang <juan_lang at yahoo.com> 2011-03-09 23:58:41 CST ---
Please attach here in the future rather than using pastebin.  From your log:

trace:cryptnet:CertDllVerifyRevocation (00000001, 1, 1, 0x33aa3c, 00000001,
0x33a9f0, 0x33aa20)
trace:crypt:CertFindExtension "2.5.29.31" 5 0x1855a54
trace:crypt:CryptDecodeObjectEx (0x00000001, #0023, 0x1855ae4, 51, 0x00008000,
(nil), 0x33a82c, 0x33a828)
trace:crypt:CryptDecodeObjectEx returning 1
trace:crypt:CryptDecodeObjectEx (0x00000001, #0023, 0x1855ae4, 51, 0x00008000,
(nil), 0x33a82c, 0x33a828)

In other words, cert_verify_revocation is looking for, and finds, a
CRL_DIST_POINTS extension (2.5.29.31).  Continuing:

trace:cryptnet:CryptRetrieveObjectByUrlW
(L"http://crl.geotrust.com/crls/secureca.crl", #0002, 00000000, 0, 0x33a8dc,
(nil), (nil), (nil), (nil))

Okay, so it downloads a CRL, which it'll then attempt to validate with
verify_cert_revocation_with_crl.  Then:

trace:cryptnet:CertDllVerifyRevocation returning 0 (80092012)

The only way verify_cert_revocation_with_crl will return 80092012
(CRYPT_E_NO_REVOCATION_CHECK) is if the CRL isn't time valid.  Unfortunately,
we don't know what time it's checking for, because your log is truncated. 
Please attach the entire thing here, compressed if necessary.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.