[PATCH 2/3] cryptnet: Give precedence to OID_AUTHORITY_INFO_ACCESS in verify_cert_revocation().
Hans Leidekker
hans at codeweavers.com
Tue May 24 02:46:21 CDT 2022
Signed-off-by: Hans Leidekker <hans at codeweavers.com>
---
dlls/cryptnet/cryptnet_main.c | 12 ++++--------
1 file changed, 4 insertions(+), 8 deletions(-)
diff --git a/dlls/cryptnet/cryptnet_main.c b/dlls/cryptnet/cryptnet_main.c
index 6654ef77c8c..e8c17407a9b 100644
--- a/dlls/cryptnet/cryptnet_main.c
+++ b/dlls/cryptnet/cryptnet_main.c
@@ -2139,17 +2139,13 @@ static DWORD verify_cert_revocation(const CERT_CONTEXT *cert, FILETIME *pTime,
if (find_cached_revocation_status(&cert->pCertInfo->SerialNumber, pTime, pRevStatus))
return pRevStatus->dwError;
- if ((ext = CertFindExtension(szOID_CRL_DIST_POINTS,
- cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
+ if ((ext = CertFindExtension(szOID_AUTHORITY_INFO_ACCESS, cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
{
- error = verify_cert_revocation_from_dist_points_ext(&ext->Value, cert,
- pTime, dwFlags, pRevPara, pRevStatus);
+ error = verify_cert_revocation_from_aia_ext(&ext->Value, cert, pTime, dwFlags, pRevPara, pRevStatus);
}
- else if ((ext = CertFindExtension(szOID_AUTHORITY_INFO_ACCESS,
- cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
+ else if ((ext = CertFindExtension(szOID_CRL_DIST_POINTS, cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
{
- error = verify_cert_revocation_from_aia_ext(&ext->Value, cert, pTime,
- dwFlags, pRevPara, pRevStatus);
+ error = verify_cert_revocation_from_dist_points_ext(&ext->Value, cert, pTime, dwFlags, pRevPara, pRevStatus);
}
else
{
--
2.30.2
More information about the wine-devel
mailing list