Commit 3a2eb7c7 authored by wtc@google.com's avatar wtc@google.com

Remove the check for the obsolete CERT_TRUST_IS_NOT_TIME_NESTED

error status.  CertGetCertificateChain no longer detects the error.

R=agl
BUG=70210
TEST=none
Review URL: http://codereview.chromium.org/6331009

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@72159 0039d316-1c4b-4281-b951-d872f2087c98
parent c7f72dcd
...@@ -94,10 +94,9 @@ int MapSecurityError(SECURITY_STATUS err) { ...@@ -94,10 +94,9 @@ int MapSecurityError(SECURITY_STATUS err) {
int MapCertChainErrorStatusToCertStatus(DWORD error_status) { int MapCertChainErrorStatusToCertStatus(DWORD error_status) {
int cert_status = 0; int cert_status = 0;
// CERT_TRUST_IS_NOT_TIME_NESTED means a subject certificate's time validity // We don't include CERT_TRUST_IS_NOT_TIME_NESTED because it's obsolete and
// does not nest correctly within its issuer's time validity. // we wouldn't consider it an error anyway
const DWORD kDateInvalidErrors = CERT_TRUST_IS_NOT_TIME_VALID | const DWORD kDateInvalidErrors = CERT_TRUST_IS_NOT_TIME_VALID |
CERT_TRUST_IS_NOT_TIME_NESTED |
CERT_TRUST_CTL_IS_NOT_TIME_VALID; CERT_TRUST_CTL_IS_NOT_TIME_VALID;
if (error_status & kDateInvalidErrors) if (error_status & kDateInvalidErrors)
cert_status |= CERT_STATUS_DATE_INVALID; cert_status |= CERT_STATUS_DATE_INVALID;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment