Commit 3a2eb7c7 authored by wtc@google.com's avatar wtc@google.com

Remove the check for the obsolete CERT_TRUST_IS_NOT_TIME_NESTED

error status.  CertGetCertificateChain no longer detects the error.

R=agl
BUG=70210
TEST=none
Review URL: http://codereview.chromium.org/6331009

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@72159 0039d316-1c4b-4281-b951-d872f2087c98
parent c7f72dcd
......@@ -94,10 +94,9 @@ int MapSecurityError(SECURITY_STATUS err) {
int MapCertChainErrorStatusToCertStatus(DWORD error_status) {
int cert_status = 0;
// CERT_TRUST_IS_NOT_TIME_NESTED means a subject certificate's time validity
// does not nest correctly within its issuer's time validity.
// We don't include CERT_TRUST_IS_NOT_TIME_NESTED because it's obsolete and
// we wouldn't consider it an error anyway
const DWORD kDateInvalidErrors = CERT_TRUST_IS_NOT_TIME_VALID |
CERT_TRUST_IS_NOT_TIME_NESTED |
CERT_TRUST_CTL_IS_NOT_TIME_VALID;
if (error_status & kDateInvalidErrors)
cert_status |= CERT_STATUS_DATE_INVALID;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment