[Git][wine/wine][master] 3 commits: crypt32: Support importing cert-only PKCS blobs in PFXImportCertStore.

[Alexandre Julliard (＠julliard)]

Alexandre Julliard pushed to branch master at wine / wine


Commits:
0b66fb09 by Tatsuyuki Ishi at 2026-02-27T22:14:36+01:00
crypt32: Support importing cert-only PKCS blobs in PFXImportCertStore.

gnutls_pkcs12_simple_parse() assumes the blob includes at least one private
key, which is not true for some applications. Add our own parsing loop,
capable of handling zero or one private key. Still assume that there is up
to one key and up to one chain, to avoid complexity of key/cert matching.

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=52330

- - - - -
30bc071d by Tatsuyuki Ishi at 2026-02-27T22:14:36+01:00
crypt32/tests: Add tests for importing cert-only PKCS#12 blobs.

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=52330

- - - - -
986f9b66 by Tatsuyuki Ishi at 2026-02-27T22:14:36+01:00
crypt32: Verify MAC before parsing the store in PFXImportCertStore.

The gnutls_pkcs12_simple_parse man page tells you to verify the MAC
before calling parse. Do the verification after import, which was where
previously we would have called simple_parse.

- - - - -


4 changed files:

- dlls/crypt32/crypt32_private.h
- dlls/crypt32/pfx.c
- dlls/crypt32/tests/store.c
- dlls/crypt32/unixlib.c


View it on GitLab: https://gitlab.winehq.org/wine/wine/-/compare/fe2397311088ce12962307d65b275e...

-- 
View it on GitLab: https://gitlab.winehq.org/wine/wine/-/compare/fe2397311088ce12962307d65b275e...
You're receiving this email because of your account on gitlab.winehq.org.