Piotr Caban : wininet: Make it possible to ignore CERT_TRUST_IS_PARTIAL_CHAIN error in netconn_verify_cert .

[Alexandre Julliard]

Module: wine
Branch: master
Commit: e80e73586d91ffeeba68c8737d82b6321b91290d
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=e80e73586d91ffeeba68c8737d...

Author: Piotr Caban <piotr(a)codeweavers.com>
Date:   Tue Sep 13 19:27:04 2011 +0200

wininet: Make it possible to ignore CERT_TRUST_IS_PARTIAL_CHAIN error in netconn_verify_cert.

---

 dlls/wininet/netconnection.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/dlls/wininet/netconnection.c b/dlls/wininet/netconnection.c
index 060acc6..dd887eb 100644
--- a/dlls/wininet/netconnection.c
+++ b/dlls/wininet/netconnection.c
@@ -238,6 +238,7 @@ static DWORD netconn_verify_cert(PCCERT_CONTEXT cert, HCERTSTORE store,
             static const DWORD supportedErrors =
                 CERT_TRUST_IS_NOT_TIME_VALID |
                 CERT_TRUST_IS_UNTRUSTED_ROOT |
+                CERT_TRUST_IS_PARTIAL_CHAIN |
                 CERT_TRUST_IS_OFFLINE_REVOCATION |
                 CERT_TRUST_REVOCATION_STATUS_UNKNOWN |
                 CERT_TRUST_IS_REVOKED |
@@ -247,7 +248,7 @@ static DWORD netconn_verify_cert(PCCERT_CONTEXT cert, HCERTSTORE store,
                 !(security_flags & SECURITY_FLAG_IGNORE_CERT_DATE_INVALID))
                 err = ERROR_INTERNET_SEC_CERT_DATE_INVALID;
             else if (chain->TrustStatus.dwErrorStatus &
-                     CERT_TRUST_IS_UNTRUSTED_ROOT &&
+                     (CERT_TRUST_IS_UNTRUSTED_ROOT | CERT_TRUST_IS_PARTIAL_CHAIN) &&
                      !(security_flags & SECURITY_FLAG_IGNORE_UNKNOWN_CA))
                 err = ERROR_INTERNET_INVALID_CA;
             else if (!(security_flags & SECURITY_FLAG_IGNORE_REVOCATION) &&