Juan Lang : crypt32: Get CA flag from basic constraints extension of every cert in the chain.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: cbabc9d689c950f975c0f3af1b8369f2958dfbf3
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=cbabc9d689c950f975c0f3af1b...

Author: Juan Lang 
Date:   Mon Oct 19 12:02:34 2009 -0700

crypt32: Get CA flag from basic constraints extension of every cert in the chain.

---

dlls/crypt32/chain.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/dlls/crypt32/chain.c b/dlls/crypt32/chain.c
index 6c44d4c..1dc7a74 100644
--- a/dlls/crypt32/chain.c
+++ b/dlls/crypt32/chain.c
@@ -441,6 +441,7 @@ static BOOL CRYPT_CheckBasicConstraintsForCA(PCCERT_CONTEXT cert,
     if ((validBasicConstraints = CRYPT_DecodeBasicConstraints(cert,
      &constraints, isRoot)))
     {
+        chainConstraints->fCA = constraints.fCA;
         if (!constraints.fCA)
         {
             TRACE_(chain)("chain element %d can't be a CA\n", remainingCAs + 1);
@@ -858,7 +859,7 @@ static void CRYPT_CheckSimpleChain(PCertificateChainEngine engine,
     PCERT_CHAIN_ELEMENT rootElement = chain->rgpElement[chain->cElement - 1];
     int i;
     BOOL pathLengthConstraintViolated = FALSE;
-    CERT_BASIC_CONSTRAINTS2_INFO constraints = { TRUE, FALSE, 0 };
+    CERT_BASIC_CONSTRAINTS2_INFO constraints = { FALSE, FALSE, 0 };

TRACE_(chain)("checking chain with %d elements for time %s\n",
      chain->cElement, debugstr_w(filetime_to_str(time)));