Hans Leidekker : cryptnet: Give precedence to OID_AUTHORITY_INFO_ACCESS in verify_cert_revocation().

[Alexandre Julliard]

Module: wine
Branch: master
Commit: f74271648776969cc8d4b914ac8d409c4f37f6d5
URL:    https://source.winehq.org/git/wine.git/?a=commit;h=f74271648776969cc8d4b914a...

Author: Hans Leidekker 
Date:   Tue May 24 09:46:21 2022 +0200

cryptnet: Give precedence to OID_AUTHORITY_INFO_ACCESS in verify_cert_revocation().

Signed-off-by: Hans Leidekker 
Signed-off-by: Alexandre Julliard

---

dlls/cryptnet/cryptnet_main.c | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/dlls/cryptnet/cryptnet_main.c b/dlls/cryptnet/cryptnet_main.c
index 6654ef77c8c..e8c17407a9b 100644
--- a/dlls/cryptnet/cryptnet_main.c
+++ b/dlls/cryptnet/cryptnet_main.c
@@ -2139,17 +2139,13 @@ static DWORD verify_cert_revocation(const CERT_CONTEXT *cert, FILETIME *pTime,
     if (find_cached_revocation_status(&cert->pCertInfo->SerialNumber, pTime, pRevStatus))
         return pRevStatus->dwError;

-    if ((ext = CertFindExtension(szOID_CRL_DIST_POINTS,
-     cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
+    if ((ext = CertFindExtension(szOID_AUTHORITY_INFO_ACCESS, cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
     {
-        error = verify_cert_revocation_from_dist_points_ext(&ext->Value, cert,
-                pTime, dwFlags, pRevPara, pRevStatus);
+        error = verify_cert_revocation_from_aia_ext(&ext->Value, cert, pTime, dwFlags, pRevPara, pRevStatus);
     }
-    else if ((ext = CertFindExtension(szOID_AUTHORITY_INFO_ACCESS,
-     cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
+    else if ((ext = CertFindExtension(szOID_CRL_DIST_POINTS, cert->pCertInfo->cExtension, cert->pCertInfo->rgExtension)))
     {
-        error = verify_cert_revocation_from_aia_ext(&ext->Value, cert, pTime,
-                dwFlags, pRevPara, pRevStatus);
+        error = verify_cert_revocation_from_dist_points_ext(&ext->Value, cert, pTime, dwFlags, pRevPara, pRevStatus);
     }
     else
     {