Juan Lang : winhttp: Verify revocation status of certificate chain.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 55aae25d35bbaa82617674addde9c08cbed15ab7
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=55aae25d35bbaa82617674addd...

Author: Juan Lang 
Date:   Thu Dec  3 14:41:57 2009 -0800

winhttp: Verify revocation status of certificate chain.

---

dlls/winhttp/net.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/dlls/winhttp/net.c b/dlls/winhttp/net.c
index d4aa31f..38fd2cb 100644
--- a/dlls/winhttp/net.c
+++ b/dlls/winhttp/net.c
@@ -273,7 +273,8 @@ static DWORD netconn_verify_cert( PCCERT_CONTEXT cert, HCERTSTORE store,
     TRACE("verifying %s\n", debugstr_w( server ));
     chainPara.RequestedUsage.Usage.cUsageIdentifier = 1;
     chainPara.RequestedUsage.Usage.rgpszUsageIdentifier = server_auth;
-    if ((ret = CertGetCertificateChain( NULL, cert, NULL, store, &chainPara, 0,
+    if ((ret = CertGetCertificateChain( NULL, cert, NULL, store, &chainPara,
+                                        CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT,
                                         NULL, &chain )))
     {
         if (chain->TrustStatus.dwErrorStatus)