Changeset 74749 in vbox for trunk

Timestamp:

Oct 10, 2018 3:58:07 PM (6 years ago)

Author:

vboxsync

Message:

IPRT/ldr: More Mach-O signing hacking. bugref:9232

File:

• trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp (modified) (2 diffs)

trunk/src/VBox/Runtime/common/crypto/x509-certpaths.cpp

@@ -41 +41 @@
 #include <iprt/log.h>
 #include <iprt/time.h>
+#include <iprt/crypto/applecodesign.h> /* critical extension OIDs */
 #include <iprt/crypto/pkcs7.h> /* PCRTCRPKCS7SETOFCERTS */
 #include <iprt/crypto/store.h>
@@ -2457 +2458 @@
                 && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCRX509_ID_CE_EXT_KEY_USAGE_OID) != 0
                 && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCRX509_ID_CE_INHIBIT_ANY_POLICY_OID) != 0
+                && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCR_APPLE_CS_DEVID_APPLICATION_OID) != 0
+                && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCR_APPLE_CS_DEVID_INSTALLER_OID) != 0
+                && RTAsn1ObjId_CompareWithString(&pCur->ExtnId, RTCR_APPLE_CS_DEVID_KEXT_OID) != 0
                )
                 return rtCrX509CpvFailed(pThis, VERR_CR_X509_CPV_UNKNOWN_CRITICAL_EXTENSION,