Changeset 84380 in vbox for trunk/src/VBox/Runtime/tools/RTSignTool.cpp

Timestamp:

May 19, 2020 7:42:11 PM (5 years ago)

Author:

vboxsync

Message:

IPRT/RTCrPkcs7: Added RTCRPKCS7VERIFY_SD_F_CHECK_TRUST_ANCHORS. Cleaned up @todo from r138008. bugref:9699

File:

• trunk/src/VBox/Runtime/tools/RTSignTool.cpp (modified) (3 diffs)

trunk/src/VBox/Runtime/tools/RTSignTool.cpp

@@ -1275 +1275 @@
 {
     VERIFYEXESTATE *pState = (VERIFYEXESTATE *)pvUser;
-    uint32_t        cPaths = hCertPaths != NIL_RTCRX509CERTPATHS ? RTCrX509CertPathsGetPathCount(hCertPaths) : 0;
+    uint32_t        cPaths = RTCrX509CertPathsGetPathCount(hCertPaths);
 
     /*
@@ -1436 +1436 @@
                                                                  RTCRPKCS7VERIFY_SD_F_COUNTER_SIGNATURE_SIGNING_TIME_ONLY
                                                                  | RTCRPKCS7VERIFY_SD_F_ALWAYS_USE_SIGNING_TIME_IF_PRESENT
-                                                                 | RTCRPKCS7VERIFY_SD_F_ALWAYS_USE_MS_TIMESTAMP_IF_PRESENT,
+                                                                 | RTCRPKCS7VERIFY_SD_F_ALWAYS_USE_MS_TIMESTAMP_IF_PRESENT
+                                                                 | RTCRPKCS7VERIFY_SD_F_CHECK_TRUST_ANCHORS,
                                                                  pState->hAdditionalStore, pState->hRootStore, &ValidationTime,
                                                                  VerifyExecCertVerifyCallback, pState,
@@ -1443 +1444 @@
                                              RTCRPKCS7VERIFY_SD_F_COUNTER_SIGNATURE_SIGNING_TIME_ONLY
                                              | RTCRPKCS7VERIFY_SD_F_ALWAYS_USE_SIGNING_TIME_IF_PRESENT
-                                             | RTCRPKCS7VERIFY_SD_F_ALWAYS_USE_MS_TIMESTAMP_IF_PRESENT,
+                                             | RTCRPKCS7VERIFY_SD_F_ALWAYS_USE_MS_TIMESTAMP_IF_PRESENT
+                                             | RTCRPKCS7VERIFY_SD_F_CHECK_TRUST_ANCHORS,
                                              pState->hAdditionalStore, pState->hRootStore, &ValidationTime,
                                              VerifyExecCertVerifyCallback, pState, pErrInfo);