moebius#119: (Windows) Security - Certificate Stores - NSSCertDBTrustDomain allows end-entities to be their own trust anchors

https://github.com/MoonchildProductions/moebius/pull/119
This commit is contained in:
janekptacijarabaci 2018-04-23 09:10:12 +02:00 committed by Roy Tam
commit b9ed9af662
3 changed files with 31 additions and 6 deletions

View file

@ -224,8 +224,7 @@ CertVerifier::VerifySignedCertificateTimestamps(
CERTCertListNode* issuerNode = CERT_LIST_NEXT(endEntityNode);
if (!issuerNode || CERT_LIST_END(issuerNode, builtChain)) {
// Issuer certificate is required for SCT verification.
// TODO(bug 1294580): change this to Result::FATAL_ERROR_INVALID_ARGS
return Success;
return Result::FATAL_ERROR_INVALID_ARGS;
}
CERTCertificate* endEntity = endEntityNode->cert;