1
0
mirror of https://github.com/moparisthebest/curl synced 2024-12-22 08:08:50 -05:00

schannel: return CURLE_SSL_CACERT on failed verification

... not *CACERT_BADFILE as it isn't really because of a bad file.

Bug: https://curl.haxx.se/mail/lib-2017-09/0002.html
Closes #1858
This commit is contained in:
Daniel Stenberg 2017-09-04 00:02:29 +02:00
parent 4ed618c023
commit 202c1cc22f
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2

View File

@ -714,7 +714,7 @@ schannel_connect_step2(struct connectdata *conn, int sockindex)
failf(data, "schannel: next InitializeSecurityContext failed: %s", failf(data, "schannel: next InitializeSecurityContext failed: %s",
Curl_sspi_strerror(conn, sspi_status)); Curl_sspi_strerror(conn, sspi_status));
return sspi_status == SEC_E_UNTRUSTED_ROOT ? return sspi_status == SEC_E_UNTRUSTED_ROOT ?
CURLE_SSL_CACERT_BADFILE : CURLE_SSL_CONNECT_ERROR; CURLE_SSL_CACERT : CURLE_SSL_CONNECT_ERROR;
} }
/* check if there was additional remaining encrypted data */ /* check if there was additional remaining encrypted data */