1
0
mirror of https://github.com/moparisthebest/curl synced 2024-12-25 01:28:51 -05:00
curl/lib/vtls
Ihor Karpenko 6b6c2b8d57
schannel: client certificate store opening fix
1) Using CERT_STORE_OPEN_EXISTING_FLAG ( or CERT_STORE_READONLY_FLAG )
while opening certificate store would be sufficient in this scenario and
less-demanding in sense of required user credentials ( for example,
IIS_IUSRS will get "Access Denied" 0x05 error for existing CertOpenStore
call without any of flags mentioned above ),

2) as 'cert_store_name' is a DWORD, attempt to format its value like a
string ( in "Failed to open cert store" error message ) will throw null
pointer exception

3) adding GetLastError(), in my opinion, will make error message more
useful.

Bug: https://curl.haxx.se/mail/lib-2018-08/0198.html

Closes #2909
2018-08-24 09:03:28 +02:00
..
axtls.c axtls: follow-up spell fix of comment 2018-06-02 13:40:41 +02:00
axtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
cyassl.c wolfSSL/CyaSSL: Fix memory leak in Curl_cyassl_random 2018-07-26 16:21:59 +02:00
cyassl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
darwinssl.c darwinssl: add support for ALPN negotiation 2018-07-14 18:32:47 -05:00
darwinssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
gskit.c checksrc: make sure sizeof() is used *with* parentheses 2018-05-21 23:21:47 +02:00
gskit.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
gtls.c vtls: use unified "supports" bitfield member in backends 2018-05-04 22:31:19 +02:00
gtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
mbedtls.c lib: Fix format specifiers 2018-05-14 09:42:27 +02:00
mbedtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
nss.c checksrc: make sure sizeof() is used *with* parentheses 2018-05-21 23:21:47 +02:00
nssg.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
openssl.c openssl: fix potential NULL pointer deref in is_pkcs11_uri 2018-08-10 17:44:57 +02:00
openssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
polarssl_threadlock.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
polarssl_threadlock.h
polarssl.c vtls: use unified "supports" bitfield member in backends 2018-05-04 22:31:19 +02:00
polarssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
schannel_verify.c schannel: avoid incompatible pointer warning 2018-06-12 11:23:11 +00:00
schannel.c schannel: client certificate store opening fix 2018-08-24 09:03:28 +02:00
schannel.h boringssl + schannel: undef X509_NAME in lib/schannel.h 2018-06-08 23:25:17 +02:00
vtls.c setopt: add TLS 1.3 ciphersuites 2018-05-29 16:12:52 +02:00
vtls.h setopt: add TLS 1.3 ciphersuites 2018-05-29 16:12:52 +02:00