2 * Copyright 2007 Juan Lang
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
20 #define NONAMELESSUNION
27 #include "wine/debug.h"
29 WINE_DEFAULT_DEBUG_CHANNEL(wintrust
);
31 HRESULT WINAPI
SoftpubDefCertInit(CRYPT_PROVIDER_DATA
*data
)
33 HRESULT ret
= S_FALSE
;
35 TRACE("(%p)\n", data
);
37 if (data
->padwTrustStepErrors
&&
38 !data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_WVTINIT
])
40 TRACE("returning %08x\n", ret
);
44 HRESULT WINAPI
SoftpubInitialize(CRYPT_PROVIDER_DATA
*data
)
46 HRESULT ret
= S_FALSE
;
48 TRACE("(%p)\n", data
);
50 if (data
->padwTrustStepErrors
&&
51 !data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_WVTINIT
])
53 TRACE("returning %08x\n", ret
);
57 /* Assumes data->pWintrustData->u.pFile exists. Makes sure a file handle is
60 static BOOL
SOFTPUB_OpenFile(CRYPT_PROVIDER_DATA
*data
)
64 /* PSDK implies that all values should be initialized to NULL, so callers
65 * typically have hFile as NULL rather than INVALID_HANDLE_VALUE. Check
68 if (!data
->pWintrustData
->u
.pFile
->hFile
||
69 data
->pWintrustData
->u
.pFile
->hFile
== INVALID_HANDLE_VALUE
)
71 data
->pWintrustData
->u
.pFile
->hFile
=
72 CreateFileW(data
->pWintrustData
->u
.pFile
->pcwszFilePath
, GENERIC_READ
,
73 FILE_SHARE_READ
, NULL
, OPEN_EXISTING
, FILE_ATTRIBUTE_NORMAL
, NULL
);
74 if (data
->pWintrustData
->u
.pFile
->hFile
!= INVALID_HANDLE_VALUE
)
75 data
->fOpenedFile
= TRUE
;
80 GetFileTime(data
->pWintrustData
->u
.pFile
->hFile
, &data
->sftSystemTime
,
82 TRACE("returning %d\n", ret
);
86 /* Assumes data->pWintrustData->u.pFile exists. Sets data->pPDSip->gSubject to
87 * the file's subject GUID.
89 static BOOL
SOFTPUB_GetFileSubject(CRYPT_PROVIDER_DATA
*data
)
93 if (!data
->pWintrustData
->u
.pFile
->pgKnownSubject
)
95 ret
= CryptSIPRetrieveSubjectGuid(
96 data
->pWintrustData
->u
.pFile
->pcwszFilePath
,
97 data
->pWintrustData
->u
.pFile
->hFile
,
98 &data
->u
.pPDSip
->gSubject
);
102 memcpy(&data
->u
.pPDSip
->gSubject
,
103 data
->pWintrustData
->u
.pFile
->pgKnownSubject
, sizeof(GUID
));
106 TRACE("returning %d\n", ret
);
110 /* Assumes data->u.pPDSip exists, and its gSubject member set.
111 * Allocates data->u.pPDSip->pSip and loads it, if possible.
113 static BOOL
SOFTPUB_GetSIP(CRYPT_PROVIDER_DATA
*data
)
117 data
->u
.pPDSip
->pSip
= data
->psPfns
->pfnAlloc(sizeof(SIP_DISPATCH_INFO
));
118 if (data
->u
.pPDSip
->pSip
)
119 ret
= CryptSIPLoad(&data
->u
.pPDSip
->gSubject
, 0, data
->u
.pPDSip
->pSip
);
122 SetLastError(ERROR_OUTOFMEMORY
);
125 TRACE("returning %d\n", ret
);
129 /* Assumes data->u.pPDSip has been loaded, and data->u.pPDSip->pSip allocated.
130 * Calls data->u.pPDSip->pSip->pfGet to construct data->hMsg.
132 static BOOL
SOFTPUB_GetMessageFromFile(CRYPT_PROVIDER_DATA
*data
)
138 data
->u
.pPDSip
->psSipSubjectInfo
=
139 data
->psPfns
->pfnAlloc(sizeof(SIP_SUBJECTINFO
));
140 if (!data
->u
.pPDSip
->psSipSubjectInfo
)
142 SetLastError(ERROR_OUTOFMEMORY
);
146 data
->u
.pPDSip
->psSipSubjectInfo
->cbSize
= sizeof(SIP_SUBJECTINFO
);
147 data
->u
.pPDSip
->psSipSubjectInfo
->pgSubjectType
= &data
->u
.pPDSip
->gSubject
;
148 data
->u
.pPDSip
->psSipSubjectInfo
->hFile
= data
->pWintrustData
->u
.pFile
->hFile
;
149 data
->u
.pPDSip
->psSipSubjectInfo
->pwsFileName
=
150 data
->pWintrustData
->u
.pFile
->pcwszFilePath
;
151 data
->u
.pPDSip
->psSipSubjectInfo
->hProv
= data
->hProv
;
152 ret
= data
->u
.pPDSip
->pSip
->pfGet(data
->u
.pPDSip
->psSipSubjectInfo
,
153 &data
->dwEncoding
, 0, &size
, 0);
156 SetLastError(TRUST_E_NOSIGNATURE
);
160 buf
= data
->psPfns
->pfnAlloc(size
);
163 SetLastError(ERROR_OUTOFMEMORY
);
167 ret
= data
->u
.pPDSip
->pSip
->pfGet(data
->u
.pPDSip
->psSipSubjectInfo
,
168 &data
->dwEncoding
, 0, &size
, buf
);
171 data
->hMsg
= CryptMsgOpenToDecode(data
->dwEncoding
, 0, 0, data
->hProv
,
174 ret
= CryptMsgUpdate(data
->hMsg
, buf
, size
, TRUE
);
177 data
->psPfns
->pfnFree(buf
);
178 TRACE("returning %d\n", ret
);
182 static BOOL
SOFTPUB_CreateStoreFromMessage(CRYPT_PROVIDER_DATA
*data
)
187 store
= CertOpenStore(CERT_STORE_PROV_MSG
, data
->dwEncoding
,
188 data
->hProv
, CERT_STORE_NO_CRYPT_RELEASE_FLAG
, data
->hMsg
);
191 ret
= data
->psPfns
->pfnAddStore2Chain(data
, store
);
192 CertCloseStore(store
, 0);
194 TRACE("returning %d\n", ret
);
198 static DWORD
SOFTPUB_DecodeInnerContent(CRYPT_PROVIDER_DATA
*data
)
204 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_INNER_CONTENT_TYPE_PARAM
, 0, NULL
,
208 buf
= data
->psPfns
->pfnAlloc(size
);
211 SetLastError(ERROR_OUTOFMEMORY
);
215 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_INNER_CONTENT_TYPE_PARAM
, 0, buf
,
219 if (!strcmp((LPCSTR
)buf
, SPC_INDIRECT_DATA_OBJID
))
221 data
->psPfns
->pfnFree(buf
);
223 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_CONTENT_PARAM
, 0, NULL
, &size
);
226 buf
= data
->psPfns
->pfnAlloc(size
);
229 SetLastError(ERROR_OUTOFMEMORY
);
233 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_CONTENT_PARAM
, 0, buf
, &size
);
236 ret
= CryptDecodeObject(data
->dwEncoding
,
237 SPC_INDIRECT_DATA_CONTENT_STRUCT
, buf
, size
, 0, NULL
, &size
);
240 data
->u
.pPDSip
->psIndirectData
= data
->psPfns
->pfnAlloc(size
);
241 if (!data
->u
.pPDSip
->psIndirectData
)
243 SetLastError(ERROR_OUTOFMEMORY
);
247 ret
= CryptDecodeObject(data
->dwEncoding
,
248 SPC_INDIRECT_DATA_CONTENT_STRUCT
, buf
, size
, 0,
249 data
->u
.pPDSip
->psIndirectData
, &size
);
253 FIXME("unimplemented for OID %s\n", (LPCSTR
)buf
);
254 SetLastError(TRUST_E_SUBJECT_FORM_UNKNOWN
);
259 TRACE("returning %d\n", ret
);
263 HRESULT WINAPI
SoftpubLoadMessage(CRYPT_PROVIDER_DATA
*data
)
267 TRACE("(%p)\n", data
);
269 if (!data
->padwTrustStepErrors
)
272 switch (data
->pWintrustData
->dwUnionChoice
)
274 case WTD_CHOICE_CERT
:
275 if (data
->pWintrustData
->u
.pCert
&&
276 data
->pWintrustData
->u
.pCert
->cbStruct
== sizeof(WINTRUST_CERT_INFO
))
280 CRYPT_PROVIDER_SGNR signer
= { sizeof(signer
), { 0 } };
283 /* Add a signer with nothing but the time to verify, so we can
286 if (data
->pWintrustData
->u
.pCert
->psftVerifyAsOf
)
287 memcpy(&data
->sftSystemTime
, &signer
.sftVerifyAsOf
,
293 GetSystemTime(&sysTime
);
294 SystemTimeToFileTime(&sysTime
, &signer
.sftVerifyAsOf
);
296 ret
= data
->psPfns
->pfnAddSgnr2Chain(data
, FALSE
, 0, &signer
);
299 ret
= data
->psPfns
->pfnAddCert2Chain(data
, 0, FALSE
, 0,
300 data
->pWintrustData
->u
.pCert
->psCertContext
);
303 for (i
= 0; ret
&& i
< data
->pWintrustData
->u
.pCert
->chStores
;
305 ret
= data
->psPfns
->pfnAddStore2Chain(data
,
306 data
->pWintrustData
->u
.pCert
->pahStores
[i
]);
310 /* Do nothing!? See the tests */
316 SetLastError(ERROR_INVALID_PARAMETER
);
320 case WTD_CHOICE_FILE
:
321 if (!data
->pWintrustData
->u
.pFile
)
323 SetLastError(ERROR_INVALID_PARAMETER
);
327 ret
= SOFTPUB_OpenFile(data
);
330 ret
= SOFTPUB_GetFileSubject(data
);
333 ret
= SOFTPUB_GetSIP(data
);
336 ret
= SOFTPUB_GetMessageFromFile(data
);
339 ret
= SOFTPUB_CreateStoreFromMessage(data
);
342 ret
= SOFTPUB_DecodeInnerContent(data
);
345 FIXME("unimplemented for %d\n", data
->pWintrustData
->dwUnionChoice
);
346 SetLastError(ERROR_INVALID_PARAMETER
);
352 data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_OBJPROV
] =
354 TRACE("returning %d (%08x)\n", ret
? S_OK
: S_FALSE
,
355 data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_OBJPROV
]);
356 return ret
? S_OK
: S_FALSE
;
359 static CMSG_SIGNER_INFO
*WINTRUST_GetSigner(CRYPT_PROVIDER_DATA
*data
,
363 CMSG_SIGNER_INFO
*signerInfo
= NULL
;
366 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_SIGNER_INFO_PARAM
, signerIdx
,
370 signerInfo
= data
->psPfns
->pfnAlloc(size
);
373 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_SIGNER_INFO_PARAM
,
374 signerIdx
, signerInfo
, &size
);
377 data
->psPfns
->pfnFree(signerInfo
);
382 SetLastError(ERROR_OUTOFMEMORY
);
387 static BOOL
WINTRUST_SaveSigner(CRYPT_PROVIDER_DATA
*data
, DWORD signerIdx
)
390 CMSG_SIGNER_INFO
*signerInfo
= WINTRUST_GetSigner(data
, signerIdx
);
394 CRYPT_PROVIDER_SGNR sgnr
= { sizeof(sgnr
), { 0 } };
396 sgnr
.psSigner
= signerInfo
;
397 memcpy(&sgnr
.sftVerifyAsOf
, &data
->sftSystemTime
, sizeof(FILETIME
));
398 ret
= data
->psPfns
->pfnAddSgnr2Chain(data
, FALSE
, signerIdx
, &sgnr
);
405 static CERT_INFO
*WINTRUST_GetSignerCertInfo(CRYPT_PROVIDER_DATA
*data
,
409 CERT_INFO
*certInfo
= NULL
;
412 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_SIGNER_CERT_INFO_PARAM
, signerIdx
,
416 certInfo
= data
->psPfns
->pfnAlloc(size
);
419 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_SIGNER_CERT_INFO_PARAM
,
420 signerIdx
, certInfo
, &size
);
423 data
->psPfns
->pfnFree(certInfo
);
428 SetLastError(ERROR_OUTOFMEMORY
);
433 static BOOL
WINTRUST_VerifySigner(CRYPT_PROVIDER_DATA
*data
, DWORD signerIdx
)
436 CERT_INFO
*certInfo
= WINTRUST_GetSignerCertInfo(data
, signerIdx
);
440 PCCERT_CONTEXT subject
= CertGetSubjectCertificateFromStore(
441 data
->pahStores
[0], data
->dwEncoding
, certInfo
);
445 CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA para
= { sizeof(para
), 0,
446 signerIdx
, CMSG_VERIFY_SIGNER_CERT
, (LPVOID
)subject
};
448 ret
= CryptMsgControl(data
->hMsg
, 0, CMSG_CTRL_VERIFY_SIGNATURE_EX
,
451 SetLastError(TRUST_E_CERT_SIGNATURE
);
453 data
->psPfns
->pfnAddCert2Chain(data
, signerIdx
, FALSE
, 0,
455 CertFreeCertificateContext(subject
);
459 SetLastError(TRUST_E_NO_SIGNER_CERT
);
462 data
->psPfns
->pfnFree(certInfo
);
469 HRESULT WINAPI
SoftpubLoadSignature(CRYPT_PROVIDER_DATA
*data
)
473 TRACE("(%p)\n", data
);
475 if (!data
->padwTrustStepErrors
)
480 DWORD signerCount
, size
;
482 size
= sizeof(signerCount
);
483 ret
= CryptMsgGetParam(data
->hMsg
, CMSG_SIGNER_COUNT_PARAM
, 0,
484 &signerCount
, &size
);
489 for (i
= 0; ret
&& i
< signerCount
; i
++)
491 if ((ret
= WINTRUST_SaveSigner(data
, i
)))
492 ret
= WINTRUST_VerifySigner(data
, i
);
496 SetLastError(TRUST_E_NOSIGNATURE
);
501 data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_OBJPROV
] =
503 return ret
? S_OK
: S_FALSE
;
506 BOOL WINAPI
SoftpubCheckCert(CRYPT_PROVIDER_DATA
*data
, DWORD idxSigner
,
507 BOOL fCounterSignerChain
, DWORD idxCounterSigner
)
511 TRACE("(%p, %d, %d, %d)\n", data
, idxSigner
, fCounterSignerChain
,
514 if (fCounterSignerChain
)
516 FIXME("unimplemented for counter signers\n");
521 PCERT_SIMPLE_CHAIN simpleChain
=
522 data
->pasSigners
[idxSigner
].pChainContext
->rgpChain
[0];
526 for (i
= 0; i
< simpleChain
->cElement
; i
++)
529 data
->pasSigners
[idxSigner
].pasCertChain
[i
].dwConfidence
= 0;
530 if (!(simpleChain
->rgpElement
[i
]->TrustStatus
.dwErrorStatus
&
531 CERT_TRUST_IS_NOT_TIME_VALID
))
532 data
->pasSigners
[idxSigner
].pasCertChain
[i
].dwConfidence
533 |= CERT_CONFIDENCE_TIME
;
534 if (!(simpleChain
->rgpElement
[i
]->TrustStatus
.dwErrorStatus
&
535 CERT_TRUST_IS_NOT_TIME_NESTED
))
536 data
->pasSigners
[idxSigner
].pasCertChain
[i
].dwConfidence
537 |= CERT_CONFIDENCE_TIMENEST
;
538 if (!(simpleChain
->rgpElement
[i
]->TrustStatus
.dwErrorStatus
&
539 CERT_TRUST_IS_NOT_SIGNATURE_VALID
))
540 data
->pasSigners
[idxSigner
].pasCertChain
[i
].dwConfidence
541 |= CERT_CONFIDENCE_SIG
;
542 /* Set additional flags */
543 if (!(simpleChain
->rgpElement
[i
]->TrustStatus
.dwErrorStatus
&
544 CERT_TRUST_IS_UNTRUSTED_ROOT
))
545 data
->pasSigners
[idxSigner
].pasCertChain
[i
].fTrustedRoot
= TRUE
;
546 if (simpleChain
->rgpElement
[i
]->TrustStatus
.dwInfoStatus
&
547 CERT_TRUST_IS_SELF_SIGNED
)
548 data
->pasSigners
[idxSigner
].pasCertChain
[i
].fSelfSigned
= TRUE
;
549 if (simpleChain
->rgpElement
[i
]->TrustStatus
.dwErrorStatus
&
550 CERT_TRUST_IS_CYCLIC
)
551 data
->pasSigners
[idxSigner
].pasCertChain
[i
].fIsCyclic
= TRUE
;
557 static BOOL
WINTRUST_CopyChain(CRYPT_PROVIDER_DATA
*data
, DWORD signerIdx
)
560 PCERT_SIMPLE_CHAIN simpleChain
=
561 data
->pasSigners
[signerIdx
].pChainContext
->rgpChain
[0];
564 data
->pasSigners
[signerIdx
].pasCertChain
[0].pChainElement
=
565 simpleChain
->rgpElement
[0];
567 for (i
= 1; ret
&& i
< simpleChain
->cElement
; i
++)
569 ret
= data
->psPfns
->pfnAddCert2Chain(data
, signerIdx
, FALSE
, 0,
570 simpleChain
->rgpElement
[i
]->pCertContext
);
572 data
->pasSigners
[signerIdx
].pasCertChain
[i
].pChainElement
=
573 simpleChain
->rgpElement
[i
];
578 static void WINTRUST_CreateChainPolicyCreateInfo(
579 const CRYPT_PROVIDER_DATA
*data
, PWTD_GENERIC_CHAIN_POLICY_CREATE_INFO info
,
580 PCERT_CHAIN_PARA chainPara
)
582 chainPara
->cbSize
= sizeof(CERT_CHAIN_PARA
);
583 if (data
->pRequestUsage
)
584 memcpy(&chainPara
->RequestedUsage
, data
->pRequestUsage
,
585 sizeof(CERT_USAGE_MATCH
));
586 info
->u
.cbSize
= sizeof(WTD_GENERIC_CHAIN_POLICY_CREATE_INFO
);
587 info
->hChainEngine
= NULL
;
588 info
->pChainPara
= chainPara
;
589 if (data
->dwProvFlags
& CPD_REVOCATION_CHECK_END_CERT
)
590 info
->dwFlags
= CERT_CHAIN_REVOCATION_CHECK_END_CERT
;
591 else if (data
->dwProvFlags
& CPD_REVOCATION_CHECK_CHAIN
)
592 info
->dwFlags
= CERT_CHAIN_REVOCATION_CHECK_CHAIN
;
593 else if (data
->dwProvFlags
& CPD_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT
)
594 info
->dwFlags
= CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT
;
597 info
->pvReserved
= NULL
;
600 static BOOL
WINTRUST_CreateChainForSigner(CRYPT_PROVIDER_DATA
*data
,
601 DWORD signer
, PWTD_GENERIC_CHAIN_POLICY_CREATE_INFO createInfo
,
602 PCERT_CHAIN_PARA chainPara
)
606 /* Expect the end certificate for each signer to be the only cert in the
609 if (data
->pasSigners
[signer
].csCertChain
)
611 /* Create a certificate chain for each signer */
612 ret
= CertGetCertificateChain(createInfo
->hChainEngine
,
613 data
->pasSigners
[signer
].pasCertChain
[0].pCert
,
614 &data
->pasSigners
[signer
].sftVerifyAsOf
,
615 data
->chStores
? data
->pahStores
[0] : NULL
,
616 chainPara
, createInfo
->dwFlags
, createInfo
->pvReserved
,
617 &data
->pasSigners
[signer
].pChainContext
);
620 if (data
->pasSigners
[signer
].pChainContext
->cChain
!= 1)
622 FIXME("unimplemented for more than 1 simple chain\n");
627 if ((ret
= WINTRUST_CopyChain(data
, signer
)))
628 ret
= data
->psPfns
->pfnCertCheckPolicy(data
, signer
, FALSE
,
636 HRESULT WINAPI
WintrustCertificateTrust(CRYPT_PROVIDER_DATA
*data
)
640 if (!data
->csSigners
)
643 SetLastError(TRUST_E_NOSIGNATURE
);
648 WTD_GENERIC_CHAIN_POLICY_CREATE_INFO createInfo
;
649 CERT_CHAIN_PARA chainPara
;
651 WINTRUST_CreateChainPolicyCreateInfo(data
, &createInfo
, &chainPara
);
653 for (i
= 0; i
< data
->csSigners
; i
++)
654 ret
= WINTRUST_CreateChainForSigner(data
, i
, &createInfo
,
658 data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_CERTPROV
] =
660 return ret
? S_OK
: S_FALSE
;
663 HRESULT WINAPI
SoftpubAuthenticode(CRYPT_PROVIDER_DATA
*data
)
666 CERT_CHAIN_POLICY_STATUS policyStatus
= { sizeof(policyStatus
), 0 };
668 if (data
->pWintrustData
->dwUIChoice
!= WTD_UI_NONE
)
669 FIXME("unimplemented for UI choice %d\n",
670 data
->pWintrustData
->dwUIChoice
);
671 if (!data
->csSigners
)
674 policyStatus
.dwError
= TRUST_E_NOSIGNATURE
;
681 for (i
= 0; ret
&& i
< data
->csSigners
; i
++)
683 CERT_CHAIN_POLICY_PARA policyPara
= { sizeof(policyPara
), 0 };
685 if (data
->dwRegPolicySettings
& WTPF_TRUSTTEST
)
686 policyPara
.dwFlags
|= CERT_CHAIN_POLICY_TRUST_TESTROOT_FLAG
;
687 if (data
->dwRegPolicySettings
& WTPF_TESTCANBEVALID
)
688 policyPara
.dwFlags
|= CERT_CHAIN_POLICY_ALLOW_TESTROOT_FLAG
;
689 if (data
->dwRegPolicySettings
& WTPF_IGNOREEXPIRATION
)
690 policyPara
.dwFlags
|=
691 CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG
|
692 CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG
|
693 CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG
;
694 if (data
->dwRegPolicySettings
& WTPF_IGNOREREVOKATION
)
695 policyPara
.dwFlags
|=
696 CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG
|
697 CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG
|
698 CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG
|
699 CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG
;
700 CertVerifyCertificateChainPolicy(CERT_CHAIN_POLICY_AUTHENTICODE
,
701 data
->pasSigners
[i
].pChainContext
, &policyPara
, &policyStatus
);
702 if (policyStatus
.dwError
!= NO_ERROR
)
707 data
->padwTrustStepErrors
[TRUSTERROR_STEP_FINAL_POLICYPROV
] =
708 policyStatus
.dwError
;
709 return ret
? S_OK
: S_FALSE
;
712 HRESULT WINAPI
SoftpubCleanup(CRYPT_PROVIDER_DATA
*data
)
716 for (i
= 0; i
< data
->csSigners
; i
++)
718 for (j
= 0; j
< data
->pasSigners
[i
].csCertChain
; j
++)
719 CertFreeCertificateContext(data
->pasSigners
[i
].pasCertChain
[j
].pCert
);
720 data
->psPfns
->pfnFree(data
->pasSigners
[i
].pasCertChain
);
721 data
->psPfns
->pfnFree(data
->pasSigners
[i
].psSigner
);
722 CertFreeCertificateChain(data
->pasSigners
[i
].pChainContext
);
724 data
->psPfns
->pfnFree(data
->pasSigners
);
726 for (i
= 0; i
< data
->chStores
; i
++)
727 CertCloseStore(data
->pahStores
[i
], 0);
728 data
->psPfns
->pfnFree(data
->pahStores
);
732 data
->psPfns
->pfnFree(data
->u
.pPDSip
->pSip
);
733 data
->psPfns
->pfnFree(data
->u
.pPDSip
->pCATSip
);
734 data
->psPfns
->pfnFree(data
->u
.pPDSip
->psSipSubjectInfo
);
735 data
->psPfns
->pfnFree(data
->u
.pPDSip
->psSipCATSubjectInfo
);
736 data
->psPfns
->pfnFree(data
->u
.pPDSip
->psIndirectData
);
739 CryptMsgClose(data
->hMsg
);
741 if (data
->fOpenedFile
)
742 CloseHandle(data
->pWintrustData
->u
.pFile
->hFile
);