Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-12 Thread Juan Lang
On Wed, Dec 12, 2012 at 12:32 AM, Hans Leidekker wrote: > On Tue, 2012-12-11 at 12:59 -0800, Juan Lang wrote: > > Getting the client to trust the server cert can be as easy as ignoring > untrusted > > root errors, if you don't think this impacts the revocation results. > > > > Returning revocation

Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-12 Thread Hans Leidekker
On Tue, 2012-12-11 at 12:59 -0800, Juan Lang wrote: > Getting the client to trust the server cert can be as easy as ignoring > untrusted > root errors, if you don't think this impacts the revocation results. > > Returning revocation is straightforward enough, assuming you have a server > under >

Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-11 Thread Juan Lang
On Tue, Dec 11, 2012 at 12:37 PM, Hans Leidekker wrote: > On Tue, 2012-12-11 at 11:52 -0800, Juan Lang wrote: > > On Tue, Dec 11, 2012 at 6:10 AM, Hans Leidekker > wrote: > > On Tue, 2012-12-11 at 14:52 +0100, Jacek Caban wrote: > > > On 12/11/12 09:45, Hans Leidekker wrote: > >

Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-11 Thread Hans Leidekker
On Tue, 2012-12-11 at 11:52 -0800, Juan Lang wrote: > On Tue, Dec 11, 2012 at 6:10 AM, Hans Leidekker wrote: > On Tue, 2012-12-11 at 14:52 +0100, Jacek Caban wrote: > > On 12/11/12 09:45, Hans Leidekker wrote: > > > https://testbot.winehq.org/JobDetails.pl?Key=23300 is a te

Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-11 Thread Juan Lang
On Tue, Dec 11, 2012 at 6:10 AM, Hans Leidekker wrote: > On Tue, 2012-12-11 at 14:52 +0100, Jacek Caban wrote: > > On 12/11/12 09:45, Hans Leidekker wrote: > > > https://testbot.winehq.org/JobDetails.pl?Key=23300 is a test which > shows that > > > revocation checks fail for the certificate on outl

Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-11 Thread Hans Leidekker
On Tue, 2012-12-11 at 14:52 +0100, Jacek Caban wrote: > On 12/11/12 09:45, Hans Leidekker wrote: > > https://testbot.winehq.org/JobDetails.pl?Key=23300 is a test which shows > > that > > revocation checks fail for the certificate on outlook.com when passed > > straight > > to CertVerifyRevocation

Re: wininet: Don't perform revocation checks when verifying a certificate.

2012-12-11 Thread Jacek Caban
Hi Hans, On 12/11/12 09:45, Hans Leidekker wrote: > https://testbot.winehq.org/JobDetails.pl?Key=23300 is a test which shows that > revocation checks fail for the certificate on outlook.com when passed straight > to CertVerifyRevocation. The reason is that a CRL link specified in the > certificate