[gnurl] 191/411: schannel: return CURLE_PEER_FAILED_VERIFICATION for untrusted root

[gnunet]

This is an automated email from the git hooks/post-receive script.

nikita pushed a commit to branch master
in repository gnurl.

commit abeeffb11c996aed90ea465fa2128bfa564a1542
Author: Daniel Stenberg <daniel@haxx.se>
AuthorDate: Mon Sep 28 08:30:25 2020 +0200

    schannel: return CURLE_PEER_FAILED_VERIFICATION for untrusted root
    
    This matches what is returned in other TLS backends in the same
    situation.
    
    Reviewed-by: Jay Satiro
    Reviewed-by: Emil Engler
    Follow-up to 5a3efb1
    Reported-by: iammrtau on github
    Fixes #6003
    Closes #6018
---
 lib/vtls/schannel.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index 1fe9b7b8d..c7e4e793c 100644
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -1181,6 +1181,10 @@ schannel_connect_step2(struct connectdata *conn, int 
sockindex)
         failf(data, "schannel: SNI or certificate check failed: %s",
               Curl_sspi_strerror(sspi_status, buffer, sizeof(buffer)));
         return CURLE_PEER_FAILED_VERIFICATION;
+      case SEC_E_UNTRUSTED_ROOT:
+        failf(data, "schannel: %s",
+              Curl_sspi_strerror(sspi_status, buffer, sizeof(buffer)));
+        return CURLE_PEER_FAILED_VERIFICATION;
         /*
           case SEC_E_INVALID_HANDLE:
           case SEC_E_INVALID_TOKEN:

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.