Commit 07fd7871 authored by Dan Fandrich's avatar Dan Fandrich
Browse files

schannel: return a more specific error code for SEC_E_UNTRUSTED_ROOT

parent 7cb1e1ee

lib/vtls/schannel.c

+2 −1
Original line number Diff line number Diff line
@@ -630,7 +630,8 @@ schannel_connect_step2(struct connectdata *conn, int sockindex) 
      else

        failf(data, "schannel: next InitializeSecurityContext failed: %s",

              Curl_sspi_strerror(conn, sspi_status));

      return CURLE_SSL_CONNECT_ERROR;

      return sspi_status == SEC_E_UNTRUSTED_ROOT ?

          CURLE_SSL_CACERT_BADFILE : CURLE_SSL_CONNECT_ERROR;

    }



    /* check if there was additional remaining encrypted data */