Unverified Commit 202c1cc2 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

schannel: return CURLE_SSL_CACERT on failed verification 

... not *CACERT_BADFILE as it isn't really because of a bad file.

Bug: https://curl.haxx.se/mail/lib-2017-09/0002.html
Closes #1858
parent 4ed618c0

lib/vtls/schannel.c

+1 −1
Original line number Diff line number Diff line
@@ -714,7 +714,7 @@ schannel_connect_step2(struct connectdata *conn, int sockindex) 
        failf(data, "schannel: next InitializeSecurityContext failed: %s",

              Curl_sspi_strerror(conn, sspi_status));

      return sspi_status == SEC_E_UNTRUSTED_ROOT ?

          CURLE_SSL_CACERT_BADFILE : CURLE_SSL_CONNECT_ERROR;

          CURLE_SSL_CACERT : CURLE_SSL_CONNECT_ERROR;

    }



    /* check if there was additional remaining encrypted data */