summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2017-09-04 00:02:29 +0200
committerDaniel Stenberg <daniel@haxx.se>2017-09-04 00:02:29 +0200
commitf9d39ab18d44d587fde0673eb5a15da60e27950c (patch)
treeef2502d4eece79ae86c80a3cc2d2199d00cf1e3b
parent0d4a6355a84b71967a5ecdd22ef7823af614322f (diff)
downloadcurl-bagder/schannel-returncode.tar.gz
schannel: return CURLE_SSL_CACERT on failed verificationbagder/schannel-returncode
... not *CACERT_BADFILE as it isn't really because of a bad file. Bug: https://curl.haxx.se/mail/lib-2017-09/0002.html
-rw-r--r--lib/vtls/schannel.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index 473bebe21..64d180dc4 100644
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -714,7 +714,7 @@ schannel_connect_step2(struct connectdata *conn, int sockindex)
failf(data, "schannel: next InitializeSecurityContext failed: %s",
Curl_sspi_strerror(conn, sspi_status));
return sspi_status == SEC_E_UNTRUSTED_ROOT ?
- CURLE_SSL_CACERT_BADFILE : CURLE_SSL_CONNECT_ERROR;
+ CURLE_SSL_CACERT : CURLE_SSL_CONNECT_ERROR;
}
/* check if there was additional remaining encrypted data */