Ignore CTRequired when building an X509 chain. (dotnet/corefx#35246)
authorKevin Jones <kevin@vcsjones.com>
Tue, 12 Feb 2019 00:41:07 +0000 (19:41 -0500)
committerSantiago Fernandez Madero <safern@microsoft.com>
Tue, 12 Feb 2019 00:41:07 +0000 (18:41 -0600)
Commit migrated from https://github.com/dotnet/corefx/commit/e8a88e8e0270977edc74019a282c73eab940b872

src/libraries/Native/Unix/System.Security.Cryptography.Native.Apple/pal_x509chain.c

index 5be21d0..51eb62b 100644 (file)
@@ -186,7 +186,8 @@ static void MergeStatusCodes(CFTypeRef key, CFTypeRef value, void* context)
         // It doesn't represent a new error code, and we're still getting the old ones, so
         // just ignore it for now.
     }
-    else if (CFEqual(keyString, CFSTR("NonEmptySubject")) || CFEqual(keyString, CFSTR("GrayListedKey")))
+    else if (CFEqual(keyString, CFSTR("NonEmptySubject")) || CFEqual(keyString, CFSTR("GrayListedKey")) ||
+             CFEqual(keyString, CFSTR("CTRequired")))
     {
         // Not a "problem" that we report.
     }