]> git.ipfire.org Git - thirdparty/curl.git/commit
Revert "schannel: reverse the order of certinfo insertions"
authorNathan Moinvaziri <nathan@nathanm.com>
Fri, 28 Jul 2023 19:20:09 +0000 (12:20 -0700)
committerJay Satiro <raysatiro@yahoo.com>
Sat, 29 Jul 2023 20:06:16 +0000 (16:06 -0400)
commitf540a39b8b338e578aea17c57d4192bb5bc0118b
tree42dc1c1f3eaeef83cf066ad811d7c7e93bc9043e
parent7bfb10c1803deb0e6dc1147bdd594129ea480a91
Revert "schannel: reverse the order of certinfo insertions"

This reverts commit 8986df802db9b5338d9d50a54232ebae4dbcf6dd.

Windows does not guarantee a particular certificate ordering, even
though TLS may have its own ordering/relationship guarantees. Recent
versions of Windows 11 reversed the ordering of ceritifcates returned by
CertEnumCertificatesInStore, therefore this commit no longer works as
initially intended. libcurl makes no guarantees about certificate
ordering if the operating system can't.

Ref: https://github.com/curl/curl/issues/9706

Closes https://github.com/curl/curl/pull/11536
lib/vtls/schannel.c