https://git.reactos.org/?p=reactos.git;a=commitdiff;h=f77f5a30cfd841bb94ae3…
commit f77f5a30cfd841bb94ae3c88627e1ae374807115
Author: Stanislav Motylkov <x86corez(a)gmail.com>
AuthorDate: Mon Jan 11 19:16:16 2021 +0300
Commit: Stanislav Motylkov <x86corez(a)gmail.com>
CommitDate: Mon Jan 11 19:16:16 2021 +0300
[RAPPS] Fix pinned certificate issuer check
---
base/applications/rapps/loaddlg.cpp | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/base/applications/rapps/loaddlg.cpp b/base/applications/rapps/loaddlg.cpp
index fb060358e55..836bb150ab0 100644
--- a/base/applications/rapps/loaddlg.cpp
+++ b/base/applications/rapps/loaddlg.cpp
@@ -50,7 +50,8 @@
#include "misc.h"
#ifdef USE_CERT_PINNING
-#define CERT_ISSUER_INFO "US\r\nLet's Encrypt\r\nLet's Encrypt Authority
X3"
+#define CERT_ISSUER_INFO_OLD "US\r\nLet's Encrypt\r\nLet's Encrypt Authority
X3"
+#define CERT_ISSUER_INFO_NEW "US\r\nLet's Encrypt\r\nR3"
#define CERT_SUBJECT_INFO "rapps.reactos.org"
#endif
@@ -832,7 +833,8 @@ unsigned int WINAPI CDownloadManager::ThreadFunc(LPVOID param)
else
{
if (strcmp(subjectName, CERT_SUBJECT_INFO) ||
- strcmp(issuerName, CERT_ISSUER_INFO))
+ (strcmp(issuerName, CERT_ISSUER_INFO_OLD) &&
+ strcmp(issuerName, CERT_ISSUER_INFO_NEW)))
{
szMsgText.Format(IDS_MISMATCH_CERT_INFO, (char*)subjectName, (const
char*)issuerName);
bAskQuestion = true;