dlls/wintrust/softpub.c

   1 /*
   2  * Copyright 2007 Juan Lang
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18 #include <stdarg.h>
  19
  20 #define NONAMELESSUNION
  21
  22 #include "windef.h"
  23 #include "winbase.h"
  24 #include "wintrust.h"
  25 #include "mssip.h"
  26 #include "softpub.h"
  27 #include "wine/debug.h"
  28
  29 WINE_DEFAULT_DEBUG_CHANNEL(wintrust);
  30
  31 HRESULT WINAPI SoftpubDefCertInit(CRYPT_PROVIDER_DATA *data)
  32 {
  33     HRESULT ret = S_FALSE;
  34
  35     TRACE("(%p)\n", data);
  36
  37     if (data->padwTrustStepErrors &&
  38      !data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_WVTINIT])
  39         ret = S_OK;
  40     TRACE("returning %08x\n", ret);
  41     return ret;
  42 }
  43
  44 HRESULT WINAPI SoftpubInitialize(CRYPT_PROVIDER_DATA *data)
  45 {
  46     HRESULT ret = S_FALSE;
  47
  48     TRACE("(%p)\n", data);
  49
  50     if (data->padwTrustStepErrors &&
  51      !data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_WVTINIT])
  52         ret = S_OK;
  53     TRACE("returning %08x\n", ret);
  54     return ret;
  55 }
  56
  57 HRESULT WINAPI DriverInitializePolicy(CRYPT_PROVIDER_DATA *data)
  58 {
  59     FIXME("stub\n");
  60     return S_OK;
  61 }
  62
  63 HRESULT WINAPI DriverCleanupPolicy(CRYPT_PROVIDER_DATA *data)
  64 {
  65     FIXME("stub\n");
  66     return S_OK;
  67 }
  68
  69 HRESULT WINAPI DriverFinalPolicy(CRYPT_PROVIDER_DATA *data)
  70 {
  71     FIXME("stub\n");
  72     return S_OK;
  73 }
  74
  75 /* Assumes data->pWintrustData->u.pFile exists.  Makes sure a file handle is
  76  * open for the file.
  77  */
  78 static DWORD SOFTPUB_OpenFile(CRYPT_PROVIDER_DATA *data)
  79 {
  80     DWORD err = ERROR_SUCCESS;
  81
  82     /* PSDK implies that all values should be initialized to NULL, so callers
  83      * typically have hFile as NULL rather than INVALID_HANDLE_VALUE.  Check
  84      * for both.
  85      */
  86     if (!data->pWintrustData->u.pFile->hFile ||
  87      data->pWintrustData->u.pFile->hFile == INVALID_HANDLE_VALUE)
  88     {
  89         data->pWintrustData->u.pFile->hFile =
  90             CreateFileW(data->pWintrustData->u.pFile->pcwszFilePath, GENERIC_READ,
  91           FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
  92         if (data->pWintrustData->u.pFile->hFile != INVALID_HANDLE_VALUE)
  93             data->fOpenedFile = TRUE;
  94         else
  95             err = GetLastError();
  96     }
  97     if (!err)
  98         GetFileTime(data->pWintrustData->u.pFile->hFile, &data->sftSystemTime,
  99          NULL, NULL);
 100     TRACE("returning %d\n", err);
 101     return err;
 102 }
 103
 104 /* Assumes data->pWintrustData->u.pFile exists.  Sets data->pPDSip->gSubject to
 105  * the file's subject GUID.
 106  */
 107 static DWORD SOFTPUB_GetFileSubject(CRYPT_PROVIDER_DATA *data)
 108 {
 109     DWORD err = ERROR_SUCCESS;
 110
 111     if (!WVT_ISINSTRUCT(WINTRUST_FILE_INFO,
 112      data->pWintrustData->u.pFile->cbStruct, pgKnownSubject) ||
 113      !data->pWintrustData->u.pFile->pgKnownSubject)
 114     {
 115         if (!CryptSIPRetrieveSubjectGuid(
 116          data->pWintrustData->u.pFile->pcwszFilePath,
 117          data->pWintrustData->u.pFile->hFile,
 118          &data->u.pPDSip->gSubject))
 119             err = GetLastError();
 120     }
 121     else
 122         data->u.pPDSip->gSubject = *data->pWintrustData->u.pFile->pgKnownSubject;
 123     TRACE("returning %d\n", err);
 124     return err;
 125 }
 126
 127 /* Assumes data->u.pPDSip exists, and its gSubject member set.
 128  * Allocates data->u.pPDSip->pSip and loads it, if possible.
 129  */
 130 static DWORD SOFTPUB_GetSIP(CRYPT_PROVIDER_DATA *data)
 131 {
 132     DWORD err = ERROR_SUCCESS;
 133
 134     data->u.pPDSip->pSip = data->psPfns->pfnAlloc(sizeof(SIP_DISPATCH_INFO));
 135     if (data->u.pPDSip->pSip)
 136     {
 137         if (!CryptSIPLoad(&data->u.pPDSip->gSubject, 0, data->u.pPDSip->pSip))
 138             err = GetLastError();
 139     }
 140     else
 141         err = ERROR_OUTOFMEMORY;
 142     TRACE("returning %d\n", err);
 143     return err;
 144 }
 145
 146 /* Assumes data->u.pPDSip has been loaded, and data->u.pPDSip->pSip allocated.
 147  * Calls data->u.pPDSip->pSip->pfGet to construct data->hMsg.
 148  */
 149 static DWORD SOFTPUB_GetMessageFromFile(CRYPT_PROVIDER_DATA *data, HANDLE file,
 150  LPCWSTR filePath)
 151 {
 152     DWORD err = ERROR_SUCCESS;
 153     BOOL ret;
 154     LPBYTE buf = NULL;
 155     DWORD size = 0;
 156
 157     data->u.pPDSip->psSipSubjectInfo =
 158      data->psPfns->pfnAlloc(sizeof(SIP_SUBJECTINFO));
 159     if (!data->u.pPDSip->psSipSubjectInfo)
 160         return ERROR_OUTOFMEMORY;
 161
 162     data->u.pPDSip->psSipSubjectInfo->cbSize = sizeof(SIP_SUBJECTINFO);
 163     data->u.pPDSip->psSipSubjectInfo->pgSubjectType = &data->u.pPDSip->gSubject;
 164     data->u.pPDSip->psSipSubjectInfo->hFile = file;
 165     data->u.pPDSip->psSipSubjectInfo->pwsFileName = filePath;
 166     data->u.pPDSip->psSipSubjectInfo->hProv = data->hProv;
 167     ret = data->u.pPDSip->pSip->pfGet(data->u.pPDSip->psSipSubjectInfo,
 168      &data->dwEncoding, 0, &size, 0);
 169     if (!ret)
 170         return TRUST_E_NOSIGNATURE;
 171
 172     buf = data->psPfns->pfnAlloc(size);
 173     if (!buf)
 174         return ERROR_OUTOFMEMORY;
 175
 176     ret = data->u.pPDSip->pSip->pfGet(data->u.pPDSip->psSipSubjectInfo,
 177      &data->dwEncoding, 0, &size, buf);
 178     if (ret)
 179     {
 180         data->hMsg = CryptMsgOpenToDecode(data->dwEncoding, 0, 0, data->hProv,
 181          NULL, NULL);
 182         if (data->hMsg)
 183         {
 184             ret = CryptMsgUpdate(data->hMsg, buf, size, TRUE);
 185             if (!ret)
 186                 err = GetLastError();
 187         }
 188     }
 189     else
 190         err = GetLastError();
 191
 192     data->psPfns->pfnFree(buf);
 193     TRACE("returning %d\n", err);
 194     return err;
 195 }
 196
 197 static DWORD SOFTPUB_CreateStoreFromMessage(CRYPT_PROVIDER_DATA *data)
 198 {
 199     DWORD err = ERROR_SUCCESS;
 200     HCERTSTORE store;
 201
 202     store = CertOpenStore(CERT_STORE_PROV_MSG, data->dwEncoding,
 203      data->hProv, CERT_STORE_NO_CRYPT_RELEASE_FLAG, data->hMsg);
 204     if (store)
 205     {
 206         if (!data->psPfns->pfnAddStore2Chain(data, store))
 207             err = GetLastError();
 208         CertCloseStore(store, 0);
 209     }
 210     else
 211         err = GetLastError();
 212     TRACE("returning %d\n", err);
 213     return err;
 214 }
 215
 216 static DWORD SOFTPUB_DecodeInnerContent(CRYPT_PROVIDER_DATA *data)
 217 {
 218     BOOL ret;
 219     DWORD size, err = ERROR_SUCCESS;
 220     LPSTR oid = NULL;
 221     LPBYTE buf = NULL;
 222
 223     ret = CryptMsgGetParam(data->hMsg, CMSG_INNER_CONTENT_TYPE_PARAM, 0, NULL,
 224      &size);
 225     if (!ret)
 226     {
 227         err = GetLastError();
 228         goto error;
 229     }
 230     oid = data->psPfns->pfnAlloc(size);
 231     if (!oid)
 232     {
 233         err = ERROR_OUTOFMEMORY;
 234         goto error;
 235     }
 236     ret = CryptMsgGetParam(data->hMsg, CMSG_INNER_CONTENT_TYPE_PARAM, 0, oid,
 237      &size);
 238     if (!ret)
 239     {
 240         err = GetLastError();
 241         goto error;
 242     }
 243     ret = CryptMsgGetParam(data->hMsg, CMSG_CONTENT_PARAM, 0, NULL, &size);
 244     if (!ret)
 245     {
 246         err = GetLastError();
 247         goto error;
 248     }
 249     buf = data->psPfns->pfnAlloc(size);
 250     if (!buf)
 251     {
 252         err = ERROR_OUTOFMEMORY;
 253         goto error;
 254     }
 255     ret = CryptMsgGetParam(data->hMsg, CMSG_CONTENT_PARAM, 0, buf, &size);
 256     if (!ret)
 257     {
 258         err = GetLastError();
 259         goto error;
 260     }
 261     ret = CryptDecodeObject(data->dwEncoding, oid, buf, size, 0, NULL, &size);
 262     if (!ret)
 263     {
 264         err = GetLastError();
 265         goto error;
 266     }
 267     data->u.pPDSip->psIndirectData = data->psPfns->pfnAlloc(size);
 268     if (!data->u.pPDSip->psIndirectData)
 269     {
 270         err = ERROR_OUTOFMEMORY;
 271         goto error;
 272     }
 273     ret = CryptDecodeObject(data->dwEncoding, oid, buf, size, 0,
 274      data->u.pPDSip->psIndirectData, &size);
 275     if (!ret)
 276         err = GetLastError();
 277
 278 error:
 279     TRACE("returning %d\n", err);
 280     data->psPfns->pfnFree(oid);
 281     data->psPfns->pfnFree(buf);
 282     return err;
 283 }
 284
 285 static DWORD SOFTPUB_LoadCertMessage(CRYPT_PROVIDER_DATA *data)
 286 {
 287     DWORD err;
 288
 289     if (data->pWintrustData->u.pCert &&
 290      WVT_IS_CBSTRUCT_GT_MEMBEROFFSET(WINTRUST_CERT_INFO,
 291      data->pWintrustData->u.pCert->cbStruct, psCertContext))
 292     {
 293         if (data->psPfns)
 294         {
 295             CRYPT_PROVIDER_SGNR signer = { sizeof(signer), { 0 } };
 296             DWORD i;
 297             BOOL ret;
 298
 299             /* Add a signer with nothing but the time to verify, so we can
 300              * add a cert to it
 301              */
 302             if (WVT_ISINSTRUCT(WINTRUST_CERT_INFO,
 303              data->pWintrustData->u.pCert->cbStruct, psftVerifyAsOf) &&
 304              data->pWintrustData->u.pCert->psftVerifyAsOf)
 305                 data->sftSystemTime = signer.sftVerifyAsOf;
 306             else
 307             {
 308                 SYSTEMTIME sysTime;
 309
 310                 GetSystemTime(&sysTime);
 311                 SystemTimeToFileTime(&sysTime, &signer.sftVerifyAsOf);
 312             }
 313             ret = data->psPfns->pfnAddSgnr2Chain(data, FALSE, 0, &signer);
 314             if (ret)
 315             {
 316                 ret = data->psPfns->pfnAddCert2Chain(data, 0, FALSE, 0,
 317                  data->pWintrustData->u.pCert->psCertContext);
 318                 if (WVT_ISINSTRUCT(WINTRUST_CERT_INFO,
 319                  data->pWintrustData->u.pCert->cbStruct, pahStores))
 320                         for (i = 0;
 321                          ret && i < data->pWintrustData->u.pCert->chStores; i++)
 322                             ret = data->psPfns->pfnAddStore2Chain(data,
 323                              data->pWintrustData->u.pCert->pahStores[i]);
 324             }
 325             if (!ret)
 326                 err = GetLastError();
 327         }
 328         else
 329         {
 330             /* Do nothing!?  See the tests */
 331             err = ERROR_SUCCESS;
 332         }
 333     }
 334     else
 335         err = ERROR_INVALID_PARAMETER;
 336     return err;
 337 }
 338
 339 static DWORD SOFTPUB_LoadFileMessage(CRYPT_PROVIDER_DATA *data)
 340 {
 341     DWORD err = ERROR_SUCCESS;
 342
 343     if (!data->pWintrustData->u.pFile)
 344     {
 345         err = ERROR_INVALID_PARAMETER;
 346         goto error;
 347     }
 348     err = SOFTPUB_OpenFile(data);
 349     if (err)
 350         goto error;
 351     err = SOFTPUB_GetFileSubject(data);
 352     if (err)
 353         goto error;
 354     err = SOFTPUB_GetSIP(data);
 355     if (err)
 356         goto error;
 357     err = SOFTPUB_GetMessageFromFile(data, data->pWintrustData->u.pFile->hFile,
 358      data->pWintrustData->u.pFile->pcwszFilePath);
 359     if (err)
 360         goto error;
 361     err = SOFTPUB_CreateStoreFromMessage(data);
 362     if (err)
 363         goto error;
 364     err = SOFTPUB_DecodeInnerContent(data);
 365
 366 error:
 367     if (err && data->fOpenedFile && data->pWintrustData->u.pFile)
 368     {
 369         /* The caller won't expect the file to be open on failure, so close it.
 370          */
 371         CloseHandle(data->pWintrustData->u.pFile->hFile);
 372         data->pWintrustData->u.pFile->hFile = INVALID_HANDLE_VALUE;
 373         data->fOpenedFile = FALSE;
 374     }
 375     return err;
 376 }
 377
 378 static DWORD SOFTPUB_LoadCatalogMessage(CRYPT_PROVIDER_DATA *data)
 379 {
 380     DWORD err;
 381     HANDLE catalog = INVALID_HANDLE_VALUE;
 382
 383     if (!data->pWintrustData->u.pCatalog)
 384     {
 385         SetLastError(ERROR_INVALID_PARAMETER);
 386         return FALSE;
 387     }
 388     catalog = CreateFileW(data->pWintrustData->u.pCatalog->pcwszCatalogFilePath,
 389      GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL,
 390      NULL);
 391     if (catalog == INVALID_HANDLE_VALUE)
 392         return GetLastError();
 393     if (!CryptSIPRetrieveSubjectGuid(
 394      data->pWintrustData->u.pCatalog->pcwszCatalogFilePath, catalog,
 395      &data->u.pPDSip->gSubject))
 396     {
 397         err = GetLastError();
 398         goto error;
 399     }
 400     err = SOFTPUB_GetSIP(data);
 401     if (err)
 402         goto error;
 403     err = SOFTPUB_GetMessageFromFile(data, data->pWintrustData->u.pFile->hFile,
 404      data->pWintrustData->u.pFile->pcwszFilePath);
 405     if (err)
 406         goto error;
 407     err = SOFTPUB_CreateStoreFromMessage(data);
 408     if (err)
 409         goto error;
 410     err = SOFTPUB_DecodeInnerContent(data);
 411     /* FIXME: this loads the catalog file, but doesn't validate the member. */
 412 error:
 413     CloseHandle(catalog);
 414     return err;
 415 }
 416
 417 HRESULT WINAPI SoftpubLoadMessage(CRYPT_PROVIDER_DATA *data)
 418 {
 419     DWORD err = ERROR_SUCCESS;
 420
 421     TRACE("(%p)\n", data);
 422
 423     if (!data->padwTrustStepErrors)
 424         return S_FALSE;
 425
 426     switch (data->pWintrustData->dwUnionChoice)
 427     {
 428     case WTD_CHOICE_CERT:
 429         err = SOFTPUB_LoadCertMessage(data);
 430         break;
 431     case WTD_CHOICE_FILE:
 432         err = SOFTPUB_LoadFileMessage(data);
 433         break;
 434     case WTD_CHOICE_CATALOG:
 435         err = SOFTPUB_LoadCatalogMessage(data);
 436         break;
 437     default:
 438         FIXME("unimplemented for %d\n", data->pWintrustData->dwUnionChoice);
 439         err = ERROR_INVALID_PARAMETER;
 440     }
 441
 442     if (err)
 443         data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_OBJPROV] = err;
 444     TRACE("returning %d (%08x)\n", !err ? S_OK : S_FALSE,
 445      data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_OBJPROV]);
 446     return !err ? S_OK : S_FALSE;
 447 }
 448
 449 static CMSG_SIGNER_INFO *WINTRUST_GetSigner(CRYPT_PROVIDER_DATA *data,
 450  DWORD signerIdx)
 451 {
 452     BOOL ret;
 453     CMSG_SIGNER_INFO *signerInfo = NULL;
 454     DWORD size;
 455
 456     ret = CryptMsgGetParam(data->hMsg, CMSG_SIGNER_INFO_PARAM, signerIdx,
 457      NULL, &size);
 458     if (ret)
 459     {
 460         signerInfo = data->psPfns->pfnAlloc(size);
 461         if (signerInfo)
 462         {
 463             ret = CryptMsgGetParam(data->hMsg, CMSG_SIGNER_INFO_PARAM,
 464              signerIdx, signerInfo, &size);
 465             if (!ret)
 466             {
 467                 data->psPfns->pfnFree(signerInfo);
 468                 signerInfo = NULL;
 469             }
 470         }
 471         else
 472             SetLastError(ERROR_OUTOFMEMORY);
 473     }
 474     return signerInfo;
 475 }
 476
 477 static DWORD WINTRUST_SaveSigner(CRYPT_PROVIDER_DATA *data, DWORD signerIdx)
 478 {
 479     DWORD err;
 480     CMSG_SIGNER_INFO *signerInfo = WINTRUST_GetSigner(data, signerIdx);
 481
 482     if (signerInfo)
 483     {
 484         CRYPT_PROVIDER_SGNR sgnr = { sizeof(sgnr), { 0 } };
 485
 486         sgnr.psSigner = signerInfo;
 487         sgnr.sftVerifyAsOf = data->sftSystemTime;
 488         if (!data->psPfns->pfnAddSgnr2Chain(data, FALSE, signerIdx, &sgnr))
 489             err = GetLastError();
 490         else
 491             err = ERROR_SUCCESS;
 492     }
 493     else
 494         err = GetLastError();
 495     return err;
 496 }
 497
 498 static CERT_INFO *WINTRUST_GetSignerCertInfo(CRYPT_PROVIDER_DATA *data,
 499  DWORD signerIdx)
 500 {
 501     BOOL ret;
 502     CERT_INFO *certInfo = NULL;
 503     DWORD size;
 504
 505     ret = CryptMsgGetParam(data->hMsg, CMSG_SIGNER_CERT_INFO_PARAM, signerIdx,
 506      NULL, &size);
 507     if (ret)
 508     {
 509         certInfo = data->psPfns->pfnAlloc(size);
 510         if (certInfo)
 511         {
 512             ret = CryptMsgGetParam(data->hMsg, CMSG_SIGNER_CERT_INFO_PARAM,
 513              signerIdx, certInfo, &size);
 514             if (!ret)
 515             {
 516                 data->psPfns->pfnFree(certInfo);
 517                 certInfo = NULL;
 518             }
 519         }
 520         else
 521             SetLastError(ERROR_OUTOFMEMORY);
 522     }
 523     return certInfo;
 524 }
 525
 526 static DWORD WINTRUST_VerifySigner(CRYPT_PROVIDER_DATA *data, DWORD signerIdx)
 527 {
 528     DWORD err;
 529     CERT_INFO *certInfo = WINTRUST_GetSignerCertInfo(data, signerIdx);
 530
 531     if (certInfo)
 532     {
 533         PCCERT_CONTEXT subject = CertGetSubjectCertificateFromStore(
 534          data->pahStores[0], data->dwEncoding, certInfo);
 535
 536         if (subject)
 537         {
 538             CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA para = { sizeof(para), 0,
 539              signerIdx, CMSG_VERIFY_SIGNER_CERT, (LPVOID)subject };
 540
 541             if (!CryptMsgControl(data->hMsg, 0, CMSG_CTRL_VERIFY_SIGNATURE_EX,
 542              &para))
 543                 err = TRUST_E_CERT_SIGNATURE;
 544             else
 545             {
 546                 data->psPfns->pfnAddCert2Chain(data, signerIdx, FALSE, 0,
 547                  subject);
 548                 err = ERROR_SUCCESS;
 549             }
 550             CertFreeCertificateContext(subject);
 551         }
 552         else
 553             err = TRUST_E_NO_SIGNER_CERT;
 554         data->psPfns->pfnFree(certInfo);
 555     }
 556     else
 557         err = GetLastError();
 558     return err;
 559 }
 560
 561 HRESULT WINAPI SoftpubLoadSignature(CRYPT_PROVIDER_DATA *data)
 562 {
 563     DWORD err;
 564
 565     TRACE("(%p)\n", data);
 566
 567     if (!data->padwTrustStepErrors)
 568         return S_FALSE;
 569
 570     if (data->hMsg)
 571     {
 572         DWORD signerCount, size;
 573
 574         size = sizeof(signerCount);
 575         if (CryptMsgGetParam(data->hMsg, CMSG_SIGNER_COUNT_PARAM, 0,
 576          &signerCount, &size))
 577         {
 578             DWORD i;
 579
 580             err = ERROR_SUCCESS;
 581             for (i = 0; !err && i < signerCount; i++)
 582             {
 583                 if (!(err = WINTRUST_SaveSigner(data, i)))
 584                     err = WINTRUST_VerifySigner(data, i);
 585             }
 586         }
 587         else
 588             err = TRUST_E_NOSIGNATURE;
 589     }
 590     else
 591         err = ERROR_SUCCESS;
 592     if (err)
 593         data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_SIGPROV] = err;
 594     return !err ? S_OK : S_FALSE;
 595 }
 596
 597 static DWORD WINTRUST_TrustStatusToConfidence(DWORD errorStatus)
 598 {
 599     DWORD confidence = 0;
 600
 601     confidence = 0;
 602     if (!(errorStatus & CERT_TRUST_IS_NOT_SIGNATURE_VALID))
 603         confidence |= CERT_CONFIDENCE_SIG;
 604     if (!(errorStatus & CERT_TRUST_IS_NOT_TIME_VALID))
 605         confidence |= CERT_CONFIDENCE_TIME;
 606     if (!(errorStatus & CERT_TRUST_IS_NOT_TIME_NESTED))
 607         confidence |= CERT_CONFIDENCE_TIMENEST;
 608     return confidence;
 609 }
 610
 611 BOOL WINAPI SoftpubCheckCert(CRYPT_PROVIDER_DATA *data, DWORD idxSigner,
 612  BOOL fCounterSignerChain, DWORD idxCounterSigner)
 613 {
 614     BOOL ret;
 615
 616     TRACE("(%p, %d, %d, %d)\n", data, idxSigner, fCounterSignerChain,
 617      idxCounterSigner);
 618
 619     if (fCounterSignerChain)
 620     {
 621         FIXME("unimplemented for counter signers\n");
 622         ret = FALSE;
 623     }
 624     else
 625     {
 626         PCERT_SIMPLE_CHAIN simpleChain =
 627          data->pasSigners[idxSigner].pChainContext->rgpChain[0];
 628         DWORD i;
 629
 630         ret = TRUE;
 631         for (i = 0; i < simpleChain->cElement; i++)
 632         {
 633             /* Set confidence */
 634             data->pasSigners[idxSigner].pasCertChain[i].dwConfidence =
 635              WINTRUST_TrustStatusToConfidence(
 636              simpleChain->rgpElement[i]->TrustStatus.dwErrorStatus);
 637             /* Set additional flags */
 638             if (!(simpleChain->rgpElement[i]->TrustStatus.dwErrorStatus &
 639              CERT_TRUST_IS_UNTRUSTED_ROOT))
 640                 data->pasSigners[idxSigner].pasCertChain[i].fTrustedRoot = TRUE;
 641             if (simpleChain->rgpElement[i]->TrustStatus.dwInfoStatus &
 642              CERT_TRUST_IS_SELF_SIGNED)
 643                 data->pasSigners[idxSigner].pasCertChain[i].fSelfSigned = TRUE;
 644             if (simpleChain->rgpElement[i]->TrustStatus.dwErrorStatus &
 645              CERT_TRUST_IS_CYCLIC)
 646                 data->pasSigners[idxSigner].pasCertChain[i].fIsCyclic = TRUE;
 647         }
 648     }
 649     return ret;
 650 }
 651
 652 static DWORD WINTRUST_TrustStatusToError(DWORD errorStatus)
 653 {
 654     DWORD error;
 655
 656     if (errorStatus & CERT_TRUST_IS_NOT_SIGNATURE_VALID)
 657         error = TRUST_E_CERT_SIGNATURE;
 658     else if (errorStatus & CERT_TRUST_IS_UNTRUSTED_ROOT)
 659         error = CERT_E_UNTRUSTEDROOT;
 660     else if (errorStatus & CERT_TRUST_IS_NOT_TIME_VALID)
 661         error = CERT_E_EXPIRED;
 662     else if (errorStatus & CERT_TRUST_IS_NOT_TIME_NESTED)
 663         error = CERT_E_VALIDITYPERIODNESTING;
 664     else if (errorStatus & CERT_TRUST_IS_REVOKED)
 665         error = CERT_E_REVOKED;
 666     else if (errorStatus & CERT_TRUST_IS_OFFLINE_REVOCATION ||
 667      errorStatus & CERT_TRUST_REVOCATION_STATUS_UNKNOWN)
 668         error = CERT_E_REVOCATION_FAILURE;
 669     else if (errorStatus & CERT_TRUST_IS_NOT_VALID_FOR_USAGE)
 670         error = CERT_E_WRONG_USAGE;
 671     else if (errorStatus & CERT_TRUST_IS_CYCLIC)
 672         error = CERT_E_CHAINING;
 673     else if (errorStatus & CERT_TRUST_INVALID_EXTENSION)
 674         error = CERT_E_CRITICAL;
 675     else if (errorStatus & CERT_TRUST_INVALID_POLICY_CONSTRAINTS)
 676         error = CERT_E_INVALID_POLICY;
 677     else if (errorStatus & CERT_TRUST_INVALID_BASIC_CONSTRAINTS)
 678         error = TRUST_E_BASIC_CONSTRAINTS;
 679     else if (errorStatus & CERT_TRUST_INVALID_NAME_CONSTRAINTS ||
 680      errorStatus & CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT ||
 681      errorStatus & CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT ||
 682      errorStatus & CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT ||
 683      errorStatus & CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT)
 684         error = CERT_E_INVALID_NAME;
 685     else if (errorStatus & CERT_TRUST_NO_ISSUANCE_CHAIN_POLICY)
 686         error = CERT_E_INVALID_POLICY;
 687     else if (errorStatus)
 688     {
 689         FIXME("unknown error status %08x\n", errorStatus);
 690         error = TRUST_E_SYSTEM_ERROR;
 691     }
 692     else
 693         error = S_OK;
 694     return error;
 695 }
 696
 697 static DWORD WINTRUST_CopyChain(CRYPT_PROVIDER_DATA *data, DWORD signerIdx)
 698 {
 699     DWORD err, i;
 700     PCERT_SIMPLE_CHAIN simpleChain =
 701      data->pasSigners[signerIdx].pChainContext->rgpChain[0];
 702
 703     data->pasSigners[signerIdx].pasCertChain[0].dwConfidence =
 704      WINTRUST_TrustStatusToConfidence(
 705      simpleChain->rgpElement[0]->TrustStatus.dwErrorStatus);
 706     data->pasSigners[signerIdx].pasCertChain[0].pChainElement =
 707      simpleChain->rgpElement[0];
 708     err = ERROR_SUCCESS;
 709     for (i = 1; !err && i < simpleChain->cElement; i++)
 710     {
 711         if (data->psPfns->pfnAddCert2Chain(data, signerIdx, FALSE, 0,
 712          simpleChain->rgpElement[i]->pCertContext))
 713         {
 714             data->pasSigners[signerIdx].pasCertChain[i].pChainElement =
 715              simpleChain->rgpElement[i];
 716             data->pasSigners[signerIdx].pasCertChain[i].dwConfidence =
 717              WINTRUST_TrustStatusToConfidence(
 718              simpleChain->rgpElement[i]->TrustStatus.dwErrorStatus);
 719         }
 720         else
 721             err = GetLastError();
 722     }
 723     data->pasSigners[signerIdx].pasCertChain[simpleChain->cElement - 1].dwError
 724      = WINTRUST_TrustStatusToError(
 725      simpleChain->rgpElement[simpleChain->cElement - 1]->
 726      TrustStatus.dwErrorStatus);
 727     return err;
 728 }
 729
 730 static void WINTRUST_CreateChainPolicyCreateInfo(
 731  const CRYPT_PROVIDER_DATA *data, PWTD_GENERIC_CHAIN_POLICY_CREATE_INFO info,
 732  PCERT_CHAIN_PARA chainPara)
 733 {
 734     chainPara->cbSize = sizeof(CERT_CHAIN_PARA);
 735     if (data->pRequestUsage)
 736         chainPara->RequestedUsage = *data->pRequestUsage;
 737     else
 738     {
 739         chainPara->RequestedUsage.dwType = 0;
 740         chainPara->RequestedUsage.Usage.cUsageIdentifier = 0;
 741     }
 742     info->u.cbSize = sizeof(WTD_GENERIC_CHAIN_POLICY_CREATE_INFO);
 743     info->hChainEngine = NULL;
 744     info->pChainPara = chainPara;
 745     if (data->dwProvFlags & CPD_REVOCATION_CHECK_END_CERT)
 746         info->dwFlags = CERT_CHAIN_REVOCATION_CHECK_END_CERT;
 747     else if (data->dwProvFlags & CPD_REVOCATION_CHECK_CHAIN)
 748         info->dwFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN;
 749     else if (data->dwProvFlags & CPD_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT)
 750         info->dwFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT;
 751     else
 752         info->dwFlags = 0;
 753     info->pvReserved = NULL;
 754 }
 755
 756 static DWORD WINTRUST_CreateChainForSigner(CRYPT_PROVIDER_DATA *data,
 757  DWORD signer, PWTD_GENERIC_CHAIN_POLICY_CREATE_INFO createInfo,
 758  PCERT_CHAIN_PARA chainPara)
 759 {
 760     DWORD err = ERROR_SUCCESS;
 761     HCERTSTORE store = NULL;
 762
 763     if (data->chStores)
 764     {
 765         store = CertOpenStore(CERT_STORE_PROV_COLLECTION, 0, 0,
 766          CERT_STORE_CREATE_NEW_FLAG, NULL);
 767         if (store)
 768         {
 769             DWORD i;
 770
 771             for (i = 0; i < data->chStores; i++)
 772                 CertAddStoreToCollection(store, data->pahStores[i], 0, 0);
 773         }
 774         else
 775             err = GetLastError();
 776     }
 777     if (!err)
 778     {
 779         /* Expect the end certificate for each signer to be the only cert in
 780          * the chain:
 781          */
 782         if (data->pasSigners[signer].csCertChain)
 783         {
 784             BOOL ret;
 785
 786             /* Create a certificate chain for each signer */
 787             ret = CertGetCertificateChain(createInfo->hChainEngine,
 788              data->pasSigners[signer].pasCertChain[0].pCert,
 789              &data->pasSigners[signer].sftVerifyAsOf, store,
 790              chainPara, createInfo->dwFlags, createInfo->pvReserved,
 791              &data->pasSigners[signer].pChainContext);
 792             if (ret)
 793             {
 794                 if (data->pasSigners[signer].pChainContext->cChain != 1)
 795                 {
 796                     FIXME("unimplemented for more than 1 simple chain\n");
 797                     err = E_NOTIMPL;
 798                 }
 799                 else
 800                 {
 801                     if (!(err = WINTRUST_CopyChain(data, signer)))
 802                     {
 803                         if (data->psPfns->pfnCertCheckPolicy)
 804                         {
 805                             ret = data->psPfns->pfnCertCheckPolicy(data, signer,
 806                              FALSE, 0);
 807                             if (!ret)
 808                                 err = GetLastError();
 809                         }
 810                         else
 811                             TRACE(
 812                              "no cert check policy, skipping policy check\n");
 813                     }
 814                 }
 815             }
 816             else
 817                 err = GetLastError();
 818         }
 819         CertCloseStore(store, 0);
 820     }
 821     return err;
 822 }
 823
 824 HRESULT WINAPI WintrustCertificateTrust(CRYPT_PROVIDER_DATA *data)
 825 {
 826     DWORD err;
 827
 828     TRACE("(%p)\n", data);
 829
 830     if (!data->csSigners)
 831         err = TRUST_E_NOSIGNATURE;
 832     else
 833     {
 834         DWORD i;
 835         WTD_GENERIC_CHAIN_POLICY_CREATE_INFO createInfo;
 836         CERT_CHAIN_PARA chainPara;
 837
 838         WINTRUST_CreateChainPolicyCreateInfo(data, &createInfo, &chainPara);
 839         err = ERROR_SUCCESS;
 840         for (i = 0; !err && i < data->csSigners; i++)
 841             err = WINTRUST_CreateChainForSigner(data, i, &createInfo,
 842              &chainPara);
 843     }
 844     if (err)
 845         data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_CERTPROV] = err;
 846     TRACE("returning %d (%08x)\n", !err ? S_OK : S_FALSE,
 847      data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_CERTPROV]);
 848     return !err ? S_OK : S_FALSE;
 849 }
 850
 851 HRESULT WINAPI GenericChainCertificateTrust(CRYPT_PROVIDER_DATA *data)
 852 {
 853     BOOL ret;
 854     WTD_GENERIC_CHAIN_POLICY_DATA *policyData =
 855      data->pWintrustData->pPolicyCallbackData;
 856
 857     TRACE("(%p)\n", data);
 858
 859     if (policyData && policyData->u.cbSize !=
 860      sizeof(WTD_GENERIC_CHAIN_POLICY_CREATE_INFO))
 861     {
 862         SetLastError(ERROR_INVALID_PARAMETER);
 863         ret = FALSE;
 864         goto end;
 865     }
 866     if (!data->csSigners)
 867     {
 868         ret = FALSE;
 869         SetLastError(TRUST_E_NOSIGNATURE);
 870     }
 871     else
 872     {
 873         DWORD i;
 874         WTD_GENERIC_CHAIN_POLICY_CREATE_INFO createInfo, *pCreateInfo;
 875         CERT_CHAIN_PARA chainPara, *pChainPara;
 876
 877         if (policyData)
 878         {
 879             pCreateInfo = policyData->pSignerChainInfo;
 880             pChainPara = pCreateInfo->pChainPara;
 881         }
 882         else
 883         {
 884             WINTRUST_CreateChainPolicyCreateInfo(data, &createInfo, &chainPara);
 885             pChainPara = &chainPara;
 886             pCreateInfo = &createInfo;
 887         }
 888         ret = TRUE;
 889         for (i = 0; i < data->csSigners; i++)
 890             ret = WINTRUST_CreateChainForSigner(data, i, pCreateInfo,
 891              pChainPara);
 892     }
 893
 894 end:
 895     if (!ret)
 896         data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_CERTPROV] =
 897          GetLastError();
 898     TRACE("returning %d (%08x)\n", ret ? S_OK : S_FALSE,
 899      data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_CERTPROV]);
 900     return ret ? S_OK : S_FALSE;
 901 }
 902
 903 HRESULT WINAPI SoftpubAuthenticode(CRYPT_PROVIDER_DATA *data)
 904 {
 905     BOOL ret;
 906     CERT_CHAIN_POLICY_STATUS policyStatus = { sizeof(policyStatus), 0 };
 907
 908     TRACE("(%p)\n", data);
 909
 910     if (data->pWintrustData->dwUIChoice != WTD_UI_NONE)
 911         FIXME("unimplemented for UI choice %d\n",
 912          data->pWintrustData->dwUIChoice);
 913     if (!data->csSigners)
 914     {
 915         ret = FALSE;
 916         policyStatus.dwError = TRUST_E_NOSIGNATURE;
 917     }
 918     else
 919     {
 920         DWORD i;
 921
 922         ret = TRUE;
 923         for (i = 0; ret && i < data->csSigners; i++)
 924         {
 925             BYTE hash[20];
 926             DWORD size = sizeof(hash);
 927
 928             /* First make sure cert isn't disallowed */
 929             if ((ret = CertGetCertificateContextProperty(
 930              data->pasSigners[i].pasCertChain[0].pCert,
 931              CERT_SIGNATURE_HASH_PROP_ID, hash, &size)))
 932             {
 933                 static const WCHAR disallowedW[] =
 934                  { 'D','i','s','a','l','l','o','w','e','d',0 };
 935                 HCERTSTORE disallowed = CertOpenStore(CERT_STORE_PROV_SYSTEM_W,
 936                  X509_ASN_ENCODING, 0, CERT_SYSTEM_STORE_CURRENT_USER,
 937                  disallowedW);
 938
 939                 if (disallowed)
 940                 {
 941                     PCCERT_CONTEXT found = CertFindCertificateInStore(
 942                      disallowed, X509_ASN_ENCODING, 0, CERT_FIND_SIGNATURE_HASH,
 943                      hash, NULL);
 944
 945                     if (found)
 946                     {
 947                         /* Disallowed!  Can't verify it. */
 948                         policyStatus.dwError = TRUST_E_SUBJECT_NOT_TRUSTED;
 949                         ret = FALSE;
 950                         CertFreeCertificateContext(found);
 951                     }
 952                     CertCloseStore(disallowed, 0);
 953                 }
 954             }
 955             if (ret)
 956             {
 957                 CERT_CHAIN_POLICY_PARA policyPara = { sizeof(policyPara), 0 };
 958
 959                 if (data->dwRegPolicySettings & WTPF_TRUSTTEST)
 960                     policyPara.dwFlags |= CERT_CHAIN_POLICY_TRUST_TESTROOT_FLAG;
 961                 if (data->dwRegPolicySettings & WTPF_TESTCANBEVALID)
 962                     policyPara.dwFlags |= CERT_CHAIN_POLICY_ALLOW_TESTROOT_FLAG;
 963                 if (data->dwRegPolicySettings & WTPF_IGNOREEXPIRATION)
 964                     policyPara.dwFlags |=
 965                      CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG |
 966                      CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG |
 967                      CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG;
 968                 if (data->dwRegPolicySettings & WTPF_IGNOREREVOKATION)
 969                     policyPara.dwFlags |=
 970                      CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG |
 971                      CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG |
 972                      CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG |
 973                      CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG;
 974                 CertVerifyCertificateChainPolicy(CERT_CHAIN_POLICY_AUTHENTICODE,
 975                  data->pasSigners[i].pChainContext, &policyPara, &policyStatus);
 976                 if (policyStatus.dwError != NO_ERROR)
 977                     ret = FALSE;
 978             }
 979         }
 980     }
 981     if (!ret)
 982         data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_POLICYPROV] =
 983          policyStatus.dwError;
 984     TRACE("returning %d (%08x)\n", ret ? S_OK : S_FALSE,
 985      data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_POLICYPROV]);
 986     return ret ? S_OK : S_FALSE;
 987 }
 988
 989 static HRESULT WINAPI WINTRUST_DefaultPolicy(CRYPT_PROVIDER_DATA *pProvData,
 990  DWORD dwStepError, DWORD dwRegPolicySettings, DWORD cSigner,
 991  PWTD_GENERIC_CHAIN_POLICY_SIGNER_INFO rgpSigner, void *pvPolicyArg)
 992 {
 993     DWORD i;
 994     CERT_CHAIN_POLICY_STATUS policyStatus = { sizeof(policyStatus), 0 };
 995
 996     for (i = 0; !policyStatus.dwError && i < cSigner; i++)
 997     {
 998         CERT_CHAIN_POLICY_PARA policyPara = { sizeof(policyPara), 0 };
 999
1000         if (dwRegPolicySettings & WTPF_IGNOREEXPIRATION)
1001             policyPara.dwFlags |=
1002              CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG |
1003              CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG |
1004              CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG;
1005         if (dwRegPolicySettings & WTPF_IGNOREREVOKATION)
1006             policyPara.dwFlags |=
1007              CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG |
1008              CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG |
1009              CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG |
1010              CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG;
1011         CertVerifyCertificateChainPolicy(CERT_CHAIN_POLICY_BASE,
1012          rgpSigner[i].pChainContext, &policyPara, &policyStatus);
1013     }
1014     return policyStatus.dwError;
1015 }
1016
1017 HRESULT WINAPI GenericChainFinalProv(CRYPT_PROVIDER_DATA *data)
1018 {
1019     HRESULT err = NO_ERROR; /* not a typo, MS confused the types */
1020     WTD_GENERIC_CHAIN_POLICY_DATA *policyData =
1021      data->pWintrustData->pPolicyCallbackData;
1022
1023     TRACE("(%p)\n", data);
1024
1025     if (data->pWintrustData->dwUIChoice != WTD_UI_NONE)
1026         FIXME("unimplemented for UI choice %d\n",
1027          data->pWintrustData->dwUIChoice);
1028     if (!data->csSigners)
1029         err = TRUST_E_NOSIGNATURE;
1030     else
1031     {
1032         PFN_WTD_GENERIC_CHAIN_POLICY_CALLBACK policyCallback;
1033         void *policyArg;
1034         WTD_GENERIC_CHAIN_POLICY_SIGNER_INFO *signers = NULL;
1035
1036         if (policyData)
1037         {
1038             policyCallback = policyData->pfnPolicyCallback;
1039             policyArg = policyData->pvPolicyArg;
1040         }
1041         else
1042         {
1043             policyCallback = WINTRUST_DefaultPolicy;
1044             policyArg = NULL;
1045         }
1046         if (data->csSigners)
1047         {
1048             DWORD i;
1049
1050             signers = data->psPfns->pfnAlloc(
1051              data->csSigners * sizeof(WTD_GENERIC_CHAIN_POLICY_SIGNER_INFO));
1052             if (signers)
1053             {
1054                 for (i = 0; i < data->csSigners; i++)
1055                 {
1056                     signers[i].u.cbSize =
1057                      sizeof(WTD_GENERIC_CHAIN_POLICY_SIGNER_INFO);
1058                     signers[i].pChainContext =
1059                      data->pasSigners[i].pChainContext;
1060                     signers[i].dwSignerType = data->pasSigners[i].dwSignerType;
1061                     signers[i].pMsgSignerInfo = data->pasSigners[i].psSigner;
1062                     signers[i].dwError = data->pasSigners[i].dwError;
1063                     if (data->pasSigners[i].csCounterSigners)
1064                         FIXME("unimplemented for counter signers\n");
1065                     signers[i].cCounterSigner = 0;
1066                     signers[i].rgpCounterSigner = NULL;
1067                 }
1068             }
1069             else
1070                 err = ERROR_OUTOFMEMORY;
1071         }
1072         if (err == NO_ERROR)
1073             err = policyCallback(data, TRUSTERROR_STEP_FINAL_POLICYPROV,
1074              data->dwRegPolicySettings, data->csSigners, signers, policyArg);
1075         data->psPfns->pfnFree(signers);
1076     }
1077     if (err != NO_ERROR)
1078         data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_POLICYPROV] = err;
1079     TRACE("returning %d (%08x)\n", err == NO_ERROR ? S_OK : S_FALSE,
1080      data->padwTrustStepErrors[TRUSTERROR_STEP_FINAL_POLICYPROV]);
1081     return err == NO_ERROR ? S_OK : S_FALSE;
1082 }
1083
1084 HRESULT WINAPI SoftpubCleanup(CRYPT_PROVIDER_DATA *data)
1085 {
1086     DWORD i, j;
1087
1088     for (i = 0; i < data->csSigners; i++)
1089     {
1090         for (j = 0; j < data->pasSigners[i].csCertChain; j++)
1091             CertFreeCertificateContext(data->pasSigners[i].pasCertChain[j].pCert);
1092         data->psPfns->pfnFree(data->pasSigners[i].pasCertChain);
1093         data->psPfns->pfnFree(data->pasSigners[i].psSigner);
1094         CertFreeCertificateChain(data->pasSigners[i].pChainContext);
1095     }
1096     data->psPfns->pfnFree(data->pasSigners);
1097
1098     for (i = 0; i < data->chStores; i++)
1099         CertCloseStore(data->pahStores[i], 0);
1100     data->psPfns->pfnFree(data->pahStores);
1101
1102     if (data->u.pPDSip)
1103     {
1104         data->psPfns->pfnFree(data->u.pPDSip->pSip);
1105         data->psPfns->pfnFree(data->u.pPDSip->pCATSip);
1106         data->psPfns->pfnFree(data->u.pPDSip->psSipSubjectInfo);
1107         data->psPfns->pfnFree(data->u.pPDSip->psSipCATSubjectInfo);
1108         data->psPfns->pfnFree(data->u.pPDSip->psIndirectData);
1109     }
1110
1111     CryptMsgClose(data->hMsg);
1112
1113     if (data->fOpenedFile &&
1114      data->pWintrustData->dwUnionChoice == WTD_CHOICE_FILE)
1115         CloseHandle(data->pWintrustData->u.pFile->hFile);
1116
1117     return S_OK;
1118 }
1119
1120 HRESULT WINAPI HTTPSCertificateTrust(CRYPT_PROVIDER_DATA *data)
1121 {
1122     FIXME("(%p)\n", data);
1123     return S_OK;
1124 }
1125
1126 HRESULT WINAPI HTTPSFinalProv(CRYPT_PROVIDER_DATA *data)
1127 {
1128     FIXME("(%p)\n", data);
1129     return S_OK;
1130 }