MutonUfoAI / pgina

pGina fork: Open Source Windows Authentication
http://mutonufoai.github.io/pgina
BSD 3-Clause "New" or "Revised" License
156 stars 39 forks source link

Fixed validation of server certificates #149

Open Gargravarr2112 opened 4 years ago

Gargravarr2112 commented 4 years ago

On Windows 10 (for certain), instantiating an X509Store defaults to the MY (i.e. user) certificate store. For new users, this is empty. System-wide CA certificates are held in the Root store. This constructor sets this explicitly. Doing so allows the server SSL certificate to be validated against the system CA cache.