Pass the entire peer chain on Windows

djarek / certify

Boost.ASIO-based TLS certificate verification library

https://djarek.github.io/certify/

Boost Software License 1.0

76 stars 42 forks source link

Pass the entire peer chain on Windows #44

Closed djarek closed 5 years ago

djarek commented 5 years ago

The Windows impl currently just passes the leaf certificate, which may result in validation failing with more complex chains which are not entirely known by the Windows certificate store.

Use: -CertAddEncodedCertificateToStore -CertOpenStore