Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/mono/mono.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRolf Bjarne Kvinge <rolf@xamarin.com>2017-10-05 12:46:45 +0300
committerMarek Safar <marek.safar@gmail.com>2017-10-06 01:05:00 +0300
commit99b248fc6b47383bfc01c7c842ddff689d9d325b (patch)
tree8053438c8c0dfb03f548aa53660a4978dba4c058
parentbf21d1a2777b9505f3f0c26f51d3b600f296af38 (diff)
[appletls] Trust SecTrustResult.Proceed as well. Fixes #58411.d15-4-2017-04
Apple states clearly in their documentation about SecTrustResult.Proceed [1]: The user explicitly chose to trust a certificate in the chain (usually by clicking a button in a certificate trust panel). Your app should trust the chain. This fixes bug #[58411][2], where SecTrustEvaluate returns SecTrustResult.Proceed starting with iOS 11. [1]: https://developer.apple.com/documentation/security/1394363-sectrustevaluate [2]: https://bugzilla.xamarin.com/show_bug.cgi?id=58411
-rw-r--r--mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs2
1 files changed, 1 insertions, 1 deletions
diff --git a/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs b/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs
index 85e3ed2bb11..2f341aa673e 100644
--- a/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs
+++ b/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs
@@ -143,7 +143,7 @@ namespace Mono.AppleTls
}
var result = trust.Evaluate ();
- if (result == SecTrustResult.Unspecified)
+ if (result == SecTrustResult.Unspecified || result == SecTrustResult.Proceed)
return true;
errors |= MonoSslPolicyErrors.RemoteCertificateChainErrors;