Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/mono/mono.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRolf Bjarne Kvinge <rolf@xamarin.com>2017-10-05 12:46:45 +0300
committerMarek Safar <marek.safar@gmail.com>2017-10-06 00:43:34 +0300
commit74a87af7f580c59f524f79508e4ad32ccff0870a (patch)
tree8e184c48a280fa26eb77f8d81de8d8731b392a52 /mcs/class/System
parenta984f20e232d863a9d3b7848023f78816aa282e7 (diff)
[appletls] Trust SecTrustResult.Proceed as well. Fixes #58411.
Apple states clearly in their documentation about SecTrustResult.Proceed [1]: The user explicitly chose to trust a certificate in the chain (usually by clicking a button in a certificate trust panel). Your app should trust the chain. This fixes bug #[58411][2], where SecTrustEvaluate returns SecTrustResult.Proceed starting with iOS 11. [1]: https://developer.apple.com/documentation/security/1394363-sectrustevaluate [2]: https://bugzilla.xamarin.com/show_bug.cgi?id=58411
Diffstat (limited to 'mcs/class/System')
-rw-r--r--mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs2
1 files changed, 1 insertions, 1 deletions
diff --git a/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs b/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs
index 710433ef071..073f1608004 100644
--- a/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs
+++ b/mcs/class/System/Mono.AppleTls/AppleCertificateHelper.cs
@@ -149,7 +149,7 @@ namespace Mono.AppleTls
}
var result = trust.Evaluate ();
- if (result == SecTrustResult.Unspecified)
+ if (result == SecTrustResult.Unspecified || result == SecTrustResult.Proceed)
return true;
errors |= MonoSslPolicyErrors.RemoteCertificateChainErrors;