From f77f5a30cfd841bb94ae3c88627e1ae374807115 Mon Sep 17 00:00:00 2001 From: Stanislav Motylkov Date: Mon, 11 Jan 2021 19:16:16 +0300 Subject: [PATCH] [RAPPS] Fix pinned certificate issuer check --- base/applications/rapps/loaddlg.cpp | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/base/applications/rapps/loaddlg.cpp b/base/applications/rapps/loaddlg.cpp index fb060358e55..836bb150ab0 100644 --- a/base/applications/rapps/loaddlg.cpp +++ b/base/applications/rapps/loaddlg.cpp @@ -50,7 +50,8 @@ #include "misc.h" #ifdef USE_CERT_PINNING -#define CERT_ISSUER_INFO "US\r\nLet's Encrypt\r\nLet's Encrypt Authority X3" +#define CERT_ISSUER_INFO_OLD "US\r\nLet's Encrypt\r\nLet's Encrypt Authority X3" +#define CERT_ISSUER_INFO_NEW "US\r\nLet's Encrypt\r\nR3" #define CERT_SUBJECT_INFO "rapps.reactos.org" #endif @@ -832,7 +833,8 @@ unsigned int WINAPI CDownloadManager::ThreadFunc(LPVOID param) else { if (strcmp(subjectName, CERT_SUBJECT_INFO) || - strcmp(issuerName, CERT_ISSUER_INFO)) + (strcmp(issuerName, CERT_ISSUER_INFO_OLD) && + strcmp(issuerName, CERT_ISSUER_INFO_NEW))) { szMsgText.Format(IDS_MISMATCH_CERT_INFO, (char*)subjectName, (const char*)issuerName); bAskQuestion = true;