28  * Source file for Schannel-specific certificate verification. This code should
29  * only be invoked by code in schannel.c.
36 #  error "cannot compile SCHANNEL support without SSPI."
39 #include "schannel.h"
134               "schannel: CA file '%s' is not correctly formatted",  in add_certs_data_to_store()
162                 "schannel: failed to extract certificate from CA file "  in add_certs_data_to_store()
175                   "schannel: unexpected content type '%lu' when extracting "  in add_certs_data_to_store()
191                     "schannel: failed to add certificate from CA file '%s' "  in add_certs_data_to_store()
211             "schannel: did not add any certificates from CA file '%s'",  in add_certs_data_to_store()
216             "schannel: added %d certificate(s) from CA file '%s'",  in add_certs_data_to_store()
239           "schannel: invalid path name for CA file '%s': %s",  in add_certs_file_to_store()
261           "schannel: failed to open CA file '%s': %s",  in add_certs_file_to_store()
271           "schannel: failed to determine size of CA file '%s': %s",  in add_certs_file_to_store()
280           "schannel: CA file exceeds max size of %u bytes",  in add_certs_file_to_store()
301             "schannel: failed to read from CA file '%s': %s",  in add_certs_file_to_store()
403       infof(data, "schannel: Empty DNS name.");  in cert_get_name_string()
413       failf(data, "schannel: Not enough memory to list all hostnames.");  in cert_get_name_string()
479     failf(data, "schannel: Null certificate context.");  in get_alt_name_info()
485     failf(data, "schannel: Null certificate info.");  in get_alt_name_info()
493     failf(data, "schannel: CertFindExtension() returned no extension.");  in get_alt_name_info()
506           "schannel: CryptDecodeObjectEx() returned no alternate name "  in get_alt_name_info()
543     failf(data, "schannel: Failed to read remote certificate context: %s",  in Curl_verify_host()
566              "schannel: connection hostname (%s) matched cert's IP address!",  in Curl_verify_host()
580             "schannel: CertGetNameString() returned no "  in Curl_verify_host()
599       "schannel: CertGetNameString() returned certificate "  in Curl_verify_host()
627                 "schannel: connection hostname (%s) validated "  in Curl_verify_host()
636                 "schannel: connection hostname (%s) did not match "  in Curl_verify_host()
654             "schannel: CertGetNameString() failed to match "  in Curl_verify_host()
659       failf(data, "schannel: server certificate name verification failed");  in Curl_verify_host()
696     failf(data, "schannel: Failed to read remote certificate context: %s",  in Curl_verify_certificate()
711       failf(data, "schannel: this version of Windows is too old to support "  in Curl_verify_certificate()
720         infof(data, "schannel: reusing certificate store from cache");  in Curl_verify_certificate()
731           failf(data, "schannel: failed to create certificate store: %s",  in Curl_verify_certificate()
779               "schannel: failed to create certificate chain engine: %s",  in Curl_verify_certificate()
802       failf(data, "schannel: CertGetCertificateChain failed: %s",  in Curl_verify_certificate()
823           failf(data, "schannel: CertGetCertificateChain trust error"  in Curl_verify_certificate()
826           failf(data, "schannel: CertGetCertificateChain trust error"  in Curl_verify_certificate()
829           failf(data, "schannel: CertGetCertificateChain trust error"  in Curl_verify_certificate()
832           failf(data, "schannel: CertGetCertificateChain trust error"  in Curl_verify_certificate()
835           failf(data, "schannel: CertGetCertificateChain trust error"  in Curl_verify_certificate()
838           failf(data, "schannel: CertGetCertificateChain error mask: 0x%08lx",  in Curl_verify_certificate()