curl / curl / 5777

37%

Pull #1325

travis-ci

schannel: add support for CURLOPT_CAINFO.

Modifications:
- make verify_certificate functionality in curl_schannel.c
  available on all versions of Windows instead of just
  Windows CE. verify_certificate will only be invoked on
  Windows CE or when the user specifies CURLOPT_CAINFO and
  CURLOPT_SSL_VERIFYPEER
- In verify_certificate, create a custom certificate chain
  engine that exclusively trusts the certificate store backed
  by the CURLOPT_CAINFO file
- HAVE_EXCLUSIVE_TRUST_MODE macro defined in config-win32.h for
  Windows 7+ to control enabling this feature that relies on
  Windows 7+ functionality
- doc updates of --cacert/CAINFO support for schannel
- Use CERT_NAME_SEARCH_ALL_NAMES_FLAG when invoking CertGetNameString
  when available. This implements a TODO in schannel.c to improve
  handling of multiple SANs in a certificate. In particular, all SANs
  will now be searched instead of just the first name.
- Add new test cases 314 and 315. These test cases check that
  the first and last SAN, respectively, matches the connection
  hostname. New test certificates have been added for these
  cases. For 314, the certificate prefix is Server-localhost-firstSAN
  and for 315, the certificate prefix is Server-localhost-secondSAN
- Remove TODO 15.2 (Add support for custom server certificate
  validation), this commit addresses it.

13 of 13 new or added lines in 1 file covered. (100.0%)

20015 of 26328 relevant lines covered (76.02%)

116395.56 hits per line