Security-58286.260.20.tar.gz

[apple/security.git] / OSX / libsecurity_apple_x509_tp / lib / tpCertGroup.cpp

diff --git a/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp b/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp
index bce6c08a2621b40ec2297159be87ebd31697bf7e..0ad65a537522e64de4d4e33b972874ba7c9d15dd 100644 (file)
--- a/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp
+++ b/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp
@@ -24,7 +24,6 @@
 #include "certGroupUtils.h"
 #include "TPCertInfo.h"
 #include "TPCrlInfo.h"
 #include "certGroupUtils.h"
 #include "TPCertInfo.h"
 #include "TPCrlInfo.h"

-#include "tpCertAllowList.h"

 #include "tpPolicies.h"
 #include "tpdebugging.h"
 #include "tpCrlVerify.h"
 #include "tpPolicies.h"
 #include "tpdebugging.h"
 #include "tpCrlVerify.h"


@@ -736,13 +735,7 @@ void AppleTPSession::CertGroupVerify(CSSM_CL_HANDLE clHand,
                            outCertGroup.isAllowedError(constructReturn)) {
                                constructReturn = CSSM_OK;
                        }
                            outCertGroup.isAllowedError(constructReturn)) {
                                constructReturn = CSSM_OK;
                        }

-            
-                       /*
-                        * Allow non-trusted root if whitelist check permits
-                        */
-                       if (constructReturn == CSSMERR_TP_NOT_TRUSTED) {
-                               constructReturn = tpCheckCertificateAllowList(outCertGroup);
-                       }
+

                        break;
        }
 
                        break;
        }