X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/e0e0d90ebff497686991a933ae2f7db24e7d8e0f..07691282a056c4efea71e1e505527601e8cc166b:/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp

diff --git a/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp b/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp
index bce6c08a..0ad65a53 100644
--- a/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp
+++ b/OSX/libsecurity_apple_x509_tp/lib/tpCertGroup.cpp
@@ -24,7 +24,6 @@
 #include "certGroupUtils.h"
 #include "TPCertInfo.h"
 #include "TPCrlInfo.h"
-#include "tpCertAllowList.h"
 #include "tpPolicies.h"
 #include "tpdebugging.h"
 #include "tpCrlVerify.h"
@@ -736,13 +735,7 @@ void AppleTPSession::CertGroupVerify(CSSM_CL_HANDLE clHand,
 			    outCertGroup.isAllowedError(constructReturn)) {
 				constructReturn = CSSM_OK;
 			}
-            
-			/*
-			 * Allow non-trusted root if whitelist check permits
-			 */
-			if (constructReturn == CSSMERR_TP_NOT_TRUSTED) {
-				constructReturn = tpCheckCertificateAllowList(outCertGroup);
-			}
+
 			break;
 	}