X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/fa7225c82381bac4432a6edf16f53b5370238d85..dd5fb164cf5b32c462296bc65e289e100f74b59a:/OSX/libsecurity_ssl/lib/sslCrypto.c

diff --git a/OSX/libsecurity_ssl/lib/sslCrypto.c b/OSX/libsecurity_ssl/lib/sslCrypto.c
index 1142c7f9..166a105b 100644
--- a/OSX/libsecurity_ssl/lib/sslCrypto.c
+++ b/OSX/libsecurity_ssl/lib/sslCrypto.c
@@ -118,21 +118,14 @@ sslGetMatchingCertInArray(
 		return NULL;
 	}
 
-	CFDataRef certData = SecCertificateCopyData(certRef);
-	if (certData) {
-		CFIndex idx, count = CFArrayGetCount(certArray);
-		for(idx=0; idx<count; idx++) {
-			SecCertificateRef aCert = (SecCertificateRef)CFArrayGetValueAtIndex(certArray, idx);
-			CFDataRef aData = SecCertificateCopyData(aCert);
-			if (aData && CFEqual(aData, certData)) {
-				matchedCert = aCert;
-			}
-			CFReleaseSafe(aData);
-			if (matchedCert)
-				break;
-		}
-		CFReleaseSafe(certData);
-	}
+    CFIndex idx, count = CFArrayGetCount(certArray);
+    for (idx = 0; idx < count; idx++) {
+        SecCertificateRef otherCert = (SecCertificateRef) CFArrayGetValueAtIndex(certArray, idx);
+        if (CFEqual(certRef, otherCert)) {
+            matchedCert = otherCert;
+            break;
+        }
+    }
 
     return matchedCert;
 }
@@ -178,7 +171,8 @@ static OSStatus sslVerifyCertChain(
 	}
 
 	SecTrustResultType secTrustResult;
-	require_noerr(status = SecTrustEvaluate(trust, &secTrustResult), errOut);
+    require_noerr(status = SecTrustEvaluate(trust, &secTrustResult), errOut);
+
 	switch (secTrustResult) {
         case kSecTrustResultUnspecified:
             /* cert chain valid, no special UserTrust assignments */
@@ -187,7 +181,6 @@ static OSStatus sslVerifyCertChain(
             status = errSecSuccess;
             break;
         case kSecTrustResultDeny:
-        case kSecTrustResultConfirm:
         case kSecTrustResultRecoverableTrustFailure:
         default:
             if(ctx->allowAnyRoot) {