From 6f57ecfce8a12d68b267f2ea7f76b78940907ab1 Mon Sep 17 00:00:00 2001
From: zeze <zezectf@gmail.com>
Date: Sun, 28 Jul 2024 01:53:05 +0800
Subject: [PATCH] fix: verify xku_flags with XKU_CODE_SIGN or XKU_TIMESTAMP

---
 src/uthenticode.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/uthenticode.cpp b/src/uthenticode.cpp
index 4827ad5..0162066 100644
--- a/src/uthenticode.cpp
+++ b/src/uthenticode.cpp
@@ -242,7 +242,7 @@ bool SignedData::verify_signature() const {
     auto *cert = sk_X509_value(certs, i);
 
     auto xku_flags = X509_get_extended_key_usage(cert);
-    if (!(xku_flags & XKU_CODE_SIGN)) {
+    if (!(xku_flags & (XKU_CODE_SIGN | XKU_TIMESTAMP))) {
       return false;
     }
   }