schannel: return a more specific error code for SEC_E_UNTRUSTED_ROOT

diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index d20f30d897d6bcae751de5012b83e0f2d2bb1580..94603018b65775611a8b54f27d8d2bcc5705d46f 100644 (file)
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -630,7 +630,8 @@ schannel_connect_step2(struct connectdata *conn, int sockindex)
       else
         failf(data, "schannel: next InitializeSecurityContext failed: %s",
               Curl_sspi_strerror(conn, sspi_status));
-      return CURLE_SSL_CONNECT_ERROR;
+      return sspi_status == SEC_E_UNTRUSTED_ROOT ?
+          CURLE_SSL_CACERT_BADFILE : CURLE_SSL_CONNECT_ERROR;
     }
 
     /* check if there was additional remaining encrypted data */