VeraCrypt
aboutsummaryrefslogtreecommitdiff
path: root/src/Common/Dlgcode.c
diff options
context:
space:
mode:
authorMounir IDRASSI <mounir.idrassi@idrix.fr>2021-11-21 15:18:08 +0100
committerMounir IDRASSI <mounir.idrassi@idrix.fr>2021-11-21 21:44:51 +0100
commit5f5b8a15fcd99b8e46d83c21335f2c6955f8aeb8 (patch)
tree27af66078a6956b6f90da2bb8efd1204945ec13a /src/Common/Dlgcode.c
parent5426160c94b175dbf475c634c4c1a98554d15342 (diff)
downloadVeraCrypt-5f5b8a15fcd99b8e46d83c21335f2c6955f8aeb8.tar.gz
VeraCrypt-5f5b8a15fcd99b8e46d83c21335f2c6955f8aeb8.zip
Windows: Restrict supported Windows versions to XP, 10 and 11 because of new requirement on driver code signing.
For now, we are not able to put in place HCK/WLK certification of VeraCrypt driver that is needed for Windows 7, 8 and 8.1.
Diffstat (limited to 'src/Common/Dlgcode.c')
-rw-r--r--src/Common/Dlgcode.c29
1 files changed, 7 insertions, 22 deletions
diff --git a/src/Common/Dlgcode.c b/src/Common/Dlgcode.c
index 9f68490f..6462e319 100644
--- a/src/Common/Dlgcode.c
+++ b/src/Common/Dlgcode.c
@@ -3259,8 +3259,8 @@ void InitApp (HINSTANCE hInstance, wchar_t *lpszCommandLine)
RemoteSession = GetSystemMetrics (SM_REMOTESESSION) != 0;
- // OS version check: from version 1.25, only Windows 8 and newer is supported
- if (!IsOSVersionAtLeast(WIN_8, 0))
+ // OS version check: from version 1.25, only Windows XP, Windows 10 and Windows 11 are supported because of new driver signing requirements
+ if (!(IsOSVersionAtLeast(WIN_10, 0) || (nCurrentOS == WIN_XP) || (nCurrentOS == WIN_XP64)))
{
MessageBoxW (NULL, GetString ("UNSUPPORTED_OS"), lpszTitle, MB_ICONSTOP);
exit (1);
@@ -3270,26 +3270,6 @@ void InitApp (HINSTANCE hInstance, wchar_t *lpszCommandLine)
// Service pack check & warnings about critical MS issues
switch (nCurrentOS)
{
- case WIN_2000:
- if (CurrentOSServicePack < 3)
- Warning ("LARGE_IDE_WARNING_2K", NULL);
- else
- {
- DWORD val = 0, size = sizeof(val);
- HKEY hkey;
-
- if (RegOpenKeyExW (HKEY_LOCAL_MACHINE, L"SYSTEM\\CurrentControlSet\\Services\\Atapi\\Parameters", 0, KEY_READ, &hkey) == ERROR_SUCCESS)
- {
- if (RegQueryValueExW (hkey, L"EnableBigLba", 0, 0, (LPBYTE) &val, &size) != ERROR_SUCCESS
- || val != 1)
- {
- Warning ("LARGE_IDE_WARNING_2K_REGISTRY", NULL);
- }
- RegCloseKey (hkey);
- }
- }
- break;
-
case WIN_XP:
if (CurrentOSServicePack < 1)
{
@@ -14114,6 +14094,11 @@ BOOL VerifyModuleSignature (const wchar_t* path)
WINTRUST_DATA WVTData = {0};
wchar_t filePath [TC_MAX_PATH + 1024];
+ // we check our own authenticode signature only starting from Windows 10 since this is
+ // the minimal supported OS apart from XP where we can't verify SHA256 signatures
+ if (!IsOSAtLeast (WIN_10))
+ return TRUE;
+
// Strip quotation marks (if any)
if (path [0] == L'"')
{