[prev in list] [next in list] [prev in thread] [next in thread]
List: ms-cryptoapi
Subject: sample crypto api message
From: Rodney Thayer <rodney () SABLETECH ! COM>
Date: 1997-08-29 18:45:41
[Download RAW message or body]
>X-Mailer: Microsoft Exchange Server Internet Mail Connector Version
4.0.837.3
>Date: Fri, 29 Aug 1997 09:56:17 +0530
>Reply-To: Microsoft Cryptographic API <CryptoAPI@LISTSERV.MSN.COM>
>Sender: Microsoft Cryptographic API <CryptoAPI@LISTSERV.MSN.COM>
>From: deepesh j <deepeshj@PUNE.TCS.CO.IN>
>Subject: Re: Creating Certificates
>To: CryptoAPI@LISTSERV.MSN.COM
>
>hello
>
> In all u'r bulleted points u have mentioned that it's done in
cryptoAPI
>help, can u tell me where and from whom can i find help on cryptoAPI. (
>Which version)
>
>>Bye
>>Deepesh Jiwani
>>deepeshj@pune.tcs.co.in
>
>>-----Original Message-----
>>From: Christian Hecimovic [SMTP:ChristianH@SIMBA.CA]
>>Sent: Friday, August 29, 1997 2:51 AM
>>To: CryptoAPI@LISTSERV.MSN.COM
>>Subject: FW: Creating Certificates
>>
>>Eileen,
>>
>>Here's how I did it:
>>
>>1. Create and encode the Issuer and Subject fields in the CERT_INFO
>>structure. This is done as follows: After creating the PCERT_RDN and
>>PCERT_RDN_ATTR structures, create a CERT_NAME_INFO structure (called
>>pNameInfo below) and point it at the PCERT_RDN. Then encode with
>>CryptEncodeObject(X509_ASN_ENCODING, (LPCSTR)X509_NAME, pNameInfo,
>>NULL,
>>pi32EncodedName); The CryptoAPI Help has good examples of this.
>>
>>2. Fill in the rest of the CERT_INFO structure - version, serial
>>number,
>>etc. Point Issuer.pbData and Subject.pbData at the blobs you created
>>in
>>step 1. If you're including a public key, export it and include it by
>>setting the SubjectPublicKey member. Use CryptExportPublicKeyInfo()
>>for
>>this. Don't forget to set everything you're not using to either 0 or
>>NULL in the CERT_INFO structure.
>>
>>3. Create a CRYPT_ALGORITHM_IDENTIFIER (called SigAlg below) and set it
>>appropriately. This is in the CryptoAPI Help.
>>
>>4. Call CryptSignAndEncodeCertificate(hProv, AT_SIGNATURE,
>>X509_ASN_ENCODING, X509_CERT_TO_BE_SIGNED, pCert, &SigAlg, NULL,
>>pbEncodedCert, i32EncodedCert);
>>
>>Obviously, some of your parameters in the last call might be different,
>>but you get the idea. I hope this helps somewhat.
>>
>>Christian Hecimovic
>>Simba Technologies
>>
>>
>>> ----------
>>> From: Eileen Baust[SMTP:ebaust@TIS.COM]
>>> Reply To: Microsoft Cryptographic API
>>> Sent: Thursday, August 28, 1997 1:53 PM
>>> To: CryptoAPI@LISTSERV.MSN.COM
>>> Subject: Re: Creating Certificates
>>>
>>> In EncodeObject, the second parameter is an LPCSTR type. For your
>>> suggestion
>>> in number
>>> 2 should the second parameter be X509_CERT_TO_BE_SIGNED ?
>>> Are there any examples ?
>>>
>>> At 11:39 AM 8/13/97 -0700, you wrote:
>>> >Certificate Server is an easy way that does not require any
>>> programming.
>>> >
>>> >Otherwise:
>>> >
>>> > 1. Allocate and fill-in CERT_INFO structure.
>>> >
>>> > 2. Encode that structure into DER blob using CryptEncodeObject.
>>> What
>>> >you get is the inner "to-be-signed" part of the certificate.
>>> >
>>> > 3. Allocate and fill-in CERT_SIGNED_CONTENT_INFO structure. Sign
>>> >ToBeSigned member using either basic crypto routines or
>>> >CryptSignCertificate.
>>> >
>>> > 4. Encode CERT_SIGN_CONTENT_INFO using CryptEncodeObject. The
>>> >resulting blob is your new certificate!
>>> >
>>> >> -----Original Message-----
>>> >> From: Niels Kirk Thomsen [SMTP:nkt@DK-ONLINE.DK]
>>> >> Sent: Tuesday, August 12, 1997 10:13 AM
>>> >> To: CryptoAPI@LISTSERV.MSN.COM
>>> >> Subject: Creating Certificates
>>> >>
>>> >> This is my first question to the CryptoAPI list server.
>>> >>
>>> >> I aim to develop a system for internet stock trade for a trusted
>>> group
>>> >> of clients. For that I would like to issue a Certificate to each
>>> >> client. However, after reading the Crypto API 2.0 I can't figure
>>> out
>>> >> if it is possible to create a certificate and how to do it. So I
>>> guess
>>> >> I will have to wait for the MS certificate server to issue
>>> >> certificates.
>>> >>
>>> >> I have in mind to start out what I figure must be the second best
>>> >> solution. To exchange public keys in a safe way.
>>> >>
>>> >> I will appreciate any suggestions and help on this issue
>>> >>
>>> >> Niels Kirk Thomsen
>>> >> Holmbladsgade 106, 1 th
>>> >> DK-2300 Copenhagen
>>> >> DENMARK
>>> >> Email nkt@dk-online.dk
>>> >> Email admin@trading.dk
>>> >> Fax +45 31576908
>>> >> Telephone +45 31576908
>>> >>
>>> >> ----------------------------------------------------------------
>>> >> Users Guide
>>> http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
>>> >> contains important info including how to unsubscribe. Save time,
>>> >> search
>>> >> the archives at http://microsoft.ease.lsoft.com/archives/index.html
>>> >
>>> >----------------------------------------------------------------
>>> >Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
>>> >contains important info including how to unsubscribe. Save time,
>>> search
>>> >the archives at http://microsoft.ease.lsoft.com/archives/index.html
>>> >
>>> >
>>> Eileen Baust
>>>
>>> ----------------------------------------------------------------
>>> Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
>>> contains important info including how to unsubscribe. Save time,
>>> search
>>> the archives at http://microsoft.ease.lsoft.com/archives/index.html
>>>
>>
>>----------------------------------------------------------------
>>Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
>>contains important info including how to unsubscribe. Save time,
>>search
>>the archives at http://microsoft.ease.lsoft.com/archives/index.html
>
>----------------------------------------------------------------
>Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
>contains important info including how to unsubscribe. Save time, search
>the archives at http://microsoft.ease.lsoft.com/archives/index.html
>
>
----------------------------------------------------------------
Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
contains important info including how to unsubscribe. Save time, search
the archives at http://microsoft.ease.lsoft.com/archives/index.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic