[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: Building the certificate chain
From:       Roman Kovac <kovac () AMADEE ! COM>
Date:       2002-01-15 8:05:33
[Download RAW message or body]


Thank you Daniel. AIA is the right thing I searched for. URLs in my AIA were
invalid, that's why the chain building failed.

Thanx again.

Roman

> -----Original Message-----
> From: Daniel Sie [mailto:dsie@WINDOWS.MICROSOFT.COM]
> Sent: 14 January 2002 23:30
> To: CryptoAPI@DISCUSS.MICROSOFT.COM
> Subject: Re: Building the certificate chain
>
>
> 1) Usually, the complete chain should be made available to the
> CertGetCertificateChain() API. If these certs are not already in the
> system sotres, then the hAdditionalStore parameter can be used to
> provide these certificates. However, this is not the only way.
> Intermediate CA certs can also be fetched thru AIA extension, and the
> trusted root certs can be automatically downloaded by the API if
> enabled.
>
> 2) in a way. Parent cert is usually identified thru the issuer's name.
> However, parent cert can also be found using its public key to verify
> the signature, or the AIA extension mentioned above.
>
> Hope this helps.
>
> -----Original Message-----
> From: Roman Kovac [mailto:kovac@AMADEE.COM]
> Sent: Friday, January 11, 2002 1:13 AM
> To: CryptoAPI@DISCUSS.MICROSOFT.COM
> Subject: Building the certificate chain
>
>
> Hi everybody,
>
> 1. Is there any way how to build the complete certificate
> chain when not
> all certificates (of this chain) are registered in stores of given
> computer ?
>
> 2. Does the certificate itself contain the information about all the
> parent certificates directly ? Or does build take a issuer
> and seach for
> it in
> store(s) ? Or how does the build works ?
>
> Thanx for help.
>
>
> Regards,
>
> Roman Kovac
>
> ----------------------------------------------------------------
> Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
> contains important info. Save time, search the archives at
> http://discuss.microsoft.com/archives/index.html . To unsubscribe,
> mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM
>
> ----------------------------------------------------------------
> Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
> contains important info. Save time, search the archives at
> http://discuss.microsoft.com/archives/index.html .
> To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM
>

----------------------------------------------------------------
Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
contains important info. Save time, search the archives at
http://discuss.microsoft.com/archives/index.html .
To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM

[prev in list] [next in list] [prev in thread] [next in thread]