Re: Certadm.dll/CCertAdmin on Win2K?

From: Ohaya (ohaya_at_cox.net)
Date: 09/27/03 

Date: Sat, 27 Sep 2003 11:17:04 -0400

David,

I have the impression (including from reading the links you pointed out)
that CAPICOM deals mostly with Certificates. The reason I've been
trying to work with the aforementioned sample was that I need to do some
work with CRLs, so I don't know if CAPICOM would be relevant?

Thanks...

"David Cross [MS]" wrote:
>
> Have you looked at CAPICOM and its methods?
>
> There is a wealth of resources out there on CAPICOM available to you.
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/Security/capicom_reference.asp
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/Security/using_capicom.asp
>
> --
>
> David B. Cross [MS]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> http://support.microsoft.com
>
> "Ohaya" <ohaya@cox.net> wrote in message news:3F743531.7810EE94@cox.net...
> > Hi,
> >
> > I haven't gotten this working, but I think that I had a mis-conception.
> > It looks like the sample that I mentioned (CrlCheck) is meant to be run
> > on the actual machine where Certificate Server is running, rather than
> > on a machine that is separate.
> >
> > So, it appears that I might not be able to use the CCertAdmin object
> > (certadm.dll).
> >
> > Is this correct?
> >
> > If so, how else can I do the types of things that are in this program,
> > e.g., list the CRLs in the CA store on my machine, delete/add CRLs in
> > the CA store on my machine, etc., programmatically?
> >
> > I know that I've been able to do some of these use the CertMgr.exe
> > program, but I'm trying how to implement my own custom app to do some of
> > these things.
> >
> > Jim
> >
> >
> >
> > Ohaya wrote:
> > >
> > > Hi,
> > >
> > > I've been trying to get one of the VB programs from the book "Developing
> > > Secure Applications with Visual Basic" by Davis Chapman working on
> > > Win2K. Specifically, the program CrlCheck from Chapter 7.
> > >
> > > It looks like the program uses a number of COM objects, including
> > > Certadm.dll, and so that "CertAdm 1.0 Type Library" was missing in the
> > > VB Project References.
> > >
> > > I couldn't find Certadm.dll on my Win2K Prof machine, so I copied it
> > > over from a Win2K3 Server installation I have, and regsrv32'ed it, and
> > > was able to get past that.
> > >
> > > Now however, when the program tries to create CCertAdmin, I am getting a
>
> > > "429 - ActiveX component can't create object".
> > >
> > > Is this because I'm using the Certadm.dll from Win2K3 (rather than from
> > > Win2K)?
> > >
> > > If so, where can I get a copy of Certadm.dll for Win2K?
> > >
> > > If it's not a "wrong Certadm.dll" problem, can anyone tell me what else
> > > might be wrong?
> > >
> > > Thanks,
> > > Jim

Relevant Pages

  • Re: Getting X509 Certificates from PKCS#7
    ... native CryptoApi is very hard from VB6). ... Under CAPICOM, you can merely iterate through the Certificates collection ... Tested sending X509 Certificates to the Authentication server over ...
    (microsoft.public.vb.winapi)
  • Re: parsing pkcs#7 string
    ... In CAPICOM you can use: ... certificates by executing: ... CryptMsgOpenToDecode() ... to get all the certificates. ...
    (microsoft.public.dotnet.security)
  • Re: Only 1 certificate in smartcard store
    ... You may be unwittingly relying on some default behavior in capicom. ... > the certificates wiht outlook and office an windows lognon. ... > capicom we can only read the windwos logon certificate and the certificat ...
    (microsoft.public.platformsdk.security)
  • Re: RSA Encrypt/Decrypt Problems
    ... I have downloaded CAPICOM and am reading Michel's ... > CAPICOM really excels at facilitating searching for and using certificates in capi stores, ...
    (microsoft.public.dotnet.security)
  • Re: Generating X.509 certificates programatically (self-signed)
    ... CAPICOM can currently do neither. ... For CryptoAPI, there is a good sample in psdk showing how to programatically ... generate certificates with various standard extensions, ... another interesting mix/match possibility is to use the CEnroll ...
    (microsoft.public.dotnet.security)