Re: Certadm.dll/CCertAdmin on Win2K?

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 09/29/03 

Date: Mon, 29 Sep 2003 05:14:30 -0700

That would be correct. We really don't provide APIs for managing CRLs in
the client stores. They are not meant to be managed, hence the limitation.
What are you trying to achieve? 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Ohaya" <ohaya@cox.net> wrote in message news:3F75A9F0.5643E05B@cox.net...
> David,
>
> I have the impression (including from reading the links you pointed out)
> that CAPICOM deals mostly with Certificates.  The reason I've been
> trying to work with the aforementioned sample was that I need to do some
> work with CRLs, so I don't know if CAPICOM would be relevant?
>
> Thanks...
>
>
>
> "David Cross [MS]" wrote:
> >
> > Have you looked at CAPICOM and its methods?
> >
> > There is a wealth of resources out there on CAPICOM available to you.
> >
> >
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/Security/capicom_reference.asp
> >
> >
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/Security/using_capicom.asp
> >
> > --
> >
> > David B. Cross [MS]
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> > http://support.microsoft.com
> >
> > "Ohaya" <ohaya@cox.net> wrote in message
news:3F743531.7810EE94@cox.net...
> > > Hi,
> > >
> > > I haven't gotten this working, but I think that I had a
mis-conception.
> > > It looks like the sample that I mentioned (CrlCheck) is meant to be
run
> > > on the actual machine where Certificate Server is running, rather than
> > > on a machine that is separate.
> > >
> > > So, it appears that I might not be able to use the CCertAdmin object
> > > (certadm.dll).
> > >
> > > Is this correct?
> > >
> > > If so, how else can I do the types of things that are in this program,
> > > e.g., list the CRLs in the CA store on my machine, delete/add CRLs in
> > > the CA store on my machine, etc., programmatically?
> > >
> > > I know that I've been able to do some of these use the CertMgr.exe
> > > program, but I'm trying how to implement my own custom app to do some
of
> > > these things.
> > >
> > > Jim
> > >
> > >
> > >
> > > Ohaya wrote:
> > > >
> > > > Hi,
> > > >
> > > > I've been trying to get one of the VB programs from the book
"Developing
> > > > Secure Applications with Visual Basic" by Davis Chapman working on
> > > > Win2K.  Specifically, the program CrlCheck from Chapter 7.
> > > >
> > > > It looks like the program uses a number of COM objects, including
> > > > Certadm.dll, and so that "CertAdm 1.0 Type Library" was missing in
the
> > > > VB Project References.
> > > >
> > > > I couldn't find Certadm.dll on my Win2K Prof machine, so I copied it
> > > > over from a Win2K3 Server installation I have, and regsrv32'ed it,
and
> > > > was able to get past that.
> > > >
> > > > Now however, when the program tries to create CCertAdmin, I am
getting a
> >
> > > > "429 - ActiveX component can't create object".
> > > >
> > > > Is this because I'm using the Certadm.dll from Win2K3 (rather than
from
> > > > Win2K)?
> > > >
> > > > If so, where can I get a copy of Certadm.dll for Win2K?
> > > >
> > > > If it's not a "wrong Certadm.dll" problem, can anyone tell me what
else
> > > > might be wrong?
> > > >
> > > > Thanks,
> > > > Jim