RE: How to determin a cert in personal store does have private key

From: cyberninja (cyberninja_at_discussions.microsoft.com)
Date: 09/27/04

  • Next message: Kristine: "Re: ASN1 bad tag value met on EnvelopedData.Decrypt str" 
    Date: Mon, 27 Sep 2004 14:29:03 -0700

    I think after fetching CERT_KEY_PROV_INFO_PROP_ID from a cert in "My" store,
    if we can get the current key container via
    CertGetCertificateContextProperty(), we can determine whether the cert has a
    private key.
    Is that right?

    Thanks

    "cyberninja" wrote:

    > From MSDN "
    > CERT_KEY_PROV_HANDLE_PROP_ID, CERT_KEY_PROV_INFO_PROP_ID, and
    > CERT_KEY_CONTEXT_PROP_ID
    > These properties tie a certificate to a particular CSP and, within that CSP,
    > to a particular private key."
    >
    > However, I don't know if I can use the existance of 0-3 of the above prop
    > ids to determine if a private key is available. In my basic test, it seems
    > that CERT_KEY_PROV_INFO_PROP_ID is requried for a cert with provate key. Is
    > that right?
    >
    > "cyberninja" wrote:
    >
    > > How to determin a cert in personal store does have private key? I know I an
    > > use CryptAcquireCertificatePrivateKey(), but is there an alternative way to
    > > do this? (just check if the private key exists)
    > >
    > > Thanks

  • Next message: Kristine: "Re: ASN1 bad tag value met on EnvelopedData.Decrypt str"

    Relevant Pages

    • Re: A question about CryptAcquireCertificatePrivateKey
      ... Windows stores the CSP and private key associated with the certificate in the ... This is, of course, true only when WINDOWS stores the cert. ...
      (microsoft.public.platformsdk.security)
    • Re: Alternative store vs. MY store
      ... store both the client cert and its associate private key on my USB memory ... your codes (CSP, ... indirect call to your CSP when one of your cert is involved in an operation. ...
      (microsoft.public.platformsdk.security)
    • Re: Private & Public Key storage location
      ... with that you complete the 'certificate' to have both public and private key ... To view the complete cert, you access the cert mmc, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
      (microsoft.public.inetserver.iis.security)
    • Re: Private & Public Key storage location
      ... with that you complete the 'certificate' to have both public and private key ... To view the complete cert, you access the cert mmc, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
      (microsoft.public.inetserver.iis.security)
    • Re: Private & Public Key storage location
      ... When you got the server cert file, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
      (microsoft.public.inetserver.iis.security)