|
Posted by Daria Morgendorffer on April 27, 2006, 3:49 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Hi,
I am trying to write a tool that will export automatically all
certificates from an offline Certificate Authority to PKCS#7.
I have...
* setup a certificate authority
* create a template with certtmpl.msc that doesn't publish certificate
in Active Directory (unchecked checkbox in "General")
* autoenrolled a certificate succesfully. When I open Certificate
Authority, I can see it there when I run certsrv.msc , so I know it is
somewhere inside, but...
* although MSDN suggests that the certificates should be in enterprise
store, NTAuth, I can't see them when I browse certificate stores either
with regedit or certmgr.msc , where the certificates really are. In
fact, I couldn't find them with regedit in any part of the tree.
(Needless to say that) I failed when I was trying to evaluate the
certificate stores as documented in CryptoAPI documentation.
I have also tried filemon and regmon from sysinternals.com, but I still
couldn't identify the source.
I also didn't really find any hint or suitable sample in CAPICOM.
Please please please!!! What do I have to do in order to get the issued
certificates from the CA the programmatic way, not by clicking?
Thank you very much in advance!
|