You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
150 lines
5.0 KiB
150 lines
5.0 KiB
//+-------------------------------------------------------------------------
|
|
// Microsoft Windows
|
|
//
|
|
// Copyright (C) Microsoft Corporation, 1997 - 1997
|
|
//
|
|
// File: certprot.h
|
|
//
|
|
// Contents: Certificate Protection APIs
|
|
//
|
|
// APIs: I_CertProtectFunction
|
|
// I_CertSrvProtectFunction
|
|
//
|
|
// History: 27-Nov-97 philh created
|
|
//--------------------------------------------------------------------------
|
|
|
|
#ifndef __CERTPROT_H__
|
|
#define __CERTPROT_H__
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// Calls the services process to do a protected certificate function,
|
|
// such as, add or delete a protected root certificate.
|
|
//
|
|
// CryptMemFree must be called to free the returned *ppbOut.
|
|
//--------------------------------------------------------------------------
|
|
BOOL
|
|
WINAPI
|
|
I_CertProtectFunction(
|
|
IN DWORD dwFuncId,
|
|
IN DWORD dwFlags,
|
|
IN OPTIONAL LPCWSTR pwszIn,
|
|
IN OPTIONAL BYTE *pbIn,
|
|
IN DWORD cbIn,
|
|
OUT OPTIONAL BYTE **ppbOut,
|
|
OUT OPTIONAL DWORD *pcbOut
|
|
);
|
|
|
|
#define CERT_PROT_INIT_ROOTS_FUNC_ID 1
|
|
#define CERT_PROT_PURGE_LM_ROOTS_FUNC_ID 2
|
|
#define CERT_PROT_ADD_ROOT_FUNC_ID 3
|
|
#define CERT_PROT_DELETE_ROOT_FUNC_ID 4
|
|
#define CERT_PROT_DELETE_UNKNOWN_ROOTS_FUNC_ID 5
|
|
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// CERT_PROT_INIT_ROOTS_FUNC_ID
|
|
//
|
|
// Initialize the protected list of CurrentUser roots. Note, no UI.
|
|
//
|
|
// No IN/OUT parameters.
|
|
//--------------------------------------------------------------------------
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// CERT_PROT_PURGE_LM_ROOTS_FUNC_ID
|
|
//
|
|
// Purge all CurrentUser roots from the protected list that also exist
|
|
// in the LocalMachine SystemRegistry "Root" store. Also removes duplicated
|
|
// certificates from the CurrentUser SystemRegistry "Root" store.
|
|
//
|
|
// Note, no UI. Purging can be disabled by setting the
|
|
// CERT_PROT_ROOT_INHIBIT_PURGE_LM_FLAG in the registry's ProtectedRootFlags
|
|
// value.
|
|
//
|
|
// No IN/OUT parameters.
|
|
//
|
|
// Even if purging is disabled, the protected list of roots is still
|
|
// initialized.
|
|
//--------------------------------------------------------------------------
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// CERT_PROT_ADD_ROOT_FUNC_ID
|
|
//
|
|
// Add the specified certificate to the CurrentUser SystemRegistry "Root"
|
|
// store and the protected list of roots. The user is prompted before doing
|
|
// the add.
|
|
//
|
|
// pbIn and cbIn must be updated with the pointer to and length of the
|
|
// serialized certificate context to be added. No other IN/OUT parameters.
|
|
//--------------------------------------------------------------------------
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// CERT_PROT_DELETE_ROOT_FUNC_ID
|
|
//
|
|
// Delete the specified certificate from the CurrentUser SystemRegistry "Root"
|
|
// store and the protected list of roots. The user is prompted before doing
|
|
// the delete.
|
|
//
|
|
// pbIn and cbIn must be updated with the pointer to and length of the
|
|
// certificate's SHA1 hash property. No other IN/OUT parameters.
|
|
//--------------------------------------------------------------------------
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// CERT_PROT_DELETE_UNKNOWN_ROOTS_FUNC_ID
|
|
//
|
|
// Delete all CurrentUser roots from the protected list that don't also
|
|
// exist in the CurrentUser SystemRegistry "Root" store. The user is
|
|
// prompted before doing the delete.
|
|
//
|
|
// No IN/OUT parameters.
|
|
//--------------------------------------------------------------------------
|
|
|
|
typedef void __RPC_FAR * (__RPC_USER *PFN_CERT_PROT_MIDL_USER_ALLOC)(
|
|
IN size_t cb
|
|
);
|
|
typedef void (__RPC_USER *PFN_CERT_PROT_MIDL_USER_FREE)(
|
|
IN void __RPC_FAR *pv
|
|
);
|
|
|
|
//+-------------------------------------------------------------------------
|
|
// Called from the services process to process a protected certificate
|
|
// function.
|
|
//
|
|
// Returns the error status, ie, not returned in LastError.
|
|
//--------------------------------------------------------------------------
|
|
DWORD
|
|
WINAPI
|
|
I_CertSrvProtectFunction(
|
|
IN handle_t hRpc,
|
|
IN DWORD dwFuncId,
|
|
IN DWORD dwFlags,
|
|
IN LPCWSTR pwszIn,
|
|
IN BYTE *pbIn,
|
|
IN DWORD cbIn,
|
|
OUT BYTE **ppbOut,
|
|
OUT DWORD *pcbOut,
|
|
IN PFN_CERT_PROT_MIDL_USER_ALLOC pfnAlloc,
|
|
IN PFN_CERT_PROT_MIDL_USER_FREE pfnFree
|
|
);
|
|
|
|
typedef DWORD (WINAPI *PFN_CERT_SRV_PROTECT_FUNCTION)(
|
|
IN handle_t hRpc,
|
|
IN DWORD dwFuncId,
|
|
IN DWORD dwFlags,
|
|
IN LPCWSTR pwszIn,
|
|
IN BYTE *pbIn,
|
|
IN DWORD cbIn,
|
|
OUT BYTE **ppbOut,
|
|
OUT DWORD *pcbOut,
|
|
IN PFN_CERT_PROT_MIDL_USER_ALLOC pfnAlloc,
|
|
IN PFN_CERT_PROT_MIDL_USER_FREE pfnFree
|
|
);
|
|
|
|
#ifdef __cplusplus
|
|
} // Balance extern "C" above
|
|
#endif
|
|
|
|
#endif
|