Hello All,
does anyone know why the eVC 3.0 HPC2000 SDK appears to be missing support for using the CryptoApi Cert* functions for managing certificate stores? They're defined in wincrypt.h, but the SDK has no corresponding crypt32.lib that actually implements them.
I eventually managed to accomplish what I was trying to do
(load custom root certificates onto a Jornada 720
) in a somewhat roundabout fashion after a lot of googling by:
- Finding the SQL Server CE 2.0 download at
http://www.microsoft.com/sql/ce/downloads/ce20.asp (Incidentally, the SQLCE link on the HPC:Factor developer downloads page is broken
)
- Copying the appropriate rootcert.exe binary to my device
- Converting the certificates I need from PEM to DER format using OpenSSL
- Running rootcert.exe xxxx-ca.cer on the device
- This appears to have done the right thing, since PIE now no longer complains on connecting to sites using my custom CAs, and the relevant certs have been installed in HKLM\Comm\SecurityProviders\SCHANNEL\CAs
However, I'd still like to know if the certificate store functions can actually be made to work, since if so then it should be possible to make a standalone tool for this, and also to update/replace expired root certificates in the system store. Downloading all 50MB of SQLCE just to grab an 8k EXE is a pain.
-mato