Lipovlan / cng-openssl-provider

OpenSSL provider using Windows Cryptography API: Next Generation
MIT License
6 stars 6 forks source link

Allow usage of other system stores #5

Open Lipovlan opened 1 year ago

Lipovlan commented 1 year ago

Right now initialize_windows_cert_store() uses CertOpenSystemStore() thus allowing only usage of CERT_SYSTEM_STORE_CURRENT_USER. When replaced with CertOpenStore() it could allow for usage of other stores such as CERT_SYSTEM_STORE_LOCAL_MACHINE.

This needs to reflect in the URI parsing done in cng_store_open(). Perhaps it will be a good idea to use parse_uri_from_store_open() and load more information into the store_ctx and use it later as arguments to initialize_windows_cert_store().