search

alexbrainman / sspi

Windows SSPI
BSD 3-Clause "New" or "Revised" License
84 stars 27 forks source link

x509 certificates from cert store #2

Closed tsaridas closed 6 years ago

tsaridas commented 6 years ago

Hello,

I have been looking for a way to be able to use x509 certificates from the cert store and found a windows documentation that it can be done with schannel.

Windows Documentaiton

Is there any chance this library can help with that ?

thnx

alexbrainman commented 6 years ago

Is there any chance this library can help with that ?

This library uses schannel SSPI interface to to communicate with HTTPS web server. So it is client-side only and does not care about x509 certificates. All security is validated by schannel code itself. I suspect you could use it to build HTTPS server as well, but I have not done it yet.

I put very little time into this code, so there are many bugs here. Please do not use it unless you expect things to break.

Alex

tsaridas commented 6 years ago

I am trying to get the certificates stored in the windows cert store for the client side.

Im am not trying to get the server to accept client certificates but the client to forward the certificates which are stored in the certificate store.

AT

On 30 Dec 2017, at 02:49, Alex Brainman notifications@github.com wrote:

Is there any chance this library can help with that ?

This library uses schannel SSPI interface to to communicate with HTTPS web server. So it is client-side only and does not care about x509 certificates. All security is validated by schannel code itself. I suspect you could use it to build HTTPS server as well, but I have not done it yet.

I put very little time into this code, so there are many bugs here. Please do not use it unless you expect things to break.

Alex

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

alexbrainman commented 6 years ago

I am trying to get the certificates stored in the windows cert store for the client side.

Im am not trying to get the server to accept client certificates but the client to forward the certificates which are stored in the certificate store.

This package will not help you with that. Sorry.

Alex

tsaridas commented 6 years ago

thnx