Inject certificates into Windows CryptoAPI trust store, with EKU and name constraints.
GNU General Public License v3.0
2
stars
5
forks
source link
Investigate whether crosssignnameconstraint works with CryptoAPI root certs #11
Open
JeremyRand opened 4 years ago
We should investigate whether
crosssignnameconstraint
works well with CryptoAPI. The workflow would look like this:AuthRoot
system store:Disallowed
enterprise store.Root
/CA
enterprise store, with all non-DER properties copied from $cert.AuthRoot
gets updated.Things to test: