namecoin / certinject

Inject certificates into Windows CryptoAPI trust store, with EKU and name constraints.
https://www.namecoin.org/
GNU General Public License v3.0
5 stars 5 forks source link

Watch a cert store continuously for changes #21

Closed JeremyRand closed 2 years ago

JeremyRand commented 4 years ago

It would be useful to continuously watch a cert store for changes, and re-inject any requested certs in the event that an injection is reverted by another program. It looks like the RegNotifyChangeKeyValue Windows API function is intended for this purpose. The Golang standard library doesn't yet support it, but there's a patch undergoing review now, and it looks like some people are using that patch in production.

JeremyRand commented 2 years ago

The Golang standard library doesn't yet support it, but there's a patch undergoing review now, and it looks like some people are using that patch in production.

That patch is now marked as abandoned.