Changeset 42977 in vbox for trunk/src

Timestamp:

Aug 24, 2012 2:00:25 PM (12 years ago)

Author:

vboxsync

Message:

VBoxCertUtil: Fixed running on Windows XP guests.

File:

• trunk/src/VBox/Additions/WINNT/tools/VBoxCertUtil.cpp (modified) (1 diff)

trunk/src/VBox/Additions/WINNT/tools/VBoxCertUtil.cpp

@@ -248 +248 @@
             RTMsgInfo("Opening store %#x:'%s'", dwDst, pszStoreNm);
 
+        /*
+         * Make sure CERT_STORE_OPEN_EXISTING_FLAG is not set. This causes Windows XP
+         * to return ACCESS_DENIED when installing TrustedPublisher certificates via
+         * CertAddCertificateContextToStore() if the TrustedPublisher store never has
+         * been used (through certmgr.exe and friends) yet.
+         *
+         * According to MSDN, if neither CERT_STORE_OPEN_EXISTING_FLAG nor
+         * CERT_STORE_CREATE_NEW_FLAG is set, the store will be either opened or
+         * created accordingly.
+         */
+        dwDst &= ~CERT_STORE_OPEN_EXISTING_FLAG;
+
         hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM_W,
                                PKCS_7_ASN_ENCODING | X509_ASN_ENCODING,
                                NULL /* hCryptProv = default */,
-                               dwDst | CERT_STORE_OPEN_EXISTING_FLAG,
+                               dwDst,
                                pwszStoreNm);
         if (hStore == NULL)