ホーム › Security.Cryptography.Certificates › PstValidate

PstValidate

関数

指定証明書がポリシーに照らして有効か検証する。

DLLcertpoleng.dll呼出規約winapi対応OSWindows 7 以降

シグネチャ

// certpoleng.dll
#include <windows.h>

NTSTATUS PstValidate(
    UNICODE_STRING* pTargetName,   // optional
    BOOL bIsClient,
    CERT_USAGE_MATCH* pRequestedIssuancePolicy,   // optional
    HCERTSTORE* phAdditionalCertStore,   // optional
    const CERT_CONTEXT* pCert,
    GUID* pProvGUID   // optional
);

パラメーター

名前	型	方向
pTargetName	UNICODE_STRING*	inoptional
bIsClient	BOOL	in
pRequestedIssuancePolicy	CERT_USAGE_MATCH*	inoptional
phAdditionalCertStore	HCERTSTORE*	inoptional
pCert	CERT_CONTEXT*	in
pProvGUID	GUID*	outoptional

戻り値の型: NTSTATUS

各言語での呼び出し定義

// certpoleng.dll
#include <windows.h>

NTSTATUS PstValidate(
    UNICODE_STRING* pTargetName,   // optional
    BOOL bIsClient,
    CERT_USAGE_MATCH* pRequestedIssuancePolicy,   // optional
    HCERTSTORE* phAdditionalCertStore,   // optional
    const CERT_CONTEXT* pCert,
    GUID* pProvGUID   // optional
);

[DllImport("certpoleng.dll", ExactSpelling = true)]
static extern int PstValidate(
    IntPtr pTargetName,   // UNICODE_STRING* optional
    bool bIsClient,   // BOOL
    IntPtr pRequestedIssuancePolicy,   // CERT_USAGE_MATCH* optional
    IntPtr phAdditionalCertStore,   // HCERTSTORE* optional
    IntPtr pCert,   // CERT_CONTEXT*
    IntPtr pProvGUID   // GUID* optional, out
);

<DllImport("certpoleng.dll", ExactSpelling:=True)>
Public Shared Function PstValidate(
    pTargetName As IntPtr,   ' UNICODE_STRING* optional
    bIsClient As Boolean,   ' BOOL
    pRequestedIssuancePolicy As IntPtr,   ' CERT_USAGE_MATCH* optional
    phAdditionalCertStore As IntPtr,   ' HCERTSTORE* optional
    pCert As IntPtr,   ' CERT_CONTEXT*
    pProvGUID As IntPtr   ' GUID* optional, out
) As Integer
End Function

' pTargetName : UNICODE_STRING* optional
' bIsClient : BOOL
' pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional
' phAdditionalCertStore : HCERTSTORE* optional
' pCert : CERT_CONTEXT*
' pProvGUID : GUID* optional, out
Declare PtrSafe Function PstValidate Lib "certpoleng" ( _
    ByVal pTargetName As LongPtr, _
    ByVal bIsClient As Long, _
    ByVal pRequestedIssuancePolicy As LongPtr, _
    ByVal phAdditionalCertStore As LongPtr, _
    ByVal pCert As LongPtr, _
    ByVal pProvGUID As LongPtr) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

PstValidate = ctypes.windll.certpoleng.PstValidate
PstValidate.restype = ctypes.c_int
PstValidate.argtypes = [
    ctypes.c_void_p,  # pTargetName : UNICODE_STRING* optional
    wintypes.BOOL,  # bIsClient : BOOL
    ctypes.c_void_p,  # pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional
    ctypes.c_void_p,  # phAdditionalCertStore : HCERTSTORE* optional
    ctypes.c_void_p,  # pCert : CERT_CONTEXT*
    ctypes.c_void_p,  # pProvGUID : GUID* optional, out
]

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('certpoleng.dll')
PstValidate = Fiddle::Function.new(
  lib['PstValidate'],
  [
    Fiddle::TYPE_VOIDP,  # pTargetName : UNICODE_STRING* optional
    Fiddle::TYPE_INT,  # bIsClient : BOOL
    Fiddle::TYPE_VOIDP,  # pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional
    Fiddle::TYPE_VOIDP,  # phAdditionalCertStore : HCERTSTORE* optional
    Fiddle::TYPE_VOIDP,  # pCert : CERT_CONTEXT*
    Fiddle::TYPE_VOIDP,  # pProvGUID : GUID* optional, out
  ],
  Fiddle::TYPE_INT)

#[link(name = "certpoleng")]
extern "system" {
    fn PstValidate(
        pTargetName: *mut UNICODE_STRING,  // UNICODE_STRING* optional
        bIsClient: i32,  // BOOL
        pRequestedIssuancePolicy: *mut CERT_USAGE_MATCH,  // CERT_USAGE_MATCH* optional
        phAdditionalCertStore: *mut *mut core::ffi::c_void,  // HCERTSTORE* optional
        pCert: *const CERT_CONTEXT,  // CERT_CONTEXT*
        pProvGUID: *mut GUID  // GUID* optional, out
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[DllImport("certpoleng.dll")]
public static extern int PstValidate(IntPtr pTargetName, bool bIsClient, IntPtr pRequestedIssuancePolicy, IntPtr phAdditionalCertStore, IntPtr pCert, IntPtr pProvGUID);
"@
$api = Add-Type -MemberDefinition $sig -Name 'certpoleng_PstValidate' -Namespace Win32 -PassThru
# $api::PstValidate(pTargetName, bIsClient, pRequestedIssuancePolicy, phAdditionalCertStore, pCert, pProvGUID)

#uselib "certpoleng.dll"
#func global PstValidate "PstValidate" sptr, sptr, sptr, sptr, sptr, sptr
; PstValidate varptr(pTargetName), bIsClient, varptr(pRequestedIssuancePolicy), phAdditionalCertStore, varptr(pCert), varptr(pProvGUID)   ; 戻り値は stat
; pTargetName : UNICODE_STRING* optional -> "sptr"
; bIsClient : BOOL -> "sptr"
; pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional -> "sptr"
; phAdditionalCertStore : HCERTSTORE* optional -> "sptr"
; pCert : CERT_CONTEXT* -> "sptr"
; pProvGUID : GUID* optional, out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "certpoleng.dll"
#cfunc global PstValidate "PstValidate" var, int, var, sptr, var, var
; res = PstValidate(pTargetName, bIsClient, pRequestedIssuancePolicy, phAdditionalCertStore, pCert, pProvGUID)
; pTargetName : UNICODE_STRING* optional -> "var"
; bIsClient : BOOL -> "int"
; pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional -> "var"
; phAdditionalCertStore : HCERTSTORE* optional -> "sptr"
; pCert : CERT_CONTEXT* -> "var"
; pProvGUID : GUID* optional, out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "certpoleng.dll"
#cfunc global PstValidate "PstValidate" sptr, int, sptr, sptr, sptr, sptr
; res = PstValidate(varptr(pTargetName), bIsClient, varptr(pRequestedIssuancePolicy), phAdditionalCertStore, varptr(pCert), varptr(pProvGUID))
; pTargetName : UNICODE_STRING* optional -> "sptr"
; bIsClient : BOOL -> "int"
; pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional -> "sptr"
; phAdditionalCertStore : HCERTSTORE* optional -> "sptr"
; pCert : CERT_CONTEXT* -> "sptr"
; pProvGUID : GUID* optional, out -> "sptr"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; NTSTATUS PstValidate(UNICODE_STRING* pTargetName, BOOL bIsClient, CERT_USAGE_MATCH* pRequestedIssuancePolicy, HCERTSTORE* phAdditionalCertStore, CERT_CONTEXT* pCert, GUID* pProvGUID)
#uselib "certpoleng.dll"
#cfunc global PstValidate "PstValidate" var, int, var, intptr, var, var
; res = PstValidate(pTargetName, bIsClient, pRequestedIssuancePolicy, phAdditionalCertStore, pCert, pProvGUID)
; pTargetName : UNICODE_STRING* optional -> "var"
; bIsClient : BOOL -> "int"
; pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional -> "var"
; phAdditionalCertStore : HCERTSTORE* optional -> "intptr"
; pCert : CERT_CONTEXT* -> "var"
; pProvGUID : GUID* optional, out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; NTSTATUS PstValidate(UNICODE_STRING* pTargetName, BOOL bIsClient, CERT_USAGE_MATCH* pRequestedIssuancePolicy, HCERTSTORE* phAdditionalCertStore, CERT_CONTEXT* pCert, GUID* pProvGUID)
#uselib "certpoleng.dll"
#cfunc global PstValidate "PstValidate" intptr, int, intptr, intptr, intptr, intptr
; res = PstValidate(varptr(pTargetName), bIsClient, varptr(pRequestedIssuancePolicy), phAdditionalCertStore, varptr(pCert), varptr(pProvGUID))
; pTargetName : UNICODE_STRING* optional -> "intptr"
; bIsClient : BOOL -> "int"
; pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional -> "intptr"
; phAdditionalCertStore : HCERTSTORE* optional -> "intptr"
; pCert : CERT_CONTEXT* -> "intptr"
; pProvGUID : GUID* optional, out -> "intptr"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	certpoleng = windows.NewLazySystemDLL("certpoleng.dll")
	procPstValidate = certpoleng.NewProc("PstValidate")
)

// pTargetName (UNICODE_STRING* optional), bIsClient (BOOL), pRequestedIssuancePolicy (CERT_USAGE_MATCH* optional), phAdditionalCertStore (HCERTSTORE* optional), pCert (CERT_CONTEXT*), pProvGUID (GUID* optional, out)
r1, _, err := procPstValidate.Call(
	uintptr(pTargetName),
	uintptr(bIsClient),
	uintptr(pRequestedIssuancePolicy),
	uintptr(phAdditionalCertStore),
	uintptr(pCert),
	uintptr(pProvGUID),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // NTSTATUS

function PstValidate(
  pTargetName: Pointer;   // UNICODE_STRING* optional
  bIsClient: BOOL;   // BOOL
  pRequestedIssuancePolicy: Pointer;   // CERT_USAGE_MATCH* optional
  phAdditionalCertStore: Pointer;   // HCERTSTORE* optional
  pCert: Pointer;   // CERT_CONTEXT*
  pProvGUID: PGUID   // GUID* optional, out
): Integer; stdcall;
  external 'certpoleng.dll' name 'PstValidate';

result := DllCall("certpoleng\PstValidate"
    , "Ptr", pTargetName   ; UNICODE_STRING* optional
    , "Int", bIsClient   ; BOOL
    , "Ptr", pRequestedIssuancePolicy   ; CERT_USAGE_MATCH* optional
    , "Ptr", phAdditionalCertStore   ; HCERTSTORE* optional
    , "Ptr", pCert   ; CERT_CONTEXT*
    , "Ptr", pProvGUID   ; GUID* optional, out
    , "Int")   ; return: NTSTATUS

●PstValidate(pTargetName, bIsClient, pRequestedIssuancePolicy, phAdditionalCertStore, pCert, pProvGUID) = DLL("certpoleng.dll", "int PstValidate(void*, bool, void*, void*, void*, void*)")
# 呼び出し: PstValidate(pTargetName, bIsClient, pRequestedIssuancePolicy, phAdditionalCertStore, pCert, pProvGUID)
# pTargetName : UNICODE_STRING* optional -> "void*"
# bIsClient : BOOL -> "bool"
# pRequestedIssuancePolicy : CERT_USAGE_MATCH* optional -> "void*"
# phAdditionalCertStore : HCERTSTORE* optional -> "void*"
# pCert : CERT_CONTEXT* -> "void*"
# pProvGUID : GUID* optional, out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。