ホーム › Security.Cryptography › CertVerifyRevocation

CertVerifyRevocation

関数

証明書が失効していないかを失効プロバイダで検証する。

DLLCRYPT32.dll呼出規約winapiSetLastErrorあり対応OSWindows XP 以降

シグネチャ

// CRYPT32.dll
#include <windows.h>

BOOL CertVerifyRevocation(
    DWORD dwEncodingType,
    DWORD dwRevType,
    DWORD cContext,
    void** rgpvContext,
    DWORD dwFlags,
    CERT_REVOCATION_PARA* pRevPara,   // optional
    CERT_REVOCATION_STATUS* pRevStatus
);

パラメーター

名前	型	方向
dwEncodingType	DWORD	in
dwRevType	DWORD	in
cContext	DWORD	in
rgpvContext	void**	in
dwFlags	DWORD	in
pRevPara	CERT_REVOCATION_PARA*	inoptional
pRevStatus	CERT_REVOCATION_STATUS*	inout

戻り値の型: BOOL

各言語での呼び出し定義

// CRYPT32.dll
#include <windows.h>

BOOL CertVerifyRevocation(
    DWORD dwEncodingType,
    DWORD dwRevType,
    DWORD cContext,
    void** rgpvContext,
    DWORD dwFlags,
    CERT_REVOCATION_PARA* pRevPara,   // optional
    CERT_REVOCATION_STATUS* pRevStatus
);

[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("CRYPT32.dll", SetLastError = true, ExactSpelling = true)]
static extern bool CertVerifyRevocation(
    uint dwEncodingType,   // DWORD
    uint dwRevType,   // DWORD
    uint cContext,   // DWORD
    IntPtr rgpvContext,   // void**
    uint dwFlags,   // DWORD
    IntPtr pRevPara,   // CERT_REVOCATION_PARA* optional
    IntPtr pRevStatus   // CERT_REVOCATION_STATUS* in/out
);

<DllImport("CRYPT32.dll", SetLastError:=True, ExactSpelling:=True)>
Public Shared Function CertVerifyRevocation(
    dwEncodingType As UInteger,   ' DWORD
    dwRevType As UInteger,   ' DWORD
    cContext As UInteger,   ' DWORD
    rgpvContext As IntPtr,   ' void**
    dwFlags As UInteger,   ' DWORD
    pRevPara As IntPtr,   ' CERT_REVOCATION_PARA* optional
    pRevStatus As IntPtr   ' CERT_REVOCATION_STATUS* in/out
) As Boolean
End Function

' dwEncodingType : DWORD
' dwRevType : DWORD
' cContext : DWORD
' rgpvContext : void**
' dwFlags : DWORD
' pRevPara : CERT_REVOCATION_PARA* optional
' pRevStatus : CERT_REVOCATION_STATUS* in/out
Declare PtrSafe Function CertVerifyRevocation Lib "crypt32" ( _
    ByVal dwEncodingType As Long, _
    ByVal dwRevType As Long, _
    ByVal cContext As Long, _
    ByVal rgpvContext As LongPtr, _
    ByVal dwFlags As Long, _
    ByVal pRevPara As LongPtr, _
    ByVal pRevStatus As LongPtr) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

CertVerifyRevocation = ctypes.windll.crypt32.CertVerifyRevocation
CertVerifyRevocation.restype = wintypes.BOOL
CertVerifyRevocation.argtypes = [
    wintypes.DWORD,  # dwEncodingType : DWORD
    wintypes.DWORD,  # dwRevType : DWORD
    wintypes.DWORD,  # cContext : DWORD
    ctypes.c_void_p,  # rgpvContext : void**
    wintypes.DWORD,  # dwFlags : DWORD
    ctypes.c_void_p,  # pRevPara : CERT_REVOCATION_PARA* optional
    ctypes.c_void_p,  # pRevStatus : CERT_REVOCATION_STATUS* in/out
]
# GetLastError: use ctypes.GetLastError() (or ctypes.WinDLL(use_last_error=True))

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('CRYPT32.dll')
CertVerifyRevocation = Fiddle::Function.new(
  lib['CertVerifyRevocation'],
  [
    -Fiddle::TYPE_INT,  # dwEncodingType : DWORD
    -Fiddle::TYPE_INT,  # dwRevType : DWORD
    -Fiddle::TYPE_INT,  # cContext : DWORD
    Fiddle::TYPE_VOIDP,  # rgpvContext : void**
    -Fiddle::TYPE_INT,  # dwFlags : DWORD
    Fiddle::TYPE_VOIDP,  # pRevPara : CERT_REVOCATION_PARA* optional
    Fiddle::TYPE_VOIDP,  # pRevStatus : CERT_REVOCATION_STATUS* in/out
  ],
  Fiddle::TYPE_INT)

#[link(name = "crypt32")]
extern "system" {
    fn CertVerifyRevocation(
        dwEncodingType: u32,  // DWORD
        dwRevType: u32,  // DWORD
        cContext: u32,  // DWORD
        rgpvContext: *mut *mut (),  // void**
        dwFlags: u32,  // DWORD
        pRevPara: *mut CERT_REVOCATION_PARA,  // CERT_REVOCATION_PARA* optional
        pRevStatus: *mut CERT_REVOCATION_STATUS  // CERT_REVOCATION_STATUS* in/out
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("CRYPT32.dll", SetLastError = true)]
public static extern bool CertVerifyRevocation(uint dwEncodingType, uint dwRevType, uint cContext, IntPtr rgpvContext, uint dwFlags, IntPtr pRevPara, IntPtr pRevStatus);
"@
$api = Add-Type -MemberDefinition $sig -Name 'CRYPT32_CertVerifyRevocation' -Namespace Win32 -PassThru
# $api::CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, pRevPara, pRevStatus)

#uselib "CRYPT32.dll"
#func global CertVerifyRevocation "CertVerifyRevocation" sptr, sptr, sptr, sptr, sptr, sptr, sptr
; CertVerifyRevocation dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, varptr(pRevPara), varptr(pRevStatus)   ; 戻り値は stat
; dwEncodingType : DWORD -> "sptr"
; dwRevType : DWORD -> "sptr"
; cContext : DWORD -> "sptr"
; rgpvContext : void** -> "sptr"
; dwFlags : DWORD -> "sptr"
; pRevPara : CERT_REVOCATION_PARA* optional -> "sptr"
; pRevStatus : CERT_REVOCATION_STATUS* in/out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "CRYPT32.dll"
#cfunc global CertVerifyRevocation "CertVerifyRevocation" int, int, int, sptr, int, var, var
; res = CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, pRevPara, pRevStatus)
; dwEncodingType : DWORD -> "int"
; dwRevType : DWORD -> "int"
; cContext : DWORD -> "int"
; rgpvContext : void** -> "sptr"
; dwFlags : DWORD -> "int"
; pRevPara : CERT_REVOCATION_PARA* optional -> "var"
; pRevStatus : CERT_REVOCATION_STATUS* in/out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "CRYPT32.dll"
#cfunc global CertVerifyRevocation "CertVerifyRevocation" int, int, int, sptr, int, sptr, sptr
; res = CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, varptr(pRevPara), varptr(pRevStatus))
; dwEncodingType : DWORD -> "int"
; dwRevType : DWORD -> "int"
; cContext : DWORD -> "int"
; rgpvContext : void** -> "sptr"
; dwFlags : DWORD -> "int"
; pRevPara : CERT_REVOCATION_PARA* optional -> "sptr"
; pRevStatus : CERT_REVOCATION_STATUS* in/out -> "sptr"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; BOOL CertVerifyRevocation(DWORD dwEncodingType, DWORD dwRevType, DWORD cContext, void** rgpvContext, DWORD dwFlags, CERT_REVOCATION_PARA* pRevPara, CERT_REVOCATION_STATUS* pRevStatus)
#uselib "CRYPT32.dll"
#cfunc global CertVerifyRevocation "CertVerifyRevocation" int, int, int, intptr, int, var, var
; res = CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, pRevPara, pRevStatus)
; dwEncodingType : DWORD -> "int"
; dwRevType : DWORD -> "int"
; cContext : DWORD -> "int"
; rgpvContext : void** -> "intptr"
; dwFlags : DWORD -> "int"
; pRevPara : CERT_REVOCATION_PARA* optional -> "var"
; pRevStatus : CERT_REVOCATION_STATUS* in/out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; BOOL CertVerifyRevocation(DWORD dwEncodingType, DWORD dwRevType, DWORD cContext, void** rgpvContext, DWORD dwFlags, CERT_REVOCATION_PARA* pRevPara, CERT_REVOCATION_STATUS* pRevStatus)
#uselib "CRYPT32.dll"
#cfunc global CertVerifyRevocation "CertVerifyRevocation" int, int, int, intptr, int, intptr, intptr
; res = CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, varptr(pRevPara), varptr(pRevStatus))
; dwEncodingType : DWORD -> "int"
; dwRevType : DWORD -> "int"
; cContext : DWORD -> "int"
; rgpvContext : void** -> "intptr"
; dwFlags : DWORD -> "int"
; pRevPara : CERT_REVOCATION_PARA* optional -> "intptr"
; pRevStatus : CERT_REVOCATION_STATUS* in/out -> "intptr"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	crypt32 = windows.NewLazySystemDLL("CRYPT32.dll")
	procCertVerifyRevocation = crypt32.NewProc("CertVerifyRevocation")
)

// dwEncodingType (DWORD), dwRevType (DWORD), cContext (DWORD), rgpvContext (void**), dwFlags (DWORD), pRevPara (CERT_REVOCATION_PARA* optional), pRevStatus (CERT_REVOCATION_STATUS* in/out)
r1, _, err := procCertVerifyRevocation.Call(
	uintptr(dwEncodingType),
	uintptr(dwRevType),
	uintptr(cContext),
	uintptr(rgpvContext),
	uintptr(dwFlags),
	uintptr(pRevPara),
	uintptr(pRevStatus),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // BOOL

function CertVerifyRevocation(
  dwEncodingType: DWORD;   // DWORD
  dwRevType: DWORD;   // DWORD
  cContext: DWORD;   // DWORD
  rgpvContext: Pointer;   // void**
  dwFlags: DWORD;   // DWORD
  pRevPara: Pointer;   // CERT_REVOCATION_PARA* optional
  pRevStatus: Pointer   // CERT_REVOCATION_STATUS* in/out
): BOOL; stdcall;
  external 'CRYPT32.dll' name 'CertVerifyRevocation';

result := DllCall("CRYPT32\CertVerifyRevocation"
    , "UInt", dwEncodingType   ; DWORD
    , "UInt", dwRevType   ; DWORD
    , "UInt", cContext   ; DWORD
    , "Ptr", rgpvContext   ; void**
    , "UInt", dwFlags   ; DWORD
    , "Ptr", pRevPara   ; CERT_REVOCATION_PARA* optional
    , "Ptr", pRevStatus   ; CERT_REVOCATION_STATUS* in/out
    , "Int")   ; return: BOOL

●CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, pRevPara, pRevStatus) = DLL("CRYPT32.dll", "bool CertVerifyRevocation(dword, dword, dword, void*, dword, void*, void*)")
# 呼び出し: CertVerifyRevocation(dwEncodingType, dwRevType, cContext, rgpvContext, dwFlags, pRevPara, pRevStatus)
# dwEncodingType : DWORD -> "dword"
# dwRevType : DWORD -> "dword"
# cContext : DWORD -> "dword"
# rgpvContext : void** -> "void*"
# dwFlags : DWORD -> "dword"
# pRevPara : CERT_REVOCATION_PARA* optional -> "void*"
# pRevStatus : CERT_REVOCATION_STATUS* in/out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。