ホーム › Security.Cryptography › FindCertsByIssuer

FindCertsByIssuer

関数

指定発行者名に対応するクライアント証明書チェーンを検索する。

DLLWINTRUST.dll呼出規約winapi

シグネチャ

// WINTRUST.dll
#include <windows.h>

HRESULT FindCertsByIssuer(
    CERT_CHAIN* pCertChains,   // optional
    DWORD* pcbCertChains,
    DWORD* pcCertChains,
    BYTE* pbEncodedIssuerName,   // optional
    DWORD cbEncodedIssuerName,
    LPCWSTR pwszPurpose,   // optional
    DWORD dwKeySpec
);

パラメーター

名前	型	方向
pCertChains	CERT_CHAIN*	outoptional
pcbCertChains	DWORD*	inout
pcCertChains	DWORD*	out
pbEncodedIssuerName	BYTE*	inoptional
cbEncodedIssuerName	DWORD	in
pwszPurpose	LPCWSTR	inoptional
dwKeySpec	DWORD	in

戻り値の型: HRESULT

各言語での呼び出し定義

// WINTRUST.dll
#include <windows.h>

HRESULT FindCertsByIssuer(
    CERT_CHAIN* pCertChains,   // optional
    DWORD* pcbCertChains,
    DWORD* pcCertChains,
    BYTE* pbEncodedIssuerName,   // optional
    DWORD cbEncodedIssuerName,
    LPCWSTR pwszPurpose,   // optional
    DWORD dwKeySpec
);

[DllImport("WINTRUST.dll", ExactSpelling = true)]
static extern int FindCertsByIssuer(
    IntPtr pCertChains,   // CERT_CHAIN* optional, out
    ref uint pcbCertChains,   // DWORD* in/out
    out uint pcCertChains,   // DWORD* out
    IntPtr pbEncodedIssuerName,   // BYTE* optional
    uint cbEncodedIssuerName,   // DWORD
    [MarshalAs(UnmanagedType.LPWStr)] string pwszPurpose,   // LPCWSTR optional
    uint dwKeySpec   // DWORD
);

<DllImport("WINTRUST.dll", ExactSpelling:=True)>
Public Shared Function FindCertsByIssuer(
    pCertChains As IntPtr,   ' CERT_CHAIN* optional, out
    ByRef pcbCertChains As UInteger,   ' DWORD* in/out
    <Out> ByRef pcCertChains As UInteger,   ' DWORD* out
    pbEncodedIssuerName As IntPtr,   ' BYTE* optional
    cbEncodedIssuerName As UInteger,   ' DWORD
    <MarshalAs(UnmanagedType.LPWStr)> pwszPurpose As String,   ' LPCWSTR optional
    dwKeySpec As UInteger   ' DWORD
) As Integer
End Function

' pCertChains : CERT_CHAIN* optional, out
' pcbCertChains : DWORD* in/out
' pcCertChains : DWORD* out
' pbEncodedIssuerName : BYTE* optional
' cbEncodedIssuerName : DWORD
' pwszPurpose : LPCWSTR optional
' dwKeySpec : DWORD
Declare PtrSafe Function FindCertsByIssuer Lib "wintrust" ( _
    ByVal pCertChains As LongPtr, _
    ByRef pcbCertChains As Long, _
    ByRef pcCertChains As Long, _
    ByVal pbEncodedIssuerName As LongPtr, _
    ByVal cbEncodedIssuerName As Long, _
    ByVal pwszPurpose As LongPtr, _
    ByVal dwKeySpec As Long) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

FindCertsByIssuer = ctypes.windll.wintrust.FindCertsByIssuer
FindCertsByIssuer.restype = ctypes.c_int
FindCertsByIssuer.argtypes = [
    ctypes.c_void_p,  # pCertChains : CERT_CHAIN* optional, out
    ctypes.POINTER(wintypes.DWORD),  # pcbCertChains : DWORD* in/out
    ctypes.POINTER(wintypes.DWORD),  # pcCertChains : DWORD* out
    ctypes.POINTER(ctypes.c_ubyte),  # pbEncodedIssuerName : BYTE* optional
    wintypes.DWORD,  # cbEncodedIssuerName : DWORD
    wintypes.LPCWSTR,  # pwszPurpose : LPCWSTR optional
    wintypes.DWORD,  # dwKeySpec : DWORD
]

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('WINTRUST.dll')
FindCertsByIssuer = Fiddle::Function.new(
  lib['FindCertsByIssuer'],
  [
    Fiddle::TYPE_VOIDP,  # pCertChains : CERT_CHAIN* optional, out
    Fiddle::TYPE_VOIDP,  # pcbCertChains : DWORD* in/out
    Fiddle::TYPE_VOIDP,  # pcCertChains : DWORD* out
    Fiddle::TYPE_VOIDP,  # pbEncodedIssuerName : BYTE* optional
    -Fiddle::TYPE_INT,  # cbEncodedIssuerName : DWORD
    Fiddle::TYPE_VOIDP,  # pwszPurpose : LPCWSTR optional
    -Fiddle::TYPE_INT,  # dwKeySpec : DWORD
  ],
  Fiddle::TYPE_INT)

#[link(name = "wintrust")]
extern "system" {
    fn FindCertsByIssuer(
        pCertChains: *mut CERT_CHAIN,  // CERT_CHAIN* optional, out
        pcbCertChains: *mut u32,  // DWORD* in/out
        pcCertChains: *mut u32,  // DWORD* out
        pbEncodedIssuerName: *mut u8,  // BYTE* optional
        cbEncodedIssuerName: u32,  // DWORD
        pwszPurpose: *const u16,  // LPCWSTR optional
        dwKeySpec: u32  // DWORD
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[DllImport("WINTRUST.dll")]
public static extern int FindCertsByIssuer(IntPtr pCertChains, ref uint pcbCertChains, out uint pcCertChains, IntPtr pbEncodedIssuerName, uint cbEncodedIssuerName, [MarshalAs(UnmanagedType.LPWStr)] string pwszPurpose, uint dwKeySpec);
"@
$api = Add-Type -MemberDefinition $sig -Name 'WINTRUST_FindCertsByIssuer' -Namespace Win32 -PassThru
# $api::FindCertsByIssuer(pCertChains, pcbCertChains, pcCertChains, pbEncodedIssuerName, cbEncodedIssuerName, pwszPurpose, dwKeySpec)

#uselib "WINTRUST.dll"
#func global FindCertsByIssuer "FindCertsByIssuer" sptr, sptr, sptr, sptr, sptr, sptr, sptr
; FindCertsByIssuer varptr(pCertChains), varptr(pcbCertChains), varptr(pcCertChains), varptr(pbEncodedIssuerName), cbEncodedIssuerName, pwszPurpose, dwKeySpec   ; 戻り値は stat
; pCertChains : CERT_CHAIN* optional, out -> "sptr"
; pcbCertChains : DWORD* in/out -> "sptr"
; pcCertChains : DWORD* out -> "sptr"
; pbEncodedIssuerName : BYTE* optional -> "sptr"
; cbEncodedIssuerName : DWORD -> "sptr"
; pwszPurpose : LPCWSTR optional -> "sptr"
; dwKeySpec : DWORD -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "WINTRUST.dll"
#cfunc global FindCertsByIssuer "FindCertsByIssuer" var, var, var, var, int, wstr, int
; res = FindCertsByIssuer(pCertChains, pcbCertChains, pcCertChains, pbEncodedIssuerName, cbEncodedIssuerName, pwszPurpose, dwKeySpec)
; pCertChains : CERT_CHAIN* optional, out -> "var"
; pcbCertChains : DWORD* in/out -> "var"
; pcCertChains : DWORD* out -> "var"
; pbEncodedIssuerName : BYTE* optional -> "var"
; cbEncodedIssuerName : DWORD -> "int"
; pwszPurpose : LPCWSTR optional -> "wstr"
; dwKeySpec : DWORD -> "int"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "WINTRUST.dll"
#cfunc global FindCertsByIssuer "FindCertsByIssuer" sptr, sptr, sptr, sptr, int, wstr, int
; res = FindCertsByIssuer(varptr(pCertChains), varptr(pcbCertChains), varptr(pcCertChains), varptr(pbEncodedIssuerName), cbEncodedIssuerName, pwszPurpose, dwKeySpec)
; pCertChains : CERT_CHAIN* optional, out -> "sptr"
; pcbCertChains : DWORD* in/out -> "sptr"
; pcCertChains : DWORD* out -> "sptr"
; pbEncodedIssuerName : BYTE* optional -> "sptr"
; cbEncodedIssuerName : DWORD -> "int"
; pwszPurpose : LPCWSTR optional -> "wstr"
; dwKeySpec : DWORD -> "int"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; HRESULT FindCertsByIssuer(CERT_CHAIN* pCertChains, DWORD* pcbCertChains, DWORD* pcCertChains, BYTE* pbEncodedIssuerName, DWORD cbEncodedIssuerName, LPCWSTR pwszPurpose, DWORD dwKeySpec)
#uselib "WINTRUST.dll"
#cfunc global FindCertsByIssuer "FindCertsByIssuer" var, var, var, var, int, wstr, int
; res = FindCertsByIssuer(pCertChains, pcbCertChains, pcCertChains, pbEncodedIssuerName, cbEncodedIssuerName, pwszPurpose, dwKeySpec)
; pCertChains : CERT_CHAIN* optional, out -> "var"
; pcbCertChains : DWORD* in/out -> "var"
; pcCertChains : DWORD* out -> "var"
; pbEncodedIssuerName : BYTE* optional -> "var"
; cbEncodedIssuerName : DWORD -> "int"
; pwszPurpose : LPCWSTR optional -> "wstr"
; dwKeySpec : DWORD -> "int"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; HRESULT FindCertsByIssuer(CERT_CHAIN* pCertChains, DWORD* pcbCertChains, DWORD* pcCertChains, BYTE* pbEncodedIssuerName, DWORD cbEncodedIssuerName, LPCWSTR pwszPurpose, DWORD dwKeySpec)
#uselib "WINTRUST.dll"
#cfunc global FindCertsByIssuer "FindCertsByIssuer" intptr, intptr, intptr, intptr, int, wstr, int
; res = FindCertsByIssuer(varptr(pCertChains), varptr(pcbCertChains), varptr(pcCertChains), varptr(pbEncodedIssuerName), cbEncodedIssuerName, pwszPurpose, dwKeySpec)
; pCertChains : CERT_CHAIN* optional, out -> "intptr"
; pcbCertChains : DWORD* in/out -> "intptr"
; pcCertChains : DWORD* out -> "intptr"
; pbEncodedIssuerName : BYTE* optional -> "intptr"
; cbEncodedIssuerName : DWORD -> "int"
; pwszPurpose : LPCWSTR optional -> "wstr"
; dwKeySpec : DWORD -> "int"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	wintrust = windows.NewLazySystemDLL("WINTRUST.dll")
	procFindCertsByIssuer = wintrust.NewProc("FindCertsByIssuer")
)

// pCertChains (CERT_CHAIN* optional, out), pcbCertChains (DWORD* in/out), pcCertChains (DWORD* out), pbEncodedIssuerName (BYTE* optional), cbEncodedIssuerName (DWORD), pwszPurpose (LPCWSTR optional), dwKeySpec (DWORD)
r1, _, err := procFindCertsByIssuer.Call(
	uintptr(pCertChains),
	uintptr(pcbCertChains),
	uintptr(pcCertChains),
	uintptr(pbEncodedIssuerName),
	uintptr(cbEncodedIssuerName),
	uintptr(unsafe.Pointer(windows.StringToUTF16Ptr(pwszPurpose))),
	uintptr(dwKeySpec),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // HRESULT

function FindCertsByIssuer(
  pCertChains: Pointer;   // CERT_CHAIN* optional, out
  pcbCertChains: Pointer;   // DWORD* in/out
  pcCertChains: Pointer;   // DWORD* out
  pbEncodedIssuerName: Pointer;   // BYTE* optional
  cbEncodedIssuerName: DWORD;   // DWORD
  pwszPurpose: PWideChar;   // LPCWSTR optional
  dwKeySpec: DWORD   // DWORD
): Integer; stdcall;
  external 'WINTRUST.dll' name 'FindCertsByIssuer';

result := DllCall("WINTRUST\FindCertsByIssuer"
    , "Ptr", pCertChains   ; CERT_CHAIN* optional, out
    , "Ptr", pcbCertChains   ; DWORD* in/out
    , "Ptr", pcCertChains   ; DWORD* out
    , "Ptr", pbEncodedIssuerName   ; BYTE* optional
    , "UInt", cbEncodedIssuerName   ; DWORD
    , "WStr", pwszPurpose   ; LPCWSTR optional
    , "UInt", dwKeySpec   ; DWORD
    , "Int")   ; return: HRESULT

●FindCertsByIssuer(pCertChains, pcbCertChains, pcCertChains, pbEncodedIssuerName, cbEncodedIssuerName, pwszPurpose, dwKeySpec) = DLL("WINTRUST.dll", "int FindCertsByIssuer(void*, void*, void*, void*, dword, char*, dword)")
# 呼び出し: FindCertsByIssuer(pCertChains, pcbCertChains, pcCertChains, pbEncodedIssuerName, cbEncodedIssuerName, pwszPurpose, dwKeySpec)
# pCertChains : CERT_CHAIN* optional, out -> "void*"
# pcbCertChains : DWORD* in/out -> "void*"
# pcCertChains : DWORD* out -> "void*"
# pbEncodedIssuerName : BYTE* optional -> "void*"
# cbEncodedIssuerName : DWORD -> "dword"
# pwszPurpose : LPCWSTR optional -> "char*"
# dwKeySpec : DWORD -> "dword"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。