Code Signing Certificate Flag -
is microsoft_root_cert_chain_policy_check_application_root_flag
flag used code signing supported on windows xp, windows vista , windows 7?
when using flag in certverifycertificatechainpolicy
function on above operating systems, getting
cert_e_untrustedroot error.
it working fine me on windows 8 , above though.
according microsoft
the
dwflags
member ofcert_chain_policy_para
structure pointed ppolicystatus parameter can containmicrosoft_root_cert_chain_policy_check_application_root_flag flag
, which causes function check microsoft application root "microsoft root certificate authority 2011".
so make sure older systems have "microsoft root certificate authority 2011" package installed. more info, see http://support.microsoft.com/kb/931125
to manually install certificates
download http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe
extract files using command rootsupd.exe /c /t:c:\temp\extroot
from c:\temp\extroot run following 4 commands (from elevated prompt)
updroots.exe authroots.sst
updroots.exe updroots.sst
updroots.exe -l roots.sst
updroots.exe -d delroots.sst
Comments
Post a Comment