VB Forum / Win API / May 2007

Im using the CAPI revocation function CertVerifyRevocation and
writting my own DLL to replace the default behaviour.  Basically I
have a third party Authentication Server which provides Path building
and Revocation services, therefore I want all clients to utilise my
server.

1) I have written a configuration app which points to teh URL of the
Server (DONE)
2) I have written the DLL which CAPI calls i.e. CertVerifyRevocation()
and its call as the first default provider (DONE)
3) Tested sending X509 Certificates to the Authentication server over
SOAP (DONE)
4) Support for passing PKCS#7 certificates - ummm problem.

How do I get the X509 Certificates from the PKCS#7?

I also have an issue where the authentication server can only test a
SINGLE certificate at a time - hence I need to get each cert and send
it seperatley (and then process the responses in turn - this is crap,
and I fully intend to address this when I can sort this issue out, I
just need a proof of concept example.

What I have gathered so far:

Cryptoqueryobject - I think this can help me - but seems tied to
system stores.  I want to get the PKCS#7 and extract the X509
Certificates from it, then send them to the authentication server for
revocation checking (path building is perform by default (which is
also not ideal)) - i have digressed here a little, but im trying to
give a better overview of the issue I face and why I need such a
solution.

I would be greatful for any advice on this,

also I cannot guarantee  that I have CAPICOM available on the client
machines, therefore a solution does have to be provided via VC 2005
standard Crypto librarys.

I look forward to any suggestions....cheers in advance.