aheinecke@137: #ifdef WIN32
aheinecke@137: 
aheinecke@161: #include <stdio.h>
aheinecke@161: 
aheinecke@137: #include "windowsstore.h"
aheinecke@161: #include "errorcodes.h"
aheinecke@161: #include "listutil.h"
aheinecke@161: #include "strhelp.h"
aheinecke@137: 
aheinecke@137: static LPWSTR getLastErrorMsg() {
aheinecke@137:     LPWSTR bufPtr = NULL;
aheinecke@137:     DWORD err = GetLastError();
aheinecke@137:     FormatMessageW(FORMAT_MESSAGE_ALLOCATE_BUFFER |
aheinecke@137:                    FORMAT_MESSAGE_FROM_SYSTEM |
aheinecke@137:                    FORMAT_MESSAGE_IGNORE_INSERTS,
aheinecke@137:                    NULL, err, 0, (LPWSTR)&bufPtr, 0, NULL);
aheinecke@137:     if (!bufPtr) {
aheinecke@137:         HMODULE hWinhttp = GetModuleHandleW(L"winhttp");
aheinecke@137:         if (hWinhttp) {
aheinecke@137:             FormatMessageW(FORMAT_MESSAGE_ALLOCATE_BUFFER |
aheinecke@137:                            FORMAT_MESSAGE_FROM_HMODULE |
aheinecke@137:                            FORMAT_MESSAGE_IGNORE_INSERTS,
aheinecke@137:                            hWinhttp, HRESULT_CODE(err), 0,
aheinecke@137:                            (LPWSTR)&bufPtr, 0, NULL);
aheinecke@137:         }
aheinecke@137:     }
aheinecke@137:     if (!bufPtr)
aheinecke@137:         printf("Error getting last error\n");
aheinecke@137:     return bufPtr;
aheinecke@137: }
aheinecke@137: 
aheinecke@161: int write_stores_win(char **to_install, char **to_remove, bool user_store)
aheinecke@137: {
aheinecke@137:     int i = 0;
aheinecke@161:     int ret = -1;
aheinecke@137:     HCERTSTORE hStore = NULL;
aheinecke@137: 
aheinecke@137:     if (user_store) {
aheinecke@137:         hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM, 0,
aheinecke@137:                                0, CERT_SYSTEM_STORE_CURRENT_USER, L"Root");
aheinecke@137:     } else {
aheinecke@137:         hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM, 0,
aheinecke@137:                                0, CERT_SYSTEM_STORE_LOCAL_MACHINE, L"Root");
aheinecke@137:     }
aheinecke@137: 
aheinecke@137:     if (!hStore) {
aheinecke@137:         return ERR_STORE_ACCESS_DENIED;
aheinecke@137:     }
aheinecke@137: 
aheinecke@161:     for (i=0; to_install[i]; i++) {
aheinecke@161:         size_t cert_len = strnlen(to_install[i], MAX_LINE_LENGTH),
aheinecke@161:                buf_size = 0;
aheinecke@161:         char *buf = NULL;
aheinecke@137: 
aheinecke@161:         ret = str_base64_decode(&buf, &buf_size, to_install[i], cert_len);
aheinecke@137: 
aheinecke@137:         if (ret != 0) {
aheinecke@137:             return ERR_INVALID_INSTRUCTIONS;
aheinecke@137:         }
aheinecke@137: 
aheinecke@137:         ret = CertAddEncodedCertificateToStore (hStore,
aheinecke@137:                                                 X509_ASN_ENCODING,
aheinecke@137:                                                 (PBYTE)buf,
aheinecke@161:                                                 buf_size,
aheinecke@137:                                                 CERT_STORE_ADD_ALWAYS,
aheinecke@137:                                                 NULL);
aheinecke@137: 
aheinecke@137:         if (ret == 0) {
aheinecke@137:             LPWSTR error = getLastErrorMsg();
aheinecke@137:             if (error) {
aheinecke@137:                 printf("Failed to add certificate: %S \n", error);
aheinecke@137:                 LocalFree(error);
aheinecke@137:             }
aheinecke@137:         }
aheinecke@137:         i++;
aheinecke@137:         free(buf);
aheinecke@137:     }
aheinecke@149: 
aheinecke@161:     for (i=0; to_remove[i]; i++) {
aheinecke@161:         // TODO
aheinecke@161:     }
aheinecke@161: 
aheinecke@137:     if(hStore) {
aheinecke@137:         CertCloseStore(hStore, 0);
aheinecke@137:     }
aheinecke@137:     return 0;
aheinecke@137: }
aheinecke@137: #endif // WIN32