IOCSPAdmin::GetSigningCertificates method (certadm.h)

The GetSigningCertificates method gets the signing certificates that are available on a responder server for a given certification authority (CA) certificate. This method only returns signing certificates from the CERT_SYSTEM_STORE_LOCAL_MACHINE system store for the specified server.

Syntax

HRESULT GetSigningCertificates(
  [in]  const BSTR    bstrServerName,
  [in]  const VARIANT *pCACertVar,
  [out] VARIANT       *pVal
);

Parameters

[in] bstrServerName

A string that contains the responder-server name.

[in] pCACertVar

The CA certificate for which to retrieve signing certificates.

[out] pVal

Return value

C++

If the method fails, it returns an HRESULT value that indicates the error. For a list of common error codes, see Common HRESULT Values.

VB

Remarks

Each signing certificate has the following properties:

• Signed by the CA specified by the pCACertVar parameter
• Includes the Online Certificate Status Protocol (OCSP) signing (XCN_OID_PKIX_KP_OCSP_SIGNING) extension
• Has not expired
• Responder server can access the certificate private key

Requirements

See also

IOCSPAdmin