... // other code not shown

// definition

class CSslCredentials

{

friend class CSslProvider;

protected:

CSslCredentials();

~CSslCredentials();

public:

HRESULT Obtain(BOOL bAsServer, LPCTSTR strPrincipal,

LPCTSTR strStore, BOOL bMutualAuth = FALSE,

DWORD dwProtoFlags = 0);

HRESULT Obtain(BOOL bAsServer, LPCTSTR strPrincipal,

HCERTSTORE hStore, BOOL bMutualAuth = FALSE,

DWORD dwProtoFlags = 0);

HRESULT Obtain(DWORD dwProtoFlags = 0);

HRESULT Attach(CredHandle hCredentials, BOOL bAsServer,

BOOL bMutualAuth = FALSE, DWORD dwProtoFlags = 0);

HRESULT Detach();

BOOL IsServer() {return m_bServer;}

BOOL MutualAuthRequired() {return m_bMutualAuth;}

DWORD GetProtoFlags() {return m_dwProtoFlags;}

BOOL HasCredHandle()

{

return SecIsValidHandle(&m_hCredentials);

}

PCredHandle GetHandle()

{

return (HasCredHandle() ? &m_hCredentials : NULL);

}

void CleanUp();

private:

HRESULT OpenSysStore(LPCTSTR strStore, HCERTSTORE& hStore);

HRESULT FindCertificate(HCERTSTORE hStore,

LPCTSTR strPrincipal, PCCERT_CONTEXT& certContext);

HRESULT ObtainImpl(PCCERT_CONTEXT certContext,

BOOL bAsServer, BOOL bMutualAuth, DWORD dwProtoFlags);

private:

CredHandle m_hCredentials;

BOOL m_bServer;

BOOL m_bMutualAuth;

DWORD m_dwProtoFlags;

HCERTSTORE m_hStore;

};

... // other code not shown

// implementation

HRESULT CSslCredentials::ObtainImpl(PCCERT_CONTEXT certContext,

BOOL bAsServer,

BOOL bMutualAuth,

DWORD dwProtoFlags)

{

// Build Schannel credentials structure.

SCHANNEL_CRED credSchannel = {0};

credSchannel.dwVersion = SCHANNEL_CRED_VERSION;

credSchannel.grbitEnabledProtocols = dwProtoFlags;

if (certContext != NULL)

{

credSchannel.cCreds = 1;

credSchannel.paCred = &certContext;

}

// Create SSL credentials.

TimeStamp tsExpires;

HRESULT hr = CSspiLib::AcquireCredentialsHandle(

NULL,

UNISP_NAME,

(bAsServer ?

SECPKG_CRED_INBOUND :

SECPKG_CRED_OUTBOUND),

NULL,

&credSchannel,

NULL,

NULL,

&m_hCredentials,

&tsExpires);

// See, if we have succeeded

if (SUCCEEDED(hr))

{

m_bServer = bAsServer;

if (m_bServer)

m_bMutualAuth = bMutualAuth;

m_dwProtoFlags = dwProtoFlags;

}

else

TRACE(_T("Line: %d. Error: 0x%08X\n"), __LINE__, hr);

return hr;

}

... // other code not shown

HRESULT CSslCredentials::OpenSysStore(LPCTSTR strStore,

HCERTSTORE& hStore)

{

CT2CA storeName(strStore);

m_hStore = ::CertOpenSystemStore(0, storeName);

if (m_hStore == NULL)

{

DWORD dwErrCode = ::GetLastError();

return HRESULT_FROM_WIN32(dwErrCode);

}

return S_OK;

}

HRESULT CSslCredentials::FindCertificate(

HCERTSTORE hStore,

LPCTSTR strPrincipal,

PCCERT_CONTEXT& certContext)

{

USES_CONVERSION;

CT2CA hostName(strPrincipal);

ASSERT(m_hStore != NULL);

certContext = ::CertFindCertificateInStore(

m_hStore,

X509_ASN_ENCODING | PKCS_7_ASN_ENCODING,

0,

CERT_FIND_SUBJECT_STR_A,

hostName,

NULL);

if (certContext == NULL)

{

DWORD dwErrCode = ::GetLastError();

return HRESULT_FROM_WIN32(dwErrCode);

}

return S_OK;

}