[wpkg-users] Installing a new CA cert

[Marco Gaiarin]

Mandi! Jason Castonguay
  In chel di` si favelave...

> I saw that other people have methods of installing Certificate Authority
> certs in windows. Here is one that I have found.

CertMgr.exe can work standalone, or the entire net sdk have to be
installed?

I've found a method that it is tricky, indeed, but seems work
flawlessy.

1) dump to nt4 format the registry below:

	[HKEY_USERS\CurrentUser\Software\Microsoft\SystemCertificates\Root\Certificates\E16AB5A2C2C3E04811D0E5CE5BAE969D9A4FF2A0]

2) take your .der certificate, and from a normal windows user double
click on it, follow the wizard with the default.

3) dump again the registry, on a different file, same key.

4) diff the file, you will see a new key installed, like:

	[HKEY_USERS\S-1-5-21-1458177777-355997386-270368766-1087\Software\Microsoft\SystemCertificates\Root\Certificates\E16AB5A2C2C3E04811D0E5CE5BAE969D9A4FF2A0]

5) copy this key to a new registry file, but as:

	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\E16AB5A2C2C3E04811D0E5CE5BAE969D9A4FF2A0]

(keeping the example...)

6) install the registry exerpt.


Considering that changing the root CA happens every year or more,
typically, this task are not so time consuming...

-- 
dott. Marco Gaiarin				    GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it	  tel +39-0434-842711  fax +39-0434-842797






VDEV
_______________________________________________
wpkg-users mailing list
wpkg-users at lists.wpkg.org
http://lists.wpkg.org/mailman/listinfo/wpkg-users