Re: [Openvpn-devel] [PATCH 1/2 v3] Skip expired certificates in Windows certificate store

2020-02-11 Thread Selva Nair
Hi, Thanks for reviewing this. On Tue, Feb 11, 2020 at 4:52 AM Lev Stipakov wrote: > > Hi, > >> +DWORD find_type; >> +const void *find_param; >> >> >> >> if (!strncmp(cert_prop, "SUBJ:", 5)) >> { >> >> +find_param = cert_prop + 5; >> +find_type =

Re: [Openvpn-devel] [PATCH 1/2 v3] Skip expired certificates in Windows certificate store

2020-02-11 Thread Lev Stipakov
Hi, +DWORD find_type; > +const void *find_param; if (!strncmp(cert_prop, "SUBJ:", 5)) > { +find_param = cert_prop + 5; > +find_type = CERT_FIND_SUBJECT_STR_A; > } > else if (!strncmp(cert_prop, "THUMB:", 6)) > { > +find_type =

[Openvpn-devel] [PATCH 1/2 v3] Skip expired certificates in Windows certificate store

2020-02-10 Thread selva . nair
From: Selva Nair Have the cryptoapicert option find the first matching certificate in store that is valid at the present time. Currently the first found item, even if expired, is returned. This makes it possible to update certifiates in store without having to delete old ones. As a side effect,