开通博客赚积分
发布资源赚积分
分类

源码开发语言/平台
当前位置：首页 > 源码/资料 > 游戏 > 模拟服务器 > 查看源码
CertSrv.h
资源名称：SwordOnline.rar　[点击查看]
上传用户：dzyhzl
上传日期：2019-04-29
资源大小：56270k
文件大小：38k
源码类别：

模拟服务器

开发平台：

C/C++

CertSrv.h：源码内容
  1. //+---------------------------------------------------------------------------
  2. //
  3. //  Microsoft Windows
  4. //  Copyright (C) Microsoft Corporation, 1992 - 1999
  5. //
  6. //  File:       CertSrv.h
  7. //  Contents:   Main Certificate Server header
  8. //              Also includes .h files for the COM interfaces
  9. //
  10. //----------------------------------------------------------------------------
  12. #if !defined( _CERTSRV_H_ )
  13. #define _CERTSRV_H_
  15. #include <certadm.h>
  16. #include <certbcli.h>
  17. #include <certcli.h>
  18. #include <certenc.h>
  19. #include <certexit.h>
  20. #include <certif.h>
  21. #include <certpol.h>
  22. #include <certmod.h>
  23. #include <certview.h>
  25. #ifndef DBG_CERTSRV
  26. # if defined(_DEBUG)
  27. #  define DBG_CERTSRV     1
  28. # elif defined(DBG)
  29. #  define DBG_CERTSRV     DBG
  30. # else
  31. #  define DBG_CERTSRV     0
  32. # endif
  33. #endif
  35. #define wszSERVICE_NAME TEXT("CertSvc")
  37. #define wszREGKEYNOSYSTEMCERTSVCPATH 
  38. TEXT("CurrentControlSet\Services\") 
  39. wszSERVICE_NAME
  41. #define wszREGKEYCERTSVCPATH TEXT("SYSTEM\") wszREGKEYNOSYSTEMCERTSVCPATH
  42. #define wszREGKEYBASE wszREGKEYCERTSVCPATH // obsolete definition
  44. //======================================================================
  45. // Full path to "CertSvcConfiguration":
  46. #define wszREGKEYCONFIGPATH wszREGKEYCERTSVCPATH TEXT("\") wszREGKEYCONFIG
  47. #define wszREGKEYCONFIGPATH_BS wszREGKEYCONFIGPATH TEXT("\")
  48. #define wszREGKEYCONFIGCANAME wszREGKEYCONFIGPATH_BS // obsolete definition
  50. //======================================================================
  51. // Full path to "CertSvcConfigurationRestoreInProgress":
  52. #define wszREGKEYCONFIGRESTORE wszREGKEYCONFIGPATH_BS wszREGKEYRESTOREINPROGRESS
  54. //======================================================================
  55. // Key Under "CertSvc":
  56. #define wszREGKEYCONFIG TEXT("Configuration")
  58. //======================================================================
  59. // Values Under "CertSvcConfiguration":
  60. #define wszREGACTIVE       TEXT("Active")
  61. #define wszREGDIRECTORY       TEXT("ConfigurationDirectory")
  62. #define wszREGDBDIRECTORY             TEXT("DBDirectory")
  63. #define wszREGDBLOGDIRECTORY          TEXT("DBLogDirectory")
  64. #define wszREGDBSYSDIRECTORY          TEXT("DBSystemDirectory")
  65. #define wszREGDBTEMPDIRECTORY         TEXT("DBTempDirectory")
  66. #define wszREGDBSESSIONCOUNT       TEXT("DBSessionCount")
  67. #define wszREGDBLASTFULLBACKUP       TEXT("DBLastFullBackup")
  68. #define wszREGDBLASTINCREMENTALBACKUP TEXT("DBLastIncrementalBackup")
  69. #define wszREGDBLASTRECOVERY       TEXT("DBLastRecovery")
  70. #define wszREGWEBCLIENTCAMACHINE      TEXT("WebClientCAMachine")
  71. #define wszREGVERSION       TEXT("Version")
  72. #define wszREGWEBCLIENTCANAME         TEXT("WebClientCAName")
  73. #define wszREGWEBCLIENTCATYPE         TEXT("WebClientCAType")
  74. #define wszREGDBOPTIONALFLAGS         TEXT("DBOptionalFlags")
  77. // Default value for wszREGDBSESSIONCOUNT
  78. #define DBSESSIONCOUNTDEFAULT      20
  80. // Default value for wszREGMAXINCOMINGMESSAGESIZE
  81. #define MAXINCOMINGMESSAGESIZEDEFAULT      (64 * 1024)
  83. // Value for wszREGVERSION:
  84. #define CSVER_MAJOR      2 // high 16 bits
  85. #define CSVER_MINOR      1 // low 16 bits
  87. // stamp, for all time,the whistler version:
  88. #define CSVER_WHISTLER               ((2<<16)|(1))
  90. // Keys Under "CertSvcConfiguration":
  91. #define wszREGKEYRESTOREINPROGRESS   TEXT("RestoreInProgress")
  93. //======================================================================
  94. // Values Under "CertSvcConfiguration<CAName>":
  95. #define wszREGCADESCRIPTION          TEXT("CADescription")
  96. #define wszREGCACERTHASH      TEXT("CACertHash")
  97. #define wszREGCASERIALNUMBER      TEXT("CACertSerialNumber")
  98. #define wszREGCAXCHGCERTHASH      TEXT("CAXchgCertHash")
  99. #define wszREGKRACERTHASH      TEXT("KRACertHash")
  100. #define wszREGKRACERTCOUNT      TEXT("KRACertCount")
  101. #define wszREGKRAFLAGS      TEXT("KRAFlags")
  102. #define wszREGCATYPE      TEXT("CAType")
  103. #define wszREGCERTENROLLCOMPATIBLE   TEXT("CertEnrollCompatible")
  104. #define wszREGENFORCEX500NAMELENGTHS TEXT("EnforceX500NameLengths")
  105. #define wszREGCOMMONNAME      TEXT("CommonName")
  106. #define wszREGCLOCKSKEWMINUTES      TEXT("ClockSkewMinutes")
  108. #define wszREGCRLNEXTPUBLISH         TEXT("CRLNextPublish")
  109. #define wszREGCRLPERIODSTRING      TEXT("CRLPeriod")
  110. #define wszREGCRLPERIODCOUNT      TEXT("CRLPeriodUnits")
  111. #define wszREGCRLOVERLAPPERIODSTRING TEXT("CRLOverlapPeriod")
  112. #define wszREGCRLOVERLAPPERIODCOUNT  TEXT("CRLOverlapUnits")
  114. #define wszREGCRLDELTANEXTPUBLISH    TEXT("CRLDeltaNextPublish")
  115. #define wszREGCRLDELTAPERIODSTRING   TEXT("CRLDeltaPeriod")
  116. #define wszREGCRLDELTAPERIODCOUNT    TEXT("CRLDeltaPeriodUnits")
  117. #define wszREGCRLDELTAOVERLAPPERIODSTRING TEXT("CRLDeltaOverlapPeriod")
  118. #define wszREGCRLDELTAOVERLAPPERIODCOUNT  TEXT("CRLDeltaOverlapUnits")
  120. #define wszREGCRLPUBLICATIONURLS     TEXT("CRLPublicationURLs")
  121. #define wszREGCACERTPUBLICATIONURLS  TEXT("CACertPublicationURLs")
  123. #define wszREGCAXCHGVALIDITYPERIODSTRING  TEXT("CAXchgValidityPeriod")
  124. #define wszREGCAXCHGVALIDITYPERIODCOUNT   TEXT("CAXchgValidityPeriodUnits")
  125. #define wszREGCAXCHGOVERLAPPERIODSTRING   TEXT("CAXchgOverlapPeriod")
  126. #define wszREGCAXCHGOVERLAPPERIODCOUNT    TEXT("CAXchgOverlapPeriodUnits")
  128. #define wszREGCRLPATH_OLD            TEXT("CRLPath")
  129. #define wszREGCRLEDITFLAGS      TEXT("CRLEditFlags")
  130. #define wszREGCRLFLAGS      TEXT("CRLFlags")
  131. #define wszREGCRLATTEMPTREPUBLISH    TEXT("CRLAttemptRepublish")
  132. #define wszREGENABLED      TEXT("Enabled")
  133. #define wszREGFORCETELETEX           TEXT("ForceTeletex")
  134. #define wszREGLOGLEVEL      TEXT("LogLevel")
  135. #define wszREGHIGHSERIAL      TEXT("HighSerial")
  136. #define wszREGPOLICYFLAGS      TEXT("PolicyFlags")
  137. #define wszREGNAMESEPARATOR          TEXT("SubjectNameSeparator")
  138. #define wszREGSUBJECTTEMPLATE      TEXT("SubjectTemplate")
  139. #define wszREGCAUSEDS      TEXT("UseDS")
  140. #define wszREGVALIDITYPERIODSTRING   TEXT("ValidityPeriod")
  141. #define wszREGVALIDITYPERIODCOUNT    TEXT("ValidityPeriodUnits")
  142. #define wszREGPARENTCAMACHINE        TEXT("ParentCAMachine")
  143. #define wszREGPARENTCANAME           TEXT("ParentCAName")
  144. #define wszREGREQUESTFILENAME        TEXT("RequestFileName")
  145. #define wszREGREQUESTID              TEXT("RequestId")
  146. #define wszREGREQUESTKEYCONTAINER    TEXT("RequestKeyContainer")
  147. #define wszREGREQUESTKEYINDEX        TEXT("RequestKeyIndex")
  148. #define wszREGCASERVERNAME           TEXT("CAServerName")
  149. #define wszREGCACERTFILENAME         TEXT("CACertFileName")
  150. #define wszREGCASECURITY             TEXT("Security")
  151. #define wszREGAUDITFILTER            TEXT("AuditFilter")
  152. #define wszREGOFFICERRIGHTS          TEXT("OfficerRights")
  153. #define wszREGMAXINCOMINGMESSAGESIZE TEXT("MaxIncomingMessageSize")
  154. #define wszREGROLESEPARATIONENABLED  TEXT("RoleSeparationEnabled")
  156. #define wszREGSETUPSTATUS            TEXT("SetupStatus")
  157. #define wszLOCKICERTREQUEST          TEXT("LockICertRequest")    
  158. #define wszREGDSCONFIGDN      TEXT("DSConfigDN")    
  159. #define wszREGDSDOMAINDN      TEXT("DSDomainDN")    
  161. #define wszPFXFILENAMEEXT      TEXT(".p12")
  162. #define wszDATFILENAMEEXT      TEXT(".dat")
  163. #define wszLOGFILENAMEEXT      TEXT(".log")
  164. #define wszPATFILENAMEEXT      TEXT(".pat")
  165. #define wszDBFILENAMEEXT      TEXT(".edb")
  166. #define szDBBASENAMEPARM      "edb"
  167. #define wszDBBASENAMEPARM      TEXT(szDBBASENAMEPARM)
  168. #define wszLOGPATH      TEXT("CertLog")
  169. #define wszDBBACKUPSUBDIR      TEXT("DataBase")
  170. #define wszDBBACKUPCERTBACKDAT      TEXT("certbkxp.dat")
  172. #ifndef __ENUM_CATYPES__
  173. #define __ENUM_CATYPES__
  175. // Values for wszREGCATYPE:
  176. typedef enum {
  177.     ENUM_ENTERPRISE_ROOTCA = 0,
  178.     ENUM_ENTERPRISE_SUBCA = 1,
  179.     //ENUM_UNUSED2 = 2,
  180.     ENUM_STANDALONE_ROOTCA = 3,
  181.     ENUM_STANDALONE_SUBCA = 4,
  182.     ENUM_UNKNOWN_CA = 5,
  183. } ENUM_CATYPES;
  185. #endif __ENUM_CATYPES__
  187. // Default value for wszREGCLOCKSKEWMINUTES
  188. #define CCLOCKSKEWMINUTESDEFAULT       10
  190. // Default validity period for ROOT CA certs:
  191. #define dwVALIDITYPERIODCOUNTDEFAULT_ROOT 5
  193. // Default validity periods for certs issued by a CA:
  194. #define dwVALIDITYPERIODCOUNTDEFAULT_ENTERPRISE 2
  195. #define dwVALIDITYPERIODCOUNTDEFAULT_STANDALONE 1
  196. #define dwVALIDITYPERIODENUMDEFAULT       ENUM_PERIOD_YEARS
  197. #define wszVALIDITYPERIODSTRINGDEFAULT       wszPERIODYEARS
  199. #define dwCAXCHGVALIDITYPERIODCOUNTDEFAULT    1
  200. #define dwCAXCHGVALIDITYPERIODENUMDEFAULT     ENUM_PERIOD_WEEKS
  201. #define wszCAXCHGVALIDITYPERIODSTRINGDEFAULT  wszPERIODWEEKS
  203. #define dwCAXCHGOVERLAPPERIODCOUNTDEFAULT     1
  204. #define dwCAXCHGOVERLAPPERIODENUMDEFAULT      ENUM_PERIOD_DAYS
  205. #define wszCAXCHGOVERLAPPERIODSTRINGDEFAULT   wszPERIODDAYS
  207. #define dwCRLPERIODCOUNTDEFAULT       1
  208. #define wszCRLPERIODSTRINGDEFAULT       wszPERIODWEEKS
  210. #define dwCRLOVERLAPPERIODCOUNTDEFAULT       0 // 0 --> disabled
  211. #define wszCRLOVERLAPPERIODSTRINGDEFAULT      wszPERIODHOURS
  213. #define dwCRLDELTAPERIODCOUNTDEFAULT          1
  214. #define wszCRLDELTAPERIODSTRINGDEFAULT        wszPERIODDAYS
  216. #define dwCRLDELTAOVERLAPPERIODCOUNTDEFAULT   0 // 0 --> disabled
  217. #define wszCRLDELTAOVERLAPPERIODSTRINGDEFAULT wszPERIODMINUTES
  220. // Values for wszREGLOGLEVEL:
  221. #define CERTLOG_MINIMAL (DWORD) 0
  222. #define CERTLOG_TERSE (DWORD) 1
  223. #define CERTLOG_ERROR (DWORD) 2
  224. #define CERTLOG_WARNING (DWORD) 3
  225. #define CERTLOG_VERBOSE (DWORD) 4
  228. // Values for wszREGSETUPSTATUS:
  229. #define SETUP_SERVER_FLAG 0x00000001 // server installed
  230. #define SETUP_CLIENT_FLAG 0x00000002 // client installed
  231. #define SETUP_SUSPEND_FLAG 0x00000004 // incomplete install
  232. #define SETUP_REQUEST_FLAG 0x00000008 // new cert requested
  233. #define SETUP_ONLINE_FLAG 0x00000010 // requested online
  234. #define SETUP_DENIED_FLAG 0x00000020 // request denied
  235. #define SETUP_CREATEDB_FLAG 0x00000040 // create new DB
  236. #define SETUP_ATTEMPT_VROOT_CREATE 0x00000080 // try to create vroots
  237. #define SETUP_FORCECRL_FLAG      0x00000100 // force new CRL(s)
  238. #define SETUP_UPDATE_CAOBJECT_SVRTYPE      0x00000200 // add server type to CA DS object "flags" attr
  239. #define SETUP_SERVER_UPGRADED_FLAG      0x00000400 // server was upgraded
  240. #define SETUP_W2K_SECURITY_NOT_UPGRADED_FLAG 0x00000800 // still need to upgrade security
  242. // Values for wszREGCRLFLAGS:
  243. #define CRLF_DELTA_USE_OLDEST_UNEXPIRED_BASE 0x00000001 // use oldest base:
  244. // else use newest base CRL that satisfies base CRL propagation delay
  246. #define CRLF_DELETE_EXPIRED_CRLS 0x00000002
  247. #define CRLF_CRLNUMBER_CRITICAL 0x00000004
  248. #define CRLF_REVCHECK_IGNORE_OFFLINE 0x00000008
  249. #define CRLF_IGNORE_INVALID_POLICIES 0x00000010
  250. #define CRLF_REBUILD_MODIFIED_SUBJECT_ONLY 0x00000020
  251. #define CRLF_SAVE_FAILED_CERTS 0x00000040
  252. #define CRLF_IGNORE_UNKNOWN_CMC_ATTRIBUTES 0x00000080
  253. #define CRLF_ACCEPT_OLDRFC_CMC 0x00000100
  254. #define CRLF_PUBLISH_EXPIRED_CERT_CRLS 0x00000200
  256. // Values for wszREGKRAFLAGS:
  257. #define KRAF_ENABLEFOREIGN 0x00000001 // allow foreign cert, key archival
  258. #define KRAF_SAVEBADREQUESTKEY 0x00000002 // save failed request w/archived key
  260. // Values for numeric prefixes for
  261. // wszREGCRLPUBLICATIONURLS and wszREGCACERTPUBLICATIONURLS:
  262. //
  263. // URL publication template Flags values, encoded as a decimal prefix for URL
  264. // publication templates in the registry:
  265. //   "1:c:winntSystem32CertSrvCertEnrollMyCA.crl"
  266. //   "2:http://MyServer.MyDomain.com/CertEnrollMyCA.crl"
  268. #define CSURL_SERVERPUBLISH 0x00000001
  269. #define CSURL_ADDTOCERTCDP 0x00000002
  270. #define CSURL_ADDTOFRESHESTCRL 0x00000004
  271. #define CSURL_ADDTOCRLCDP 0x00000008
  272. #define CSURL_PUBLISHRETRY 0x00000010
  273. #define CSURL_ADDTOCERTOCSP 0x00000020
  274. //======================================================================
  275. // Keys Under "CertSvcConfiguration<CAName>":
  276. #define wszREGKEYCSP TEXT("CSP")
  277. #define wszREGKEYENCRYPTIONCSP TEXT("EncryptionCSP")
  278. #define wszREGKEYEXITMODULES TEXT("ExitModules")
  279. #define wszREGKEYPOLICYMODULES         TEXT("PolicyModules")
  280. #define wszSECUREDATTRIBUTES TEXT("SignedAttributes")
  282. #define wszzDEFAULTSIGNEDATTRIBUTES     TEXT("RequesterName")
  284. //======================================================================
  285. // Values Under "CertSvcConfigurationRestoreInProgress":
  286. #define wszREGBACKUPLOGDIRECTORY TEXT("BackupLogDirectory")
  287. #define wszREGCHECKPOINTFILE TEXT("CheckPointFile")
  288. #define wszREGHIGHLOGNUMBER TEXT("HighLogNumber")
  289. #define wszREGLOWLOGNUMBER TEXT("LowLogNumber")
  290. #define wszREGLOGPATH TEXT("LogPath")
  291. #define wszREGRESTOREMAPCOUNT TEXT("RestoreMapCount")
  292. #define wszREGRESTOREMAP TEXT("RestoreMap")
  293. #define wszREGDATABASERECOVERED TEXT("DatabaseRecovered")
  294. #define wszREGRESTORESTATUS TEXT("RestoreStatus")
  296. // values under ConfigurationPolicyModules in nt5 beta 2
  297. #define wszREGB2ICERTMANAGEMODULE   TEXT("ICertManageModule")
  298. // values under Configuration in nt4 sp4
  299. #define wszREGSP4DEFAULTCONFIGURATION  TEXT("DefaultConfiguration")
  300. // values under ca in nt4 sp4
  301. #define wszREGSP4KEYSETNAME            TEXT("KeySetName")
  302. #define wszREGSP4SUBJECTNAMESEPARATOR  TEXT("SubjectNameSeparator")
  303. #define wszREGSP4NAMES                 TEXT("Names")
  304. #define wszREGSP4QUERIES               TEXT("Queries")
  305. // both nt4 sp4 and nt5 beta 2
  306. #define wszREGNETSCAPECERTTYPE         TEXT("NetscapeCertType")
  307. #define wszNETSCAPEREVOCATIONTYPE      TEXT("Netscape")
  310. //======================================================================
  311. // Values Under "CertSvcConfiguration<CAName>CSP":
  312. // and "CertSvcConfiguration<CAName>EncryptionCSP":
  313. #define wszREGPROVIDERTYPE     TEXT("ProviderType")
  314. #define wszREGPROVIDER         TEXT("Provider")
  315. #define wszHASHALGORITHM       TEXT("HashAlgorithm")
  316. #define wszENCRYPTIONALGORITHM TEXT("EncryptionAlgorithm")
  317. #define wszMACHINEKEYSET       TEXT("MachineKeyset")
  318. #define wszREGKEYSIZE        TEXT("KeySize")
  321. //======================================================================
  322. // Value strings for "CertSvcConfiguration<CAName>SubjectNameSeparator":
  323. #define szNAMESEPARATORDEFAULT   "n"
  324. #define wszNAMESEPARATORDEFAULT   TEXT(szNAMESEPARATORDEFAULT)
  327. //======================================================================
  328. // Value strings for "CertSvcConfiguration<CAName>ValidityPeriod", etc.:
  329. #define wszPERIODYEARS TEXT("Years")
  330. #define wszPERIODMONTHS TEXT("Months")
  331. #define wszPERIODWEEKS TEXT("Weeks")
  332. #define wszPERIODDAYS TEXT("Days")
  333. #define wszPERIODHOURS TEXT("Hours")
  334. #define wszPERIODMINUTES TEXT("Minutes")
  335. #define wszPERIODSECONDS TEXT("Seconds")
  337. //======================================================================
  338. // Values Under "CertSvcConfiguration<CAName>PolicyModules<ProgId>":
  339. #define wszREGISSUERCERTURLFLAGS    TEXT("IssuerCertURLFlags")
  340. #define wszREGEDITFLAGS     TEXT("EditFlags")
  341. #define wszREGSUBJECTALTNAME     TEXT("SubjectAltName")
  342. #define wszREGSUBJECTALTNAME2     TEXT("SubjectAltName2")
  343. #define wszREGREQUESTDISPOSITION    TEXT("RequestDisposition")
  344. #define wszREGCAPATHLENGTH     TEXT("CAPathLength")
  345. #define wszREGREVOCATIONTYPE     TEXT("RevocationType")
  347. #define wszREGLDAPREVOCATIONCRLURL_OLD TEXT("LDAPRevocationCRLURL")
  348. #define wszREGREVOCATIONCRLURL_OLD TEXT("RevocationCRLURL")
  349. #define wszREGFTPREVOCATIONCRLURL_OLD TEXT("FTPRevocationCRLURL")
  350. #define wszREGFILEREVOCATIONCRLURL_OLD TEXT("FileRevocationCRLURL")
  352. #define wszREGREVOCATIONURL TEXT("RevocationURL")
  354. #define wszREGLDAPISSUERCERTURL_OLD TEXT("LDAPIssuerCertURL")
  355. #define wszREGISSUERCERTURL_OLD TEXT("IssuerCertURL")
  356. #define wszREGFTPISSUERCERTURL_OLD TEXT("FTPIssuerCertURL")
  357. #define wszREGFILEISSUERCERTURL_OLD TEXT("FileIssuerCertURL")
  359. #define wszREGENABLEREQUESTEXTENSIONLIST  TEXT("EnableRequestExtensionList")
  360. #define wszREGDISABLEEXTENSIONLIST  TEXT("DisableExtensionList")
  362. #define wszREGDEFAULTSMIME TEXT("DefaultSMIME")
  364. // wszREGCAPATHLENGTH Values:
  365. #define CAPATHLENGTH_INFINITE 0xffffffff
  367. // wszREGREQUESTDISPOSITION Values:
  368. #define REQDISP_PENDING 0x00000000
  369. #define REQDISP_ISSUE 0x00000001
  370. #define REQDISP_DENY 0x00000002
  371. #define REQDISP_USEREQUESTATTRIBUTE 0x00000003
  372. #define REQDISP_MASK 0x000000ff
  373. #define REQDISP_PENDINGFIRST 0x00000100
  374. #define REQDISP_DEFAULT_STANDALONE (REQDISP_PENDINGFIRST | REQDISP_ISSUE)
  375. #define REQDISP_DEFAULT_ENTERPRISE (REQDISP_ISSUE)
  377. // wszREGREVOCATIONTYPE Values:
  378. #define REVEXT_CDPLDAPURL_OLD 0x00000001
  379. #define REVEXT_CDPHTTPURL_OLD 0x00000002
  380. #define REVEXT_CDPFTPURL_OLD 0x00000004
  381. #define REVEXT_CDPFILEURL_OLD 0x00000008
  382. #define REVEXT_CDPURLMASK_OLD 0x000000ff
  383. #define REVEXT_CDPENABLE 0x00000100
  384. #define REVEXT_ASPENABLE 0x00000200
  386. #define REVEXT_DEFAULT_NODS (REVEXT_CDPENABLE)
  387. #define REVEXT_DEFAULT_DS (REVEXT_CDPENABLE)
  389. // wszREGISSUERCERTURLFLAGS Values:
  390. #define ISSCERT_LDAPURL_OLD 0x00000001
  391. #define ISSCERT_HTTPURL_OLD 0x00000002
  392. #define ISSCERT_FTPURL_OLD 0x00000004
  393. #define ISSCERT_FILEURL_OLD 0x00000008
  394. #define ISSCERT_URLMASK_OLD 0x000000ff
  395. #define ISSCERT_ENABLE 0x00000100
  397. #define ISSCERT_DEFAULT_NODS (ISSCERT_ENABLE)
  398. #define ISSCERT_DEFAULT_DS (ISSCERT_ENABLE)
  400. // wszREGEDITFLAGS Values:    Defaults:
  401. // Under CA key: wszREGCRLEDITFLAGS Values (EDITF_ENABLEAKI* only):
  402. #define EDITF_ENABLEREQUESTEXTENSIONS 0x00000001 // neither
  403. #define EDITF_REQUESTEXTENSIONLIST 0x00000002 // Standalone
  404. #define EDITF_DISABLEEXTENSIONLIST 0x00000004 // both
  405. #define EDITF_ADDOLDKEYUSAGE 0x00000008 // both
  406. #define EDITF_ADDOLDCERTTYPE 0x00000010 // neither
  407. #define EDITF_ATTRIBUTEENDDATE 0x00000020 // Standalone
  408. #define EDITF_BASICCONSTRAINTSCRITICAL 0x00000040 // Standalone
  409. #define EDITF_BASICCONSTRAINTSCA 0x00000080 // Standalone
  410. #define EDITF_ENABLEAKIKEYID 0x00000100 // both
  411. #define EDITF_ATTRIBUTECA 0x00000200 // Standalone
  412. #define EDITF_IGNOREREQUESTERGROUP      0x00000400 // Standalone
  413. #define EDITF_ENABLEAKIISSUERNAME 0x00000800 // both
  414. #define EDITF_ENABLEAKIISSUERSERIAL 0x00001000 // both
  415. #define EDITF_ENABLEAKICRITICAL 0x00002000 // both
  416. #define EDITF_SERVERUPGRADED 0x00004000 // neither
  417. #define EDITF_ATTRIBUTEEKU 0x00008000 // Standalone
  418. #define EDITF_ENABLEDEFAULTSMIME 0x00010000 // Enterprise
  420. #define EDITF_DEFAULT_STANDALONE (EDITF_REQUESTEXTENSIONLIST | 
  421.  EDITF_DISABLEEXTENSIONLIST | 
  422.  EDITF_ADDOLDKEYUSAGE | 
  423.  EDITF_ATTRIBUTEENDDATE | 
  424.  EDITF_BASICCONSTRAINTSCRITICAL | 
  425.  EDITF_BASICCONSTRAINTSCA | 
  426.  EDITF_ENABLEAKIKEYID | 
  427.  EDITF_ATTRIBUTECA | 
  428.  EDITF_ATTRIBUTEEKU)
  430. #define EDITF_DEFAULT_ENTERPRISE (EDITF_REQUESTEXTENSIONLIST | 
  431.  EDITF_DISABLEEXTENSIONLIST | 
  432.                                          EDITF_BASICCONSTRAINTSCRITICAL | 
  433.                                          EDITF_ENABLEAKIKEYID | 
  434.  EDITF_ADDOLDKEYUSAGE | 
  435.  EDITF_ENABLEDEFAULTSMIME)
  438. //======================================================================
  439. // Values Under "CertSvcConfiguration<CAName>ExitModules<ProgId>":
  441. // LDAP based CRL and URL issuance
  442. #define wszREGLDAPREVOCATIONDN_OLD    TEXT("LDAPRevocationDN")
  443. #define wszREGLDAPREVOCATIONDNTEMPLATE_OLD TEXT("LDAPRevocationDNTemplate")
  444. #define wszCRLPUBLISHRETRYCOUNT    TEXT("CRLPublishRetryCount")
  445. #define wszREGCERTPUBLISHFLAGS     TEXT("PublishCertFlags")
  447. // wszREGCERTPUBLISHFLAGS Values:
  448. #define EXITPUB_FILE 0x00000001
  449. #define EXITPUB_ACTIVEDIRECTORY 0x00000002
  450. #define EXITPUB_EMAILNOTIFYALL 0x00000004
  451. #define EXITPUB_EMAILNOTIFYSMARTCARD 0x00000008
  452. #define EXITPUB_REMOVEOLDCERTS 0x00000010
  454. #define EXITPUB_DEFAULT_ENTERPRISE EXITPUB_ACTIVEDIRECTORY
  456. #define EXITPUB_DEFAULT_STANDALONE EXITPUB_FILE
  459. #define wszCLASS_CERTADMIN   TEXT("CertificateAuthority.Admin")
  460. #define wszCLASS_CERTCONFIG   TEXT("CertificateAuthority.Config")
  461. #define wszCLASS_CERTGETCONFIG   TEXT("CertificateAuthority.GetConfig")
  462. #define wszCLASS_CERTENCODE   TEXT("CertificateAuthority.Encode")
  463. #define wszCLASS_CERTREQUEST   TEXT("CertificateAuthority.Request")
  464. #define wszCLASS_CERTSERVEREXIT   TEXT("CertificateAuthority.ServerExit")
  465. #define wszCLASS_CERTSERVERPOLICY TEXT("CertificateAuthority.ServerPolicy")
  466. #define wszCLASS_CERTVIEW   TEXT("CertificateAuthority.View")
  468. // class name templates
  469. #define wszMICROSOFTCERTMODULE_PREFIX  TEXT("CertificateAuthority_MicrosoftDefault") 
  470. #define wszCERTEXITMODULE_POSTFIX TEXT(".Exit")
  471. #define wszCERTMANAGEEXIT_POSTFIX TEXT(".ExitManage")
  472. #define wszCERTPOLICYMODULE_POSTFIX TEXT(".Policy")
  473. #define wszCERTMANAGEPOLICY_POSTFIX TEXT(".PolicyManage")
  475. // actual policy/exit manage class names
  476. #define wszCLASS_CERTMANAGEEXITMODULE   wszMICROSOFTCERTMODULE_PREFIX wszCERTMANAGEEXIT_POSTFIX 
  478. #define wszCLASS_CERTMANAGEPOLICYMODULE wszMICROSOFTCERTMODULE_PREFIX wszCERTMANAGEPOLICY_POSTFIX 
  480. // actual policy/exit class names
  481. #define wszCLASS_CERTEXIT wszMICROSOFTCERTMODULE_PREFIX wszCERTEXITMODULE_POSTFIX
  483. #define wszCLASS_CERTPOLICY wszMICROSOFTCERTMODULE_PREFIX wszCERTPOLICYMODULE_POSTFIX
  486. #define wszCAPOLICYFILE L"CAPolicy.inf"
  488. #define wszINFSECTION_CDP L"CRLDistributionPoint"
  489. #define wszINFSECTION_AIA L"AuthorityInformationAccess"
  490. #define wszINFSECTION_EKU L"EnhancedKeyUsageExtension"
  491. #define wszINFSECTION_CCDP L"CrossCertificateDistributionPointsExtension"
  493. #define wszINFSECTION_CERTSERVER L"certsrv_server"
  494. #define wszINFKEY_RENEWALKEYLENGTH L"RenewalKeyLength"
  495. #define wszINFKEY_RENEWALVALIDITYPERIODSTRING L"RenewalValidityPeriod"
  496. #define wszINFKEY_RENEWALVALIDITYPERIODCOUNT L"RenewalValidityPeriodUnits"
  497. #define wszINFKEY_UTF8 L"UTF8"
  498. #define wszINFKEY_CRLPERIODSTRING wszREGCRLPERIODSTRING
  499. #define wszINFKEY_CRLPERIODCOUNT wszREGCRLPERIODCOUNT
  500. #define wszINFKEY_CRLDELTAPERIODSTRING wszREGCRLDELTAPERIODSTRING
  501. #define wszINFKEY_CRLDELTAPERIODCOUNT wszREGCRLDELTAPERIODCOUNT
  503. #define wszINFKEY_CRITICAL L"Critical"
  504. #define wszINFKEY_EMPTY L"Empty"
  506. #define wszINFKEY_CCDPSYNCDELTATIME L"SyncDeltaTime"
  508. #define wszINFSECTION_CAPOLICY L"CAPolicy"
  509. #define wszINFSECTION_POLICYSTATEMENT L"PolicyStatementExtension"
  510. #define wszINFSECTION_APPLICATIONPOLICYSTATEMENT L"ApplicationPolicyStatementExtension"
  511. #define wszINFKEY_POLICIES L"Policies"
  512. #define wszINFKEY_OID L"OID"
  513. #define wszINFKEY_NOTICE L"Notice"
  515. #define wszINFSECTION_REQUESTATTRIBUTES L"RequestAttributes"
  517. #define wszINFSECTION_NAMECONSTRAINTS L"NameConstraintsExtension"
  518. #define wszINFKEY_INCLUDE L"Include"
  519. #define wszINFKEY_EXCLUDE L"Exclude"
  521. #define wszINFKEY_UPN L"UPN"
  522. #define wszINFKEY_EMAIL L"EMail"
  523. #define wszINFKEY_DNS L"DNS"
  524. #define wszINFKEY_DIRECTORYNAME L"DirectoryName"
  525. #define wszINFKEY_URL L"URL"
  526. #define wszINFKEY_IPADDRESS L"IPAddress"
  527. #define wszINFKEY_REGISTEREDID L"RegisteredId"
  529. #define wszINFSECTION_POLICYMAPPINGS L"PolicyMappingsExtension"
  530. #define wszINFSECTION_APPLICATIONPOLICYMAPPINGS L"ApplicationPolicyMappingsExtension"
  532. #define wszINFSECTION_POLICYCONSTRAINTS L"PolicyConstraintsExtension"
  533. #define wszINFSECTION_APPLICATIONPOLICYCONSTRAINTS L"ApplicationPolicyConstraintsExtension"
  534. #define wszINFKEY_REQUIREEXPLICITPOLICY L"RequireExplicitPolicy"
  535. #define wszINFKEY_INHIBITPOLICYMAPPING L"InhibitPolicyMapping"
  537. #define wszINFSECTION_BASICCONSTRAINTS L"BasicConstraintsExtension"
  538. #define wszINFKEY_PATHLENGTH L"PathLength"
  541. // exit module mail support
  542. #define wszREGEXITSMTPKEY L"SMTP"
  543. #define wszREGEXITSMTPFROM L"From"
  544. #define wszREGEXITSMTPCC L"CC"
  545. #define wszREGEXITSMTPSUBJECT L"Subject"
  548. //+--------------------------------------------------------------------------
  549. // Name properties:
  551. #define wszPROPDISTINGUISHEDNAME   TEXT("DistinguishedName")
  552. #define wszPROPRAWNAME             TEXT("RawName")
  554. #define wszPROPCOUNTRY             TEXT("Country")
  555. #define wszPROPORGANIZATION        TEXT("Organization")
  556. #define wszPROPORGUNIT             TEXT("OrgUnit")
  557. #define wszPROPCOMMONNAME          TEXT("CommonName")
  558. #define wszPROPLOCALITY            TEXT("Locality")
  559. #define wszPROPSTATE               TEXT("State")
  560. #define wszPROPTITLE               TEXT("Title")
  561. #define wszPROPGIVENNAME           TEXT("GivenName")
  562. #define wszPROPINITIALS            TEXT("Initials")
  563. #define wszPROPSURNAME             TEXT("SurName")
  564. #define wszPROPDOMAINCOMPONENT     TEXT("DomainComponent")
  565. #define wszPROPEMAIL               TEXT("EMail")
  566. #define wszPROPSTREETADDRESS       TEXT("StreetAddress")
  567. #define wszPROPUNSTRUCTUREDNAME    TEXT("UnstructuredName")
  568. #define wszPROPUNSTRUCTUREDADDRESS TEXT("UnstructuredAddress")
  569. #define wszPROPDEVICESERIALNUMBER  TEXT("DeviceSerialNumber")
  571. //+--------------------------------------------------------------------------
  572. // Subject Name properties:
  574. #define wszPROPSUBJECTDOT     TEXT("Subject.")
  575. #define wszPROPSUBJECTDISTINGUISHEDNAME 
  576.     wszPROPSUBJECTDOT wszPROPDISTINGUISHEDNAME
  577. #define wszPROPSUBJECTRAWNAME       wszPROPSUBJECTDOT wszPROPRAWNAME
  579. #define wszPROPSUBJECTCOUNTRY       wszPROPSUBJECTDOT wszPROPCOUNTRY
  580. #define wszPROPSUBJECTORGANIZATION  wszPROPSUBJECTDOT wszPROPORGANIZATION
  581. #define wszPROPSUBJECTORGUNIT       wszPROPSUBJECTDOT wszPROPORGUNIT
  582. #define wszPROPSUBJECTCOMMONNAME    wszPROPSUBJECTDOT wszPROPCOMMONNAME
  583. #define wszPROPSUBJECTLOCALITY      wszPROPSUBJECTDOT wszPROPLOCALITY
  584. #define wszPROPSUBJECTSTATE         wszPROPSUBJECTDOT wszPROPSTATE
  585. #define wszPROPSUBJECTTITLE     wszPROPSUBJECTDOT wszPROPTITLE
  586. #define wszPROPSUBJECTGIVENNAME     wszPROPSUBJECTDOT wszPROPGIVENNAME
  587. #define wszPROPSUBJECTINITIALS     wszPROPSUBJECTDOT wszPROPINITIALS
  588. #define wszPROPSUBJECTSURNAME     wszPROPSUBJECTDOT wszPROPSURNAME
  589. #define wszPROPSUBJECTDOMAINCOMPONENT wszPROPSUBJECTDOT wszPROPDOMAINCOMPONENT
  590. #define wszPROPSUBJECTEMAIL     wszPROPSUBJECTDOT wszPROPEMAIL
  591. #define wszPROPSUBJECTSTREETADDRESS wszPROPSUBJECTDOT wszPROPSTREETADDRESS
  592. #define wszPROPSUBJECTUNSTRUCTUREDNAME wszPROPSUBJECTDOT wszPROPUNSTRUCTUREDNAME
  593. #define wszPROPSUBJECTUNSTRUCTUREDADDRESS wszPROPSUBJECTDOT wszPROPUNSTRUCTUREDADDRESS
  594. #define wszPROPSUBJECTDEVICESERIALNUMBER wszPROPSUBJECTDOT wszPROPDEVICESERIALNUMBER
  597. //+--------------------------------------------------------------------------
  598. // Request properties:
  599. #define wszPROPREQUESTDOT             TEXT("Request.")
  601. #define wszPROPREQUESTREQUESTID     TEXT("RequestID")
  602. #define wszPROPREQUESTRAWREQUEST     TEXT("RawRequest")
  603. #define wszPROPREQUESTRAWARCHIVEDKEY     TEXT("RawArchivedKey")
  604. #define wszPROPREQUESTKEYRECOVERYHASHES     TEXT("KeyRecoveryHashes")
  605. #define wszPROPREQUESTRAWOLDCERTIFICATE     TEXT("RawOldCertificate")
  606. #define wszPROPREQUESTATTRIBUTES     TEXT("RequestAttributes")
  607. #define wszPROPREQUESTTYPE     TEXT("RequestType")
  608. #define wszPROPREQUESTFLAGS     TEXT("RequestFlags")
  609. #define wszPROPREQUESTSTATUSCODE     TEXT("StatusCode")
  610. #define wszPROPREQUESTDISPOSITION     TEXT("Disposition")
  611. #define wszPROPREQUESTDISPOSITIONMESSAGE    TEXT("DispositionMessage")
  612. #define wszPROPREQUESTSUBMITTEDWHEN     TEXT("SubmittedWhen")
  613. #define wszPROPREQUESTRESOLVEDWHEN     TEXT("ResolvedWhen")
  614. #define wszPROPREQUESTREVOKEDWHEN     TEXT("RevokedWhen")
  615. #define wszPROPREQUESTREVOKEDEFFECTIVEWHEN  TEXT("RevokedEffectiveWhen")
  616. #define wszPROPREQUESTREVOKEDREASON     TEXT("RevokedReason")
  617. #define wszPROPREQUESTERNAME     TEXT("RequesterName")
  618. #define wszPROPCALLERNAME     TEXT("CallerName")
  619. #define wszPROPSIGNERPOLICIES     TEXT("SignerPolicies")
  620. #define wszPROPSIGNERAPPLICATIONPOLICIES    TEXT("SignerApplicationPolicies")
  622. //+--------------------------------------------------------------------------
  623. // Request attribute properties:
  625. #define wszPROPCHALLENGE TEXT("Challenge")
  626. #define wszPROPEXPECTEDCHALLENGE TEXT("ExpectedChallenge")
  628. #define wszPROPDISPOSITION TEXT("Disposition")
  629. #define wszPROPDISPOSITIONDENY TEXT("Deny")
  630. #define wszPROPDISPOSITIONPENDING TEXT("Pending")
  632. #define wszPROPVALIDITYPERIODSTRING TEXT("ValidityPeriod")
  633. #define wszPROPVALIDITYPERIODCOUNT TEXT("ValidityPeriodUnits")
  635. #define wszPROPCERTTYPE TEXT("CertType")
  636. #define wszPROPCERTTEMPLATE TEXT("CertificateTemplate")
  637. #define wszPROPCERTUSAGE TEXT("CertificateUsage")
  639. #define wszPROPREQUESTOSVERSION TEXT("RequestOSVersion")
  640. #define wszPROPREQUESTCSPPROVIDER       TEXT("RequestCSPProvider")
  642. #define wszPROPEXITCERTFILE TEXT("CertFile")
  643. #define wszPROPCLIENTBROWSERMACHINE TEXT("cbm")
  644. #define wszPROPCERTCLIENTMACHINE TEXT("ccm")
  647. //+--------------------------------------------------------------------------
  648. // "System" properties
  649. // ".#" means ".0", ".1", ".2" ... may be appended to the property name to
  650. // collect context specific values.  For some properties, the suffix selects
  651. // the CA certificate context.  For others, it selects the the CA CRL context.
  653. #define wszPROPCATYPE                   TEXT("CAType")
  654. #define wszPROPSANITIZEDCANAME          TEXT("SanitizedCAName")
  655. #define wszPROPSANITIZEDSHORTNAME       TEXT("SanitizedShortName")
  656. #define wszPROPMACHINEDNSNAME           TEXT("MachineDNSName")
  657. #define wszPROPMODULEREGLOC             TEXT("ModuleRegistryLocation")
  658. #define wszPROPUSEDS                    TEXT("fUseDS")
  659. #define wszPROPSERVERUPGRADED           TEXT("fServerUpgraded")
  660. #define wszPROPCONFIGDN TEXT("ConfigDN")
  661. #define wszPROPDOMAINDN TEXT("DomainDN")
  662. #define wszPROPLOGLEVEL TEXT("LogLevel")
  664. // Request Context properties:
  666. #define wszPROPREQUESTERCAACCESS TEXT("RequesterCAAccess")
  667. #define wszPROPUSERDN TEXT("UserDN")
  668. #define wszPROPTEMPLATECHANGESEQUENCENUMBER     TEXT("TemplateChangeSequenceNumber")
  671. // CA Certificate properties: (all ".#" extensible except wszPROPCERTCOUNT)
  673. #define wszPROPCERTCOUNT                TEXT("CertCount")
  674. #define wszPROPRAWCACERTIFICATE         TEXT("RawCACertificate")
  675. #define wszPROPCERTSTATE                TEXT("CertState")
  676. #define wszPROPCERTSUFFIX               TEXT("CertSuffix")
  678. // CA CRL properties: (all ".#" extensible)
  680. #define wszPROPRAWCRL                   TEXT("RawCRL")
  681. #define wszPROPRAWDELTACRL              TEXT("RawDeltaCRL")
  682. #define wszPROPCRLINDEX                 TEXT("CRLIndex")
  683. #define wszPROPCRLSTATE                 TEXT("CRLState")
  684. #define wszPROPCRLSUFFIX                TEXT("CRLSuffix")
  686. // Values for wszPROPCERTSTATE (see certadm.h):
  687. //   CA_DISP_REVOKED    // This Cert has been revoked.
  688. //   CA_DISP_VALID      // This Cert is still valid
  689. //   CA_DISP_INVALID    // This Cert has expired.
  690. //   CA_DISP_ERROR      // Cert unavailable (placehholder in registry?)
  692. // Values for wszPROPCRLSTATE (see certadm.h):
  693. //   CA_DISP_REVOKED // All unexpired certs using this Cert's CRL have been
  694. // // revoked.
  695. //   CA_DISP_VALID // This Cert is still publishing CRLs as needed.
  696. //   CA_DISP_INVALID    // All certs using this Cert's CRL are expired.
  697. //   CA_DISP_ERROR      // This Cert's CRL is managed by another Cert.
  699. // "Settable" system properties:
  700. #define wszPROPEVENTLOGTERSE TEXT("EventLogTerse")
  701. #define wszPROPEVENTLOGERROR TEXT("EventLogError")
  702. #define wszPROPEVENTLOGWARNING TEXT("EventLogWarning")
  703. #define wszPROPEVENTLOGVERBOSE TEXT("EventLogVerbose")
  705. //+--------------------------------------------------------------------------
  706. // Certificate properties:
  708. #define wszPROPCERTIFICATEREQUESTID        TEXT("RequestID")
  709. #define wszPROPRAWCERTIFICATE        TEXT("RawCertificate")
  710. #define wszPROPCERTIFICATEHASH        TEXT("CertificateHash")
  711. #define wszPROPCERTIFICATETEMPLATE        TEXT("CertificateTemplate")
  712. #define wszPROPCERTIFICATEENROLLMENTFLAGS      TEXT("EnrollmentFlags")
  713. #define wszPROPCERTIFICATEGENERALFLAGS         TEXT("GeneralFlags")
  714. #define wszPROPCERTIFICATESERIALNUMBER        TEXT("SerialNumber")
  715. #define wszPROPCERTIFICATENOTBEFOREDATE        TEXT("NotBefore")
  716. #define wszPROPCERTIFICATENOTAFTERDATE        TEXT("NotAfter")
  717. #define wszPROPCERTIFICATESUBJECTKEYIDENTIFIER TEXT("SubjectKeyIdentifier")
  718. #define wszPROPCERTIFICATERAWPUBLICKEY        TEXT("RawPublicKey")
  719. #define wszPROPCERTIFICATEPUBLICKEYLENGTH      TEXT("PublicKeyLength")
  720. #define wszPROPCERTIFICATEPUBLICKEYALGORITHM   TEXT("PublicKeyAlgorithm")
  721. #define wszPROPCERTIFICATERAWPUBLICKEYALGORITHMPARAMETERS 
  722.     TEXT("RawPublicKeyAlgorithmParameters")
  723. #define wszPROPCERTIFICATEUPN        TEXT("UPN")
  725. // Obsolete:
  726. #define wszPROPCERTIFICATETYPE        TEXT("CertificateType")
  727. #define wszPROPCERTIFICATERAWSMIMECAPABILITIES TEXT("RawSMIMECapabilities")
  728. #define wszPROPNAMETYPE        TEXT("NameType")
  730. //+--------------------------------------------------------------------------
  731. // Certificate extension properties:
  733. #define EXTENSION_CRITICAL_FLAG       0x00000001
  734. #define EXTENSION_DISABLE_FLAG       0x00000002
  735. #define EXTENSION_POLICY_MASK       0x0000ffff // Settable by admin+policy
  737. #define EXTENSION_ORIGIN_REQUEST      0x00010000
  738. #define EXTENSION_ORIGIN_POLICY       0x00020000
  739. #define EXTENSION_ORIGIN_ADMIN       0x00030000
  740. #define EXTENSION_ORIGIN_SERVER       0x00040000
  741. #define EXTENSION_ORIGIN_RENEWALCERT  0x00050000
  742. #define EXTENSION_ORIGIN_IMPORTEDCERT 0x00060000
  743. #define EXTENSION_ORIGIN_PKCS7       0x00070000
  744. #define EXTENSION_ORIGIN_CMC       0x00080000
  745. #define EXTENSION_ORIGIN_MASK       0x000f0000
  747. //+--------------------------------------------------------------------------
  748. // Extension properties:
  750. #define wszPROPEXTREQUESTID TEXT("ExtensionRequestId")
  751. #define wszPROPEXTNAME TEXT("ExtensionName")
  752. #define wszPROPEXTFLAGS TEXT("ExtensionFlags")
  753. #define wszPROPEXTRAWVALUE TEXT("ExtensionRawValue")
  755. //+--------------------------------------------------------------------------
  756. // Attribute properties:
  758. #define wszPROPATTRIBREQUESTID TEXT("AttributeRequestId")
  759. #define wszPROPATTRIBNAME TEXT("AttributeName")
  760. #define wszPROPATTRIBVALUE TEXT("AttributeValue")
  762. //+--------------------------------------------------------------------------
  763. // CRL properties:
  765. #define wszPROPCRLROWID TEXT("CRLRowId")
  766. #define wszPROPCRLNUMBER TEXT("CRLNumber")
  767. #define wszPROPCRLMINBASE TEXT("CRLMinBase") // Delta CRLs only
  768. #define wszPROPCRLNAMEID TEXT("CRLNameId")
  769. #define wszPROPCRLCOUNT TEXT("CRLCount")
  770. #define wszPROPCRLTHISUPDATE TEXT("CRLThisUpdate")
  771. #define wszPROPCRLNEXTUPDATE TEXT("CRLNextUpdate")
  772. #define wszPROPCRLTHISPUBLISH TEXT("CRLThisPublish")
  773. #define wszPROPCRLNEXTPUBLISH TEXT("CRLNextPublish")
  774. #define wszPROPCRLEFFECTIVE TEXT("CRLEffective")
  775. #define wszPROPCRLPROPAGATIONCOMPLETE TEXT("CRLPropagationComplete")
  776. #define wszPROPCRLLASTPUBLISHED TEXT("CRLLastPublished")
  777. #define wszPROPCRLPUBLISHATTEMPTS TEXT("CRLPublishAttempts")
  778. #define wszPROPCRLPUBLISHFLAGS TEXT("CRLPublishFlags")
  779. #define wszPROPCRLPUBLISHSTATUSCODE TEXT("CRLPublishStatusCode")
  780. #define wszPROPCRLPUBLISHERROR TEXT("CRLPublishError")
  781. #define wszPROPCRLRAWCRL TEXT("CRLRawCRL")
  783. //+--------------------------------------------------------------------------
  784. // CRL Published Flags:
  786. #define CPF_BASE 0x00000001
  787. #define CPF_DELTA 0x00000002
  788. #define CPF_COMPLETE 0x00000004
  789. #define CPF_SHADOW 0x00000008
  790. #define CPF_CASTORE_ERROR 0x00000010
  791. #define CPF_BADURL_ERROR 0x00000020
  792. #define CPF_MANUAL 0x00000040
  793. #define CPF_LDAP_ERROR 0x00000100
  794. #define CPF_FILE_ERROR 0x00000200
  795. #define CPF_FTP_ERROR 0x00000400
  796. #define CPF_HTTP_ERROR 0x00000800
  798. //+--------------------------------------------------------------------------
  799. // GetProperty/SetProperty Flags:
  800. //
  801. // Choose one Type
  803. #define PROPTYPE_LONG  0x00000001 // Signed long
  804. #define PROPTYPE_DATE  0x00000002 // Date+Time
  805. #define PROPTYPE_BINARY  0x00000003 // Binary data
  806. #define PROPTYPE_STRING  0x00000004 // Unicode String
  807. #define PROPTYPE_MASK  0x000000ff
  809. // Choose one Caller:
  811. #define PROPCALLER_SERVER  0x00000100
  812. #define PROPCALLER_POLICY  0x00000200
  813. #define PROPCALLER_EXIT  0x00000300
  814. #define PROPCALLER_ADMIN  0x00000400
  815. #define PROPCALLER_REQUEST  0x00000500
  816. #define PROPCALLER_MASK  0x00000f00
  817. #define PROPFLAGS_INDEXED  0x00010000
  819. // RequestFlags definitions:
  821. #define CR_FLG_FORCETELETEX  0x00000001
  822. #define CR_FLG_RENEWAL  0x00000002
  823. #define CR_FLG_FORCEUTF8  0x00000004
  824. #define CR_FLG_CAXCHGCERT  0x00000008
  825. #define CR_FLG_ENROLLONBEHALFOF  0x00000010
  826. #define CR_FLG_SUBJECTUNMODIFIED 0x00000020
  827. #define CR_FLG_OLDRFCCMC  0x40000000 // BUGBUG: temporary!!!
  828. #define CR_FLG_PUBLISHERROR  0x80000000
  830. // Disposition property values:
  832. // Disposition values for requests in the queue:
  833. #define DB_DISP_ACTIVE         8 // being processed
  834. #define DB_DISP_PENDING 9 // taken under submission
  835. #define DB_DISP_QUEUE_MAX 9 // max disposition value for queue view
  837. #define DB_DISP_FOREIGN 12 // archived foreign cert
  839. #define DB_DISP_CA_CERT 15 // CA cert
  840. #define DB_DISP_CA_CERT_CHAIN 16 // CA cert chain
  841. #define DB_DISP_KRA_CERT 17 // KRA cert
  843. // Disposition values for requests in the log:
  844. #define DB_DISP_LOG_MIN 20 // min disposition value for log view
  845. #define DB_DISP_ISSUED 20 // cert issued
  846. #define DB_DISP_REVOKED         21 // issued and revoked
  848. // Disposition values for failed requests in the log:
  849. #define DB_DISP_LOG_FAILED_MIN 30 // min disposition value for log view
  850. #define DB_DISP_ERROR 30 // request failed
  851. #define DB_DISP_DENIED 31 // request denied
  854. // VerifyRequest() return values
  856. #define VR_PENDING 0  // request will be accepted or denied later
  857. #define VR_INSTANT_OK 1  // request was accepted
  858. #define VR_INSTANT_BAD 2  // request was rejected
  861. //+--------------------------------------------------------------------------
  862. // Known request Attribute names and Value strings
  864. // RequestType attribute name:
  865. #define wszCERT_TYPE L"RequestType" // attribute name
  867. // RequestType attribute values:
  868. // Not specified:  // Non-specific certificate
  869. #define wszCERT_TYPE_CLIENT L"Client" // Client authentication cert
  870. #define wszCERT_TYPE_SERVER L"Server" // Server authentication cert
  871. #define wszCERT_TYPE_CODESIGN L"CodeSign" // Code signing certificate
  872. #define wszCERT_TYPE_CUSTOMER L"SetCustomer" // SET Customer certificate
  873. #define wszCERT_TYPE_MERCHANT L"SetMerchant" // SET Merchant certificate
  874. #define wszCERT_TYPE_PAYMENT L"SetPayment" // SET Payment certificate
  877. // Version attribute name:
  878. #define wszCERT_VERSION L"Version" // attribute name
  880. // Version attribute values:
  881. // Not specified:  // Whetever is current
  882. #define wszCERT_VERSION_1 L"1" // Version one certificate
  883. #define wszCERT_VERSION_2 L"2" // Version two certificate
  884. #define wszCERT_VERSION_3 L"3" // Version three certificate
  886. #endif // _CERTSRV_H_