<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
mscrypto searches trusted certificates in the following order:<br>
1) Key manager<br>
2) Logged-in/current user crypro store<br>
3) System crypto store<br>
<br>
So answers to your questions are: <br>
a) no<br>
b) yes<br>
3) yes <br>
<pre class="moz-signature" cols="72">Aleksey
</pre>
<br>
On 6/27/11 12:39 PM, EdShallow wrote:
<blockquote
cite="mid:BANLkTi=WXXc3AgNQOP=GAayvn6KYSfkYhA@mail.gmail.com"
type="cite">
<p>Does mscrypto check the certificate chain on a verify?<br>
a) - does the keysmngr have to be loaded with the trusted
der-encoded certs?<br>
b) - if the trusted certs are already in the MS crypto store,
does this avoid having to loaded the trusted certs in the
keysmngr?<br>
c) - Wil mscrypto throw a verify error if neither a) nor b) is
performed?<br>
Ed</p>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
xmlsec mailing list
<a class="moz-txt-link-abbreviated" href="mailto:xmlsec@aleksey.com">xmlsec@aleksey.com</a>
<a class="moz-txt-link-freetext" href="http://www.aleksey.com/mailman/listinfo/xmlsec">http://www.aleksey.com/mailman/listinfo/xmlsec</a>
</pre>
</blockquote>
</body>
</html>