如何自动安装CA证书

原帖：http://blog.csdn.net/superdiablo/archive/2009/03/14/3990484.aspx

 

安装CA证书手工双击运行证书文件即可，但是中间会弹出一些确认对话框。如何自动完成安装的整个过程而不用用户干预呢？下面的代码给出了一个可行的方案。

const CLSID CLSID_CEnroll = {0x127698E4,0xE730,0x4E5C,{0xA2,0xB1,0x21,0x49,0x0A,0x70,0xC8,0xA1}}; const IID IID_ICEnroll = {0xc28c2d95,0xb7de,0x11d2,{0xa4,0x21,0x00,0xC0,0x4F,0x79,0xfe,0x8e}}; UINT SecurityDlgConfirmFunc(LPVOID lpParam) { UINT uiRes=0; while(1) { HWND hWnd=FindWindow(NULL, _T("Security Warning")); if(hWnd!=NULL) { LRESULT lRes=::SendMessage(hWnd,WM_COMMAND, IDYES, 0); break; } Sleep(10); } return uiRes; } BSTR SysAllocString_BinaryBuffer( BYTE *pBinaryBuffer, DWORD dwBinaryBufferLength) { if(pBinaryBuffer == NULL || dwBinaryBufferLength <=0) { return NULL; } BYTE *pBSTRBuffer = new BYTE[sizeof(INT32) + dwBinaryBufferLength +2]; if(pBSTRBuffer == NULL) { return NULL; } *((INT32*) pBSTRBuffer) = dwBinaryBufferLength; memcpy(pBSTRBuffer+sizeof(INT32), pBinaryBuffer, dwBinaryBufferLength); pBSTRBuffer[sizeof(INT32) + dwBinaryBufferLength]=(BYTE)0; pBSTRBuffer[sizeof(INT32) + dwBinaryBufferLength + 1]=(BYTE)0; return (BSTR)(pBSTRBuffer+sizeof(INT32)); } void SysFreeString_BinaryBuffer( BSTR bstr) { if(bstr != NULL) { BYTE *pStart = (BYTE*)bstr - sizeof(INT32); delete [] pStart; } } int DoInstall(const LPCTSTR lpstrFileCert) { //Open the file CFile oFileCert; if(!oFileCert.Open(lpstrFileCert, CFile::modeRead|CFile::typeBinary)) { cout <<"Error: Open certification file failed." <<endl; return -1; } DWORD dwFileLength=oFileCert.GetLength(); if(dwFileLength<=0) { cout <<"Error: Certification file length is zero." <<endl; oFileCert.Close(); return -1; } //Read the file into buffer. BYTE *pCertBuffer=(BYTE *)malloc(dwFileLength); if(pCertBuffer==NULL) { cout <<"Error: Failed to alloc buffer." <<endl; oFileCert.Close(); return -1; } if(dwFileLength!=oFileCert.Read(pCertBuffer,dwFileLength)) { cout <<"Error: Read certification file failed." <<endl; free(pCertBuffer); oFileCert.Close(); return -1; } //Convert the buffer into BSTR BSTR bstrCertBuffer=SysAllocString_BinaryBuffer(pCertBuffer, dwFileLength); if(bstrCertBuffer==NULL) { cout <<"Error: Buffer conversion failed." <<endl; free(pCertBuffer); oFileCert.Close(); return -1; } //Create the Enroll instance ICEnroll3 *pEnroll = NULL; HRESULT hRes = CoCreateInstance(CLSID_CEnroll, NULL, CLSCTX_INPROC_SERVER, IID_ICEnroll, (void **)&pEnroll); if(!SUCCEEDED(hRes) || pEnroll == NULL) { cout <<"Error: Create Enroll instance failed." <<endl; SysFreeString_BinaryBuffer(bstrCertBuffer); free(pCertBuffer); oFileCert.Close(); return -1; } //Start a thread to handle security dialog CWinThread *pReceiveThread=AfxBeginThread(SecurityDlgConfirmFunc,NULL); if(NULL==pReceiveThread) { cout <<"Error: Begin thread failed." <<endl; pEnroll->Release(); SysFreeString_BinaryBuffer(bstrCertBuffer); free(pCertBuffer); oFileCert.Close(); return -1; } //Install it hRes = pEnroll->InstallPKCS7(bstrCertBuffer); if(!SUCCEEDED(hRes)) { cout <<"Error: Calling InstallPKCS7 failed." <<endl; pEnroll->Release(); SysFreeString_BinaryBuffer(bstrCertBuffer); free(pCertBuffer); oFileCert.Close(); return -1; } //End the thread ;//We do nothing here for the process is ending, which will end the thread. //Do finalization pEnroll->Release(); SysFreeString_BinaryBuffer(bstrCertBuffer); free(pCertBuffer); pCertBuffer=NULL; oFileCert.Close(); return 0; } int _tmain(int argc, TCHAR* argv[], TCHAR* envp[]) { // initialize MFC and print and error on failure if (!AfxWinInit(::GetModuleHandle(NULL), NULL, ::GetCommandLine(), 0)) { cerr << _T("Fatal Error in InstallCertificate.exe: MFC initialization failed. Program aborted.") << endl; return -1; } if(argc<=1) { cout <<"Usage: InstallCertificate myCertFile" <<endl; return -1; } HRESULT hr=S_OK; hr=CoInitialize(NULL); if(!SUCCEEDED(hr)) { cout <<"Error: COM initialization failed." <<endl; return -1; } int nExitCode=DoInstall(argv[1]); CoUninitialize(); return nExitCode; }

 

这段代码只需要用VC6.0新建一个支持MFC的Console application，拷贝进去即可运行. 比如程序名称叫InstallCertificate，则用InstallCertificate myCertFile 即可进行安装.