c语言制作证书

制作证书

// MakeCert.cpp : Defines the entry point for the console application.
//

#include "stdafx.h"
#include <windows.h>

DWORD MakeCert();
void log(char *error_msg,int error_num);

int _tmain(int argc, _TCHAR* argv[])
{
	int t ;
	if( t= MakeCert() != 0)
		printf("Error Num:%d",t);
	return 0;
}

DWORD MakeCert()
{
	HCRYPTPROV hProv;
	HCRYPTKEY  hKey;

	BOOL cret = CryptAcquireContext(&hProv,"LiContainer",MS_ENHANCED_PROV,PROV_RSA_FULL,CRYPT_VERIFYCONTEXT );
	if( cret == FALSE)
	{
		cret = CryptAcquireContext(&hProv,"LiContainer",MS_ENHANCED_PROV,PROV_RSA_FULL,CRYPT_DELETEKEYSET );
		
		cret = CryptAcquireContext(&hProv,"LiContainer",MS_ENHANCED_PROV,PROV_RSA_FULL,CRYPT_NEWKEYSET );
		if(cret == FALSE)
			return GetLastError();
	}

	cret = CryptGenKey( hProv,AT_SIGNATURE, CRYPT_EXPORTABLE  , &hKey) ;  //|CRYPT_USER_PROTECTED
	if(cret == FALSE)
		return GetLastError();
	
	CERT_INFO  Cert;
	memset( (void*)&Cert , 0 ,sizeof( CERT_INFO));
	// 1.version
	Cert.dwVersion = 2;

	// 2.SerialNumber
    BYTE SerialNum[] = "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F";
	Cert.SerialNumber.cbData = 16;
	Cert.SerialNumber.pbData = SerialNum;
    
	// 3.Algorithm
    Cert.SignatureAlgorithm.pszObjId = szOID_RSA_SHA1RSA;
    Cert.SignatureAlgorithm.Parameters.cbData = 0;

	// 4.Issuer.  Encode the Issuer name with ASN.1 ,reference MSDN source
    char *Cert_Issuer_Name ="My Name is LI";
	CERT_RDN_ATTR rgNameAttr = 
	{
		szOID_COMMON_NAME,                // the OID
		CERT_RDN_PRINTABLE_STRING,        // type of string
			(DWORD)strlen(Cert_Issuer_Name)+1,          // string length including
			(BYTE *)Cert_Issuer_Name             // pointer to the string
	};
	CERT_RDN rgRDN[] = 
	{
		1,               // the number of elements in the array
			&rgNameAttr      // pointer to the array
	};

	CERT_NAME_INFO CertName = 
	{
		1,          // number of elements in the CERT_RND's array
			rgRDN
	};

	DWORD cbEncoded;              // variable to hold the
	BYTE *pbEncoded;              // variable to hold a pointer to the 

	cret = CryptEncodeObjectEx( X509_ASN_ENCODING, X509_NAME, 
		&CertName, 0, NULL, NULL,&cbEncoded)  ;
    if( cret == NULL)
	   return GetLastError();

     pbEncoded = (BYTE*)malloc(cbEncoded);
	 if(pbEncoded == NULL)
		 return GetLastError();

	cret =CryptEncodeObjectEx( X509_ASN_ENCODING, X509_NAME,
		&CertName, 0, NULL, pbEncoded, &cbEncoded);
	if( cret == NULL)
		return GetLastError();

	Cert.Issuer.cbData = cbEncoded;
	Cert.Issuer.pbData = pbEncoded;

	// 5.UTCTime .Process the Time of cert. SystemTimeToFileTime
	SYSTEMTIME SysTime;
    GetSystemTime(&SysTime);
    SystemTimeToFileTime( &SysTime , &Cert.NotBefore);
 
	SysTime.wYear += 10;
	SystemTimeToFileTime( &SysTime , &Cert.NotAfter);

    // 6.subject
	char *Cert_Subject_Name ="A Good Day";
	
	rgNameAttr.pszObjId     = szOID_COMMON_NAME;
    rgNameAttr.dwValueType  = CERT_RDN_PRINTABLE_STRING;
	rgNameAttr.Value.cbData = (DWORD)strlen(Cert_Subject_Name) +1;
    rgNameAttr.Value.pbData = (PBYTE)Cert_Subject_Name;

	cret = CryptEncodeObjectEx( X509_ASN_ENCODING, X509_NAME, 
		&CertName, 0, NULL, NULL,&cbEncoded)  ;
	if( cret == NULL)
		return GetLastError();

	pbEncoded = (BYTE*)malloc(cbEncoded);
	if(pbEncoded == NULL)
		return GetLastError();

	cret =CryptEncodeObjectEx( X509_ASN_ENCODING, X509_NAME,
		&CertName, 0, NULL, pbEncoded, &cbEncoded);
	if( cret == NULL)
		return GetLastError();

	Cert.Subject.cbData = cbEncoded;
    Cert.Subject.pbData = pbEncoded;


	// 7.PublicKey 
	PCERT_PUBLIC_KEY_INFO  PubKeyBuf;  //reference RACrypt.cpp  .Don't know why  
	DWORD PubKeyLen;
	cret = CryptExportPublicKeyInfo( hProv, AT_SIGNATURE, 
		X509_ASN_ENCODING ,NULL,&PubKeyLen );
	if(cret == FALSE )
		return GetLastError();

    PubKeyBuf = (PCERT_PUBLIC_KEY_INFO) malloc( PubKeyLen);
	if( PubKeyBuf == NULL)
		return GetLastError();

	cret = CryptExportPublicKeyInfo( hProv, AT_SIGNATURE, 
		X509_ASN_ENCODING ,PubKeyBuf,&PubKeyLen );
	if(cret == FALSE )
		return GetLastError();
  
    Cert.SubjectPublicKeyInfo =  *PubKeyBuf;
    
	// Extendsion
	Cert.cExtension   = 0;
	Cert.rgExtension  = NULL;
    Cert.IssuerUniqueId.cbData = 0 ;
	Cert.SubjectUniqueId.cbData = 0;
    
	//Make Certificate
	CRYPT_ALGORITHM_IDENTIFIER algId;
	BYTE paraData[16];
	paraData[0] = 0x05; paraData[1] = 0x00;

	algId.pszObjId = szOID_RSA_SHA1RSA;
	algId.Parameters.cbData = 2;
	algId.Parameters.pbData = paraData;
    
    /*-------------------------------------------------------------
	CryptSignAndEncodeCertificate
	The CryptSignAndEncodeCertificate function encodes and signs a certificate, CRL, CTL or certificate request. 
	This function performs the following operations:
	1-> Calls CryptEncodeObject using lpszStructType to encode the "to be signed" information. 
	2-> Calls CryptSignCertificate to sign this encoded information. 
	3-> Calls CryptEncodeObject again, with lpszStructType set to X509_CERT, 
				to further encode the resulting signed, encoded information. 
	-------------------------------------------------------------*/
    
	// Export As X.509 certificate
	
	PBYTE  pCertOut;
	DWORD CertLen;
	cret = CryptSignAndEncodeCertificate(hProv, AT_SIGNATURE, 
		X509_ASN_ENCODING, X509_CERT_TO_BE_SIGNED, (void*)&Cert, &algId,
		NULL,NULL, &CertLen);
	if(cret == FALSE)
	{
		printf("CryptSignAndEncodeCertificate Error\n ");
		return GetLastError();
	}
    
	pCertOut = (PBYTE)malloc(CertLen);
	if(CertLen == NULL)
		return GetLastError();

	cret = CryptSignAndEncodeCertificate(hProv, AT_SIGNATURE, 
		X509_ASN_ENCODING, X509_CERT_TO_BE_SIGNED, (void*)&Cert, &algId,
		NULL,pCertOut, &CertLen);
	if(cret == FALSE)
		return GetLastError();

	char  file[128] = "C:\\Li-X509.cer";
	DWORD len;
	HANDLE hFile = CreateFile(file ,GENERIC_READ |GENERIC_WRITE,
		FILE_SHARE_READ| FILE_SHARE_WRITE,
		NULL, CREATE_ALWAYS  ,
		NULL, NULL);
	if(hFile == NULL)
		return GetLastError();
   
	cret = WriteFile( hFile,pCertOut,( DWORD)CertLen , &len,NULL);
    if( cret == FALSE )
		return GetLastError();

	cret = CloseHandle( hFile);
	if( cret == FALSE)
		return GetLastError();
    


   //Export as PKCS#7 certificate
 

   

	strcpy( file,"C:\\Li-PKCS#7.cer");

	hFile = CreateFile(file ,GENERIC_READ |GENERIC_WRITE,
		FILE_SHARE_READ| FILE_SHARE_WRITE,
		NULL, CREATE_ALWAYS  ,
		NULL, NULL);
	if(hFile == NULL)
		return GetLastError();

	HCERTSTORE  hStore  = CertOpenStore( CERT_STORE_PROV_MEMORY, PKCS_7_ASN_ENCODING,hProv,CERT_STORE_OPEN_EXISTING_FLAG, NULL);
	if( hStore == NULL)
		return GetLastError(); 
  
	void *pvData = NULL;
	DWORD cbData = 0;
    cret = CertGetStoreProperty( hStore,CERT_STORE_LOCALIZED_NAME_PROP_ID, NULL, &cbData);
	if(cret == FALSE)
		return GetLastError();

	pvData = malloc(cbData);
    if( pvData == NULL)
		return GetLastError();
   
	cret = CertGetStoreProperty( hStore, CERT_STORE_LOCALIZED_NAME_PROP_ID,pvData,&cbData) ;
	if( cret == FALSE)
		return GetLastError();

	cret = CertSaveStore( hStore,X509_ASN_ENCODING, CERT_STORE_SAVE_AS_PKCS7, CERT_STORE_SAVE_TO_FILE, hFile,0);
	if( cret == FALSE)
		return GetLastError();

	


	cret = CloseHandle( hFile);
	if( cret == FALSE)
		return GetLastError();

	free( pCertOut);
	free(pbEncoded);
    free(PubKeyBuf);
	cret = CryptReleaseContext(hProv,0);
	if( cret == FALSE)
		return GetLastError();

	return 0;
}


void log(char *error_msg,int error_num)
{
	DWORD dwWrite;
    char  file[] = "C:\\log.txt";
    DWORD FileLen;
	char  buf[128];

	if( error_msg != NULL )
		printf("%s ",error_msg);

	if( error_num != 0)
		printf("Error Num:%d\n",error_num);

	
	HANDLE hFile = CreateFile(file ,GENERIC_READ |GENERIC_WRITE,
			FILE_SHARE_READ| FILE_SHARE_WRITE,
			NULL, OPEN_EXISTING  ,
			NULL, NULL);

    FileLen = GetFileSize(hFile,NULL);

    SetFilePointer( hFile,FileLen , FILE_BEGIN, NULL);

	sprintf( buf,"Error Num：%d \r\n",error_num );
	WriteFile( hFile,buf,( DWORD)strlen(buf) ,
		         &dwWrite,NULL);

	CloseHandle( hFile) ;
		
}