Custom Digital Certificate Store

To be specific:

I want to create a x509 digital certificate chain which overrides the default behavior of chain building mechanism by changing machine.config setting. My exact requirements are

1. Creation of custom digital certificate store for cert's and CRL's which uses database as repository. (not windows cert store) Is this possible to implement this in .Net framework? If not then can crypto API (CAPI) can be used for the same? If not at all then what are there any design constraints in doing so?

2. Can I use the above custom certificate store to do offline certificate and CRL checking in X509Chain.build methods?, if yes then how do I override the default behavior of this build method.

3. How can I use X509Store Class to load memory store? I see that only currentuser, localmachine is supported while CAPI supports 5 different types of store.

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

kaushal saxena17y ago

To be specific:
I want to create a x509 digital certificate chain which overrides the default behavior of chain building mechanism by changing machine.config setting. My exact requirements are

1.       Creation of custom digital certificate store for cert's and CRL's which uses database as repository. (not windows cert store) Is this possible to implement this in .Net framework? If not then can crypto API (CAPI) can be used for the same? If not at all then what are there any design constraints in doing so?

2.       Can I use the above custom certificate store to do offline certificate and CRL checking in X509Chain.build methods?, if yes then how do I override the default behavior of this build method.

3.       How can I use X509Store Class to load memory store? I see that only currentuser, localmachine is supported while CAPI supports 5 different types of store.