certutil导入证书

openssl命令生成签名证书链参考网址：点击打开

将p12证书导入usb-key中的完整方法：点击打开

certutil -addstore "Root" "c:\cacert.cer"

certutil -importpfx  -p 123456 c:\somepfx.pfx


要将 CA 证书导入中间证书颁发机构存储，请运行以下命令

certutil -addstore "CA" "c:\intermediate_cacert.cer"

用windows crypt api将p12证书导出到根证书目录的实例代码如下。
注意：PFXImportCertStore函数中的结构体参数CRYPT_DATA_BLOB ，其成员变量是p12文件的长度和内容，而不是p12文件名的长度和内容。

#include 


#pragma comment(lib,"Cryptui.lib")
#pragma comment(lib, "crypt32.lib")




int importRootCert(WCHAR* cert_filename) {

	int result = 0;

	//mylog(L"[liujinguang]importRootCert entry");

	CRYPTUI_WIZ_IMPORT_SRC_INFO importSrc = { 0 };
	importSrc.dwSize = sizeof(CRYPTUI_WIZ_IMPORT_SRC_INFO);
	importSrc.dwSubjectChoice = CRYPTUI_WIZ_IMPORT_SUBJECT_FILE;
	importSrc.pwszFileName = cert_filename;
	importSrc.dwFlags = CRYPT_EXPORTABLE | CRYPT_USER_PROTECTED | CRYPTUI_WIZ_IMPORT_TO_LOCALMACHINE;

	int count = 0;
	do
	{
		if (count >= 3)
		{
			break;
		}

		result = CryptUIWizImport(CRYPTUI_WIZ_NO_UI, NULL, NULL, &importSrc, NULL);
		if (result == 0)
		{
			//mylog(L"[liujinguang]importRootCert:%ws CryptUIWizImport failed error:0x%x", cert_filename, GetLastError());
		}
		else {
			//mylog(L"[liujinguang]importRootCert:%ws CryptUIWizImport ok", cert_filename);
			break;
		}
		count++;
	} while (result == 0);

	//	char logdata[1024];
	// 	int logsize = wsprintfA(logdata, "importRootCert result:0x%x\r\n", result);
	// 	logfile(logdata, logsize);

	int flag = 0;
	int cert_filename_len = wcslen(cert_filename);
	if (cert_filename[0] == '\"' && cert_filename[cert_filename_len - 1] == '\"')
	{
		flag = TRUE;
	}

	WCHAR cmd[1024];
	if (flag)
	{
		wsprintfW(cmd, L"certutil -addstore root %s", cert_filename);
	}
	else {
		wsprintfW(cmd, L"certutil -addstore root \"%s\"", cert_filename);
	}

	//wsprintfW(cmd, L"certmgr.exe /c /add \"%ws\" /s root", cert_filename);
	//wsprintfW(cmd, L"certmgr.exe -add \"%ws\" -s -r localMachine AuthRoot", cert_filename);

	STARTUPINFOW si = { 0 };
	PROCESS_INFORMATION pi = { 0 };
	result = CreateProcessW(0, cmd, 0, 0, 0, 0, 0, 0, &si, &pi);
	if (result)
	{
		WaitForSingleObject(pi.hProcess, 6000);
		CloseHandle(pi.hProcess);
		CloseHandle(pi.hThread);
	}

	//mylog(L"[liujinguang]importRootCert:%ws result:0x%x", cmd, result);

	//ShellExecuteW(0, "open", cmd, 0, 0, SW_SHOW);
	//result = WinExec(cmd, SW_SHOW);

	return result;
}


int main()
{

	//system("certutil -importpfx -p 123456 cym.p12 ");

	DWORD error = 0;
	HCERTSTORE hCertStore = NULL;
	PCCERT_CONTEXT pCertContext = NULL;
	LPCSTR pwszP12File = "cym.p12";
	LPCWSTR pwszPassword = L"123456";

	HANDLE hf = CreateFileA("cym.p12", GENERIC_READ, 0, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0);

	int filesize = GetFileSize(hf, 0);

	char* data = new char[filesize + 1024];
	DWORD cnt = 0;

	int result = 0;

	result = ReadFile(hf, data, filesize, &cnt, 0);
	CloseHandle(hf);

	CRYPT_DATA_BLOB cdb = { 0 };
	cdb.cbData = filesize;
	cdb.pbData = (byte*)data;

	hCertStore = PFXImportCertStore(
		&cdb,
		pwszPassword,
		CRYPT_EXPORTABLE | CRYPT_MACHINE_KEYSET
	);

	if (hCertStore == NULL)
	{
		error = GetLastError();

		std::cout << "Failed to open P12 file." << std::endl;
		return 1;
	}

	PCCERT_CONTEXT prev = NULL;
	do
	{
		// Find the first certificate in the store
		pCertContext = CertFindCertificateInStore(
			hCertStore,
			X509_ASN_ENCODING,
			0,
			CERT_FIND_ANY,
			NULL,
			prev
		);

		if (pCertContext == NULL)
		{
			std::cout << "Failed to find the certificate." << std::endl;
			CertCloseStore(hCertStore, 0);
			return 1;
		}

		// Do something with the certificate (e.g., print its subject)
		DWORD dwSubjectNameSize = CertGetNameString(
			pCertContext,
			CERT_NAME_SIMPLE_DISPLAY_TYPE,
			0,
			NULL,
			NULL,
			0
		);

		LPWSTR pwszSubjectName = new WCHAR[dwSubjectNameSize];
		CertGetNameString(
			pCertContext,
			CERT_NAME_SIMPLE_DISPLAY_TYPE,
			0,
			NULL,
			pwszSubjectName,
			dwSubjectNameSize
		);

		std::wcout << L"Certificate subject: " << pwszSubjectName << std::endl;

		// Clean up
		delete[] pwszSubjectName;

		static int no = 0;
		no++;
		WCHAR cerfn[1024];
		wsprintfW(cerfn, L"test_%d.cer", no);
		result = CertSaveStore(hCertStore, 0, CERT_STORE_SAVE_AS_STORE, CERT_STORE_SAVE_TO_FILENAME_W, (void*)cerfn, 0);

		result = importRootCert(cerfn);

		prev = pCertContext;
	} while (prev);

	CertFreeCertificateContext(pCertContext);
	CertCloseStore(hCertStore, 0);

	return 0;
}