Custom Digital Certificate Store

Question

Hi,
I want to create a digital certificate store which uses database as certificate and CRL repository. I also want to enable certificate chain building and verification using this store. Is their any way in which I can extend the existing classes of .Net cryptography framework to accommodate my design. I also want to know what design benefits does windows certificate store in managing certificates.
TIA

kaushal saxena · Answer

Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman","serif";} To be specific: I want to create a x509 digital certificate chain which overrides the default behavior of chain building mechanism by changing machine.config setting. My exact requirements are 1. Creation of custom digital certificate store for cert's and CRL's which uses database as repository. (not windows cert store) Is this possible to implement this in .Net framework? If not then can crypto API (CAPI) can be used for the same? If not at all then what are there any design constraints in doing so? 2. Can I use the above custom certificate store to do offline certificate and CRL checking in X509Chain.build methods?, if yes then how do I override the default behavior of this build method. 3. How can I use X509Store Class to load memory store? I see that only currentuser, localmachine is supported while CAPI supports 5 different types of store.

Custom Digital Certificate Store

Sam Hobbs

Abhimanyu K Vatsa