Questions tagged [capicom]

CAPICOM is a discontinued ActiveX control created by Microsoft to help expose a select set of Microsoft Cryptographic Application Programming Interface (CryptoAPI) functions through Microsoft Component Object Model (COM). It was intended to enable every environment that supports ActiveX to use Microsoft Cryptographic technologies, including web pages that are opened with Microsoft Internet Explorer or any other web browser that supports ActiveX.

47 questions
13
votes
1 answer

How to Programmatically Code-Sign an executable with a PFX (Bouncy Castle or Otherwise)

I am trying to determine the best method for code-signing an executable using Bouncy Castle, managed code, or un-managed code from C#. Since CAPICOM is now deprecated, I imagine one of the SignerSign methods from mssign32.dll is the best way to go…
Osbourne Ruddock
  • 465
  • 4
  • 20
8
votes
1 answer

Is it possible to determine the file name of a certificate's private key on a remote Windows server?

I'm trying to determine the file name of a certificate's private key stored on a remote Windows (2k3/2k8) machine and am having some difficulty. I'm also not that familiar with Microsoft's CryptAPI, so I'm looking for any help you can provide. The…
mrdc
  • 706
  • 5
  • 9
8
votes
3 answers

CAPICOM - Verify SignedCode is from a Trusted Publisher without UI

I'm using CAPICOM in a .NET 3.0 C# app to check an Authenticode signature on an exe file. I need to make sure that the certificate is listed as a Trusted Publisher. Using signedCode.Verify(true) will show a dialog if the certificate is not already…
Chris John
  • 174
  • 6
6
votes
2 answers

How to check a digital signature from broswer with PHP

I have a Javascript that is signing a text string in the browser. It uses CAPICOM under Internet Explorer and window.crypto under Mozilla browsers. After the signing process I receive a BASE64 encoded signature. Using HTTPS I upload the signature…
3
votes
3 answers

CAPICOM vs P/Invoke

I would like to use CryptoAPI in C# to access certificate store and sign message. This MSDN article "CAPICOM: CryptoAPI Made Easy" shows 2 way to do that: using CAPICOM or P/Invoke. Which is best? CAPICOM.dll or P/Invoke [DllImport("crypt32.dll",…
Cobaia
  • 1,503
  • 3
  • 22
  • 41
3
votes
2 answers

Capicom and SHA1 - Help translating a java code to Delphi

I have a java application that signs a string using a certificate. It works encrypting the string it with SHA1. I am trying to translate the code to Delphi 2010, but I have no idea how to get it working the same way the java app does (using sha1).…
Rafael Colucci
  • 6,018
  • 4
  • 52
  • 121
3
votes
3 answers

Differences between CAPICOM TripleDES and System.Security.Cryptography TripleDES

I'm trying to move away from using CAPICOM since I can no longer use it (64-bit Windows 7 machine). The existing code for using TripleDES is like this: EncryptedDataClass cryptic = new EncryptedDataClass(); cryptic.Algorithm.Name =…
Posthuma
  • 256
  • 1
  • 8
2
votes
1 answer

How to check if CAPICOM is installed?

My application uses CAPICOM. It may not be installed in some machines, so the installer needs to install it. I already added the msi installers to run on installing my application. Is there any way to test in Inno Setup if CAPICOM is installed to…
marciel.deg
  • 400
  • 3
  • 17
2
votes
1 answer

How to verify an exe/dll/sys is original from Microsoft?

I need some easy API to verify that a PE file is valid & Microsoft signed just like SignTool. Where should I start? Could this be done with CAPICOM?
est
  • 11,429
  • 14
  • 70
  • 118
2
votes
1 answer

Does Microsoft's CAPICOM ActiveX control support SHA-2?

Our company is switching over from using SHA-1 certificates to SHA-2 certificates. I noticed that CAPICOM only has a CAPICOM_CERTIFICATE_FIND_SHA1_HASH find method. Will switching over from SHA-1 to SHA-2 mean we will need to switch to an…
going
  • 9,669
  • 4
  • 36
  • 37
2
votes
2 answers

How to sign the document with a certificate's private key from the browser (CAPICOM alternative)?

So, till Windows 7 there was a Microsoft ActiveX component: CAPICOM, which one could call from Javascript and then show the contents of the certificate storage on the client's machine. The client then could choose the appropriate certificate and…
Daniel Vygolov
  • 884
  • 2
  • 13
  • 26
2
votes
1 answer

Replace CAPICOM with .NET, validate certificate

My component is responsible for downloading files from the server. As part of file validation I have used CAPICOM (SignedCode object) to validate if a certificate contains a specific string and call to Validate method of the SignedCode object. In…
Zaky
  • 369
  • 6
  • 21
2
votes
2 answers

How do I use the activex dll in PHP?

I want to load an ActiveX DLL in my PHP page and load its functions. For example: CAPICOM.DLL
VOLVO
  • 541
  • 5
  • 16
1
vote
2 answers

Capicom Decryption in Linux

I have a database that encrypted with windows CAPICOM library with RC4. Following PHP script works fine on windows server. ... $oCapiCapi = new COM("CAPICOM.EncryptedData"); $oCapiCapi -> Algorithm = 1; $oCapiCapi -> Algorithm -> KeyLength =…
THEn
  • 1,920
  • 3
  • 28
  • 35
1
vote
1 answer

How can I find the initialization vector CAPICOM used to AES-encrypt my data?

I have an application written in Classic ASP that encrypts data via CAPICOM and stores it in a database. The encryption code looks something like this (Classic ASP, VB. Simplified a bit for brevity): set encryptObject =…
Joshua Carmody
  • 13,410
  • 16
  • 64
  • 83
1
2 3 4