windows-nt/Source/XPSP1/NT/enduser/windows.com/wuv3/cdminc/newtrust.h

93 lines
3.2 KiB
C
Raw Permalink Normal View History

2020-09-26 03:20:57 -05:00
//////////////////////////////////////////////////////////////////////////////
//
// Copyright (c) 1998, 1999, 2000 Microsoft Corporation. All Rights Reserved.
//
// SYSTEM: Windows Update Critical Fix Notification
//
// CLASS: N/A
// MODULE: MS Cab Trusting Function Header
// FILE: NewTrust.h
//
/////////////////////////////////////////////////////////////////////
//
// DESC: this header file declares functions used to make Microsoft
// signed cab trusted.
//
// AUTHOR: Alessandro Muti, Windows Update Team
// DATE: 3/11/1999
//
/////////////////////////////////////////////////////////////////////
//
// Revision History:
//
// Date Author Description
// ~~~~ ~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
// 10/17/2000 Nick Dallett Porting Charlma's new cert-checking code from SLM tree:
// (8/31/2000 charlma Changed to only publish VerifyFile())
//
//
/////////////////////////////////////////////////////////////////////
//
// (c) Copyrights: 1998, 1999, 2000 Microsoft Corporation
//
// All rights reserved.
//
// No portion of this source code may be reproduced
// without express written permission of Microsoft Corporation.
//
// This source code is proprietary and confidential.
/////////////////////////////////////////////////////////////////////
//
#ifndef __NEWTRUST_HEADER
#define __NEWTRUST_HEADER
//HRESULT CheckWinTrust(LPCTSTR pszFileName, DWORD dwUIChoice);
//HRESULT CheckMSCert(LPCTSTR pszFileName);
#include <wintrust.h>
/////////////////////////////////////////////////////////////////////////////
//
// Public Function VerifyFile()
//
// This is a wrapper function for CheckWinTrust that both Whistler
// and WU classic code should use.
//
// Input: szFileName - the file with complete path
// fShowBadUI - whether pop up UI in cases
// (1) inproperly signed signature, or
// (2) properly signed with a non-MS cert
//
// Return: HRESULT - S_OK the file is signed with a valid MS cert
// or error code.
// If the file is signed correctly but cert is not
// a known Microsoft cert included in this feature, then
// CERT_UNTRUSTED_ROOT is returned.
//
// Good Cert: Here is the deifnition of a good cert, in addition to the fact
// that the signature must be valid and not expired.
// (1) The signature was signed with a cert that has
// "Microsoft Root Authority" as root, or
// (2) The signature was signed with one of the following known
// Microsoft cert's (they are not rooted to MS)
// * Microsoft Corporation
// * Microsoft Corporation MSN
// * MSNBC Interactive News LLC
// * Microsoft Corporation MSN (Europe)
// * Microsoft Corporation (Europe)
//
// Note: If _WUV3TEST flag is set (for test build), then fShowBadUI is
// ignored:
// if reg key SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\wuv3test\WinTrustUI
// is set to 1, then no UI is shown, and this function always return S_OK;
// otherwise, UI always show no matter what cert, and return value is same
// as the live build.
//
/////////////////////////////////////////////////////////////////////////////
HRESULT VerifyFile(IN LPCTSTR szFileName, BOOL fShowBadUI = TRUE);
#endif //__NEWTRUST_HEADER