Edit

Share via

ICertServerPolicy::SetCertificateExtension method (certif.h)

  • Article

The SetCertificateExtension method adds a new extension to the certificate.

Syntax

HRESULT SetCertificateExtension(
  [in] const BSTR    strExtensionName,
  [in] LONG          Type,
  [in] LONG          ExtFlags,
  [in] const VARIANT *pvarValue
);

Parameters

[in] strExtensionName

Specifies the object identifier (OID) for the extension to set. The string must be 31 or less nonnull characters in length.

[in] Type

Specifies the type of extension being set. The Type parameter must agree with the data type of pvarValue that is set in the vt field of the VARIANT structure. The Type parameter can be set to one of the following types.

Value Meaning
PROPTYPE_LONG
 Signed long data.
PROPTYPE_DATE
 Date/time.
PROPTYPE_BINARY
 The extension value is set as is and is assumed to be ASN.1 encoded if necessary.
PROPTYPE_STRING
 The extension value will be ASN.1 encoded as an IA5 string before it is placed in the new certificate.
Note  You should use PROPTYPE_STRING for an extension value that consists of a single URL only if you want the URL to be automatically encoded as an IA5 string. Otherwise, encode the URL as an IA5 string yourself and pass the encoded value as PROPTYPE_BINARY.
 

[in] ExtFlags

Specifies the flags for the extension being set. Use a value of zero if no flag is to be set, or use one of the following flag values. You can join these flags together by using the OR operator, and you can also join them by using the OR operator with policy private extension flags (the high 8 bits of the EXTENSION_POLICY_MASK field).

Note  When ExtFlags is set to EXTENSION_DISABLE_FLAG, the extension will be disabled in the server log and will not be added to the certificate.
 
Value Meaning
EXTENSION_CRITICAL_FLAG
 This is a critical extension.
EXTENSION_DISABLE_FLAG
 Extension will not be used.

[in] pvarValue

Specifies the value associated with the extension. Note the value's VARIANT type must agree with the Type parameter, as shown in the following table.

Value Meaning
PROPTYPE_LONG
 VT_I4
PROPTYPE_DATE
 VT_DATE
PROPTYPE_BINARY
 VT_BSTR
PROPTYPE_STRING
 VT_BSTR

Return value

VB

If the method succeeds, the method returns S_OK.

If the method fails, it returns an HRESULT value that indicates the error. For a list of common error codes, see Common HRESULT Values.

Remarks

Use extensions to include additional information with the certificate, such as supplemental subject or usage information. For more information, see Extension Handlers.

Call the SetCertificateExtension method from your implementation of the ICertPolicy2::VerifyRequest method. You must call the ICertServerPolicy::SetContext method before calling the SetCertificateExtension method.

Requirements

Requirement Value
Minimum supported client None supported
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header certif.h (include Certsrv.h)
Library Certidl.lib
DLL Certcli.dll

See also

ICertServerPolicy

ICertServerPolicy::SetContext