打开 Active Directory 存储并检索证书

[CAPICOM 是一个仅限 32 位的组件，可用于以下操作系统：Windows Server 2008、Windows Vista 和 Windows XP。 请改用.NET Framework来实现安全功能。 有关详细信息，请参阅 使用 CAPICOM 的替代方法。]

可以从存储 域用户证书的 Active Directory 存储中检索证书。 Active Directory 存储只能在只读模式下打开，应用程序不能使用 CAPICOM 向 Active Directory 存储添加证书或从中删除证书。

如果出现任何 CAPICOM 错误，则返回 Err.Number 的负十进制值。 有关详细信息，请参阅 CAPICOM_ERROR_CODE。 有关 Err.Number 的正十进制值的信息，请参阅 Winerror.h。

以下示例演示如何打开 Active Directory 存储并从该存储中检索证书。

Sub OpenADStore()
        On Error GoTo ErrorHandler
        Dim mystore As Store
        Set mystore = New Store
        
        ' Put a string that represents the name of a certificate 
        ' subject in SubjectNameCn. In the following example, 
        ' the * wildcard character is used in the string so that
        ' the Active Directory store will be searched for all 
        ' certificates with a subject name beginning with 'S.'
       
        Dim SubjectNameCn As String
        ' The following uses 'cn=' and the * wildcard character.
        ' Using this string, all certificates in the Active Directory
        ' store with a subject name beginning with an 'S' would
        ' be returned.

        SubjectNameCn = "CN=S*"
        
        ' Active Directory stores can only be opened with read-only
        ' access.
        
         mystore.Open CAPICOM_ACTIVE_DIRECTORY_USER_STORE, _
              SubjectNameCn, CAPICOM_STORE_OPEN_READ_ONLY
        
        If mystore.Certificates.Count < 1 Then
               MsgBox "A certificate for " & SubjectNameCn & _
                      " was not found "
        Else
               MsgBox "The certificate has been retrieved."
        End If
        
        Set mystore = Nothing
        Exit Sub

ErrorHandler:
         
         If Err.Number > 0 Then
               MsgBox "Visual Basic error found:" & Err.Description
         Else
               MsgBox "CAPICOM error found : " & Err.Number
         End If
End Sub