[Bug 11070] New: Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

Summary: Unimplemented function CRYPT32.dll.PFXIsPFXBlob
           Product: Wine
           Version: 0.9.52.
          Platform: PC-x86-64
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: crypt32
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
                CC: [e-mail]

Created an attachment (id=10088)
 --> (http://bugs.winehq.org/attachment.cgi?id=10088)
Dependency Walker Load List (Wine Builtin)

The importpfx tool http://home.fnal.gov/~jklemenc/importpfx.html will run
under ~/.ies4linux , however fails with builtin ntdll and crypt32 under
~/.wine.

Importpfx would be very useful because it allows PKCS12 certificates to be
imported to the Certificate Store without need for IE's import/export frontend.

Note:
Filing this bug under crypt32, though it might better belong to ntdll.

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #1 from Mark Smith   2008-01-07 01:07:31 ---
Created an attachment (id=10089)
 --> (http://bugs.winehq.org/attachment.cgi?id=10089)
Dependency Walker Load List (IE Native)

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #2 from Mark Smith   2008-01-07 01:14:45 ---
Created an attachment (id=10090)
 --> (http://bugs.winehq.org/attachment.cgi?id=10090)
Backtrace

wine importpfx.exe -f mhs.p12 -p "mypass" -t USER -s MY

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #3 from Juan Lang   2008-01-07 17:44:33 ---
Crypt32 is the correct component.  You can probably create a stub for
PFXIsPFXBlob pretty easily - give it a go if you like.

Add something like this to the spec file:
@ stub I_CryptUninstallOssGlobal
@ stub PFXExportCertStore
@ stub PFXImportCertStore
+ @ stdcall PFXIsPFXBlob(ptr)
@ stub RegCreateHKCUKeyExU
@ stub RegCreateKeyExU
@ stub RegDeleteValueU

and add a stub function in main.c, something like:
+ BOOL WINAPI PFXIsPFXBlob(CRYPT_DATA_BLOB* pPFX)
+ {
+     FIXME("(%p): stub\n", pPFX);
+     return TRUE;
+ }

(The pluses are just an indication of which lines are being added - they're
reminiscent of the unified diff format we use, but this isn't a proper patch. 
Remove them if you're copy/pasting.)

I suspect that even with a better stub in place, it'll still have trouble with
other unimplemented functions in crypt32, as there's no implementation of
PKCS12 in Wine's crypt32 yet.

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |http://home.fnal.gov/~jkleme
                   |                            |nc/importpfx.html
           Keywords|                            |download

--- Comment #4 from Juan Lang   2008-01-08 11:52:55 ---
Could you attach an example PFX file, just so anyone who wants to work on it
has something to test with?

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #5 from Juan Lang   2008-01-08 11:55:21 ---
Created an attachment (id=10120)
 --> (http://bugs.winehq.org/attachment.cgi?id=10120)
Stub for PFXIsPFXBlob

Here's a patch that adds the stub for PFXIsPFXBlob.  As I expected, this only
leads to a further crash, a call to PFXImportCertStore.

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #6 from Juan Lang   2008-01-08 12:36:56 ---
For amusement, read Peter Gutmann's take on PFX:
http://www.cs.auckland.ac.nz/~pgut001/pubs/pfx.html

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #7 from Mark Smith   2008-01-09 00:26:47 ---
An example (make your own .p12 blob) may be found here:
http://www.flatmtn.com/computer/Linux-SSLCertifcatesPKCS12.html

First, however a root certificate must exist in order to sign the thing,
(OpenSSL's CA.pl script can create one)

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #8 from Juan Lang   2008-02-08 12:05:45 ---
*** Bug 2436 has been marked as a duplicate of this bug. ***

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

ricardo filipe  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #9 from ricardo filipe   2008-12-07 17:25:15 ---
if stubs were enough i'd be willing to debug this and stub all failures... but
i'm guessing this really needs the functions implemented, would stubs work be
worth it?

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #10 from Austin English   2008-12-07 17:39:09 ---
(In reply to comment #9)
> if stubs were enough i'd be willing to debug this and stub all failures... but
> i'm guessing this really needs the functions implemented, would stubs work be
> worth it?

Try stubbing it and see :-). Many apps just check if features are available,
but don't actually use all of them.

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #11 from Juan Lang   2008-12-07 21:20:08 ---
(In reply to comment #9)
> if stubs were enough i'd be willing to debug this and stub all failures... but
> i'm guessing this really needs the functions implemented, would stubs work be
> worth it?

I don't think stubs are worth it.  I implemented some a while back just to
verify that assumption, and the app (importpfx) just crashed later with a stub.

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1

--- Comment #12 from Juan Lang   2009-01-27 12:03:59 ---
I sent a patch for PFXIsPFXBlob:
http://www.winehq.org/pipermail/wine-patches/2009-January/068458.html
and one that stubs PFXImportCertStore:
http://www.winehq.org/pipermail/wine-patches/2009-January/068459.html

With both applied, importpfx will fail, but not crash.  I'll update the summary
once the patches are committed.

[Bug 11070] Unimplemented function CRYPT32.dll.PFXIsPFXBlob

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #10120|0                           |1
        is obsolete|                            |

--- Comment #13 from Juan Lang   2009-01-27 12:05:47 ---
(From update of attachment 10120)
This stub is superseded by the implementation patch I sent.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Unimplemented function      |importpfx fails, needs
                   |CRYPT32.dll.PFXIsPFXBlob    |PFXImportCertStore

--- Comment #14 from Juan Lang   2009-01-28 10:50:23 ---
With today's git, running importpfx.exe like so:
  $ wine importpfx.exe -f example.p12 -p "" -t USER -s My
produces the following output on the console:
  fixme:cryptasn:PFXImportCertStore (0x33f98c, 0x33facc, 00001000): stub
  Error: Could not import the PKCS12 file

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |18201

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Alois  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #15 from Alois   2009-06-30 15:48:28 ---
I get the same error with wine 1.1.24.

with overriding crypt32.dll and msasn1.dll it seems to be possible to import an
pfx with importpfx.exe.

but as I could test, the certificate does not work, altough I can see it listed
in the store.

I've also tried winhttpcertcfg.exe to import an pfx, with overrided dlls it
always tells me that the path, filename or password of the pfx is not correct,
without overriding the dlls it dies with:

Microsoft (R) WinHTTP Certificate Configuration Tool
Copyright (C) Microsoft Corporation 2001.

Error:  Unable to open PFX file
fixme:crypt:CRYPT_MemCloseStore Unimplemented flags: 00000001
fixme:crypt:CRYPT_RegCloseStore Unimplemented flags: 00000001
fixme:crypt:CRYPT_MemCloseStore Unimplemented flags: 00000001

any ideas?

thanks!

kind regards, Alois

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Kenneth Robinette  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #16 from Kenneth Robinette   2010-01-19 19:51:48 ---
(In reply to comment #15)
> I get the same error with wine 1.1.24.
> with overriding crypt32.dll and msasn1.dll it seems to be possible to import an
> pfx with importpfx.exe.
> but as I could test, the certificate does not work, altough I can see it listed
> in the store.
> I've also tried winhttpcertcfg.exe to import an pfx, with overrided dlls it
> always tells me that the path, filename or password of the pfx is not correct,
> without overriding the dlls it dies with:
> Microsoft (R) WinHTTP Certificate Configuration Tool
> Copyright (C) Microsoft Corporation 2001.
> Error:  Unable to open PFX file
> fixme:crypt:CRYPT_MemCloseStore Unimplemented flags: 00000001
> fixme:crypt:CRYPT_RegCloseStore Unimplemented flags: 00000001
> fixme:crypt:CRYPT_MemCloseStore Unimplemented flags: 00000001
> any ideas?
> thanks!
> kind regards, Alois

In order to test the SSH certificate authentication in our SNeTerm product, I
wrote a .pfx/p12 import utility and used the default wine crypt32.dll.  I was
able to import successfully into the MY and ROOT certificate stores.

I also was able to successfully authenticate using the certificates with the
SSH Data Communications Tectia server (which was setup to use a host
certificate and client certificate authentication).

The testing was done on a Redhat x86_64 Enterprise 5 system using wine 1.1.36.

So, it would appear that the only thing left to do for the normal wine
Microsoft certificate import wizard is to fix the logic to read the .pfx/.p12
certificate file and build the required data structures to call:

CryptImportKey()
CertAddEncodedCertificateToStore()
// For Friendly Name
CertSetCertificateContextProperty()
// If certificate is to be copied to hardware device
CryptSetKeyParam()

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Dan Kegel  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #17 from Dan Kegel   2010-05-14 12:42:55 ---
There were some related patches posted today:
http://www.winehq.org/pipermail/wine-patches/2010-May/088409.html
http://www.winehq.org/pipermail/wine-patches/2010-May/088410.html
that supposedly implement PFXImportCertStore.  Do they help?

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #18 from Kenneth Robinette   2010-05-14 13:35:19 ---
(In reply to comment #17)
> There were some related patches posted today:
> http://www.winehq.org/pipermail/wine-patches/2010-May/088409.html
> http://www.winehq.org/pipermail/wine-patches/2010-May/088410.html
> that supposedly implement PFXImportCertStore.  Do they help?

No, not really.  The patch only adds the certificate and not the certificate
private key.  The end result is the certificate cannot be used for
authentication.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Mark Smith  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #10090|0                           |1
        is obsolete|                            |

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Mark Smith  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #10089|0                           |1
        is obsolete|                            |

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Mark Smith  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #10088|0                           |1
        is obsolete|                            |

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #19 from Mark Smith   2010-05-24 14:00:13 ---
Windows/IE has a certificate manager which can be invoked with a combination of
natives:

mhs@pisa:~/ie7dlls$ for i in cryptui.dll crypt32.dll cryptnet.dll msasn1.dll
rsaenh.dll secur32.dll userenv.dll ; do cp ./$i
~/.wine/drive_c/windows/system32/ ; wine regsvr32 C:\windows\system32\$i ;
done
mhs@pisa:~/ie7dlls$ cd ~/.wine/drive_c/windows/system32/

mhs@pisa:~/.wine/drive_c/windows/system32$
WINEDLLOVERRIDES=msasn1,secur32,userenv,cryptui,cryptnet,crypt32,rsaenh=n,b
wine rundll32.exe cryptui.dll,CryptUIStartCertMgr

It gets as far as a pop-up about a cryptographic "service provider" not being
installed.  On the terminal, an advapi error can be seen during execution of
rsaenh.dll.  On a Windows system, this would be where the actual work of
"importing" the certificate in a Windows system.  See Dependency Walker
attachment for Windows details.

ImportPFX will fail in almost exactly the same way with this combination of
natives.

As of wine-1.2-rc1

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #20 from Mark Smith   2010-05-24 14:10:11 ---
Created an attachment (id=28248)
 --> (http://bugs.winehq.org/attachment.cgi?id=28248)
Full depends.exe profile of the Windows Certificate Manager

Annotated by me to provide some context.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #21 from Mark Smith   2010-05-24 14:11:27 ---
Created an attachment (id=28249)
 --> (http://bugs.winehq.org/attachment.cgi?id=28249)
Partial +loaddll,+advapi log of the Windows Certificate Manager

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #22 from Mark Smith   2010-05-24 14:11:56 ---
Created an attachment (id=28250)
 --> (http://bugs.winehq.org/attachment.cgi?id=28250)
Partial +loaddll,+advapi log of importpfx.exe

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #23 from Mark Smith   2010-05-24 14:12:47 ---
Created an attachment (id=28251)
 --> (http://bugs.winehq.org/attachment.cgi?id=28251)
Screenshot of the pop-up error in Windows Certificate Manager

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #24 from Juan Lang   2010-05-24 14:27:18 ---
These logs are sort of interesting, but pretty off-topic for implementing
PFXImportCertStore.  From your logs:

trace:loaddll:load_native_dll Loaded L"C:\windows\system32\rsaenh.dll" at
0x68000000: native
trace:advapi:GetTokenInformation (0xa0, TokenUser, 0x32dbe0, 1024, 0x32dbd0):
trace:advapi:GetTokenInformation (0xa0, TokenType, 0x32dad8, 4, 0x32dae0):
err:advapi:ImpersonateLoggedOnUser NtDuplicateToken failed with error
0xc0000022
trace:advapi:GetTokenInformation (0xa0, TokenType, 0x32d890, 4, 0x32d898):
err:advapi:ImpersonateLoggedOnUser NtDuplicateToken failed with error
0xc0000022
trace:loaddll:free_modref Unloaded module L"C:\windows\system32\rsaenh.dll"
: native

That is, native rsaenh fails to load due to ImpersonateLoggedOnUser failing
(NtDuplicateToken is failing with STATUS_ACCESS_DENIED.)  This may well be a
bug elsewhere in Wine that prevents native rsaenh from being used.  But that's
not the subject of this bug.

Please, let's keep this bug about implementing PFXImportCertStore.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #25 from Mark Smith   2010-05-25 00:11:54 ---
(In reply to comment #24)
> Please, let's keep this bug about implementing PFXImportCertStore.

I did not understand what a CSP was until I did some reading.  And it looks as
though such a provider does exist in Wine already (in some form, at least).  So
I'll go play with that in the meantime.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #26 from [e-mail] 2012-05-17 15:15:11 CDT ---
This bug has not been updated for two years. Is this still an issue i current
(1.5.4) or newer wine ? You may also close this as abandoned if you feel that
that this is issue is no longer relevant to you.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #27 from Kenneth Robinette  2012-05-17 15:32:06 CDT ---
Its still an issue.  At the current time, the only way to import certificates
into the certificate store is with a custom import routine that uses the normal
Microsoft CAPI and OpenSSL PKCS12 support.

We added that support in our current SNetTerm product, which currently runs
under wine on the Mac (wineskins) and Ubuntu.  I suspect it will run under all
the newer Linux systems, but not the old ones such as Redhat Enterprise 6.0. 
The wine developers broke the X11 drivers on the old systems after wine release
wine-1.3.28.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #28 from Dan Kegel  2012-05-17 16:24:37 CDT ---
This is kind of off topic, but do you have a bug link for that X problem?

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #29 from Kenneth Robinette  2012-05-17 17:30:20 CDT ---
(In reply to comment #28)
> This is kind of off topic, but do you have a bug link for that X problem?

I first reported it in bug 28646, and was advised it was a "driver" problem.
Most programs continued to run (with black icons, etc) but wine release 1.5.4
cannot run any programs (including winecfg) on the Redhat Enterprise 6 based
systems.  I suspect that is just more special code in WINE that is not
supported by the video drivers on various systems.

I also see reports that wine versions 1.5.1 and later is causing problems on
the MAC's that have an ATI/AMD GPU.  I think that is also related to "drivers".

So I guess it's a hit or miss game to determine what systems WINE will work on
now days.

[Bug 11070] importpfx fails, needs PFXImportCertStore

http://bugs.winehq.org/show_bug.cgi?id=11070

Qian Hong  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 11070] importpfx fails, needs PFXImportCertStore

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #30 from Ken Sharp  ---
PFXImportCertStore is a stub in Wine 1.7.45.
http://source.winehq.org/source/dlls/crypt32/decode.c#6272

[Bug 11070] importpfx fails, needs PFXImportCertStore

https://bugs.winehq.org/show_bug.cgi?id=11070

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #31 from [e-mail] ---
still stub 1.7.51

[Bug 11070] importpfx fails, needs PFXImportCertStore implemented

https://bugs.winehq.org/show_bug.cgi?id=11070

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|importpfx fails, needs      |importpfx fails, needs
                   |PFXImportCertStore          |PFXImportCertStore
                   |                            |implemented

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|importpfx fails, needs      |importpfx fails, needs
                   |PFXImportCertStore          |PFXImportCertStore
                   |implemented                 |implementation

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

Michel Terrisse  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #32 from Michel Terrisse  ---
Wine 1.8.5 (Ubuntu 16.10, PlayOnLinux)
PFXImportCertStore still doesn't work.

I tried to convert the .pfx to a .sst file on Windows (import with mmc.exe and
export with PowerShell cmdlet Export-Certificate). From Wine Control Panel I
can import the .sst file with no error, but no certificate are imported.

I serialized the certificates on Windows (CertSerializeCertificateStoreElement)
and tried to import them with CertAddSerializedElementToStore, it fails too
(access violation).

So is there a known workaround for this bug?

I have read this comment in the topic
"At the current time, the only way to import certificates into the certificate
store is with a custom import routine that uses the normal Microsoft CAPI and
OpenSSL PKCS12 support."
Can you please give more information about this?

Thank you for you help,

Michel Terrisse

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

ricardo filipe  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|[e-mail] |

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #33 from Michel Terrisse  ---
Same thing with Wine 1.9.20.

Regards,

Michel Terrisse

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #34 from Michel Terrisse  ---
I created another bug report for the access violation in
CertAddSerializedElementToStore (https://bugs.winehq.org/show_bug.cgi?id=41604)

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #35 from Michel Terrisse  ---
And I created another bug report for importation of .sst files that does
nothing
https://bugs.winehq.org/show_bug.cgi?id=41605

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #36 from Michel Terrisse  ---
Same thing with Wine 2.0-staging (Ubuntu 16.10, PlayOnLinux)

Regards,

Michel Terrisse

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #37 from [e-mail] ---
It seems registering iZotope VST plugins is broken by the lack of this
function. Trying to authorize iZotope Ozone 7 with a legitimate license results
in

fixme:crypt:PFXImportCertStore (0x33d534, 0x15aa89c, 00000000): stub

being outputted to the terminal and the program reporting it failed to
authorize straight after. This happens with both online and offline
authorization.

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #38 from [e-mail] ---
Using the native Windows crypt32.dll fixed my problem. Though hopefully it's
useful to know what programs uses functions that are unimplemented in Wine.

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

Jim K  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #39 from Jim K  ---
(In reply to ajduck from comment #38)
> Using the native Windows crypt32.dll fixed my problem.

Hi! Could you please clarify how do you used that lib? I downloaded crypt32.dll
for Win XP and put it to system32 instead of original one but there was no
effect.
Was you able to store certificate in "Windows certificate storage"?

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #40 from [e-mail] ---
(In reply to Jim K from comment #39)
> (In reply to ajduck from comment #38)
> > Using the native Windows crypt32.dll fixed my problem.
>
> Hi! Could you please clarify how do you used that lib? I downloaded
> crypt32.dll for Win XP and put it to system32 instead of original one but
> there was no effect.
> Was you able to store certificate in "Windows certificate storage"?

I used Winetricks in order to install crypt32.dll. Install Winetricks (if you
don't already have it), launch it and select the following:

1) "Select the default wineprefix"
2) "Install a Windows DLL or component"
3) "crypt32"

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

virex  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #41 from virex  ---
i installed crypt32. After that pfx file can open and ask for a password in
program but cannon load the certificate.

And also cannot import pfx certificate by certification center in wine control.

Any ideas what may be wrong?

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #42 from virex  ---
wine 3.14-1.2

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #43 from virex  ---
and native Windows crypt32.dll from Windows XP size 606208 did not fixed my
problem

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #44 from [e-mail] ---
You might want to try Wine staging if you're having problems with native
crypt32.

Strangely I was finding that (on winehq-dev 3.19) it wasn't working on one of
my computers while on another computer it was. But it started working again
after I installed winehq-staging today. The other computer was probably fine
because winehq-staging was installed when I needed crypt32.

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

Hans Leidekker  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
      Fixed by SHA1|                            |226fd5cb2345f65f520e7652517
                   |                            |06b6ea83802e4
             Status|NEW                         |RESOLVED

--- Comment #45 from Hans Leidekker  ---
An initial implementation of PFXImportCertStore was added with
226fd5cb2345f65f520e765251706b6ea83802e4. importpfx claims success on current
Wine with an openssl generated pfx file.

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #46 from Alexandre Julliard  ---
Closing bugs fixed in 4.1.

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #47 from Michel Terrisse  ---
Hello,

I just tried with Wine 4.2 (PlayOnMac) and couldn't import a .pfx.
PFXImportCertStore returns success but the certificate is not imported.

[Bug 11070] importpfx fails, needs PFXImportCertStore implementation

https://bugs.winehq.org/show_bug.cgi?id=11070

--- Comment #48 from Hans Leidekker  ---
(In reply to Michel Terrisse from comment #47)
> Hello,
>
> I just tried with Wine 4.2 (PlayOnMac) and couldn't import a .pfx.
> PFXImportCertStore returns success but the certificate is not imported.

Could you open a new bug for this and attach a +crypt trace? If you can share
the pfx, please attach it there too.