ns-wsdbase-wsd_security_cert_validation.md

UID	title	description	helpviewer_keywords	old-location	tech.root	ms.assetid	ms.date	ms.keywords	req.header	req.include-header	req.target-type	req.target-min-winverclnt	req.target-min-winversvr	req.kmdf-ver	req.umdf-ver	req.ddi-compliance	req.unicode-ansi	req.idl	req.max-support	req.namespace	req.assembly	req.type-library	req.lib	req.dll	req.irql	targetos	req.typenames	req.redist	ms.custom	f1_keywords	dev_langs	topic_type	api_type	api_location	api_name
NS:wsdbase._WSD_SECURITY_CERT_VALIDATION	WSD_SECURITY_CERT_VALIDATION (wsdbase.h)	Represents the criteria for matching client certificates against those of an HTTPS server. (WSD_SECURITY_CERT_VALIDATION)	*PWSD_SECURITY_CERT_VALIDATION WSDAPI_SSL_CERT_DEFAULT_CHECKS WSDAPI_SSL_CERT_IGNORE_EXPIRY WSDAPI_SSL_CERT_IGNORE_INVALID_CN WSDAPI_SSL_CERT_IGNORE_REVOCATION WSDAPI_SSL_CERT_IGNORE_UNKNOWN_CA WSDAPI_SSL_CERT_IGNORE_WRONG_USAGE WSD_SECURITY_CERT_VALIDATION WSD_SECURITY_CERT_VALIDATION structure _WSD_SECURITY_CERT_VALIDATION ncd.wsd_security_cert_validation wsdbase/WSD_SECURITY_CERT_VALIDATION	ncd\wsd_security_cert_validation.htm	ncd	1bc157c2-f3c2-4b67-a6ae-251ba1cb0379	12/05/2018	*PWSD_SECURITY_CERT_VALIDATION, WSDAPI_SSL_CERT_DEFAULT_CHECKS, WSDAPI_SSL_CERT_IGNORE_EXPIRY, WSDAPI_SSL_CERT_IGNORE_INVALID_CN, WSDAPI_SSL_CERT_IGNORE_REVOCATION, WSDAPI_SSL_CERT_IGNORE_UNKNOWN_CA, WSDAPI_SSL_CERT_IGNORE_WRONG_USAGE, WSD_SECURITY_CERT_VALIDATION, WSD_SECURITY_CERT_VALIDATION structure, _WSD_SECURITY_CERT_VALIDATION, ncd.wsd_security_cert_validation, wsdbase/WSD_SECURITY_CERT_VALIDATION	wsdbase.h	Windows.h	Windows	Windows 7 [desktop apps only]	Windows Server 2008 R2 [desktop apps only]													Windows	WSD_SECURITY_CERT_VALIDATION		19H1	_WSD_SECURITY_CERT_VALIDATION wsdbase/_WSD_SECURITY_CERT_VALIDATION WSD_SECURITY_CERT_VALIDATION wsdbase/WSD_SECURITY_CERT_VALIDATION	c++	APIRef kbSyntax	HeaderDef	wsdbase.h	WSD_SECURITY_CERT_VALIDATION

WSD_SECURITY_CERT_VALIDATION structure

-description

Represents the criteria for matching client certificates against those of an HTTPS server.

Do not use WSD_SECURITY_CERT_VALIDATION_V1 directly in your code; using WSD_SECURITY_CERT_VALIDATION instead ensures that the proper version, based on the Windows version.

-struct-fields

-field certMatchArray

An array of CERT_CONTEXT structures that contain certificates to be matched against those provided by the HTTPS server or client. Only one matching certificate is required for validation. This parameter can be NULL.

-field dwCertMatchArrayCount

The count of certificates in certMatchArray.

-field hCertMatchStore

A handle to a certificate store that contains certificates to be matched against those provided by the HTTPS server or client. Only one matching certificate is required for validation. This parameter can be NULL.

-field hCertIssuerStore

A handle to a certificate store that contains root certificates against which a certificate from the HTTPS server or client should chain to. Validation succeeds as long as the certificate chains up to at least one root certificate. This parameter can be NULL.

-field dwCertCheckOptions

A bitwise OR combination of values that specify which certificate checks to ignore.

Value	Meaning
WSDAPI_SSL_CERT_DEFAULT_CHECKS 0x0	Handle any revoked certificate errors.
WSDAPI_SSL_CERT_IGNORE_REVOCATION 0x1	Ignore revoked certificate errors.
WSDAPI_SSL_CERT_IGNORE_EXPIRY 0x2	Ignore expired certificate errors.
WSDAPI_SSL_CERT_IGNORE_WRONG_USAGE 0x4	Ignore certificate use errors.
WSDAPI_SSL_CERT_IGNORE_UNKNOWN_CA 0x8	Ignore unknown certificate authority errors.
WSDAPI_SSL_CERT_IGNORE_INVALID_CN 0x10	Ignore invalid common name certificate errors.

-field pszCNGHashAlgId

-field pbCertHash

-field dwCertHashSize

-remarks

This structure is used in the pConfigData member of the WSD_CONFIG_PARAM structure.

When the configParamType of WSD_CONFIG_PARAM is WSD_SECURITY_SSL_SERVER_CERT_VALIDATION, this structure can be used to validate SSL server certificates presented by an SSL server.

When the configParamType of WSD_CONFIG_PARAM is WSD_SECURITY_SSL_CLIENT_CERT_VALIDATION, this structure can be used to validate SSL client certificates presented by an SSL client.

WSD_SECURITY_CERT_VALIDATION defines 3 certificate matching mechanisms. To obtain a match, at least one such mechanism must be satisfied.

If the application is built using Windows 8 SDK targeted for Windows 8 OS, WSD_SECURITY_CERT_VALIDATION resolves into the new structure. However, as a result, the application can then only run on Windows 8 machines.

If the application is built using Windows 8 SDK targeted for Windows 7 OS, WSD_SECURITY_CERT_VALIDATION will resolve into the old structure (WSD_SECURITY_CERT_VALIDATION_V1). While it's a given that the application will be supported for Windows 7, it also on Windows 8 since wsdapi.dll on Windows 8 will handle both the old and the newer versions of this structure.

An application already built using Windows 7 SDK will use the old version of this structure. It will run fine on Windows 8 since wsdapi.dll on Windows 8 can handle both versions.