Implement read_system_root_certs on Windows

fpagliughi · Aug 29, 2019 · e6041c5 · e6041c5
1 parent e93c15a
commit e6041c5
Showing 1 changed file with 19 additions and 3 deletions.
diff --git a/src/mbedtls_context.cpp b/src/mbedtls_context.cpp
@@ -43,6 +43,7 @@
 #include <mbedtls/ssl.h>
 #include <mutex>
 #include <chrono>
+#include <cassert>
 
 #ifdef __APPLE__
     #include <TargetConditionals.h>
@@ -59,7 +60,11 @@
     #include <sstream>
     #include <sys/stat.h>
 #else
-    // TODO: Add Windows #includes here
+	#include <wincrypt.h>
+    #include <sstream>
+
+    #pragma comment (lib, "crypt32.lib")
+	#pragma comment (lib, "cryptui.lib")
 #endif
 
 
@@ -554,9 +559,20 @@ namespace sockpp {
     }
 
 #else
-    // TODO: Windows support
     static string read_system_root_certs() {
-        return "";
+	    PCCERT_CONTEXT pContext = nullptr;
+	    HCERTSTORE hStore = CertOpenSystemStore(NULL, "ROOT");
+		if(hStore == nullptr) {
+			return "";
+		}
+
+		stringstream certs;
+		while ((pContext = CertEnumCertificatesInStore(hStore, pContext))) {
+			certs.write((const char*)pContext->pbCertEncoded, pContext->cbCertEncoded);
+		}
+
+		CertCloseStore(hStore, CERT_CLOSE_STORE_FORCE_FLAG);
+		return certs.str();
     }
 #endif