P�i pokusu o aktualizaci aplikace Visual Studio 2005 ClickOnce po vypr�en� platnosti certifik�tu, kter� byl pou�it k podeps�n� instalace se zobraz� chybov� zpr�va

Metoda 1

Windows Vista

Zmen�it tento obr�zekZv�t�it tento obr�zek

Zmen�it tento obr�zekZv�t�it tento obr�zek

na syst�m Windows XP

Zmen�it tento obr�zekZv�t�it tento obr�zek

Zmen�it tento obr�zekZv�t�it tento obr�zek

Zmen�it tento obr�zekZv�t�it tento obr�zek

Metoda 2

Metoda 3

1. V aplikaci Visual Studio 2005 klepn�te v nab�dce soubor na p��kaz Nov� a klepn�te na p��kaz projekt.
2. Visual C++ klepn�te klepn�te Aplikace konzoly Win32, zadejte v poli n�zevRenewCert a klepn�te na tla��tko OK.
3. V dialogov�m okn� Pr�vodce aplikac� Win32 klepn�te na tla��tko Dokon�it.
4. In the RenewCert.cpp file, replace the existing code with the following code:

   #include "stdafx.h"
   
   void ReadPFXFile(LPCWSTR fileName, CRYPT_DATA_BLOB *pPFX)
   
   {
   
               HANDLE hCertFile = NULL;
   
               DWORD cbRead = 0;
   
               DWORD dwFileSize = 0, dwFileSizeHi = 0;
   
               hCertFile = CreateFile(fileName, GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, 0, NULL);
   
               dwFileSize = GetFileSize(hCertFile, &dwFileSizeHi);
   
               pPFX->pbData = (BYTE *) CryptMemAlloc(dwFileSize*sizeof(BYTE));
   
               pPFX->cbData = dwFileSize;
   
               ReadFile(hCertFile, pPFX->pbData, pPFX->cbData, &cbRead, NULL);
   
               CloseHandle(hCertFile);
   
   }
   
   void GetPrivateKey(CRYPT_DATA_BLOB pPFX, LPCWSTR szPassword, HCRYPTPROV *hCPContext)
   
   {
   
               HCERTSTORE hCertStore = NULL;
   
               PCCERT_CONTEXT hCertContext = NULL;
   
               DWORD dwKeySpec = AT_SIGNATURE;
   
               BOOL bFreeCertKey = TRUE;
   
               hCertStore = PFXImportCertStore(&pPFX, szPassword, CRYPT_EXPORTABLE);
   
               hCertContext = CertEnumCertificatesInStore(hCertStore, NULL);
   
               CryptAcquireCertificatePrivateKey(hCertContext, 0, NULL, hCPContext, &dwKeySpec, &bFreeCertKey);
   
               CertCloseStore(hCertStore, CERT_CLOSE_STORE_FORCE_FLAG);
   
   }
   
   void PrintContainerName(HCRYPTPROV hCPContext)
   
   {
   
               DWORD containerNameLen = 0;
   
               CHAR *szContainerName = NULL;
   
               CryptGetProvParam(hCPContext, PP_CONTAINER, NULL, &containerNameLen, 0);
   
               szContainerName = (CHAR *)CryptMemAlloc(sizeof(BYTE)*containerNameLen);
   
               CryptGetProvParam(hCPContext, PP_CONTAINER, (BYTE *)szContainerName, &containerNameLen, 0);
   
               printf("This certificate's container name is: %s", szContainerName);
   
   }
   
   void MakeNewCert(HCRYPTPROV hCPContext, LPCWSTR szCertName, LPCWSTR szPassword, CRYPT_DATA_BLOB *pPFX)
   
   {
   
               CERT_NAME_BLOB certNameBlob = {0,NULL};
   
               PCCERT_CONTEXT hCertContext = NULL;
   
               SYSTEMTIME certExpireDate;
   
               HCERTSTORE hTempStore = NULL;
   
               CertStrToName(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, szCertName, CERT_OID_NAME_STR, NULL, NULL, &certNameBlob.cbData, NULL);
   
               certNameBlob.pbData = (BYTE *)CryptMemAlloc(sizeof(BYTE)*certNameBlob.cbData);
   
               CertStrToName(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, szCertName, CERT_OID_NAME_STR, NULL, certNameBlob.pbData, &certNameBlob.cbData, NULL);
   
               GetSystemTime(&certExpireDate);
   
               certExpireDate.wYear += 5;
   
               hCertContext = CertCreateSelfSignCertificate(hCPContext, &certNameBlob, 0, NULL, NULL, NULL, &certExpireDate, NULL);
   
               hTempStore = CertOpenStore(CERT_STORE_PROV_MEMORY, 0, NULL, CERT_STORE_CREATE_NEW_FLAG, 0);
   
               CertAddCertificateContextToStore(hTempStore, hCertContext, CERT_STORE_ADD_NEW, NULL);
   
               PFXExportCertStoreEx(hTempStore, pPFX, szPassword, NULL, EXPORT_PRIVATE_KEYS);
   
               pPFX->pbData = (BYTE *)CryptMemAlloc(sizeof(BYTE)*pPFX->cbData);
   
               PFXExportCertStoreEx(hTempStore, pPFX, szPassword, NULL, EXPORT_PRIVATE_KEYS);
   
               CryptMemFree(certNameBlob.pbData);
   
               CertCloseStore(hTempStore, CERT_CLOSE_STORE_FORCE_FLAG);
   
               CertFreeCertificateContext(hCertContext);
   
   }
   
   void WritePFX(CRYPT_DATA_BLOB pPFX, LPCWSTR szOutputFile)
   
   {
   
               HANDLE hOutputFile = NULL;
   
               DWORD cbWritten = 0;
   
               hOutputFile = CreateFile(szOutputFile, GENERIC_READ | GENERIC_WRITE, 0, NULL, CREATE_ALWAYS, FILE_FLAG_SEQUENTIAL_SCAN, NULL);
   
               WriteFile(hOutputFile, pPFX.pbData, pPFX.cbData, &cbWritten, NULL);
   
               CloseHandle(hOutputFile);
   
   }
   
   int _tmain(int argc, _TCHAR* argv[])
   
   {
   
               LPCWSTR szCertFileName = NULL;
   
               CRYPT_DATA_BLOB pPFX;
   
               LPCWSTR szPassword = NULL;
   
               HCRYPTPROV hCPContext = NULL;
   
               LPCWSTR szCertName = L"CN=NewCert";
   
               CRYPT_DATA_BLOB pPfxOutputBlob = {0,NULL};
   
               LPCWSTR szOutFile = NULL;
   
               // Parse the command line.
   
               if(argc == 1)
   
               {
   
                           printf("renewcert <PFX File> <new cert filename> <new cert friendly name> [optional]<password>\n");
   
                           printf("Example: renewcert oldcert.pfx newcert.pfx \"CN=MyNewCert\" MySuperSecretPassword");
   
                           return 0;
   
               }
   
               if(argc >= 2)
   
                           szCertFileName = argv[1];
   
               if(argc >= 5)
   
                           szPassword = argv[4];
   
               // Uncomment this block to add <new cert filename> and <new cert friendly name> as parameters
   
               // NOTE: <new cert friendly name> must be of format "CN=<name>"
   
               if(argc >= 3)
   
                           szOutFile = argv[2];
   
               if(argc >= 4)
   
                           szCertName = argv[3];
   
               ReadPFXFile(szCertFileName, &pPFX);
   
               GetPrivateKey(pPFX, szPassword, &hCPContext);
   
               //PrintContainerName(hCPContext);
   
               // Uncomment this section to make a new PFX rather than just printing the container name.
   
               // Make sure you also uncomment the command line parameter section above.
   
               MakeNewCert(hCPContext, szCertName, szPassword, &pPfxOutputBlob);
   
               WritePFX(pPfxOutputBlob, szOutFile);
   
               // Clean up.
   
               CryptReleaseContext(hCPContext, 0);
   
               CryptMemFree(pPfxOutputBlob.pbData);
   
               CryptMemFree(pPFX.pbData);
   
               return 0;
   
   }
   

5. V souboru stdafx.h nahra�te existuj�c� k�d n�sleduj�c� k�d:

   // stdafx.h : include file for standard system include files,
   
   // or project specific include files that are used frequently, but
   
   // are changed infrequently.
   
   //
   
   #pragma once
   
   #define WIN32_LEAN_AND_MEAN                     // Exclude rarely used material from Windows headers.
   
   #include <stdio.h>
   
   #include <tchar.h>
   
   #include <windows.h>
   
   #include <wincrypt.h>
   

6. V nab�dce projekt klepn�te na tla��tko Vlastnosti str�nky vlastnost� pro tento projekt otev��t.
7. Rozbalte uzel Linker a potom klepn�te na tla��tko vstup.
8. Klepn�te v okn� vpravo Dal�� z�vislosti pr�zdn� a klepn�te na tla��tko se t�emi te�kami (...) otev�ete dialogov� okno Dal�� z�vislosti.
9. V okn� pr�zdn� zadejte Crypt32.lib a potom klepn�te na tla��tko OK.
10. Klepn�te na tla��tko pou��t a potom klepn�te na tla��tko OK zav�ete str�nky vlastnost�.
11. V nab�dce vytvo�it klepn�te na tla��tko Sestavit �e�en�.
12. Spustit n�sleduj�c� p��kaz Aktualizovat certifik�t po integrovan�ch �e�en�:

    renewcert <OldCertificate>.pfx <NewCertificate>.pfx \"CN=<NewCertificateName>\" <Password>

    Pozn�mka <OldCertificate> je z�stupn� symbol pro star� certifik�t <NewCertificate> je z�stupn� symbol pro nov� certifik�t <NewCertificateName> je z�stupn� n�zev nov�ho certifik�tu a <Password> je z�stupn� symbol pro heslo.

Zp�t nahoru | Dejte n�m zp�tnou vazbu

Kroky pro reprodukci probl�mu

1. Spus�te aplikaci Visual Studio 2005.
2. Na soubor nab�dce klepn�te na p��kaz Nov� a klepn�te na p��kaz projekt.
3. Klepn�te na polo�ku Visual C#, klepn�te na tla��tko Aplikace Windows, v poli n�zev zadejte WindowsApplication1 a klepn�te na tla��tko OK.
4. V aplikaci Solution Explorer klepn�te prav�m tla��tkem my�i WindowsApplication1 a potom klepn�te na p��kaz Vlastnosti.
5. Klepn�te na podpis a p�i�a�te certifik�tu brzy vypr��.
6. V aplikaci Solution Explorer klepn�te prav�m tla��tkem my�i WindowsApplication1 a potom klepn�te na tla��tko publikovat. Spust� se Pr�vodce publikovat.
7. Na kde chcete publikovat aplikace? str�nky zadejte platnou adresu URL a potom klepn�te na tla��tko Dal��. Pro adresu, pou�ijte n�sleduj�c� form�t:
   http:// ServerName / FolderName
8. Na bude aplikace k dispozici offline? str�nky, klepn�te na p��slu�nou mo�nost.
   
   Pozn�mky
   • Pokud chcete nechat u�ivatele spustit aplikace, kdy� je u�ivatel odpojen od s�t�, klepn�te na tla��tko Ano, tato aplikace bude k dispozici online nebo offline. Pr�vodce vytvo�� z�stupce aplikace v nab�dce Start.
   • Pokud chcete aplikaci spustit p��mo z um�st�n� publikace, klepn�te na tla��tko Ne, tato aplikace je k dispozici pouze online. Pr�vodce nevytvo�� z�stupce v nab�dce Start.
9. Pokra�ujte klepnut�m na tla��tko Dal��.
10. Klepn�te na tla��tko Dokon�it publikovat aplikace.
11. Nainstalovat aplikaci ClickOnce z http:// ServerName / FolderName /publish.htm URL.
12. Po vypr�en� platnosti certifik�tu, opakujte kroky 6 a� 10 znovu publikovat aplikace.
13. Zkuste nainstalovat aktualizaci aplikace ClickOnce z http:// ServerName / FolderName /publish.htm URL.

Zp�t nahoru | Dejte n�m zp�tnou vazbu