关于windows平台下的server端AcquireCredentialsHandle调用失败问题

Question

securityFuns.AcquireCredentialsHandle执行后，返回1312错误码。如下代码：

#include <schannel.h>
#define SECURITY_WIN32
#include <security.h>

#pragma comment(lib,"crypt32.lib")

int _tmain(int argc, _TCHAR* argv[])
{
    HMODULE modSchannel = ::LoadLibrary("SCHANNEL.DLL");
#ifdef UNICODE
    INIT_SECURITY_INTERFACE pfInitSecurityInterface = (INIT_SECURITY_INTERFACE)GetProcAddress(modSchannel, "InitSecurityInterfaceW" );
#else
    INIT_SECURITY_INTERFACE pfInitSecurityInterface = (INIT_SECURITY_INTERFACE)GetProcAddress(modSchannel, "InitSecurityInterfaceA" );
#endif

    PSecurityFunctionTable pSecurityFuns = pfInitSecurityInterface? pfInitSecurityInterface():NULL;

    SecurityFunctionTable securityFuns;
    ::memcpy(&securityFuns, pSecurityFuns, sizeof(securityFuns)); 

    HCERTSTORE hMyCertStore = CertOpenSystemStore(0,_T("ROOT"));

    PCCERT_CONTEXT pCertContext = CertFindCertificateInStore(hMyCertStore, PKCS_7_ASN_ENCODING | X509_ASN_ENCODING, 0, CERT_FIND_SUBJECT_STR_A, L"ssltester", NULL);

    SCHANNEL_CRED  schannelCred;

    memset(&schannelCred, 0, sizeof(schannelCred));
    schannelCred.cCreds     = 1;
    schannelCred.paCred     = &pCertContext;
//  schannelCred.hRootStore = hMyCertStore;
    schannelCred.dwFlags               = SCH_CRED_NO_SYSTEM_MAPPER|SCH_CRED_REVOCATION_CHECK_CHAIN;
    schannelCred.dwVersion             = SCHANNEL_CRED_VERSION;
    schannelCred.grbitEnabledProtocols = SP_PROT_SSL3TLS1_SERVERS;

    TimeStamp  lifetime; //证书生存时间
    CredHandle hCreds;
    SECURITY_STATUS sec_ret = securityFuns.AcquireCredentialsHandle( NULL, UNISP_NAME, SECPKG_CRED_INBOUND, NULL, &schannelCred, NULL, NULL, &hCreds, &lifetime );
    unsigned long lErrorCode;
    if( sec_ret != SEC_E_OK ) 
    {
        lErrorCode = ::GetLastError(); //返回1312错误码
    }
    else
    {
        lErrorCode = 0;
    }
    return 0;
}

Answer 1

经过检查发现是证书存在异常。问题已经解决。