Hi guys,
first, forgive me if this has been already discussed before (I did try to
search the archives though).
My question is: is there a way for a kernel-mode driver to do a validation
of a file’s authenticode signature?
In other words, is there a kernel-mode equivalent of the WinVerifyTrust
and/or CertGetCertificateChain API?
(of course, short of having a user-mode service to do the job for me).
Ideally, I’d need it downlevel to Win2K but it would help even if it were
e.g. Vista-only.
Cheers
-Ondrej