Edit

IMFSSLCertificateManager interface (mfidl.h)

  • Article

Implemented by a client and called by Microsoft Media Foundation to get the client Secure Sockets Layer (SSL) certificate requested by the server.

In most HTTPS connections the server provides a certificate so that the client can ensure the identity of the server. However, in certain cases the server might wants to verify the identity of the client by requesting the client to send a certificate. For this scenario, a client application must provide a mechanism for Media Foundation to retrieve the client side certificate while opening an HTTPS URL with the source resolver or the scheme handler. The application must implement IMFSSLCertificateManager, set the IUnknown pointer of the implemented object in the MFNETSOURCE_SSLCERTIFICATE_MANAGER property, and pass the property store to the source resolver. While opening the URL, Media Foundation calls the IMFSSLCertificateManager methods to get the certificate information. If the application needs to connect to HTTPS URL that requires a client-side certificate, or the application wants customized control over the type of server certificates to accept, then they can implement this interface. This interface can also be used by the application to validate the server SSL certificate.

If the IUnknown pointer is not provided by the application and the HTTPS URL does not require the client to provide a certificate, Media Foundation uses the default implementation to open the URL.

Inheritance

The IMFSSLCertificateManager interface inherits from the IUnknown interface. IMFSSLCertificateManager also has these types of members:

Methods

The IMFSSLCertificateManager interface has these methods.

 
IMFSSLCertificateManager::BeginGetClientCertificate

Starts an asynchronous call to get the client SSL certificate.
IMFSSLCertificateManager::EndGetClientCertificate

Completes an asynchronous request to get the client SSL certificate.
IMFSSLCertificateManager::GetCertificatePolicy

Indicates whether the server SSL certificate must be verified by the caller, Media Foundation, or the IMFSSLCertificateManager implementation class.
IMFSSLCertificateManager::GetClientCertificate

Gets the client SSL certificate synchronously.
IMFSSLCertificateManager::OnServerCertificate

Called by Media Foundation when the server SSL certificate has been received; indicates whether the server certificate is accepted.

Requirements

Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Target Platform Windows
Header mfidl.h

See also

Media Foundation Interfaces