Function loadSystemCertificates

src/SFML/Network/TcpSocket.cpp:87–272

}

bool loadSystemCertificates([[maybe_unused]] mbedtls_x509_crt* x509crt, [[maybe_unused]] mbedtls_x509_crl* x509crl)
{
#if defined(SFML_SYSTEM_WINDOWS)
    static const auto getErrorString = [](DWORD error) -> std::string
    {
        PTCHAR buffer = nullptr;
        if (FormatMessage(FORMAT_MESSAGE_MAX_WIDTH_MASK | FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM,
                          nullptr,
                          error,
                          0,
                          reinterpret_cast<PTCHAR>(&buffer),
                          0,
                          nullptr) == 0)
        {
            return "Unknown error.";
        }

        const sf::String message = buffer;
        LocalFree(buffer);
        return message.toAnsiString();
    };

    const auto loadStore = [&](const char* store)
    {
        auto* systemStore = CertOpenSystemStoreA(0, store);

        if (systemStore == nullptr)
        {
            sf::err() << "Failed to open Windows certificate store: " << getErrorString(GetLastError()) << std::endl;
            return false;
        }

        const CERT_CONTEXT* cert{};
        cert = CertEnumCertificatesInStore(systemStore, cert);

        while (cert)
        {
            if (cert->dwCertEncodingType == X509_ASN_ENCODING)
            {
                // Certificate parsing might fail because a certificate makes use of intentionally removed features
                // We can just ignore the certificate and move on to the next one
                mbedtls_x509_crt_parse(x509crt, cert->pbCertEncoded, cert->cbCertEncoded);
            }

            cert = CertEnumCertificatesInStore(systemStore, cert);
        }

        const CRL_CONTEXT* crl{};
        crl = CertEnumCRLsInStore(systemStore, crl);

        while (crl)
        {
            if (crl->dwCertEncodingType == X509_ASN_ENCODING)
            {
                // CRL parsing might fail because a CRL makes use of intentionally removed features
                // We can just ignore the CRL and move on to the next one
                mbedtls_x509_crl_parse(x509crl, crl->pbCrlEncoded, crl->cbCrlEncoded);
            }