swicertstoretool
================

swicertstoretool is a tool for creating the SWI cert store data file containing
the root certificates used by software install.  

Command syntax
--------------

The syntax of the command is:

swicertstoretool INPUT_FILE OUTPUT_FILE LOG_FILE

INPUT_FILE is a text file describing the certificates to be put in the store.
The format is described below.

OUTPUT_FILE is where the cert store data file is written.  This will need to be
copied to where the SWI cert store expects to find it,
z:\resource\swicertstore.dat.

LOG_FILE names a file that information is logged to when the command is run.
This should be checked afterwards to see if the command succeeded.  Errors are
indicated by lines starting with "***".

Input file format
-----------------

The input file is in "ini" format.  Each section describes a certificate to be
put in the store, with the section name taken as the certificate label.

The following parameters can be specified for each certificate:

Name			Description
--------------------------------------------------------------------------------
file			The name of the file containing the DER encoded certificate. 
				This field must be present.

mandatory		Whether the certificate is marked as mandatory for software
				install. The value must be either "0" or "1".  The field is
				optional - if it is not present the default is "0".

capability		The name of a capability that the certificate can sign for.
				This field can be repeated to allow multiple capabilities to be
				specified.  Allowed capabilities are:

					TCB
					CommDD
					PowerMgmt
					MultimediaDD
					ReadDeviceData
					WriteDeviceData
					DRM
					TrustedUI
					ProtServ
					DiskAdmin
					NetworkControl
					AllFiles
					SwEvent
					NetworkServices
					LocalServices
					ReadUserData
					WriteUserData
					Location

application		The name of an application that the certificate can be used for.
				This can be repeated, but it must appear at least once.  Allowed
				applications are:

					SWInstall		(Software install)
					SWInstallOCSP	(Software install OCSP signing)
--------------------------------------------------------------------------------

An example input file can be found in this directory.