javascript - 使用javascript在IE中导入客户端证书

Question

我尝试将客户端证书导入/安装到 IE 中，但我的 js 代码中出现以下错误。

function ImportClientCertificate() 
      {        
          try {
              var objCertEnrollClassFactory = document.getElementById("objCertEnrollClassFactory");

              var objEnroll = objCertEnrollClassFactory.CreateObject("X509Enrollment.CX509Enrollment");

              var sPKCS7 = "-----BEGIN CERTIFICATE-----" +              
              "MIIDADCCAmkCCQ..." +
              "-----END CERTIFICATE-----"

              objEnroll.Initialize(1);  

              //->this line causes the exception
              objEnroll.InstallResponse(3, sPKCS7, 1, "correctpassword");
          }
          catch (ex) {
              alert(ex.description);
              /*Exception being thrown: CertEnroll::CX509Enrollment::InstallResponse: Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)*/
          }
      }

出现此异常的原因可能是什么？我已经尝试将 IE 中的安全级别设置为低，但没有帮助。将证书手动安装到用户私有(private)证书存储中工作正常。

非常感谢任何帮助。

Answer 1

我很惊讶这对你有用!

我发现我必须将 restrictions 参数(在您的示例中为 3)更改为 0 或 4。这基于位于 https://msdn.microsoft.com/en-us/library/windows/desktop/aa378051(v=vs.85).aspx 的 MSDN 文档。 :

E_ACCESSDENIED

This method was called from the web and either AllowNoOutstandingRequest or AllowUntrustedCertificate was specified in the Restrictions parameter.