certificate expiration check script

[aviv18]

Hi! 
We are using smartcards. 
I want to send an email/popup message to the user 30 days before user certificate expired. 
the cached certificates are stored in for any user in : current user\personal\certificates . 
  
does someone have a script for that? 
  

Thanks, 
Aviv Hassidim 

[mLipok]

Some time ago I started to play with

Certificate Enrollment API
https://msdn.microsoft.com/en-us/library/windows/desktop/aa374863(v=vs.85).aspx

Here is what I get so far:

expandcollapse popup

#include <MsgBoxConstants.au3>


_Example()
Func _Example()
    ; Error monitoring. This will trap all COM errors while alive.
    ; This particular object is declared as local, meaning after the function returns it will not exist.
    Local $oErrorHandler = ObjEvent("AutoIt.Error", "_ErrFunc")

    Local $oCX509PrivateKey = ObjCreate("X509Enrollment.CX509PrivateKey.1")
    If @error Then MsgBox($MB_ICONERROR, '', _
            '@error = ' & @error & @CRLF & '@extended = ' & @extended)

    Local $oCX509CertificateRequestCertificate = ObjCreate("X509Enrollment.CX509CertificateRequestCertificate")
    If @error Then MsgBox($MB_ICONERROR, '', _
            '@error = ' & @error & @CRLF & '@extended = ' & @extended)

    Local $oCSP1 = $oCX509CertificateRequestCertificate.Initialize(1)
    Local $oCSP_Coll = $oCX509CertificateRequestCertificate.CspInformations
    Local $oCSP_Unizeto = Null

    For $oCSP_enum In $oCSP_Coll
;~      ConsoleWrite('$oCX509CertificateRequestCertificate.IsSmartCard=' & $oCX509CertificateRequestCertificate.IsSmartCard & @CRLF)
        ConsoleWrite('$oCSP_enum.Name=' & $oCSP_enum.Name & @CRLF)
        ConsoleWrite('$oCSP_enum.Type=' & $oCSP_enum.Type & @CRLF)
        If $oCSP_enum.Name = 'cryptoCertum3 CSP - profil bezpieczny' Then
            $oCSP_Unizeto = $oCSP_enum
        EndIf
        ConsoleWrite('$oCSP_enum.IsSmartCard=' & $oCSP_enum.IsSmartCard & @CRLF)
        ConsoleWrite('$oCSP_enum.IsSoftwareDevice=' & $oCSP_enum.IsSoftwareDevice & @CRLF)
        ConsoleWrite('$oCSP_enum.KeySpec=' & $oCSP_enum.KeySpec & @CRLF)
        ConsoleWrite('$oCSP_enum.LegacyCsp=' & $oCSP_enum.LegacyCsp & @CRLF)
        ConsoleWrite('$oCSP_enum.Valid=' & $oCSP_enum.Valid & @CRLF)
        ConsoleWrite('$oCSP_enum.Version=' & $oCSP_enum.Version & @CRLF)
        ConsoleWrite('' & @CRLF)

    Next
    If @error Then MsgBox($MB_ICONERROR, '', _
            '@error = ' & @error & @CRLF & '@extended = ' & @extended)

    $oCSP_Unizeto.InitializeFromName('cryptoCertum3 CSP - profil bezpieczny')

    $oCX509PrivateKey.CspInformations = $oCSP_Coll

;~  $oCX509PrivateKey.CspInformations
    $oCX509PrivateKey.Silent = False
    $oCX509PrivateKey.ProviderName = 'cryptoCertum3 CSP - profil bezpieczny'
    $oCX509PrivateKey.ProviderType = 1
    MsgBox(0, '', $oCX509PrivateKey.SecurityDescriptor)
    $oCX509PrivateKey.Open()
;~  ConsoleWrite('$oCX509PrivateKey.CspStatus=' & $oCX509PrivateKey.CspStatus & @CRLF)
;~  ConsoleWrite('$oCX509PrivateKey.UniqueContainerName=' & $oCX509PrivateKey.UniqueContainerName & @CRLF)
;~  ConsoleWrite('$oCX509PrivateKey.UIContextMessage=' & $oCX509PrivateKey.UIContextMessage & @CRLF)
    ConsoleWrite('$oCX509PrivateKey.MachineContext=' & $oCX509PrivateKey.MachineContext & @CRLF)
;~  MsgBox(0, '', $oCX509PrivateKey.ReaderName)
;~  MsgBox(0, '', $oCX509PrivateKey.ProviderType)
;~  MsgBox(0, '', $oCX509PrivateKey.ProviderName)
;~  MsgBox(0, '', $oCX509PrivateKey.FriendlyName)
    ConsoleWrite('$oCX509PrivateKey.DefaultContainer=' & $oCX509PrivateKey.DefaultContainer & @CRLF)
    ConsoleWrite('$oCX509PrivateKey.Opened=' & $oCX509PrivateKey.Opened & @CRLF)


EndFunc    ;==>_Example



; User's COM error function. Will be called if COM error occurs
Func _ErrFunc($oError)
    ; Do anything here.
    ConsoleWrite(@ScriptName & " (" & $oError.scriptline & ") : ==> COM Error intercepted !" & @CRLF & _
            @TAB & "err.number is: " & @TAB & @TAB & "0x" & Hex($oError.number) & @CRLF & _
            @TAB & "err.windescription:" & @TAB & $oError.windescription & @CRLF & _
            @TAB & "err.description is: " & @TAB & $oError.description & @CRLF & _
            @TAB & "err.source is: " & @TAB & @TAB & $oError.source & @CRLF & _
            @TAB & "err.helpfile is: " & @TAB & $oError.helpfile & @CRLF & _
            @TAB & "err.helpcontext is: " & @TAB & $oError.helpcontext & @CRLF & _
            @TAB & "err.lastdllerror is: " & @TAB & $oError.lastdllerror & @CRLF & _
            @TAB & "err.scriptline is: " & @TAB & $oError.scriptline & @CRLF & _
            @TAB & "err.retcode is: " & @TAB & "0x" & Hex($oError.retcode) & @CRLF & @CRLF)
EndFunc    ;==>_ErrFunc


#Region  HOW TO , GUID, DOC

#cs
    http://blogs.technet.com/b/vishalagarwal/archive/2009/08/22/generating-a-certificate-self-signed-using-powershell-and-certenroll-interfaces.aspx

    Security Descriptor String Format
    https://msdn.microsoft.com/en-us/library/windows/desktop/aa379570(v=vs.85).aspx

    ACE Strings
    https://msdn.microsoft.com/en-us/library/windows/desktop/aa374928(v=vs.85).aspx

    How to create a certificate request with CertEnroll (JavaScript)
    https://blogs.msdn.microsoft.com/alejacma/2009/01/28/how-to-create-a-certificate-request-with-certenroll-javascript/
#CE

#EndRegion   HOW TO , GUID, DOC

Note: this was only a few hour's so this is not too much, as this was my fist step.

mLipok