---
name: "OSSL_STORE-winstore"
section: "7ssl"
platform: "linux"
package: "openssl"
version: "3.6.5-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/OSSL_STORE-winstore"
---

# OSSL\_STORE-winstore(7ssl)

OpenSSL built in OSSL\_STORE for Windows

## NAME

OSSL\_STORE-winstore - OpenSSL built in OSSL\_STORE for Windows

## DESCRIPTION

The OSSL\_STORE implementation for Windows provides access to Windows' system `"ROOT"` certificate store through URIs, using the URI scheme `"org.openssl.winstore"`.

### Supported URIs

There is only one supported URI:

```
  org.openssl.winstore:
```

No authority (host, etc), no path, no query, no fragment.

### Supported OSSL\_STORE\_SEARCH operations

- **OSSL\_STORE\_SEARCH\_by\_name**(3)

  As a matter of fact, this must be used.  It is not possible to enumerate all available certificates in the store.

### Windows certificate store features

Apart from diverse constraints present in the certificates themselves, the Windows certificate store also has the ability to associate additional constraining properties alongside a certificate in the store. This includes both documented and undocumented capabilities:

- •

  The documented capability to override EKU

- •

  The undocumented capability to add name constraints

- •

  The undocumented capability to override the certificate expiry date

*Such constraints are not checked by this OSSL\_STORE implementation, and* *thereby not honoured*.

However, once extracted with **OSSL\_STORE\_load**(3), certificates that have constraints in their X.509 extensions will go through the usual constraint checks when used by OpenSSL, and are thereby honoured.

## SEE ALSO

**ossl\_store**(7), **OSSL\_STORE\_open\_ex**(3), **OSSL\_STORE\_SEARCH**(3)

## HISTORY

The winstore (`"org.openssl.winstore"`) implementation was added in OpenSSL 3.2.0.

## NOTES

OpenSSL uses **OSSL\_DECODER**(3) implementations under the hood. To influence what **OSSL\_DECODER**(3) implementations are used, it's advisable to use **OSSL\_STORE\_open\_ex**(3) and set the *propq* argument.

## COPYRIGHT

Copyright 2024 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License").  You may not use this file except in compliance with the License.  You can obtain a copy in the file LICENSE in the source distribution or at \<https://www.openssl.org/source/license.html\>.