> > I think xmlSecMSCryptoX509StoreConstructCertsChain() should use WinAPI > functions for building cert chains - CertGetCertificateChain() etc. I don't remember details but I recall there was some problems with it. Did you try to run xmlsec tests? Are all tests pass? Aleksey