Add UI to manage Certification Authorities (AD)

[sfonteneau]

Could you add a simple UI to manage certificates in:

CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=Configuration,DC=mydomain,DC=lan

This is mainly about managing the cACertificate attribute on that object.

[osvegn]

It can be done through the property page of a domain entry.

[sfonteneau]

Its "CN=Certification Authorities" not ntauth

[synopse]

https://learn.microsoft.com/en-us/windows/win32/adschema/a-cacertificate
It seems to be a X.509 certificate in binary DER format.
You can use mormot.crypt.x509.pas to parse and manage it, or the openssl wrapper.