#include <windows.h>
#include <certenroll.h>

int main() {
    HRESULT hr = CoInitialize(NULL);
    if (FAILED(hr)) {
        // 错误处理
        return 1;
    }

    // 创建 PKCS#7 类型的证书请求对象
    CComPtr<IX509CertificateRequestPkcs7> pCertRequestPkcs7;
    hr = pCertRequestPkcs7.CoCreateInstance(CLSID_CX509CertificateRequestPkcs7);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 设置 PKCS#7 证书请求的属性，比如密钥用途等
    CComPtr<IX509ExtensionKeyUsage> pKeyUsageExtension;
    hr = pKeyUsageExtension.CoCreateInstance(CLSID_CX509ExtensionKeyUsage);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 设置密钥用途扩展的属性
    hr = pKeyUsageExtension->Initialize(X509KeyUsageKeyEncipherment | X509KeyUsageDigitalSignature);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 将密钥用途扩展添加到 PKCS#7 证书请求对象中
    hr = pCertRequestPkcs7->get_CertificateExtensions()->Add(pKeyUsageExtension);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 获取 PKCS#7 证书请求的原始数据
    CComBSTR bstrPkcs7Request;
    hr = pCertRequestPkcs7->Encode(&bstrPkcs7Request);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 在这里可以对 PKCS#7 证书请求的原始数据进行进一步处理

    // 释放资源
    pKeyUsageExtension.Release();
    pCertRequestPkcs7.Release();

    CoUninitialize();
    return 0;
}