This support function allows your ISAPI extension to retrieve context and credential handles to the CtxtHandle and CredHandle structures, as defined in the header file sspi.h. Once these handles are retrieved, they can be used to query or manipulate the server certificate information by using the standard certificate APIs that are also defined in sspi.h.

BOOL ServerSupportFunction(
      HCONN ConnID,
      DWORD dwServerSupportFunction,
      LPVOID lpvBuffer,
      LPDWORD lpdwSizeofBuffer,
      LPDWORD lpdwDataType


  • ConnID
    Specifies the connection identifier of the client to which the response data should be sent.

  • dwServerSupportFunction
    The name of the Server Support function, which in this case must be set to HSE_REQ_GET_SSPI_INFO.

  • lpvBuffer
    Points to a buffer that will contain the CtxtHandle on return.

  • lpdwSizeofBuffer
    Unused in this ServerSupportFunction request type.

  • lpdwDataType
    Points to a buffer that will contain the CredHandle on return.


You must ensure that lpvBuffer and lpdwDataType point to buffers that are of sufficient size for the two returned structures.

HSE_REQ_GET_SSPI_INFO is not supported if your ISAPI extension is running in a separate process from IIS because context and credential handles are not designed to be valid across process boundaries.


Client: Requires Windows XP Professional, Windows 2000 Professional, or Windows NT Workstation 4.0.

Server: Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0.

Product: IIS

Header: Declared in httpext.h.