Toggle/Change Windows Cert search context between CERT_SYSTEM_STORE_USER and CERT_SYSTEM_STORE_LOCAL_MACHINE for "MY"

[joemcse]

Since the MY path for CERT_SYSTEM_STORE_LOCAL_MACHINE\MY cert store is not inherited into CERT_SYSTEM_STORE_USER\MY, it would be useful to be able to toggle the search path between Local Machine and User certs.

So some flag that allows us to choose our Context between USER and LOCAL_MACHINE for Windows CNG Store.

[dwmw2]

This kind of thing would ideally be part of a URI rather than a separate flag. A quick glance at https://learn.microsoft.com/en-us/powershell/module/pki/get-certificate?view=windowsserver2022-ps seems to suggest PowerShell supports a pathname of the form cert:\LocalMachine\My\EEDEF61D4FF6EDBAAD538BB08CCAADDC3EE28FF

GnuTLS also has a system: URI which works with the Windows certificate store.

[joemcse]

Yeah that would work for me. My workaround is to copy a cert to another store in LocalMachine... and it get's inherited and I can use the --system-store-name (but works in the CurrentUser path due to inheritance). Trying to take advantage of existing certs placed in LocalMachine\My