完整代码：
1 public sealed class DataCertificate
2 {
3 #region 生成证书
4 /// <summary>
5 /// 根据指定的证书名和makecert全路径生成证书（包含公钥和私钥，并保存在MY存储区）
6 /// </summary>
7 /// <param name="subjectName"></param>
8 /// <param name="makecertPath"></param>
9 /// <returns></returns>
10 public static bool CreateCertWithPrivateKey(string subjectName, string makecertPath)
11 {
12 subjectName = "CN=" + subjectName;
13 string param = " -pe -ss my -n \"" + subjectName + "\" ";
14 try
15 {
16 Process p = Process.Start(makecertPath, param);
17 p.WaitForExit();
18 p.Close();
19 }
20 catch (Exception e)
21 {
22 return false;
23 }
24 return true;
25 }
26 #endregion
27
28 #region 文件导入导出
29 /// <summary>
30 /// 从WINDOWS证书存储区的个人MY区找到主题为subjectName的证书，
31 /// 并导出为pfx文件，同时为其指定一个密码
32 /// 并将证书从个人区删除(如果isDelFromstor为true)
33 /// </summary>
34 /// <param name="subjectName">证书主题，不包含CN=</param>
35 /// <param name="pfxFileName">pfx文件名</param>
36 /// <param name="password">pfx文件密码</param>
37 /// <param name="isDelFromStore">是否从存储区删除</param>
38 /// <returns></returns>
39 public static bool ExportToPfxFile(string subjectName, string pfxFileName,
40 string password, bool isDelFromStore)
41 {
42 subjectName = "CN=" + subjectName;
43 X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser);
44 store.Open(OpenFlags.ReadWrite);
45 X509Certificate2Collection storecollection = (X509Certificate2Collection)store.Certificates;
46 foreach (X509Certificate2 x509 in storecollection)
47 {
48 if (x509.Subject == subjectName)
49 {
50 Debug.Print(string.Format("certificate name: {0}", x509.Subject));
51
52 byte[] pfxByte = x509.Export(X509ContentType.Pfx, password);
53 using (FileStream fileStream = new FileStream(pfxFileName, FileMode.Create))
54 {
55 // Write the data to the file, byte by byte.
56 for (int i = 0; i < pfxByte.Length; i++)
57 fileStream.WriteByte(pfxByte[i]);
58 // Set the stream position to the beginning of the file.
59 fileStream.Seek(0, SeekOrigin.Begin);
60 // Read and verify the data.
61 for (int i = 0; i < fileStream.Length; i++)
62 {
63 if (pfxByte[i] != fileStream.ReadByte())
64 {
65 fileStream.Close();
66 return false;
67 }
68 }
69 fileStream.Close();
70 }
71 if (isDelFromStore == true)
72 store.Remove(x509);
73 }
74 }
75 store.Close();
76 return true;
77 }
78 /// <summary>
79 /// 从WINDOWS证书存储区的个人MY区找到主题为subjectName的证书，
80 /// 并导出为CER文件（即，只含公钥的）
81 /// </summary>
82 /// <param name="subjectName"></param>
83 /// <param name="cerFileName"></param>
84 /// <returns></returns>
85 public static bool ExportToCerFile(string subjectName, string cerFileName)
86 {
87 subjectName = "CN=" + subjectName;
88 X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser);
89 store.Open(OpenFlags.ReadWrite);
90 X509Certificate2Collection storecollection = (X509Certificate2Collection)store.Certificates;
91 foreach (X509Certificate2 x509 in storecollection)
92 {
93 if (x509.Subject == subjectName)
94 {
95 Debug.Print(string.Format("certificate name: {0}", x509.Subject));
96 //byte[] pfxByte = x509.Export(X509ContentType.Pfx, password);
97 byte[] cerByte = x509.Export(X509ContentType.Cert);
98 using (FileStream fileStream = new FileStream(cerFileName, FileMode.Create))
99 {
100 // Write the data to the file, byte by byte.
101 for (int i = 0; i < cerByte.Length; i++)
102 fileStream.WriteByte(cerByte[i]);
103 // Set the stream position to the beginning of the file.
104 fileStream.Seek(0, SeekOrigin.Begin);
105 // Read and verify the data.
106 for (int i = 0; i < fileStream.Length; i++)
107 {
108 if (cerByte[i] != fileStream.ReadByte())
109 {
110 fileStream.Close();
111 return false;
112 }
113 }
114 fileStream.Close();
115 }
116 }
117 }
118 store.Close();
119 store = null;
120 storecollection = null;
121 return true;
122 }
123 #endregion
124
125 #region 从证书中获取信息
126 /// <summary>
127 /// 根据私钥证书得到证书实体，得到实体后可以根据其公钥和私钥进行加解密
128 /// 加解密函数使用DEncrypt的RSACryption类
129 /// </summary>
130 /// <param name="pfxFileName"></param>
131 /// <param name="password"></param>
132 /// <returns></returns>
133 public static X509Certificate2 GetCertificateFromPfxFile(string pfxFileName,
134 string password)
135 {
136 try
137 {
138 return new X509Certificate2(pfxFileName, password, X509KeyStorageFlags.Exportable);
139 }
140 catch (Exception e)
141 {
142 return null;
143 }
144 }
145 /// <summary>
146 /// 到存储区获取证书
147 /// </summary>
148 /// <param name="subjectName"></param>
149 /// <returns></returns>
150 public static X509Certificate2 GetCertificateFromStore(string subjectName)
151 {
152 subjectName = "CN=" + subjectName;
153 X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser);
154 store.Open(OpenFlags.ReadWrite);
155 X509Certificate2Collection storecollection = (X509Certificate2Collection)store.Certificates;
156 foreach (X509Certificate2 x509 in storecollection)
157 {
158 if (x509.Subject == subjectName)
159 {
160 return x509;
161 }
162 }
163 store.Close();
164 store = null;
165 storecollection = null;
166 return null;
167 }
168 /// <summary>
169 /// 根据公钥证书，返回证书实体
170 /// </summary>
171 /// <param name="cerPath"></param>
172 public static X509Certificate2 GetCertFromCerFile(string cerPath)
173 {
174 try
175 {
176 return new X509Certificate2(cerPath);
177 }
178 catch (Exception e)
179 {
180 return null;
181 }
182 }
183 #endregion
184 }
时间： 2024-08-24 12:03:17