来自C#的SmartCard的证书
作者:互联网
如何确保我从智能卡访问证书而不是在c#中形成我的个人证书存储区?
如何让我的RSACryptoProvider使用我的智能卡证书私钥?
谢谢
沃利
解决方法:
有时,特别是如果您未在智能卡上使用默认密钥容器名称(Microsoft推荐),则不会将证书复制到本地证书存储区.解决方案是使用crypto api通过KP_CERTIFICATE访问密钥,从检索到的数据构造证书,并为其分配使用您自己的密钥容器名称构造的新RSACryptoServiceProvider.
伪C#代码如下:
int reti = CryptoApi.CryptGetUserKey(_hprovider, keytype, ref userKey);
if (reti)
{
reti =CryptoApi.CryptGetKeyParam(_userKey, KP_CERTIFICATE, ref pbdata, ref pwddatalen, 0);
}
if (reti || pwddatalen>0)
{
byte[] data = new byte[pwddatalen];
ret = CryptoApi.CryptGetKeyParam(_userKey, KP_CERTIFICATE, data, ref pwddatalen, 0);
if (ret)
{
X509Certificate2 c = new X509Certificate2(data);
X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser);
store.Open(OpenFlags.ReadOnly);
X509Certificate2Collection col = store.Certificates.Find(X509FindType.FindByThumbprint, c.Thumbprint, validonly);
store.Close();
if (col.Count != 1)
{
//not found in store - CSP didn't copy it
c.PrivateKey = PrivateKey(keytype);
return c;
}
else
{
return col[0];
}
}
}
private RSACryptoServiceProvider PrivateKey (KeyType keytype)
{
CspParameters csparms = new CspParameters();
csparms.KeyContainerName = _containerName;
csparms.ProviderName = _provider;
csparms.ProviderType = 1;
csparms.Flags = CspProviderFlags.UseMachineKeyStore | CspProviderFlags.UseExistingKey;
csparms.KeyNumber = (int)keytype;
return new RSACryptoServiceProvider(csparms);
}
标签:c,certificate,smartcard 来源: https://codeday.me/bug/20190522/1152081.html