====== CertificateRequestExtensions klasa ====== Pruža extension metode za ''CertificateRequest'' s PQ podrškom. ---- ===== Definicija ===== namespace WvdS.System.Security.Cryptography.X509Certificates public static class CertificateRequestExtensions ---- ===== Metode ===== ^ Naziv ^ Opis ^ | CreateSelfSigned(DateTimeOffset, DateTimeOffset, CryptoMode?) | Kreira samopotpisani certifikat s opcionalnim PQ potpisom | | Create(X509Certificate2, DateTimeOffset, DateTimeOffset, Byte[], CryptoMode?) | Kreira CA-potpisani certifikat s opcionalnim PQ potpisom | ---- ===== Napomene ===== Ova extension klasa proširuje ''System.Security.Cryptography.X509Certificates.CertificateRequest''((Microsoft Docs: https://learn.microsoft.com/dotnet/api/system.security.cryptography.x509certificates.certificaterequest)). ==== Drop-In ponašanje ==== Extension metode imaju istu signaturu kao originalne metode plus opcionalni ''CryptoMode'' parametar: // Originalni .NET X509Certificate2 CreateSelfSigned(DateTimeOffset notBefore, DateTimeOffset notAfter) // Proširenje (Drop-In) X509Certificate2 CreateSelfSigned(DateTimeOffset notBefore, DateTimeOffset notAfter, CryptoMode? mode = null) Kada je ''using'' prostor imena uključen, automatski se koristi extension metoda. ---- ===== Primjer ===== using WvdS.System.Security.Cryptography; using WvdS.System.Security.Cryptography.X509Certificates; CryptoConfig.DefaultMode = CryptoMode.Hybrid; using var rsa = RSA.Create(2048); var request = new CertificateRequest( "CN=Server, O=Org, C=DE", rsa, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1); request.CertificateExtensions.Add( new X509BasicConstraintsExtension(false, false, 0, true)); // Hibridni certifikat: RSA + ML-DSA var cert = request.CreateSelfSigned( DateTimeOffset.Now, DateTimeOffset.Now.AddYears(1)); ---- ===== Vidi također ===== * [[.:start|X509Certificates prostor imena]] * [[.:x509certificate2extensions|X509Certificate2Extensions]] * [[..:cryptomode|CryptoMode Enum]] {{tag>klasse extension static}} ---- //Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional//