====== Razred CertificateRequestExtensions ====== Zagotavlja razširitvene metode za ''CertificateRequest'' s PQ-podporo. ---- ===== Definicija ===== namespace WvdS.System.Security.Cryptography.X509Certificates public static class CertificateRequestExtensions ---- ===== Metode ===== ^ Ime ^ Opis ^ | CreateSelfSigned(DateTimeOffset, DateTimeOffset, CryptoMode?) | Ustvari samopodpisan certifikat z opcijskim PQ-podpisom | | Create(X509Certificate2, DateTimeOffset, DateTimeOffset, Byte[], CryptoMode?) | Ustvari CA-podpisan certifikat z opcijskim PQ-podpisom | ---- ===== Opombe ===== Ta razred razširitev razširja ''System.Security.Cryptography.X509Certificates.CertificateRequest''((Microsoft Docs: https://learn.microsoft.com/dotnet/api/system.security.cryptography.x509certificates.certificaterequest)). ==== Obnašanje Drop-In ==== Razširitvene metode imajo enako signaturo kot originalne metode plus opcijski parameter ''CryptoMode'': // Originalna .NET X509Certificate2 CreateSelfSigned(DateTimeOffset notBefore, DateTimeOffset notAfter) // Razširitev (Drop-In) X509Certificate2 CreateSelfSigned(DateTimeOffset notBefore, DateTimeOffset notAfter, CryptoMode? mode = null) Ko je imenski prostor ''using'' vključen, se samodejno uporabi razširitvena metoda. ---- ===== Primer ===== using WvdS.System.Security.Cryptography; using WvdS.System.Security.Cryptography.X509Certificates; CryptoConfig.DefaultMode = CryptoMode.Hybrid; using var rsa = RSA.Create(2048); var request = new CertificateRequest( "CN=Server, O=Org, C=DE", rsa, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1); request.CertificateExtensions.Add( new X509BasicConstraintsExtension(false, false, 0, true)); // Hibridni certifikat: RSA + ML-DSA var cert = request.CreateSelfSigned( DateTimeOffset.Now, DateTimeOffset.Now.AddYears(1)); ---- ===== Glejte tudi ===== * [[.:start|Imenski prostor X509Certificates]] * [[.:x509certificate2extensions|X509Certificate2Extensions]] * [[..:cryptomode|Enum CryptoMode]] {{tag>klasse extension static}} ---- //Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional//