Inhaltsverzeichnis

CertificateRequestExtensions klasa

Pruža extension metode za CertificateRequest s PQ podrškom.

Definicija

namespace WvdS.System.Security.Cryptography.X509Certificates
 
public static class CertificateRequestExtensions

Metode

Naziv Opis
CreateSelfSigned(DateTimeOffset, DateTimeOffset, CryptoMode?) Kreira samopotpisani certifikat s opcionalnim PQ potpisom
Create(X509Certificate2, DateTimeOffset, DateTimeOffset, Byte[], CryptoMode?) Kreira CA-potpisani certifikat s opcionalnim PQ potpisom

Napomene

Ova extension klasa proširuje System.Security.Cryptography.X509Certificates.CertificateRequest1).

Drop-In ponašanje

Extension metode imaju istu signaturu kao originalne metode plus opcionalni CryptoMode parametar: 

// Originalni .NET
X509Certificate2 CreateSelfSigned(DateTimeOffset notBefore, DateTimeOffset notAfter)
 
// Proširenje (Drop-In)
X509Certificate2 CreateSelfSigned(DateTimeOffset notBefore, DateTimeOffset notAfter, CryptoMode? mode = null)

Kada je using prostor imena uključen, automatski se koristi extension metoda.

Primjer

using WvdS.System.Security.Cryptography;
using WvdS.System.Security.Cryptography.X509Certificates;
 
CryptoConfig.DefaultMode = CryptoMode.Hybrid;
 
using var rsa = RSA.Create(2048);
var request = new CertificateRequest(
    "CN=Server, O=Org, C=DE",
    rsa,
    HashAlgorithmName.SHA256,
    RSASignaturePadding.Pkcs1);
 
request.CertificateExtensions.Add(
    new X509BasicConstraintsExtension(false, false, 0, true));
 
// Hibridni certifikat: RSA + ML-DSA
var cert = request.CreateSelfSigned(
    DateTimeOffset.Now,
    DateTimeOffset.Now.AddYears(1));

Vidi također

, ,

Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional

1)
Microsoft Docs: https://learn.microsoft.com/dotnet/api/system.security.cryptography.x509certificates.certificaterequest