Upravljanje prilagođenom pohranom povjerenja za PQ-kompatibilne PKI infrastrukture.

using WvdS.System.Security.Cryptography.X509Certificates;
 
// Kreiranje pohrane povjerenja
using var trustStore = new PqTrustStore();
 
// Dodavanje Root CA
var rootCa = new X509Certificate2("root-ca.cer");
trustStore.AddTrustAnchor(rootCa, alias: "Company Root CA");
 
// Dodavanje Intermediate CA
var intermediateCa = new X509Certificate2("intermediate-ca.cer");
trustStore.AddIntermediate(intermediateCa, alias: "Issuing CA");

// Učitavanje pohrane povjerenja
using var trustStore = PqTrustStore.LoadFromPem("company-trust-store.pem");
 
// Validacija certifikata
var userCert = new X509Certificate2("user.cer");
 
using var chain = new X509Chain();
bool isValid = chain.Build(userCert, trustStore, CryptoMode.Hybrid);

// Spremanje/učitavanje PEM paketa
trustStore.SaveToPem("trust-store.pem");
var loadedStore = PqTrustStore.LoadFromPem("trust-store.pem");
 
// PKCS#7 (DER)
trustStore.SaveToPkcs7("trust-store.p7b");
var p7Store = PqTrustStore.LoadFromPkcs7("trust-store.p7b");

using var trustStore = new PqTrustStore();
 
// Uvoz Windows Root CA-ova
trustStore.ImportFromSystemRootStore();
 
// Izvoz kao PEM za izolirane sustave
trustStore.SaveToPem("system-trust-store.pem");

// Samo sidrišta povjerenja
var roots = trustStore.TrustAnchors;
 
// Samo Intermediate CA-ovi
var intermediates = trustStore.IntermediateCAs;
 
// Pretraživanje po Subject/Thumbprint
var found = trustStore.FindBySubjectName("Company");
var entry = trustStore.FindByThumbprint("A1B2C3...");

• X509ChainExtensions
• RevocationExtensions

Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional