X509Extension Kelas

Referensi

Definisi

Ruang nama:: System.Security.Cryptography.X509Certificates

Rakitan:: System.Security.Cryptography.X509Certificates.dll

Rakitan:: System.Security.Cryptography.dll

Rakitan:: System.dll

Rakitan:: netstandard.dll

Sumber:: X509Extension.cs

Sumber:: X509Extension.cs

Sumber:: X509Extension.cs

Penting

Beberapa informasi terkait produk prarilis yang dapat diubah secara signifikan sebelum dirilis. Microsoft tidak memberikan jaminan, tersirat maupun tersurat, sehubungan dengan informasi yang diberikan di sini.

Mewakili ekstensi X509.

public ref class X509Extension : System::Security::Cryptography::AsnEncodedData

public class X509Extension : System.Security.Cryptography.AsnEncodedData

type X509Extension = class
    inherit AsnEncodedData

Public Class X509Extension
Inherits AsnEncodedData

Warisan: Object

AsnEncodedData
X509Extension

Turunan: System.Security.Cryptography.X509Certificates.X509AuthorityInformationAccessExtension

System.Security.Cryptography.X509Certificates.X509AuthorityKeyIdentifierExtension

System.Security.Cryptography.X509Certificates.X509BasicConstraintsExtension

System.Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension

System.Security.Cryptography.X509Certificates.X509KeyUsageExtension

Lainnya…

Contoh

Contoh kode berikut menunjukkan menggunakan X509Extension kelas .

#using <System.dll>
#using <system.security.dll>

using namespace System;
using namespace System::Security::Cryptography;
using namespace System::Security::Cryptography::X509Certificates;
int main()
{
   try
   {
      X509Store^ store = gcnew X509Store( L"MY",StoreLocation::CurrentUser );
      store->Open( static_cast<OpenFlags>(OpenFlags::ReadOnly | OpenFlags::OpenExistingOnly) );
      X509Certificate2Collection^ collection = dynamic_cast<X509Certificate2Collection^>(store->Certificates);
      for ( int i = 0; i < collection->Count; i++ )
      {
         System::Collections::IEnumerator^ myEnum = collection[ i ]->Extensions->GetEnumerator();
         while ( myEnum->MoveNext() )
         {
            X509Extension^ extension = safe_cast<X509Extension^>(myEnum->Current);
            Console::WriteLine( L"{0}({1})", extension->Oid->FriendlyName, extension->Oid->Value );
            if ( extension->Oid->FriendlyName == L"Key Usage" )
            {
               X509KeyUsageExtension^ ext = dynamic_cast<X509KeyUsageExtension^>(extension);
               Console::WriteLine( ext->KeyUsages );
            }
            if ( extension->Oid->FriendlyName == L"Basic Constraints" )
            {
               X509BasicConstraintsExtension^ ext = dynamic_cast<X509BasicConstraintsExtension^>(extension);
               Console::WriteLine( ext->CertificateAuthority );
               Console::WriteLine( ext->HasPathLengthConstraint );
               Console::WriteLine( ext->PathLengthConstraint );
            }
            if ( extension->Oid->FriendlyName == L"Subject Key Identifier" )
            {
               X509SubjectKeyIdentifierExtension^ ext = dynamic_cast<X509SubjectKeyIdentifierExtension^>(extension);
               Console::WriteLine( ext->SubjectKeyIdentifier );
            }
            if ( extension->Oid->FriendlyName == L"Enhanced Key Usage" )
            {
               X509EnhancedKeyUsageExtension^ ext = dynamic_cast<X509EnhancedKeyUsageExtension^>(extension);
               OidCollection^ oids = ext->EnhancedKeyUsages;
               System::Collections::IEnumerator^ myEnum1 = oids->GetEnumerator();
               while ( myEnum1->MoveNext() )
               {
                  Oid^ oid = safe_cast<Oid^>(myEnum1->Current);
                  Console::WriteLine( L"{0}({1})", oid->FriendlyName, oid->Value );
               }
            }
         }

      }
      store->Close();
   }
   catch ( CryptographicException^ ) 
   {
      Console::WriteLine( L"Information could not be written out for this certificate." );
   }

}

using System;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

public class CertSelect
{
    public static void Main()
    {
        try
        {
            X509Store store = new X509Store("MY", StoreLocation.CurrentUser);
            store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);

            X509Certificate2Collection collection = (X509Certificate2Collection)store.Certificates;
            for (int i = 0; i < collection.Count; i++)
            {
                foreach (X509Extension extension in collection[i].Extensions)
                {
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")");

                    if (extension.Oid.FriendlyName == "Key Usage")
                    {
                        X509KeyUsageExtension ext = (X509KeyUsageExtension)extension;
                        Console.WriteLine(ext.KeyUsages);
                    }

                    if (extension.Oid.FriendlyName == "Basic Constraints")
                    {
                        X509BasicConstraintsExtension ext = (X509BasicConstraintsExtension)extension;
                        Console.WriteLine(ext.CertificateAuthority);
                        Console.WriteLine(ext.HasPathLengthConstraint);
                        Console.WriteLine(ext.PathLengthConstraint);
                    }

                    if (extension.Oid.FriendlyName == "Subject Key Identifier")
                    {
                        X509SubjectKeyIdentifierExtension ext = (X509SubjectKeyIdentifierExtension)extension;
                        Console.WriteLine(ext.SubjectKeyIdentifier);
                    }

                    if (extension.Oid.FriendlyName == "Enhanced Key Usage")
                    {
                        X509EnhancedKeyUsageExtension ext = (X509EnhancedKeyUsageExtension)extension;
                        OidCollection oids = ext.EnhancedKeyUsages;
                        foreach (Oid oid in oids)
                        {
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")");
                        }
                    }
                }
            }
            store.Close();
        }
        catch (CryptographicException)
        {
            Console.WriteLine("Information could not be written out for this certificate.");
        }
    }
}

Imports System.Security.Cryptography
Imports System.Security.Cryptography.X509Certificates



Module CertSelect

    Sub Main()
        Try
            Dim store As New X509Store("MY", StoreLocation.CurrentUser)
            store.Open(OpenFlags.ReadOnly Or OpenFlags.OpenExistingOnly)

            Dim collection As X509Certificate2Collection = CType(store.Certificates, X509Certificate2Collection)
            For i As Integer = 0 To collection.Count - 1
                Dim extension As X509Extension
                For Each extension In collection(i).Extensions
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")")


                    If extension.Oid.FriendlyName = "Key Usage" Then
                        Dim ext As X509KeyUsageExtension = CType(extension, X509KeyUsageExtension)
                        Console.WriteLine(ext.KeyUsages)
                    End If

                    If extension.Oid.FriendlyName = "Basic Constraints" Then
                        Dim ext As X509BasicConstraintsExtension = CType(extension, X509BasicConstraintsExtension)
                        Console.WriteLine(ext.CertificateAuthority)
                        Console.WriteLine(ext.HasPathLengthConstraint)
                        Console.WriteLine(ext.PathLengthConstraint)
                    End If

                    If extension.Oid.FriendlyName = "Subject Key Identifier" Then
                        Dim ext As X509SubjectKeyIdentifierExtension = CType(extension, X509SubjectKeyIdentifierExtension)
                        Console.WriteLine(ext.SubjectKeyIdentifier)
                    End If

                    If extension.Oid.FriendlyName = "Enhanced Key Usage" Then
                        Dim ext As X509EnhancedKeyUsageExtension = CType(extension, X509EnhancedKeyUsageExtension)
                        Dim oids As OidCollection = ext.EnhancedKeyUsages
                        Dim oid As Oid
                        For Each oid In oids
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")")
                        Next oid
                    End If
                Next extension
            Next i
            store.Close()
        Catch
            Console.WriteLine("Information could not be written out for this certificate.")
        End Try

    End Sub
End Module

Keterangan

Ekstensi X509 adalah properti dinamis dan diperluas yang dapat ditambahkan ke sertifikat X509 dan diubah. Kelas X509Extension dapat digunakan untuk membuat ekstensi yang terkait dengan sertifikat tetapi bukan bagian dari sertifikat seperti yang dikeluarkan oleh otoritas sertifikasi (CA).

Dalam bentuk yang paling dasar, ekstensi X509 memiliki pengidentifikasi objek (OID), nilai Boolean yang menjelaskan apakah ekstensi dianggap penting atau tidak, dan data yang dikodekan ASN. Ekstensi kustom dapat didaftarkan dalam CryptoConfig file.

The.NET Framework mencakup implementasi beberapa ekstensi X509 umum:

X509KeyUsageExtension. Menjelaskan penggunaan kunci sertifikat.
X509BasicConstraintsExtension. Menjelaskan batasan untuk sertifikat.
X509EnhancedKeyUsageExtension. Menjelaskan penggunaan kunci sertifikat yang disempurnakan.
X509SubjectKeyIdentifierExtension. Menjelaskan pengidentifikasi kunci. Misalnya, digunakan dengan XMLDSIG.

Konstruktor

X509Extension()	Menginisialisasi instans baru kelas X509Extension.
X509Extension(AsnEncodedData, Boolean)	Menginisialisasi instans baru kelas X509Extension.
X509Extension(Oid, Byte[], Boolean)	Menginisialisasi instans baru kelas X509Extension.
X509Extension(Oid, ReadOnlySpan<Byte>, Boolean)	Menginisialisasi instans baru kelas X509Extension.
X509Extension(String, Byte[], Boolean)	Menginisialisasi instans baru kelas X509Extension.
X509Extension(String, ReadOnlySpan<Byte>, Boolean)	Menginisialisasi instans baru kelas X509Extension.

Properti

Critical	Mendapatkan nilai Boolean yang menunjukkan apakah ekstensi sangat penting.
Oid	Mendapatkan atau mengatur Oid nilai untuk objek AsnEncodedData . (Diperoleh dari AsnEncodedData)
RawData	Mendapatkan atau mengatur data yang dikodekan Abstract Syntax Notation One (ASN.1) yang direpresentasikan dalam array byte. (Diperoleh dari AsnEncodedData)

Metode

CopyFrom(AsnEncodedData)	Menyalin properti ekstensi dari objek yang ditentukan AsnEncodedData .
Equals(Object)	Menentukan apakah objek yang ditentukan sama dengan objek saat ini. (Diperoleh dari Object)
Format(Boolean)	Mengembalikan versi terformat dari data yang dikodekan Abstract Syntax Notation One (ASN.1) sebagai string. (Diperoleh dari AsnEncodedData)
GetHashCode()	Berfungsi sebagai fungsi hash default. (Diperoleh dari Object)
GetType()	Mendapatkan instans Type saat ini. (Diperoleh dari Object)
MemberwiseClone()	Membuat salinan dangkal dari yang saat ini Object. (Diperoleh dari Object)
ToString()	Mengembalikan string yang mewakili objek saat ini. (Diperoleh dari Object)

Berlaku untuk

Share via