X509BasicConstraintsExtension 類別

參考

定義

命名空間:: System.Security.Cryptography.X509Certificates

組件:: System.Security.Cryptography.X509Certificates.dll

組件:: System.Security.Cryptography.dll

組件:: System.dll

組件:: netstandard.dll

來源:: X509BasicConstraintsExtension.cs

來源:: X509BasicConstraintsExtension.cs

來源:: X509BasicConstraintsExtension.cs

重要

部分資訊涉及發行前產品，在發行之前可能會有大幅修改。 Microsoft 對此處提供的資訊，不做任何明確或隱含的瑕疵擔保。

定義憑證上設定的條件約束。此類別無法獲得繼承。

public ref class X509BasicConstraintsExtension sealed : System::Security::Cryptography::X509Certificates::X509Extension

public sealed class X509BasicConstraintsExtension : System.Security.Cryptography.X509Certificates.X509Extension

type X509BasicConstraintsExtension = class
    inherit X509Extension

Public NotInheritable Class X509BasicConstraintsExtension
Inherits X509Extension

繼承: Object

AsnEncodedData

X509Extension
X509BasicConstraintsExtension

範例

下列程式代碼範例示範如何開啟使用者的個人證書存儲，以及顯示存放區中每個憑證的相關信息。這個範例會 X509BasicConstraintsExtension 使用類別來顯示資訊。

#using <System.dll>
#using <system.security.dll>

using namespace System;
using namespace System::Security::Cryptography;
using namespace System::Security::Cryptography::X509Certificates;
int main()
{
   try
   {
      X509Store^ store = gcnew X509Store( L"MY",StoreLocation::CurrentUser );
      store->Open( static_cast<OpenFlags>(OpenFlags::ReadOnly | OpenFlags::OpenExistingOnly) );
      X509Certificate2Collection^ collection = dynamic_cast<X509Certificate2Collection^>(store->Certificates);
      for ( int i = 0; i < collection->Count; i++ )
      {
         System::Collections::IEnumerator^ myEnum = collection[ i ]->Extensions->GetEnumerator();
         while ( myEnum->MoveNext() )
         {
            X509Extension^ extension = safe_cast<X509Extension^>(myEnum->Current);
            Console::WriteLine( L"{0}({1})", extension->Oid->FriendlyName, extension->Oid->Value );
            if ( extension->Oid->FriendlyName == L"Key Usage" )
            {
               X509KeyUsageExtension^ ext = dynamic_cast<X509KeyUsageExtension^>(extension);
               Console::WriteLine( ext->KeyUsages );
            }
            if ( extension->Oid->FriendlyName == L"Basic Constraints" )
            {
               X509BasicConstraintsExtension^ ext = dynamic_cast<X509BasicConstraintsExtension^>(extension);
               Console::WriteLine( ext->CertificateAuthority );
               Console::WriteLine( ext->HasPathLengthConstraint );
               Console::WriteLine( ext->PathLengthConstraint );
            }
            if ( extension->Oid->FriendlyName == L"Subject Key Identifier" )
            {
               X509SubjectKeyIdentifierExtension^ ext = dynamic_cast<X509SubjectKeyIdentifierExtension^>(extension);
               Console::WriteLine( ext->SubjectKeyIdentifier );
            }
            if ( extension->Oid->FriendlyName == L"Enhanced Key Usage" )
            {
               X509EnhancedKeyUsageExtension^ ext = dynamic_cast<X509EnhancedKeyUsageExtension^>(extension);
               OidCollection^ oids = ext->EnhancedKeyUsages;
               System::Collections::IEnumerator^ myEnum1 = oids->GetEnumerator();
               while ( myEnum1->MoveNext() )
               {
                  Oid^ oid = safe_cast<Oid^>(myEnum1->Current);
                  Console::WriteLine( L"{0}({1})", oid->FriendlyName, oid->Value );
               }
            }
         }

      }
      store->Close();
   }
   catch ( CryptographicException^ ) 
   {
      Console::WriteLine( L"Information could not be written out for this certificate." );
   }

}

using System;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

public class CertSelect
{
    public static void Main()
    {
        try
        {
            X509Store store = new X509Store("MY", StoreLocation.CurrentUser);
            store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);

            X509Certificate2Collection collection = (X509Certificate2Collection)store.Certificates;
            for (int i = 0; i < collection.Count; i++)
            {
                foreach (X509Extension extension in collection[i].Extensions)
                {
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")");

                    if (extension.Oid.FriendlyName == "Key Usage")
                    {
                        X509KeyUsageExtension ext = (X509KeyUsageExtension)extension;
                        Console.WriteLine(ext.KeyUsages);
                    }

                    if (extension.Oid.FriendlyName == "Basic Constraints")
                    {
                        X509BasicConstraintsExtension ext = (X509BasicConstraintsExtension)extension;
                        Console.WriteLine(ext.CertificateAuthority);
                        Console.WriteLine(ext.HasPathLengthConstraint);
                        Console.WriteLine(ext.PathLengthConstraint);
                    }

                    if (extension.Oid.FriendlyName == "Subject Key Identifier")
                    {
                        X509SubjectKeyIdentifierExtension ext = (X509SubjectKeyIdentifierExtension)extension;
                        Console.WriteLine(ext.SubjectKeyIdentifier);
                    }

                    if (extension.Oid.FriendlyName == "Enhanced Key Usage")
                    {
                        X509EnhancedKeyUsageExtension ext = (X509EnhancedKeyUsageExtension)extension;
                        OidCollection oids = ext.EnhancedKeyUsages;
                        foreach (Oid oid in oids)
                        {
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")");
                        }
                    }
                }
            }
            store.Close();
        }
        catch (CryptographicException)
        {
            Console.WriteLine("Information could not be written out for this certificate.");
        }
    }
}

Imports System.Security.Cryptography
Imports System.Security.Cryptography.X509Certificates



Module CertSelect

    Sub Main()
        Try
            Dim store As New X509Store("MY", StoreLocation.CurrentUser)
            store.Open(OpenFlags.ReadOnly Or OpenFlags.OpenExistingOnly)

            Dim collection As X509Certificate2Collection = CType(store.Certificates, X509Certificate2Collection)
            For i As Integer = 0 To collection.Count - 1
                Dim extension As X509Extension
                For Each extension In collection(i).Extensions
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")")


                    If extension.Oid.FriendlyName = "Key Usage" Then
                        Dim ext As X509KeyUsageExtension = CType(extension, X509KeyUsageExtension)
                        Console.WriteLine(ext.KeyUsages)
                    End If

                    If extension.Oid.FriendlyName = "Basic Constraints" Then
                        Dim ext As X509BasicConstraintsExtension = CType(extension, X509BasicConstraintsExtension)
                        Console.WriteLine(ext.CertificateAuthority)
                        Console.WriteLine(ext.HasPathLengthConstraint)
                        Console.WriteLine(ext.PathLengthConstraint)
                    End If

                    If extension.Oid.FriendlyName = "Subject Key Identifier" Then
                        Dim ext As X509SubjectKeyIdentifierExtension = CType(extension, X509SubjectKeyIdentifierExtension)
                        Console.WriteLine(ext.SubjectKeyIdentifier)
                    End If

                    If extension.Oid.FriendlyName = "Enhanced Key Usage" Then
                        Dim ext As X509EnhancedKeyUsageExtension = CType(extension, X509EnhancedKeyUsageExtension)
                        Dim oids As OidCollection = ext.EnhancedKeyUsages
                        Dim oid As Oid
                        For Each oid In oids
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")")
                        Next oid
                    End If
                Next extension
            Next i
            store.Close()
        Catch
            Console.WriteLine("Information could not be written out for this certificate.")
        End Try

    End Sub
End Module

備註

這個類別提供屬性，定義在憑證上設定的基本條件約束。

建構函式

X509BasicConstraintsExtension()	初始化 X509BasicConstraintsExtension 類別的新執行個體。
X509BasicConstraintsExtension(AsnEncodedData, Boolean)	使用 X509BasicConstraintsExtension 物件和識別擴充功能是否重要的值，初始化 AsnEncodedData 類別的新執行個體。
X509BasicConstraintsExtension(Boolean, Boolean, Int32, Boolean)	初始化 X509BasicConstraintsExtension 類別的新執行個體。參數會指定下列項目：指出憑證是否為憑證授權單位 (CA) 憑證的值、指出憑證是否限制其允許之路徑層級數目的值、憑證路徑中允許的層級數目，以及指出擴充功能是否重要的值。

屬性

CertificateAuthority	取得值，指出憑證是否為憑證授權單位 (CA) 憑證。
Critical	取得布林值，指示擴充功能是否具有關鍵性。 (繼承來源 X509Extension)
HasPathLengthConstraint	取得值，指出憑證是否限制它允許的路徑層級數目。
Oid	取得或設定 Oid 物件的 AsnEncodedData 值。 (繼承來源 AsnEncodedData)
PathLengthConstraint	取得憑證路徑中允許的層級數目。
RawData	取得或設定以位元組陣列表示的 Abstract Syntax Notation One (ASN.1) 編碼資料。 (繼承來源 AsnEncodedData)

方法

CopyFrom(AsnEncodedData)	使用 X509BasicConstraintsExtension 物件，初始化 AsnEncodedData 類別的新執行個體。
CreateForCertificateAuthority(Nullable<Int32>)	建立適用於證書頒發機構單位的 X509BasicConstraintsExtension 實例，選擇性地包含路徑長度條件約束值。
CreateForEndEntity(Boolean)	建立適用於端實體憑證的 X509BasicConstraintsExtension 實例，選擇性地將延伸模組標示為重要。
Equals(Object)	判斷指定的物件是否等於目前的物件。 (繼承來源 Object)
Format(Boolean)	以字串的方式，傳回使用 Abstract Syntax Notation One (ASN.1) 編碼的資料之格式化版本。 (繼承來源 AsnEncodedData)
GetHashCode()	做為預設雜湊函式。 (繼承來源 Object)
GetType()	取得目前執行個體的 Type。 (繼承來源 Object)
MemberwiseClone()	建立目前 Object 的淺層複製。 (繼承來源 Object)
ToString()	傳回代表目前物件的字串。 (繼承來源 Object)

適用於

共用方式為

X509BasicConstraintsExtension 類別

定義

範例

備註

建構函式

屬性

方法

適用於

其他資源