X509Extension 類別

參考

定義

命名空間:: System.Security.Cryptography.X509Certificates

組件:: System.Security.Cryptography.X509Certificates.dll

組件:: System.Security.Cryptography.dll

組件:: System.dll

組件:: netstandard.dll

來源:: X509Extension.cs

來源:: X509Extension.cs

來源:: X509Extension.cs

重要

部分資訊涉及發行前產品，在發行之前可能會有大幅修改。 Microsoft 對此處提供的資訊，不做任何明確或隱含的瑕疵擔保。

代表 X509 擴充功能。

public ref class X509Extension : System::Security::Cryptography::AsnEncodedData

public class X509Extension : System.Security.Cryptography.AsnEncodedData

type X509Extension = class
    inherit AsnEncodedData

Public Class X509Extension
Inherits AsnEncodedData

繼承: Object

AsnEncodedData
X509Extension

衍生: System.Security.Cryptography.X509Certificates.X509AuthorityInformationAccessExtension

System.Security.Cryptography.X509Certificates.X509AuthorityKeyIdentifierExtension

System.Security.Cryptography.X509Certificates.X509BasicConstraintsExtension

System.Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension

System.Security.Cryptography.X509Certificates.X509KeyUsageExtension

更多…

範例

下列程式代碼範例示範如何使用 X509Extension 類別。

#using <System.dll>
#using <system.security.dll>

using namespace System;
using namespace System::Security::Cryptography;
using namespace System::Security::Cryptography::X509Certificates;
int main()
{
   try
   {
      X509Store^ store = gcnew X509Store( L"MY",StoreLocation::CurrentUser );
      store->Open( static_cast<OpenFlags>(OpenFlags::ReadOnly | OpenFlags::OpenExistingOnly) );
      X509Certificate2Collection^ collection = dynamic_cast<X509Certificate2Collection^>(store->Certificates);
      for ( int i = 0; i < collection->Count; i++ )
      {
         System::Collections::IEnumerator^ myEnum = collection[ i ]->Extensions->GetEnumerator();
         while ( myEnum->MoveNext() )
         {
            X509Extension^ extension = safe_cast<X509Extension^>(myEnum->Current);
            Console::WriteLine( L"{0}({1})", extension->Oid->FriendlyName, extension->Oid->Value );
            if ( extension->Oid->FriendlyName == L"Key Usage" )
            {
               X509KeyUsageExtension^ ext = dynamic_cast<X509KeyUsageExtension^>(extension);
               Console::WriteLine( ext->KeyUsages );
            }
            if ( extension->Oid->FriendlyName == L"Basic Constraints" )
            {
               X509BasicConstraintsExtension^ ext = dynamic_cast<X509BasicConstraintsExtension^>(extension);
               Console::WriteLine( ext->CertificateAuthority );
               Console::WriteLine( ext->HasPathLengthConstraint );
               Console::WriteLine( ext->PathLengthConstraint );
            }
            if ( extension->Oid->FriendlyName == L"Subject Key Identifier" )
            {
               X509SubjectKeyIdentifierExtension^ ext = dynamic_cast<X509SubjectKeyIdentifierExtension^>(extension);
               Console::WriteLine( ext->SubjectKeyIdentifier );
            }
            if ( extension->Oid->FriendlyName == L"Enhanced Key Usage" )
            {
               X509EnhancedKeyUsageExtension^ ext = dynamic_cast<X509EnhancedKeyUsageExtension^>(extension);
               OidCollection^ oids = ext->EnhancedKeyUsages;
               System::Collections::IEnumerator^ myEnum1 = oids->GetEnumerator();
               while ( myEnum1->MoveNext() )
               {
                  Oid^ oid = safe_cast<Oid^>(myEnum1->Current);
                  Console::WriteLine( L"{0}({1})", oid->FriendlyName, oid->Value );
               }
            }
         }

      }
      store->Close();
   }
   catch ( CryptographicException^ ) 
   {
      Console::WriteLine( L"Information could not be written out for this certificate." );
   }

}

using System;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

public class CertSelect
{
    public static void Main()
    {
        try
        {
            X509Store store = new X509Store("MY", StoreLocation.CurrentUser);
            store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);

            X509Certificate2Collection collection = (X509Certificate2Collection)store.Certificates;
            for (int i = 0; i < collection.Count; i++)
            {
                foreach (X509Extension extension in collection[i].Extensions)
                {
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")");

                    if (extension.Oid.FriendlyName == "Key Usage")
                    {
                        X509KeyUsageExtension ext = (X509KeyUsageExtension)extension;
                        Console.WriteLine(ext.KeyUsages);
                    }

                    if (extension.Oid.FriendlyName == "Basic Constraints")
                    {
                        X509BasicConstraintsExtension ext = (X509BasicConstraintsExtension)extension;
                        Console.WriteLine(ext.CertificateAuthority);
                        Console.WriteLine(ext.HasPathLengthConstraint);
                        Console.WriteLine(ext.PathLengthConstraint);
                    }

                    if (extension.Oid.FriendlyName == "Subject Key Identifier")
                    {
                        X509SubjectKeyIdentifierExtension ext = (X509SubjectKeyIdentifierExtension)extension;
                        Console.WriteLine(ext.SubjectKeyIdentifier);
                    }

                    if (extension.Oid.FriendlyName == "Enhanced Key Usage")
                    {
                        X509EnhancedKeyUsageExtension ext = (X509EnhancedKeyUsageExtension)extension;
                        OidCollection oids = ext.EnhancedKeyUsages;
                        foreach (Oid oid in oids)
                        {
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")");
                        }
                    }
                }
            }
            store.Close();
        }
        catch (CryptographicException)
        {
            Console.WriteLine("Information could not be written out for this certificate.");
        }
    }
}

Imports System.Security.Cryptography
Imports System.Security.Cryptography.X509Certificates



Module CertSelect

    Sub Main()
        Try
            Dim store As New X509Store("MY", StoreLocation.CurrentUser)
            store.Open(OpenFlags.ReadOnly Or OpenFlags.OpenExistingOnly)

            Dim collection As X509Certificate2Collection = CType(store.Certificates, X509Certificate2Collection)
            For i As Integer = 0 To collection.Count - 1
                Dim extension As X509Extension
                For Each extension In collection(i).Extensions
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")")


                    If extension.Oid.FriendlyName = "Key Usage" Then
                        Dim ext As X509KeyUsageExtension = CType(extension, X509KeyUsageExtension)
                        Console.WriteLine(ext.KeyUsages)
                    End If

                    If extension.Oid.FriendlyName = "Basic Constraints" Then
                        Dim ext As X509BasicConstraintsExtension = CType(extension, X509BasicConstraintsExtension)
                        Console.WriteLine(ext.CertificateAuthority)
                        Console.WriteLine(ext.HasPathLengthConstraint)
                        Console.WriteLine(ext.PathLengthConstraint)
                    End If

                    If extension.Oid.FriendlyName = "Subject Key Identifier" Then
                        Dim ext As X509SubjectKeyIdentifierExtension = CType(extension, X509SubjectKeyIdentifierExtension)
                        Console.WriteLine(ext.SubjectKeyIdentifier)
                    End If

                    If extension.Oid.FriendlyName = "Enhanced Key Usage" Then
                        Dim ext As X509EnhancedKeyUsageExtension = CType(extension, X509EnhancedKeyUsageExtension)
                        Dim oids As OidCollection = ext.EnhancedKeyUsages
                        Dim oid As Oid
                        For Each oid In oids
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")")
                        Next oid
                    End If
                Next extension
            Next i
            store.Close()
        Catch
            Console.WriteLine("Information could not be written out for this certificate.")
        End Try

    End Sub
End Module

備註

X509 延伸模組是動態擴充屬性，可新增至 X509 憑證並變更。類別 X509Extension 可用來建立與憑證相關聯的延伸模組，但不屬於證書頒發機構單位所發行的憑證 (CA) 。

在最基本的形式中，X509 延伸模組具有物件標識碼 (OID) 、描述延伸模組是否被視為重要和 ASN 編碼數據的布爾值。您可以在檔案中 CryptoConfig 註冊自定義延伸模組。

The.NET Framework 包含數個常見 X509 延伸模組的實作：

X509KeyUsageExtension. 描述憑證的金鑰使用方式。
X509BasicConstraintsExtension. 描述憑證的條件約束。
X509EnhancedKeyUsageExtension. 描述憑證的增強金鑰使用方式。
X509SubjectKeyIdentifierExtension. 描述金鑰識別碼。例如，與 XMLDSIG 搭配使用。

建構函式

X509Extension()	初始化 X509Extension 類別的新執行個體。
X509Extension(AsnEncodedData, Boolean)	初始化 X509Extension 類別的新執行個體。
X509Extension(Oid, Byte[], Boolean)	初始化 X509Extension 類別的新執行個體。
X509Extension(Oid, ReadOnlySpan<Byte>, Boolean)	初始化 X509Extension 類別的新執行個體。
X509Extension(String, Byte[], Boolean)	初始化 X509Extension 類別的新執行個體。
X509Extension(String, ReadOnlySpan<Byte>, Boolean)	初始化 X509Extension 類別的新執行個體。

屬性

Critical	取得布林值，指示擴充功能是否具有關鍵性。
Oid	取得或設定 Oid 物件的 AsnEncodedData 值。 (繼承來源 AsnEncodedData)
RawData	取得或設定以位元組陣列表示的 Abstract Syntax Notation One (ASN.1) 編碼資料。 (繼承來源 AsnEncodedData)

方法

CopyFrom(AsnEncodedData)	複製指定 AsnEncodedData 物件的擴充功能屬性。
Equals(Object)	判斷指定的物件是否等於目前的物件。 (繼承來源 Object)
Format(Boolean)	以字串的方式，傳回使用 Abstract Syntax Notation One (ASN.1) 編碼的資料之格式化版本。 (繼承來源 AsnEncodedData)
GetHashCode()	做為預設雜湊函式。 (繼承來源 Object)
GetType()	取得目前執行個體的 Type。 (繼承來源 Object)
MemberwiseClone()	建立目前 Object 的淺層複製。 (繼承來源 Object)
ToString()	傳回代表目前物件的字串。 (繼承來源 Object)

適用於

共用方式為

X509Extension 類別

定義

範例

備註

建構函式

屬性

方法

適用於

其他資源