private static void LoadCertificates(CertificateManager certificates)
{
var rsaCert = PEMReader.TryConvertFromBase64(File.ReadAllBytes("localhost_rsa.cert"));
SecurityAssert.Assert(rsaCert.Count == 1);
certificates.AddCertificate(rsaCert[0].RawData);
var rsaKey = PEMReader.TryConvertFromBase64(File.ReadAllBytes("localhost_rsa.key"));
SecurityAssert.Assert(rsaKey.Count == 1);
certificates.AddPrivateKey(rsaKey[0].RawData);
var ecCert = PEMReader.TryConvertFromBase64(File.ReadAllBytes("localhost_ec.cert"));
SecurityAssert.Assert(ecCert.Count == 1);
certificates.AddCertificate(ecCert[0].RawData);
var ecKey = PEMReader.TryConvertFromBase64(File.ReadAllBytes("localhost_ec.key"));
SecurityAssert.Assert(ecKey.Count == 1);
certificates.AddPrivateKey(ecKey[0].RawData);
var dhCert = PEMReader.TryConvertFromBase64(File.ReadAllBytes("localhost_dh.cert"));
SecurityAssert.Assert(dhCert.Count == 1);
certificates.AddCertificate(dhCert[0].RawData);
var dhKey = PEMReader.TryConvertFromBase64(File.ReadAllBytes("localhost_dh.key"));
SecurityAssert.Assert(dhKey.Count == 1);
certificates.AddPrivateKey(dhKey[0].RawData);
}
/// <summary>
/// Create a X509Certificate2 with a private key by combining
/// the certificate with a private key from a PEM stream
/// </summary>
public static X509Certificate2 CreateCertificateWithPEMPrivateKey(
X509Certificate2 certificate,
byte[] pemDataBlob,
string password = null)
{
RSA rsaPrivateKey = PEMReader.ImportPrivateKeyFromPEM(pemDataBlob, password);
return(new X509Certificate2(certificate.RawData).CopyWithPrivateKey(rsaPrivateKey));
}
/// <summary>
/// Create a X509Certificate2 with a private key by combining
/// the certificate with a private key from a PEM stream
/// </summary>
public static X509Certificate2 CreateCertificateWithPEMPrivateKey(
X509Certificate2 certificate,
byte[] pemDataBlob,
string password = null)
{
RSA privateKey = PEMReader.ImportPrivateKeyFromPEM(pemDataBlob, password);
if (privateKey == null)
{
throw new ServiceResultException("PEM data blob does not contain a private key.");
}
string passcode = X509Utils.GeneratePasscode();
byte[] pfxData = CertificateBuilder.CreatePfxWithRSAPrivateKey(
certificate, certificate.FriendlyName, privateKey, passcode);
return(X509Utils.CreateCertificateFromPKCS12(pfxData, passcode));
}
private Option <ASN1Object> GetASN1(byte[] input)
{
var pems = PEMReader.TryConvertFromBase64(input);
if (pems.Count == 0)
{
return(TryParseASN1(input));
}
if (pems.Count > 1)
{
return(Option.None <ASN1Object>());
}
var pem = pems[0];
if (pem.Name != "PRIVATE KEY")
{
return(Option.None <ASN1Object>());
}
return(TryParseASN1(pem.RawData));
}
