public void CanCreateCertificates()
{
var original = TestCertificateHelper.CreateSelfSignedCertificate(
CertificateSubjectName,
new[] { TestCertificateHelper.ClientAuthenticationOid, TestCertificateHelper.ServerAuthenticationOid });
var encoded = TestCertificateHelper.ConvertToBase64(original);
var decoded = TestCertificateHelper.ConvertFromBase64(encoded);
Assert.Equal(original, decoded);
}
public void Configure(ISiloBuilder hostBuilder)
{
var config = hostBuilder.GetConfiguration();
var encodedCertificate = config[CertificateConfigKey];
var localCertificate = TestCertificateHelper.ConvertFromBase64(encodedCertificate);
var certificateModeString = config[ClientCertificateModeKey];
var certificateMode = (RemoteCertificateMode)Enum.Parse(typeof(RemoteCertificateMode), certificateModeString);
hostBuilder.UseTls(localCertificate, options =>
{
options.SslProtocols = System.Security.Authentication.SslProtocols.Tls12;
options.AllowAnyRemoteCertificate();
options.RemoteCertificateMode = RemoteCertificateMode.AllowCertificate;
options.ClientCertificateMode = certificateMode;
options.OnAuthenticateAsClient = (connection, sslOptions) =>
{
sslOptions.TargetHost = CertificateSubjectName;
};
});
}
public void Configure(IConfiguration configuration, IClientBuilder clientBuilder)
{
clientBuilder.ConfigureApplicationParts(parts => parts.AddApplicationPart(typeof(IPingGrain).Assembly));
var encodedCertificate = configuration[CertificateConfigKey];
var localCertificate = TestCertificateHelper.ConvertFromBase64(encodedCertificate);
var certificateModeString = configuration[ClientCertificateModeKey];
var certificateMode = (RemoteCertificateMode)Enum.Parse(typeof(RemoteCertificateMode), certificateModeString);
clientBuilder.UseTls(options =>
{
options.SslProtocols = System.Security.Authentication.SslProtocols.Tls12;
options.AllowAnyRemoteCertificate();
options.LocalCertificate = localCertificate;
options.RemoteCertificateMode = RemoteCertificateMode.RequireCertificate;
options.ClientCertificateMode = certificateMode;
options.OnAuthenticateAsClient = (connection, sslOptions) =>
{
sslOptions.TargetHost = CertificateSubjectName;
};
});
}
