C# 生成自签名CA证书

C# 生成自签名CA证书

 

                     string password = "213978863940714";
                    string signatureAlgorithm = "SHA1WithRSA";

                    // Generate RSA key pair
                    var rsaGenerator = new RsaKeyPairGenerator();
                    var randomGenerator = new CryptoApiRandomGenerator();
                    var secureRandom = new SecureRandom(randomGenerator);
                    var keyParameters = new KeyGenerationParameters(secureRandom, 1024);
                    rsaGenerator.Init(keyParameters);
                    var keyPair = rsaGenerator.GenerateKeyPair();

                    // Generate certificate
                    var attributes = new Hashtable();
                    attributes[X509Name.E] = UserInfo.idCard;//设置dn信息的邮箱地址
                    attributes[X509Name.CN] = UserInfo.idCard;//设置证书的用户，也就是颁发给谁
                    attributes[X509Name.O] = "www.shwdztc.com";//设置证书的办法者
                    attributes[X509Name.C] = "Zh";//证书的语言

                    //这里是证书颁发者的信息
                    var ordering = new ArrayList();
                    ordering.Add(X509Name.E);
                    ordering.Add(X509Name.CN);
                    ordering.Add(X509Name.O);
                    ordering.Add(X509Name.C);

                    var certificateGenerator = new X509V3CertificateGenerator();
                    //设置证书序列化号
                    certificateGenerator.SetSerialNumber(BigInteger.ProbablePrime(120, new Random()));


                    //设置颁发者dn信息
                    certificateGenerator.SetIssuerDN(new X509Name(ordering, attributes));


                    //设置证书生效时间
                    certificateGenerator.SetNotBefore(DateTime.Today.Subtract(new TimeSpan(1, 0, 0, 0)));
                    //设置证书失效时间
                    certificateGenerator.SetNotAfter(DateTime.Today.AddDays(365));
                    //设置接受者dn信息
                    certificateGenerator.SetSubjectDN(new X509Name(ordering, attributes));
                    //设置证书的公钥
                    certificateGenerator.SetPublicKey(keyPair.Public);



                    //设置证书的加密算法
                    certificateGenerator.SetSignatureAlgorithm(signatureAlgorithm);
                    certificateGenerator.AddExtension(X509Extensions.BasicConstraints, true, new BasicConstraints(false));
                    certificateGenerator.AddExtension(X509Extensions.AuthorityKeyIdentifier, true, new AuthorityKeyIdentifier(SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(keyPair.Public)));


                    certificateGenerator.AddExtension(X509Extensions.ExtendedKeyUsage.Id, false, new ExtendedKeyUsage(new ArrayList() { new DerObjectIdentifier("1.3.6.1.5.5.7.3.2") }));



                    //创建证书，如果需要cer格式的证书，到这里就可以了。如果是pfx格式的就需要加上访问密码
                    var x509Certificate = certificateGenerator.Generate(keyPair.Private);






                    byte[] pkcs12Bytes = DotNetUtilities.ToX509Certificate(x509Certificate).Export(X509ContentType.Pfx, password);

                    var certificate = new X509Certificate2(pkcs12Bytes, password);

                    certificate.PrivateKey = EncryHelper.ToDotNetKey((RsaPrivateCrtKeyParameters)keyPair.Private);


                    var array = certificate.Export(X509ContentType.Pfx, password);

                    var cerArray = certificate.Export(X509ContentType.Cert);



                    string path = HttpContext.Current.Server.MapPath("~/files/userword/Word/" + UserInfo.idCard + ".pfx");
                    string pathcer = HttpContext.Current.Server.MapPath("~/files/userword/Word/" + UserInfo.idCard + ".cer");

                    FileStream fsCA = new FileStream(path, FileMode.Create);
                    //将byte数组写入文件中
                    fsCA.Write(array, 0, array.Length);
                    fsCA.Close();

                    FileStream fscer = new FileStream(pathcer, FileMode.Create);
                    //将byte数组写入文件中
                    fscer.Write(cerArray, 0, cerArray.Length);
                    fscer.Close();