Share via


X509SubjectKeyIdentifierExtension Kelas

Definisi

Menentukan string yang mengidentifikasi pengidentifikasi kunci subjek sertifikat (SKI). Kelas ini tidak dapat diwariskan.

public ref class X509SubjectKeyIdentifierExtension sealed : System::Security::Cryptography::X509Certificates::X509Extension
public sealed class X509SubjectKeyIdentifierExtension : System.Security.Cryptography.X509Certificates.X509Extension
type X509SubjectKeyIdentifierExtension = class
    inherit X509Extension
Public NotInheritable Class X509SubjectKeyIdentifierExtension
Inherits X509Extension
Warisan
X509SubjectKeyIdentifierExtension

Contoh

Contoh kode berikut menunjukkan cara membuka penyimpanan sertifikat pribadi pengguna dan menampilkan informasi tentang setiap sertifikat di penyimpanan. Contoh ini menggunakan X509SubjectKeyIdentifierExtension kelas untuk menampilkan informasi.

#using <System.dll>
#using <system.security.dll>

using namespace System;
using namespace System::Security::Cryptography;
using namespace System::Security::Cryptography::X509Certificates;
int main()
{
   try
   {
      X509Store^ store = gcnew X509Store( L"MY",StoreLocation::CurrentUser );
      store->Open( static_cast<OpenFlags>(OpenFlags::ReadOnly | OpenFlags::OpenExistingOnly) );
      X509Certificate2Collection^ collection = dynamic_cast<X509Certificate2Collection^>(store->Certificates);
      for ( int i = 0; i < collection->Count; i++ )
      {
         System::Collections::IEnumerator^ myEnum = collection[ i ]->Extensions->GetEnumerator();
         while ( myEnum->MoveNext() )
         {
            X509Extension^ extension = safe_cast<X509Extension^>(myEnum->Current);
            Console::WriteLine( L"{0}({1})", extension->Oid->FriendlyName, extension->Oid->Value );
            if ( extension->Oid->FriendlyName == L"Key Usage" )
            {
               X509KeyUsageExtension^ ext = dynamic_cast<X509KeyUsageExtension^>(extension);
               Console::WriteLine( ext->KeyUsages );
            }
            if ( extension->Oid->FriendlyName == L"Basic Constraints" )
            {
               X509BasicConstraintsExtension^ ext = dynamic_cast<X509BasicConstraintsExtension^>(extension);
               Console::WriteLine( ext->CertificateAuthority );
               Console::WriteLine( ext->HasPathLengthConstraint );
               Console::WriteLine( ext->PathLengthConstraint );
            }
            if ( extension->Oid->FriendlyName == L"Subject Key Identifier" )
            {
               X509SubjectKeyIdentifierExtension^ ext = dynamic_cast<X509SubjectKeyIdentifierExtension^>(extension);
               Console::WriteLine( ext->SubjectKeyIdentifier );
            }
            if ( extension->Oid->FriendlyName == L"Enhanced Key Usage" )
            {
               X509EnhancedKeyUsageExtension^ ext = dynamic_cast<X509EnhancedKeyUsageExtension^>(extension);
               OidCollection^ oids = ext->EnhancedKeyUsages;
               System::Collections::IEnumerator^ myEnum1 = oids->GetEnumerator();
               while ( myEnum1->MoveNext() )
               {
                  Oid^ oid = safe_cast<Oid^>(myEnum1->Current);
                  Console::WriteLine( L"{0}({1})", oid->FriendlyName, oid->Value );
               }
            }
         }

      }
      store->Close();
   }
   catch ( CryptographicException^ ) 
   {
      Console::WriteLine( L"Information could not be written out for this certificate." );
   }

}
using System;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

public class CertSelect
{
    public static void Main()
    {
        try
        {
            X509Store store = new X509Store("MY", StoreLocation.CurrentUser);
            store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);

            X509Certificate2Collection collection = (X509Certificate2Collection)store.Certificates;
            for (int i = 0; i < collection.Count; i++)
            {
                foreach (X509Extension extension in collection[i].Extensions)
                {
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")");

                    if (extension.Oid.FriendlyName == "Key Usage")
                    {
                        X509KeyUsageExtension ext = (X509KeyUsageExtension)extension;
                        Console.WriteLine(ext.KeyUsages);
                    }

                    if (extension.Oid.FriendlyName == "Basic Constraints")
                    {
                        X509BasicConstraintsExtension ext = (X509BasicConstraintsExtension)extension;
                        Console.WriteLine(ext.CertificateAuthority);
                        Console.WriteLine(ext.HasPathLengthConstraint);
                        Console.WriteLine(ext.PathLengthConstraint);
                    }

                    if (extension.Oid.FriendlyName == "Subject Key Identifier")
                    {
                        X509SubjectKeyIdentifierExtension ext = (X509SubjectKeyIdentifierExtension)extension;
                        Console.WriteLine(ext.SubjectKeyIdentifier);
                    }

                    if (extension.Oid.FriendlyName == "Enhanced Key Usage")
                    {
                        X509EnhancedKeyUsageExtension ext = (X509EnhancedKeyUsageExtension)extension;
                        OidCollection oids = ext.EnhancedKeyUsages;
                        foreach (Oid oid in oids)
                        {
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")");
                        }
                    }
                }
            }
            store.Close();
        }
        catch (CryptographicException)
        {
            Console.WriteLine("Information could not be written out for this certificate.");
        }
    }
}
Imports System.Security.Cryptography
Imports System.Security.Cryptography.X509Certificates



Module CertSelect

    Sub Main()
        Try
            Dim store As New X509Store("MY", StoreLocation.CurrentUser)
            store.Open(OpenFlags.ReadOnly Or OpenFlags.OpenExistingOnly)

            Dim collection As X509Certificate2Collection = CType(store.Certificates, X509Certificate2Collection)
            For i As Integer = 0 To collection.Count - 1
                Dim extension As X509Extension
                For Each extension In collection(i).Extensions
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")")


                    If extension.Oid.FriendlyName = "Key Usage" Then
                        Dim ext As X509KeyUsageExtension = CType(extension, X509KeyUsageExtension)
                        Console.WriteLine(ext.KeyUsages)
                    End If

                    If extension.Oid.FriendlyName = "Basic Constraints" Then
                        Dim ext As X509BasicConstraintsExtension = CType(extension, X509BasicConstraintsExtension)
                        Console.WriteLine(ext.CertificateAuthority)
                        Console.WriteLine(ext.HasPathLengthConstraint)
                        Console.WriteLine(ext.PathLengthConstraint)
                    End If

                    If extension.Oid.FriendlyName = "Subject Key Identifier" Then
                        Dim ext As X509SubjectKeyIdentifierExtension = CType(extension, X509SubjectKeyIdentifierExtension)
                        Console.WriteLine(ext.SubjectKeyIdentifier)
                    End If

                    If extension.Oid.FriendlyName = "Enhanced Key Usage" Then
                        Dim ext As X509EnhancedKeyUsageExtension = CType(extension, X509EnhancedKeyUsageExtension)
                        Dim oids As OidCollection = ext.EnhancedKeyUsages
                        Dim oid As Oid
                        For Each oid In oids
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")")
                        Next oid
                    End If
                Next extension
            Next i
            store.Close()
        Catch
            Console.WriteLine("Information could not be written out for this certificate.")
        End Try

    End Sub
End Module

Keterangan

Ada beberapa cara untuk mengidentifikasi sertifikat: dengan hash sertifikat, oleh penerbit dan nomor seri, dan oleh pengidentifikasi kunci subjek (SKI). SKI menyediakan identifikasi unik untuk subjek sertifikat dan sering digunakan saat bekerja dengan penandatanganan digital XML.

Konstruktor

X509SubjectKeyIdentifierExtension()

Menginisialisasi instans baru kelas X509SubjectKeyIdentifierExtension.

X509SubjectKeyIdentifierExtension(AsnEncodedData, Boolean)

Menginisialisasi instans X509SubjectKeyIdentifierExtension baru kelas menggunakan data yang dikodekan dan nilai yang mengidentifikasi apakah ekstensi sangat penting.

X509SubjectKeyIdentifierExtension(Byte[], Boolean)

Menginisialisasi instans X509SubjectKeyIdentifierExtension baru kelas menggunakan array byte dan nilai yang mengidentifikasi apakah ekstensi sangat penting.

X509SubjectKeyIdentifierExtension(PublicKey, Boolean)

Menginisialisasi instans X509SubjectKeyIdentifierExtension baru kelas menggunakan kunci publik dan nilai yang menunjukkan apakah ekstensi sangat penting.

X509SubjectKeyIdentifierExtension(PublicKey, X509SubjectKeyIdentifierHashAlgorithm, Boolean)

Menginisialisasi instans X509SubjectKeyIdentifierExtension baru kelas menggunakan kunci umum, pengidentifikasi algoritma hash, dan nilai yang menunjukkan apakah ekstensi sangat penting.

X509SubjectKeyIdentifierExtension(ReadOnlySpan<Byte>, Boolean)

Menginisialisasi instans X509SubjectKeyIdentifierExtension baru kelas menggunakan rentang byte baca-saja dan nilai yang mengidentifikasi apakah ekstensi sangat penting.

X509SubjectKeyIdentifierExtension(String, Boolean)

Menginisialisasi instans X509SubjectKeyIdentifierExtension baru kelas menggunakan string dan nilai yang mengidentifikasi apakah ekstensi sangat penting.

Properti

Critical

Mendapatkan nilai Boolean yang menunjukkan apakah ekstensi sangat penting.

(Diperoleh dari X509Extension)
Oid

Mendapatkan atau mengatur Oid nilai untuk objek AsnEncodedData .

(Diperoleh dari AsnEncodedData)
RawData

Mendapatkan atau mengatur data yang dikodekan Abstract Syntax Notation One (ASN.1) yang direpresentasikan dalam array byte.

(Diperoleh dari AsnEncodedData)
SubjectKeyIdentifier

Mendapatkan string yang mewakili pengidentifikasi kunci subjek (SKI) untuk sertifikat.

SubjectKeyIdentifierBytes

Mendapatkan nilai yang kontennya mewakili pengidentifikasi kunci subjek (SKI) untuk sertifikat.

Metode

CopyFrom(AsnEncodedData)

Membuat instans X509SubjectKeyIdentifierExtension baru kelas dengan menyalin informasi dari data yang dikodekan.

Equals(Object)

Menentukan apakah objek yang ditentukan sama dengan objek saat ini.

(Diperoleh dari Object)
Format(Boolean)

Mengembalikan versi terformat dari data yang dikodekan Abstract Syntax Notation One (ASN.1) sebagai string.

(Diperoleh dari AsnEncodedData)
GetHashCode()

Berfungsi sebagai fungsi hash default.

(Diperoleh dari Object)
GetType()

Mendapatkan instans Type saat ini.

(Diperoleh dari Object)
MemberwiseClone()

Membuat salinan dangkal dari yang saat ini Object.

(Diperoleh dari Object)
ToString()

Mengembalikan string yang mewakili objek saat ini.

(Diperoleh dari Object)

Berlaku untuk