X509CertificateValidator.CreateChainTrustValidator 方法

定义

命名空间:

System.IdentityModel.Selectors

程序集:

System.ServiceModel.Primitives.dll

包:

System.ServiceModel.Primitives v6.2.0

Source:

X509CertificateValidator.cs

获取一个验证程序，它通过指定用于构建和验证信任链的上下文和链策略来验证 X.509 证书。

public:
 static System::IdentityModel::Selectors::X509CertificateValidator ^ CreateChainTrustValidator(bool useMachineContext, System::Security::Cryptography::X509Certificates::X509ChainPolicy ^ chainPolicy);

public static System.IdentityModel.Selectors.X509CertificateValidator CreateChainTrustValidator (bool useMachineContext, System.Security.Cryptography.X509Certificates.X509ChainPolicy chainPolicy);

static member CreateChainTrustValidator : bool * System.Security.Cryptography.X509Certificates.X509ChainPolicy -> System.IdentityModel.Selectors.X509CertificateValidator

Public Shared Function CreateChainTrustValidator (useMachineContext As Boolean, chainPolicy As X509ChainPolicy) As X509CertificateValidator

参数

useMachineContext

Boolean

如果为 true，则使用计算机上下文；如果为 false，则使用当前用户上下文。

chainPolicy

X509ChainPolicy

一个 X509ChainPolicy，它指定用于构建和验证信任链的策略。

返回

X509CertificateValidator

一个 X509CertificateValidator，它使用信任链来验证 X.509 证书。

注解

使用 CreateChainTrustValidator 方法而不是 ChainTrust 属性来指定上下文或设置链策略。 可以使用链策略来指定应该为其验证链的增强型密钥使用 (EKU)，或者指定吊销检查。

此静态方法的返回值可作为参数提供给 X509SecurityTokenAuthenticator 类的以验证程序为参数的构造函数。