X509SubjectKeyIdentifierExtension 类

参考

定义

命名空间:: System.Security.Cryptography.X509Certificates

程序集:: System.Security.Cryptography.X509Certificates.dll

程序集:: System.Security.Cryptography.dll

程序集:: System.dll

程序集:: netstandard.dll

重要

一些信息与预发行产品相关，相应产品在发行之前可能会进行重大修改。对于此处提供的信息，Microsoft 不作任何明示或暗示的担保。

定义一个标识证书的主题密钥标识符 (SKI) 的字符串。此类不能被继承。

public ref class X509SubjectKeyIdentifierExtension sealed : System::Security::Cryptography::X509Certificates::X509Extension

public sealed class X509SubjectKeyIdentifierExtension : System.Security.Cryptography.X509Certificates.X509Extension

type X509SubjectKeyIdentifierExtension = class
    inherit X509Extension

Public NotInheritable Class X509SubjectKeyIdentifierExtension
Inherits X509Extension

继承: Object

AsnEncodedData

X509Extension
X509SubjectKeyIdentifierExtension

示例

下面的代码示例演示如何打开用户的个人证书存储并显示有关存储中每个证书的信息。此示例使用 X509SubjectKeyIdentifierExtension 类来显示信息。

#using <System.dll>
#using <system.security.dll>

using namespace System;
using namespace System::Security::Cryptography;
using namespace System::Security::Cryptography::X509Certificates;
int main()
{
   try
   {
      X509Store^ store = gcnew X509Store( L"MY",StoreLocation::CurrentUser );
      store->Open( static_cast<OpenFlags>(OpenFlags::ReadOnly | OpenFlags::OpenExistingOnly) );
      X509Certificate2Collection^ collection = dynamic_cast<X509Certificate2Collection^>(store->Certificates);
      for ( int i = 0; i < collection->Count; i++ )
      {
         System::Collections::IEnumerator^ myEnum = collection[ i ]->Extensions->GetEnumerator();
         while ( myEnum->MoveNext() )
         {
            X509Extension^ extension = safe_cast<X509Extension^>(myEnum->Current);
            Console::WriteLine( L"{0}({1})", extension->Oid->FriendlyName, extension->Oid->Value );
            if ( extension->Oid->FriendlyName == L"Key Usage" )
            {
               X509KeyUsageExtension^ ext = dynamic_cast<X509KeyUsageExtension^>(extension);
               Console::WriteLine( ext->KeyUsages );
            }
            if ( extension->Oid->FriendlyName == L"Basic Constraints" )
            {
               X509BasicConstraintsExtension^ ext = dynamic_cast<X509BasicConstraintsExtension^>(extension);
               Console::WriteLine( ext->CertificateAuthority );
               Console::WriteLine( ext->HasPathLengthConstraint );
               Console::WriteLine( ext->PathLengthConstraint );
            }
            if ( extension->Oid->FriendlyName == L"Subject Key Identifier" )
            {
               X509SubjectKeyIdentifierExtension^ ext = dynamic_cast<X509SubjectKeyIdentifierExtension^>(extension);
               Console::WriteLine( ext->SubjectKeyIdentifier );
            }
            if ( extension->Oid->FriendlyName == L"Enhanced Key Usage" )
            {
               X509EnhancedKeyUsageExtension^ ext = dynamic_cast<X509EnhancedKeyUsageExtension^>(extension);
               OidCollection^ oids = ext->EnhancedKeyUsages;
               System::Collections::IEnumerator^ myEnum1 = oids->GetEnumerator();
               while ( myEnum1->MoveNext() )
               {
                  Oid^ oid = safe_cast<Oid^>(myEnum1->Current);
                  Console::WriteLine( L"{0}({1})", oid->FriendlyName, oid->Value );
               }
            }
         }

      }
      store->Close();
   }
   catch ( CryptographicException^ ) 
   {
      Console::WriteLine( L"Information could not be written out for this certificate." );
   }

}

using System;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

public class CertSelect
{
    public static void Main()
    {
        try
        {
            X509Store store = new X509Store("MY", StoreLocation.CurrentUser);
            store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);

            X509Certificate2Collection collection = (X509Certificate2Collection)store.Certificates;
            for (int i = 0; i < collection.Count; i++)
            {
                foreach (X509Extension extension in collection[i].Extensions)
                {
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")");

                    if (extension.Oid.FriendlyName == "Key Usage")
                    {
                        X509KeyUsageExtension ext = (X509KeyUsageExtension)extension;
                        Console.WriteLine(ext.KeyUsages);
                    }

                    if (extension.Oid.FriendlyName == "Basic Constraints")
                    {
                        X509BasicConstraintsExtension ext = (X509BasicConstraintsExtension)extension;
                        Console.WriteLine(ext.CertificateAuthority);
                        Console.WriteLine(ext.HasPathLengthConstraint);
                        Console.WriteLine(ext.PathLengthConstraint);
                    }

                    if (extension.Oid.FriendlyName == "Subject Key Identifier")
                    {
                        X509SubjectKeyIdentifierExtension ext = (X509SubjectKeyIdentifierExtension)extension;
                        Console.WriteLine(ext.SubjectKeyIdentifier);
                    }

                    if (extension.Oid.FriendlyName == "Enhanced Key Usage")
                    {
                        X509EnhancedKeyUsageExtension ext = (X509EnhancedKeyUsageExtension)extension;
                        OidCollection oids = ext.EnhancedKeyUsages;
                        foreach (Oid oid in oids)
                        {
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")");
                        }
                    }
                }
            }
            store.Close();
        }
        catch (CryptographicException)
        {
            Console.WriteLine("Information could not be written out for this certificate.");
        }
    }
}

Imports System.Security.Cryptography
Imports System.Security.Cryptography.X509Certificates



Module CertSelect

    Sub Main()
        Try
            Dim store As New X509Store("MY", StoreLocation.CurrentUser)
            store.Open(OpenFlags.ReadOnly Or OpenFlags.OpenExistingOnly)

            Dim collection As X509Certificate2Collection = CType(store.Certificates, X509Certificate2Collection)
            For i As Integer = 0 To collection.Count - 1
                Dim extension As X509Extension
                For Each extension In collection(i).Extensions
                    Console.WriteLine(extension.Oid.FriendlyName + "(" + extension.Oid.Value + ")")


                    If extension.Oid.FriendlyName = "Key Usage" Then
                        Dim ext As X509KeyUsageExtension = CType(extension, X509KeyUsageExtension)
                        Console.WriteLine(ext.KeyUsages)
                    End If

                    If extension.Oid.FriendlyName = "Basic Constraints" Then
                        Dim ext As X509BasicConstraintsExtension = CType(extension, X509BasicConstraintsExtension)
                        Console.WriteLine(ext.CertificateAuthority)
                        Console.WriteLine(ext.HasPathLengthConstraint)
                        Console.WriteLine(ext.PathLengthConstraint)
                    End If

                    If extension.Oid.FriendlyName = "Subject Key Identifier" Then
                        Dim ext As X509SubjectKeyIdentifierExtension = CType(extension, X509SubjectKeyIdentifierExtension)
                        Console.WriteLine(ext.SubjectKeyIdentifier)
                    End If

                    If extension.Oid.FriendlyName = "Enhanced Key Usage" Then
                        Dim ext As X509EnhancedKeyUsageExtension = CType(extension, X509EnhancedKeyUsageExtension)
                        Dim oids As OidCollection = ext.EnhancedKeyUsages
                        Dim oid As Oid
                        For Each oid In oids
                            Console.WriteLine(oid.FriendlyName + "(" + oid.Value + ")")
                        Next oid
                    End If
                Next extension
            Next i
            store.Close()
        Catch
            Console.WriteLine("Information could not be written out for this certificate.")
        End Try

    End Sub
End Module

注解

可通过多种方式标识证书：通过证书的哈希、颁发者和序列号，以及按使用者密钥标识符 (SKI) 。 SKI 为证书使用者提供唯一标识，通常在使用 XML 数字签名时使用。

构造函数

X509SubjectKeyIdentifierExtension()	初始化 X509SubjectKeyIdentifierExtension 类的新实例。
X509SubjectKeyIdentifierExtension(AsnEncodedData, Boolean)	使用编码数据和一个标识扩展是否重要的值初始化 X509SubjectKeyIdentifierExtension 类的新实例。
X509SubjectKeyIdentifierExtension(Byte[], Boolean)	使用一个字节数组和一个标识扩展是否重要的值初始化 X509SubjectKeyIdentifierExtension 类的新实例。
X509SubjectKeyIdentifierExtension(PublicKey, Boolean)	使用一个公钥和一个标识扩展是否重要的值初始化 X509SubjectKeyIdentifierExtension 类的新实例。
X509SubjectKeyIdentifierExtension(PublicKey, X509SubjectKeyIdentifierHashAlgorithm, Boolean)	使用一个公钥、一个哈希算法标识符和一个指示扩展是否重要的值初始化 X509SubjectKeyIdentifierExtension 类的新实例。
X509SubjectKeyIdentifierExtension(ReadOnlySpan<Byte>, Boolean)	使用字节的一个只读范围和一个标识扩展是否重要的值初始化 X509SubjectKeyIdentifierExtension 类的新实例。
X509SubjectKeyIdentifierExtension(String, Boolean)	使用一个字符串和一个标识扩展是否重要的值初始化 X509SubjectKeyIdentifierExtension 类的新实例。

属性

Critical	获取一个指示扩展是否必不可少的布尔值。 (继承自 X509Extension)
Oid	获取或设置 Oid 对象的 AsnEncodedData 值。 (继承自 AsnEncodedData)
RawData	获取或设置以字节数组表示的 Abstract Syntax Notation One (ASN.1) 编码数据。 (继承自 AsnEncodedData)
SubjectKeyIdentifier	获取一个表示证书的主题密钥标识符 (SKI) 的字符串。
SubjectKeyIdentifierBytes	获取一个值，该值的内容表示证书的使用者密钥标识符 (SKI) 。

方法

CopyFrom(AsnEncodedData)	通过从编码数据复制信息创建 X509SubjectKeyIdentifierExtension 类的新实例。
Equals(Object)	确定指定对象是否等于当前对象。 (继承自 Object)
Format(Boolean)	将 Abstract Syntax Notation One (ASN.1) 编码数据的格式化版本作为字符串返回。 (继承自 AsnEncodedData)
GetHashCode()	作为默认哈希函数。 (继承自 Object)
GetType()	获取当前实例的 Type。 (继承自 Object)
MemberwiseClone()	创建当前 Object 的浅表副本。 (继承自 Object)
ToString()	返回表示当前对象的字符串。 (继承自 Object)

适用于

X509SubjectKeyIdentifierExtension 类

定义

示例

注解

构造函数

属性

方法

适用于

反馈

其他资源