如何验证X509证书？
我必须编写一个工具来验证 X509 证书是否有效（输入 = 证书路径/主题和密码）。我怎样才能做到这一点？我对证书不太了解...
I have to write a tool which validates if a X509 certificate is valid or not (input = cert path / subject and password). How can I do that? I don't know much about certs...
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
看一下 X509Certificate2.Verify( ）
Take a look at X509Certificate2.Verify()
一般来说，RFC 3280 包含有关如何执行验证的几乎完整说明，但是这些说明非常重要。此外，您还需要阅读 RFC 2560 (OCSP) 并实现 OCSP 客户端。
对于大多数任务，您会发现我们的 TElX509CertificateValidator 组件 非常适合。它检查证书路径、CRL 和 OCSP 吊销（并检查 CRL 和 OCSP 响应的有效性）。它足够灵活且功能强大，可以让您对每个步骤执行额外的、更深入的检查。此外，该组件还可以与 Windows 证书存储以及文件或内存中可能拥有的任何其他证书、证书链和存储一起使用。
In general, RFC 3280 includes almost complete instructions regarding how to perform validation, however those instructions are very non-trivial. Additionally you would need to read RFC 2560 (OCSP) and implement OCSP client.
For most tasks you will find our TElX509CertificateValidator component perfectly suitable. It checks certificate paths, CRL and OCSP revocation (and checks validity of CRLs and OCSP responses as well). It is flexible and powerful enough and lets you perform additional, deeper checks on each step. Also this component can work with both Windows certificate storages and any other certificates, certificate chains and storages that you might have in files or in memory.