如何使用与 X509Chain (C#) 不同的东西来检查证书中的 CRL?
在.net中,我知道我可以使用 X509Certificate 链来验证给定的证书。 我搜索并找到了很多关于如何做到这一点的例子。但如果我想要更多地控制它,我就不能。从设计上来说,它的水平非常高。
我想要的东西像这样: 纳科夫代码。
我可以在哪里随意下载,并根据我的需要或设计来控制缓存。
有谁知道与 BouncyCastle 或 IText 一起使用的任何框架或技术吗?
提前致谢
In .net I am aware that I can use X509Certificate chain to validate the a given certificate.
I searched and found quite a few examples on how to do it. But if I want a little more control over it, I can't. By design it is very high level.
I was wanting something as low as this: Nakov's code.
Where I can download at will, and control the cache as I need or design.
Does anyone know any framework, or technique to use with BouncyCastle or IText?
thanks in advance
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
为什么不能使用标准的
ServicePointManager.ServerCertificateValidationCallback
?http://msdn.microsoft.com/en-us /library/system.net.servicepointmanager.servercertificatevalidationcallback.aspx
应用程序可以将 ServerCertificateValidationCallback 属性设置为用于自定义的方法客户端对服务器证书进行验证。
Why can't you use the standard
ServicePointManager.ServerCertificateValidationCallback
?http://msdn.microsoft.com/en-us/library/system.net.servicepointmanager.servercertificatevalidationcallback.aspx
An application can set the ServerCertificateValidationCallback property to a method to use for custom validation by the client of the server certificate.
我们的 SecureBlackbox 提供 TElX509CertificateValidator 组件,可以根据您的喜好完全控制和调整。如果这还不够,- TElX509CertificateValidator 仅使用 SecureBlackbox 提供的函数和类,以便您可以构建自己的验证程序。 SecureBlackbox 支持 OCSP 请求和 CRL 等
Our SecureBlackbox offers TElX509CertificateValidator component which can be fully controlled and tuned up as you like. And if it's not enough, - TElX509CertificateValidator uses only functions and classes offered by SecureBlackbox so you can build your own validation procedures. SecureBlackbox supports OCSP requests and CRLs and much more