C＃：从x509certificateStore加载证书时找不到CrifificateByhash

Question

我需要向SOAP请求的WS安全标头添加一个二进制安全性。我关注 https://stackoverflow.com/a/a/22560639 和Microsoftwse的样品以及FindCertificateByKeyendefier的样品使用拇指打印机，因此我制作了此功能：

    public static X509SecurityToken GetClientToken(string certThumbprint)
    {
        X509CertificateStore store = X509CertificateStore.CurrentUserStore(X509CertificateStore.MyStore);

        if (store == null)
            throw new ArgumentNullException("store");

        X509SecurityToken token = null;

        if (store.OpenRead())
        {
            Microsoft.Web.Services2.Security.X509.X509CertificateCollection certs =
                store.FindCertificateByHash(Convert.FromBase64String(certThumbprint));
            //store.FindCertificateByKeyIdentifier(Convert.FromBase64String(certThumbprint));

            if (certs.Count > 0)
                token = new X509SecurityToken(((Microsoft.Web.Services2.Security.X509.X509Certificate)certs[0]));
        }

        if (store != null)
            store.Close();

        return token;
    }

但是，当我尝试找到CertificateByhash时，我没有获得证书。

在调试模式下，我看到sore.openread（）商店内有我的证书，但是在非公共成员的情况下，m_thumbprint = null，所以我认为商店没有正确加载证书，为什么？

请注意，在另一种情况下，我使用system.security.cryptography.x509certificates.x509certificate2，它可以通过以下操作检索

            System.Security.Cryptography.X509Certificates.X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser);

            store.Open(OpenFlags.ReadOnly);

            X509Certificate2Collection certCollection =
            store.Certificates.Find(X509FindType.FindByThumbprint, certThumbprint, false);

以下操作，因此我假设证书已在我的机器上纠正，但使用X.509时仍未显示证书证书工具wsecertificate2，也许这就是Visual Studio无法加载所有信息的原因？因此，我无法获得关键标识符来尝试使用FindCertificateByKeyIdentifier

Answer 1

您可以尝试这样的事情。

public static X509Certificate2 TryGetCertificate(string thumbprint, StoreLocation location = StoreLocation.LocalMachine)
{
    using var store = new X509Store(StoreName.My, location);
    store.Open(OpenFlags.ReadOnly);
    thumbprint = Regex.Replace(thumbprint, @"[^\da-fA-F]", string.Empty).ToUpper();

    X509Certificate2Collection certificateCollection = store.Certificates.Find(X509FindType.FindByThumbprint, thumbprint, false);
    if (certificateCollection.Count == 0)
    {
        return null;
    }

    return certificateCollection[0];
}