Code:
/ WCF / WCF / 3.5.30729.1 / untmp / Orcas / SP / ndp / cdf / src / WCF / ServiceModel / System / ServiceModel / Channels / SelfSignedCertificate.cs / 1 / SelfSignedCertificate.cs
//------------------------------------------------------------------------------ // Copyright (c) Microsoft Corporation. All rights reserved. //----------------------------------------------------------------------------- using System; using System.ComponentModel; using System.Diagnostics; using System.Runtime.InteropServices; using System.Runtime.ConstrainedExecution; using System.Security; using System.Security.Cryptography; using System.Security.Cryptography.X509Certificates; using System.ServiceModel.Channels; using System.ServiceModel.Diagnostics; using System.Text; namespace System.ServiceModel.Channels { sealed partial class SelfSignedCertificate : IDisposable { private CertificateHandle cert = null; private KeyContainerHandle keyContainer = null; private KeyHandle key = null; private string keyContainerName = null; private string password = null; private byte[] exportedBytes = null; X509Certificate2 x509Cert; const int CERT_STORE_PROV_MEMORY = 2; const int DefaultLifeSpanInYears = 2; public static SelfSignedCertificate Create(string name, string password) { return Create(name, password, DateTime.UtcNow, DateTime.UtcNow.AddYears(DefaultLifeSpanInYears), Guid.NewGuid().ToString()); } public static SelfSignedCertificate Create( string name, string password, DateTime start, DateTime expire, string containerName) { SelfSignedCertificate cert = new SelfSignedCertificate(password, containerName); cert.GenerateKeys(); cert.CreateCertContext(name, start, expire); cert.GetX509Certificate(); DiagnosticUtility.DebugAssert(cert.cert != null, "CertContext could not be created"); return cert; } void CreateCertContext(string name, DateTime start, DateTime expire) { CriticalAllocHandle provInfo; CriticalAllocHandle algorithmId; provInfo = GetProviderInfo(); algorithmId = GetSha1AlgorithmId(); // convert the times to SystemTime structures SystemTime beginTime = new SystemTime(start); SystemTime expireTime = new SystemTime(expire); // convert the name into a X500 name CertificateName certName = new CertificateName(name); using (CryptoApiBlob nameBlob = certName.GetCryptoApiBlob()) { using(provInfo) { using(algorithmId) { cert = CertCreateSelfSignCertificate(keyContainer, nameBlob.GetMemoryForPinning(), SelfSignFlags.None, provInfo, algorithmId, ref beginTime, ref expireTime, IntPtr.Zero); if (cert.IsInvalid) PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(PeerExceptionHelper.GetLastException()); // if (!CertSetCertificateContextProperty(cert, CERT_KEY_PROV_INFO_PROP_ID, 0, provInfo)) // PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(PeerExceptionHelper.GetLastException()); if (!CertSetCertificateContextProperty(cert, CERT_KEY_SPEC_PROP_ID, 0, key)) PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(PeerExceptionHelper.GetLastException()); } } } } public X509Certificate2 GetX509Certificate() { if(this.x509Cert == null) { Export(); this.x509Cert = new X509Certificate2(exportedBytes, password); } return this.x509Cert; } private void Export() { DiagnosticUtility.DebugAssert(this.exportedBytes == null, "calling Export twice!!"); // create a temporary store to export using(CertificateStoreHandle store = CertOpenStore( new IntPtr(CERT_STORE_PROV_MEMORY), 0, IntPtr.Zero, 0, IntPtr.Zero)) { // add the certificate to the store StoreCertificateHandle addedCert; if(!CertAddCertificateContextToStore(store, cert, AddDisposition.ReplaceExisting, out addedCert)) { int error = Marshal.GetLastWin32Error(); Utility.CloseInvalidOutSafeHandle(addedCert); PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(new Win32Exception(error)); } using(addedCert) { // Translate to a PFX CryptoApiBlob pfxBlob = new CryptoApiBlob(); CryptoApiBlob.InteropHelper blob = pfxBlob.GetMemoryForPinning(); GCHandle pfxHandle = GCHandle.Alloc(blob, GCHandleType.Pinned); try { // first figure out the storage space necessary bool result = PFXExportCertStoreEx(store, pfxHandle.AddrOfPinnedObject(), password, IntPtr.Zero, PfxExportFlags.ExportPrivateKeys | PfxExportFlags.ReportNoPrivateKey | PfxExportFlags.ReportNotAbleToExportPrivateKey); if(!result) PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(PeerExceptionHelper.GetLastException()); int storageSize = blob.size; pfxHandle.Free(); pfxBlob.AllocateBlob(storageSize); blob = pfxBlob.GetMemoryForPinning(); pfxHandle = GCHandle.Alloc(blob, GCHandleType.Pinned); // now do the translation if(!PFXExportCertStoreEx(store, pfxHandle.AddrOfPinnedObject(), password, IntPtr.Zero, PfxExportFlags.ExportPrivateKeys | PfxExportFlags.ReportNoPrivateKey | PfxExportFlags.ReportNotAbleToExportPrivateKey)) PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(PeerExceptionHelper.GetLastException()); exportedBytes = pfxBlob.GetBytes(); } finally { if(pfxHandle != null) pfxHandle.Free(); if(pfxBlob != null) pfxBlob.Dispose(); } } } } private void GenerateKeys() { // generate the key container to put the key in if(!CryptAcquireContext(out keyContainer, keyContainerName, null, ProviderType.RsaSecureChannel, ContextFlags.NewKeySet | ContextFlags.Silent)) { int error = Marshal.GetLastWin32Error(); Utility.CloseInvalidOutSafeHandle(keyContainer); keyContainer = null; PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(new Win32Exception(error)); } // generate the key if(!CryptGenKey(keyContainer, AlgorithmType.KeyExchange, KeyFlags.Exportable2k, out key)) { int error = Marshal.GetLastWin32Error(); Utility.CloseInvalidOutSafeHandle(key); key = null; PeerExceptionHelper.ThrowInvalidOperation_PeerCertGenFailure(new Win32Exception(error)); } } private void Dispose(bool disposing) { if(disposing) { if(cert != null) cert.Dispose(); if(key != null) key.Dispose(); if(keyContainer != null) keyContainer.Dispose(); if(keyContainerName != null) { CryptAcquireContext(out keyContainer, keyContainerName, null, ProviderType.RsaSecureChannel, ContextFlags.DeleteKeySet); Utility.CloseInvalidOutSafeHandle(keyContainer); } GC.SuppressFinalize(this); } } public void Dispose() { Dispose(true); } private SelfSignedCertificate(string password, string containerName) { this.password = password; this.keyContainerName = containerName; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- WorkflowApplicationUnhandledExceptionEventArgs.cs
- Authorization.cs
- SAPIEngineTypes.cs
- ErrorHandlingReceiver.cs
- ImmutablePropertyDescriptorGridEntry.cs
- ImageButton.cs
- HttpApplicationFactory.cs
- SiteMapDataSource.cs
- PropertyCondition.cs
- SortDescription.cs
- WindowsListViewItemCheckBox.cs
- SchemaType.cs
- DataGridViewHeaderCell.cs
- DataGridColumnEventArgs.cs
- DataServiceBuildProvider.cs
- ObservableCollection.cs
- WinFormsComponentEditor.cs
- MethodToken.cs
- Crypto.cs
- LocalizableResourceBuilder.cs
- TextSerializer.cs
- ServiceHost.cs
- X509IssuerSerialKeyIdentifierClause.cs
- XmlQueryCardinality.cs
- XmlNodeList.cs
- SimplePropertyEntry.cs
- ClientTargetSection.cs
- NavigateEvent.cs
- SnapshotChangeTrackingStrategy.cs
- DialogResultConverter.cs
- WebFormsRootDesigner.cs
- PageParserFilter.cs
- UnauthorizedWebPart.cs
- PointLightBase.cs
- Latin1Encoding.cs
- ToolStripItemEventArgs.cs
- OleDbMetaDataFactory.cs
- MouseCaptureWithinProperty.cs
- ButtonBase.cs
- EventsTab.cs
- Part.cs
- CannotUnloadAppDomainException.cs
- Annotation.cs
- GridViewAutomationPeer.cs
- AppDomainInfo.cs
- GradientStopCollection.cs
- RepeatButtonAutomationPeer.cs
- LineSegment.cs
- CheckBoxList.cs
- TableSectionStyle.cs
- ProtocolsConfigurationHandler.cs
- ColumnBinding.cs
- RequestCachingSection.cs
- DataServiceException.cs
- __Filters.cs
- ModelUIElement3D.cs
- IsolatedStoragePermission.cs
- HostedElements.cs
- sqlser.cs
- AbsoluteQuery.cs
- Content.cs
- Privilege.cs
- Byte.cs
- TypeUtils.cs
- ProtocolsSection.cs
- TcpStreams.cs
- UntrustedRecipientException.cs
- IconConverter.cs
- DataGridViewComboBoxCell.cs
- BitStream.cs
- RuntimeResourceSet.cs
- ColorMatrix.cs
- IndentTextWriter.cs
- SettingsSavedEventArgs.cs
- Application.cs
- ColumnClickEvent.cs
- TraceHwndHost.cs
- OutKeywords.cs
- MainMenu.cs
- ForAllOperator.cs
- XmlReaderSettings.cs
- AudioSignalProblemOccurredEventArgs.cs
- DefaultShape.cs
- ConnectionInterfaceCollection.cs
- FontStretches.cs
- XmlObjectSerializerReadContext.cs
- SessionMode.cs
- ipaddressinformationcollection.cs
- ToolStripAdornerWindowService.cs
- TimeZoneInfo.cs
- ConfigurationStrings.cs
- EventLogEntryCollection.cs
- PartitionedStream.cs
- SqlDataSourceCustomCommandEditor.cs
- _emptywebproxy.cs
- FieldToken.cs
- FixUp.cs
- PngBitmapEncoder.cs
- WebPartConnectionsCancelEventArgs.cs
- Blend.cs