使用证书文件通过SSL连接到Web服务

Question

我在C#中开发Windows服务,它调用webservice方法.我必须使用SSL连接到webservice.我已经从发布者p12文件中获得了证书.该文件受密码保护.使用Import方法使用此证书.一切都很好,但我不喜欢这种方法 - 我的应用程序中有密码编码.当发布者更改证书时,我必须重写代码(将密码更改为新密码).有没有办法不将密码编码为.p12文件或使用其他选项(.cer文件)？

Answer 1

你能做的是这样的:

1. 将SSL证书安装到本地计算机证书存储区(使用Microsoft管理控制台"MMC")
2. 提取证书指纹(例如"748681ca3646ccc7c4facb7360a0e3baa0894cb5")
3. 使用一个函数从本地证书存储中获取给定指纹的证书.
4. 在调用Web服务时提供SSL证书.

private static X509Certificate2 GetCertificateByThumbprint(string certificateThumbPrint, StoreLocation certificateStoreLocation) {
    X509Certificate2 certificate = null;

    X509Store certificateStore = new X509Store(certificateStoreLocation);
    certificateStore.Open(OpenFlags.ReadOnly);


    X509Certificate2Collection certCollection = certificateStore.Certificates;
    foreach (X509Certificate2 cert in certCollection)
    {
        if (cert.Thumbprint != null && cert.Thumbprint.Equals(certificateThumbPrint, StringComparison.OrdinalIgnoreCase))
        {
            certificate = cert;
            break;
        }
    }

    if (certificate == null)
    {
        Log.ErrorFormat(CultureInfo.InvariantCulture, "Certificate with thumbprint {0} not found", certificateThumbPrint);
    }

    return certificate;
}

public string GetServiceResponse() {
    string WebSvcEndpointConfigurationName = "WebServiceEndpoint";
    Uri webSvcEndpointAddress = new Uri("http://www.example.com/YourWebService.svc");
    string webSvcCertificateThumbPrint = "748681ca3646ccc7c4facb7360a0e3baa0894cb5";

    string webSvcResponse = null;
    SomeWebServiceClient webServiceClient = null;

    try
    {
        webServiceClient = new SomeWebServiceClient(WebSvcEndpointConfigurationName, new EndpointAddress(webSvcEndpointAddress));
        webServiceClient.ClientCredentials.ClientCertificate.Certificate = GetCertificateByThumbprint(webSvcCertificateThumbPrint, StoreLocation.LocalMachine);

        webSvcResponse = webServiceClient.GetServiceResponse();
    }
    catch (Exception ex)
    {
    }
    finally
    {
        if (webServiceClient != null)
        {
            webServiceClient.Close();
        }
    }
    return webSvcResponse;
}