我会PFXVerifyPassword和PFXIsPFXBlob本地函数去。虽然它需要一个p/invoke,但它是一个真正的交易。
C#签名和样本代码:
using System;
using System.IO;
using System.Runtime.InteropServices;
namespace ClassLibrary1 {
class CryptoAPI {
[DllImport("Crypt32.dll", CharSet = CharSet.Auto, SetLastError = true)]
public static extern Boolean PFXIsPFXBlob(
[In]CRYPTOAPI_BLOB pPFX
);
[DllImport("Crypt32.dll", CharSet = CharSet.Auto, SetLastError = true)]
public static extern Boolean PFXVerifyPassword(
[In] CRYPTOAPI_BLOB pPFX,
[MarshalAs(UnmanagedType.LPWStr)]
[In] String szPassword,
[In] UInt32 dwFlags
);
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto)]
public struct CRYPTOAPI_BLOB {
public UInt32 cbData;
public IntPtr pbData;
}
}
public class Program {
public static Boolean TestPfxPwd(Byte[] rawData, String password) {
// check for input data
if (rawData == null) { throw new ArgumentNullException("rawData"); }
// allocate a buffer in an unmanaged memory to store PFX content
IntPtr pbData = Marshal.AllocHGlobal(rawData.Length);
// copy PFX content to allocated buffer
Marshal.Copy(rawData, 0, pbData, rawData.Length);
// instantiate CRYPTOAPI_BLOB structure as it will be used
// to call both functions
CryptoAPI.CRYPTOAPI_BLOB blob = new CryptoAPI.CRYPTOAPI_BLOB {
cbData = (UInt32)rawData.Length,
pbData = pbData
};
// determine if input byte array represents a PFX blob:
if (!CryptoAPI.PFXIsPFXBlob(blob)) {
// release unmanaged resources before leaving method
Marshal.FreeHGlobal(pbData);
throw new InvalidDataException("Input data is not valid PFX message.");
}
// call the PFXVerifyPassword function and store results in a temporary variable
Boolean retValue = CryptoAPI.PFXVerifyPassword(blob, password, 0);
// release unmanaged resources before leaving method
Marshal.FreeHGlobal(pbData);
// return pfx match status
return retValue;
}
}
}
感谢您的例子。我不知道本地的Windows API。但我的公司(我工作)有限制,以避免使用本机窗口API。 – 2015-02-12 08:29:23
由于大约一半的.NET(Cryptography命名空间的高达90%)是本地函数的包装,我没有看到本地函数的大问题。 – Crypt32 2015-02-12 08:41:12
我明白了。但具体来说,X509Certificate2类在Mono中有自己的实例。我们的客户不应该依赖于Windows环境。这不是我的错。这是生意。另一个观点是你有什么保证微软不会改变原生API? – 2015-02-12 10:10:34