1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
# System.Security.Cryptography.X509Certificates
``` diff
namespace System.Security.Cryptography.X509Certificates {
[UnsupportedOSPlatformAttribute("browser")]
public sealed class CertificateRequest {
+ public CertificateRequest(X500DistinguishedName subjectName, PublicKey publicKey, HashAlgorithmName hashAlgorithm, RSASignaturePadding? rsaSignaturePadding = null);
+ public Collection<AsnEncodedData> OtherRequestAttributes { get; }
+ public string CreateSigningRequestPem();
+ public string CreateSigningRequestPem(X509SignatureGenerator signatureGenerator);
+ public static CertificateRequest LoadSigningRequest(byte[] pkcs10, HashAlgorithmName signerHashAlgorithm, CertificateRequestLoadOptions options = CertificateRequestLoadOptions.Default, RSASignaturePadding? signerSignaturePadding = null);
+ public static CertificateRequest LoadSigningRequest(ReadOnlySpan<byte> pkcs10, HashAlgorithmName signerHashAlgorithm, out int bytesConsumed, CertificateRequestLoadOptions options = CertificateRequestLoadOptions.Default, RSASignaturePadding? signerSignaturePadding = null);
+ public static CertificateRequest LoadSigningRequestPem(ReadOnlySpan<char> pkcs10Pem, HashAlgorithmName signerHashAlgorithm, CertificateRequestLoadOptions options = CertificateRequestLoadOptions.Default, RSASignaturePadding? signerSignaturePadding = null);
+ public static CertificateRequest LoadSigningRequestPem(string pkcs10Pem, HashAlgorithmName signerHashAlgorithm, CertificateRequestLoadOptions options = CertificateRequestLoadOptions.Default, RSASignaturePadding? signerSignaturePadding = null);
}
+ [FlagsAttribute]
+ public enum CertificateRequestLoadOptions {
+ Default = 0,
+ SkipSignatureValidation = 1,
+ UnsafeLoadCertificateExtensions = 2,
+ }
+ public sealed class CertificateRevocationListBuilder {
+ public CertificateRevocationListBuilder();
+ public void AddEntry(byte[] serialNumber, DateTimeOffset? revocationTime = default(DateTimeOffset?), X509RevocationReason? reason = default(X509RevocationReason?));
+ public void AddEntry(ReadOnlySpan<byte> serialNumber, DateTimeOffset? revocationTime = default(DateTimeOffset?), X509RevocationReason? reason = default(X509RevocationReason?));
+ public void AddEntry(X509Certificate2 certificate, DateTimeOffset? revocationTime = default(DateTimeOffset?), X509RevocationReason? reason = default(X509RevocationReason?));
+ public byte[] Build(X500DistinguishedName issuerName, X509SignatureGenerator generator, BigInteger crlNumber, DateTimeOffset nextUpdate, HashAlgorithmName hashAlgorithm, X509AuthorityKeyIdentifierExtension authorityKeyIdentifier, DateTimeOffset? thisUpdate = default(DateTimeOffset?));
+ public byte[] Build(X509Certificate2 issuerCertificate, BigInteger crlNumber, DateTimeOffset nextUpdate, HashAlgorithmName hashAlgorithm, RSASignaturePadding? rsaSignaturePadding = null, DateTimeOffset? thisUpdate = default(DateTimeOffset?));
+ public static X509Extension BuildCrlDistributionPointExtension(IEnumerable<string> uris, bool critical = false);
+ public static CertificateRevocationListBuilder Load(byte[] currentCrl, out BigInteger currentCrlNumber);
+ public static CertificateRevocationListBuilder Load(ReadOnlySpan<byte> currentCrl, out BigInteger currentCrlNumber, out int bytesConsumed);
+ public static CertificateRevocationListBuilder LoadPem(ReadOnlySpan<char> currentCrl, out BigInteger currentCrlNumber);
+ public static CertificateRevocationListBuilder LoadPem(string currentCrl, out BigInteger currentCrlNumber);
+ public bool RemoveEntry(byte[] serialNumber);
+ public bool RemoveEntry(ReadOnlySpan<byte> serialNumber);
+ }
public sealed class X500DistinguishedName : AsnEncodedData {
+ public IEnumerable<X500RelativeDistinguishedName> EnumerateRelativeDistinguishedNames(bool reversed = true);
}
+ public sealed class X500RelativeDistinguishedName {
+ public bool HasMultipleElements { get; }
+ public ReadOnlyMemory<byte> RawData { get; }
+ public Oid GetSingleElementType();
+ public string? GetSingleElementValue();
+ }
+ public sealed class X509AuthorityKeyIdentifierExtension : X509Extension {
+ public X509AuthorityKeyIdentifierExtension();
+ public X509AuthorityKeyIdentifierExtension(byte[] rawData, bool critical = false);
+ public X509AuthorityKeyIdentifierExtension(ReadOnlySpan<byte> rawData, bool critical = false);
+ public ReadOnlyMemory<byte>? KeyIdentifier { get; }
+ public X500DistinguishedName? NamedIssuer { get; }
+ public ReadOnlyMemory<byte>? RawIssuer { get; }
+ public ReadOnlyMemory<byte>? SerialNumber { get; }
+ public override void CopyFrom(AsnEncodedData asnEncodedData);
+ public static X509AuthorityKeyIdentifierExtension Create(byte[] keyIdentifier, X500DistinguishedName issuerName, byte[] serialNumber);
+ public static X509AuthorityKeyIdentifierExtension Create(ReadOnlySpan<byte> keyIdentifier, X500DistinguishedName issuerName, ReadOnlySpan<byte> serialNumber);
+ public static X509AuthorityKeyIdentifierExtension CreateFromCertificate(X509Certificate2 certificate, bool includeKeyIdentifier, bool includeIssuerAndSerial);
+ public static X509AuthorityKeyIdentifierExtension CreateFromIssuerNameAndSerialNumber(X500DistinguishedName issuerName, byte[] serialNumber);
+ public static X509AuthorityKeyIdentifierExtension CreateFromIssuerNameAndSerialNumber(X500DistinguishedName issuerName, ReadOnlySpan<byte> serialNumber);
+ public static X509AuthorityKeyIdentifierExtension CreateFromSubjectKeyIdentifier(byte[] subjectKeyIdentifier);
+ public static X509AuthorityKeyIdentifierExtension CreateFromSubjectKeyIdentifier(ReadOnlySpan<byte> subjectKeyIdentifier);
+ public static X509AuthorityKeyIdentifierExtension CreateFromSubjectKeyIdentifier(X509SubjectKeyIdentifierExtension subjectKeyIdentifier);
+ }
public sealed class X509BasicConstraintsExtension : X509Extension {
+ public static X509BasicConstraintsExtension CreateForCertificateAuthority(int? pathLengthConstraint = default(int?));
+ public static X509BasicConstraintsExtension CreateForEndEntity(bool critical = false);
}
public class X509Certificate : IDeserializationCallback, IDisposable, ISerializable {
+ public ReadOnlyMemory<byte> SerialNumberBytes { get; }
}
public class X509Certificate2 : X509Certificate {
+ public bool MatchesHostname(string hostname, bool allowWildcards = true, bool allowCommonName = true);
}
+ public enum X509RevocationReason {
+ AACompromise = 10,
+ AffiliationChanged = 3,
+ CACompromise = 2,
+ CertificateHold = 6,
+ CessationOfOperation = 5,
+ KeyCompromise = 1,
+ PrivilegeWithdrawn = 9,
+ RemoveFromCrl = 8,
+ Superseded = 4,
+ Unspecified = 0,
+ WeakAlgorithmOrKey = 11,
+ }
+ public sealed class X509SubjectAlternativeNameExtension : X509Extension {
+ public X509SubjectAlternativeNameExtension();
+ public X509SubjectAlternativeNameExtension(byte[] rawData, bool critical = false);
+ public X509SubjectAlternativeNameExtension(ReadOnlySpan<byte> rawData, bool critical = false);
+ public override void CopyFrom(AsnEncodedData asnEncodedData);
+ public IEnumerable<string> EnumerateDnsNames();
+ public IEnumerable<IPAddress> EnumerateIPAddresses();
+ }
public sealed class X509SubjectKeyIdentifierExtension : X509Extension {
+ public ReadOnlyMemory<byte> SubjectKeyIdentifierBytes { get; }
}
}
```
|
