X509Certificate证书读取本地相应指纹证书

X509Certificate证书所在的命名空间：

System.Security.Cryptography.X509Certificates

新建控制台程序 X509CertificateDemo，添加对System.Configuration的引用

一、新建配置类：CertificateConfig

using System; using System.Collections.Generic; using System.Configuration; using System.Linq; using System.Security.Cryptography.X509Certificates; using System.Text; using System.Threading.Tasks;

namespace X509CertificateDemo {     /// <summary>     /// Certificate configuration     /// </summary>     public class CertificateConfig : ConfigurationElement     {         /// <summary>         /// Gets the certificate file path.         /// </summary>         [ConfigurationProperty("filePath", IsRequired = false)]         public string FilePath         {             get             {                 return this["filePath"] as string;             }         }

        /// <summary>         /// Gets the password.         /// </summary>         [ConfigurationProperty("password", IsRequired = false)]         public string Password         {             get             {                 return this["password"] as string;             }         }

        /// <summary>         /// Gets the the store where certificate locates.         /// </summary>         /// <value>         /// The name of the store.         /// </value>         [ConfigurationProperty("storeName", IsRequired = false)]         public string StoreName         {             get             {                 return this["storeName"] as string;             }         }

        /// <summary>         /// Gets the store location of the certificate.         /// </summary>         /// <value>         /// The store location.         /// </value>         [ConfigurationProperty("storeLocation", IsRequired = false, DefaultValue = "CurrentUser")]         public StoreLocation StoreLocation         {             get             {                 return (StoreLocation)this["storeLocation"];             }         }

        /// <summary>         /// Gets the thumbprint.【指纹】         /// </summary>         [ConfigurationProperty("thumbprint", IsRequired = false)]         public string Thumbprint         {             //get             //{             //    return this["thumbprint"] as string;             //}             get;set;         }

        /// <summary>         /// Gets a value indicating whether [client certificate required].         /// </summary>         /// <value>         /// <c>true</c> if [client certificate required]; otherwise, <c>false</c>.         /// </value>         [ConfigurationProperty("clientCertificateRequired", IsRequired = false, DefaultValue = false)]         public bool ClientCertificateRequired         {             get             {                 return (bool)this["clientCertificateRequired"];             }         }

        /// <summary>         /// Gets a value that will be used to instantiate the X509Certificate2 object in the CertificateManager         /// </summary>         [ConfigurationProperty("keyStorageFlags", IsRequired = false, DefaultValue = X509KeyStorageFlags.DefaultKeySet)]         public X509KeyStorageFlags KeyStorageFlags         {             get             {                 return (X509KeyStorageFlags)this["keyStorageFlags"];             }         }     } }  

二、新建类CertificateManager，源程序如下：  

using System; using System.Collections.Generic; using System.IO; using System.Linq; using System.Text; using System.Threading.Tasks; using System.Security.Cryptography.X509Certificates;

namespace X509CertificateDemo {     /// <summary>     /// 证书管理     /// </summary>     public class CertificateManager     {         public static X509Certificate GetCertificate(CertificateConfig certificate)         {             if (certificate == null)             {                 Console.WriteLine("There is no certificate configured!");                 return null;             }

            //文件路径 和 指纹 至少需要存在一个             if (string.IsNullOrEmpty(certificate.FilePath) && string.IsNullOrEmpty(certificate.Thumbprint))             {                 Console.WriteLine("You should define certificate node and either attribute 'filePath' or 'thumbprint' is required!");                 return null;             }

            return Initialize(certificate, GetFilePath);         }

        /// <summary>         /// 如果应用程序根目录下存在该文件         /// </summary>         /// <param name="relativeFilePath"></param>         /// <returns></returns>         private static string GetFilePath(string relativeFilePath)         {             string filePath = Path.Combine(AppDomain.CurrentDomain.BaseDirectory, relativeFilePath);             if (!File.Exists(filePath))             {                 string rootDir = Directory.GetParent(AppDomain.CurrentDomain.BaseDirectory).Parent.FullName;                 string rootFilePath = Path.Combine(rootDir, relativeFilePath);                 if (File.Exists(rootFilePath))                     return rootFilePath;             }             return filePath;         }

        private static X509Certificate Initialize(CertificateConfig certificateConfig, Func<string, string> relativePathHandler)         {             if (!string.IsNullOrEmpty(certificateConfig.FilePath))             {                 //如果文件路径不为空                 string filePath = certificateConfig.FilePath;                 if (!Path.IsPathRooted(filePath))                 {                     filePath = relativePathHandler(filePath);                 }                 return new X509Certificate2(filePath, certificateConfig.Password, certificateConfig.KeyStorageFlags);             }             else             {                 //如果文件路径为空                 string storeName = certificateConfig.StoreName;                 if (string.IsNullOrEmpty(storeName))                 {                     storeName = "Root";                 }                 X509Store store = new X509Store(storeName, certificateConfig.StoreLocation);                 store.Open(OpenFlags.ReadOnly);                 X509Certificate2 cert = store.Certificates.OfType<X509Certificate2>().Where(c => c.Thumbprint.Equals(certificateConfig.Thumbprint, StringComparison.OrdinalIgnoreCase)).FirstOrDefault();                 store.Close();                 return cert;             }         }     } }  

三、默认的控制台Program类，测试程序如下：

using System; using System.Collections.Generic; using System.Linq; using System.Text; using System.Threading.Tasks; using System.Security.Cryptography.X509Certificates;

namespace X509CertificateDemo {     /// <summary>     /// X509证书测试     /// </summary>     class Program     {         static void Main(string[] args)         {             X509Certificate certificate = CertificateManager.GetCertificate(new CertificateConfig() { Thumbprint = "A43489159A520F0D93D032CCAF37E7FE20A8B419" });             if (certificate == null)             {                 Console.WriteLine("没有找到该指纹对应的证书...");                 Console.ReadLine();                 return;             }             Console.WriteLine(certificate.ToString());             Console.WriteLine("--------------------------------------");             Console.WriteLine(certificate.ToString(true));             Console.ReadLine();         }     } }  

四、运行效果如图：