c#获取ssl证书有效性_问题SSL证书C#

在我的C#应用​​程序中,我必须通过https调用Web服务并使用我已经拥有的.crt文件进行验证.以下是满足此类需求的正确解决方案.我得到一个有效的解决方案后,我已经更新了这篇文章,认为它可能会帮助像我这样的人.

解决方案

以下代码必须在整个应用程序执行中只执行一次.有了这个,我们设置ServerCertification和SSL属性,每当调用reqest时将使用它们：

public static void setSSLCertificate()

{

clientCert = new X509Certificate2(AUTHEN_CERT_FILE); // Pointing to the .crt file that will be used for server certificate verification by the client

System.Net.ServicePointManager.ServerCertificateValidationCallback += new System.Net.Security.RemoteCertificateValidationCallback(customXertificateValidation);

}

public static bool customXertificateValidation(Object sender, X509Certificate certificate, X509Chain chain, System.Net.Security.SslPolicyErrors sslPoicyErrors)

{

switch (sslPoicyErrors)

{

case System.Net.Security.SslPolicyErrors.RemoteCertificateChainErrors:

case System.Net.Security.SslPolicyErrors.RemoteCertificateNameMismatch:

case System.Net.Security.SslPolicyErrors.RemoteCertificateNotAvailable:

break;

}

return clientCert.Verify(); // Perform the Verification and sends the result

}

请求通常像我们没有实现SSL那样完成.这是一个Post请求代码：

private static String SendPost(String uri, String post_data)

{

String resData = "";

HttpWebRequest request = (HttpWebRequest)WebRequest.Create(uri);

request.KeepAlive = false;

request.ProtocolVersion = HttpVersion.Version10;

request.ContentType = "application/x-www-form-urlencoded";

request.Method = "POST";

// turn request string into byte[]

byte[] postBytes = Encoding.ASCII.GetBytes(post_data);

Stream requestStream = null;

try

{

// Send it

request.ContentLength = postBytes.Length;

requestStream = request.GetRequestStream();

requestStream.Write(postBytes, 0, postBytes.Length);

}

catch (WebException we)

{ // If SSL throws exception that will be handled here

if (we.Status == WebExceptionStatus.TrustFailure)

throw new Exception("Exception Sending Data POST : Fail to verify server " + we.Message);

}

catch (Exception e)

{

throw new Exception("Exception Sending Data POST : " + e.Message, e.InnerException);

}

finally

{

if (requestStream != null)

requestStream.Close();

}

// Get the response

HttpWebResponse response = null;

try

{

response = (HttpWebResponse)request.GetResponse();

if (response == null)

return "";

StreamReader sr = new StreamReader(response.GetResponseStream());

resData = sr.ReadToEnd().Trim();

sr.Close();

}

catch (Exception e)

{

throw new Exception("Error receiving response from POST : " + e.Message, e.InnerException);

}

finally

{

if (response != null)

response.Close();

}

return resData;

}

特别感谢Dipti Mehta,他的探索帮助我通过接受服务器证书来实现目标.她帮助我解决了我的困惑.我终于找到了如何使用客户端使用.crt文件验证服务器证书.

希望这有助于某人.

谢谢