本文主要是介绍C#下生成CSR证书签名请求，希望对大家解决编程问题提供一定的参考价值，需要的开发者们随着小编来一起学习吧！
首先普及下知识，CSR是证书签名请求，它不是证书，是用于向CA公司申请证书的，以下为代码： using Org.BouncyCastle.Asn1;using Org.BouncyCastle.Asn1.Pkcs;using Org.BouncyCastle.Asn1.X509;using Org.BouncyCastle.Crypto;using Org.BouncyCastle.Crypto.Generators;using Org.BouncyCastle.Crypto.Operators;using Org.BouncyCastle.Pkcs;using Org.BouncyCastle.Security;/// <summary>/// pcks10辅助类/// </summary>public class RSAPcks10Helper{/// <summary>/// 生成CSR及返回其使用的私钥/// </summary>/// <param name="dirName">dn</param>/// <param name="csr">生成的csr内容部分字符串 base64格式</param>/// <param name="privateKey">生成的RSA秘钥内容部分pcks8格式 base64格式</param>/// <param name="signatureAlgorithm">签名算法</param>/// <param name="keyLength">生成的秘钥长度</param>public static void GenerateCSR(string dirName, out string csr, out string privateKey, string signatureAlgorithm = "SHA1WithRSA", int keyLength = 2048){GenerateCSR(dirName, out byte[] csrData, out byte[] privateKeyPcks8Data, signatureAlgorithm, keyLength);csr = Convert.ToBase64String(csrData);privateKey = Convert.ToBase64String(privateKeyPcks8Data);}/// <summary>/// 生成CSR及返回其使用的私钥/// </summary>/// <param name="dirName">dn</param>/// <param name="csrData">生成的csr内容</param>/// <param name="privateKeyPcks8Data">生成的RSA秘钥内容 pcks8格式</param>/// <param name="signatureAlgorithm">签名算法</param>/// <param name="keyLength">生成的秘钥长度</param>public static void GenerateCSR(string dirName, out byte[] csrData, out byte[] privateKeyPcks8Data, string signatureAlgorithm = "SHA1WithRSA", int keyLength = 2048){RsaKeyPairGenerator generator = new RsaKeyPairGenerator();generator.Init(new KeyGenerationParameters(new SecureRandom(), keyLength));var keyPair = generator.GenerateKeyPair();X509Name subject = new X509Name(dirName);Pkcs10CertificationRequest p10 = new Pkcs10CertificationRequest(new Asn1SignatureFactory(signatureAlgorithm, keyPair.Private), subject, keyPair.Public, new DerSet(), keyPair.Private);csrData = p10.GetEncoded();PrivateKeyInfo privateKeyInfo = PrivateKeyInfoFactory.CreatePrivateKeyInfo(keyPair.Private);privateKeyPcks8Data = privateKeyInfo.ToAsn1Object().GetEncoded();}/// <summary>/// 生成CSR及返回其使用的私钥/// </summary>/// <param name="dic">dn字典</param>/// <param name="csr">生成的csr内容部分字符串 base64格式</param>/// <param name="privateKey">生成的RSA秘钥内容部分pcks8格式 base64格式</param>/// <param name="signatureAlgorithm"></param>/// <param name="keyLength"></param>public static void GenerateCSR(IDictionary<string, string> dic, out string csr, out string privateKey, string signatureAlgorithm = "SHA1WithRSA", int keyLength = 2048){GenerateCSR(GenerateDN(dic), out csr, out privateKey, signatureAlgorithm, keyLength);}/// <summary>/// 生成CSR及返回其使用的私钥/// </summary>/// <param name="dic">dn字典</param>/// <param name="csrData">生成的csr内容</param>/// <param name="privateKeyPcks8Data">生成的RSA秘钥内容 pcks8格式</param>/// <param name="signatureAlgorithm"></param>/// <param name="keyLength"></param>public static void GenerateCSR(IDictionary<string, string> dic, out byte[] csrData, out byte[] privateKeyPcks8Data, string signatureAlgorithm = "SHA1WithRSA", int keyLength = 2048){GenerateCSR(GenerateDN(dic), out csrData, out privateKeyPcks8Data, signatureAlgorithm, keyLength);}/// <summary>/// 生成X509所需的subject字符串，key值支持哪些字段可通过Org.BouncyCastle.Asn1.X509.X509Name的static reaonly字段查看/// </summary>/// <param name="dic"></param>/// <returns></returns>public static string GenerateDN(IDictionary<string, string> dic){if (dic == null || dic.Count == 0){throw new ArgumentNullException("dic can not be null or empty");}StringBuilder tmp = new StringBuilder();foreach (var kv in dic){if (!string.IsNullOrWhiteSpace(kv.Value)){tmp.AppendFormat("{0}={1},", kv.Key, kv.Value);}}if (tmp.Length > 0){tmp = tmp.Remove(tmp.Length - 1, 1);}return tmp.ToString();}}这里就不贴BouncyCastle的下载链接了，这里附上DN说明链接：https://www.cnblogs.com/iiiiher/p/8085698.html，更多支持的Key可以通过Org.BouncyCastle.Asn1.X509.X509Name下的static reaonly字段查看，测试代码如下：
static void GenerateCSRDemo(){IDictionary<string, string> dic = new Dictionary<string, string>(){{ "CN","公司主题名称"},{ "O","单位组织名称"},{ "C","CN"},{ "ST","上海"},{ "L","上海"},};RSAPcks10Helper.GenerateCSR(dic, out string csrContent, out string privateKey);Console.WriteLine("-------CSR Content-------");Console.WriteLine(csrContent);Console.WriteLine("-------privateKey in pcks8-------");Console.WriteLine(privateKey);}这篇关于C#下生成CSR证书签名请求的文章就介绍到这儿，希望我们推荐的文章对编程师们有所帮助！
