C # Certificate Generation Framework

Question

Does anyone know a C # framework that can generate public / private keys, X.509 certificates and sign these certificates?

Answer 1

BouncyCastleCrypto, like crazy on behalf of, I am sure that all these features. Almost all RFC standards are implemented. When I used it a few years ago, it was poorly documented, but unit testing was very thorough, so much so that you could search for some keywords like “509” and find unit tests that perform the part of the structure that you need.

I really found that I had to read some of the RFC standards in detail in order to understand how to use the framework. They really made no effort to make things as simple as "cert.Sign (key)". Instead, it is very granular, and you need to create half a dozen objects and know exactly how to assemble them in order to do something. This, however, gives you complete flexibility and strength if you know how to use this power.

I personally used it to download X.509 certificates, perform various tasks of key generation, digital signing / verification, self-signing, etc., but I forgot about all this for a long time, so there’s not much help, except for sure, it can be done.

Answer 2

I would also recommend the Bouncy Castle library for production purposes. However, if you want something less comprehensive with a softer learning curve, you can use the native Windows certificate creation tool, makecert.exe . You can run it from C # using Process.Start by specifying the correct command line arguments.