How to serialize Rsa signature credentials in ASP.NET 5?

Question

I am trying to do oauth authorization in my ASP.NET 5 web application. I tried this approach:

ASP.NET 5 OAuthBearerAuthentication: The following authentication scheme was not accepted: Media

And it works well, but since you can see that rsa keys are always generated at startup. As I have seen and seen in other topics, RSACryptoServiceProvider.ToXmlString and RSACryptoServiceProvider.FromXmlString not present in DNX Core, and I could not find other ways to (de) serialize my credentials once created. Can you show me the method?

thanks

Answer 1

I just upgraded my project to ASP.NET Core RC2 and ran into this problem when I read my RSA key (saved as XML) from a configuration file to generate a JWT token.

I ended up creating my own method extensions to replace the ones I used with ASP.NET 5 RC1. Here is the code:

 using System; using System.Security.Cryptography; using System.Xml; namespace RSACryptoServiceProviderExtensions { public static class RSACryptoServiceProviderExtensions { public static void FromXmlString(this RSACryptoServiceProvider rsa, string xmlString) { RSAParameters parameters = new RSAParameters(); XmlDocument xmlDoc = new XmlDocument(); xmlDoc.LoadXml(xmlString); if (xmlDoc.DocumentElement.Name.Equals("RSAKeyValue")) { foreach (XmlNode node in xmlDoc.DocumentElement.ChildNodes) { switch (node.Name) { case "Modulus": parameters.Modulus = Convert.FromBase64String(node.InnerText); break; case "Exponent": parameters.Exponent = Convert.FromBase64String(node.InnerText); break; case "P": parameters.P = Convert.FromBase64String(node.InnerText); break; case "Q": parameters.Q = Convert.FromBase64String(node.InnerText); break; case "DP": parameters.DP = Convert.FromBase64String(node.InnerText); break; case "DQ": parameters.DQ = Convert.FromBase64String(node.InnerText); break; case "InverseQ": parameters.InverseQ = Convert.FromBase64String(node.InnerText); break; case "D": parameters.D = Convert.FromBase64String(node.InnerText); break; } } } else { throw new Exception("Invalid XML RSA key."); } rsa.ImportParameters(parameters); } public static string ToXmlString(this RSACryptoServiceProvider rsa) { RSAParameters parameters = rsa.ExportParameters(true); return string.Format("<RSAKeyValue><Modulus>{0}</Modulus><Exponent>{1}</Exponent><P>{2}</P><Q>{3}</Q><DP>{4}</DP><DQ>{5}</DQ><InverseQ>{6}</InverseQ><D>{7}</D></RSAKeyValue>", Convert.ToBase64String(parameters.Modulus), Convert.ToBase64String(parameters.Exponent), Convert.ToBase64String(parameters.P), Convert.ToBase64String(parameters.Q), Convert.ToBase64String(parameters.DP), Convert.ToBase64String(parameters.DQ), Convert.ToBase64String(parameters.InverseQ), Convert.ToBase64String(parameters.D)); } } } 

Answer 2

It looks like the RSACryptoServiceProvider in CoreFX has ImportParameters and ExportParameters methods that deserialize / serialize using RSAParameters struct.