如何从包含.Net Core中的私钥/公钥的PEM文件中导入PKCS1密钥

本文介绍了如何从包含.Net Core中的私钥/公钥的PEM文件中导入PKCS1密钥的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

我正在尝试使用.Net Core从PEM文件中加载私钥和公钥.我的代码如下:

I am trying to load the Private and Public keys from a PEM file using .Net Core.My code looks like this:

var localPath = Path.GetDirectoryName(System.Reflection.Assembly.GetExecutingAssembly().Location);
var path = Path.Combine(localPath, this._configManager.JwtPem);
var rsaCryptoServiceProvider = new RSACryptoServiceProvider();

var linesList = File.ReadAllLines(path).ToList();
var line = string.Concat(linesList.GetRange(1, linesList.Count - 2));

rsaCryptoServiceProvider.ImportCspBlob(Convert.FromBase64String(line));

我得到的例外是:

Internal.Cryptography.CryptoThrowHelper+WindowsCryptographicException : Bad Version of provider
   at Internal.NativeCrypto.CapiHelper.ImportKeyBlob(SafeProvHandle saveProvHandle, CspProviderFlags flags, Boolean addNoSaltFlag, Byte[] keyBlob, SafeKeyHandle& safeKeyHandle)
   at System.Security.Cryptography.RSACryptoServiceProvider.ImportCspBlob(Byte[] keyBlob)
   at StepNexusCA.ServiceLayer.Authorization.TokenService.GenerateToken(List`1 claims)

包含我的开发专用/公共密钥的PKCS1格式的PEM文件在这里:

The PEM file containing the PKCS1 format of my development Private/Public keys is here:

为什么不能使用ImportCspBlob(...)导入密钥?我没有在网上找到太多有关该异常的信息，但是我的代码在哪里呢?我知道BouncyCastle，但是我正在尝试使用.Net Core进行本地操作.

Why can't I import the key using ImportCspBlob(...)? I have not found much info online regarding the exception but where is my code wrong? I am aware of BouncyCastle but I am trying to do this natively using .Net Core.

推荐答案

ImportCspBlob的格式是ExportCspBlob中的格式，这是 CryptImportKey .由于.NET只是将其透明地传递给Windows CAPI，因此ImportCspBlob方法会在非Windows平台上引发.

The format for ImportCspBlob is the format from ExportCspBlob, which is the PRIVATEKEY blob format required by CryptImportKey. Since .NET just transparently passes that on to Windows CAPI, the ImportCspBlob method throws on non-Windows platforms.

我过去给出的另一个用于导入私钥(包括PKCS#1 RSAPrivateKey)的答案是一个元答案，其中包括一些使工作正常的链接:.

Another answer that I've given in the past for importing private keys (including PKCS#1 RSAPrivateKey) is a bit of a meta-answer, which includes links to just get things working: Digital signature in c# without using BouncyCastle.

.NET Core 3.0的每日内部版本具有内置功能.大多. PEM格式在实践中很容易，但是在规范中有些烦人，因此这些方法将其留给调用者来取消PEM"数据...对于不带属性的单值有效负载进行默认格式化(例如您可以在示例中进行操作)，可以通过以下方式每天进行构建:

.NET Core 3.0's daily builds have the functionality built-in. Mostly. The PEM format is easy in practice, but somewhat annoying in the spec, so the methods leave it up to the caller to "un-PEM" the data... for the default formatting on a single-value payload with no attributes (like you have in your example) you can do it with daily builds via

private static RSA ReadKeyFromFile(string filename)
{
    string pemContents = System.IO.File.ReadAllText(filename);
    const string RsaPrivateKeyHeader = "-----BEGIN RSA PRIVATE KEY-----";
    const string RsaPrivateKeyFooter = "-----END RSA PRIVATE KEY-----";

    if (pemContents.StartsWith(RsaPrivateKeyHeader))
    {
        int endIdx = pemContents.IndexOf(
            RsaPrivateKeyFooter,
            RsaPrivateKeyHeader.Length,
            StringComparison.Ordinal);

        string base64 = pemContents.Substring(
            RsaPrivateKeyHeader.Length,
            endIdx - RsaPrivateKeyHeader.Length);

        byte[] der = Convert.FromBase64String(base64);
        RSA rsa = RSA.Create();
        rsa.ImportRSAPrivateKey(der, out _);
        return rsa;
    }

    // "BEGIN PRIVATE KEY" (ImportPkcs8PrivateKey),
    // "BEGIN ENCRYPTED PRIVATE KEY" (ImportEncryptedPkcs8PrivateKey),
    // "BEGIN PUBLIC KEY" (ImportSubjectPublicKeyInfo),
    // "BEGIN RSA PUBLIC KEY" (ImportRSAPublicKey)
    // could any/all be handled here.
    throw new InvalidOperationException();
}

.NET Core SDK的每日构建可以从 https:获得: //github.com/dotnet/core-sdk/#installers-and-binaries

Daily builds of the .NET Core SDK can be obtained from https://github.com/dotnet/core-sdk/#installers-and-binaries

这篇关于如何从包含.Net Core中的私钥/公钥的PEM文件中导入PKCS1密钥的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！