mirror of
https://github.com/jellyfin/jellyfin.git
synced 2026-04-02 08:21:56 +01:00
update main projects
This commit is contained in:
75
Emby.Server.Core/Cryptography/PfxGenerator.cs
Normal file
75
Emby.Server.Core/Cryptography/PfxGenerator.cs
Normal file
@@ -0,0 +1,75 @@
|
||||
using System;
|
||||
using System.Collections;
|
||||
using System.Security.Cryptography;
|
||||
|
||||
namespace Emby.Server.Core.Cryptography
|
||||
{
|
||||
public class PFXGenerator
|
||||
{
|
||||
// http://www.freekpaans.nl/2015/04/creating-self-signed-x-509-certificates-using-mono-security/
|
||||
public static byte[] GeneratePfx(string certificateName, string password)
|
||||
{
|
||||
byte[] sn = GenerateSerialNumber();
|
||||
string subject = string.Format("CN={0}", certificateName);
|
||||
|
||||
DateTime notBefore = DateTime.Now;
|
||||
DateTime notAfter = DateTime.Now.AddYears(20);
|
||||
|
||||
RSA subjectKey = new RSACryptoServiceProvider(2048);
|
||||
|
||||
|
||||
string hashName = "SHA256";
|
||||
|
||||
X509CertificateBuilder cb = new X509CertificateBuilder(3);
|
||||
cb.SerialNumber = sn;
|
||||
cb.IssuerName = subject;
|
||||
cb.NotBefore = notBefore;
|
||||
cb.NotAfter = notAfter;
|
||||
cb.SubjectName = subject;
|
||||
cb.SubjectPublicKey = subjectKey;
|
||||
cb.Hash = hashName;
|
||||
|
||||
byte[] rawcert = cb.Sign(subjectKey);
|
||||
|
||||
|
||||
PKCS12 p12 = new PKCS12();
|
||||
p12.Password = password;
|
||||
|
||||
Hashtable attributes = GetAttributes();
|
||||
|
||||
p12.AddCertificate(new X509Certificate(rawcert), attributes);
|
||||
p12.AddPkcs8ShroudedKeyBag(subjectKey, attributes);
|
||||
|
||||
return p12.GetBytes();
|
||||
}
|
||||
|
||||
private static Hashtable GetAttributes()
|
||||
{
|
||||
ArrayList list = new ArrayList();
|
||||
// we use a fixed array to avoid endianess issues
|
||||
// (in case some tools requires the ID to be 1).
|
||||
list.Add(new byte[4] { 1, 0, 0, 0 });
|
||||
Hashtable attributes = new Hashtable(1);
|
||||
attributes.Add(PKCS9.localKeyId, list);
|
||||
return attributes;
|
||||
}
|
||||
|
||||
private static byte[] GenerateSerialNumber()
|
||||
{
|
||||
byte[] sn = Guid.NewGuid().ToByteArray();
|
||||
|
||||
//must be positive
|
||||
if ((sn[0] & 0x80) == 0x80)
|
||||
sn[0] -= 0x80;
|
||||
return sn;
|
||||
}
|
||||
|
||||
public static byte[] GetCertificateForBytes(byte[] pfx, string password)
|
||||
{
|
||||
var pkcs = new PKCS12(pfx, password);
|
||||
var cert = pkcs.GetCertificate(GetAttributes());
|
||||
|
||||
return cert.RawData;
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user