X509CertificateValidator 类

定义

public ref class X509CertificateValidator abstract

public ref class X509CertificateValidator abstract : System::IdentityModel::Configuration::ICustomIdentityConfiguration

public abstract class X509CertificateValidator

public abstract class X509CertificateValidator : System.IdentityModel.Configuration.ICustomIdentityConfiguration

type X509CertificateValidator = class

type X509CertificateValidator = class
    interface ICustomIdentityConfiguration

Public MustInherit Class X509CertificateValidator

Public MustInherit Class X509CertificateValidator
Implements ICustomIdentityConfiguration

继承

Object

X509CertificateValidator

派生

System.IdentityModel.Tokens.X509NTAuthChainTrustValidator

实现

ICustomIdentityConfiguration

示例

public class MyX509CertificateValidator : X509CertificateValidator
{
    string allowedIssuerName;
    public MyX509CertificateValidator(string allowedIssuerName)
    {
        if (allowedIssuerName == null)
        {
            throw new ArgumentNullException("allowedIssuerName");
        }

        this.allowedIssuerName = allowedIssuerName;
    }
    public override void Validate(X509Certificate2 certificate)
    {
        // Check that there is a certificate.
        if (certificate == null)
        {
            throw new ArgumentNullException("certificate");
        }

        // Check that the certificate issuer matches the configured issuer
        if (allowedIssuerName != certificate.IssuerName.Name)
        {
            throw new SecurityTokenValidationException
              ("Certificate was not issued by a trusted issuer");
        }
    }
}

Public Class MyX509CertificateValidator
    Inherits X509CertificateValidator
    Private allowedIssuerName As String

    Public Sub New(ByVal allowedIssuerName As String)
        If allowedIssuerName Is Nothing Then
            Throw New ArgumentNullException("allowedIssuerName")
        End If

        Me.allowedIssuerName = allowedIssuerName

    End Sub

    Public Overrides Sub Validate(ByVal certificate As X509Certificate2)
        ' Check that there is a certificate.
        If certificate Is Nothing Then
            Throw New ArgumentNullException("certificate")
        End If

        ' Check that the certificate issuer matches the configured issuer
        If allowedIssuerName <> certificate.IssuerName.Name Then
            Throw New SecurityTokenValidationException("Certificate was not issued by a trusted issuer")
        End If

    End Sub
End Class

注解

使用 X509CertificateValidator 类指定将 X.509 证书视为有效的方式。 可通过从 X509CertificateValidator 派生类并重写 Validate 方法来完成此操作。

构造函数

属性

方法

适用于