获取本地计算机上安装的所有证书

Question

我有以下代码来获取证书：

X509Store store = new X509Store("??","??"); 
      List<X509Certificate2> lst = new List<X509Certificate2>(); 
      store.Open(OpenFlags.ReadOnly); 

      foreach (X509Certificate2 mCert in store.Certificates) 
      { 

       lst.Add(mCert); 
       //TODO's 
      } 

现在我想安装在本地计算机的所有证书在 列表<>与证书名称，他们的位置，发行公钥 或私钥（在是或否）和 包含那些证书的文件夹名称（请参考下面的快照）：

填充列表<>与证证书的详细信息后，我想在一个网格格式来显示这些数据。如何修改此代码以获取以上详细信息？

Answer 1

你的机器上的证书存储在不同的商店，所以你需要把它们全部打开。请参阅MSDN 文章。

代码示例：

public class CertDetails 
{ 
    public string Name { get; set; } 
    public string HasPrivateKey { get; set; } 
    public string Location { get; set; } 
    public string Issuer { get; set; } 
} 

// stores and they friendly names 
var stores = new Dictionary<StoreName, string>() 
{ 
    {StoreName.My, "Personal"}, 
    {StoreName.Root, "Trusted roots"}, 
    {StoreName.TrustedPublisher, "Trusted publishers"} 
    // and so on 
    }.Select(s => new {store = new X509Store(s.Key, StoreLocation.LocalMachine), location = s.Value}).ToArray(); 

foreach (var store in stores) 
    store.store.Open(OpenFlags.ReadOnly); // open each store 

var list = stores.SelectMany(s => s.store.Certificates.Cast<X509Certificate2>() 
    .Select(mCert => new CertDetails 
    { 
     HasPrivateKey = mCert.HasPrivateKey ? "Yes" : "No", 
     Name = mCert.FriendlyName, 
     Location = s.location, 
     Issuer = mCert.Issuer 
    })).ToList(); 

Answer 2

为你的灵感简单例子，也许有点帮助：

using System.Security.Cryptography.X509Certificates; 
using System.Security.Cryptography; 
... 
X509Store store = null; 
store = new X509Store(StoreName.My, StoreLocation.LocalMachine); 
store.Open(OpenFlags.OpenExistingOnly | OpenFlags.ReadOnly) 
... 

//RSA CryptoServiceProvider 
RSACryptoServiceProvider rsaCSP = null; 

string keyPath = Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData) + @"\Microsoft\Crypto\RSA\MachineKeys\"; 

string friendlyName = ""; 

foreach (X509Certificate2 mCert in store.Certificates) { 

    rsaCSP = mCert.PrivateKey as RSACryptoServiceProvider; 

    if (rsaCSP != null) { 
    friendlyName = mCert.FriendlyName;      
    keyPath += rsaCSP.CspKeyContainerInfo.UniqueKeyContainerName; 
    }       
}