You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

58 lines
2.1 KiB

using System;
using System.Collections.Generic;
using System.Net;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;
using System.Text;
namespace Apewer.Network
{
/// <summary></summary>
public static class SslUtility
{
/// <summary>证书验证回调。</summary>
private static RemoteCertificateValidationCallback ValidationCallback
{
get { return ServicePointManager.ServerCertificateValidationCallback; }
set { ServicePointManager.ServerCertificateValidationCallback = value; }
}
/// <summary>证书验证。忽略所有错误。</summary>
public static bool ApproveAll(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
{
return true;
}
/// <summary>证书验证。</summary>
public static X509Certificate ApproveFirst(object sender, string targetHost, X509CertificateCollection localCertificates, X509Certificate remoteCertificate, string[] acceptableIssuers)
{
if (localCertificates != null)
{
for (var i = 0; i < localCertificates.Count; i++)
{
var certificate = localCertificates[i];
if (certificate != null) return certificate;
}
}
return null;
}
/// <summary>证书验证。要求必须有正确的证书。</summary>
public static bool ApproveRight(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
{
return (errors == SslPolicyErrors.None) ? true : false;
}
/// <summary>设置可通用的证书验证回调。</summary>
/// <param name="all">批准所有验证,指定为 FALSE 时将要求系统验证。</param>
public static void ApproveValidation(bool all = true)
{
if (all) ValidationCallback = new RemoteCertificateValidationCallback(ApproveAll);
else ValidationCallback = new RemoteCertificateValidationCallback(ApproveRight);
}
}
}