为了读取我需要写入注册表项的属性,我最终使用了以下 CryptoAPI 方法:
[DllImport("crypt32.dll", SetLastError = true)]
private static extern IntPtr CertCreateCertificateContext(int dwCertEncodingType, byte[] pbCertEncoded, int cbCertEncoded);
[DllImport("crypt32.dll", SetLastError = true)]
private static extern bool CertFreeCertificateContext(IntPtr pCertContext);
[DllImport("crypt32.dll", SetLastError = true)]
private static extern bool CertGetCertificateContextProperty(IntPtr pCertContext, int dwPropId, IntPtr pvData, ref int pcbData);
private byte[] GetKeyIdentifier(X509Certificate certificate)
{
var data = certificate.GetRawCertData();
var context = CertCreateCertificateContext(1, data, data.Length);
try
{
return ReadProperty(context, 0x14);
}
finally
{
CertFreeCertificateContext(context);
}
}
private byte[] ReadProperty(IntPtr context, int property)
{
var length = 0;
// determine the ammount of memory to allocate for the data
if (CertGetCertificateContextProperty(context, property, IntPtr.Zero, ref length))
{
var pointer = Marshal.AllocCoTaskMem(length);
try
{
// query the property which is written to the allocated memory
if (CertGetCertificateContextProperty(context, property, pointer, ref length) == false)
{
throw new InvalidOperationException(string.Format("Failed to query property {0}.", property));
}
// extract the data from the unmanaged memory
var buffer = new byte[length];
Marshal.Copy(pointer, buffer, 0, length);
return buffer;
}
finally
{
Marshal.FreeCoTaskMem(pointer);
}
}
else
{
throw new InvalidOperationException(string.Format("Failed to query property {0}.", property));
}
}