我必须编写一个工具来验证 X509 证书是否有效（输入 = 证书路径/主题和密码）。我怎样才能做到这一点？我对证书不是很了解...
问问题
47394 次
2 回答
17
于 2010-08-31T22:56:33.760 回答
1
In general, RFC 3280 includes almost complete instructions regarding how to perform validation, however those instructions are very non-trivial. Additionally you would need to read RFC 2560 (OCSP) and implement OCSP client.
For most tasks you will find our TElX509CertificateValidator component perfectly suitable. It checks certificate paths, CRL and OCSP revocation (and checks validity of CRLs and OCSP responses as well). It is flexible and powerful enough and lets you perform additional, deeper checks on each step. Also this component can work with both Windows certificate storages and any other certificates, certificate chains and storages that you might have in files or in memory.
于 2010-08-31T22:54:58.020 回答