当我有 public 密钥、私钥和 ca 文件可用时，如何从 HTTPS 自签名网页检索 (GET) 数据？

Question

我正在尝试从 https 网站获取一些数据，我确实有凭据（public 和私钥）以及相同的 ca。我该怎么做？

我尝试这样做但没有成功

private string RetrieveSoftwareDataMsgFromURL() {
            var cacert = File.ReadAllText(@"Certs\ca.crt");
            var clientcert = File.ReadAllText(@"Certs\client.crt");
            var clientkey = File.ReadAllText(@"Certs\client.key");

            ServicePointManager.Expect100Continue = true;
            ServicePointManager.DefaultConnectionLimit = 9999;
            ServicePointManager.SecurityProtocol = SecurityProtocolType.Ssl3 |SecurityProtocolType.Tls |SecurityProtocolType.Tls11 |SecurityProtocolType.Tls12;
            ServicePointManager.ServerCertificateValidationCallback += delegate { return true; };

            ICertificateProvider provider = new CertificateFromFileProvider(clientcert, clientkey);
            X509Certificate2 clientCertificate = provider.Certificate;

            string url = "https://SomeWebsite.com/changelog";

            var httpWebRequest = (HttpWebRequest)WebRequest.Create(url);
            httpWebRequest.Method = "GET";
            httpWebRequest.AuthenticationLevel = AuthenticationLevel.MutualAuthRequired;
            httpWebRequest.ClientCertificates.Add(clientCertificate);
            httpWebRequest.Credentials = CredentialCache.DefaultCredentials;

            string result = "Nothing's In There";
            var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse();
            using (var streamReader = new StreamReader(httpResponse.GetResponseStream())) {
                result = streamReader.ReadLine();
            }

            return result;
        }

我最终遇到了这个异常 "System.Net.WebException: 'The request was aborted: Could not create SSL/TLS secure channel.' "。

Answer 1

无法使其与 .crt 和 .key 文件一起使用，但尝试通过创建带有证书的 .pfx 文件然后尝试以下操作；

        WebRequestHandler handler = new WebRequestHandler();
        handler.ClientCertificates.Add(cert);

        HttpClient client = new HttpClient(handler) { Timeout = Timeout.InfiniteTimeSpan };
        try {
            var httpResponse = await client.GetAsync(URL) as HttpResponseMessage;
            using (var remoteStream = await httpResponse.Content.ReadAsStreamAsync().ConfigureAwait(false))
            using (var content = File.Create(filepath)) {
                var buffer = new byte[4096];
                int read;
                while ((read = await remoteStream.ReadAsync(buffer, 0, buffer.Length).ConfigureAwait(false)) != 0) {
                    await content.WriteAsync(buffer, 0, read).ConfigureAwait(false);
                    FlushFileBuffers(content.SafeFileHandle);
                }
            }
        } catch (Exception e) {
            //
        }

当我有 public 密钥、私钥和 ca 文件可用时，如何从 HTTPS 自签名网页检索 (GET) 数据？

How to retrieve (GET) data from a HTTPS self-signed webPage when I have public key, private key and ca file available?

c#

openssl

httpwebrequest

ssl-certificate

winforms