Writing an algorithm for working with CryptoPro CSP

[Marinovu]

Hi! Can anyone help with writing code for CryptoPro CSP? It is necessary that the algorithm automatically immerses the open part of the safety certificate into the closed one. Usually, I do this through CryptoPro CSP to install a personal certificate.

[AlexMAS]

Hi!

I'm not sure that I understand the question correctly. Could you describe steps you usually do to solve the issue by using CryptoPro CSP directly.

[Marinovu]

I have a CryptoPro CSP. There, in the Service section, we click "install a personal certificate", drop off the folder with the public and private key C:\Users ...\AppData\Local\Crypto Pro. Select the public key, then automatically search for the container and enter the password. As a result, it turns out that the system immerses the public key in the private one and the total volume of the folder doubles.

[AlexMAS]

I can suggest to use the X509Store class.

1. Instantiate the X509Certificate2 class with the public key. For example:

var publicCert = new X509Certificate2("path/to/public.cer");

2. Open the source storage. For example:

// Specify the source storage by using proper flags
var sourceStore = new X509Store(StoreName.My, StoreLocation.CurrentUser);
sourceStore.Open(OpenFlags.ReadOnly);

3. Try to find the private key by the public one. For example:

X509Certificate2 privateCert = null;

foreach (var cert in sourceStore.Certificates)
{
    // Or use an another matching logic
    if (cert.PublicKey.EncodedKeyValue.RawData.SequenceEqual(publicCert.PublicKey.EncodedKeyValue.RawData))
    {
        privateCert = cert;
        break;
    }
}

4. Add the found certificate to the needed storage. For example:

// Specify the destination storage by using proper flags
var destinationStore = new X509Store(StoreName.My, StoreLocation.CurrentUser);
destinationStore.Open(OpenFlags.ReadWrite);
destinationStore.Add(privateCert);

P.s. I'm not sure that the above mentioned code will work properly, it's just like a starting point.