Self signed key certificate

Question

I'm trying to figure out how to create an X.509 certificate containing a self-signed DSA public key (SSK) in C#.

Having given up on the native C# crypto library which doesn't seem to allow this, I've been looking at the Bouncy Castle library.

However despite a description to the contrary, the download doesn't contain any docs.

I have been wading through the library classes but there are a lot!

I just need to generate a random key pair, sign them and save them in a certificate file.

Has anyone done this and are you able to point me to a good example, or even maybe supply an example?

Thanks for your help!

score 1 · Accepted Answer · answered Oct 30 '13 at 19:42

1

We successfully did this a while back (but ended up needing to use "non self signed certificates") We based our implementation on the following example from Doug E. Cook. http://blogs.msdn.com/b/dcook/archive/2008/11/25/creating-a-self-signed-certificate-in-c.aspx?PageIndex=2

answered Oct 30 '13 at 19:42

Wonderbird

That's a really good start, thanks! Any idea how to save it to a valid X509 cert file? – CompanyDroneFromSector7G Oct 30 '13 at 20:35
byte[] baCert = CreateSelfSignCertificatePfx( "CN=MYCERT", DateTime.Now, DateTime.Now + TimeSpan.FromDays(3650), "MyCertPW"); File.WriteAllBytes("c:\\myCertFile.pfx", baCert); (If working off the example in the previously referenced link) – Wonderbird Oct 30 '13 at 21:02
That's exactly what I did! And your answer is correct. I just need to convert the pfx to a crt format, but that's another question. Thanks :) – CompanyDroneFromSector7G Oct 30 '13 at 21:11

score 1 · Answer 2 · answered Oct 30 '13 at 20:17

1

I've been generating self signed RSA certificates with Bouncy castle, this should let you start your own experiments:

answered Oct 30 '13 at 20:17

Wiktor Zychla

That looks good, but the code sample uses a class called RsaKeyPairGenerator; do you know how to reference this? Or even better, a DSA version? Thanks – CompanyDroneFromSector7G Oct 30 '13 at 20:54
There is the DSAKeyPairGenerator, you couldn't have missed it. – Wiktor Zychla Oct 30 '13 at 21:12
It needed `using Org.BouncyCastle.Crypto.Generators;` which wasn't mentioned. – CompanyDroneFromSector7G Oct 30 '13 at 21:16

2 Answers2