Tago.Extensions.Security.Certificates 3.1.1-preview-20250701-01

Tago.Extensions.Security.Certificates

Tago.Extensions.Security.Certificates is a .NET library providing cross-platform, dependency-free cryptographic certificate and key utilities. It is designed for .NET Standard 2.0 compatibility, enabling secure key import/export, certificate manipulation, and cryptographic operations without third-party libraries.

Features

• .NET Standard 2.0 Support: Works on .NET Core, .NET Framework, and modern .NET runtimes.
• Manual ASN.1 Encoding: Export/import of RSA and ECDsa keys in PKCS#1, PKCS#8, and EC formats using pure C#.
• Certificate Utilities:
  • Load certificates from files, PEM, PFX, and stores
  • Export public/private keys in standard formats
  • Minimal, dependency-free implementation
• SecurityKey Integration: Helpers for JWT and cryptographic key scenarios
• Test Coverage: xUnit-based tests for all major features

Usage

Importing and Exporting Keys

using Tago.Extensions.Security.Certificates.Extensions;

// Export RSA private key (PKCS#1)
byte[] pkcs1 = rsa.ExportRSAPrivateKey();

// Export RSA private key (PKCS#8)
byte[] pkcs8 = rsa.ExportPkcs8PrivateKey();

// Export ECDsa private key (RFC 5915)
byte[] ec = ecdsa.ExportECPrivateKey();

// Export ECDsa private key (PKCS#8)
byte[] ecPkcs8 = ecdsa.ExportPkcs8PrivateKey();

Certificate Loading

using Tago.Extensions.Security.Certificates;

// Load from file or store
var cert = CertificateHelper.GetCertificateFromStore("subjectName");
var cert2 = CertificateHelper.GetCertificate("./certs/mycert.pfx", "password");

SecurityKey Utilities

using Tago.Extensions.Security.Utils;

var key = SecurityKeyUtils.GetSecurityKey("./certs/mycert.pfx", "password", "kid");

Limitations

• CopyWithPrivateKey: Not supported in .NET Standard 2.0 due to platform API limitations. Throws PlatformNotSupportedException.
• No Third-Party Dependencies: All ASN.1 and key handling is implemented in pure C#.

Building & Testing

1. Clone the repository.
2. Build the solution:

   dotnet build src/Tago.Extensions.Security.Certificates.sln
   

3. Run tests:

   dotnet test src/xUnitTest/xUnitTest.csproj
   

Project Structure

• src/Tago.Extensions.Security.Certificates/ — Main library
• src/xUnitTest/ — Test project
• certs/ — Example/test certificates

License

MIT License

Contributing

Contributions, issues, and feature requests are welcome! Please open an issue or submit a pull request.

Tago.Extensions.Security.Certificates — Secure, portable, and dependency-free cryptography for .NET.

Introduction

Tago.Extensions.Security.Certificates is a robust .NET library for cryptographic certificate and key management, designed for maximum compatibility and zero third-party dependencies. It enables secure key import/export, certificate manipulation, and cryptographic operations in .NET Standard 2.0 and later, using only built-in .NET APIs and manual ASN.1 encoding.

Getting Started

Installation

Clone or add the library to your solution. Reference the main project:

src/Tago.Extensions.Security.Certificates/Tago.Extensions.Security.Certificates.csproj

Dependencies

• .NET Standard 2.0 or higher
• No third-party cryptography libraries required

API Overview

Key Export/Import

• Export RSA and ECDsa private keys in PKCS#1, PKCS#8, and EC formats
• Export public keys in PKCS#1 format
• Manual ASN.1 encoding for all supported formats

Certificate Utilities

• Load certificates from PEM, PFX, DER, or Windows certificate store
• Export certificates and keys for use in JWT, SAML, and other security scenarios

SecurityKey Integration

• Helpers for creating Microsoft.IdentityModel.Tokens SecurityKey objects from certificates and keys

Build and Test

1. Build the solution:

   dotnet build src/Tago.Extensions.Security.Certificates.sln
   

2. Run the tests:

   dotnet test src/xUnitTest/xUnitTest.csproj
   

Example Usage

Exporting Keys

using Tago.Extensions.Security.Certificates.Extensions;

// Export RSA private key (PKCS#1)
byte[] pkcs1 = rsa.ExportRSAPrivateKey();

// Export RSA private key (PKCS#8)
byte[] pkcs8 = rsa.ExportPkcs8PrivateKey();

// Export ECDsa private key (RFC 5915)
byte[] ec = ecdsa.ExportECPrivateKey();

// Export ECDsa private key (PKCS#8)
byte[] ecPkcs8 = ecdsa.ExportPkcs8PrivateKey();

Loading Certificates

using Tago.Extensions.Security.Certificates;

// Load from file or store
var cert = CertificateHelper.GetCertificateFromStore("subjectName");
var cert2 = CertificateHelper.GetCertificate("./certs/mycert.pfx", "password");

SecurityKey Utilities

using Tago.Extensions.Security.Utils;

var key = SecurityKeyUtils.GetSecurityKey("./certs/mycert.pfx", "password", "kid");

Project Structure

• src/Tago.Extensions.Security.Certificates/ — Main library
• src/xUnitTest/ — Test project
• certs/ — Example/test certificates

Limitations

• CopyWithPrivateKey: Not supported in .NET Standard 2.0 due to platform API limitations. Throws PlatformNotSupportedException.
• No Third-Party Dependencies: All ASN.1 and key handling is implemented in pure C#.

Contributing

Contributions, issues, and feature requests are welcome! Please open an issue or submit a pull request. All code should be dependency-free and compatible with .NET Standard 2.0 or higher.

License

MIT License

Tago.Extensions.Security.Certificates — Secure, portable, and dependency-free cryptography for .NET.