IsValidClientCertificate()

static bool System.Net.Security.CertificateHelper.IsValidClientCertificate ( X509Certificate2 cert )

inlinestaticprivate

Definition at line 50 of file CertificateHelper.cs.

    {
        foreach (X509Extension extension in cert.Extensions)
        {
            if (extension is X509EnhancedKeyUsageExtension x509EnhancedKeyUsageExtension && !IsValidForClientAuthenticationEKU(x509EnhancedKeyUsageExtension))
            {
                if (System.Net.NetEventSource.Log.IsEnabled())
                {
                    System.Net.NetEventSource.Info(cert, $"For Certificate {cert.GetHashCode()} - current X509EnhancedKeyUsageExtension {x509EnhancedKeyUsageExtension.GetHashCode()} is not valid for Client Authentication.", "IsValidClientCertificate");
                }
                return false;
            }
            if (extension is X509KeyUsageExtension x509KeyUsageExtension && !IsValidForDigitalSignatureUsage(x509KeyUsageExtension))
            {
                if (System.Net.NetEventSource.Log.IsEnabled())
                {
                    System.Net.NetEventSource.Info(cert, $"For Certificate {cert.GetHashCode()} - current X509KeyUsageExtension {x509KeyUsageExtension.GetHashCode()} is not valid for Digital Signature.", "IsValidClientCertificate");
                }
                return false;
            }
        }
        return true;
    }

References System.Net.NetEventSource.Info(), System.Net.Security.CertificateHelper.IsValidForClientAuthenticationEKU(), System.Net.Security.CertificateHelper.IsValidForDigitalSignatureUsage(), and System.Net.NetEventSource.Log.

Referenced by System.Net.Security.CertificateHelper.GetEligibleClientCertificate().