Commit20a51c9

authored

Document ordering guarantee for X509Chain.ChainElements collection (#11475)

1 parent1bab578 commit20a51c9Copy full SHA for 20a51c9

File tree

+30

-1

lines changed

snippets/csharp/System.Security.Cryptography.X509Certificates/X509Chain/Overview
- chainelements-ordering.cs
xml/System.Security.Cryptography.X509Certificates
- X509Chain.xml

+30

-1

lines changed

Lines changed: 25 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,25 @@`
	`1`	`+usingSystem;`
	`2`	`+usingSystem.Security.Cryptography.X509Certificates;`
	`3`	`+`
	`4`	`+publicclassChainElementsOrdering`
	`5`	`+{`
	`6`	`+publicstaticvoidDemonstrateChainElementsOrdering(X509Certificate2certificate)`
	`7`	`+{`
	`8`	`+//<SNIPPET6>`
	`9`	`+usingvarchain=newX509Chain();`
	`10`	`+chain.Build(certificate);`
	`11`	`+`
	`12`	`+// chain.ChainElements[0] is the leaf (end-entity) certificate`
	`13`	`+// chain.ChainElements[^1] is the root (trust anchor) certificate`
	`14`	`+`
	`15`	`+Console.WriteLine("Certificate chain from leaf to root:");`
	`16`	`+for(inti=0;i<chain.ChainElements.Count;i++)`
	`17`	`+{`
	`18`	`+varcert=chain.ChainElements[i].Certificate;`
	`19`	`+varrole=i==0?"Leaf":`
	`20`	`+i==chain.ChainElements.Count-1?"Root":"Intermediate";`
	`21`	`+Console.WriteLine($"[{i}]{role}:{cert.Subject}");`
	`22`	`+}`
	`23`	`+//</SNIPPET6>`
	`24`	`+}`
	`25`	`+}`

Lines changed: 5 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -464,9 +464,13 @@`
`464`	`464`
`465`	`465`	`A chain element consists of an <xref:System.Security.Cryptography.X509Certificates.X509Certificate2> object, an <xref:System.Security.Cryptography.X509Certificates.X509ChainStatus> structure, and an extra information string.`
`466`	`466`
`467`		`-`
	`467`	+ The `ChainElements` collection is ordered from the end-entity (leaf) certificate at index 0, through any intermediate certificates, to the trust anchor (root certificate) at the final index. This ordering is consistent across all platforms.
`468`	`468`
`469`	`469`	`## Examples`
	`470`	`+The following code example demonstrates the ordering of chain elements:`
	`471`	`+`
	`472`	`+:::code language="csharp" source="~/snippets/csharp/System.Security.Cryptography.X509Certificates/X509Chain/Overview/chainelements-ordering.cs" id="Snippet6":::`
	`473`	`+`
`470`	`474`	`The following code example opens the current user's personal certificate store, allows you to select a certificate, then writes certificate and certificate chain information to the console. The output depends on the certificate you select.`
`471`	`475`
`472`	`476`	`:::code language="csharp" source="~/snippets/csharp/System.Security.Cryptography.X509Certificates/X509Chain/Overview/x509chaintest.cs" id="Snippet4":::`

Comments

(0)