无法从字节数组实例化X509Certificate2

Question

我正在尝试使用自签名证书配置IdentityServer3，我使用openssl创建了一个x509证书，如下所示：openssl req-X509-SHA256-Days 365-key key.pem-in CSR.CSR-out certificate.pem然后使用:pkcs12-export-in My-Cert.pem inkey My-Key.pem-out Xyz-Cert.pfx合并密钥和证书，然后将Xyz-Cert.pfx的内容转换为存储在Web.config中的一个密钥中的Base64String，然后尝试使用该证书实例化X509Certificate2，如下所示：

var certificate = Convert.FromBase64String(ConfigurationManager.AppSettings["SigningCertificate"]);

        var options = new IdentityServerOptions
        {
            SigningCertificate = new X509Certificate2(certificate, ConfigurationManager.AppSettings["SigningCertificatePassword"]),
            RequireSsl = false, // DO NOT DO THIS IN 
            Factory = factory
        };

我想不出我错在哪了。谢谢你的帮助

Answer 1

var options = new IdentityServerOptions
{
    string CertText = ConfigurationManager.AppSettings["SigningCertificatePassword"];
    byte[] certBytes = Convert.FromBase64String(certText);
    SigningCertificate = new X509Certificate2(certificate, certBytes),
    RequireSsl = false, // DO NOT DO THIS IN 
    Factory = factory
};