X509CertificateValidator Class

Definition

public ref class X509CertificateValidator abstract

public ref class X509CertificateValidator abstract : System::IdentityModel::Configuration::ICustomIdentityConfiguration

public abstract class X509CertificateValidator

public abstract class X509CertificateValidator : System.IdentityModel.Configuration.ICustomIdentityConfiguration

type X509CertificateValidator = class

type X509CertificateValidator = class
 interface ICustomIdentityConfiguration

Public MustInherit Class X509CertificateValidator

Public MustInherit Class X509CertificateValidator
Implements ICustomIdentityConfiguration

Inheritance

Object

X509CertificateValidator

Derived

System.IdentityModel.Tokens.X509NTAuthChainTrustValidator

Implements

ICustomIdentityConfiguration

Examples

public class MyX509CertificateValidator : X509CertificateValidator
{
 string allowedIssuerName;
 public MyX509CertificateValidator(string allowedIssuerName)
 {
 if (allowedIssuerName == null)
 {
 throw new ArgumentNullException("allowedIssuerName");
 }

 this.allowedIssuerName = allowedIssuerName;
 }
 public override void Validate(X509Certificate2 certificate)
 {
 // Check that there is a certificate.
 if (certificate == null)
 {
 throw new ArgumentNullException("certificate");
 }

 // Check that the certificate issuer matches the configured issuer
 if (allowedIssuerName != certificate.IssuerName.Name)
 {
 throw new SecurityTokenValidationException
 ("Certificate was not issued by a trusted issuer");
 }
 }
}

Public Class MyX509CertificateValidator
 Inherits X509CertificateValidator
 Private allowedIssuerName As String

 Public Sub New(ByVal allowedIssuerName As String)
 If allowedIssuerName Is Nothing Then
 Throw New ArgumentNullException("allowedIssuerName")
 End If

 Me.allowedIssuerName = allowedIssuerName

 End Sub

 Public Overrides Sub Validate(ByVal certificate As X509Certificate2)
 ' Check that there is a certificate.
 If certificate Is Nothing Then
 Throw New ArgumentNullException("certificate")
 End If

 ' Check that the certificate issuer matches the configured issuer
 If allowedIssuerName <> certificate.IssuerName.Name Then
 Throw New SecurityTokenValidationException("Certificate was not issued by a trusted issuer")
 End If

 End Sub
End Class

Remarks

Use the X509CertificateValidator class to specify how an X.509 certificate is deemed valid. This can be done by deriving a class from X509CertificateValidator and overriding the Validate method.